last executing test programs: 10m10.700934341s ago: executing program 2 (id=493): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="7800000039000900000f0f0000b9000004000000040000000c000180"], 0x78}}, 0x0) 10m10.690316231s ago: executing program 2 (id=494): syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000004200)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f0000008bc0)="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", 0x2000, &(0x7f0000000e80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x90, 0x0, 0x0, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x1, 0x0, 0x4000000000000000, 0x0, 0x0, 0x0, 0x0, 0xc000, 0x0, 0x0, 0x0, 0x40000}}}, 0x0, 0x0, 0x0, 0x0}) statx(0xffffffffffffff9c, &(0x7f0000000380)='./file0/file0\x00', 0x4000, 0x0, 0x0) write$FUSE_INIT(r0, &(0x7f0000000240)={0x50, 0x0, r1}, 0x50) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file0\x00', 0x0, 0x0) syz_fuse_handle_req(r0, &(0x7f000000abc0)="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", 0x2000, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x90, 0x0, 0x0, {0x3, 0x0, 0x5, 0x5, 0x1, 0x4, {0xfffffffffffffffc, 0xfffffffffffffffe, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000, 0xff00}}}, 0x0, 0x0, 0x0, 0x0}) 10m9.734168456s ago: executing program 2 (id=497): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) fsync(0xffffffffffffffff) 10m9.616666646s ago: executing program 2 (id=500): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x14, &(0x7f0000000b80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000808500000082000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0xe, 0x10, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 10m9.599758136s ago: executing program 2 (id=501): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000000000)={&(0x7f0000000200)={0x2, 0x0, @private=0xa010100}, 0x10, 0x0, 0x0, &(0x7f0000000280)=[@mask_fadd={0x58, 0x114, 0x8, {{0x7f, 0xfffffc01}, 0xffffffffffffffff, 0x0, 0x8, 0x7c0d08aa, 0x2b, 0xffffffffffffff5d, 0x31, 0x9d}}], 0x58}, 0x0) 10m9.381427088s ago: executing program 2 (id=507): bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYRESHEX, @ANYRESHEX=0x0, @ANYRES32, @ANYRES32, @ANYBLOB], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x100000000000000, 0xd}, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x79dc, 0x0, 0x0, 0x0, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r3, 0x6, 0x2, 0x0, &(0x7f0000000180)) 9m54.186421337s ago: executing program 32 (id=507): bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYRESHEX, @ANYRESHEX=0x0, @ANYRES32, @ANYRES32, @ANYBLOB], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x100000000000000, 0xd}, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x79dc, 0x0, 0x0, 0x0, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r3, 0x6, 0x2, 0x0, &(0x7f0000000180)) 8m57.200640444s ago: executing program 0 (id=753): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00'}, 0x10) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000001afc180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b703000000090000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={0x0}, 0x18) syz_clone3(0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000001640)='kfree\x00', r4}, 0x10) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r5, 0x4058534c, &(0x7f0000000080)={0x80, 0x0, 0x2}) syz_usb_connect(0x5, 0x0, 0x0, 0x0) 8m53.833602452s ago: executing program 0 (id=762): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/unix\x00') seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) lseek(r0, 0x38, 0x0) 8m53.833468872s ago: executing program 0 (id=763): r0 = socket(0x840000000002, 0x3, 0x100) ioctl$sock_inet_SIOCGIFDSTADDR(r0, 0x8917, &(0x7f0000001540)={'team0\x00', {0x2, 0x0, @private}}) 8m53.537722443s ago: executing program 0 (id=766): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x8002) getsockname$packet(r0, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000280)=0x14) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x6, 0x2, &(0x7f00000001c0)=@raw=[@map_idx={0x18, 0xa, 0x5, 0x0, 0x1}], &(0x7f0000000140)='GPL\x00', 0x6, 0x0, 0x0, 0x40f00, 0x0, '\x00', r1, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7fff, @void, @value}, 0x94) 8m53.536891133s ago: executing program 0 (id=770): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x0, @loopback}, {0xa, 0x0, 0xffffffff, @remote}, r1}}, 0x48) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000080)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000040)=0x1, r3, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0x2, 0x4e21}, {0xa, 0x4, 0x0, @loopback}, r3}}, 0x48) 8m53.350328794s ago: executing program 0 (id=773): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "000210", 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x11}}}}}}, 0x0) r3 = syz_open_dev$usbfs(0x0, 0x80000000003, 0x101301) ioctl$USBDEVFS_FREE_STREAMS(r3, 0x802c550a, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r5, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e"], 0x15) r6 = dup(r5) write$FUSE_BMAP(r6, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r6}}) 8m38.321798332s ago: executing program 33 (id=773): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "000210", 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x11}}}}}}, 0x0) r3 = syz_open_dev$usbfs(0x0, 0x80000000003, 0x101301) ioctl$USBDEVFS_FREE_STREAMS(r3, 0x802c550a, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r5, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e"], 0x15) r6 = dup(r5) write$FUSE_BMAP(r6, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r6}}) 3m7.804839936s ago: executing program 1 (id=2284): openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000680)='blkio.throttle.io_service_bytes_recursive\x00', 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000640)=ANY=[@ANYBLOB="700000001400010000000000fbdbdf25e00000010000000000000000000000000000000000000000000000000000000100000000000700"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\f\x00\b\x00'], 0x70}}, 0x4004040) 3m7.667739197s ago: executing program 1 (id=2285): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, 0x0, 0x0) capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000140)) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$AUTOFS_IOC_FAIL(0xffffffffffffffff, 0x4c80, 0xffffffffffffffb6) 3m6.764926202s ago: executing program 1 (id=2291): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x8002, 0x0) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xc8}, 0x8) r4 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_ERRQUEUE(r4, 0x6b, 0x1f, 0x0, &(0x7f00000016c0)) timer_settime(0x0, 0x5, 0x0, 0x0) mount_setattr(0xffffffffffffffff, 0x0, 0x100, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r5, 0xffffffffffffffff, 0x0) 3m5.833462057s ago: executing program 1 (id=2295): syz_usb_connect(0x0, 0x24, &(0x7f00000006c0)={{0x12, 0x1, 0x0, 0x4b, 0x42, 0xe6, 0x8, 0x1a0a, 0x103, 0xad1d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xf6, 0x39, 0xbe}}]}}]}}, 0x0) syz_io_uring_setup(0x7caa, 0x0, 0x0, 0x0) 3m5.26917276s ago: executing program 1 (id=2300): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000800)=ANY=[@ANYBLOB="b70200000a000000bfa30000000000000703000000feffff7a0af0ff0000000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010001010404000001007d60b7030000010000006a0a00fe00000000850000000d000000b700000001000000950000000000000075cdc4b57b0c65752a3ad50000007ddd0000cb4500639100002000000000000000ff7f0000b52f17cee19d0001000000000000000000cb04fcbb0b9bafe3ba431351a58a885ba9918d37b056b9bbd11b6b9f6cf7db6d574620260000000000008062d77e84cef4a2ab938f65aac33c4d620de2c9b7dc10d7d313f9f57606b83b994fb484510bef2e4872f5c2fe6faaf75e5cc4051ade12f41deff6df6a936b4ec3827c739bb39aad16cc75fe369258673b5df11cc2afb53611cc32a790bce5a6f087ae8f5e64be2c9d2d29db3d36dd015c7bd3f15aa6aadbeab2a01685108e61aa000000000000000000000000008b798b4f7458d1863cc67c4c6a06e828e5216f601b19db1af1b5d356d0f062137d866d11be4ba3f0151fdbbd4e97d62ecc645e143a60f1c6edc76609073909826151e2b42bf0ed0c8cef3ba2a730a00c87c493db845b10e9468bda6f82881eb8c9cfa72b08eecc952a3fd2c46f3c1cde71a19d1a2982492abaa96665372831210e00d2bfea3b8d188df2eff8d56aaae7d32a2e183722537395019f02ec4b85f6aad7faca088de9b26797a8446b16c28d85f225992dbdd5bb01ba51508951c7a7d6ca0916c3a12912715649c2b1c7192a4251b59d378d0616a48c7957e122665c8b7e89eddfc3783f6c9129a7c5f8ee5f50579e2f638f7eb12f63be72a3d817b324d6e417b1c2cbfdcada0a16e31790e26cf19588a7e0496ee2782224cf30f810da86cf1a3204f4c9404f5d7321a4fefc4d1c9139ca4b65b99909950000006b42077ca60fdecb2717e21f8f187b1866108b6e8c71e26032176066599783568628f0309c3afa716d3706e1fa89917e131f4034a8383e99c3568fd04201b37cd92ca6ebf94a2d8310f7032775cfd75652f85b039d5430b3c6643e9146d2478ce313"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000100), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x1f2f, 0x17, 0x2f, &(0x7f00000007c0)="9f44948721919580684010a49e66", 0x0, 0x241, 0x0, 0xb1, 0x0, &(0x7f0000000700)="389ceff69d08b0af1cc71b6262d50660bbaf31a7f8cd6a6f911beb65d5fe6b54bf21a66489121f24fefd198059288c9b735e1898e77a7469489a249292c02a72bc193a3008ebdbf4e9dd4ee8fcceef55402c913c8dd0ebece1330aaa93ece835c5044a246a5967e3acd7c950b3b19f351830e545eb9bc3a9c6dd22ce97f1f857cfe8b68a2370b69ea336006b589368f92deb68f3dfc6f2bfee09f8342da437fce5dcdf658e453e3132bb42067575318c39"}, 0x23) 3m5.15682346s ago: executing program 1 (id=2301): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'bridge0\x00'}) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0xc0200, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, 0x0) recvmmsg(r1, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) 2m50.092181899s ago: executing program 34 (id=2301): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'bridge0\x00'}) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0xc0200, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, 0x0) recvmmsg(r1, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) 2m41.146005645s ago: executing program 7 (id=2472): r0 = socket$kcm(0x10, 0x2, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x100) sendto$inet(r1, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) listen(r2, 0xda90) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r3, 0xfff) syz_emit_ethernet(0x4a, &(0x7f0000000240)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000280)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2}}}}}}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000040)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "101040", 0x14, 0x6, 0x1, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0xc2}}}}}}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), r4) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x500, &(0x7f00000001c0)=[{&(0x7f00000006c0)="5c00000013006bcd9e3fe3dc6e48aa31086b87030b0000001f00000000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 2m40.456915179s ago: executing program 7 (id=2473): openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r1, 0x0, 0x0) write$cgroup_devices(r1, &(0x7f0000000140)=ANY=[@ANYBLOB='c 75:*\t\n'], 0xa) 2m40.112750421s ago: executing program 7 (id=2477): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x1f2f, 0x17, 0x2f, &(0x7f00000007c0)="9f44948721919580684010a49e66", 0x0, 0x241, 0x0, 0xb1, 0x0, &(0x7f0000000700)="389ceff69d08b0af1cc71b6262d50660bbaf31a7f8cd6a6f911beb65d5fe6b54bf21a66489121f24fefd198059288c9b735e1898e77a7469489a249292c02a72bc193a3008ebdbf4e9dd4ee8fcceef55402c913c8dd0ebece1330aaa93ece835c5044a246a5967e3acd7c950b3b19f351830e545eb9bc3a9c6dd22ce97f1f857cfe8b68a2370b69ea336006b589368f92deb68f3dfc6f2bfee09f8342da437fce5dcdf658e453e3132bb42067575318c39"}, 0x23) 2m39.979619282s ago: executing program 7 (id=2478): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20048000}, 0x0) 2m38.890023407s ago: executing program 7 (id=2482): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="7915a8000000000061138c0000000000bfa000000000000007000000080000002d0301000000000095000000000000006916000000000000bf67000000000000350607000fff07206706000002000000160304000ee60060bf500000000000000f650000000000006507f9ff0100000007070000cddfffff1e75"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100626f6e64000000001800028014000880"], 0x48}}, 0x0) sendmmsg$inet(r0, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) 2m38.735988798s ago: executing program 7 (id=2484): socket(0x10, 0x3, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000055c0), 0x400023c, 0x0, 0x0) readv(r0, &(0x7f0000000640)=[{&(0x7f0000000580)=""/177, 0xb1}], 0x1) 2m23.660910977s ago: executing program 35 (id=2484): socket(0x10, 0x3, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000055c0), 0x400023c, 0x0, 0x0) readv(r0, &(0x7f0000000640)=[{&(0x7f0000000580)=""/177, 0xb1}], 0x1) 4.994534462s ago: executing program 3 (id=3946): socket(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xd, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd, @generic={0x2c}, @exit, @tail_call]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f0000000000)={{0x3}}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001740)={&(0x7f0000001600)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x4, [@struct={0x0, 0x0, 0x0, 0x4, 0x0, 0x43000000}, @union={0x0, 0x1, 0x0, 0x5, 0x0, 0x0, [{0x2, 0x1}]}]}, {0x0, [0x0, 0x2e]}}, 0x0, 0x40, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r4, 0x80e85411, &(0x7f00000022c0)) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00000018000280140003"], 0x50}}, 0x0) 4.728881584s ago: executing program 4 (id=3952): r0 = socket(0x840000000002, 0x3, 0x100) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e25, @loopback}, 0x10) getsockopt$nfc_llcp(0xffffffffffffffff, 0x28, 0x0, 0xfffffffffffffffe, 0x20000000) sendmmsg$inet(r0, &(0x7f0000005240), 0x4000095, 0x0) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000080)=0xffff, 0x4) 3.798944559s ago: executing program 3 (id=3957): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) close(r5) r7 = openat$cgroup_procs(r0, &(0x7f0000000480)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r7, &(0x7f00000001c0), 0x12) 3.72080934s ago: executing program 8 (id=3959): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB], 0xb8}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="b8000000150001000000000000000000e00000020000000000000000000000000000000000000000000000000000000000004000000000000a"], 0xb8}}, 0x0) 3.60488325s ago: executing program 3 (id=3962): unshare(0x8020400) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x2000000, 0x0, 0x0, &(0x7f0000000200), 0x0, 0x8005, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x50) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) sendmmsg$alg(0xffffffffffffffff, &(0x7f00000011c0), 0x0, 0x0) close(r0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000080)={0x18, 0x0, {0x3, @local, 'geneve0\x00'}}, 0x1e) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000002c0), 0x80200, 0x0) ioctl$PPPIOCATTCHAN(r3, 0x40047438, &(0x7f0000000100)=0x1) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_subtree(r4, 0x0, 0x32600) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r3, 0x40047211, &(0x7f0000000180)=0x2) 3.60464294s ago: executing program 8 (id=3963): unshare(0x2040400) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000180)={0x0, 0x0}) 3.384868191s ago: executing program 8 (id=3967): socket(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xd, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd, @generic={0x2c}, @exit, @tail_call]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f0000000000)={{0x3}}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001740)={&(0x7f0000001600)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x4, [@struct={0x0, 0x0, 0x0, 0x4, 0x0, 0x43000000}, @union={0x0, 0x1, 0x0, 0x5, 0x0, 0x0, [{0x2, 0x1}]}]}, {0x0, [0x0, 0x2e]}}, 0x0, 0x40, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r4, 0x80e85411, &(0x7f00000022c0)) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="50000000100001040000", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00000018000280140003"], 0x50}}, 0x0) 3.322372002s ago: executing program 3 (id=3968): r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) sendmmsg$sock(r0, &(0x7f0000002000)=[{{&(0x7f00000000c0)=@pptp={0x18, 0x2, {0x1, @dev={0xac, 0x14, 0x14, 0x13}}}, 0x80, 0x0}}], 0x1, 0x4000000) 3.104830633s ago: executing program 4 (id=3971): bind$netlink(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000000140)) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000080)={0x18, 0x0, {0x3, @local, 'geneve0\x00'}}, 0x1e) ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x20) ioctl$PPPIOCCONNECT(0xffffffffffffffff, 0x4004743a, &(0x7f0000000280)) socketpair$unix(0x1, 0x1, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0xffffffff002) syz_emit_ethernet(0xda, 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000300)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x0) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x3, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) 3.073266533s ago: executing program 3 (id=3972): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, 0x0, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) close(r7) r9 = openat$cgroup_procs(r0, &(0x7f0000000480)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r9, &(0x7f00000001c0), 0x12) 3.012909933s ago: executing program 4 (id=3973): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="400000004800010000000000000000000a00806e08000000e0"], 0x40}}, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 2.784781575s ago: executing program 6 (id=3979): r0 = socket$kcm(0x29, 0x5, 0x0) write$cgroup_pressure(r0, &(0x7f0000000140)={'full'}, 0xfffffdef) setsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000500)={0x77359400}, 0x10) 2.628863446s ago: executing program 6 (id=3980): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xcc}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r0, &(0x7f0000000480)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, &(0x7f0000000500)=[{&(0x7f0000000140)="03", 0x1}], 0x1}}], 0x1, 0x34000811) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000040)=ANY=[@ANYRES32=0x0, @ANYRES16, @ANYRES32=r0], 0x1000f) 2.508529746s ago: executing program 8 (id=3982): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000500)=""/157, 0x9d}], 0x1}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000009240)={&(0x7f0000001740)=@newtfilter={0x60, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0xffff}}, [@filter_kind_options=@f_flow={{0x9}, {0x30, 0x2, [@TCA_FLOW_EMATCHES={0x2c, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x3}}, @TCA_EMATCH_TREE_LIST={0x20, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x0, 0x2, 0x0, 0x0, {{0xaa, 0x9, 0xb}, [@TCA_EM_IPT_MATCH_REVISION={0x0, 0x3, 0xf}, @TCA_EM_IPT_MATCH_NAME, @TCA_EM_IPT_MATCH_NAME]}}, @TCF_EM_IPT={0x0, 0x3, 0x0, 0x0, {{0xffff, 0x9, 0x5}, [@TCA_EM_IPT_HOOK]}}, @TCF_EM_CMP={0x0, 0x3, 0x0, 0x0, {{0x3, 0x1, 0x1}, {0x9, 0x0, 0x6, 0x4, 0xb, 0x1}}}]}]}]}}]}, 0x60}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2.438313967s ago: executing program 8 (id=3984): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x10002) ioctl$int_in(r0, 0x5452, &(0x7f0000000240)=0x6) 1.540939401s ago: executing program 3 (id=3986): r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r1, 0x0) connect$unix(r0, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000100)="5c00000014006b", 0x7}, {&(0x7f00000017c0)="00000000ffffffff1f01a0c9a1171aa56a7f9138a6c073e99f8f2ffed6bd642c1238663e9e5189a46cb56c776afa8ec3d4d4d9c0648fc18bad3a6b5656235d60cb5af5c5a69e10ed9fd4ea", 0x4b}, {&(0x7f0000001840)="9a9245a259250adbc6e2", 0xa}], 0x3, 0x0, 0x0, 0x1f00c00e}, 0x0) 1.540818452s ago: executing program 4 (id=3987): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00'}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'ip6gretap0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=@newlink={0x20, 0x10, 0xd8a88b3807bbf5cf, 0x0, 0x0, {0x0, 0x0, 0x7}}, 0x20}}, 0x0) 1.540696171s ago: executing program 6 (id=3988): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0xa4, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x7c, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x44, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_MASK={0x4}, @NFTA_BITWISE_XOR={0x4}, @NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_OP={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x10c}}, 0x0) 1.489297742s ago: executing program 5 (id=3990): r0 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r1, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r2, 0x0, 0x0, 0x0, &(0x7f0000000800), 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x50) 1.425593962s ago: executing program 4 (id=3991): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000200)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffd}, [@call={0x85, 0x0, 0x0, 0x36}, @printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7fffffff}}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_RESET(r0, 0x5000, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r2, 0x800c5012, 0x0) ioctl$SNDCTL_DSP_GETOSPACE(r2, 0x8010500c, &(0x7f0000000100)) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000040), 0x408001, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x6, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"/4153], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x5, &(0x7f00000000c0), 0xffffffffffffffc2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 1.328832043s ago: executing program 6 (id=3992): socket(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xd, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd, @generic={0x2c}, @exit, @tail_call]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f0000000000)={{0x3}}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001740)={&(0x7f0000001600)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x4, [@struct={0x0, 0x0, 0x0, 0x4, 0x0, 0x43000000}, @union={0x0, 0x1, 0x0, 0x5, 0x0, 0x0, [{0x2, 0x1}]}]}, {0x0, [0x0, 0x2e]}}, 0x0, 0x40, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r4, 0x80e85411, &(0x7f00000022c0)) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="50000000100001040000", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00000018000280140003"], 0x50}}, 0x0) 1.157209384s ago: executing program 5 (id=3993): unshare(0x400) r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0) setsockopt$rose(r0, 0x104, 0x6, &(0x7f0000000180)=0xbc6b, 0x4) 1.061638944s ago: executing program 5 (id=3994): r0 = socket(0x40000000015, 0x805, 0x0) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, 0x0) 972.859645ms ago: executing program 5 (id=3995): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_ERRQUEUE(r3, 0x6b, 0x1f, 0x0, &(0x7f00000016c0)) timer_settime(0x0, 0x5, 0x0, 0x0) mount_setattr(0xffffffffffffffff, 0x0, 0x100, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, 0x0}) close_range(r4, 0xffffffffffffffff, 0x0) 67.1644ms ago: executing program 6 (id=3996): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f0000000040)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x7d}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 56.742579ms ago: executing program 8 (id=3997): r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0xfffe, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000180)="0e3a6b", 0x3}], 0x1, &(0x7f0000000000)=[@prinfo={0x18, 0x84, 0x5, {0x0, 0x1}}], 0x18}], 0x1, 0x0) 55.99541ms ago: executing program 5 (id=3998): r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000008000/0x3000)=nil, 0x3000, 0x2, 0x13, r0, 0xfffff000) r1 = socket(0x15, 0x5, 0x0) getsockopt(r1, 0x200000000114, 0x271c, &(0x7f0000000580)=""/102393, &(0x7f0000000040)=0x18ff9) 290.38µs ago: executing program 4 (id=3999): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00'}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) 124.7µs ago: executing program 5 (id=4000): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00'}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'ip6gretap0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=@newlink={0x20, 0x10, 0xd8a88b3807bbf5cf, 0x0, 0x0, {0x0, 0x0, 0x7}}, 0x20}}, 0x0) 0s ago: executing program 6 (id=4001): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000000041}, 0xc) r1 = socket$inet6(0xa, 0x3, 0x4) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000340)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@local, 0x0, 0x0, 0x4e20, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, 0x0, 0x0, 0x1}, {{@in6=@ipv4={'\x00', '\xff\xff', @dev}, 0x0, 0x3c}, 0x2, @in=@multicast1, 0x0, 0x1, 0x2}}, 0xe8) sendmmsg(r1, &(0x7f0000000480), 0x21, 0x0) kernel console output (not intermixed with test programs): turned -19 [ 319.646031][ T8435] sp0: Synchronizing with TNC [ 319.924541][ T8444] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 322.029264][ T8460] trusted_key: encrypted_key: insufficient parameters specified [ 323.066408][ T8478] udc-core: couldn't find an available UDC or it's busy [ 323.872690][ T8478] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 323.886407][ T8482] TCP: request_sock_subflow_v6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 328.031595][ T8539] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1288'. [ 328.033894][ T8539] netlink: 'syz.4.1288': attribute type 3 has an invalid length. [ 330.809705][ T8576] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1300'. [ 330.812184][ T8576] netlink: 'syz.5.1300': attribute type 3 has an invalid length. [ 335.288095][ T8627] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1318'. [ 335.290656][ T8627] netlink: 'syz.3.1318': attribute type 3 has an invalid length. [ 338.919076][ T8676] binder: BC_ATTEMPT_ACQUIRE not supported [ 338.920495][ T8676] binder: 8675:8676 ioctl c0306201 200001c0 returned -22 [ 339.776988][ T8700] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1343'. [ 339.789827][ T8700] team0: Port device virt_wifi0 added [ 339.800987][ T8698] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1331'. [ 339.803176][ T8698] netlink: 'syz.1.1331': attribute type 3 has an invalid length. [ 340.952230][ T8712] netlink: 'syz.5.1346': attribute type 1 has an invalid length. [ 341.151356][ T8718] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 341.173703][ T8720] 8021q: adding VLAN 0 to HW filter on device bond1 [ 341.174546][ T380] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 341.190219][ T5790] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 341.313666][ T380] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 341.476117][ T8732] syzkaller0 speed is unknown, defaulting to 1000 [ 341.477747][ T8732] syzkaller0 speed is unknown, defaulting to 1000 [ 341.479494][ T8732] syzkaller0 speed is unknown, defaulting to 1000 [ 341.490230][ T8732] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 341.727753][ T8732] syzkaller0 speed is unknown, defaulting to 1000 [ 341.730032][ T8732] syzkaller0 speed is unknown, defaulting to 1000 [ 341.736674][ T8732] syzkaller0 speed is unknown, defaulting to 1000 [ 341.738901][ T8732] syzkaller0 speed is unknown, defaulting to 1000 [ 341.740948][ T8732] syzkaller0 speed is unknown, defaulting to 1000 [ 345.793015][ T8783] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1360'. [ 345.795013][ T8783] netlink: 'syz.1.1360': attribute type 3 has an invalid length. [ 346.305735][ T4024] Bluetooth: hci1: link tx timeout [ 346.307733][ T4024] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 347.174462][ T4024] Bluetooth: hci1: link tx timeout [ 347.175662][ T4024] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 347.203394][ T4024] Bluetooth: hci1: link tx timeout [ 347.204527][ T4024] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 348.206679][ T8848] udc-core: couldn't find an available UDC or it's busy [ 348.216323][ T8848] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 348.284789][ T4024] Bluetooth: hci1: link tx timeout [ 348.286279][ T4024] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 348.288141][ T4024] Bluetooth: hci1: link tx timeout [ 348.289290][ T4024] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 348.356794][ T4072] Bluetooth: hci1: command 0x0406 tx timeout [ 349.313992][ T4024] Bluetooth: hci1: link tx timeout [ 349.315120][ T4024] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 349.331131][ T8873] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1394'. [ 349.824852][ T4024] Bluetooth: hci1: link tx timeout [ 349.826312][ T4024] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 350.343549][ T8884] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1385'. [ 350.345678][ T8884] netlink: 'syz.3.1385': attribute type 3 has an invalid length. [ 352.079115][ T8908] udc-core: couldn't find an available UDC or it's busy [ 352.080703][ T8908] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 352.132062][ T4024] Bluetooth: hci1: link tx timeout [ 352.133334][ T4024] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 352.179948][ T4024] Bluetooth: hci1: link tx timeout [ 352.181201][ T4024] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 353.306616][ T8936] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 356.385460][ T4024] Bluetooth: hci1: link tx timeout [ 356.386753][ T4024] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 356.398139][ T4024] Bluetooth: hci1: link tx timeout [ 356.399181][ T4024] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 357.493083][ T8976] udc-core: couldn't find an available UDC or it's busy [ 357.494620][ T8976] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 358.801851][ T4024] Bluetooth: hci1: link tx timeout [ 358.803199][ T4024] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 358.982453][ T4024] Bluetooth: hci1: link tx timeout [ 358.983782][ T4024] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 360.095840][ T9015] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1435'. [ 360.097971][ T9015] netlink: 'syz.6.1435': attribute type 3 has an invalid length. [ 361.192617][ T4024] Bluetooth: hci1: link tx timeout [ 361.194100][ T4024] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 362.692743][ T9042] udc-core: couldn't find an available UDC or it's busy [ 362.694352][ T9042] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 362.800773][ T9051] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1448'. [ 362.808553][ T9051] netlink: 228 bytes leftover after parsing attributes in process `syz.3.1448'. [ 362.810808][ T9051] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1448'. [ 362.943830][ T9059] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1451'. [ 364.756230][ T9057] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 364.758164][ T9057] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 364.760033][ T9057] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 364.761972][ T9057] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 364.832449][ T4024] Bluetooth: hci1: link tx timeout [ 364.833838][ T4024] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 366.674672][ T9103] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 366.677068][ T9103] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 366.679261][ T9103] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 366.681432][ T9103] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 369.654346][ T9127] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1470'. [ 369.768423][ T9129] device batadv_slave_0 entered promiscuous mode [ 369.853569][ T9138] udc-core: couldn't find an available UDC or it's busy [ 369.855122][ T9138] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 369.876649][ T4024] Bluetooth: hci1: link tx timeout [ 369.877890][ T4024] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 370.995677][ T9165] usb usb1: usbfs: interface 0 claimed by hub while 'syz.4.1483' sets config #76 [ 371.011994][ T9169] udc-core: couldn't find an available UDC or it's busy [ 371.030720][ T9169] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 373.463174][ T4024] Bluetooth: hci1: link tx timeout [ 373.464429][ T4024] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 373.487831][ T9212] udc-core: couldn't find an available UDC or it's busy [ 373.489443][ T9212] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 373.514608][ T9209] netlink: 134660 bytes leftover after parsing attributes in process `syz.3.1496'. [ 373.516873][ T9209] netlink: zone id is out of range [ 373.523571][ T4024] Bluetooth: hci1: link tx timeout [ 373.524744][ T4024] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 373.534221][ T9209] netlink: zone id is out of range [ 373.535443][ T9209] netlink: zone id is out of range [ 373.536668][ T9209] netlink: zone id is out of range [ 374.453328][ T9209] netlink: zone id is out of range [ 374.454729][ T9209] netlink: get zone limit has 4 unknown bytes [ 374.659751][ T9233] udc-core: couldn't find an available UDC or it's busy [ 374.661323][ T9233] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 374.890462][ T9237] input: syz0 as /devices/virtual/input/input6 [ 376.871642][ T9258] tmpfs: Bad value for 'mpol' [ 376.891861][ T2055] ieee802154 phy1 wpan1: encryption failed: -22 [ 377.235220][ T9272] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1519'. [ 377.512202][ T9276] udc-core: couldn't find an available UDC or it's busy [ 377.513878][ T9276] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 378.013958][ T9283] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 378.015987][ T9283] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 378.017774][ T9283] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 378.019740][ T9283] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 379.033817][ T9287] binder: 9286:9287 tried to acquire reference to desc 0, got 1 instead [ 379.036696][ T9287] binder: 9286:9287 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 379.039522][ T9287] binder: 9287 RLIMIT_NICE not set [ 379.040625][ T9287] binder: 9287 RLIMIT_NICE not set [ 379.041855][ T9287] binder: send failed reply for transaction 20 to 9286:9287 [ 379.043381][ T9287] binder: 9286:9287 ioctl c0306201 20000680 returned -14 [ 379.045688][ T1534] binder: undelivered TRANSACTION_COMPLETE [ 379.047008][ T1534] binder: undelivered TRANSACTION_ERROR: 29201 [ 380.202221][ T9309] udc-core: couldn't find an available UDC or it's busy [ 380.203995][ T9309] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 380.415907][ T9318] udc-core: couldn't find an available UDC or it's busy [ 380.417668][ T9318] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 383.138030][ T9336] binder: 9335:9336 BC_ACQUIRE_DONE node 21 has no pending acquire request [ 383.299622][ T9345] udc-core: couldn't find an available UDC or it's busy [ 383.301264][ T9345] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 384.031651][ T4013] Bluetooth: hci2: command 0x0406 tx timeout [ 387.102619][ T4027] Bluetooth: hci1: link tx timeout [ 387.103901][ T4027] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 390.030454][ T9426] udc-core: couldn't find an available UDC or it's busy [ 390.037019][ T9426] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 390.235995][ T9434] udc-core: couldn't find an available UDC or it's busy [ 390.237653][ T9434] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 391.314851][ T9444] netlink: 'syz.5.1567': attribute type 4 has an invalid length. [ 391.350891][ T9444] netlink: 'syz.5.1567': attribute type 4 has an invalid length. [ 391.638804][ T9468] input: syz0 as /devices/virtual/input/input7 [ 391.795881][ T9472] udc-core: couldn't find an available UDC or it's busy [ 391.801684][ T9472] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 393.302108][ T9490] udc-core: couldn't find an available UDC or it's busy [ 393.303736][ T9490] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 394.393835][ T9496] (syz.1.1581,9496,1):ocfs2_parse_options:1447 ERROR: Unrecognized mount option "ßÕ~gžœ<+‹€( ™.µ1 1'êƉÇ" or missing value [ 394.397019][ T9496] (syz.1.1581,9496,1):ocfs2_fill_super:1177 ERROR: status = -22 [ 394.454546][ T9500] udc-core: couldn't find an available UDC or it's busy [ 394.456122][ T9500] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 398.307701][ T9538] udc-core: couldn't find an available UDC or it's busy [ 398.333159][ T9538] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 401.293604][ T9569] vxcan0: tx drop: invalid sa for name 0x0000000000000003 [ 403.438290][ T9606] udc-core: couldn't find an available UDC or it's busy [ 403.439892][ T9606] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 403.567864][ T9611] udc-core: couldn't find an available UDC or it's busy [ 403.578335][ T9611] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 404.026692][ T9615] vxcan0: tx drop: invalid sa for name 0x0000000000000003 [ 404.487270][ T9618] udc-core: couldn't find an available UDC or it's busy [ 404.488831][ T9618] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 404.507169][ T9623] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 404.877155][ T9618] udc-core: couldn't find an available UDC or it's busy [ 405.545271][ T9618] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 407.067226][ T9653] udc-core: couldn't find an available UDC or it's busy [ 407.068801][ T9653] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 408.586480][ T9664] udc-core: couldn't find an available UDC or it's busy [ 408.588109][ T9664] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 408.598392][ T9664] vxcan1: tx address claim with dlc 90 [ 408.966775][ T9685] udc-core: couldn't find an available UDC or it's busy [ 408.968495][ T9685] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 409.104713][ T9688] udc-core: couldn't find an available UDC or it's busy [ 409.106423][ T9688] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 409.169327][ T9664] bridge0: port 2(bridge_slave_1) entered disabled state [ 409.171674][ T9664] bridge0: port 1(bridge_slave_0) entered disabled state [ 410.418092][ T9664] device batadv_slave_0 left promiscuous mode [ 410.459248][ T9704] input: syz0 as /devices/virtual/input/input8 [ 410.486516][ T9664] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 411.794423][ T9720] udc-core: couldn't find an available UDC or it's busy [ 411.795953][ T9720] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 411.850596][ T9722] vxcan0: tx drop: invalid sa for name 0x0000000000000003 [ 414.328117][ T9664] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 414.330388][ T9664] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 414.333067][ T9664] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 414.334962][ T9664] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 415.419450][ T9765] udc-core: couldn't find an available UDC or it's busy [ 415.421025][ T9765] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 415.478204][ T9767] udc-core: couldn't find an available UDC or it's busy [ 415.480121][ T9767] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 415.551785][ T9664] netdevsim netdevsim1 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 415.553761][ T9664] netdevsim netdevsim1 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 415.555717][ T9664] netdevsim netdevsim1 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 415.557701][ T9664] netdevsim netdevsim1 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 419.879283][ T9810] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1689'. [ 420.541638][ T4027] Bluetooth: hci1: link tx timeout [ 420.542822][ T4027] Bluetooth: hci1: killing stalled connection 10:aa:aa:aa:aa:aa [ 420.544578][ T4027] Bluetooth: hci1: link tx timeout [ 420.545675][ T4027] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 420.575526][ T9813] udc-core: couldn't find an available UDC or it's busy [ 420.577236][ T9813] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 420.595375][ T9813] vxcan1: tx address claim with dlc 90 [ 421.765150][ T9825] udc-core: couldn't find an available UDC or it's busy [ 421.766892][ T9825] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 422.535252][ T9813] bridge0: port 2(bridge_slave_1) entered disabled state [ 422.538799][ T9813] bridge0: port 1(bridge_slave_0) entered disabled state [ 422.603830][ T4103] Bluetooth: hci1: command 0x0406 tx timeout [ 423.160932][ T9813] device batadv_slave_0 left promiscuous mode [ 423.333646][ T9813] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 424.838539][ T9813] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 424.840641][ T9813] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 424.843055][ T9813] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 424.845104][ T9813] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 425.090603][ T9854] udc-core: couldn't find an available UDC or it's busy [ 425.111730][ T9854] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 426.399630][ T26] audit: type=1326 audit(426.350:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9871 comm="syz.5.1708" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff809ed2a8 code=0x7ffc0000 [ 426.406665][ T26] audit: type=1326 audit(426.360:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9871 comm="syz.5.1708" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=74 compat=0 ip=0xffff809ed2a8 code=0x7ffc0000 [ 426.411742][ T26] audit: type=1326 audit(426.360:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9871 comm="syz.5.1708" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff809ed2a8 code=0x7ffc0000 [ 426.779905][ T9883] udc-core: couldn't find an available UDC or it's busy [ 427.731012][ T9883] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 430.529085][ T9908] udc-core: couldn't find an available UDC or it's busy [ 430.537764][ T9908] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 432.537462][ T9935] udc-core: couldn't find an available UDC or it's busy [ 432.556264][ T9935] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 434.418142][ T9949] ieee802154 phy1 wpan1: encryption failed: -22 [ 435.070955][ T9966] syz.1.1736 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 436.548609][ T9990] udc-core: couldn't find an available UDC or it's busy [ 436.550265][ T9990] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 438.277131][ T2055] ieee802154 phy1 wpan1: encryption failed: -22 [ 438.851008][ T4945] Bluetooth: hci2: command 0x0406 tx timeout [ 439.571146][T10026] sp0: Synchronizing with TNC [ 439.687165][T10032] udc-core: couldn't find an available UDC or it's busy [ 439.693468][T10032] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 440.992336][T10045] udc-core: couldn't find an available UDC or it's busy [ 440.993984][T10045] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 443.442032][T10083] udc-core: couldn't find an available UDC or it's busy [ 443.443604][T10083] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 444.368181][T10095] udc-core: couldn't find an available UDC or it's busy [ 444.369768][T10095] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 444.529463][T10105] sp0: Synchronizing with TNC [ 444.727471][T10113] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1780'. [ 444.730147][T10113] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1780'. [ 450.340636][T10207] sp0: Synchronizing with TNC [ 455.523412][T10271] udc-core: couldn't find an available UDC or it's busy [ 455.524980][T10271] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 456.599227][T10285] udc-core: couldn't find an available UDC or it's busy [ 456.600958][T10285] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 456.862474][T10290] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1834'. [ 456.864430][T10290] netlink: 'syz.6.1834': attribute type 3 has an invalid length. [ 457.844427][T10307] udc-core: couldn't find an available UDC or it's busy [ 457.847142][T10307] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 458.759300][T10319] wlan1 speed is unknown, defaulting to 1000 [ 458.761202][T10319] syzkaller0 speed is unknown, defaulting to 1000 [ 459.032961][T10335] netlink: 'syz.3.1850': attribute type 1 has an invalid length. [ 459.114801][T10335] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1850'. [ 459.147811][T10335] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 459.235201][T10335] bond1: (slave batadv0): Enslaving as a backup interface with an up link [ 459.328531][T10335] bond1 (unregistering): (slave batadv0): Releasing backup interface [ 460.923438][T10335] bond1 (unregistering): Released all slaves [ 462.702131][T10379] udc-core: couldn't find an available UDC or it's busy [ 462.707136][T10379] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 464.651344][T10418] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1876'. [ 464.653510][T10418] netlink: 'syz.3.1876': attribute type 3 has an invalid length. [ 468.099141][T10471] udc-core: couldn't find an available UDC or it's busy [ 468.121142][T10471] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 475.694842][T10567] vxcan0: tx drop: invalid sa for name 0x0000000000000003 [ 478.085866][T10592] udc-core: couldn't find an available UDC or it's busy [ 478.087618][T10592] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 479.110955][T10605] binder: 10603:10605 ioctl c0306201 20000480 returned -14 [ 479.325363][T10616] vxcan0: tx drop: invalid sa for name 0x0000000000000003 [ 480.011459][T10620] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 480.076628][T10627] netdevsim netdevsim4: Firmware load for '../file0' refused, path contains '..' component [ 481.303984][T10653] udc-core: couldn't find an available UDC or it's busy [ 481.305541][T10653] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 481.492196][T10660] vxcan0: tx drop: invalid sa for name 0x0000000000000003 [ 483.407521][T10707] tipc: Enabled bearer , priority 0 [ 483.438564][T10709] binder: 10708:10709 tried to acquire reference to desc 0, got 1 instead [ 483.453527][T10709] binder: 10708:10709 got transaction with invalid offsets ptr [ 483.463086][T10709] binder: 10708:10709 transaction failed 29201/-14, size 72-24 line 3124 [ 483.481381][ T4013] binder: undelivered TRANSACTION_ERROR: 29201 [ 483.565761][T10716] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1973'. [ 483.575407][T10716] netlink: 'syz.6.1973': attribute type 11 has an invalid length. [ 484.437678][ T4024] Bluetooth: hci1: link tx timeout [ 484.438941][ T4024] Bluetooth: hci1: killing stalled connection 10:aa:aa:aa:aa:aa [ 484.440646][ T4024] Bluetooth: hci1: link tx timeout [ 484.441826][ T4024] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 484.547646][T10732] sp0: Synchronizing with TNC [ 486.504793][T10764] udc-core: couldn't find an available UDC or it's busy [ 486.513419][T10764] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 486.663559][T10766] sp0: Synchronizing with TNC [ 487.147654][T10785] trusted_key: encrypted_key: insufficient parameters specified [ 489.690706][T10813] sp0: Synchronizing with TNC [ 491.793327][T10832] udc-core: couldn't find an available UDC or it's busy [ 491.794949][T10832] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 493.154597][T10858] block nbd1: shutting down sockets [ 493.289552][T10862] netlink: 830 bytes leftover after parsing attributes in process `syz.1.2024'. [ 493.793691][ T4024] Bluetooth: hci4: ACL packet for unknown connection handle 6 [ 494.346225][T10877] udc-core: couldn't find an available UDC or it's busy [ 494.348102][T10877] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 494.655256][T10880] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2030'. [ 494.657200][T10880] netlink: 'syz.1.2030': attribute type 3 has an invalid length. [ 497.185710][T10912] udc-core: couldn't find an available UDC or it's busy [ 497.187465][T10912] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 497.480489][T10927] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2045'. [ 497.482726][T10927] netlink: 'syz.1.2045': attribute type 3 has an invalid length. [ 497.688653][T10929] vxcan0: tx drop: invalid sa for name 0x0000000000000003 [ 498.812604][ T5784] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 498.814446][ T5784] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 499.758044][ T2055] ieee802154 phy1 wpan1: encryption failed: -22 [ 500.739916][T10951] udc-core: couldn't find an available UDC or it's busy [ 500.741419][T10951] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 502.652505][T10977] udc-core: couldn't find an available UDC or it's busy [ 502.654181][T10977] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 502.657703][T10977] netlink: 'syz.5.2063': attribute type 12 has an invalid length. [ 503.391995][ T4945] Bluetooth: hci1: command 0x0405 tx timeout [ 503.579498][T10980] udc-core: couldn't find an available UDC or it's busy [ 503.581052][T10980] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 505.147338][T10995] udc-core: couldn't find an available UDC or it's busy [ 505.148991][T10995] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 508.853993][T11024] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2080'. [ 508.914771][T11032] udc-core: couldn't find an available UDC or it's busy [ 508.917153][T11032] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 509.787054][T11035] sp0: Synchronizing with TNC [ 511.106698][T11055] udc-core: couldn't find an available UDC or it's busy [ 511.108333][T11055] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 511.863584][T11057] PKCS7: Unknown OID: [4] (bad) [ 511.864981][T11057] PKCS7: Only support pkcs7_signedData type [ 513.143287][T11075] wlan1 speed is unknown, defaulting to 1000 [ 513.145162][T11075] syzkaller0 speed is unknown, defaulting to 1000 [ 513.935238][T11079] input: syz0 as /devices/virtual/input/input11 [ 514.434594][T11092] udc-core: couldn't find an available UDC or it's busy [ 514.436297][T11092] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 514.533210][T11088] sp0: Synchronizing with TNC [ 514.555886][T11095] udc-core: couldn't find an available UDC or it's busy [ 514.557536][T11095] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 514.879961][T11102] udc-core: couldn't find an available UDC or it's busy [ 514.881715][T11102] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 516.290908][T11118] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2108'. [ 516.293079][T11118] netlink: 'syz.5.2108': attribute type 3 has an invalid length. [ 516.437879][T11125] netlink: 87 bytes leftover after parsing attributes in process `syz.6.2112'. [ 517.157097][T11133] udc-core: couldn't find an available UDC or it's busy [ 517.158659][T11133] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 517.199675][T11131] sp0: Synchronizing with TNC [ 517.233061][T11136] device batadv_slave_0 entered promiscuous mode [ 517.445773][T11142] udc-core: couldn't find an available UDC or it's busy [ 517.447422][T11142] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 519.028709][T11158] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2123'. [ 519.031200][T11158] netlink: 'syz.1.2123': attribute type 3 has an invalid length. [ 519.559013][T11165] udc-core: couldn't find an available UDC or it's busy [ 519.560585][T11165] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 519.595094][T11167] sp0: Synchronizing with TNC [ 521.593547][T11196] udc-core: couldn't find an available UDC or it's busy [ 521.595832][T11196] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 521.607478][T11197] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2137'. [ 521.609529][T11197] netlink: 'syz.5.2137': attribute type 3 has an invalid length. [ 521.872237][T11203] sp0: Synchronizing with TNC [ 523.133730][T11216] udc-core: couldn't find an available UDC or it's busy [ 523.140099][T11216] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 523.168857][T11216] udc-core: couldn't find an available UDC or it's busy [ 523.170496][T11216] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 523.250056][T11226] vxcan0: tx drop: invalid sa for name 0x0000000000000003 [ 525.269030][T11239] sp0: Synchronizing with TNC [ 525.405908][T11244] udc-core: couldn't find an available UDC or it's busy [ 525.407751][T11244] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 525.443503][T11244] netlink: 'syz.6.2151': attribute type 12 has an invalid length. [ 526.589760][T11251] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2155'. [ 526.592029][T11251] netlink: 'syz.5.2155': attribute type 3 has an invalid length. [ 528.965252][T11278] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2163'. [ 529.147269][T11284] device bridge_slave_0 left promiscuous mode [ 529.156841][T11284] bridge0: port 1(bridge_slave_0) entered disabled state [ 529.178359][T11288] udc-core: couldn't find an available UDC or it's busy [ 529.180858][T11288] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 529.417826][ T26] audit: type=1326 audit(529.320:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11275 comm="syz.4.2166" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9b1122a8 code=0x7ffc0000 [ 529.478926][ T26] audit: type=1326 audit(529.320:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11275 comm="syz.4.2166" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9b1122a8 code=0x7ffc0000 [ 529.507595][T11284] device bridge_slave_1 left promiscuous mode [ 529.508085][ T26] audit: type=1326 audit(529.330:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11275 comm="syz.4.2166" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff9b1122a8 code=0x7ffc0000 [ 529.519191][T11284] bridge0: port 2(bridge_slave_1) entered disabled state [ 529.549412][ T26] audit: type=1326 audit(529.330:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11275 comm="syz.4.2166" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9b1122a8 code=0x7ffc0000 [ 529.580196][ T26] audit: type=1326 audit(529.330:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11275 comm="syz.4.2166" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9b1122a8 code=0x7ffc0000 [ 529.594131][ T26] audit: type=1326 audit(529.330:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11275 comm="syz.4.2166" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=41 compat=0 ip=0xffff9b1122a8 code=0x7ffc0000 [ 529.686701][ T26] audit: type=1326 audit(529.330:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11275 comm="syz.4.2166" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9b1122a8 code=0x7ffc0000 [ 529.758764][T11284] team0: Port device team_slave_0 removed [ 529.761895][T11284] team0: Port device team_slave_1 removed [ 529.763484][T11284] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 529.765678][T11284] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 529.784940][ T26] audit: type=1326 audit(529.330:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11275 comm="syz.4.2166" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9b1122a8 code=0x7ffc0000 [ 529.800278][ T26] audit: type=1326 audit(529.330:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11275 comm="syz.4.2166" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=208 compat=0 ip=0xffff9b1122a8 code=0x7ffc0000 [ 529.821159][ T26] audit: type=1326 audit(529.330:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11275 comm="syz.4.2166" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9b1122a8 code=0x7ffc0000 [ 530.021315][T11290] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 530.023467][T11290] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 530.025963][T11290] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 530.027817][T11290] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 530.029737][T11290] device geneve3 entered promiscuous mode [ 530.032762][T11290] batman_adv: batadv0: Adding interface: geneve3 [ 530.034250][T11290] batman_adv: batadv0: The MTU of interface geneve3 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 530.044336][T11290] batman_adv: batadv0: Interface activated: geneve3 [ 530.047512][T11292] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2169'. [ 530.050539][T11292] netlink: 'syz.5.2169': attribute type 3 has an invalid length. [ 532.350149][T11340] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 532.390579][T11340] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 532.400701][T11340] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 532.406135][T11345] udc-core: couldn't find an available UDC or it's busy [ 532.407222][T11340] device bridge_slave_0 left promiscuous mode [ 532.407959][T11345] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 532.409504][T11340] bridge0: port 1(bridge_slave_0) entered disabled state [ 532.623648][T11340] device bridge_slave_1 left promiscuous mode [ 532.626645][T11340] bridge0: port 2(bridge_slave_1) entered disabled state [ 533.417097][T11340] bond0: (slave bond_slave_0): Releasing backup interface [ 533.450875][T11340] bond0: (slave bond_slave_1): Releasing backup interface [ 534.346886][T11340] team0: Port device team_slave_0 removed [ 534.383818][T11340] team0: Port device team_slave_1 removed [ 534.385881][T11340] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 534.401323][T11340] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 534.409005][T11340] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 534.440361][T11340] team0: Port device virt_wifi0 removed [ 534.479014][T11340] bond0: (slave wlan1): Releasing backup interface [ 535.073300][T11336] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2184'. [ 535.075380][T11336] netlink: 'syz.6.2184': attribute type 3 has an invalid length. [ 535.103795][T11342] device geneve3 entered promiscuous mode [ 535.111485][T11342] batman_adv: batadv0: Adding interface: geneve3 [ 535.113412][T11342] batman_adv: batadv0: Interface activated: geneve3 [ 535.131108][T11380] udc-core: couldn't find an available UDC or it's busy [ 535.157022][T11380] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 535.167377][T11384] udc-core: couldn't find an available UDC or it's busy [ 535.172038][T11384] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 535.340858][ T4013] wlan1 speed is unknown, defaulting to 1000 [ 538.401547][T11449] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2210'. [ 538.403653][T11449] netlink: 'syz.1.2210': attribute type 3 has an invalid length. [ 539.140923][T11447] udc-core: couldn't find an available UDC or it's busy [ 539.169550][T11447] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 542.511059][T11495] tmpfs: Bad value for 'size' [ 542.755426][T11502] udc-core: couldn't find an available UDC or it's busy [ 542.760780][T11502] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 542.812136][T11503] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2228'. [ 542.814109][T11503] netlink: 'syz.6.2228': attribute type 3 has an invalid length. [ 544.698568][T11540] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2244'. [ 548.479626][T11624] udc-core: couldn't find an available UDC or it's busy [ 548.481474][T11624] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 549.100683][T11637] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2279'. [ 549.311625][ T4024] Bluetooth: hci1: link tx timeout [ 549.313036][ T4024] Bluetooth: hci1: killing stalled connection 10:aa:aa:aa:aa:aa [ 549.314874][ T4024] Bluetooth: hci1: link tx timeout [ 549.316915][ T4024] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 549.390762][T11649] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2284'. [ 549.889475][T11658] udc-core: couldn't find an available UDC or it's busy [ 549.893536][T11658] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 551.242375][T11676] udc-core: couldn't find an available UDC or it's busy [ 551.243951][T11676] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 552.349711][T11701] udc-core: couldn't find an available UDC or it's busy [ 552.367066][T11701] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 553.270147][T11709] team0: Port device bridge1 added [ 553.656487][T11725] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2314'. [ 554.872276][T11741] device vlan0 entered promiscuous mode [ 554.920310][T11741] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check. [ 555.203588][T11745] udc-core: couldn't find an available UDC or it's busy [ 555.205100][T11745] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 556.359478][T11771] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2329'. [ 556.361634][T11771] netlink: 'syz.4.2329': attribute type 3 has an invalid length. [ 557.170308][T11785] udc-core: couldn't find an available UDC or it's busy [ 557.188426][T11785] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 559.677724][T11809] ebtables: ebtables: counters copy to user failed while replacing table [ 560.440510][T11829] syz.6.2349 sent an empty control message without MSG_MORE. [ 560.662876][T11833] TCP: request_sock_subflow_v6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 561.153884][ T2055] ieee802154 phy1 wpan1: encryption failed: -22 [ 561.195536][T11842] device wlan0 entered promiscuous mode [ 561.240228][T11842] device wlan0 left promiscuous mode [ 562.100734][T11856] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2359'. [ 562.102940][T11856] netlink: 'syz.4.2359': attribute type 3 has an invalid length. [ 562.309486][T11864] netlink: 'syz.3.2362': attribute type 1 has an invalid length. [ 562.323688][T11864] device batadv1 entered promiscuous mode [ 562.326629][T11864] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 562.618641][T11871] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 563.353754][T11880] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2369'. [ 563.996725][T11903] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2378'. [ 563.998753][T11903] netlink: 'syz.5.2378': attribute type 3 has an invalid length. [ 564.693328][T11909] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2381'. [ 564.695388][T11909] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2381'. [ 564.780844][T11911] bridge0: port 3(hsr_slave_1) entered blocking state [ 564.788770][T11911] bridge0: port 3(hsr_slave_1) entered disabled state [ 566.127668][T11941] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2391'. [ 566.129769][T11941] netlink: 'syz.6.2391': attribute type 3 has an invalid length. [ 566.260804][T11947] ipt_REJECT: TCP_RESET invalid for non-tcp [ 566.350698][T11949] syz.4.2397 uses old SIOCAX25GETINFO [ 567.216421][ T5792] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 567.288292][ T5792] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 567.358496][ T5792] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 567.435109][ T5792] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 567.459713][T11963] wlan1 speed is unknown, defaulting to 1000 [ 567.465809][T11963] syzkaller0 speed is unknown, defaulting to 1000 [ 567.655965][ T5792] tipc: Disabling bearer [ 567.657322][ T5792] tipc: Disabling bearer [ 567.660953][ T5792] tipc: Left network mode [ 567.781215][T11963] chnl_net:caif_netlink_parms(): no params data found [ 567.993684][T11963] bridge0: port 1(bridge_slave_0) entered blocking state [ 567.997138][T11963] bridge0: port 1(bridge_slave_0) entered disabled state [ 568.009977][T11963] device bridge_slave_0 entered promiscuous mode [ 568.017106][T11963] bridge0: port 2(bridge_slave_1) entered blocking state [ 568.018668][T11963] bridge0: port 2(bridge_slave_1) entered disabled state [ 568.021026][T11963] device bridge_slave_1 entered promiscuous mode [ 568.046469][T11963] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 568.062618][T11963] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 568.149977][T12001] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2411'. [ 568.173605][T11963] team0: Port device team_slave_0 added [ 568.184884][T11963] team0: Port device team_slave_1 added [ 568.252483][T11963] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 568.254072][T11963] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 568.292082][T11963] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 568.295952][T11963] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 568.297513][T11963] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 568.326820][T11963] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 568.424060][T11963] device hsr_slave_0 entered promiscuous mode [ 568.502065][T11963] device hsr_slave_1 entered promiscuous mode [ 568.543083][T11963] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 568.544931][T11963] Cannot create hsr debugfs directory [ 568.838708][T11963] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 568.884804][T11963] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 569.041154][T11963] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 569.092380][T11963] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 569.223317][T12047] netem: change failed [ 569.249782][ T4945] Bluetooth: hci0: command 0x0409 tx timeout [ 569.371380][T11963] 8021q: adding VLAN 0 to HW filter on device bond0 [ 569.388472][ T1753] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 569.390780][ T1753] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 569.402141][T11963] 8021q: adding VLAN 0 to HW filter on device team0 [ 569.432508][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 569.436626][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 569.438964][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 569.440630][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 569.535787][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 569.538213][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 569.544889][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 569.558271][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 569.559930][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 569.596442][ T5792] device hsr_slave_0 left promiscuous mode [ 569.632831][ T5792] device hsr_slave_1 left promiscuous mode [ 569.757276][ T5792] batman_adv: batadv0: Interface deactivated: geneve3 [ 569.759227][ T5792] batman_adv: batadv0: Removing interface: geneve3 [ 570.549257][T12073] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2427'. [ 570.551298][T12073] netlink: 'syz.3.2427': attribute type 3 has an invalid length. [ 570.618082][ T5801] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 570.620572][ T5801] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 570.627099][ T5801] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 570.635126][ T5801] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 570.693127][ T5801] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 570.695784][ T5801] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 570.713587][ T5801] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 570.714751][T12089] vxcan0: tx drop: invalid sa for name 0x0000000000000003 [ 570.716365][ T5801] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 570.719665][ T5801] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 570.723235][ T5801] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 570.732480][ T5801] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 570.735443][T11963] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 570.823544][T12099] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2437'. [ 571.001884][ T5771] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 571.003723][ T5771] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 571.017860][T11963] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 571.303897][T12124] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2441'. [ 571.311908][ T4072] Bluetooth: hci0: command 0x041b tx timeout [ 571.326648][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 571.329218][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 571.351741][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 571.354035][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 571.356579][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 571.359010][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 571.383219][T11963] device veth0_vlan entered promiscuous mode [ 571.390293][T11963] device veth1_vlan entered promiscuous mode [ 571.465522][ T1753] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 571.468023][ T1753] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 571.470251][ T1753] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 571.473641][ T1753] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 571.566943][T11963] device veth0_macvtap entered promiscuous mode [ 571.577301][T11963] device veth1_macvtap entered promiscuous mode [ 571.640922][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 571.644388][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 571.666012][T11963] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 571.675852][ T5771] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 571.680533][ T5771] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 571.701707][T12133] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2443'. [ 571.703816][T12133] netlink: 'syz.4.2443': attribute type 3 has an invalid length. [ 571.707512][T11963] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 571.709978][T11963] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 571.716522][T11963] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 571.724173][ T5771] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 571.726719][ T5771] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 571.733254][T11963] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 571.735397][T11963] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 571.738342][T11963] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 571.861966][T11963] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 572.041153][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 572.045579][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 572.061279][ T5771] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 572.101445][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 572.132617][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 572.193656][ T5771] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 572.479312][T12146] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 20000 - 0 [ 572.481392][T12146] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0 [ 572.483507][T12146] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0 [ 572.485604][T12146] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0 [ 573.391720][ T4072] Bluetooth: hci0: command 0x040f tx timeout [ 573.595262][T12169] device netdevsim0 entered promiscuous mode [ 573.617210][T12169] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 573.842593][T12178] vxcan0: tx drop: invalid sa for name 0x0000000000000003 [ 573.865335][T12183] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2456'. [ 573.894628][ T1534] wlan1 speed is unknown, defaulting to 1000 [ 573.896365][ T1753] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 573.898109][ T1753] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 573.899943][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 574.250016][T12192] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2457'. [ 574.252232][T12192] netlink: 'syz.6.2457': attribute type 3 has an invalid length. [ 575.694113][ T1534] Bluetooth: hci0: command 0x0419 tx timeout [ 575.879462][T12223] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2468'. [ 575.881360][T12223] device bridge_slave_1 left promiscuous mode [ 575.908431][T12223] bridge0: port 2(bridge_slave_1) entered disabled state [ 576.241165][T12223] device bridge_slave_0 left promiscuous mode [ 576.244262][T12223] bridge0: port 1(bridge_slave_0) entered disabled state [ 576.479448][T12234] netlink: 'syz.7.2472': attribute type 10 has an invalid length. [ 576.481408][T12234] netlink: 40 bytes leftover after parsing attributes in process `syz.7.2472'. [ 576.485784][T12234] bridge0: port 3(syz_tun) entered blocking state [ 576.488561][T12234] bridge0: port 3(syz_tun) entered disabled state [ 576.503501][T12234] device syz_tun entered promiscuous mode [ 576.509637][T12234] bridge0: port 3(syz_tun) entered blocking state [ 576.511158][T12234] bridge0: port 3(syz_tun) entered forwarding state [ 576.878069][T12252] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2474'. [ 576.880056][T12252] netlink: 'syz.6.2474': attribute type 3 has an invalid length. [ 577.058874][T12260] sp0: Synchronizing with TNC [ 579.248779][T12309] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2489'. [ 579.250807][T12309] netlink: 'syz.5.2489': attribute type 3 has an invalid length. [ 579.664885][T12323] sp0: Synchronizing with TNC [ 582.207921][T12379] sp0: Synchronizing with TNC [ 582.715859][T12388] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2508'. [ 582.717901][T12388] netlink: 'syz.6.2508': attribute type 3 has an invalid length. [ 583.203732][T12401] xt_l2tp: v2 doesn't support IP mode [ 583.938458][T12404] netlink: 'syz.6.2515': attribute type 10 has an invalid length. [ 583.957781][T12404] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2515'. [ 583.978373][T12401] xt_limit: Overflow, try lower: 65536/2147483648 [ 583.982793][T12404] A link change request failed with some changes committed already. Interface macvlan1 may have been left with an inconsistent configuration, please check. [ 584.000806][T12409] sp0: Synchronizing with TNC [ 584.118396][T12415] netlink: 4252 bytes leftover after parsing attributes in process `syz.3.2520'. [ 584.120790][T12415] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2520'. [ 584.221417][T12419] vxcan0: tx drop: invalid sa for name 0x0000000000000003 [ 584.414591][T12425] xt_TPROXY: Can be used only with -p tcp or -p udp [ 584.504425][T12427] wlan1 speed is unknown, defaulting to 1000 [ 585.441835][T12437] ieee802154 phy1 wpan1: encryption failed: -22 [ 585.849318][T12448] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2540'. [ 585.851445][T12448] netlink: 'syz.5.2540': attribute type 3 has an invalid length. [ 586.200430][T12454] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2532'. [ 586.311739][T12462] sp0: Synchronizing with TNC [ 586.565419][T12473] vxcan0: tx drop: invalid sa for name 0x0000000000000003 [ 586.711723][T12484] ipt_CLUSTERIP: Please specify destination IP [ 588.052807][T12505] sp0: Synchronizing with TNC [ 588.409257][T12514] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2548'. [ 588.411145][T12514] netlink: 'syz.3.2548': attribute type 3 has an invalid length. [ 588.714947][T12518] vxcan0: tx drop: invalid sa for name 0x0000000000000003 [ 588.811306][T12520] netlink: 184 bytes leftover after parsing attributes in process `syz.6.2551'. [ 589.090092][T12527] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2554'. [ 589.101203][T12527] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2554'. [ 589.427615][T12535] sp0: Synchronizing with TNC [ 589.720169][T12541] vxcan0: tx drop: invalid sa for name 0x0000000000000003 [ 590.142974][T12553] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2565'. [ 590.145074][T12553] netlink: 'syz.4.2565': attribute type 3 has an invalid length. [ 590.334086][T12560] sp0: Synchronizing with TNC [ 590.558781][T12569] vxcan0: tx drop: invalid sa for name 0x0000000000000003 [ 591.089272][T12593] sp0: Synchronizing with TNC [ 591.360267][T12606] vxcan0: tx drop: invalid sa for name 0x0000000000000003 [ 591.708820][T12620] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2589'. [ 591.711333][T12620] netlink: 'syz.6.2589': attribute type 3 has an invalid length. [ 593.095299][T12643] sp0: Synchronizing with TNC [ 593.337244][T12651] tmpfs: Bad value for 'size' [ 593.487978][T12658] vxcan0: tx drop: invalid sa for name 0x0000000000000003 [ 593.706046][T12666] wlan1 speed is unknown, defaulting to 1000 [ 593.900527][T12678] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 593.931652][T12678] netlink: 'syz.4.2602': attribute type 10 has an invalid length. [ 593.943973][T12678] netlink: 'syz.4.2602': attribute type 10 has an invalid length. [ 594.910978][T12670] wlan1 speed is unknown, defaulting to 1000 [ 595.065921][T12702] netlink: 184 bytes leftover after parsing attributes in process `syz.4.2608'. [ 595.104226][T12700] sp0: Synchronizing with TNC [ 595.143243][T12706] vxcan0: tx drop: invalid sa for name 0x0000000000000003 [ 595.523826][T12714] device syzkaller1 entered promiscuous mode [ 595.529600][T12670] chnl_net:caif_netlink_parms(): no params data found [ 595.667210][T12670] bridge0: port 1(bridge_slave_0) entered blocking state [ 595.668920][T12670] bridge0: port 1(bridge_slave_0) entered disabled state [ 595.679625][T12670] device bridge_slave_0 entered promiscuous mode [ 595.694858][T12670] bridge0: port 2(bridge_slave_1) entered blocking state [ 595.696572][T12670] bridge0: port 2(bridge_slave_1) entered disabled state [ 595.712211][T12670] device bridge_slave_1 entered promiscuous mode [ 595.881714][ T3604] Bluetooth: hci3: command 0x0409 tx timeout [ 596.792712][T12670] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 596.853606][T12670] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 596.917401][T12750] vxcan0: tx drop: invalid sa for name 0x0000000000000003 [ 596.952365][T12757] udc-core: couldn't find an available UDC or it's busy [ 596.954002][T12757] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 597.029737][T12748] sp0: Synchronizing with TNC [ 597.033761][T12670] team0: Port device team_slave_0 added [ 597.048953][T12670] team0: Port device team_slave_1 added [ 597.235900][T12670] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 597.240805][T12670] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 597.263758][T12670] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 597.279652][T12772] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2627'. [ 597.312549][T12670] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 597.324262][T12670] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 597.390649][T12670] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 597.837371][T12670] device hsr_slave_0 entered promiscuous mode [ 597.873081][T12670] device hsr_slave_1 entered promiscuous mode [ 597.951632][ T4065] Bluetooth: hci3: command 0x041b tx timeout [ 598.043797][T12670] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 598.047584][T12670] Cannot create hsr debugfs directory [ 598.050504][T12786] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2630'. [ 598.052619][T12786] netlink: 'syz.3.2630': attribute type 3 has an invalid length. [ 599.355057][T12798] vxcan0: tx drop: invalid sa for name 0x0000000000000003 [ 599.503472][T12806] sp0: Synchronizing with TNC [ 599.742216][T12822] udc-core: couldn't find an available UDC or it's busy [ 599.751684][T12822] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 599.770819][T12670] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 599.814708][T12670] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 599.833707][T12670] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 599.863765][T12670] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 600.031639][ T3604] Bluetooth: hci3: command 0x040f tx timeout [ 600.234010][T12670] 8021q: adding VLAN 0 to HW filter on device bond0 [ 600.278131][ T4187] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 600.280160][ T4187] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 600.295725][T12670] 8021q: adding VLAN 0 to HW filter on device team0 [ 600.300875][T12841] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2643'. [ 600.302982][T12841] netlink: 'syz.6.2643': attribute type 3 has an invalid length. [ 600.337962][ T5790] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 600.432545][ T5790] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 600.482223][ T5790] bridge0: port 1(bridge_slave_0) entered blocking state [ 600.483921][ T5790] bridge0: port 1(bridge_slave_0) entered forwarding state [ 600.539736][ T5790] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 600.548608][ T5790] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 600.564527][ T5790] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 600.870393][ T5790] bridge0: port 2(bridge_slave_1) entered blocking state [ 600.872079][ T5790] bridge0: port 2(bridge_slave_1) entered forwarding state [ 601.543377][ T5790] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 601.550125][ T5790] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 601.604104][ T5790] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 601.607068][ T5790] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 601.610051][ T5790] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 601.613538][ T5790] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 601.615848][ T5790] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 601.621216][ T5790] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 601.643311][ T5790] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 601.652118][ T5790] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 601.667689][T12670] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 601.884665][ T5790] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 601.907271][T12873] sp0: Synchronizing with TNC [ 601.934825][T12878] netlink: 'syz.5.2649': attribute type 39 has an invalid length. [ 602.049023][T12896] udc-core: couldn't find an available UDC or it's busy [ 602.050639][T12896] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 602.113059][ T13] Bluetooth: hci3: command 0x0419 tx timeout [ 602.153859][ T5790] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 602.156677][ T5790] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 602.168249][T12670] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 602.517737][ T5792] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 602.532419][ T5792] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 602.621928][ T5792] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 602.624515][ T5792] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 602.627472][T12670] device veth0_vlan entered promiscuous mode [ 602.637143][ T5792] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 602.639223][ T5792] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 602.660831][T12670] device veth1_vlan entered promiscuous mode [ 602.739704][T12915] vxcan0: tx drop: invalid sa for name 0x0000000000000003 [ 602.870050][T12670] device veth0_macvtap entered promiscuous mode [ 602.883986][T12670] device veth1_macvtap entered promiscuous mode [ 602.949294][T12670] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 602.961764][T12670] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 602.979792][T12670] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 602.993099][T12920] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2657'. [ 602.995232][T12920] netlink: 'syz.5.2657': attribute type 3 has an invalid length. [ 602.998201][ T380] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 603.000593][ T380] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 603.005922][ T380] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 603.205346][ T380] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 603.853230][ T380] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 603.874143][ T380] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 603.885187][ T380] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 603.895730][ T380] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 603.922883][T12670] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 603.925235][T12670] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 603.927298][T12670] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 603.929531][T12670] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 603.960906][T12670] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 603.970701][T12289] bridge0: port 3(syz_tun) entered disabled state [ 604.007857][T12289] device syz_tun left promiscuous mode [ 604.009123][T12289] bridge0: port 3(syz_tun) entered disabled state [ 604.084821][ T380] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 604.087221][ T380] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 604.092690][T12670] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 604.094695][T12670] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 604.096473][T12670] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 604.098411][T12670] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 604.122776][T12932] sp0: Synchronizing with TNC [ 604.229493][ T5792] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 604.238326][ T5792] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 604.252210][ T5788] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 604.268059][ T5788] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 604.270114][ T5788] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 604.287964][ T5788] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 604.418236][T12944] udc-core: couldn't find an available UDC or it's busy [ 604.426993][T12944] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 605.718248][ T5780] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 605.732106][T12947] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2669'. [ 605.734096][T12947] bond0: option min_links: invalid value (18446744073678028800) [ 605.735884][T12947] bond0: option min_links: allowed values 0 - 2147483647 [ 605.825526][ T5780] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 605.927264][ T5780] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 606.009644][ T5780] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 606.036928][T12954] netdevsim netdevsim8 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 606.038983][T12954] netdevsim netdevsim8 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 606.040979][T12954] netdevsim netdevsim8 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 606.042980][T12954] netdevsim netdevsim8 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 606.074794][T12960] netlink: 'syz.3.2671': attribute type 1 has an invalid length. [ 606.076752][T12960] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2671'. [ 606.453465][T12970] sp0: Synchronizing with TNC [ 606.583184][T12988] wlan1 speed is unknown, defaulting to 1000 [ 607.777231][T12988] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2681'. [ 607.962229][T13037] sp0: Synchronizing with TNC [ 608.207774][T13052] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2694'. [ 608.210051][T13052] netlink: 'syz.3.2694': attribute type 3 has an invalid length. [ 608.566155][T13062] netdevsim netdevsim6 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 608.569332][T13062] netdevsim netdevsim6 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 608.573182][T13062] netdevsim netdevsim6 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 608.576168][T13062] netdevsim netdevsim6 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 608.695617][T13070] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2702'. [ 608.713800][T13070] bond0: option min_links: invalid value (18446744073678028800) [ 608.715608][T13070] bond0: option min_links: allowed values 0 - 2147483647 [ 608.894739][ T5780] device hsr_slave_0 left promiscuous mode [ 608.988317][ T5780] device hsr_slave_1 left promiscuous mode [ 609.152914][T13077] vxcan0: tx drop: invalid sa for name 0x0000000000000003 [ 609.302045][ T5780] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 609.303922][ T5780] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 609.308890][ T5780] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 609.317367][ T5780] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 609.327019][ T5780] device bridge_slave_1 left promiscuous mode [ 609.328670][ T5780] bridge0: port 2(bridge_slave_1) entered disabled state [ 609.376606][ T5780] device bridge_slave_0 left promiscuous mode [ 609.378221][ T5780] bridge0: port 1(bridge_slave_0) entered disabled state [ 609.482105][ T5780] device veth1_macvtap left promiscuous mode [ 609.483699][ T5780] device veth0_macvtap left promiscuous mode [ 609.485163][ T5780] device veth1_vlan left promiscuous mode [ 609.502160][ T5780] device veth0_vlan left promiscuous mode [ 609.864006][T13114] No such timeout policy "syz0" [ 609.959366][ T5780] bond1 (unregistering): Released all slaves [ 610.143778][ T5780] team0 (unregistering): Port device team_slave_1 removed [ 610.152385][ T5780] team0 (unregistering): Port device team_slave_0 removed [ 610.160176][ T5780] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 610.209318][ T5780] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 610.352963][ T5780] bond0 (unregistering): Released all slaves [ 611.196719][T13156] vxcan0: tx drop: invalid sa for name 0x0000000000000003 [ 611.860452][T13192] vxcan0: tx drop: invalid sa for name 0x0000000000000003 [ 612.834735][T11965] Bluetooth: hci1: link tx timeout [ 612.835867][T11965] Bluetooth: hci1: killing stalled connection 10:aa:aa:aa:aa:aa [ 612.837474][T11965] Bluetooth: hci1: link tx timeout [ 612.838684][T11965] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 613.579449][T13247] netlink: 'syz.6.2751': attribute type 29 has an invalid length. [ 613.582068][T13247] netlink: 'syz.6.2751': attribute type 29 has an invalid length. [ 613.583974][T13243] netlink: 'syz.6.2751': attribute type 29 has an invalid length. [ 613.729310][T13251] vxcan0: tx drop: invalid sa for name 0x0000000000000003 [ 614.100967][T13264] netlink: 20 bytes leftover after parsing attributes in process `syz.8.2755'. [ 614.109056][T13264] netlink: 20 bytes leftover after parsing attributes in process `syz.8.2755'. [ 615.211740][T13291] netlink: 'syz.6.2761': attribute type 8 has an invalid length. [ 615.279011][T13293] sp0: Synchronizing with TNC [ 615.342384][T13300] udc-core: couldn't find an available UDC or it's busy [ 615.343938][T13300] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 615.957850][T13330] wlan1 speed is unknown, defaulting to 1000 [ 615.989659][T13336] vxcan0: tx drop: invalid sa for name 0x0000000000000003 [ 616.121289][T13341] sp0: Synchronizing with TNC [ 616.227338][T13346] device bond0 entered promiscuous mode [ 616.228677][T13346] device bond_slave_0 entered promiscuous mode [ 616.230146][T13346] device bond_slave_1 entered promiscuous mode [ 616.253552][T13345] device bond0 left promiscuous mode [ 616.254785][T13345] device bond_slave_0 left promiscuous mode [ 616.258525][T13345] device bond_slave_1 left promiscuous mode [ 617.017097][T13368] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2785'. [ 617.149672][T13376] udc-core: couldn't find an available UDC or it's busy [ 617.157772][T13376] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 617.547983][T13384] vxcan0: tx drop: invalid sa for name 0x0000000000000003 [ 617.561758][ T3604] Bluetooth: hci2: command 0x2066 tx timeout [ 617.808283][T13392] sp0: Synchronizing with TNC [ 618.054137][T13411] vxcan0: tx drop: invalid sa for name 0x0000000000000003 [ 618.233403][T13422] udc-core: couldn't find an available UDC or it's busy [ 618.248510][T13422] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 618.529067][T13434] sp0: Synchronizing with TNC [ 618.712269][T13442] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2813'. [ 618.745878][T13444] vxcan0: tx drop: invalid sa for name 0x0000000000000003 [ 619.136678][T13460] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 619.185722][T13464] sp0: Synchronizing with TNC [ 619.368517][T13475] vxcan0: tx drop: invalid sa for name 0x0000000000000003 [ 619.476739][T13479] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2828'. [ 619.485629][T13479] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2828'. [ 619.613506][T13483] device macsec1 entered promiscuous mode [ 619.620579][T13483] device bridge0 entered promiscuous mode [ 619.635056][T13483] bridge0: port 3(macsec1) entered blocking state [ 619.643534][T13483] bridge0: port 3(macsec1) entered disabled state [ 619.677708][T13483] device bridge0 left promiscuous mode [ 619.712523][T13486] udc-core: couldn't find an available UDC or it's busy [ 619.714106][T13486] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 620.050998][T13495] sp0: Synchronizing with TNC [ 621.182743][T13525] sp0: Synchronizing with TNC [ 621.430790][T13527] wlan1 speed is unknown, defaulting to 1000 [ 621.490821][T13529] sch_tbf: peakrate 64 is lower than or equals to rate 4294967295 ! [ 621.554975][T13532] udc-core: couldn't find an available UDC or it's busy [ 621.556541][T13532] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 621.594736][T13534] vxcan0: tx drop: invalid sa for name 0x0000000000000003 [ 622.349990][T13553] sp0: Synchronizing with TNC [ 622.594630][ T2055] ieee802154 phy1 wpan1: encryption failed: -22 [ 622.880149][T13578] udc-core: couldn't find an available UDC or it's busy [ 622.881907][T13578] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 623.129518][T13599] vxcan0: tx drop: invalid sa for name 0x0000000000000003 [ 623.148133][T13600] sp0: Synchronizing with TNC [ 623.496637][T13610] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2880'. [ 623.574511][T13610] IPVS: length: 60 != 8 [ 623.673061][T13613] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2882'. [ 624.217370][T13631] sp0: Synchronizing with TNC [ 624.363714][T13639] vxcan0: tx drop: invalid sa for name 0x0000000000000003 [ 624.470937][T13645] udc-core: couldn't find an available UDC or it's busy [ 624.491779][T13645] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 624.969981][T13666] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2896'. [ 625.681118][T13688] wlan1 speed is unknown, defaulting to 1000 [ 626.128900][T13703] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2902'. [ 626.131099][T13703] netlink: 'syz.4.2902': attribute type 3 has an invalid length. [ 626.464833][T13688] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2900'. [ 628.587470][T13736] vxcan0: tx drop: invalid sa for name 0x0000000000000003 [ 630.262323][T13774] wlan1 speed is unknown, defaulting to 1000 [ 630.469446][T13786] netlink: 'syz.6.2922': attribute type 1 has an invalid length. [ 630.479701][T13782] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2920'. [ 630.481766][T13782] netlink: 'syz.3.2920': attribute type 3 has an invalid length. [ 630.506215][T13786] device batadv1 entered promiscuous mode [ 630.512261][T13786] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 630.839329][T13774] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2921'. [ 633.193514][T13840] vxcan0: tx drop: invalid sa for name 0x0000000000000003 [ 633.910511][T13850] wlan1 speed is unknown, defaulting to 1000 [ 634.323473][T13873] udc-core: couldn't find an available UDC or it's busy [ 634.325148][T13873] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 634.413569][T13850] chnl_net:caif_netlink_parms(): no params data found [ 634.719445][T13850] bridge0: port 1(bridge_slave_0) entered blocking state [ 634.740956][T13850] bridge0: port 1(bridge_slave_0) entered disabled state [ 634.753955][T13850] device bridge_slave_0 entered promiscuous mode [ 634.762878][T13850] bridge0: port 2(bridge_slave_1) entered blocking state [ 634.773586][T13850] bridge0: port 2(bridge_slave_1) entered disabled state [ 634.795796][T13850] device bridge_slave_1 entered promiscuous mode [ 635.561600][ T13] Bluetooth: hci0: command 0x0409 tx timeout [ 635.664406][T13850] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 635.668485][T13850] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 635.818987][T13850] team0: Port device team_slave_0 added [ 635.836798][T13850] team0: Port device team_slave_1 added [ 635.938725][T13850] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 635.940529][T13850] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 635.962005][T13850] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 635.966130][T13850] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 635.967962][T13850] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 635.988971][T13850] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 636.140824][T13850] device hsr_slave_0 entered promiscuous mode [ 636.193544][T13850] device hsr_slave_1 entered promiscuous mode [ 636.212991][T13850] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 636.214642][T13850] Cannot create hsr debugfs directory [ 636.813175][T13850] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 636.815687][T13850] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 636.885544][T13850] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 636.892371][T13850] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 636.951710][T13850] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 636.956530][T13850] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 637.028237][T13850] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 637.030912][T13850] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 637.497763][T13946] udc-core: couldn't find an available UDC or it's busy [ 637.499312][T13946] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 637.547029][T13850] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 637.573359][T13850] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 637.593373][T13850] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 637.731723][T13951] bond0: (slave bond_slave_0): Slave does not support ipsec offload [ 637.752151][ T4073] Bluetooth: hci0: command 0x041b tx timeout [ 637.755719][ T5780] tipc: Left network mode [ 637.757732][T13850] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 639.145743][T13970] vxcan0: tx drop: invalid sa for name 0x0000000000000003 [ 639.291833][T13850] 8021q: adding VLAN 0 to HW filter on device bond0 [ 639.313091][T13972] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2957'. [ 639.317741][ T5784] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 639.319980][ T5784] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 639.354428][T13976] sp0: Synchronizing with TNC [ 639.356685][T13850] 8021q: adding VLAN 0 to HW filter on device team0 [ 639.363882][T13972] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2957'. [ 639.371815][ T5784] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 639.374388][ T5784] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 639.376778][ T5784] bridge0: port 1(bridge_slave_0) entered blocking state [ 639.378449][ T5784] bridge0: port 1(bridge_slave_0) entered forwarding state [ 639.380703][ T5784] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 639.441180][ T5784] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 639.452111][ T5784] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 639.454625][ T5784] bridge0: port 2(bridge_slave_1) entered blocking state [ 639.456211][ T5784] bridge0: port 2(bridge_slave_1) entered forwarding state [ 639.458475][ T5784] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 639.461085][ T5784] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 639.465022][ T5784] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 639.469571][ T5784] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 639.473581][ T5784] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 639.490001][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 639.493258][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 639.499606][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 639.503109][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 639.510621][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 639.518686][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 639.531137][T13850] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 639.999790][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 640.002605][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 640.072974][T13850] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 640.247710][ T4187] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 640.250253][ T4187] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 640.275692][T13850] device veth0_vlan entered promiscuous mode [ 640.277892][ T4187] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 640.280497][ T4187] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 640.288937][ T4187] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 640.291436][ T4187] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 640.318047][T13850] device veth1_vlan entered promiscuous mode [ 640.338443][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 640.340853][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 640.343903][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 640.346499][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 640.354059][T13850] device veth0_macvtap entered promiscuous mode [ 640.359153][T13850] device veth1_macvtap entered promiscuous mode [ 640.370696][T13850] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 640.375207][T13850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 640.379373][T13850] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 640.381241][ T4187] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 640.384026][ T4187] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 640.386376][ T4187] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 640.389373][ T4187] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 640.395379][T13850] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 640.399944][T13850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 640.404155][T13850] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 640.409620][T13850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 640.413524][T13850] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 640.426111][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 640.428781][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 640.441902][T13850] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 640.443776][T13850] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 640.445682][T13850] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 640.447575][T13850] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 640.556882][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 640.558849][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 640.563429][ T5801] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 640.589886][ T5801] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 640.595826][ T5801] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 640.600019][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 640.645546][T14004] netlink: 36 bytes leftover after parsing attributes in process `syz.8.2964'. [ 640.699319][ T4078] wlan1 speed is unknown, defaulting to 1000 [ 641.161587][T14014] vxcan0: tx drop: invalid sa for name 0x0000000000000003 [ 641.170802][T14010] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2935'. [ 641.173105][T14010] netlink: 'syz.4.2935': attribute type 3 has an invalid length. [ 641.500475][ T5780] device hsr_slave_0 left promiscuous mode [ 641.541314][ T5780] device hsr_slave_1 left promiscuous mode [ 641.611771][ T5780] batman_adv: batadv0: Interface deactivated: geneve3 [ 641.613512][ T5780] batman_adv: batadv0: Removing interface: geneve3 [ 641.962212][ T5780] device veth1_macvtap left promiscuous mode [ 641.966241][ T5780] device veth0_macvtap left promiscuous mode [ 641.967812][ T5780] device veth1_vlan left promiscuous mode [ 641.973632][ T5780] device veth0_vlan left promiscuous mode [ 642.674473][ T5780] bond0 (unregistering): Released all slaves [ 644.668058][T14063] sp0: Synchronizing with TNC [ 644.875227][T14067] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2988'. [ 644.942750][T14080] vxcan0: tx drop: invalid sa for name 0x0000000000000003 [ 647.972964][T14125] netdevsim netdevsim5 netdevsim0: set [1, 1] type 2 family 0 port 6081 - 0 [ 647.983705][T14125] netdevsim netdevsim5 netdevsim1: set [1, 1] type 2 family 0 port 6081 - 0 [ 647.985734][T14125] netdevsim netdevsim5 netdevsim2: set [1, 1] type 2 family 0 port 6081 - 0 [ 648.263773][T14125] netdevsim netdevsim5 netdevsim3: set [1, 1] type 2 family 0 port 6081 - 0 [ 649.998914][T14157] vxcan0: tx drop: invalid sa for name 0x0000000000000003 [ 650.184761][T14160] sp0: Synchronizing with TNC [ 651.667053][T14192] vxcan0: tx drop: invalid sa for name 0x0000000000000003 [ 652.702403][T14205] sp0: Synchronizing with TNC [ 652.742301][T13230] Bluetooth: hci3: command 0x0405 tx timeout [ 653.853259][T14231] udc-core: couldn't find an available UDC or it's busy [ 653.854918][T14231] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 654.547795][T14252] sp0: Synchronizing with TNC [ 654.652614][T14255] vxcan0: tx drop: invalid sa for name 0x0000000000000003 [ 655.735852][T14265] netlink: 'syz.3.3056': attribute type 4 has an invalid length. [ 656.776452][T14283] vxcan0: tx drop: invalid sa for name 0x0000000000000003 [ 656.792371][T14281] sp0: Synchronizing with TNC [ 657.200625][T14293] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3067'. [ 658.826378][T14323] sp0: Synchronizing with TNC [ 660.211778][T14351] sp0: Synchronizing with TNC [ 661.397910][T14369] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 667.100550][T14456] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3127'. [ 667.464555][T14470] device ip6gretap0 entered promiscuous mode [ 667.492489][T14470] device batadv_slave_0 entered promiscuous mode [ 668.420208][T14488] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3139'. [ 672.212316][T14557] vxcan0: tx drop: invalid sa for name 0x0000000000000003 [ 674.405792][T14615] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3184'. [ 674.407890][T14615] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3184'. [ 674.439771][T14615] device gtp0 entered promiscuous mode [ 674.480087][T14618] device geneve2 entered promiscuous mode [ 674.879037][T14637] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 675.205675][T14645] vxcan0: tx drop: invalid sa for name 0x0000000000000003 [ 675.879573][T14697] netlink: 'syz.5.3222': attribute type 2 has an invalid length. [ 675.885874][T14697] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3222'. [ 675.899194][T14697] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 675.920706][T14699] tipc: Started in network mode [ 675.922105][T14699] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 675.924524][T14699] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 675.927073][T14699] tipc: Enabled bearer , priority 10 [ 677.041813][ T4073] tipc: Node number set to 1 [ 677.151824][ T4024] Bluetooth: hci1: link tx timeout [ 677.153046][ T4024] Bluetooth: hci1: killing stalled connection 10:aa:aa:aa:aa:aa [ 677.154734][ T4024] Bluetooth: hci1: link tx timeout [ 677.155836][ T4024] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 677.159552][T14779] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3256'. [ 677.333613][T14793] udc-core: couldn't find an available UDC or it's busy [ 677.335132][T14793] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 677.516792][T14804] netlink: 'syz.3.3269': attribute type 2 has an invalid length. [ 677.679549][T14811] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3273'. [ 677.682377][T14811] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 677.720138][T14815] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3274'. [ 678.037871][T14840] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3286'. [ 678.297371][T14833] infiniband syz0: set active [ 678.301776][T14833] infiniband syz0: added veth0_vlan [ 679.032169][T14833] infiniband syz0: Couldn't open port 1 [ 679.101189][T14856] udc-core: couldn't find an available UDC or it's busy [ 679.115110][T14833] RDS/IB: syz0: added [ 679.116041][T14833] smc: adding ib device syz0 with port count 1 [ 679.117388][T14833] smc: ib device syz0 port 1 has pnetid [ 679.133930][T14856] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 679.349027][T14867] device vlan2 entered promiscuous mode [ 679.350320][T14867] device bond0 entered promiscuous mode [ 679.362143][T14867] device bond_slave_0 entered promiscuous mode [ 679.363625][T14867] device bond_slave_1 entered promiscuous mode [ 679.365493][T14867] device wlan1 entered promiscuous mode [ 679.367271][T14867] IPv6: ADDRCONF(NETDEV_CHANGE): vlan2: link becomes ready [ 679.369272][ T5788] IPv6: ADDRCONF(NETDEV_CHANGE): vlan2: link becomes ready [ 679.433397][T14873] dccp_close: ABORT with 278 bytes unread [ 679.467019][T14877] device vlan0 entered promiscuous mode [ 679.487941][T14877] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check. [ 679.574938][T14881] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3304'. [ 679.582797][T14881] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3304'. [ 679.634027][T14881] device team0 entered promiscuous mode [ 679.636571][T14881] device team_slave_0 entered promiscuous mode [ 679.638668][T14881] device team_slave_1 entered promiscuous mode [ 679.648372][T14887] netlink: 'syz.6.3307': attribute type 3 has an invalid length. [ 679.705407][T14881] device gretap0 entered promiscuous mode [ 679.732237][T14894] vxcan0: tx drop: invalid sa for name 0x0000000000000003 [ 679.743477][ T5801] IPv6: ADDRCONF(NETDEV_CHANGE): hsr2: link becomes ready [ 680.269624][T14924] udc-core: couldn't find an available UDC or it's busy [ 680.271476][T14924] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 681.743848][T15016] udc-core: couldn't find an available UDC or it's busy [ 681.745518][T15016] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 682.043810][T15041] IPv6: Can't replace route, no match found [ 683.140164][T15088] udc-core: couldn't find an available UDC or it's busy [ 683.171395][T15088] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 684.043043][ T2055] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.620138][T15205] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3421'. [ 686.659321][T15206] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 687.388716][T15234] netlink: 48 bytes leftover after parsing attributes in process `syz.6.3436'. [ 687.538194][T15245] netlink: 32 bytes leftover after parsing attributes in process `syz.6.3440'. [ 687.843093][T15263] udc-core: couldn't find an available UDC or it's busy [ 687.844735][T15263] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 688.757971][T15237] chnl_net:caif_netlink_parms(): no params data found [ 689.582162][ T3604] Bluetooth: hci4: command 0x0409 tx timeout [ 689.873290][T15237] bridge0: port 1(bridge_slave_0) entered blocking state [ 689.875013][T15237] bridge0: port 1(bridge_slave_0) entered disabled state [ 689.882456][T15237] device bridge_slave_0 entered promiscuous mode [ 689.899091][T15237] bridge0: port 2(bridge_slave_1) entered blocking state [ 689.918197][T15237] bridge0: port 2(bridge_slave_1) entered disabled state [ 689.932650][T15237] device bridge_slave_1 entered promiscuous mode [ 690.023752][T15237] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 690.053631][T15237] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 690.187060][T15237] team0: Port device team_slave_0 added [ 690.206004][T15237] team0: Port device team_slave_1 added [ 690.332671][T15237] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 690.334356][T15237] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 690.340122][T15237] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 690.344074][T15237] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 690.345731][T15237] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 690.362720][T15237] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 690.452354][T15237] device hsr_slave_0 entered promiscuous mode [ 690.582460][T15237] device hsr_slave_1 entered promiscuous mode [ 690.672206][T15237] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 690.673984][T15237] Cannot create hsr debugfs directory [ 690.676239][T15329] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3473'. [ 690.678280][T15329] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3473'. [ 691.641814][T13230] Bluetooth: hci4: command 0x041b tx timeout [ 691.740954][T15237] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 691.757894][T15237] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 691.825411][T15237] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 691.827696][T15237] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 691.975446][T15237] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 691.977859][T15237] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 692.196817][T15361] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3487'. [ 692.198903][T15361] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3487'. [ 692.629520][T15237] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 692.637497][T15237] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 694.063349][ T3604] Bluetooth: hci4: command 0x040f tx timeout [ 694.271757][T15237] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 694.323300][T15237] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 694.354044][T15237] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 694.383936][T15237] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 694.629313][T15237] 8021q: adding VLAN 0 to HW filter on device bond0 [ 694.648276][T15004] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 694.650558][T15004] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 694.667484][T15237] 8021q: adding VLAN 0 to HW filter on device team0 [ 694.713515][ T5792] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 694.716075][ T5792] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 694.732060][ T5792] bridge0: port 1(bridge_slave_0) entered blocking state [ 694.733840][ T5792] bridge0: port 1(bridge_slave_0) entered forwarding state [ 694.739164][ T5792] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 694.744662][ T5792] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 694.749041][ T5792] bridge0: port 2(bridge_slave_1) entered blocking state [ 694.750765][ T5792] bridge0: port 2(bridge_slave_1) entered forwarding state [ 694.757227][ T5792] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 694.764356][ T5792] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 694.770154][ T5792] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 694.779131][ T5792] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 694.798931][ T5792] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 694.822771][ T5792] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 694.825051][ T5792] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 694.828436][ T5792] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 694.831004][ T5792] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 694.833910][ T5792] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 694.836240][ T5792] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 694.838580][ T5792] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 694.844039][T15237] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 695.176098][ T4369] bond1: (slave ip6gretap1): Removing an active aggregator [ 695.202664][ T4369] bond1: (slave ip6gretap1): Releasing backup interface [ 695.675895][T15423] IPv6: syztnl0: Disabled Multicast RS [ 695.677720][T15424] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3505'. [ 695.679676][T15424] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3505'. [ 695.748735][T15432] netlink: 'syz.8.3507': attribute type 1 has an invalid length. [ 695.752855][T15432] netlink: 'syz.8.3507': attribute type 2 has an invalid length. [ 695.754720][T15432] netlink: 'syz.8.3507': attribute type 1 has an invalid length. [ 695.772136][ T5784] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 695.774004][ T5784] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 695.794728][T15237] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 695.872829][T15441] IPVS: sync thread started: state = BACKUP, mcast_ifn = gre0, syncid = -1, id = 0 [ 696.122584][T13230] Bluetooth: hci4: command 0x0419 tx timeout [ 696.339240][T15003] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 696.342182][T15003] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 697.046910][ T5792] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 697.049529][ T5792] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 697.136910][ T5792] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 697.139051][ T5792] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 697.170864][T15237] device veth0_vlan entered promiscuous mode [ 697.200918][T15237] device veth1_vlan entered promiscuous mode [ 697.298894][T15003] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 697.302032][T15003] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 697.314622][T15237] device veth0_macvtap entered promiscuous mode [ 697.349647][T15237] device veth1_macvtap entered promiscuous mode [ 697.372222][T15474] netlink: 96 bytes leftover after parsing attributes in process `syz.3.3524'. [ 697.976831][T15237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 698.223213][T15237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 698.225398][T15237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 698.227724][T15237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 698.272844][T15237] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 698.274913][ T5801] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 698.277251][ T5801] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 698.279509][ T5801] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 698.285180][ T5801] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 698.510630][T15237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 698.514645][T15237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 698.517250][T15237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 698.528823][T15237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 698.531243][T15237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 698.535608][T15237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 698.539071][T15237] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 698.543865][T15488] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3526'. [ 698.545870][T15488] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3526'. [ 698.550525][T15237] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 698.555006][T15237] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 698.556984][T15237] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 698.558952][T15237] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 698.579684][T15494] device bridge0 entered promiscuous mode [ 698.590945][T15494] device macsec1 entered promiscuous mode [ 698.682552][T15494] bridge0: port 3(macsec1) entered blocking state [ 698.684784][T15494] bridge0: port 3(macsec1) entered disabled state [ 698.694174][T15494] device bridge0 left promiscuous mode [ 698.730648][T15003] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 698.733531][T15003] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 698.863296][ T5778] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 698.867470][ T5778] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 698.929460][ T1753] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 698.961131][ T5801] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 698.965481][ T5801] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 698.973125][ T5771] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 699.083272][T15507] netlink: 'syz.3.3535': attribute type 8 has an invalid length. [ 699.136409][T15515] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 700.278464][ T4369] device hsr_slave_0 left promiscuous mode [ 700.325086][ T4369] device hsr_slave_1 left promiscuous mode [ 700.592287][ T4369] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 700.594600][ T4369] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 700.596857][ T4369] device bridge_slave_1 left promiscuous mode [ 700.598346][ T4369] bridge0: port 2(bridge_slave_1) entered disabled state [ 700.674802][ T4369] device bridge_slave_0 left promiscuous mode [ 700.676482][ T4369] bridge0: port 1(bridge_slave_0) entered disabled state [ 701.041423][ T4369] bond1 (unregistering): Released all slaves [ 701.193883][ T4369] team0 (unregistering): Port device team_slave_1 removed [ 701.204712][ T4369] team0 (unregistering): Port device team_slave_0 removed [ 701.219983][ T4369] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 701.271190][ T4369] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 701.381361][ T4369] team0 (unregistering): Port device bond0 removed [ 701.420186][ T4369] bond0 (unregistering): Released all slaves [ 701.710694][T15596] netlink: 224 bytes leftover after parsing attributes in process `syz.5.3563'. [ 701.717381][T15596] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3563'. [ 702.170359][T15616] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3569'. [ 702.172539][T15616] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3569'. [ 704.069382][T15693] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3594'. [ 704.183129][T15707] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3600'. [ 705.019290][T15735] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3609'. [ 705.031738][T15735] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 705.033624][T15735] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 705.052306][T15735] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 705.068762][T15735] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 705.389204][T15753] rdma_rxe: ignoring netdev event = 26 for veth0_vlan [ 705.400707][T15753] rdma_rxe: ignoring netdev event = 21 for veth0_vlan [ 706.937977][T15787] netlink: 'syz.5.3629': attribute type 1 has an invalid length. [ 707.043985][T15799] sch_tbf: burst 0 is lower than device lo mtu (11337746) ! [ 707.228704][T15811] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 707.285218][T15813] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input12 [ 709.254597][T15862] tipc: Started in network mode [ 709.255851][T15862] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 709.257871][T15862] tipc: New replicast peer: 0000:0000:0000:0000:0000:0000:0000:0001 [ 709.261188][T15862] tipc: Enabled bearer , priority 10 [ 709.268304][T15870] sch_tbf: burst 0 is lower than device lo mtu (11337746) ! [ 709.278790][ T4187] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 709.281063][ T4187] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 709.339372][ T4187] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 709.352332][ T4187] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 709.412988][ T4187] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 709.417489][ T4187] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 709.478431][ T4187] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 709.481128][ T4187] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 709.652789][T15837] chnl_net:caif_netlink_parms(): no params data found [ 709.768644][T15837] bridge0: port 1(bridge_slave_0) entered blocking state [ 709.770402][T15837] bridge0: port 1(bridge_slave_0) entered disabled state [ 709.775257][T15837] device bridge_slave_0 entered promiscuous mode [ 709.792593][T15837] bridge0: port 2(bridge_slave_1) entered blocking state [ 709.797812][T15837] bridge0: port 2(bridge_slave_1) entered disabled state [ 709.800051][T15837] device bridge_slave_1 entered promiscuous mode [ 709.868291][T15837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 709.888709][T15837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 710.056066][T15837] team0: Port device team_slave_0 added [ 710.066165][T15837] team0: Port device team_slave_1 added [ 710.089378][T15837] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 710.091144][T15837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 710.111762][ T1534] Bluetooth: hci5: command 0x0409 tx timeout [ 710.131975][T15837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 710.172368][T15915] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3666'. [ 710.174493][T15915] netlink: 20 bytes leftover after parsing attributes in process `syz.8.3666'. [ 710.180197][T15837] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 710.188835][T15837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 710.213373][T15837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 710.317831][T15837] device hsr_slave_0 entered promiscuous mode [ 710.354619][T15837] device hsr_slave_1 entered promiscuous mode [ 710.371882][T15837] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 710.374379][T15837] Cannot create hsr debugfs directory [ 710.381993][ T4078] tipc: Node number set to 1 [ 710.451269][T15940] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 710.682885][T15944] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3675'. [ 710.685051][T15944] netlink: 'syz.4.3675': attribute type 2 has an invalid length. [ 711.450934][ T4187] bond0: (slave wlan1): Releasing backup interface [ 711.492610][ T4187] device wlan1 left promiscuous mode [ 711.929311][ T4187] device hsr_slave_0 left promiscuous mode [ 711.993360][ T4187] device hsr_slave_1 left promiscuous mode [ 712.101749][ T4187] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 712.104811][ T4187] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 712.106670][ T4187] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 712.114443][ T4187] device bond0 left promiscuous mode [ 712.115725][ T4187] device bond_slave_0 left promiscuous mode [ 712.117121][ T4187] device bond_slave_1 left promiscuous mode [ 712.192405][ T4078] Bluetooth: hci5: command 0x041b tx timeout [ 712.232933][ T4187] device veth1_macvtap left promiscuous mode [ 712.235776][ T4187] device veth0_macvtap left promiscuous mode [ 712.237436][ T4187] device veth1_vlan left promiscuous mode [ 712.238820][ T4187] device veth0_vlan left promiscuous mode [ 712.354575][T16062] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3699'. [ 712.592045][ T4187] team0 (unregistering): Port device bridge1 removed [ 712.741561][ T4187] team0 (unregistering): Port device team_slave_1 removed [ 712.750771][ T4187] team0 (unregistering): Port device team_slave_0 removed [ 712.760454][ T4187] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 712.818572][ T4187] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 712.959584][ T4187] bond0 (unregistering): Released all slaves [ 712.982016][T16070] netem: change failed [ 713.041457][T15837] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 713.055400][T16075] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3704'. [ 713.096688][T15837] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 713.203678][T15837] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 713.303590][T15837] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 713.476852][T16097] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3708'. [ 713.536583][T15837] 8021q: adding VLAN 0 to HW filter on device bond0 [ 713.562972][ T5788] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 713.567259][ T5788] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 713.574809][T15837] 8021q: adding VLAN 0 to HW filter on device team0 [ 713.589386][T15004] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 713.592388][T15004] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 713.594709][T15004] bridge0: port 1(bridge_slave_0) entered blocking state [ 713.596327][T15004] bridge0: port 1(bridge_slave_0) entered forwarding state [ 713.599943][T15004] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 713.613290][T15004] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 713.619013][T15004] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 713.624631][T15004] bridge0: port 2(bridge_slave_1) entered blocking state [ 713.626349][T15004] bridge0: port 2(bridge_slave_1) entered forwarding state [ 713.630188][T15004] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 713.650571][T15004] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 713.654657][T15004] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 713.664636][T15004] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 713.667223][T15004] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 713.671328][T15004] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 713.682519][T15837] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 713.684997][T15837] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 713.688741][T15004] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 713.691104][T15004] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 713.694168][T15004] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 713.697940][T15004] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 713.700362][T15004] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 713.711057][T15004] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 713.895086][ T5788] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 713.897115][ T5788] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 713.934229][T15837] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 714.272001][ T7613] Bluetooth: hci5: command 0x040f tx timeout [ 714.333218][ T1753] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 714.335551][ T1753] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 714.426906][ T5801] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 714.429341][ T5801] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 714.432286][ T5801] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 714.438984][ T5801] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 714.449276][T15837] device veth0_vlan entered promiscuous mode [ 714.454377][T16168] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3720'. [ 714.470183][T15837] device veth1_vlan entered promiscuous mode [ 714.544043][ T5801] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 714.546229][ T5801] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 714.548352][ T5801] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 714.550721][ T5801] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 714.561965][T15837] device veth0_macvtap entered promiscuous mode [ 714.570012][T15837] device veth1_macvtap entered promiscuous mode [ 714.591655][T15837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 714.596390][T15837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 714.599166][T15837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 714.601694][T15837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 714.605509][T15837] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 714.608991][T15004] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 714.611177][T15004] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 714.678400][T15004] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 714.686121][T15004] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 714.777586][T15837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 714.780272][T15837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 714.783579][T15837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 714.789113][T15837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 714.797353][T15837] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 714.799739][ T5801] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 714.803146][ T5801] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 714.810523][T15837] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 714.812598][T15837] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 714.814552][T15837] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 714.818749][T15837] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 714.828710][T16179] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3724'. [ 714.925357][ T5788] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 714.933285][ T5788] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 714.951139][ T5792] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 714.989245][ T5788] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 714.991479][ T5788] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 715.008401][ T5792] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 715.059989][T16184] netlink: 'syz.5.3726': attribute type 33 has an invalid length. [ 715.062470][T16184] netlink: 160 bytes leftover after parsing attributes in process `syz.5.3726'. [ 715.469250][T16206] tap0: tun_chr_ioctl cmd 21731 [ 716.184798][T16248] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3745'. [ 716.351852][ T7613] Bluetooth: hci5: command 0x0419 tx timeout [ 716.568569][T16268] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3755'. [ 716.845340][T16271] Bluetooth: hci3: command 0x0406 tx timeout [ 717.096563][T16268] bridge0: port 2(bridge_slave_1) entered disabled state [ 717.098498][T16268] bridge0: port 1(bridge_slave_0) entered disabled state [ 717.821792][T16268] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 717.859364][T16268] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 718.554357][T16268] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 718.556409][T16268] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 718.558332][T16268] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 718.560141][T16268] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 718.623300][T16305] netlink: 'syz.8.3761': attribute type 3 has an invalid length. [ 718.625151][T16305] netlink: 32 bytes leftover after parsing attributes in process `syz.8.3761'. [ 718.646865][T16310] netlink: 20 bytes leftover after parsing attributes in process `syz.8.3761'. [ 718.648800][T16310] netlink: 10 bytes leftover after parsing attributes in process `syz.8.3761'. [ 718.658441][T16314] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3765'. [ 719.036297][T16332] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3769'. [ 719.287297][T16364] xt_l2tp: v2 doesn't support IP mode [ 719.420069][T16364] xt_limit: Overflow, try lower: 65536/2147483648 [ 721.118031][T16416] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3799'. [ 723.086179][ T4065] Bluetooth: hci5: command 0x0405 tx timeout [ 723.857525][T16478] tipc: Enabled bearer , priority 10 [ 723.881365][T16476] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3823'. [ 725.233336][T16508] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3835'. [ 725.267103][T16508] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3835'. [ 725.269186][T16508] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3835'. [ 725.273688][T16508] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3835'. [ 725.335147][T16508] smc: ib device syz0 ibport 1 applied user defined pnetid SYZ2 [ 725.337832][T16508] netlink: 'syz.4.3835': attribute type 10 has an invalid length. [ 725.340229][T16508] team0: Device hsr_slave_0 failed to register rx_handler [ 725.663482][T16544] device geneve2 left promiscuous mode [ 726.333417][T16549] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3851'. [ 726.348476][T16549] netlink: 'syz.5.3851': attribute type 2 has an invalid length. [ 726.355124][T16549] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3851'. [ 726.496812][T16544] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3845'. [ 726.900240][T16580] tipc: Started in network mode [ 726.903808][T16580] tipc: Node identity aaaaaaaaaa2a, cluster identity 4711 [ 726.907643][T16580] tipc: Enabled bearer , priority 10 [ 728.230026][ T4065] tipc: Node number set to 8432298 [ 729.105148][T16636] device netdevsim0 entered promiscuous mode [ 729.163932][T16636] device batadv_slave_0 entered promiscuous mode [ 729.213056][T16636] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 729.215015][T16636] Cannot create hsr debugfs directory [ 729.265016][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 729.557496][T16665] netlink: 'syz.6.3894': attribute type 10 has an invalid length. [ 729.591740][T16665] team0: Device netdevsim0 failed to register rx_handler [ 729.869735][T16680] netem: change failed [ 729.939561][T16684] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3902'. [ 729.979013][T16684] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3902'. [ 729.986855][T16684] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3902'. [ 729.988890][T16684] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3902'. [ 730.133795][T16697] netlink: 'syz.5.3902': attribute type 10 has an invalid length. [ 730.188816][T16697] team0: Device hsr_slave_0 failed to register rx_handler [ 730.333381][T16710] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 730.417708][T16719] netem: change failed [ 730.421231][T16720] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3913'. [ 732.151364][T16796] netlink: 'syz.4.3945': attribute type 4 has an invalid length. [ 733.249536][ T7613] Bluetooth: hci5: command 0x0407 tx timeout [ 733.422792][T16827] netlink: 104 bytes leftover after parsing attributes in process `syz.8.3959'. [ 733.441842][T16830] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3960'. [ 733.998739][T16859] netlink: 'syz.4.3971': attribute type 10 has an invalid length. [ 734.006140][T16859] device netdevsim0 entered promiscuous mode [ 734.009762][T16859] team0: Port device netdevsim0 added [ 734.014392][T16859] netlink: 'syz.4.3971': attribute type 10 has an invalid length. [ 734.034416][T16859] device netdevsim0 left promiscuous mode [ 734.037949][T16859] team0: Port device netdevsim0 removed [ 734.042129][T16859] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 734.044243][T16857] netlink: 48 bytes leftover after parsing attributes in process `syz.8.3967'. [ 735.952582][T16911] netlink: 48 bytes leftover after parsing attributes in process `syz.6.3992'. [ 737.074351][ T8771] ------------[ cut here ]------------ [ 737.075900][ T8771] sysfs group 'byte_queue_limits' not found for kobject 'tx-0' [ 737.077744][ T8771] WARNING: CPU: 1 PID: 8771 at fs/sysfs/group.c:281 sysfs_remove_group+0x174/0x288 [ 737.079805][ T8771] Modules linked in: [ 737.080672][ T8771] CPU: 1 PID: 8771 Comm: kbnepd bnep0 Not tainted 5.15.173-syzkaller #0 [ 737.082540][ T8771] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 737.084821][ T8771] pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 737.086681][ T8771] pc : sysfs_remove_group+0x174/0x288 [ 737.088091][ T8771] lr : sysfs_remove_group+0x174/0x288 [ 737.089387][ T8771] sp : ffff800021ee7830 [ 737.090280][ T8771] x29: ffff800021ee7830 x28: 1fffe0001da350bb x27: 0000000000000000 [ 737.092100][ T8771] x26: 0000000000000000 x25: 1fffe0001da35088 x24: 1ffff000026c5474 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 737.094040][ T8771] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000cf2af418 [ 737.095737][ T8771] x20: ffff0000f5707828 x19: ffff80001362aa80 x18: 0000000000000001 [ 737.097415][ T8771] x17: 0000000000000000 x16: ffff800011ab8a34 x15: 00000000ffffffff [ 737.099122][ T8771] x14: ffff0000d5b91b40 x13: 0000000000000001 x12: 0000000000000001 [ 737.100885][ T8771] x11: 0000000000000000 x10: 0000000000000000 x9 : 5ace0273890cf900 [ 737.102619][ T8771] x8 : 5ace0273890cf900 x7 : 0000000000000001 x6 : 0000000000000001 [ 737.104540][ T8771] x5 : ffff800021ee6f98 x4 : ffff800014ba05e0 x3 : ffff800008555e80 [ 737.106260][ T8771] x2 : 0000000000000001 x1 : 0000000100000000 x0 : 000000000000003c [ 737.108091][ T8771] Call trace: [ 737.108828][ T8771] sysfs_remove_group+0x174/0x288 [ 737.110001][ T8771] netdev_queue_update_kobjects+0x388/0x404 [ 737.111321][ T8771] netdev_unregister_kobject+0x100/0x204 [ 737.112551][ T8771] unregister_netdevice_many+0x12c8/0x189c [ 737.113838][ T8771] unregister_netdev+0x178/0x1f0 [ 737.114982][ T8771] bnep_session+0x2274/0x2424 [ 737.115943][ T8771] kthread+0x37c/0x45c [ 737.116883][ T8771] ret_from_fork+0x10/0x20 [ 737.117841][ T8771] irq event stamp: 7178 [ 737.118708][ T8771] hardirqs last enabled at (7177): [] __up_console_sem+0xb4/0x100 [ 737.120729][ T8771] hardirqs last disabled at (7178): [] el1_dbg+0x24/0x80 [ 737.122553][ T8771] softirqs last enabled at (7098): [] dev_mc_flush+0x1b4/0x1f8 [ 737.124448][ T8771] softirqs last disabled at (7096): [] local_bh_disable+0x10/0x34 [ 737.126463][ T8771] ---[ end trace d6fbfe410c4e5ca1 ]--- [ 737.131208][ T8771] ================================================================== [ 737.133259][ T8771] BUG: KASAN: use-after-free in device_for_each_child+0xa8/0x174 [ 737.134987][ T8771] Read of size 8 at addr ffff0000e8d49388 by task kbnepd bnep0/8771 [ 737.136834][ T8771] [ 737.137372][ T8771] CPU: 1 PID: 8771 Comm: kbnepd bnep0 Tainted: G W 5.15.173-syzkaller #0 [ 737.139534][ T8771] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 737.141763][ T8771] Call trace: [ 737.142453][ T8771] dump_backtrace+0x0/0x530 [ 737.143456][ T8771] show_stack+0x2c/0x3c [ 737.144379][ T8771] dump_stack_lvl+0x108/0x170 [ 737.145447][ T8771] print_address_description+0x7c/0x3f0 [ 737.146741][ T8771] kasan_report+0x174/0x1e4 [ 737.147800][ T8771] __asan_report_load8_noabort+0x44/0x50 [ 737.149112][ T8771] device_for_each_child+0xa8/0x174 [ 737.150302][ T8771] pm_runtime_set_memalloc_noio+0xf0/0x210 [ 737.151701][ T8771] netdev_unregister_kobject+0x144/0x204 [ 737.152943][ T8771] unregister_netdevice_many+0x12c8/0x189c [ 737.154163][ T8771] unregister_netdev+0x178/0x1f0 [ 737.155211][ T8771] bnep_session+0x2274/0x2424 [ 737.156114][ T8771] kthread+0x37c/0x45c [ 737.157010][ T8771] ret_from_fork+0x10/0x20 [ 737.158140][ T8771] [ 737.158775][ T8771] Allocated by task 7536: [ 737.159755][ T8771] ____kasan_kmalloc+0xbc/0xfc [ 737.160852][ T8771] __kasan_kmalloc+0x10/0x1c [ 737.161881][ T8771] __kmalloc+0x29c/0x4c8 [ 737.162972][ T8771] hci_alloc_dev_priv+0x30/0x18b0 [ 737.164062][ T8771] vhci_create_device+0xf8/0x568 [ 737.165196][ T8771] vhci_write+0x318/0x3b8 [ 737.166120][ T8771] vfs_write+0x884/0xb44 [ 737.167108][ T8771] ksys_write+0x15c/0x26c [ 737.168078][ T8771] __arm64_sys_write+0x7c/0x90 [ 737.169074][ T8771] invoke_syscall+0x98/0x2b8 [ 737.170056][ T8771] el0_svc_common+0x138/0x258 [ 737.171091][ T8771] do_el0_svc+0x58/0x14c [ 737.172087][ T8771] el0_svc+0x7c/0x1f0 [ 737.172979][ T8771] el0t_64_sync_handler+0x84/0xe4 [ 737.174195][ T8771] el0t_64_sync+0x1a0/0x1a4 [ 737.175163][ T8771] [ 737.175717][ T8771] Freed by task 10332: [ 737.176579][ T8771] kasan_set_track+0x4c/0x84 [ 737.177535][ T8771] kasan_set_free_info+0x28/0x4c [ 737.178567][ T8771] ____kasan_slab_free+0x118/0x164 [ 737.179669][ T8771] __kasan_slab_free+0x18/0x28 [ 737.180706][ T8771] slab_free_freelist_hook+0x128/0x1ec [ 737.181916][ T8771] kfree+0x178/0x410 [ 737.182788][ T8771] hci_release_dev+0x1004/0x116c [ 737.183860][ T8771] bt_host_release+0x70/0x88 [ 737.184915][ T8771] device_release+0x8c/0x1ac [ 737.186016][ T8771] kobject_put+0x2c4/0x438 [ 737.187052][ T8771] put_device+0x28/0x40 [ 737.187969][ T8771] hci_free_dev+0x24/0x34 [ 737.189050][ T8771] vhci_release+0x7c/0xc4 [ 737.189965][ T8771] __fput+0x1c4/0x800 [ 737.190840][ T8771] ____fput+0x20/0x30 [ 737.191800][ T8771] task_work_run+0x130/0x1e4 [ 737.192820][ T8771] do_exit+0x670/0x20bc [ 737.193738][ T8771] do_group_exit+0x110/0x268 [ 737.194791][ T8771] get_signal+0x634/0x1550 [ 737.195772][ T8771] do_notify_resume+0x3d0/0x32b8 [ 737.196959][ T8771] asm_exit_to_user_mode+0x9c/0xf0 [ 737.198197][ T8771] ret_from_fork+0x1c/0x20 [ 737.199242][ T8771] [ 737.199745][ T8771] Last potentially related work creation: [ 737.201022][ T8771] kasan_save_stack+0x38/0x68 [ 737.202156][ T8771] kasan_record_aux_stack+0xd4/0x11c [ 737.203391][ T8771] insert_work+0x64/0x394 [ 737.204475][ T8771] __queue_work+0xb84/0x114c [ 737.205547][ T8771] queue_work_on+0xc4/0x17c [ 737.206484][ T8771] hci_send_acl+0x7a8/0xaa4 [ 737.207546][ T8771] l2cap_do_send+0x238/0x350 [ 737.208589][ T8771] l2cap_chan_send+0x190c/0x1e5c [ 737.209664][ T8771] l2cap_sock_sendmsg+0x184/0x2a8 [ 737.210782][ T8771] kernel_sendmsg+0x1c8/0x2a0 [ 737.211819][ T8771] bnep_session+0x1e38/0x2424 [ 737.212844][ T8771] kthread+0x37c/0x45c [ 737.213749][ T8771] ret_from_fork+0x10/0x20 [ 737.214720][ T8771] [ 737.215210][ T8771] Second to last potentially related work creation: [ 737.216689][ T8771] kasan_save_stack+0x38/0x68 [ 737.217685][ T8771] kasan_record_aux_stack+0xd4/0x11c [ 737.218874][ T8771] insert_work+0x64/0x394 [ 737.219789][ T8771] __queue_work+0xb84/0x114c [ 737.220836][ T8771] queue_work_on+0xc4/0x17c [ 737.221860][ T8771] hci_send_acl+0x7a8/0xaa4 [ 737.222824][ T8771] l2cap_do_send+0x238/0x350 [ 737.223861][ T8771] l2cap_chan_send+0x190c/0x1e5c [ 737.224917][ T8771] l2cap_sock_sendmsg+0x184/0x2a8 [ 737.226047][ T8771] kernel_sendmsg+0x1c8/0x2a0 [ 737.227138][ T8771] bnep_session+0x1e38/0x2424 [ 737.228148][ T8771] kthread+0x37c/0x45c [ 737.229067][ T8771] ret_from_fork+0x10/0x20 [ 737.230011][ T8771] [ 737.230558][ T8771] The buggy address belongs to the object at ffff0000e8d48000 [ 737.230558][ T8771] which belongs to the cache kmalloc-8k of size 8192 [ 737.233716][ T8771] The buggy address is located 5000 bytes inside of [ 737.233716][ T8771] 8192-byte region [ffff0000e8d48000, ffff0000e8d4a000) [ 737.236721][ T8771] The buggy address belongs to the page: [ 737.237945][ T8771] page:000000001c6a1042 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x128d48 [ 737.240205][ T8771] head:000000001c6a1042 order:3 compound_mapcount:0 compound_pincount:0 [ 737.242050][ T8771] flags: 0x5ffc00000010200(slab|head|node=0|zone=2|lastcpupid=0x7ff) [ 737.243811][ T8771] raw: 05ffc00000010200 0000000000000000 0000000100000001 ffff0000c0002c00 [ 737.245652][ T8771] raw: 0000000000000000 0000000000020002 00000001ffffffff 0000000000000000 [ 737.247542][ T8771] page dumped because: kasan: bad access detected [ 737.249001][ T8771] [ 737.249565][ T8771] Memory state around the buggy address: [ 737.250703][ T8771] ffff0000e8d49280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 737.252396][ T8771] ffff0000e8d49300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 737.254106][ T8771] >ffff0000e8d49380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 737.255917][ T8771] ^ [ 737.256896][ T8771] ffff0000e8d49400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 737.258700][ T8771] ffff0000e8d49480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 737.260518][ T8771] ================================================================== [ 737.262243][ T8771] Disabling lock debugging due to kernel taint [ 737.266569][ T8771] ================================================================================ [ 737.268606][ T8771] UBSAN: array-index-out-of-bounds in kernel/locking/qspinlock.c:130:9 [ 737.270344][ T8771] index 13354 is out of range for type 'unsigned long[8]' [ 737.271870][ T8771] CPU: 1 PID: 8771 Comm: kbnepd bnep0 Tainted: G B W 5.15.173-syzkaller #0 [ 737.273850][ T8771] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 737.276086][ T8771] Call trace: [ 737.276817][ T8771] dump_backtrace+0x0/0x530 [ 737.277806][ T8771] show_stack+0x2c/0x3c [ 737.278656][ T8771] dump_stack_lvl+0x108/0x170 [ 737.279738][ T8771] dump_stack+0x1c/0x58 [ 737.280651][ T8771] __ubsan_handle_out_of_bounds+0x108/0x15c [ 737.281964][ T8771] queued_spin_lock_slowpath+0x854/0x938 [ 737.283156][ T8771] do_raw_spin_lock+0x334/0x35c [ 737.284178][ T8771] _raw_spin_lock_irqsave+0xcc/0x14c [ 737.285279][ T8771] klist_next+0x8c/0x2f4 [ 737.286273][ T8771] device_for_each_child+0xc0/0x174 [ 737.287387][ T8771] pm_runtime_set_memalloc_noio+0xf0/0x210 [ 737.288695][ T8771] netdev_unregister_kobject+0x144/0x204 [ 737.289864][ T8771] unregister_netdevice_many+0x12c8/0x189c [ 737.291240][ T8771] unregister_netdev+0x178/0x1f0 [ 737.292360][ T8771] bnep_session+0x2274/0x2424 [ 737.293362][ T8771] kthread+0x37c/0x45c [ 737.294240][ T8771] ret_from_fork+0x10/0x20 [ 737.295228][ T8771] ================================================================================ [ 737.297326][ T8771] Unable to handle kernel paging request at virtual address ffff800014a27710 [ 737.299215][ T8771] Mem abort info: [ 737.299961][ T8771] ESR = 0x0000000096000047 [ 737.300941][ T8771] EC = 0x25: DABT (current EL), IL = 32 bits [ 737.302310][ T8771] SET = 0, FnV = 0 [ 737.303153][ T8771] EA = 0, S1PTW = 0 [ 737.304058][ T8771] FSC = 0x07: level 3 translation fault [ 737.305429][ T8771] Data abort info: [ 737.306266][ T8771] ISV = 0, ISS = 0x00000047 [ 737.307303][ T8771] CM = 0, WnR = 1 [ 737.308117][ T8771] swapper pgtable: 4k pages, 48-bit VAs, pgdp=00000001ae2e0000 [ 737.309777][ T8771] [ffff800014a27710] pgd=100000023ffff003, p4d=100000023ffff003, pud=100000023fffe003, pmd=100000023fff9003, pte=0000000000000000 [ 737.312763][ T8771] Internal error: Oops: 0000000096000047 [#1] PREEMPT SMP [ 737.314319][ T8771] Modules linked in: [ 737.315165][ T8771] CPU: 1 PID: 8771 Comm: kbnepd bnep0 Tainted: G B W 5.15.173-syzkaller #0 [ 737.317218][ T8771] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 737.319478][ T8771] pstate: 804000c5 (Nzcv daIF +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 737.321178][ T8771] pc : queued_spin_lock_slowpath+0x36c/0x938 [ 737.322405][ T8771] lr : queued_spin_lock_slowpath+0x854/0x938 [ 737.323653][ T8771] sp : ffff800021ee7580 [ 737.324600][ T8771] x29: ffff800021ee7620 x28: 1ffff000043dcebc x27: 0000000000000000 [ 737.326308][ T8771] x26: dfff800000000000 x25: ffff7000043dceb4 x24: 0000000000080000 [ 737.328058][ T8771] x23: ffff800014a27710 x22: ffff0001b41c2708 x21: ffff0001b41c2700 [ 737.329865][ T8771] x20: ffff800014a27710 x19: ffff0000e65f7000 x18: 0000000000000002 [ 737.331658][ T8771] x17: 0000000000000000 x16: ffff800011ab8a34 x15: 00000000ffffffff [ 737.333438][ T8771] x14: ffff0000d5b91b40 x13: 0000000000000001 x12: ffff700002e22564 [ 737.335123][ T8771] x11: 0000000000000001 x10: ffff800014a27700 x9 : 0000000000000001 [ 737.336811][ T8771] x8 : 0000000000000000 x7 : 0000000000000001 x6 : 0000000000000001 [ 737.338571][ T8771] x5 : ffff800021ee6c78 x4 : ffff800014ba05e0 x3 : ffff80000819c3ec [ 737.340359][ T8771] x2 : 0000000000000001 x1 : 0000000000000004 x0 : ffff0001b41c2708 [ 737.342053][ T8771] Call trace: [ 737.342748][ T8771] queued_spin_lock_slowpath+0x36c/0x938 [ 737.344080][ T8771] do_raw_spin_lock+0x334/0x35c [ 737.345268][ T8771] _raw_spin_lock_irqsave+0xcc/0x14c [ 737.346466][ T8771] klist_next+0x8c/0x2f4 [ 737.347433][ T8771] device_for_each_child+0xc0/0x174 [ 737.348555][ T8771] pm_runtime_set_memalloc_noio+0xf0/0x210 [ 737.349789][ T8771] netdev_unregister_kobject+0x144/0x204 [ 737.351138][ T8771] unregister_netdevice_many+0x12c8/0x189c [ 737.352357][ T8771] unregister_netdev+0x178/0x1f0 [ 737.353465][ T8771] bnep_session+0x2274/0x2424 [ 737.354551][ T8771] kthread+0x37c/0x45c [ 737.355402][ T8771] ret_from_fork+0x10/0x20 [ 737.356388][ T8771] Code: aa1703e0 9417451d aa1603e0 52800081 (f90002f5) [ 737.357817][ T8771] ---[ end trace d6fbfe410c4e5ca2 ]--- [ 738.014176][ T8771] Kernel panic - not syncing: Oops: Fatal exception [ 738.015596][ T8771] SMP: stopping secondary CPUs [ 738.016704][ T8771] Kernel Offset: disabled [ 738.017785][ T8771] CPU features: 0x8,000081c1,21302e40 [ 738.018929][ T8771] Memory Limit: none [ 738.628805][ T8771] Rebooting in 86400 seconds..