last executing test programs: 14m14.745295786s ago: executing program 0 (id=1264): openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x60140, 0x0) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000100)={0x1000, 0xaaa, &(0x7f00000002c0)="23595363adf9540e4fff5fe700000000000000000000000034b6b755cc5def3bdeb1b951fba6f561f23998aadb", 0x0, 0x2d}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0x1000000000, 0x5, 0x41, 0x2000000, 0x0, 0x2004cb, 0x0, 0xa1d, 0x68ff, 0x5, 0x0, 0x3, 0x2], 0x10000, 0x202}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000100)={{0xd000, 0x1, 0x0, 0x81, 0x8, 0x0, 0xff, 0x3, 0x0, 0x8, 0x8}, {0xffff1000, 0x10000, 0x4, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7, 0xff}, {0x2000, 0x8080000, 0xc, 0x0, 0x7, 0xc4, 0x0, 0x0, 0x8, 0x3, 0x0, 0xfc}, {0xeeef0000, 0x33331000, 0x18592cbc7c573fc6, 0x9, 0x1, 0x4, 0x6, 0x0, 0x8, 0x0, 0x4}, {0x80a0000, 0xeeee8000, 0xe, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3c}, {0x50000, 0x0, 0xf, 0x78, 0x5, 0x1, 0x2, 0x0, 0x0, 0xff, 0x1}, {0x0, 0xeeee0000, 0xa, 0x4, 0x0, 0x0, 0xa1, 0x20, 0x0, 0x0, 0x8}, {0x2, 0xeeee0000, 0xa, 0x90, 0x2, 0x7, 0x8, 0x40, 0x26, 0x0, 0x0, 0x2}, {0x80a0000}, {0xdddd1000}, 0xddf8ffdb, 0x0, 0x0, 0x110, 0x0, 0xf801, 0x0, [0x7ffffffd, 0x0, 0x1, 0x1]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 14m14.607328275s ago: executing program 0 (id=1265): r0 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x43}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x2000c08d) r1 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, 0x0, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) connect$can_j1939(r1, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x4004) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000010008100000000000080000000000000", @ANYRES32=0x0, @ANYBLOB="0a043cbf", @ANYRES32, @ANYBLOB="0a001b"], 0x2c}], 0x1}, 0x0) sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x1c, 0x0, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) r3 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8b24, &(0x7f0000000000)={'wlan1\x00'}) open_tree(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r4, &(0x7f0000000600)=[{{&(0x7f0000000080)={0x2, 0x4e20, @local}, 0x10, 0x0}}], 0x1, 0x2000c844) r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r5, 0x4010ae67, 0x0) shutdown(r0, 0x1) 14m14.448472793s ago: executing program 0 (id=1266): r0 = socket$unix(0x1, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70ad2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x3}, {0xffff, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=@newtfilter={0x3c, 0x2c, 0xd27, 0x30bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x10, 0x4}, {}, {0x8, 0x5}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_CLASSID={0x8, 0x1, {0x3, 0xfff2}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000091}, 0x20000000) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x6fc84b579dfed949, 0x0) close(r6) socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r7, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf4a31accb", 0x26}], 0x1}, 0x4) 14m11.92668898s ago: executing program 0 (id=1269): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000100)={0x400, 0xa, 0x0, 0x0, 0x0, 0x180, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x30000, 0x0, 0x0, 0x0, 0x0, 0xf5, 0x0, 0x804, 0x0, 0x0, 0x7, 0x4, 0x0, 0x1}) 14m11.603849368s ago: executing program 0 (id=1272): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) setpgid(0x0, r0) open(&(0x7f0000000180)='./bus\x00', 0x741880, 0x9b) 14m11.427680389s ago: executing program 0 (id=1274): r0 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x43}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x2000c08d) r1 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, 0x0, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) connect$can_j1939(r1, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x4004) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000010008100000000000080000000000000", @ANYRES32=0x0, @ANYBLOB="0a043cbf", @ANYRES32, @ANYBLOB="0a001b"], 0x2c}], 0x1}, 0x0) sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x1c, 0x0, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) r3 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8b24, &(0x7f0000000000)={'wlan1\x00'}) open_tree(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r4, &(0x7f0000000600)=[{{&(0x7f0000000080)={0x2, 0x4e20, @local}, 0x10, 0x0}}], 0x1, 0x2000c844) r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r5, 0x4010ae67, 0x0) shutdown(r0, 0x1) 13m56.331525383s ago: executing program 32 (id=1274): r0 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x43}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x2000c08d) r1 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, 0x0, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) connect$can_j1939(r1, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x4004) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000010008100000000000080000000000000", @ANYRES32=0x0, @ANYBLOB="0a043cbf", @ANYRES32, @ANYBLOB="0a001b"], 0x2c}], 0x1}, 0x0) sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x1c, 0x0, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) r3 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8b24, &(0x7f0000000000)={'wlan1\x00'}) open_tree(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r4, &(0x7f0000000600)=[{{&(0x7f0000000080)={0x2, 0x4e20, @local}, 0x10, 0x0}}], 0x1, 0x2000c844) r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r5, 0x4010ae67, 0x0) shutdown(r0, 0x1) 2.556259041s ago: executing program 2 (id=5558): r0 = socket$inet6(0xa, 0x1, 0x0) socket$key(0xf, 0x3, 0x2) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev={0xfe, 0x80, '\x00', 0xfe}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) 2.41127987s ago: executing program 2 (id=5559): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) unshare(0x20000400) connect$802154_dgram(r0, &(0x7f0000000000)={0x10, @short}, 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000040)=@dellink={0x34, 0x11, 0x1, 0x70bd26, 0x5dfdbff, {0x0, 0x0, 0x0, 0x0, 0x42008, 0x40000}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'veth1_vlan\x00'}]}, 0x34}, 0x1, 0x200000000000000, 0x0, 0x240040c4}, 0x0) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'ipvlan1\x00'}) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_DEBUG_SET(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={0x18, r2, 0x1, 0x70bd2d, 0x25dddbfe, {}, [@ETHTOOL_A_DEBUG_HEADER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x20000050}, 0x30008010) 2.090265858s ago: executing program 2 (id=5563): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x20800, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x7, 0x7}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2, 0x4}}}]}, 0x38}}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x66, 0x1, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0xffff, 0xe}, {0x3, 0xfff1}, {0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x8848}, 0x20004850) 1.896282189s ago: executing program 3 (id=5565): pipe(&(0x7f0000019480)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000001c0)=[{&(0x7f0000000280)="dc", 0x1}], 0x1, 0x3) close(r1) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000300)=0x1, 0x4) connect$inet(r2, &(0x7f00000006c0)={0x2, 0x0, @empty}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000900)=0xffffffffffffffff, 0x4) sendmmsg$inet(r2, &(0x7f0000000f00)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000080)="b5", 0x1}, {&(0x7f0000000200)="c9", 0x1}, {&(0x7f0000000340)="01", 0x1}, {&(0x7f0000000400)='Q', 0x1}, {&(0x7f0000000500)="d7", 0x1}, {&(0x7f0000000600)='J', 0x1}, {&(0x7f0000000700)}, {&(0x7f0000000180)='<', 0x1}], 0x8}}, {{0x0, 0x0, &(0x7f0000002dc0)=[{&(0x7f0000000a40)="db", 0x1}, {&(0x7f0000001a40)="5c8c56b4ef4b478bf9b431ece6b2d8bdf4abffaee5e1138ba457a84eec31c9fdec2e274f512ea28c50a9c25214a70c6582928702c1116955bbeb327a89cc181a2bba5a572cf813a2619731ddffd8564bcf36d365cf5292989d9e186920c1229e12c006db1d590be12125bea3b9f0484e445b75da02486b2258c270fc864e6cca131ebb987f1a1c94b00228f9674d8a3af8920957bb79b18a43d7845d07da9cbd606cfadeefaf79873f32a0f0b25f55b71c62992ae0a3c2b8971184735d18d37f600de6bc84cbe7b097df1d8532c8e1e111323f61c542d743b0dd583d9e24f06472bc958931dd1ff3008825260385bfcd5250de2546a6ff22e4fab1ab39e0e2ccb19c506aae9ff404c5054b930aafcd6a35ae51c499fc2e535d719dcb5b465a7e25b245aabca1cc62bfa0fded3d066ef4fdaddfe30bc8de62a3d3c41838e6969f1f8a965e0712b4a62e16d2162b576ce12c0135a94b84199e55d1acc00684f0027aa3d91ad483c00100535cb08f7ec2ef9ccc67b85da92968a8bfd90926f3fbfda59093c4181058c6e24149ef74ad8d3b3b75c4b82fe212ac4605a3b75c6d9c7e526892d59c8762b10d8d6eb1b7f05f896abc89d89e6a0456e164fb2a9054cb60ca35ec3a46986b71b32b2e7d2a66049d508d01ce88d082375179d4be44123778067b08bc1b53372f805f60bbf79a38508fb1215527a67e8b2f06e2bf684c894d2a42724037ef20a91ec4c315ad86d2d496b914a02424a74fce888d601ab281f7a5e8e67ca119055c1b99b3f243e75cad3f210304467f9b9053914ec48801b48dd0d0aa572a36687db0864b07caa6f85948df49c850046ce02f3293607dd09dc86d83b624f4920f125387bd9273de41e4ad7a51befce70e6559a9a248e1587baf1dc41cb9e7003679116a11eeb132587e8f2d9254d5816613b115bcd2bc8cc7b9f595cdf0b04284744377e3a290b3b86bb526cd62282e1f004f25f68f73d98f72497098a631aa4b257c9f07b41ad9a20fbb400fef83b1bac3332428b4cc973118bc0b2580e9a464323979733b0cce4c300a10d2c435ccdd7a0605bd6795935799bd8a901104a02ebebecff6951ebe04a5b0c46d52e3faa7b7bba337212e810632e27d76986c0cd53f2eec0ec029fb94932ae44aacbf795cb53a74d65117334bcf69d5ab34e165729c1879b7524947cf06ddaff6f1fd2a584c78613184e7ac73a9f5984af867450832e67bc59e104a3bd277be484f2122e56c84f05218d9cd5d6697f2240d60c849cd055697df4e4f4d795dfca72782c562d94dd5824ad548d27808258b99678a27952a832be729286ef4ba2a3e1874c9e1da45ef38e92680b5320e8e40a1e5e9301f53acd6850d36c82b3eb128f5505a12f4e555a92ea716d6489f4e042700db779d057c139c6259d26c8d80c45563fb50aa38dd31cfa8a84d9e989de66f4b987dea0775b77557f51cc15546622e7b09f60f22b9f987e9e91ecedb9cfeb3eb4f6b5be2e9206187331e56bfe34bfe69ee4326b802ab52d261749a0e32a165fff6a8dd159a2fcdeb4f84db808b2ad2db60f0a2a2fa38209fd395f9484fef2ee01ed377103b77df0bb981096309396e1d0f94d6bb74dbdf519142e1bb5d3bea69267f000537e396ff357b9d889af66a8dfb589d5f541b1fe003dd1d4a0853d25dea43135f98dd4df1cda11b5751eddc9dd46a57c7bde4a8b8c6f1dc77704f33aa84dc35610282abc8686563ac604d3c89f44e89c9f5f5b8de89e6e6ef5b6a0ff586d4235ff7445b610094657532a3daa966ee28b3c14ed0282913c7015b717497e77094221b7fc183611402c566000e9e6b98cd10fd042a4fe6676532eeed94d8c72e73af2a6e14618bf9da0fea8c8264a6139f800a9eedf8b84bda62e56434a3cd207da02c3eb7211f917fabe1f7d632dc71afe2d201c46143e84165119c2f73091eaf72998f56dfa37946bdb6a2d22988d58e1a485ca56011eb6386d9a2a57bf24fc3c3c93405dbe5246cc6050afb63c5dcba74dc89fac94b04e47233ced8cf0098711617a66567af09bbcc40f951fcb637bc74911dc4fa647696b3", 0x5c1}, {&(0x7f0000000840)="e3", 0x1}, {&(0x7f0000000680)="a7", 0x1}, {&(0x7f0000000540)='k', 0x1}, {&(0x7f00000002c0)="c8", 0x1}, {&(0x7f0000002bc0)='>', 0x1}], 0x7}}, {{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000940)="b2", 0x1}], 0x1}}], 0x3, 0x4008440) splice(r0, 0x0, r1, 0x0, 0x10500, 0x0) connect$unix(r1, &(0x7f00000019c0)=@abs={0x0, 0x0, 0x4e20}, 0x6e) setsockopt$inet_tcp_int(r1, 0x6, 0x19, &(0x7f0000000140)=0xa, 0x4) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x3ff, 0x2, 0x100000000, 0xffffffffffffffff}, 0x0, &(0x7f0000000240)={0x1f, 0x4, 0x7, 0x0, 0x229c, 0x1, 0x800000000000000, 0x2}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) 1.842142902s ago: executing program 2 (id=5566): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="0000000000004a641c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010001fff0000000001000000000000d7", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e0000000400028008000a00", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x4) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c00000010001fff000000008000000000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00?\x00\x00\b\x00\n\x00', @ANYRES32, @ANYBLOB="240012800b00010062726964676500"], 0x4c}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r6) getsockname$packet(r6, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r7, @ANYBLOB="010000"], 0x3c}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x1, 0x803, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r10}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x4c}}, 0x884) 1.704118061s ago: executing program 4 (id=5568): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000005c0), r0) sendmsg$IEEE802154_SET_MACPARAMS(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000640)={0x1c, r1, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x89}, 0x40) 1.698005431s ago: executing program 3 (id=5569): bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02}) readv(r0, &(0x7f00000001c0)=[{&(0x7f0000001400)=""/227, 0x1c}], 0x4) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000080)={0x0, 'syzkaller1\x00', {0x4}, 0x1}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local}) 1.573431848s ago: executing program 4 (id=5570): socket(0x2a, 0x2, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=@newlink={0x20, 0x10, 0x403, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, r2, 0xff7f}}, 0x20}}, 0x0) socket(0x1, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000940)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x12}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.119283985s ago: executing program 1 (id=5572): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25d7dbfb, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0x10, 0xf}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x10, 0x8, 0x8, 0x8, 0x81}, 0x103, 0x0, 0x7, 0x7, 0x7, 0xa, 0x12, 0x7, 0x7, 0x3, {0x3, 0x2, 0x3, 0x35db, 0x2, 0x6}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40188c0}, 0x0) r3 = socket$kcm(0x11, 0x3, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000022c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r6, {0x0, 0x10}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1e3a9}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0xc804}, 0x2) close(r4) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) setsockopt$sock_attach_bpf(r3, 0x107, 0xf, &(0x7f0000000600), 0x56) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$kcm(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000200)="27030200000314000e00003c000300000000ff8400000000000000000000000000000000000085dc9d9839dc1336", 0x2e}], 0x1}, 0x4005) 1.115833565s ago: executing program 4 (id=5573): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2802, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000440)=@xdp={0x2c, 0x7, r6, 0x4003e}, 0x80, &(0x7f0000000380)=[{&(0x7f00000002c0)="a2", 0x5dc}], 0x1}, 0x4) 1.034554099s ago: executing program 2 (id=5574): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x20800, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x7, 0x7}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2, 0x4}}}]}, 0x38}}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x66, 0x1, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0xffff, 0xe}, {0x3, 0xfff1}, {0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x8848}, 0x20004850) 899.173898ms ago: executing program 3 (id=5575): r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x9c, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa, 0x0, 0x2}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_LABELS={0x8, 0x16, 0x1, 0x0, [0x0]}]}, 0x9c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="340000001c00010026bd7ea1375a000007050000", @ANYRES32=r3, @ANYBLOB="8000b2000a0002000180c20000020000060005000200000004000e80"], 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x40800) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="90000000", @ANYRES16=r6, @ANYBLOB="01000000000000000000010000000c000597ff000000000000000c0002000000000000000000040007800c000800000000000000000008000a000000000044000780080001"], 0x90}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b80)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095", @ANYRESHEX=r3, @ANYRESDEC=r7], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20005}, 0x94) sendmsg$can_j1939(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x1d, r3, 0x1, {0x2, 0x0, 0x3}}, 0x18, &(0x7f00000001c0)={&(0x7f0000000100)="4b5732115081bb0d4c28f48607311878a82f91007a8a56fe147464d6ea3883cdb4b8ac5304d663775bafb16ceda5f5e86fc43cc3530af9445e9a5bcaee71a35bf2418a1512a36c9b37b51c3703cec2e6de583dcb7a443be71f2b06c2e893b663eb76ab44254757b5d8bfedff05d88d858e43fb2954b9bf0cc4", 0x79}, 0x1, 0x0, 0x0, 0x4000841}, 0x400c010) socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r8, &(0x7f00000000c0)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000080)={0x42, 0x800000, 0x8, 0x7}) write$bt_hci(r8, &(0x7f0000000080)=ANY=[], 0x6) 820.515022ms ago: executing program 4 (id=5576): openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="0000000000400000300012800b00010067656e65766500002000028014000700fe88000000000000000000000000010108000200e0000001"], 0x50}, 0x1, 0x0, 0x0, 0x41}, 0x20040040) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14, 0x10, 0x1, 0x700, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x20, 0x0, 0x0, {0xa}}}, 0x6c}, 0x1, 0x0, 0x0, 0x4008011}, 0x4000800) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400401a}, 0x4000080) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x81}, 0x0) unshare(0x20000400) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, 0x0, 0x0}, 0x94) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r6 = socket$igmp(0x2, 0x3, 0x2) getsockopt$IP_VS_SO_GET_VERSION(r6, 0x0, 0x480, &(0x7f0000000640), &(0x7f0000000680)=0x40) write$cgroup_subtree(r5, &(0x7f0000000100)=ANY=[], 0x32600) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xc, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="18000c000000000000000000000a18150000777814f77eca91d1", @ANYRES32=r7, @ANYRES64=r0], &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) getsockopt$sock_buf(r4, 0x1, 0x1c, 0x0, &(0x7f0000000380)) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00'}) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000140)={0x0, 0x0, 0x6, 0x4, @vifc_lcl_addr=@rand_addr=0x64010101, @loopback}, 0x10) r8 = gettid() r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c00000046000701fcffffff02000000017c000008000100", @ANYRES32=r8], 0x1c}, 0x1, 0x0, 0x0, 0x488c4}, 0xc000) syz_open_procfs$namespace(r8, &(0x7f0000000180)='ns/ipc\x00') 736.065117ms ago: executing program 3 (id=5577): pipe(&(0x7f0000019480)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000001c0)=[{&(0x7f0000000280)="dc", 0x1}], 0x1, 0x3) close(r1) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000300)=0x1, 0x4) connect$inet(r2, &(0x7f00000006c0)={0x2, 0x0, @empty}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000900)=0xffffffffffffffff, 0x4) sendmmsg$inet(r2, &(0x7f0000000f00)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000080)="b5", 0x1}, {&(0x7f0000000200)="c9", 0x1}, {&(0x7f0000000340)="01", 0x1}, {&(0x7f0000000400)='Q', 0x1}, {&(0x7f0000000500)="d7", 0x1}, {&(0x7f0000000600)='J', 0x1}, {&(0x7f0000000700)}, {&(0x7f0000000180)='<', 0x1}], 0x8}}, {{0x0, 0x0, &(0x7f0000002dc0)=[{&(0x7f0000000a40)="db", 0x1}, {&(0x7f0000001a40)="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", 0x5c1}, {&(0x7f0000000840)="e3", 0x1}, {&(0x7f0000000680)="a7", 0x1}, {&(0x7f0000000540)='k', 0x1}, {&(0x7f00000002c0)="c8", 0x1}, {&(0x7f0000002bc0)='>', 0x1}], 0x7}}, {{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000940)="b2", 0x1}], 0x1}}], 0x3, 0x4008440) splice(r0, 0x0, r1, 0x0, 0x10500, 0x0) connect$unix(r1, &(0x7f00000019c0)=@abs={0x0, 0x0, 0x4e20}, 0x6e) setsockopt$inet_tcp_int(r1, 0x6, 0x19, &(0x7f0000000140)=0xa, 0x4) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x3ff, 0x2, 0x100000000, 0xffffffffffffffff}, 0x0, &(0x7f0000000240)={0x1f, 0x4, 0x7, 0x0, 0x229c, 0x1, 0x800000000000000, 0x2}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) 631.116063ms ago: executing program 1 (id=5578): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="90000000", @ANYRES16, @ANYBLOB="01000000000000000000010000000c000597ff000000000000000c0002000000000000000000040007800c000800000000000000000008000a000000000044000780080001"], 0x90}}, 0x0) 630.154883ms ago: executing program 2 (id=5579): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, 0xfffffffffffffffd, 0x1, 0x0, 0x0, 0x8880}, 0x4000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x48000) setsockopt(0xffffffffffffffff, 0x84, 0x7f, 0x0, 0x0) ioctl$sock_netdev_private(r3, 0x8914, &(0x7f0000000000)) r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r4, 0x890b, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x6, @null, @bpq0, 0x0, [@bcast, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) r5 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r5, 0x890b, &(0x7f00000007c0)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x5, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bpq0, 0x5, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}) connect$rose(r5, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1, @null}, 0x1c) connect$rose(r5, &(0x7f0000000240)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1, @null}, 0x1c) openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000140)=0x1f, 0x4) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r6, 0xc004743e, &(0x7f0000000040)) ioctl$PPPIOCSNPMODE(r6, 0x4008744b, &(0x7f0000000000)={0x80fb, 0x1}) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020100000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a32000000001400000011001f"], 0x7c}}, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000180)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="040000001c000000000000", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x20) unshare(0xc020680) write(0xffffffffffffffff, 0x0, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f00000003c0)='GPL\x00', 0x9ed7, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x3ff}, 0x94) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000004c0)={'syzkaller1\x00'}) 489.264951ms ago: executing program 3 (id=5580): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0x10, &(0x7f0000000880)=ANY=[@ANYBLOB="18000000000100000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006a00000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r1, 0x0, 0xe, 0x0, &(0x7f0000000000)="00800000000000000045a9000000", 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x12}, 0x50) 426.702805ms ago: executing program 1 (id=5581): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000001300)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x1c, r1, 0x83625fc5352ba305, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}]}, 0x1c}}, 0x0) 406.880566ms ago: executing program 4 (id=5582): socket(0x2a, 0x2, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=@newlink={0x20, 0x10, 0x403, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, r2, 0xff7f}}, 0x20}}, 0x0) socket(0x1, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000940)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x12}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) 311.435311ms ago: executing program 1 (id=5583): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)={0x20, r1, 0x1, 0x70bd2d, 0x0, {}, [@TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xffffffff}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) 203.064848ms ago: executing program 3 (id=5584): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2802, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000440)=@xdp={0x2c, 0x7, r6, 0x4003e}, 0x80, &(0x7f0000000380)=[{&(0x7f00000002c0)="a2", 0x5dc}], 0x1}, 0x4) 156.866641ms ago: executing program 1 (id=5585): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f00000000c0)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000080)=ANY=[], 0x6) 73.670235ms ago: executing program 1 (id=5586): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25d7dbfb, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0x10, 0xf}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x10, 0x8, 0x8, 0x8, 0x81}, 0x103, 0x0, 0x7, 0x7, 0x7, 0xa, 0x12, 0x7, 0x7, 0x3, {0x3, 0x2, 0x3, 0x35db, 0x2, 0x6}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40188c0}, 0x0) r3 = socket$kcm(0x11, 0x3, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000022c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r6, {0x0, 0x10}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1e3a9}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0xc804}, 0x2) close(r4) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) setsockopt$sock_attach_bpf(r3, 0x107, 0xf, &(0x7f0000000600), 0x56) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$kcm(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000200)="27030200000314000e00003c000300000000ff8400000000000000000000000000000000000085dc9d9839dc1336", 0x2e}], 0x1}, 0x4005) 0s ago: executing program 4 (id=5587): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x20800, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x7, 0x7}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2, 0x4}}}]}, 0x38}}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x66, 0x1, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0xffff, 0xe}, {0x3, 0xfff1}, {0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x8848}, 0x20004850) kernel console output (not intermixed with test programs): (IR) endpoint found [ 986.967533][T14298] imon 2-1:0.0: unable to initialize intf0, err -19 [ 986.986210][T14298] imon:imon_probe: failed to initialize context! [ 987.023858][T14298] imon 2-1:0.0: unable to register, err -19 [ 987.053755][T14298] usb 2-1: USB disconnect, device number 101 [ 987.507434][T14298] usb 2-1: new high-speed USB device number 102 using dummy_hcd [ 987.642538][T18465] syzkaller0: entered promiscuous mode [ 987.648825][T18465] syzkaller0: entered allmulticast mode [ 987.697447][T14298] usb 2-1: Using ep0 maxpacket: 16 [ 987.705453][T14298] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 987.747385][T14298] usb 2-1: config 0 interface 0 has no altsetting 0 [ 987.780101][T14298] usb 2-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 987.799075][T14298] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 987.812940][T14298] usb 2-1: Product: syz [ 987.827302][T14298] usb 2-1: Manufacturer: syz [ 987.831996][T14298] usb 2-1: SerialNumber: syz [ 987.852738][T14298] usb 2-1: config 0 descriptor?? [ 987.942431][T18469] netlink: 'syz.2.3945': attribute type 1 has an invalid length. [ 988.052805][T18469] 8021q: adding VLAN 0 to HW filter on device bond2 [ 988.062554][T18469] bond1: (slave bond2): making interface the new active one [ 988.073981][T18469] bond1: (slave bond2): Enslaving as an active interface with an up link [ 988.096793][T14298] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 988.115167][T14298] imon 2-1:0.0: unable to initialize intf0, err -19 [ 988.137336][T14298] imon:imon_probe: failed to initialize context! [ 988.143827][T14298] imon 2-1:0.0: unable to register, err -19 [ 988.194460][T18469] bond1: (slave gretap1): Enslaving as a backup interface with an up link [ 988.232802][T18469] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3945'. [ 988.245063][T18469] 8021q: adding VLAN 0 to HW filter on device bond1 [ 988.290962][T18469] vlan2: entered promiscuous mode [ 988.296103][T18469] bond1: entered promiscuous mode [ 988.298235][ T5829] usb 4-1: new high-speed USB device number 112 using dummy_hcd [ 988.303836][T18469] bond2: entered promiscuous mode [ 988.343647][T18469] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3945'. [ 988.509813][ T5829] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 988.528903][ T5829] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 988.547324][ T5829] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 988.566976][ T5829] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 988.589620][ T5829] usb 4-1: config 0 descriptor?? [ 988.817507][T18486] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3950'. [ 989.021334][ T5829] cp2112 0003:10C4:EA90.0044: unknown main item tag 0x0 [ 989.054397][ T5829] cp2112 0003:10C4:EA90.0044: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.3-1/input0 [ 989.134297][T18496] syzkaller0: entered promiscuous mode [ 989.150613][T18496] syzkaller0: entered allmulticast mode [ 989.233557][ T5829] cp2112 0003:10C4:EA90.0044: error requesting version [ 989.259907][ T5829] cp2112: probe of 0003:10C4:EA90.0044 failed with error -5 [ 989.442334][T14295] usb 4-1: USB disconnect, device number 112 [ 989.505107][T18502] (null): rxe_set_mtu: Set mtu to 1024 [ 989.588343][T18503] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3956'. [ 989.800565][T18502] infiniband !yz!: set active [ 989.805657][T18502] infiniband !yz!: added team_slave_0 [ 989.863200][T18502] RDS/IB: !yz!: added [ 989.867912][T18502] smc: adding ib device !yz! with port count 1 [ 989.874143][T18502] smc: ib device !yz! port 1 has pnetid [ 990.062176][ T5829] usb 2-1: USB disconnect, device number 102 [ 990.212552][T18509] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3958'. [ 990.495457][T18518] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3961'. [ 990.681005][T18521] syzkaller0: entered promiscuous mode [ 990.686768][T18521] syzkaller0: entered allmulticast mode [ 991.017338][T14295] usb 2-1: new high-speed USB device number 103 using dummy_hcd [ 991.207493][T14295] usb 2-1: Using ep0 maxpacket: 32 [ 991.224276][T14295] usb 2-1: config 0 has an invalid interface number: 12 but max is 0 [ 991.233551][T14295] usb 2-1: config 0 has no interface number 0 [ 991.247433][T14295] usb 2-1: config 0 interface 12 has no altsetting 0 [ 991.266848][T14295] usb 2-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 991.291635][T14295] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 991.301392][T14295] usb 2-1: Product: syz [ 991.309937][T14295] usb 2-1: Manufacturer: syz [ 991.318299][T14295] usb 2-1: SerialNumber: syz [ 991.335423][T14295] usb 2-1: config 0 descriptor?? [ 991.693816][T18541] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3971'. [ 991.945621][T18549] netlink: 'syz.3.3974': attribute type 1 has an invalid length. [ 992.010611][T18548] (null): rxe_set_mtu: Set mtu to 1024 [ 992.019128][T18548] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 992.029582][T18548] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3975'. [ 992.137982][T18554] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 992.240695][T18551] 8021q: adding VLAN 0 to HW filter on device bond2 [ 992.260093][T18551] bond1: (slave bond2): making interface the new active one [ 992.269040][T18551] bond1: (slave bond2): Enslaving as an active interface with an up link [ 992.305709][T18552] bond1: (slave gretap1): Enslaving as a backup interface with an up link [ 992.315332][T18549] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3974'. [ 992.331049][T18549] 8021q: adding VLAN 0 to HW filter on device bond1 [ 993.386268][T18574] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3982'. [ 993.474565][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.483109][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.777502][T18587] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 993.907324][ T5829] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 994.129688][ T5829] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 994.148246][ T5829] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 994.166722][ T5829] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 994.178225][ T5829] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 994.204753][ T5829] usb 3-1: config 0 descriptor?? [ 994.650695][ T5829] cp2112 0003:10C4:EA90.0045: unknown main item tag 0x0 [ 994.677630][ T5829] cp2112 0003:10C4:EA90.0045: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.2-1/input0 [ 994.834934][ C0] raw-gadget.0 gadget.1: ignoring, device is not running [ 994.846845][ T5829] cp2112 0003:10C4:EA90.0045: error requesting version [ 994.849865][ C0] raw-gadget.0 gadget.1: ignoring, device is not running [ 994.870387][ C0] raw-gadget.0 gadget.1: ignoring, device is not running [ 994.883585][ C0] raw-gadget.0 gadget.1: ignoring, device is not running [ 994.891756][ C0] raw-gadget.0 gadget.1: ignoring, device is not running [ 994.899946][ C0] raw-gadget.0 gadget.1: ignoring, device is not running [ 994.907830][ C0] raw-gadget.0 gadget.1: ignoring, device is not running [ 994.916282][ C0] raw-gadget.0 gadget.1: ignoring, device is not running [ 994.923629][T14295] f81534 2-1:0.12: f81534_get_register: reg: 1003 failed: -32 [ 994.931367][T14295] f81534 2-1:0.12: f81534_find_config_idx: read failed: -32 [ 994.944260][T14295] f81534 2-1:0.12: f81534_calc_num_ports: find idx failed: -32 [ 994.952247][T14295] f81534: probe of 2-1:0.12 failed with error -32 [ 994.977752][T14295] usb 2-1: USB disconnect, device number 103 [ 994.993874][ T5829] cp2112: probe of 0003:10C4:EA90.0045 failed with error -5 [ 995.056463][ T8139] usb 3-1: USB disconnect, device number 79 [ 996.307813][ T8139] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 996.537842][ T8139] usb 3-1: Using ep0 maxpacket: 16 [ 996.557032][ T8139] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 996.597297][ T8139] usb 3-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 996.643877][ T8139] usb 3-1: config 0 interface 0 has no altsetting 0 [ 996.671983][ T8139] usb 3-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 996.687937][ T8139] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 996.696133][ T8139] usb 3-1: Product: syz [ 996.706270][ T8139] usb 3-1: Manufacturer: syz [ 996.716421][ T8139] usb 3-1: SerialNumber: syz [ 996.755270][ T8139] usb 3-1: config 0 descriptor?? [ 996.927622][ T5829] usb 4-1: new high-speed USB device number 113 using dummy_hcd [ 996.999713][ T8139] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 997.032377][ T8139] imon 3-1:0.0: unable to initialize intf0, err -19 [ 997.045068][T18650] syzkaller0: entered promiscuous mode [ 997.050834][ T8139] imon:imon_probe: failed to initialize context! [ 997.051155][T18650] syzkaller0: entered allmulticast mode [ 997.067508][ T8139] imon 3-1:0.0: unable to register, err -19 [ 997.078987][ T8139] usb 3-1: USB disconnect, device number 80 [ 997.133085][ T5829] usb 4-1: Using ep0 maxpacket: 32 [ 997.144191][ T5829] usb 4-1: config 0 has an invalid interface number: 12 but max is 0 [ 997.153428][ T5829] usb 4-1: config 0 has no interface number 0 [ 997.165673][ T5829] usb 4-1: config 0 interface 12 has no altsetting 0 [ 997.180754][ T5829] usb 4-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 997.193028][ T5829] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 997.217423][ T5829] usb 4-1: Product: syz [ 997.221739][ T5829] usb 4-1: Manufacturer: syz [ 997.226484][ T5829] usb 4-1: SerialNumber: syz [ 997.249915][ T5829] usb 4-1: config 0 descriptor?? [ 997.617298][ T8139] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 997.827578][ T8139] usb 3-1: Using ep0 maxpacket: 16 [ 997.838554][ T8139] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 997.856781][ T8139] usb 3-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 997.876115][ T8139] usb 3-1: config 0 interface 0 has no altsetting 0 [ 997.894217][ T8139] usb 3-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 997.904124][ T8139] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 997.918647][ T8139] usb 3-1: Product: syz [ 997.930888][ T8139] usb 3-1: Manufacturer: syz [ 997.935684][ T8139] usb 3-1: SerialNumber: syz [ 997.946948][ T8139] usb 3-1: config 0 descriptor?? [ 998.172586][ T8139] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 998.232258][ T8139] imon 3-1:0.0: unable to initialize intf0, err -19 [ 998.257554][ T8139] imon:imon_probe: failed to initialize context! [ 998.264030][ T8139] imon 3-1:0.0: unable to register, err -19 [ 998.897571][ T8071] usb 2-1: new high-speed USB device number 104 using dummy_hcd [ 999.127277][ T8071] usb 2-1: Using ep0 maxpacket: 32 [ 999.134942][ T8071] usb 2-1: config 0 interface 0 has no altsetting 0 [ 999.153377][ T8071] usb 2-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 999.177316][ T8071] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 999.186730][ T8071] usb 2-1: Product: syz [ 999.203953][ T8071] usb 2-1: Manufacturer: syz [ 999.208911][ T8071] usb 2-1: SerialNumber: syz [ 999.219118][ T8071] usb 2-1: config 0 descriptor?? [ 999.578768][T18692] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 999.648020][ T8071] gs_usb 2-1:0.0: Configuring for 242 interfaces [ 999.864449][ T8071] gs_usb 2-1:0.0: Couldn't get bit timing const for channel 0 (-EREMOTEIO) [ 999.875156][ T8071] gs_usb: probe of 2-1:0.0 failed with error -121 [ 1000.154917][ T8139] usb 3-1: USB disconnect, device number 81 [ 1000.718001][ T27] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 1000.745049][ T5829] f81534 4-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 1000.754999][ T5829] f81534 4-1:0.12: f81534_find_config_idx: read failed: -71 [ 1000.765341][ T5829] f81534 4-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 1000.779177][ T5829] f81534: probe of 4-1:0.12 failed with error -71 [ 1000.802593][ T5829] usb 4-1: USB disconnect, device number 113 [ 1000.822807][T18702] syzkaller0: entered promiscuous mode [ 1000.841154][T18702] syzkaller0: entered allmulticast mode [ 1000.941516][ T27] usb 3-1: Using ep0 maxpacket: 32 [ 1000.949993][ T27] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1000.962744][ T27] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1000.981591][ T27] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1000.992127][ T27] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1001.004344][ T27] usb 3-1: config 0 descriptor?? [ 1001.012999][ T27] hub 3-1:0.0: USB hub found [ 1001.063917][T18704] netlink: 'syz.4.4021': attribute type 1 has an invalid length. [ 1001.131558][T18704] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1001.140202][T18704] bond1: (slave bond2): making interface the new active one [ 1001.148321][T18704] bond1: (slave bond2): Enslaving as an active interface with an up link [ 1001.172692][T18704] bond1: (slave gretap1): Enslaving as a backup interface with an up link [ 1001.219672][ T27] hub 3-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 1001.470175][T18715] netlink: 224 bytes leftover after parsing attributes in process `syz.4.4025'. [ 1001.642709][ T27] usbhid 3-1:0.0: can't add hid device: -71 [ 1001.656520][ T27] usbhid: probe of 3-1:0.0 failed with error -71 [ 1001.669367][ T5829] usb 2-1: USB disconnect, device number 104 [ 1001.744254][ T27] usb 3-1: USB disconnect, device number 82 [ 1002.111861][T18731] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4030'. [ 1002.377672][T18736] tipc: Enabled bearer , priority 0 [ 1002.407091][T18736] tipc: Resetting bearer [ 1002.479364][T18733] tipc: Disabling bearer [ 1002.492101][T18740] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input145 [ 1002.963135][T18762] netlink: 'syz.4.4042': attribute type 1 has an invalid length. [ 1003.127712][T14298] usb 4-1: new high-speed USB device number 114 using dummy_hcd [ 1003.173756][T18769] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1003.192217][T18769] bond3: (slave bond4): making interface the new active one [ 1003.218505][T18769] bond3: (slave bond4): Enslaving as an active interface with an up link [ 1003.227134][T18770] netlink: 14 bytes leftover after parsing attributes in process `syz.1.4039'. [ 1003.259380][T18762] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4042'. [ 1003.289466][T18762] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1003.317366][T14298] usb 4-1: Using ep0 maxpacket: 32 [ 1003.325602][T14298] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1003.337601][T14298] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1003.348372][T14298] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1003.357905][T14298] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1003.388136][T14298] usb 4-1: config 0 descriptor?? [ 1003.420869][T14298] hub 4-1:0.0: USB hub found [ 1003.621290][T14298] hub 4-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 1004.009450][T14298] usbhid 4-1:0.0: can't add hid device: -71 [ 1004.025979][T14298] usbhid: probe of 4-1:0.0 failed with error -71 [ 1004.088464][T14298] usb 4-1: USB disconnect, device number 114 [ 1004.321540][T18802] netlink: 14 bytes leftover after parsing attributes in process `syz.4.4052'. [ 1004.477481][ T8139] usb 3-1: new high-speed USB device number 83 using dummy_hcd [ 1004.677313][ T8139] usb 3-1: Using ep0 maxpacket: 16 [ 1004.677328][ T5829] usb 2-1: new high-speed USB device number 105 using dummy_hcd [ 1004.688949][ T8139] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1004.707657][ T8139] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1004.738060][ T8139] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1004.761574][ T8139] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1004.771821][ T8139] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1004.780307][ T8139] usb 3-1: Product: syz [ 1004.794902][ T8139] usb 3-1: Manufacturer: syz [ 1004.807139][ T8139] usb 3-1: SerialNumber: syz [ 1004.899564][ T5829] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1004.917269][ T5829] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1004.949587][ T5829] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 1004.969073][ T5829] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1004.991003][ T5829] usb 2-1: config 0 descriptor?? [ 1005.252161][ T8139] usb 3-1: 0:2 : does not exist [ 1005.379334][T18837] netlink: 14 bytes leftover after parsing attributes in process `syz.4.4063'. [ 1005.430485][ T5829] cp2112 0003:10C4:EA90.0046: unknown main item tag 0x0 [ 1005.456025][ T5829] cp2112 0003:10C4:EA90.0046: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.1-1/input0 [ 1005.639298][ T5829] cp2112 0003:10C4:EA90.0046: error requesting version [ 1005.679200][ T5829] cp2112: probe of 0003:10C4:EA90.0046 failed with error -5 [ 1005.849003][ T5829] usb 2-1: USB disconnect, device number 105 [ 1005.958810][T18850] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4067'. [ 1006.029389][T14298] usb 4-1: new high-speed USB device number 115 using dummy_hcd [ 1006.217387][T14298] usb 4-1: Using ep0 maxpacket: 32 [ 1006.243150][T14298] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1006.261066][T14298] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1006.287724][T14298] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1006.298473][T14298] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1006.309409][ T8139] usb 3-1: 1:0: failed to get current value for ch 0 (-22) [ 1006.320451][T14298] usb 4-1: config 0 descriptor?? [ 1006.341891][T14298] hub 4-1:0.0: USB hub found [ 1006.362879][ T8139] usb 3-1: USB disconnect, device number 83 [ 1006.454057][T14670] udevd[14670]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1006.541427][T14298] hub 4-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 1006.659654][T18868] netlink: 14 bytes leftover after parsing attributes in process `syz.4.4072'. [ 1006.877115][T18875] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 1006.945849][T14298] usbhid 4-1:0.0: can't add hid device: -71 [ 1006.961579][T14298] usbhid: probe of 4-1:0.0 failed with error -71 [ 1007.010828][T14298] usb 4-1: USB disconnect, device number 115 [ 1007.105774][T18879] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4076'. [ 1007.526963][T18900] netlink: 14 bytes leftover after parsing attributes in process `syz.2.4082'. [ 1007.679835][T18907] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 1007.722671][T18910] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4088'. [ 1007.859793][ T27] usb 2-1: new high-speed USB device number 106 using dummy_hcd [ 1008.089766][ T27] usb 2-1: Using ep0 maxpacket: 16 [ 1008.106733][ T27] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1008.124899][ T27] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1008.137927][ T27] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1008.158216][ T27] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1008.171225][ T27] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1008.181474][ T27] usb 2-1: Product: syz [ 1008.186293][ T27] usb 2-1: Manufacturer: syz [ 1008.201566][ T27] usb 2-1: SerialNumber: syz [ 1008.626229][ T27] usb 2-1: 0:2 : does not exist [ 1008.741081][T18938] netlink: 14 bytes leftover after parsing attributes in process `syz.4.4097'. [ 1008.978223][T18943] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 1009.117479][ T5829] usb 4-1: new high-speed USB device number 116 using dummy_hcd [ 1009.339842][ T5829] usb 4-1: Using ep0 maxpacket: 32 [ 1009.348356][ T5829] usb 4-1: config 0 has an invalid interface number: 12 but max is 0 [ 1009.377812][ T5829] usb 4-1: config 0 has no interface number 0 [ 1009.402713][ T5829] usb 4-1: config 0 interface 12 has no altsetting 0 [ 1009.429065][ T5829] usb 4-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 1009.444461][ T5829] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1009.463233][ T5829] usb 4-1: Product: syz [ 1009.473412][ T5829] usb 4-1: Manufacturer: syz [ 1009.487339][ T5829] usb 4-1: SerialNumber: syz [ 1009.508266][ T5829] usb 4-1: config 0 descriptor?? [ 1009.690719][ T27] usb 2-1: 1:0: failed to get current value for ch 0 (-22) [ 1009.779036][ T27] usb 2-1: USB disconnect, device number 106 [ 1009.855431][T14670] udevd[14670]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1009.933432][T18964] netlink: 14 bytes leftover after parsing attributes in process `syz.4.4109'. [ 1010.343335][T18970] netlink: 'syz.4.4112': attribute type 1 has an invalid length. [ 1010.412235][T18970] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4112'. [ 1010.423055][T18970] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1010.435255][T18971] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 1011.094255][T18989] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4119'. [ 1011.292932][T18989] hsr_slave_1 (unregistering): left promiscuous mode [ 1011.306423][T19001] netlink: 14 bytes leftover after parsing attributes in process `syz.4.4118'. [ 1011.507566][T12818] usb 2-1: new high-speed USB device number 107 using dummy_hcd [ 1011.619642][T19007] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 1011.698419][T12818] usb 2-1: Using ep0 maxpacket: 16 [ 1011.717096][T12818] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1011.736565][T12818] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1011.752968][T12818] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1011.766889][T12818] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1011.787427][T12818] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1011.806269][T12818] usb 2-1: Product: syz [ 1011.816147][T12818] usb 2-1: Manufacturer: syz [ 1011.826304][T12818] usb 2-1: SerialNumber: syz [ 1011.901173][T19013] syzkaller0: entered promiscuous mode [ 1011.906977][T19013] syzkaller0: entered allmulticast mode [ 1012.276312][T12818] usb 2-1: 0:2 : does not exist [ 1012.615172][T19025] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4128'. [ 1012.805924][T19031] netlink: 14 bytes leftover after parsing attributes in process `syz.4.4129'. [ 1013.213088][ T5829] f81534 4-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 1013.234148][ T5829] f81534 4-1:0.12: f81534_find_config_idx: read failed: -71 [ 1013.242430][ T5829] f81534 4-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 1013.256083][T19040] bond_slave_0: entered promiscuous mode [ 1013.262981][T19040] bond_slave_1: entered promiscuous mode [ 1013.277523][ T5829] f81534: probe of 4-1:0.12 failed with error -71 [ 1013.278667][T19040] vlan2: entered promiscuous mode [ 1013.297008][T19040] bond0: entered promiscuous mode [ 1013.317940][ T5829] usb 4-1: USB disconnect, device number 116 [ 1013.352466][T12818] usb 2-1: 1:0: failed to get current value for ch 0 (-22) [ 1013.406965][T12818] usb 2-1: USB disconnect, device number 107 [ 1013.445221][T19042] syzkaller0: entered promiscuous mode [ 1013.467286][T19042] syzkaller0: entered allmulticast mode [ 1013.872760][T19051] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4138'. [ 1014.859067][T19076] syzkaller0: entered promiscuous mode [ 1014.864630][T19076] syzkaller0: entered allmulticast mode [ 1015.206872][T19084] team0 (unregistering): Failed to send port change of device team_slave_0 via netlink (err -105) [ 1015.232656][T19084] team0 (unregistering): Port device team_slave_0 removed [ 1015.279881][T19084] team0 (unregistering): Failed to send options change via netlink (err -105) [ 1015.298133][T19084] team0 (unregistering): Failed to send port change of device team_slave_1 via netlink (err -105) [ 1015.341405][T19084] team0 (unregistering): Port device team_slave_1 removed [ 1015.411320][T19094] syzkaller0: entered promiscuous mode [ 1015.422810][T19094] syzkaller0: entered allmulticast mode [ 1015.430914][T19096] netlink: 14 bytes leftover after parsing attributes in process `syz.1.4148'. [ 1015.641198][T19110] gretap0: entered promiscuous mode [ 1015.646693][T19110] vlan2: entered promiscuous mode [ 1016.183526][T19130] syzkaller0: entered promiscuous mode [ 1016.197408][T19130] syzkaller0: entered allmulticast mode [ 1016.457421][T19140] netlink: 14 bytes leftover after parsing attributes in process `syz.1.4159'. [ 1017.223638][T19173] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4169'. [ 1017.650701][T19187] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 1018.638300][T19216] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4179'. [ 1018.944151][T19226] batadv0: entered promiscuous mode [ 1018.966169][T19226] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 1022.589193][T19270] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4189'. [ 1023.833744][T19306] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4199'. [ 1026.778189][T19319] netlink: 14 bytes leftover after parsing attributes in process `syz.2.4202'. [ 1027.559056][T19351] 8021q: VLANs not supported on vcan0 [ 1027.819932][T19360] netlink: 14 bytes leftover after parsing attributes in process `syz.3.4212'. [ 1028.091070][T19368] bond6 (unregistering): Released all slaves [ 1028.214093][T19368] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4215'. [ 1031.718898][T19418] netlink: 14 bytes leftover after parsing attributes in process `syz.1.4221'. [ 1031.813215][T19425] veth3: entered allmulticast mode [ 1031.857950][T19425] veth3: left allmulticast mode [ 1035.282274][T19453] netlink: 'syz.2.4232': attribute type 1 has an invalid length. [ 1035.291817][T19453] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 1035.306946][T19456] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 1035.335413][T19458] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4232'. [ 1035.451866][T19450] syzkaller0: entered promiscuous mode [ 1035.459348][T19450] syzkaller0: entered allmulticast mode [ 1039.167101][T19468] team0 (unregistering): Port device team_slave_0 removed [ 1039.205644][T19468] team0 (unregistering): Port device team_slave_1 removed [ 1039.449121][T19483] netlink: 14 bytes leftover after parsing attributes in process `syz.3.4236'. [ 1039.651770][T19488] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4240'. [ 1039.880875][T19505] netlink: 'syz.3.4242': attribute type 1 has an invalid length. [ 1040.050648][T19509] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1040.061939][T19509] bond3: (slave bond4): making interface the new active one [ 1040.071224][T19509] bond3: (slave bond4): Enslaving as an active interface with an up link [ 1040.080843][T19505] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4242'. [ 1040.101334][T19505] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1040.610025][T19529] netlink: 14 bytes leftover after parsing attributes in process `syz.1.4248'. [ 1041.221628][T19555] syzkaller0: entered promiscuous mode [ 1041.238194][T19555] syzkaller0: entered allmulticast mode [ 1042.041687][T19582] syzkaller0: entered promiscuous mode [ 1042.073632][T19582] syzkaller0: entered allmulticast mode [ 1042.118657][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1042.259094][T19589] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4270'. [ 1042.404472][T19597] syz_tun: entered allmulticast mode [ 1042.413957][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1042.483690][T19597] syz_tun: left allmulticast mode [ 1042.726539][T19612] syzkaller0: entered promiscuous mode [ 1042.737524][T19612] syzkaller0: entered allmulticast mode [ 1042.931807][T19615] tipc: Enabled bearer , priority 0 [ 1042.957881][T19615] sch_tbf: burst 16 is lower than device syzkaller0 mtu (1514) ! [ 1042.981927][T19615] tipc: Resetting bearer [ 1043.046186][T19614] tipc: Disabling bearer [ 1043.266992][T19619] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4279'. [ 1043.333018][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1043.397599][T19621] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4280'. [ 1043.598728][T19624] syzkaller0: entered promiscuous mode [ 1043.621412][T19624] syzkaller0: entered allmulticast mode [ 1043.948448][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1044.042204][T19645] syzkaller0: entered promiscuous mode [ 1044.058500][T19645] syzkaller0: entered allmulticast mode [ 1044.259287][T14298] usb 5-1: new high-speed USB device number 117 using dummy_hcd [ 1044.389568][T19655] tipc: Enabling of bearer rejected, failed to enable media [ 1044.487657][T14298] usb 5-1: Using ep0 maxpacket: 32 [ 1044.516591][T14298] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1044.549224][T14298] usb 5-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 1044.567473][T14298] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1044.587484][T14298] usb 5-1: Product: syz [ 1044.594818][T14298] usb 5-1: Manufacturer: syz [ 1044.617314][T14298] usb 5-1: SerialNumber: syz [ 1044.675324][T14298] usb 5-1: config 0 descriptor?? [ 1044.709979][T19666] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4292'. [ 1045.093888][T19672] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4293'. [ 1045.126783][T19672] netlink: 'syz.2.4293': attribute type 3 has an invalid length. [ 1045.136326][T19672] netlink: 3 bytes leftover after parsing attributes in process `syz.2.4293'. [ 1045.146340][T14298] gs_usb 5-1:0.0: Configuring for 242 interfaces [ 1045.162604][T19673] tipc: Enabled bearer , priority 0 [ 1045.234553][T19673] sch_tbf: burst 16 is lower than device syzkaller0 mtu (1514) ! [ 1045.245882][T19673] tipc: Resetting bearer [ 1045.312896][T19671] tipc: Disabling bearer [ 1045.553370][T14298] gs_usb 5-1:0.0: Disabling termination support for channel 0 (-EREMOTEIO) [ 1045.773527][T14298] gs_usb 5-1:0.0: Couldn't get bit timing const for channel 1 (-EPROTO) [ 1045.888803][T19683] syzkaller0: entered promiscuous mode [ 1045.894371][T19683] syzkaller0: entered allmulticast mode [ 1045.944333][T14298] gs_usb: probe of 5-1:0.0 failed with error -71 [ 1046.023875][T14298] usb 5-1: USB disconnect, device number 117 [ 1046.201982][T19693] syzkaller0: entered promiscuous mode [ 1046.208370][T19693] syzkaller0: entered allmulticast mode [ 1046.343764][T19695] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4302'. [ 1046.941190][T19718] syzkaller0: entered promiscuous mode [ 1046.966685][T19718] syzkaller0: entered allmulticast mode [ 1047.357399][T19727] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4312'. [ 1047.509566][T19731] (null): rxe_set_mtu: Set mtu to 1024 [ 1047.516053][T19731] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 1047.524372][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1047.533809][T19731] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4313'. [ 1047.655637][T19735] syzkaller0: entered promiscuous mode [ 1047.665542][T19735] syzkaller0: entered allmulticast mode [ 1048.186065][T19741] team0 (unregistering): Port device team_slave_0 removed [ 1048.236884][T19741] team0 (unregistering): Port device team_slave_1 removed [ 1048.269348][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1048.893482][T19776] (null): rxe_set_mtu: Set mtu to 1024 [ 1048.905478][T19776] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 1048.943752][T19776] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4324'. [ 1049.138784][T19784] syzkaller0: entered promiscuous mode [ 1049.145678][T19784] syzkaller0: entered allmulticast mode [ 1050.186967][T19810] (null): rxe_set_mtu: Set mtu to 1024 [ 1050.193369][T19810] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 1050.210093][T19810] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4334'. [ 1051.357415][T19845] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 1052.203219][T19868] veth3: entered allmulticast mode [ 1052.230390][T19868] veth3: left allmulticast mode [ 1052.594294][T19880] syzkaller0: entered promiscuous mode [ 1052.604119][T19880] syzkaller0: entered allmulticast mode [ 1052.926389][T19884] syzkaller0: entered promiscuous mode [ 1052.936320][T19894] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4359'. [ 1052.946929][T19884] syzkaller0: entered allmulticast mode [ 1053.159716][T19899] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 1054.923872][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.930407][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 1056.749866][T19929] syzkaller0: entered promiscuous mode [ 1056.760191][T19929] syzkaller0: entered allmulticast mode [ 1056.834976][T19931] syzkaller0: entered promiscuous mode [ 1056.845585][T19931] syzkaller0: entered allmulticast mode [ 1056.896698][T19935] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4371'. [ 1057.037367][T19937] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 1057.632384][T19955] syzkaller0: entered promiscuous mode [ 1057.645174][T19955] syzkaller0: entered allmulticast mode [ 1057.863524][T19957] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4376'. [ 1058.247045][T19967] (null): rxe_set_mtu: Set mtu to 1024 [ 1058.256167][T19967] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 1058.277953][T19967] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4381'. [ 1058.306631][T19973] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4384'. [ 1058.330859][T19972] syzkaller0: entered promiscuous mode [ 1058.336425][T19972] syzkaller0: entered allmulticast mode [ 1058.352945][T19973] netlink: 'syz.4.4384': attribute type 12 has an invalid length. [ 1058.560470][T19983] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4386'. [ 1058.746950][T19987] 8021q: VLANs not supported on vcan0 [ 1058.805277][T19989] syzkaller0: entered promiscuous mode [ 1058.814502][T19989] syzkaller0: entered allmulticast mode [ 1059.061157][T19998] bond3 (unregistering): Released all slaves [ 1059.108922][T20005] !yz!: rxe_newlink: already configured on team_slave_0 [ 1059.138054][T20001] infiniband !yz!: set active [ 1059.149677][T20005] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4394'. [ 1059.185108][T20002] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4395'. [ 1059.214228][T19998] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4393'. [ 1059.302284][T20008] syzkaller0: entered promiscuous mode [ 1059.327328][T20008] syzkaller0: entered allmulticast mode [ 1059.355136][T20011] syzkaller0: entered promiscuous mode [ 1059.367342][T20011] syzkaller0: entered allmulticast mode [ 1059.611113][T20015] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4399'. [ 1059.725864][T14299] IPVS: starting estimator thread 0... [ 1059.726411][T20015] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1059.760282][T20029] gretap2: entered promiscuous mode [ 1059.805549][T20028] 8021q: VLANs not supported on vcan0 [ 1059.839744][T20030] IPVS: using max 20 ests per chain, 48000 per kthread [ 1059.981909][T20037] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4404'. [ 1060.000456][T20037] netlink: 'syz.1.4404': attribute type 12 has an invalid length. [ 1060.086146][T20041] bond5 (unregistering): Released all slaves [ 1060.392988][T20052] syzkaller0: entered promiscuous mode [ 1060.406531][T20052] syzkaller0: entered allmulticast mode [ 1060.737932][T20054] syzkaller0: entered promiscuous mode [ 1060.744776][T20054] syzkaller0: entered allmulticast mode [ 1064.021961][T20074] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 1064.034805][T20076] __nla_validate_parse: 1 callbacks suppressed [ 1064.034826][T20076] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4418'. [ 1064.078176][T20080] syz_tun: entered allmulticast mode [ 1064.083961][T20080] syz_tun: left allmulticast mode [ 1064.327477][T20094] syzkaller0: entered promiscuous mode [ 1064.333537][T20094] syzkaller0: entered allmulticast mode [ 1064.350035][T20092] tipc: Enabled bearer , priority 0 [ 1064.411597][T20092] syzkaller0: entered promiscuous mode [ 1064.421800][T20092] syzkaller0: entered allmulticast mode [ 1064.437449][T20097] syzkaller0: entered promiscuous mode [ 1064.443004][T20097] syzkaller0: entered allmulticast mode [ 1064.474165][T20092] tipc: Resetting bearer [ 1064.558661][T20088] tipc: Resetting bearer [ 1064.620097][T20088] tipc: Disabling bearer [ 1064.792478][T20109] netlink: 'syz.3.4427': attribute type 12 has an invalid length. [ 1064.973732][T20113] bond6 (unregistering): Released all slaves [ 1065.023025][T20119] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4430'. [ 1065.057747][T20111] syzkaller0: entered promiscuous mode [ 1065.064465][T20111] syzkaller0: entered allmulticast mode [ 1065.474163][T20132] 8021q: VLANs not supported on vcan0 [ 1065.597845][T20135] !yz!: rxe_newlink: already configured on team_slave_0 [ 1065.614034][T20135] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4434'. [ 1065.649604][T20134] infiniband !yz!: set active [ 1065.778432][T20137] syzkaller0: entered promiscuous mode [ 1065.784013][T20137] syzkaller0: entered allmulticast mode [ 1065.939992][T20143] tipc: Started in network mode [ 1065.946503][T20143] tipc: Node identity e6ebebdf62c5, cluster identity 4711 [ 1065.959668][T20143] tipc: Enabled bearer , priority 0 [ 1065.971508][T20139] syzkaller0: entered promiscuous mode [ 1065.977072][T20139] syzkaller0: entered allmulticast mode [ 1066.008013][T20139] tipc: Resetting bearer [ 1066.048921][T20138] tipc: Resetting bearer [ 1066.111991][T20138] tipc: Disabling bearer [ 1066.164509][T20150] netlink: 'syz.1.4439': attribute type 12 has an invalid length. [ 1066.189204][T20147] bond6 (unregistering): Released all slaves [ 1066.242886][T20151] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4440'. [ 1066.835451][T20171] syzkaller0: entered promiscuous mode [ 1066.842189][T20171] syzkaller0: entered allmulticast mode [ 1067.219340][T20184] bond6 (unregistering): Released all slaves [ 1067.255619][T20190] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4451'. [ 1067.319083][T20189] syzkaller0: entered promiscuous mode [ 1067.324685][T20189] syzkaller0: entered allmulticast mode [ 1067.417385][T20193] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 1068.225405][T20217] syzkaller0: entered promiscuous mode [ 1068.264963][T20217] syzkaller0: entered allmulticast mode [ 1068.540746][T20223] bond2 (unregistering): Released all slaves [ 1068.632540][T20230] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4464'. [ 1068.659449][T20226] syzkaller0: entered promiscuous mode [ 1068.665013][T20226] syzkaller0: entered allmulticast mode [ 1068.696728][T20232] syzkaller0: entered promiscuous mode [ 1068.704471][T20232] syzkaller0: entered allmulticast mode [ 1069.047078][T20245] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4469'. [ 1069.309477][T20256] syzkaller0: entered promiscuous mode [ 1069.322062][T20256] syzkaller0: entered allmulticast mode [ 1069.650345][T20266] syzkaller0: entered promiscuous mode [ 1069.656276][T20266] syzkaller0: entered allmulticast mode [ 1069.757265][T14298] usb 5-1: new high-speed USB device number 118 using dummy_hcd [ 1069.977523][T14298] usb 5-1: Using ep0 maxpacket: 16 [ 1069.986135][T14298] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1070.003015][T14298] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1070.014308][T14298] usb 5-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 1070.040049][T14298] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1070.055357][T14298] usb 5-1: Product: syz [ 1070.061637][T14298] usb 5-1: Manufacturer: syz [ 1070.066356][T14298] usb 5-1: SerialNumber: syz [ 1070.078353][T14298] usb 5-1: config 0 descriptor?? [ 1070.130883][T20271] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4480'. [ 1070.309904][ C0] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 1070.319217][T14298] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input146 [ 1070.373827][T14298] imon:send_packet: packet tx failed (-71) [ 1070.407336][T14298] imon 5-1:0.0: panel buttons/knobs setup failed [ 1070.637518][T14298] rc_core: IR keymap rc-imon-pad not found [ 1070.653718][T14298] Registered IR keymap rc-empty [ 1070.677940][T14298] imon 5-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 1070.725750][T14298] imon 5-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 1070.795267][T14298] imon:send_packet: packet tx failed (-71) [ 1070.823217][T14298] imon 5-1:0.0: remote input dev register failed [ 1070.855734][T14298] imon 5-1:0.0: imon_init_intf0: rc device setup failed [ 1070.890814][T20297] syz_tun: entered allmulticast mode [ 1070.906686][T20297] syz_tun: left allmulticast mode [ 1070.938359][T14298] imon 5-1:0.0: unable to initialize intf0, err 0 [ 1070.961478][T14298] imon:imon_probe: failed to initialize context! [ 1070.992117][T14298] imon 5-1:0.0: unable to register, err -19 [ 1071.011541][T14298] usb 5-1: USB disconnect, device number 118 [ 1071.363111][T20309] syzkaller0: entered promiscuous mode [ 1071.388567][T20309] syzkaller0: entered allmulticast mode [ 1071.411284][T14298] usb 5-1: new high-speed USB device number 119 using dummy_hcd [ 1071.608725][T14298] usb 5-1: Using ep0 maxpacket: 16 [ 1071.616565][T14298] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1071.643168][T14298] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1071.672666][T14298] usb 5-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 1071.685565][T14298] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1071.704175][T14298] usb 5-1: Product: syz [ 1071.711985][T14298] usb 5-1: Manufacturer: syz [ 1071.726222][T14298] usb 5-1: SerialNumber: syz [ 1071.762647][T14298] usb 5-1: config 0 descriptor?? [ 1071.838403][T20317] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4491'. [ 1072.218215][ C0] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 1072.253466][T14298] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input148 [ 1072.288701][T14298] imon:send_packet: packet tx failed (-71) [ 1072.328036][T14298] imon 5-1:0.0: panel buttons/knobs setup failed [ 1072.499474][T20341] veth3: entered allmulticast mode [ 1072.517738][T14298] rc_core: IR keymap rc-imon-pad not found [ 1072.519048][T20341] veth3: left allmulticast mode [ 1072.528091][T14298] Registered IR keymap rc-empty [ 1072.533671][T14298] imon 5-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 1072.553731][T14298] imon 5-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 1072.572267][T14298] imon:send_packet: packet tx failed (-71) [ 1072.597502][T14298] imon 5-1:0.0: remote input dev register failed [ 1072.610866][T14298] imon 5-1:0.0: imon_init_intf0: rc device setup failed [ 1072.630489][T14298] imon 5-1:0.0: unable to initialize intf0, err 0 [ 1072.641912][T14298] imon:imon_probe: failed to initialize context! [ 1072.651511][T14298] imon 5-1:0.0: unable to register, err -19 [ 1072.681685][T14298] usb 5-1: USB disconnect, device number 119 [ 1073.130006][T20358] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4502'. [ 1073.154593][T20331] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1074.417306][T20393] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4511'. [ 1074.944957][T20421] syz_tun: entered allmulticast mode [ 1074.965065][T20421] syz_tun: left allmulticast mode [ 1075.424264][T20404] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1075.623676][T20436] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4521'. [ 1075.658315][T20435] syzkaller0: entered promiscuous mode [ 1075.663916][T20435] syzkaller0: entered allmulticast mode [ 1076.144714][T20452] syzkaller0: entered promiscuous mode [ 1076.152614][T20452] syzkaller0: entered allmulticast mode [ 1076.458060][T20464] syz_tun: entered allmulticast mode [ 1076.469473][T20464] syz_tun: left allmulticast mode [ 1077.083311][T20457] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1077.256436][T20483] netlink: 'syz.1.4533': attribute type 12 has an invalid length. [ 1077.306624][T20481] syzkaller0: entered promiscuous mode [ 1077.319951][T20481] syzkaller0: entered allmulticast mode [ 1077.400754][T20486] syzkaller0: entered promiscuous mode [ 1077.406551][T20486] syzkaller0: entered allmulticast mode [ 1077.932023][T20506] syz_tun: entered allmulticast mode [ 1077.944523][T20506] syz_tun: left allmulticast mode [ 1078.733558][T20508] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1078.746075][T20521] netlink: 'syz.2.4544': attribute type 12 has an invalid length. [ 1078.934833][T20523] syzkaller0: entered promiscuous mode [ 1078.944868][T20523] syzkaller0: entered allmulticast mode [ 1078.996965][T20527] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4546'. [ 1079.084889][T20531] bond2 (unregistering): Released all slaves [ 1079.241125][T20527] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4546'. [ 1079.521383][T20557] netlink: 'syz.2.4553': attribute type 12 has an invalid length. [ 1080.098720][T20574] syzkaller0: entered promiscuous mode [ 1080.104699][T20574] syzkaller0: entered allmulticast mode [ 1080.408657][T20578] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4560'. [ 1080.479048][T20561] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1080.641720][T20583] bond5 (unregistering): Released all slaves [ 1080.746722][T20590] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4560'. [ 1081.056370][T20595] syzkaller0: entered promiscuous mode [ 1081.065060][T20595] syzkaller0: entered allmulticast mode [ 1081.093840][T20595] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 1081.225624][T20600] syzkaller0: entered promiscuous mode [ 1081.233069][T20600] syzkaller0: entered allmulticast mode [ 1081.532666][T20618] syzkaller0: entered promiscuous mode [ 1081.538547][T20618] syzkaller0: entered allmulticast mode [ 1082.262485][T20610] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1082.397963][T20627] tipc: Enabled bearer , priority 0 [ 1082.417795][T20627] syzkaller0: entered promiscuous mode [ 1082.423354][T20627] syzkaller0: entered allmulticast mode [ 1082.508017][T20627] tipc: Resetting bearer [ 1082.522791][T20629] syzkaller0: entered promiscuous mode [ 1082.528638][T20629] syzkaller0: entered allmulticast mode [ 1082.546082][T20626] tipc: Resetting bearer [ 1082.574026][T20626] tipc: Disabling bearer [ 1082.585591][T20629] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 1082.619247][T20634] syzkaller0: entered promiscuous mode [ 1082.625252][T20634] syzkaller0: entered allmulticast mode [ 1082.818061][T20641] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 1083.289815][T20662] syzkaller0: entered promiscuous mode [ 1083.295476][T20662] syzkaller0: entered allmulticast mode [ 1084.106894][T20674] (null): rxe_set_mtu: Set mtu to 1024 [ 1084.117584][T20676] syzkaller0: entered promiscuous mode [ 1084.126702][T20676] syzkaller0: entered allmulticast mode [ 1084.286217][T20674] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 1084.439670][T20681] syzkaller0: entered promiscuous mode [ 1084.445275][T20681] syzkaller0: entered allmulticast mode [ 1084.884419][T20699] netlink: 'syz.3.4598': attribute type 12 has an invalid length. [ 1085.126103][T20713] infiniband !yz!: set active [ 1085.176881][T20714] netlink: 14 bytes leftover after parsing attributes in process `syz.2.4600'. [ 1085.195425][T20713] !yz!: rxe_newlink: already configured on team_slave_0 [ 1085.335308][T20718] syzkaller0: entered promiscuous mode [ 1085.341605][T20718] syzkaller0: entered allmulticast mode [ 1085.639167][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1085.701980][T20698] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1086.107936][T14299] syzkaller0: tun_net_xmit 76 [ 1086.114544][T20725] syzkaller0: create flow: hash 73726153 index 1 [ 1086.198688][ T8139] syzkaller0: tun_net_xmit 76 [ 1086.350377][T20722] syzkaller0: delete flow: hash 73726153 index 1 [ 1089.360660][T20765] syzkaller0: entered promiscuous mode [ 1089.380638][T20765] syzkaller0: entered allmulticast mode [ 1090.148277][T20767] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1090.477533][T20815] syzkaller0: entered promiscuous mode [ 1090.483108][T20815] syzkaller0: entered allmulticast mode [ 1090.727597][T20818] netlink: 'syz.1.4628': attribute type 10 has an invalid length. [ 1090.880516][T20821] syzkaller0: entered promiscuous mode [ 1090.886201][T20821] syzkaller0: entered allmulticast mode [ 1091.093577][T20826] syz_tun: entered allmulticast mode [ 1091.114912][T20823] syz_tun: left allmulticast mode [ 1091.172812][T20829] netlink: 14 bytes leftover after parsing attributes in process `syz.3.4631'. [ 1091.630560][ T27] hid-generic 0005:0006:5508.0047: item fetching failed at offset 3/7 [ 1091.679256][ T27] hid-generic: probe of 0005:0006:5508.0047 failed with error -22 [ 1091.688598][T20845] syzkaller0: entered promiscuous mode [ 1091.707487][T20845] syzkaller0: entered allmulticast mode [ 1091.767476][T20847] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 1091.857936][T20850] syzkaller0: entered promiscuous mode [ 1091.863672][T20850] syzkaller0: entered allmulticast mode [ 1091.879337][T20850] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 1092.259840][T20863] veth3: entered allmulticast mode [ 1092.285376][T20863] veth3: left allmulticast mode [ 1092.919129][T20872] netlink: 14 bytes leftover after parsing attributes in process `syz.3.4644'. [ 1093.412357][T20893] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4653'. [ 1093.555506][T20898] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4655'. [ 1093.835235][T18051] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1093.862471][T18051] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1093.872441][T18051] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1093.883951][T18051] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1093.894218][T18051] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1093.905702][T18051] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1094.012923][T20884] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1094.223604][T20906] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4658'. [ 1094.246516][T20906] vlan2: entered promiscuous mode [ 1094.543668][T20902] chnl_net:caif_netlink_parms(): no params data found [ 1094.641431][T20919] syzkaller0: entered promiscuous mode [ 1094.647052][T20919] syzkaller0: entered allmulticast mode [ 1094.681883][T20902] bridge0: port 1(bridge_slave_0) entered blocking state [ 1094.689624][T20902] bridge0: port 1(bridge_slave_0) entered disabled state [ 1094.696936][T20902] bridge_slave_0: entered allmulticast mode [ 1094.704647][T20902] bridge_slave_0: entered promiscuous mode [ 1094.748782][T20902] bridge0: port 2(bridge_slave_1) entered blocking state [ 1094.759357][T20902] bridge0: port 2(bridge_slave_1) entered disabled state [ 1094.766819][T20902] bridge_slave_1: entered allmulticast mode [ 1094.775176][T20902] bridge_slave_1: entered promiscuous mode [ 1094.849583][T20902] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1094.863852][T20902] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1094.873782][T20927] tipc: Enabled bearer , priority 0 [ 1094.898197][T20927] syzkaller0: entered promiscuous mode [ 1094.904140][T20927] syzkaller0: entered allmulticast mode [ 1094.960853][T20902] team0: Port device team_slave_0 added [ 1094.972207][T20927] tipc: Resetting bearer [ 1094.990388][T20902] team0: Port device team_slave_1 added [ 1095.007503][T14299] usb 2-1: new high-speed USB device number 108 using dummy_hcd [ 1095.022888][T20924] tipc: Resetting bearer [ 1095.144106][T20924] tipc: Disabling bearer [ 1095.177568][T20902] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1095.184798][T20902] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1095.197821][T14299] usb 2-1: Using ep0 maxpacket: 16 [ 1095.212538][T20902] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1095.233690][T20902] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1095.243578][T14299] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1095.262656][T20902] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1095.268084][T14299] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1095.308959][T14299] usb 2-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 1095.318516][T14299] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1095.326629][T14299] usb 2-1: Product: syz [ 1095.331231][T14299] usb 2-1: Manufacturer: syz [ 1095.337502][T14299] usb 2-1: SerialNumber: syz [ 1095.347673][T20902] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1095.358072][T14299] usb 2-1: config 0 descriptor?? [ 1095.489785][T20902] hsr_slave_0: entered promiscuous mode [ 1095.500792][T20902] hsr_slave_1: entered promiscuous mode [ 1095.524463][T20902] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1095.532389][T20902] Cannot create hsr debugfs directory [ 1095.593265][ C0] imon 2-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 1095.612952][T14299] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input150 [ 1095.665330][T14299] imon:send_packet: packet tx failed (-71) [ 1095.697665][T14299] imon 2-1:0.0: panel buttons/knobs setup failed [ 1095.837668][T14299] rc_core: IR keymap rc-imon-pad not found [ 1095.854149][T14299] Registered IR keymap rc-empty [ 1095.873202][T14299] imon 2-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 1095.900101][T20944] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4666'. [ 1095.905065][T14299] imon 2-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 1095.943720][T14299] imon:send_packet: packet tx failed (-71) [ 1095.952152][ T5776] Bluetooth: hci1: command tx timeout [ 1095.981764][T14299] imon 2-1:0.0: remote input dev register failed [ 1095.997652][T14299] imon 2-1:0.0: imon_init_intf0: rc device setup failed [ 1096.014562][T20902] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1096.068777][T14299] imon 2-1:0.0: unable to initialize intf0, err 0 [ 1096.093331][T14299] imon:imon_probe: failed to initialize context! [ 1096.108849][T14299] imon 2-1:0.0: unable to register, err -19 [ 1096.146887][T14299] usb 2-1: USB disconnect, device number 108 [ 1096.240707][T20902] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1096.361550][T20902] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1096.389087][T20953] syzkaller0: entered promiscuous mode [ 1096.394694][T20953] syzkaller0: entered allmulticast mode [ 1096.492563][T20902] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1096.527351][T14299] usb 2-1: new high-speed USB device number 109 using dummy_hcd [ 1096.696133][T20902] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1096.711608][T20902] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1096.722924][T20902] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1096.734333][T20902] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1096.741576][T14299] usb 2-1: Using ep0 maxpacket: 16 [ 1096.758765][T14299] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1096.770587][T14299] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1096.781567][T14299] usb 2-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 1096.791688][T14299] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1096.801185][T14299] usb 2-1: Product: syz [ 1096.805522][T14299] usb 2-1: Manufacturer: syz [ 1096.810962][T14299] usb 2-1: SerialNumber: syz [ 1096.820306][T14299] usb 2-1: config 0 descriptor?? [ 1097.038418][T20902] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1097.089742][T20902] 8021q: adding VLAN 0 to HW filter on device team0 [ 1097.116018][ T1137] bridge0: port 1(bridge_slave_0) entered blocking state [ 1097.124269][ T1137] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1097.160799][ T1137] bridge0: port 2(bridge_slave_1) entered blocking state [ 1097.168102][ T1137] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1097.280827][ C0] imon 2-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 1097.292549][T14299] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input152 [ 1097.310901][T14299] imon:send_packet: packet tx failed (-71) [ 1097.328003][T14299] imon 2-1:0.0: panel buttons/knobs setup failed [ 1097.417535][T14299] rc_core: IR keymap rc-imon-pad not found [ 1097.432000][T14299] Registered IR keymap rc-empty [ 1097.447650][T14299] imon 2-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 1097.469440][T14299] imon 2-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 1097.480168][T14299] imon:send_packet: packet tx failed (-71) [ 1097.504030][T14299] imon 2-1:0.0: remote input dev register failed [ 1097.515803][T14299] imon 2-1:0.0: imon_init_intf0: rc device setup failed [ 1097.542049][T14299] imon 2-1:0.0: unable to initialize intf0, err 0 [ 1097.556493][T14299] imon:imon_probe: failed to initialize context! [ 1097.575367][T14299] imon 2-1:0.0: unable to register, err -19 [ 1097.593504][T14299] usb 2-1: USB disconnect, device number 109 [ 1097.642348][T20980] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4674'. [ 1097.742273][T20902] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1097.853903][T20902] veth0_vlan: entered promiscuous mode [ 1097.890933][T20902] veth1_vlan: entered promiscuous mode [ 1097.958013][T20902] veth0_macvtap: entered promiscuous mode [ 1097.983463][T20902] veth1_macvtap: entered promiscuous mode [ 1098.010320][T20902] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1098.021735][T20902] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1098.035925][ T5776] Bluetooth: hci1: command tx timeout [ 1098.043633][T20902] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1098.054393][T20902] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1098.064368][T20902] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1098.074924][T20902] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1098.083931][T20969] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1098.091082][T20902] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1098.109013][T20902] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1098.119712][T20902] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1098.129981][T20902] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1098.141634][T20902] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1098.151574][T20902] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1098.162174][T20902] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1098.181153][T20902] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1098.228843][T20902] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1098.239494][T20902] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1098.252264][T20902] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1098.261584][T20902] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1098.553100][T20998] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1098.563729][T20998] bond5: (slave bond6): Enslaving as an active interface with an up link [ 1098.614287][T15426] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1098.615298][T20998] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4680'. [ 1098.635870][T15426] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1098.650452][T20998] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1098.663100][T21001] syzkaller0: entered promiscuous mode [ 1098.671686][T21001] syzkaller0: entered allmulticast mode [ 1098.919852][T15426] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1098.946966][T15426] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1099.178370][T21015] syzkaller0: entered promiscuous mode [ 1099.188903][T21015] syzkaller0: entered allmulticast mode [ 1099.199444][T21015] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 1099.760395][T21033] netlink: 'syz.3.4691': attribute type 1 has an invalid length. [ 1099.819725][T21033] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1099.829806][T21033] bond7: (slave bond8): Enslaving as an active interface with an up link [ 1099.853057][T21033] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4691'. [ 1099.864627][T21033] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1100.107960][ T5776] Bluetooth: hci1: command tx timeout [ 1100.413921][T21045] syzkaller0: entered promiscuous mode [ 1100.437515][T21045] syzkaller0: entered allmulticast mode [ 1100.486652][T21048] (null): rxe_set_mtu: Set mtu to 1024 [ 1100.492954][T21048] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 1100.504547][T21048] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4695'. [ 1101.243417][T18051] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1101.262144][T18051] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1101.278991][T18051] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1101.291397][T18051] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1101.299553][T18051] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1101.314977][T18051] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1101.493961][T15420] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1101.532572][T21067] netlink: 'syz.3.4700': attribute type 1 has an invalid length. [ 1101.640374][T21069] 8021q: adding VLAN 0 to HW filter on device bond10 [ 1101.654459][T21069] bond9: (slave bond10): Enslaving as an active interface with an up link [ 1101.756787][T15420] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1101.780381][T21067] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4700'. [ 1101.793465][T21067] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1101.844437][T21077] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4702'. [ 1101.942619][T15420] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1102.070003][T15420] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1102.191825][ T5776] Bluetooth: hci1: command tx timeout [ 1102.390845][T21093] syzkaller0: entered promiscuous mode [ 1102.396418][T21093] syzkaller0: entered allmulticast mode [ 1102.685898][T21099] syzkaller0: entered promiscuous mode [ 1102.692072][T15420] tipc: Left network mode [ 1102.702454][T21099] syzkaller0: entered allmulticast mode [ 1102.768626][T21099] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 1103.190538][T21113] tipc: Enabled bearer , priority 0 [ 1103.213506][T21114] syzkaller0: entered promiscuous mode [ 1103.242979][T21114] syzkaller0: entered allmulticast mode [ 1103.320870][T21062] chnl_net:caif_netlink_parms(): no params data found [ 1103.392048][ T5776] Bluetooth: hci0: command tx timeout [ 1103.516638][T21113] tipc: Resetting bearer [ 1103.654808][T21111] tipc: Resetting bearer [ 1103.758650][T21111] tipc: Disabling bearer [ 1103.956781][T21140] netlink: 'syz.3.4714': attribute type 12 has an invalid length. [ 1104.080058][T21062] bridge0: port 1(bridge_slave_0) entered blocking state [ 1104.094291][T21062] bridge0: port 1(bridge_slave_0) entered disabled state [ 1104.117568][T21062] bridge_slave_0: entered allmulticast mode [ 1104.125135][T21062] bridge_slave_0: entered promiscuous mode [ 1104.216388][T15420] bond1: (slave gretap1): Releasing active interface [ 1104.232861][T21062] bridge0: port 2(bridge_slave_1) entered blocking state [ 1104.253896][T21062] bridge0: port 2(bridge_slave_1) entered disabled state [ 1104.267603][T21062] bridge_slave_1: entered allmulticast mode [ 1104.275197][T21062] bridge_slave_1: entered promiscuous mode [ 1104.482933][T21062] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1104.520668][T21062] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1104.656088][T21155] syzkaller0: entered promiscuous mode [ 1104.684937][T21155] syzkaller0: entered allmulticast mode [ 1105.477353][ T5776] Bluetooth: hci0: command tx timeout [ 1107.548321][ T5776] Bluetooth: hci0: command tx timeout [ 1108.599279][T21062] team0: Port device team_slave_0 added [ 1108.609922][T21062] team0: Port device team_slave_1 added [ 1108.849003][T21062] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1108.862683][T21062] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1108.904554][T21062] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1108.976447][T21062] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1108.994793][T21062] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1109.107266][T21062] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1109.376311][T15420] hsr_slave_0: left promiscuous mode [ 1109.438066][T15420] hsr_slave_1: left promiscuous mode [ 1109.474765][T15420] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1109.488759][T15420] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1109.508701][T15420] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1109.516697][T15420] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1109.545538][T15420] bridge_slave_1: left allmulticast mode [ 1109.557173][T15420] bridge_slave_1: left promiscuous mode [ 1109.563098][T15420] bridge0: port 2(bridge_slave_1) entered disabled state [ 1109.592998][T15420] bridge_slave_0: left allmulticast mode [ 1109.607413][T15420] bridge_slave_0: left promiscuous mode [ 1109.613316][T15420] bridge0: port 1(bridge_slave_0) entered disabled state [ 1109.628854][ T5776] Bluetooth: hci0: command tx timeout [ 1109.725461][T15420] veth0_macvtap: left promiscuous mode [ 1109.738650][T15420] veth1_vlan: left promiscuous mode [ 1109.744092][T15420] veth0_vlan: left promiscuous mode [ 1110.045966][T15420] bond1 (unregistering): Released all slaves [ 1111.119416][T15420] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1111.188214][T15420] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1111.643422][T15420] bond0 (unregistering): Released all slaves [ 1111.830332][T21249] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4728'. [ 1111.938428][T21062] hsr_slave_0: entered promiscuous mode [ 1111.968667][T21062] hsr_slave_1: entered promiscuous mode [ 1111.997690][T21062] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1112.005369][T21062] Cannot create hsr debugfs directory [ 1112.140764][T21274] syzkaller0: entered promiscuous mode [ 1112.159650][T21274] syzkaller0: entered allmulticast mode [ 1112.241426][T21274] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 1112.780897][T21297] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4735'. [ 1112.814357][T21297] vlan2: entered promiscuous mode [ 1112.828123][T21297] bond0: entered promiscuous mode [ 1112.855318][T21297] bond_slave_0: entered promiscuous mode [ 1112.873524][T21297] bond_slave_1: entered promiscuous mode [ 1112.897070][T21302] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4736'. [ 1113.066700][T21302] bond6 (unregistering): Released all slaves [ 1113.563571][T21309] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4736'. [ 1113.742076][T21317] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4739'. [ 1113.967459][T21326] syzkaller0: entered promiscuous mode [ 1113.974963][T21326] syzkaller0: entered allmulticast mode [ 1113.996473][T21326] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 1114.168062][T21331] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4743'. [ 1114.322320][T21062] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1114.389370][T21062] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1114.406274][ T27] IPVS: starting estimator thread 0... [ 1114.429909][T21062] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1114.437070][T21335] IPVS: wrr: FWM 3 0x00000003 - no destination available [ 1114.464724][T21338] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4746'. [ 1114.492333][T21338] vlan2: entered promiscuous mode [ 1114.509162][T21336] IPVS: using max 16 ests per chain, 38400 per kthread [ 1114.539619][T21062] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1115.045234][T21361] syz_tun: entered allmulticast mode [ 1115.084166][T21357] syz_tun: left allmulticast mode [ 1115.169224][T21062] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1115.240075][T21062] 8021q: adding VLAN 0 to HW filter on device team0 [ 1115.356019][ T1137] bridge0: port 1(bridge_slave_0) entered blocking state [ 1115.363354][ T1137] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1115.410217][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 1115.417491][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1115.481552][T21369] syzkaller0: entered promiscuous mode [ 1115.503026][T21369] syzkaller0: entered allmulticast mode [ 1115.532628][T21369] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 1115.776110][T21378] bond1 (unregistering): Released all slaves [ 1115.876591][T21385] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4755'. [ 1115.926161][T21062] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1116.371182][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 1116.379950][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 1116.874337][T21062] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1117.024299][T21062] veth0_vlan: entered promiscuous mode [ 1117.067450][T21062] veth1_vlan: entered promiscuous mode [ 1117.197659][T21062] veth0_macvtap: entered promiscuous mode [ 1117.241119][T21062] veth1_macvtap: entered promiscuous mode [ 1117.276625][T21423] syzkaller0: entered promiscuous mode [ 1117.288067][T21423] syzkaller0: entered allmulticast mode [ 1117.330936][T21423] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 1117.451276][T21425] syzkaller0: entered promiscuous mode [ 1117.457059][T21425] syzkaller0: entered allmulticast mode [ 1120.712125][T21062] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1120.738526][T21062] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1120.757309][T21062] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1120.775040][T21062] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1120.785569][T21062] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1120.802515][T21062] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1120.823784][T21062] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1120.902208][T21062] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1120.931981][T21062] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1120.942583][T21062] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1120.953160][T21062] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1120.972600][T21062] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1121.000955][T21062] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1121.029054][T21062] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1121.179689][T21062] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1121.209408][T21062] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1121.228844][T21062] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1121.249633][T21062] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1121.363607][T21462] bond1 (unregistering): Released all slaves [ 1121.565604][T21470] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4771'. [ 1121.911411][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1121.930455][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1121.955750][T21481] syzkaller0: entered promiscuous mode [ 1121.980639][T21481] syzkaller0: entered allmulticast mode [ 1122.046195][T21481] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 1122.151028][ T1137] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1122.176851][ T1137] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1122.743521][T21508] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input154 [ 1122.933826][T21513] netlink: 14 bytes leftover after parsing attributes in process `syz.4.4779'. [ 1123.067824][T21521] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4781'. [ 1123.756821][T21539] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4787'. [ 1123.837819][T21539] vlan2: entered promiscuous mode [ 1124.167092][T21549] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input155 [ 1124.314121][T18051] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1124.328472][T18051] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1124.337500][T18051] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1124.368487][T18051] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1124.376472][T18051] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1124.415889][T18051] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1124.779149][T21571] netlink: 14 bytes leftover after parsing attributes in process `syz.4.4792'. [ 1125.073061][T21580] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4797'. [ 1125.121089][T21580] vlan0: entered promiscuous mode [ 1125.137528][T21580] bond0: entered promiscuous mode [ 1125.142660][T21580] bond_slave_0: entered promiscuous mode [ 1125.167634][T21580] bond_slave_1: entered promiscuous mode [ 1125.270484][T21587] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4799'. [ 1126.126571][T21556] chnl_net:caif_netlink_parms(): no params data found [ 1126.441467][T21556] bridge0: port 1(bridge_slave_0) entered blocking state [ 1126.450692][T21556] bridge0: port 1(bridge_slave_0) entered disabled state [ 1126.477849][T21556] bridge_slave_0: entered allmulticast mode [ 1126.485494][T21556] bridge_slave_0: entered promiscuous mode [ 1126.501143][T21556] bridge0: port 2(bridge_slave_1) entered blocking state [ 1126.509047][T18051] Bluetooth: hci2: command tx timeout [ 1126.529900][T21556] bridge0: port 2(bridge_slave_1) entered disabled state [ 1126.543817][T21556] bridge_slave_1: entered allmulticast mode [ 1126.561206][T21556] bridge_slave_1: entered promiscuous mode [ 1126.691125][T21556] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1126.713406][T21556] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1126.725329][T21635] netlink: 14 bytes leftover after parsing attributes in process `syz.2.4806'. [ 1126.891554][T21556] team0: Port device team_slave_0 added [ 1126.901208][T21556] team0: Port device team_slave_1 added [ 1126.908055][T21645] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 1126.941749][T21556] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1126.957286][T21556] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1126.987900][T21556] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1127.021860][T21556] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1127.051794][T21556] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1127.109302][T21556] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1127.281818][T21556] hsr_slave_0: entered promiscuous mode [ 1127.288903][T21556] hsr_slave_1: entered promiscuous mode [ 1127.295416][T21556] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1127.304103][T21556] Cannot create hsr debugfs directory [ 1127.878560][T21657] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4814'. [ 1127.983985][T21661] netlink: 68 bytes leftover after parsing attributes in process `syz.1.4816'. [ 1128.086277][T21663] syzkaller0: entered promiscuous mode [ 1128.105178][T21663] syzkaller0: entered allmulticast mode [ 1128.363706][T21556] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1128.376737][T21556] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1128.449293][T21556] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1128.485548][T21556] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1128.597196][T18051] Bluetooth: hci2: command tx timeout [ 1128.840028][T14298] hid-generic 0005:0006:5508.0048: hidraw0: BLUETOOTH HID vc3.36 Device [syz0] on aa:aa:aa:aa:aa:aa [ 1128.898732][T21556] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1128.993932][T21556] 8021q: adding VLAN 0 to HW filter on device team0 [ 1129.024317][ T1137] bridge0: port 1(bridge_slave_0) entered blocking state [ 1129.031612][ T1137] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1129.046540][T21689] fido_id[21689]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci2/hci2:200/report_descriptor': No such file or directory [ 1129.113369][T15428] bridge0: port 2(bridge_slave_1) entered blocking state [ 1129.120643][T15428] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1129.214507][T21694] syzkaller0: entered promiscuous mode [ 1129.223173][T21694] syzkaller0: entered allmulticast mode [ 1130.669393][T18051] Bluetooth: hci2: command tx timeout [ 1132.707740][T21712] syz_tun: entered allmulticast mode [ 1132.737477][T21712] syz_tun: left allmulticast mode [ 1132.748181][T18051] Bluetooth: hci2: command tx timeout [ 1132.761903][T21556] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1133.081839][T21732] netlink: 68 bytes leftover after parsing attributes in process `syz.2.4835'. [ 1133.213098][T21736] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4836'. [ 1133.238885][T21736] netlink: 64 bytes leftover after parsing attributes in process `syz.1.4836'. [ 1133.324292][T21556] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1133.367401][ T8071] hid-generic 0005:0006:5508.0049: hidraw0: BLUETOOTH HID vc3.36 Device [syz0] on aa:aa:aa:aa:aa:aa [ 1133.448677][T21556] veth0_vlan: entered promiscuous mode [ 1133.480333][T21556] veth1_vlan: entered promiscuous mode [ 1133.575761][T21556] veth0_macvtap: entered promiscuous mode [ 1133.595658][T21556] veth1_macvtap: entered promiscuous mode [ 1133.635360][T21556] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1133.655552][T21556] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1133.692314][T21556] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1133.713835][T21556] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1133.736905][T21556] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1133.752917][T21556] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1133.777396][T21556] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1133.804419][T21556] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1133.830106][T21556] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1133.861934][T21556] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1133.884311][T21556] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1133.915771][T21556] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1133.937008][T21556] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1133.967304][T21556] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1134.004106][T21556] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1134.017416][T21556] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1134.035922][T21556] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1134.050671][T21556] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1134.083487][T21756] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4845'. [ 1134.102253][T21556] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1134.112008][T21556] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1134.123237][T21556] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1134.132377][T21556] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1134.151823][T21756] netlink: 64 bytes leftover after parsing attributes in process `syz.1.4845'. [ 1134.516855][T15424] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1134.550014][T15424] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1134.609752][ T1137] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1134.657257][ T1137] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1135.037787][T21791] netlink: 'syz.3.4858': attribute type 12 has an invalid length. [ 1135.489015][T21808] syzkaller0: entered promiscuous mode [ 1135.499927][T21808] syzkaller0: entered allmulticast mode [ 1135.560144][T21812] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4868'. [ 1135.574278][T21812] netlink: 64 bytes leftover after parsing attributes in process `syz.3.4868'. [ 1135.827948][T21820] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 1136.521272][T21847] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4878'. [ 1136.550137][T21847] netlink: 64 bytes leftover after parsing attributes in process `syz.2.4878'. [ 1136.700761][T21853] syzkaller0: entered promiscuous mode [ 1136.727463][T21853] syzkaller0: entered allmulticast mode [ 1137.891667][T21889] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4888'. [ 1138.136827][T21894] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 1138.781853][T21911] __nla_validate_parse: 1 callbacks suppressed [ 1138.781873][T21911] netlink: 68 bytes leftover after parsing attributes in process `syz.3.4892'. [ 1138.920908][T21916] syz_tun: entered allmulticast mode [ 1138.931593][T21916] syz_tun: left allmulticast mode [ 1138.984414][T21918] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4895'. [ 1139.066636][T21923] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4897'. [ 1139.079997][T21923] netlink: 64 bytes leftover after parsing attributes in process `syz.2.4897'. [ 1139.238100][ T5870] IPVS: starting estimator thread 0... [ 1139.357405][T21929] IPVS: using max 19 ests per chain, 45600 per kthread [ 1139.700690][T21944] netlink: 68 bytes leftover after parsing attributes in process `syz.3.4903'. [ 1140.988057][T21969] syzkaller0: entered promiscuous mode [ 1141.007688][T21969] syzkaller0: entered allmulticast mode [ 1141.314223][T21983] syzkaller0: entered promiscuous mode [ 1141.320046][T21983] syzkaller0: entered allmulticast mode [ 1141.857962][T22002] syzkaller0: create flow: hash 73726153 index 1 [ 1141.867770][T14298] syzkaller0: tun_net_xmit 76 [ 1141.987685][T22001] syzkaller0: delete flow: hash 73726153 index 1 [ 1145.082738][T22007] tipc: Started in network mode [ 1145.087981][T22007] tipc: Node identity 0a69d42a94a4, cluster identity 4711 [ 1145.095353][T22007] tipc: Enabled bearer , priority 0 [ 1145.125254][T22013] tipc: Resetting bearer [ 1145.169070][T22006] tipc: Disabling bearer [ 1145.337836][T22017] netlink: 'syz.2.4925': attribute type 12 has an invalid length. [ 1145.382175][T22019] syzkaller0: entered promiscuous mode [ 1145.409102][T22019] syzkaller0: entered allmulticast mode [ 1145.432985][T22023] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4928'. [ 1145.532512][T22025] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4929'. [ 1145.549749][T22025] bridge_slave_1: left allmulticast mode [ 1145.555515][T22025] bridge_slave_1: left promiscuous mode [ 1145.566485][T22025] bridge0: port 2(bridge_slave_1) entered disabled state [ 1145.586067][T22028] netlink: 348 bytes leftover after parsing attributes in process `syz.2.4929'. [ 1145.610188][T22025] bridge_slave_0: left allmulticast mode [ 1145.631085][T22025] bridge_slave_0: left promiscuous mode [ 1145.646987][T22028] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4929'. [ 1145.649724][T22025] bridge0: port 1(bridge_slave_0) entered disabled state [ 1146.122549][T22049] tipc: Started in network mode [ 1146.140798][T22049] tipc: Node identity 8e9e296e3771, cluster identity 4711 [ 1146.158965][T22049] tipc: Enabled bearer , priority 0 [ 1146.176509][T22054] syzkaller0: entered promiscuous mode [ 1146.191835][T22054] syzkaller0: entered allmulticast mode [ 1146.254819][T22046] tipc: Resetting bearer [ 1146.326173][T22046] tipc: Disabling bearer [ 1146.362677][T22058] syzkaller0: entered promiscuous mode [ 1146.368612][T22058] syzkaller0: entered allmulticast mode [ 1146.501122][T22063] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4942'. [ 1146.559624][T22063] bond1 (unregistering): Released all slaves [ 1146.640733][T22069] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4942'. [ 1146.987732][T22078] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4947'. [ 1147.080105][T22078] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4947'. [ 1147.149759][T22082] syzkaller0: entered promiscuous mode [ 1147.165619][T22082] syzkaller0: entered allmulticast mode [ 1147.375322][T22088] syzkaller0: entered promiscuous mode [ 1147.381199][T22088] syzkaller0: entered allmulticast mode [ 1147.564983][T22091] syzkaller0: entered promiscuous mode [ 1147.578407][T22091] syzkaller0: entered allmulticast mode [ 1147.916491][T22104] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4958'. [ 1148.813240][T22137] syz_tun: entered allmulticast mode [ 1148.853293][T22137] syz_tun: left allmulticast mode [ 1149.149964][T22148] syzkaller0: entered promiscuous mode [ 1149.156276][T22148] syzkaller0: entered allmulticast mode [ 1149.202442][T22147] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4969'. [ 1150.084163][T22187] netlink: 'syz.3.4979': attribute type 1 has an invalid length. [ 1150.308938][T22196] bond1: (slave gretap1): making interface the new active one [ 1150.329209][T22196] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 1150.349613][T22197] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1150.880088][T22208] syzkaller0: entered promiscuous mode [ 1150.885664][T22208] syzkaller0: entered allmulticast mode [ 1151.347671][T22221] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 1152.253564][T22255] bridge_slave_0: left allmulticast mode [ 1152.260424][T22255] bridge_slave_0: left promiscuous mode [ 1152.266416][T22255] bridge0: port 1(bridge_slave_0) entered disabled state [ 1152.303972][T22255] bridge_slave_1: left allmulticast mode [ 1152.315538][T22255] bridge_slave_1: left promiscuous mode [ 1152.325764][T22255] bridge0: port 2(bridge_slave_1) entered disabled state [ 1152.360757][T22255] bond0: (slave bond_slave_0): Releasing backup interface [ 1152.438581][T22255] bond0: (slave bond_slave_1): Releasing backup interface [ 1152.619537][T22255] team0: Port device team_slave_0 removed [ 1152.651553][T22255] team0: Port device team_slave_1 removed [ 1152.679224][T22255] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1152.709696][T22255] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1152.746962][T22255] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1152.764682][T22255] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1153.874144][T22306] __nla_validate_parse: 1 callbacks suppressed [ 1153.874165][T22306] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5011'. [ 1153.901823][T22306] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5011'. [ 1154.065333][T22304] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5010'. [ 1154.074978][T22304] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1154.220830][T22304] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1154.822861][T22331] netlink: 'syz.2.5018': attribute type 1 has an invalid length. [ 1154.980484][T22334] bond1: (slave gretap1): making interface the new active one [ 1155.015757][T22334] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 1155.307954][T22347] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 1155.934224][T22368] syzkaller0: entered promiscuous mode [ 1155.946531][T22368] syzkaller0: entered allmulticast mode [ 1156.162477][T22372] netlink: 'syz.3.5029': attribute type 1 has an invalid length. [ 1156.293165][T22372] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5029'. [ 1156.328153][T22372] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1156.396729][T22380] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5032'. [ 1156.715185][T22391] syzkaller0: entered promiscuous mode [ 1156.723812][T22391] syzkaller0: entered allmulticast mode [ 1157.634424][T22426] syzkaller0: entered promiscuous mode [ 1157.647320][T22426] syzkaller0: entered allmulticast mode [ 1157.673681][T22426] 0: reclassify loop, rule prio 0, protocol 700 [ 1157.997554][T22436] syzkaller0: entered promiscuous mode [ 1158.023766][T22436] syzkaller0: entered allmulticast mode [ 1158.317482][T22440] syzkaller0: entered promiscuous mode [ 1158.323069][T22440] syzkaller0: entered allmulticast mode [ 1158.637451][T22446] tipc: Started in network mode [ 1158.651559][T22446] tipc: Node identity daed501638cc, cluster identity 4711 [ 1158.661891][T22446] tipc: Enabled bearer , priority 0 [ 1158.697992][T22455] syzkaller0: entered promiscuous mode [ 1158.703561][T22455] syzkaller0: entered allmulticast mode [ 1158.848396][T22446] tipc: Resetting bearer [ 1158.879450][T22445] tipc: Resetting bearer [ 1158.976654][T22445] tipc: Disabling bearer [ 1159.189719][T22471] syzkaller0: entered promiscuous mode [ 1159.195284][T22471] syzkaller0: entered allmulticast mode [ 1159.623474][T22486] syzkaller0: entered promiscuous mode [ 1159.634197][T22486] syzkaller0: entered allmulticast mode [ 1160.084574][T22500] syzkaller0: entered promiscuous mode [ 1160.097730][T22500] syzkaller0: entered allmulticast mode [ 1160.630175][T22518] tipc: Started in network mode [ 1160.635257][T22518] tipc: Node identity 5eeb9396d74, cluster identity 4711 [ 1160.657883][T22518] tipc: Enabled bearer , priority 0 [ 1160.700736][T22520] syzkaller0: entered promiscuous mode [ 1160.706321][T22520] syzkaller0: entered allmulticast mode [ 1160.778801][T22518] tipc: Resetting bearer [ 1160.798573][T22515] tipc: Resetting bearer [ 1160.868267][T22515] tipc: Disabling bearer [ 1161.858321][T22569] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5084'. [ 1162.020281][T22562] team0 (unregistering): Failed to send port change of device team_slave_0 via netlink (err -105) [ 1162.046139][T22562] team0 (unregistering): Port device team_slave_0 removed [ 1162.143435][T22562] team0 (unregistering): Failed to send options change via netlink (err -105) [ 1162.157836][T22562] team0 (unregistering): Failed to send port change of device team_slave_1 via netlink (err -105) [ 1162.174302][T22562] team0 (unregistering): Port device team_slave_1 removed [ 1162.209392][T22566] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5085'. [ 1162.449388][T22585] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5090'. [ 1162.630857][T22588] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 1163.532900][T22595] syzkaller0: entered promiscuous mode [ 1163.555740][T22595] syzkaller0: entered allmulticast mode [ 1163.694112][T22608] syzkaller0: entered promiscuous mode [ 1163.701525][T22608] syzkaller0: entered allmulticast mode [ 1163.861108][T22618] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5097'. [ 1163.938388][T22620] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5098'. [ 1164.088773][T22623] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5099'. [ 1164.140407][T22628] netlink: 'syz.4.5102': attribute type 1 has an invalid length. [ 1164.209816][T22635] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 1164.312262][T22630] bond6: (slave vxcan3): The slave device specified does not support setting the MAC address [ 1164.370155][T22630] bond6: (slave vxcan3): Error -95 calling set_mac_address [ 1164.466608][T22637] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5102'. [ 1164.720807][T22646] syzkaller0: entered promiscuous mode [ 1164.736842][T22646] syzkaller0: entered allmulticast mode [ 1164.744907][T22628] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5102'. [ 1164.770726][T22628] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1164.825661][T22630] macvlan0: entered promiscuous mode [ 1164.847246][T22630] macvlan0: entered allmulticast mode [ 1164.854398][T22630] bond6: entered promiscuous mode [ 1164.878083][T22630] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 1164.904085][T22630] bond6: left promiscuous mode [ 1165.312136][T22657] tipc: Enabled bearer , priority 0 [ 1165.325021][T22657] syzkaller0: entered promiscuous mode [ 1165.341441][T22657] syzkaller0: entered allmulticast mode [ 1165.359495][T22659] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5109'. [ 1165.391337][T22657] tipc: Resetting bearer [ 1165.442362][T22656] tipc: Resetting bearer [ 1165.515332][T22656] tipc: Disabling bearer [ 1165.868786][T22677] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 1166.139636][T22693] netlink: 'syz.3.5123': attribute type 1 has an invalid length. [ 1166.337651][T22693] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5123'. [ 1166.383365][T22693] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1167.424899][T22729] syz_tun: entered allmulticast mode [ 1167.465460][T22726] syz_tun: left allmulticast mode [ 1167.568722][T22734] syzkaller0: entered promiscuous mode [ 1167.574563][T22734] syzkaller0: entered allmulticast mode [ 1168.321698][T22764] syz_tun: entered allmulticast mode [ 1168.492017][T22759] syz_tun: left allmulticast mode [ 1168.645996][T22774] syzkaller0: entered promiscuous mode [ 1168.662213][T22774] syzkaller0: entered allmulticast mode [ 1168.858363][T22779] syzkaller0: entered promiscuous mode [ 1168.879765][T22779] syzkaller0: entered allmulticast mode [ 1169.079449][T22788] tipc: Enabled bearer , priority 0 [ 1169.092038][T22788] syzkaller0: entered promiscuous mode [ 1169.097826][T22788] syzkaller0: entered allmulticast mode [ 1169.129249][T22788] tipc: Resetting bearer [ 1169.148183][T22787] tipc: Resetting bearer [ 1169.213517][T22787] tipc: Disabling bearer [ 1169.783317][T22810] syzkaller0: entered promiscuous mode [ 1169.797263][T22810] syzkaller0: entered allmulticast mode [ 1169.947474][T22816] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 1171.393623][T22849] syzkaller0: entered promiscuous mode [ 1171.407531][T22849] syzkaller0: entered allmulticast mode [ 1171.847554][T22862] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 1172.109295][T22870] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5191'. [ 1172.901846][T22887] syzkaller0: entered promiscuous mode [ 1172.917600][T22887] syzkaller0: entered allmulticast mode [ 1173.177853][T22894] syz_tun: entered allmulticast mode [ 1173.635784][T22910] syzkaller0: entered promiscuous mode [ 1173.658994][T22910] syzkaller0: entered allmulticast mode [ 1173.893302][T22916] syzkaller0: entered promiscuous mode [ 1173.921093][T22916] syzkaller0: entered allmulticast mode [ 1174.270739][T22923] syz_tun: entered allmulticast mode [ 1174.311576][T22923] syz_tun: left allmulticast mode [ 1174.743201][T22941] syzkaller0: entered promiscuous mode [ 1174.756302][T22941] syzkaller0: entered allmulticast mode [ 1175.375855][T22956] syz_tun: entered allmulticast mode [ 1175.404212][T22956] syz_tun: left allmulticast mode [ 1175.850417][T22966] syzkaller0: entered promiscuous mode [ 1175.860228][T22966] syzkaller0: entered allmulticast mode [ 1176.540398][T22985] syz_tun: entered allmulticast mode [ 1176.595950][T22985] syz_tun: left allmulticast mode [ 1177.356557][T23008] netlink: 'syz.1.5248': attribute type 1 has an invalid length. [ 1177.477325][T23012] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5248'. [ 1177.558762][T23008] bond1: (slave gretap1): making interface the new active one [ 1177.591809][T23008] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 1177.615565][T23012] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5248'. [ 1177.631808][T23012] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1177.795888][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.802664][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 1178.028225][T23025] syz_tun: entered allmulticast mode [ 1178.076006][T23025] syz_tun: left allmulticast mode [ 1178.745964][T23045] netlink: 'syz.4.5260': attribute type 1 has an invalid length. [ 1178.820888][T23045] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5260'. [ 1178.861214][T23045] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5260'. [ 1178.872685][T23045] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1179.142608][T23054] syzkaller0: entered promiscuous mode [ 1179.150510][T23054] syzkaller0: entered allmulticast mode [ 1183.382300][T23086] netlink: 'syz.3.5274': attribute type 1 has an invalid length. [ 1183.442764][T23086] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5274'. [ 1183.454481][T23086] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5274'. [ 1183.466073][T23086] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1183.689855][T23094] syzkaller0: entered promiscuous mode [ 1183.695570][T23094] syzkaller0: entered allmulticast mode [ 1184.308478][T23108] syzkaller0: entered promiscuous mode [ 1184.314201][T23108] syzkaller0: entered allmulticast mode [ 1188.899621][T23124] syzkaller0: entered promiscuous mode [ 1188.930670][T23124] syzkaller0: entered allmulticast mode [ 1189.211914][T23133] netlink: 'syz.3.5293': attribute type 1 has an invalid length. [ 1189.300686][T23139] bond6: (slave vxcan3): The slave device specified does not support setting the MAC address [ 1189.313233][T23139] bond6: (slave vxcan3): Error -95 calling set_mac_address [ 1189.365428][T23133] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5293'. [ 1189.414464][T23133] bond6: (slave bridge1): Enslaving as an active interface with a down link [ 1189.475470][T23133] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5293'. [ 1189.778696][T23151] syzkaller0: entered promiscuous mode [ 1189.784285][T23151] syzkaller0: entered allmulticast mode [ 1194.546025][T23183] netlink: 'syz.3.5303': attribute type 1 has an invalid length. [ 1194.676978][T23187] bond7: (slave vxcan3): The slave device specified does not support setting the MAC address [ 1194.719209][T23187] bond7: (slave vxcan3): Error -95 calling set_mac_address [ 1194.784704][T23189] netlink: 'syz.2.5305': attribute type 1 has an invalid length. [ 1194.824609][T23191] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 1194.846993][T23191] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 1194.874269][T23183] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5303'. [ 1194.896729][T23183] bond7: (slave bridge2): Enslaving as an active interface with a down link [ 1194.910945][T23193] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5305'. [ 1194.941271][T23193] bond2: (slave bridge0): Enslaving as an active interface with a down link [ 1194.970297][T23192] macvlan0: entered promiscuous mode [ 1194.975875][T23192] macvlan0: entered allmulticast mode [ 1194.989213][T23192] bond7: entered promiscuous mode [ 1194.995213][T23192] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 1195.004800][T23192] bond7: left promiscuous mode [ 1195.040354][T23189] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5305'. [ 1195.376876][T23207] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5309'. [ 1195.578827][T23212] syzkaller0: entered promiscuous mode [ 1195.584808][T23212] syzkaller0: entered allmulticast mode [ 1196.365707][T23238] "syz.3.5317" (23238) uses obsolete ecb(arc4) skcipher [ 1199.080566][T23225] netlink: 'syz.4.5315': attribute type 1 has an invalid length. [ 1199.116442][T23228] bond8: (slave vxcan3): The slave device specified does not support setting the MAC address [ 1199.131408][T23228] bond8: (slave vxcan3): Error -95 calling set_mac_address [ 1199.163661][T23230] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5315'. [ 1199.205747][T23230] bond8: (slave bridge1): Enslaving as an active interface with a down link [ 1199.224648][T23232] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5315'. [ 1199.557532][T23254] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5321'. [ 1200.080727][T23264] syzkaller0: entered promiscuous mode [ 1200.094797][T23264] syzkaller0: entered allmulticast mode [ 1200.768182][T23281] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5332'. [ 1203.281988][T23270] netlink: 'syz.4.5328': attribute type 1 has an invalid length. [ 1203.292952][T23270] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR [ 1203.330378][T23274] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5328'. [ 1203.443153][T23275] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5328'. [ 1203.489956][T23296] netlink: 'syz.3.5336': attribute type 2 has an invalid length. [ 1203.504336][T23296] netlink: 'syz.3.5336': attribute type 5 has an invalid length. [ 1203.986705][T23311] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5341'. [ 1204.229049][T23316] syzkaller0: entered promiscuous mode [ 1204.234762][T23316] syzkaller0: entered allmulticast mode [ 1207.467375][T23321] syzkaller0: entered promiscuous mode [ 1207.473172][T23321] syzkaller0: entered allmulticast mode [ 1207.485508][T23326] netlink: 'syz.3.5346': attribute type 1 has an invalid length. [ 1207.494741][T23326] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 1207.542821][T23330] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5346'. [ 1207.625019][T23331] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5346'. [ 1207.827564][T23342] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5350'. [ 1207.874924][T23344] netlink: 'syz.2.5351': attribute type 1 has an invalid length. [ 1207.953290][T23344] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 1207.966469][T23344] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 1208.009397][T23349] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5351'. [ 1208.032815][T23349] bond3: (slave bridge1): Enslaving as an active interface with a down link [ 1208.078918][T23344] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5351'. [ 1208.098332][T23350] syz_tun: entered allmulticast mode [ 1208.130551][T23344] macvlan0: entered promiscuous mode [ 1208.136134][T23344] macvlan0: entered allmulticast mode [ 1208.149199][T23344] bond3: entered promiscuous mode [ 1208.156552][T23344] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 1208.173077][T23344] bond3: left promiscuous mode [ 1208.225039][T23353] syz_tun: left allmulticast mode [ 1208.555703][T23358] syzkaller0: entered promiscuous mode [ 1208.565158][T23358] syzkaller0: entered allmulticast mode [ 1208.589302][T23362] netlink: 'syz.4.5358': attribute type 1 has an invalid length. [ 1208.638625][T23364] bond9: (slave vxcan3): The slave device specified does not support setting the MAC address [ 1208.651360][T23364] bond9: (slave vxcan3): Error -95 calling set_mac_address [ 1212.013026][T23368] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5358'. [ 1212.058702][T23368] bond9: (slave bridge2): Enslaving as an active interface with a down link [ 1212.078501][T23362] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5358'. [ 1212.113157][T23366] syzkaller0: entered promiscuous mode [ 1212.127329][T23366] syzkaller0: entered allmulticast mode [ 1212.783585][T23408] syzkaller0: entered promiscuous mode [ 1212.798150][T23408] syzkaller0: entered allmulticast mode [ 1212.927692][T23412] syzkaller0: entered promiscuous mode [ 1212.933391][T23412] syzkaller0: entered allmulticast mode [ 1215.716974][T18051] Bluetooth: hci3: command 0x0406 tx timeout [ 1216.328221][T23425] syz_tun: entered allmulticast mode [ 1216.365997][T23425] syz_tun: left allmulticast mode [ 1216.766898][T23440] netlink: 'syz.3.5386': attribute type 1 has an invalid length. [ 1216.898615][T23444] bond8: entered promiscuous mode [ 1216.903765][T23444] bond8: entered allmulticast mode [ 1216.947717][T23444] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1217.042601][T23440] bridge3: entered promiscuous mode [ 1217.048473][T23440] bridge3: entered allmulticast mode [ 1217.054813][T23440] bond8: (slave bridge3): Enslaving as a backup interface with an up link [ 1217.101738][T23440] bridge4: entered promiscuous mode [ 1217.107438][T23440] bridge4: entered allmulticast mode [ 1217.113660][T23440] bond8: (slave bridge4): Enslaving as a backup interface with a down link [ 1217.145574][T15420] bond8: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 1217.278550][ T12] bond8: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 1217.353686][T23458] syz_tun: entered allmulticast mode [ 1217.362219][T23456] syzkaller0: entered promiscuous mode [ 1217.370765][T23456] syzkaller0: entered allmulticast mode [ 1217.423187][T23458] syz_tun: left allmulticast mode [ 1217.911586][T23478] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5400'. [ 1218.144254][T23485] syz_tun: entered allmulticast mode [ 1218.169847][T23485] syz_tun: left allmulticast mode [ 1218.512121][T23494] netlink: 'syz.4.5408': attribute type 1 has an invalid length. [ 1218.608275][T23497] bond10: (slave vxcan3): The slave device specified does not support setting the MAC address [ 1218.638405][T23497] bond10: (slave vxcan3): Error -95 calling set_mac_address [ 1218.665268][T23494] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5408'. [ 1218.691281][T23494] bond10: (slave bridge3): Enslaving as an active interface with a down link [ 1218.895143][T23505] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5410'. [ 1219.384632][T23521] netlink: 'syz.4.5418': attribute type 1 has an invalid length. [ 1219.478290][T23525] bond11: (slave vxcan3): The slave device specified does not support setting the MAC address [ 1219.499054][T23525] bond11: (slave vxcan3): Error -95 calling set_mac_address [ 1219.606138][T23533] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5421'. [ 1219.629943][T23521] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5418'. [ 1219.693249][T23521] bond11: (slave bridge4): Enslaving as an active interface with a down link [ 1219.803020][T23539] syzkaller0: entered promiscuous mode [ 1219.840707][T23539] syzkaller0: entered allmulticast mode [ 1220.012805][T23547] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5425'. [ 1220.129197][T23548] syz_tun: entered allmulticast mode [ 1220.236450][T23546] syz_tun: left allmulticast mode [ 1220.481698][T23559] bridge: RTM_NEWNEIGH with unconfigured vlan 2 on bridge0 [ 1220.494871][T23559] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5431'. [ 1220.504122][T23559] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5431'. [ 1220.537952][T23559] Bluetooth: MGMT ver 1.22 [ 1220.548462][T23559] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5431'. [ 1220.569811][T23559] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5431'. [ 1220.759316][T23569] netlink: 'syz.3.5436': attribute type 1 has an invalid length. [ 1220.830457][ T5776] Bluetooth: hci1: command 0x0406 tx timeout [ 1220.883604][T23569] bond9: (slave vxcan3): The slave device specified does not support setting the MAC address [ 1220.896845][T23569] bond9: (slave vxcan3): Error -95 calling set_mac_address [ 1220.916497][T23574] netlink: 'syz.4.5438': attribute type 1 has an invalid length. [ 1220.961715][T23575] bond9: (slave bridge5): Enslaving as an active interface with a down link [ 1220.982638][T23572] syzkaller0: entered promiscuous mode [ 1220.989039][T23572] syzkaller0: entered allmulticast mode [ 1221.024417][T23569] macvlan0: entered promiscuous mode [ 1221.030567][T23569] macvlan0: entered allmulticast mode [ 1221.038896][T23569] bond9: entered promiscuous mode [ 1221.044715][T23569] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 1221.055200][T23569] bond9: left promiscuous mode [ 1221.168054][T23574] 8021q: adding VLAN 0 to HW filter on device bond12 [ 1221.731066][T23601] syzkaller0: entered promiscuous mode [ 1221.736751][T23601] syzkaller0: entered allmulticast mode [ 1221.755203][T23604] netlink: 'syz.1.5449': attribute type 1 has an invalid length. [ 1225.240273][T23606] __nla_validate_parse: 5 callbacks suppressed [ 1225.240293][T23606] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5449'. [ 1225.263558][T23606] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1225.271713][T23611] netlink: 'syz.3.5451': attribute type 1 has an invalid length. [ 1225.324147][T23612] bond10: (slave vxcan3): The slave device specified does not support setting the MAC address [ 1225.337702][T23612] bond10: (slave vxcan3): Error -95 calling set_mac_address [ 1225.377455][T23613] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5451'. [ 1225.404505][T23613] 8021q: adding VLAN 0 to HW filter on device bond10 [ 1225.868645][T23641] netlink: 'syz.1.5463': attribute type 1 has an invalid length. [ 1225.975204][T23644] syzkaller0: entered promiscuous mode [ 1225.981199][T23644] syzkaller0: entered allmulticast mode [ 1225.995076][T23641] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5463'. [ 1226.037275][T23641] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1226.045018][T23651] netlink: 'syz.3.5466': attribute type 1 has an invalid length. [ 1229.302475][T23653] bond11: (slave vxcan3): The slave device specified does not support setting the MAC address [ 1229.314646][T23653] bond11: (slave vxcan3): Error -95 calling set_mac_address [ 1229.341732][T23651] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5466'. [ 1229.358394][T23651] 8021q: adding VLAN 0 to HW filter on device bond11 [ 1229.368597][T23659] netlink: 'syz.1.5469': attribute type 1 has an invalid length. [ 1229.390861][T23659] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 1229.744636][T23685] syzkaller0: entered promiscuous mode [ 1229.760292][T23685] syzkaller0: entered allmulticast mode [ 1229.771543][T23681] netlink: 'syz.4.5476': attribute type 1 has an invalid length. [ 1229.891917][T23681] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5476'. [ 1229.902598][T23681] 8021q: adding VLAN 0 to HW filter on device bond13 [ 1229.990281][T23691] syzkaller0: entered promiscuous mode [ 1229.996056][T23691] syzkaller0: entered allmulticast mode [ 1233.422918][T23694] netlink: 'syz.3.5481': attribute type 1 has an invalid length. [ 1233.432800][T23694] workqueue: Failed to create a rescuer kthread for wq "bond12": -EINTR [ 1233.483129][T23702] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5481'. [ 1233.539757][T23716] netlink: 'syz.4.5488': attribute type 1 has an invalid length. [ 1233.563317][T23716] workqueue: Failed to create a rescuer kthread for wq "bond14": -EINTR [ 1233.618570][T23720] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5488'. [ 1233.784050][T23729] netlink: 'syz.2.5491': attribute type 1 has an invalid length. [ 1233.863297][T23736] syzkaller0: entered promiscuous mode [ 1233.896916][T23736] syzkaller0: entered allmulticast mode [ 1233.909147][T23729] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5491'. [ 1233.944734][T23729] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1234.043339][T23742] syzkaller0: entered promiscuous mode [ 1234.049199][T23742] syzkaller0: entered allmulticast mode [ 1234.333137][T23745] syzkaller0: entered promiscuous mode [ 1234.354943][T23745] syzkaller0: entered allmulticast mode [ 1234.364286][T23750] netlink: 'syz.1.5498': attribute type 1 has an invalid length. [ 1234.431792][T23753] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address [ 1234.444142][T23753] bond4: (slave vxcan3): Error -95 calling set_mac_address [ 1237.769362][T23750] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5498'. [ 1237.804833][T23758] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5498'. [ 1237.816217][T23758] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1237.857305][T23769] netlink: 'syz.4.5503': attribute type 1 has an invalid length. [ 1237.865811][T23769] workqueue: Failed to create a rescuer kthread for wq "bond14": -EINTR [ 1237.936402][T23771] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5503'. [ 1238.075883][T23779] syz_tun: entered allmulticast mode [ 1238.106493][T23779] syz_tun: left allmulticast mode [ 1238.205741][T23783] syzkaller0: entered promiscuous mode [ 1238.223753][T23783] syzkaller0: entered allmulticast mode [ 1238.376970][T23789] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5510'. [ 1238.397912][T23789] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5510'. [ 1238.504674][T23793] syzkaller0: entered promiscuous mode [ 1238.519502][T23793] syzkaller0: entered allmulticast mode [ 1238.760311][T23803] netlink: 'syz.1.5517': attribute type 1 has an invalid length. [ 1238.842571][T23808] bond5: (slave vxcan3): The slave device specified does not support setting the MAC address [ 1238.854978][T23808] bond5: (slave vxcan3): Error -95 calling set_mac_address [ 1238.878248][T23809] syz_tun: entered allmulticast mode [ 1238.892674][T23809] syz_tun: left allmulticast mode [ 1238.901642][T23803] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5517'. [ 1238.965994][T23803] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1239.023293][T23803] macvlan0: entered promiscuous mode [ 1239.039561][T23803] macvlan0: entered allmulticast mode [ 1239.046228][T23803] bond5: entered promiscuous mode [ 1239.062354][T23803] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 1239.088722][T23811] netlink: 'syz.3.5520': attribute type 3 has an invalid length. [ 1239.097363][T23811] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5520'. [ 1239.148473][T23803] bond5: left promiscuous mode [ 1239.249074][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 1239.255536][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 1239.334771][T23819] syzkaller0: entered promiscuous mode [ 1239.340540][T23819] syzkaller0: entered allmulticast mode [ 1239.356599][T23817] netlink: 'syz.3.5523': attribute type 1 has an invalid length. [ 1239.461977][T23820] bond12: entered promiscuous mode [ 1239.477521][T23820] bond12: entered allmulticast mode [ 1239.483279][T23820] 8021q: adding VLAN 0 to HW filter on device bond12 [ 1239.782088][T23838] syz_tun: entered allmulticast mode [ 1239.798355][T23841] netlink: 'syz.1.5533': attribute type 3 has an invalid length. [ 1239.811172][T23838] syz_tun: left allmulticast mode [ 1239.817448][T23841] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5533'. [ 1240.031620][T23850] netlink: 'syz.3.5536': attribute type 1 has an invalid length. [ 1240.124579][T23850] bond13: (slave vxcan3): The slave device specified does not support setting the MAC address [ 1240.146039][T23850] bond13: (slave vxcan3): Error -95 calling set_mac_address [ 1240.187418][T23857] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5536'. [ 1240.202614][T23857] 8021q: adding VLAN 0 to HW filter on device bond13 [ 1240.222671][T23857] macvlan0: entered promiscuous mode [ 1240.230867][T23857] macvlan0: entered allmulticast mode [ 1240.244874][T23857] bond13: entered promiscuous mode [ 1240.254458][T23857] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 1240.287184][T23857] bond13: left promiscuous mode [ 1240.335245][T23861] netlink: 'syz.4.5539': attribute type 1 has an invalid length. [ 1240.382138][T23863] bond14: entered promiscuous mode [ 1240.397668][T23863] bond14: entered allmulticast mode [ 1240.403607][T23863] 8021q: adding VLAN 0 to HW filter on device bond14 [ 1240.505883][T23865] syzkaller0: entered promiscuous mode [ 1240.512114][T23865] syzkaller0: entered allmulticast mode [ 1240.763858][T23873] syz_tun: entered allmulticast mode [ 1240.785924][T23873] syz_tun: left allmulticast mode [ 1241.123575][T23885] netlink: 'syz.1.5549': attribute type 1 has an invalid length. [ 1241.186588][T23885] bond6: (slave vxcan3): The slave device specified does not support setting the MAC address [ 1241.200595][T23885] bond6: (slave vxcan3): Error -95 calling set_mac_address [ 1241.241089][T23892] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5549'. [ 1241.272171][T23892] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1241.294937][T23894] syzkaller0: entered promiscuous mode [ 1241.300933][T23894] syzkaller0: entered allmulticast mode [ 1241.366755][T23885] macvlan0: entered promiscuous mode [ 1241.379003][T23885] macvlan0: entered allmulticast mode [ 1241.394476][T23885] bond6: entered promiscuous mode [ 1241.405084][T23885] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 1241.423277][T23885] bond6: left promiscuous mode [ 1241.959354][T23922] syzkaller0: entered promiscuous mode [ 1241.965356][T23922] syzkaller0: entered allmulticast mode [ 1242.102142][T23925] syzkaller0: entered promiscuous mode [ 1242.121049][T23925] syzkaller0: entered allmulticast mode [ 1242.248944][T23929] bridge: RTM_NEWNEIGH with unconfigured vlan 2 on bridge0 [ 1242.277741][T23929] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5564'. [ 1242.293060][T23929] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5564'. [ 1242.422804][T23934] netlink: 'syz.2.5566': attribute type 1 has an invalid length. [ 1242.554603][T23938] bond5: (slave vxcan3): The slave device specified does not support setting the MAC address [ 1242.570544][T23938] bond5: (slave vxcan3): Error -95 calling set_mac_address [ 1242.634372][T23934] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5566'. [ 1242.770319][T23946] netlink: 'syz.4.5570': attribute type 1 has an invalid length. [ 1242.807845][T23938] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5566'. [ 1242.822027][T23938] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1242.845838][T23948] bond15: entered promiscuous mode [ 1242.851393][T23948] bond15: entered allmulticast mode [ 1242.857199][T23948] 8021q: adding VLAN 0 to HW filter on device bond15 [ 1242.872831][T23945] macvlan0: entered promiscuous mode [ 1242.883282][T23945] macvlan0: entered allmulticast mode [ 1242.889939][T23945] bond5: entered promiscuous mode [ 1242.911799][T23945] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 1242.951543][T23945] bond5: left promiscuous mode [ 1243.185726][T23956] syzkaller0: entered promiscuous mode [ 1243.191913][T23956] syzkaller0: entered allmulticast mode [ 1243.295933][T23957] syzkaller0: entered promiscuous mode [ 1243.305102][T23957] syzkaller0: entered allmulticast mode [ 1243.320985][T23961] bridge: RTM_NEWNEIGH with unconfigured vlan 2 on bridge0 [ 1243.354552][T23961] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5575'. [ 1243.923519][T23989] netlink: 'syz.4.5582': attribute type 1 has an invalid length. [ 1243.995671][T23989] bond16: entered promiscuous mode [ 1244.010171][T23989] bond16: entered allmulticast mode [ 1244.016311][T23989] 8021q: adding VLAN 0 to HW filter on device bond16 [ 1244.065684][T23994] syzkaller0: entered promiscuous mode [ 1244.085212][T23994] syzkaller0: entered allmulticast mode [ 1244.271568][T23999] syzkaller0: entered promiscuous mode [ 1244.282484][T23999] syzkaller0: entered allmulticast mode [ 1244.352626][ C1] ------------[ cut here ]------------ [ 1244.359135][ C1] ODEBUG: free active (active state 0) object: ffff88802e4a4490 object type: timer_list hint: rose_t0timer_expiry+0x0/0x350 [ 1244.372878][ C1] WARNING: CPU: 1 PID: 23994 at lib/debugobjects.c:518 debug_check_no_obj_freed+0x446/0x540 [ 1244.383175][ C1] Modules linked in: [ 1244.387227][ C1] CPU: 1 PID: 23994 Comm: syz.3.5584 Not tainted syzkaller #0 [ 1244.394841][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1244.405047][ C1] RIP: 0010:debug_check_no_obj_freed+0x446/0x540 [ 1244.411518][ C1] Code: 4c 8b 4d 00 48 c7 c7 a0 8b 1c 8b 48 c7 c6 00 88 1c 8b 48 c7 c2 20 8d 1c 8b 8b 0c 24 4d 89 f8 41 55 e8 ae 44 20 fd 48 83 c4 08 <0f> 0b 4c 8b 6c 24 18 48 b9 00 00 00 00 00 fc ff df ff 05 83 80 5a [ 1244.431289][ C1] RSP: 0018:ffffc900001f0a50 EFLAGS: 00010296 [ 1244.437493][ C1] RAX: 3aeedd901d3ecd00 RBX: ffffffff97586ef8 RCX: ffff888067541e00 [ 1244.445542][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000002 [ 1244.453930][ C1] RBP: ffffffff8accab20 R08: ffffc900001f0647 R09: 1ffff9200003e0c8 [ 1244.462637][ C1] R10: dffffc0000000000 R11: fffff5200003e0c9 R12: ffff88802e4a4600 [ 1244.470736][ C1] R13: ffffffff89796190 R14: ffff88802e4a4000 R15: ffff88802e4a4490 [ 1244.478824][ C1] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 1244.487981][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1244.494641][ C1] CR2: 0000001b34122ff8 CR3: 000000002e950000 CR4: 00000000003506e0 [ 1244.502727][ C1] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000083 [ 1244.510906][ C1] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 1244.518987][ C1] Call Trace: [ 1244.522347][ C1] [ 1244.525267][ C1] slab_free_freelist_hook+0xd2/0x1a0 [ 1244.531033][ C1] ? rose_timer_expiry+0x4c6/0x5f0 [ 1244.536223][ C1] __kmem_cache_free+0xba/0x1e0 [ 1244.541224][ C1] rose_timer_expiry+0x4c6/0x5f0 [ 1244.546326][ C1] ? call_timer_fn+0x171/0x540 [ 1244.551366][ C1] call_timer_fn+0x189/0x540 [ 1244.556042][ C1] ? rose_start_t1timer+0xd0/0xd0 [ 1244.561189][ C1] ? call_timer_fn+0xd2/0x540 [ 1244.565935][ C1] ? __run_timers+0x800/0x800 [ 1244.570743][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 1244.576136][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 1244.581553][ C1] ? rose_start_t1timer+0xd0/0xd0 [ 1244.586698][ C1] __run_timers+0x542/0x800 [ 1244.591410][ C1] ? detach_timer+0x2b0/0x2b0 [ 1244.596172][ C1] ? lock_chain_count+0x20/0x20 [ 1244.601164][ C1] run_timer_softirq+0x67/0xf0 [ 1244.606088][ C1] handle_softirqs+0x280/0x820 [ 1244.611119][ C1] ? __irq_exit_rcu+0xd3/0x190 [ 1244.615959][ C1] ? do_softirq+0x1a0/0x1a0 [ 1244.620603][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 1244.625927][ C1] __irq_exit_rcu+0xd3/0x190 [ 1244.630918][ C1] ? irq_exit_rcu+0x20/0x20 [ 1244.635507][ C1] irq_exit_rcu+0x9/0x20 [ 1244.639866][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 1244.645685][ C1] [ 1244.648717][ C1] [ 1244.651706][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1244.657917][ C1] RIP: 0010:__sanitizer_cov_trace_switch+0x1e/0x120 [ 1244.664702][ C1] Code: 48 89 74 0a 18 48 89 44 0a 20 c3 90 f3 0f 1e fa 48 8b 06 48 8b 4e 08 48 83 c1 f8 48 c1 c1 3d 48 83 f9 02 7f 1e 48 85 c9 74 3c <48> 83 f9 01 0f 85 ee 00 00 00 b9 03 00 00 00 48 85 c0 75 36 e9 df [ 1244.684440][ C1] RSP: 0018:ffffc9000bd57110 EFLAGS: 00000202 [ 1244.690632][ C1] RAX: 0000000000000003 RBX: ffffffff8f0e770c RCX: 0000000000000001 [ 1244.698726][ C1] RDX: 0000000000000000 RSI: ffffffff8cfa07e0 RDI: 0000000000000001 [ 1244.706775][ C1] RBP: ffffc9000bd57238 R08: ffffc9000bd57247 R09: 0000000000000000 [ 1244.714890][ C1] R10: ffffc9000bd57238 R11: fffff520017aae49 R12: ffffc9000bd571e8 [ 1244.722981][ C1] R13: dffffc0000000000 R14: 0000000000000001 R15: ffffffff8f0e7710 [ 1244.731102][ C1] unwind_next_frame+0x16d9/0x2970 [ 1244.736328][ C1] ? get_signal+0x12fc/0x13f0 [ 1244.741118][ C1] ? get_signal+0x12fc/0x13f0 [ 1244.745890][ C1] ? stack_trace_save+0x100/0x100 [ 1244.751053][ C1] arch_stack_walk+0x144/0x190 [ 1244.755908][ C1] ? arch_do_signal_or_restart+0xc2/0x800 [ 1244.761812][ C1] stack_trace_save+0xaa/0x100 [ 1244.766675][ C1] ? stack_trace_snprint+0xf0/0xf0 [ 1244.771967][ C1] ? mark_lock+0x94/0x320 [ 1244.776389][ C1] kasan_set_track+0x4e/0x70 [ 1244.781235][ C1] ? kasan_set_track+0x4e/0x70 [ 1244.786091][ C1] ? kasan_save_free_info+0x2e/0x50 [ 1244.791434][ C1] ? ____kasan_slab_free+0x126/0x1e0 [ 1244.796792][ C1] ? slab_free_freelist_hook+0x130/0x1a0 [ 1244.802554][ C1] ? kmem_cache_free+0xf8/0x270 [ 1244.807526][ C1] ? ___pte_free_tlb+0x2d/0x130 [ 1244.812457][ C1] ? free_pgd_range+0x628/0xb10 [ 1244.817567][ C1] ? free_pgtables+0x697/0x770 [ 1244.822415][ C1] ? exit_mmap+0x420/0xb90 [ 1244.826907][ C1] ? __mmput+0x118/0x3c0 [ 1244.831311][ C1] ? exit_mm+0x1f2/0x2c0 [ 1244.835646][ C1] ? do_exit+0x8dd/0x2460 [ 1244.840177][ C1] ? do_group_exit+0x21b/0x2d0 [ 1244.845046][ C1] ? get_signal+0x12fc/0x13f0 [ 1244.849895][ C1] ? kmem_cache_free+0xf8/0x270 [ 1244.854827][ C1] kasan_save_free_info+0x2e/0x50 [ 1244.860463][ C1] ____kasan_slab_free+0x126/0x1e0 [ 1244.865669][ C1] slab_free_freelist_hook+0x130/0x1a0 [ 1244.871311][ C1] ? ___pte_free_tlb+0x2d/0x130 [ 1244.876326][ C1] kmem_cache_free+0xf8/0x270 [ 1244.881158][ C1] ___pte_free_tlb+0x2d/0x130 [ 1244.886013][ C1] free_pgd_range+0x628/0xb10 [ 1244.890852][ C1] free_pgtables+0x697/0x770 [ 1244.895539][ C1] exit_mmap+0x420/0xb90 [ 1244.899976][ C1] ? exit_mm_release+0x1a/0x30 [ 1244.904826][ C1] ? vm_brk+0x30/0x30 [ 1244.910181][ C1] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 1244.916191][ C1] ? uprobe_clear_state+0x278/0x290 [ 1244.921528][ C1] ? mm_update_next_owner+0x562/0x6c0 [ 1244.926999][ C1] __mmput+0x118/0x3c0 [ 1244.931232][ C1] exit_mm+0x1f2/0x2c0 [ 1244.935418][ C1] ? do_exit+0x2460/0x2460 [ 1244.940082][ C1] ? taskstats_exit+0x35e/0x9e0 [ 1244.945110][ C1] do_exit+0x8dd/0x2460 [ 1244.949451][ C1] ? put_task_struct+0xc0/0xc0 [ 1244.954388][ C1] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 1244.961009][ C1] ? get_signal+0x1068/0x13f0 [ 1244.965829][ C1] ? lock_chain_count+0x20/0x20 [ 1244.970822][ C1] ? _raw_spin_lock_irq+0xbb/0xf0 [ 1244.975963][ C1] do_group_exit+0x21b/0x2d0 [ 1244.980706][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 1244.986010][ C1] get_signal+0x12fc/0x13f0 [ 1244.990701][ C1] arch_do_signal_or_restart+0xc2/0x800 [ 1244.996784][ C1] ? __ia32_sys_get_robust_list+0x110/0x110 [ 1245.002840][ C1] ? get_sigframe_size+0x20/0x20 [ 1245.007953][ C1] ? exit_to_user_mode_loop+0x3b/0x110 [ 1245.013668][ C1] exit_to_user_mode_loop+0x70/0x110 [ 1245.019276][ C1] exit_to_user_mode_prepare+0xee/0x180 [ 1245.024909][ C1] syscall_exit_to_user_mode+0x1a/0x50 [ 1245.030575][ C1] do_syscall_64+0x61/0xa0 [ 1245.035555][ C1] ? clear_bhb_loop+0x40/0x90 [ 1245.040422][ C1] ? clear_bhb_loop+0x40/0x90 [ 1245.045198][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1245.051220][ C1] RIP: 0033:0x7f265cd9bf79 [ 1245.055825][ C1] Code: Unable to access opcode bytes at 0x7f265cd9bf4f. [ 1245.062966][ C1] RSP: 002b:00007f265dce80e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1245.071614][ C1] RAX: fffffffffffffe00 RBX: 00007f265d015fa8 RCX: 00007f265cd9bf79 [ 1245.079752][ C1] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f265d015fa8 [ 1245.087847][ C1] RBP: 00007f265d015fa0 R08: 0000000000000000 R09: 0000000000000000 [ 1245.095997][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1245.104115][ C1] R13: 00007f265d016038 R14: 00007ffff5f524d0 R15: 00007ffff5f525b8 [ 1245.112224][ C1] [ 1245.115333][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1245.122669][ C1] CPU: 1 PID: 23994 Comm: syz.3.5584 Not tainted syzkaller #0 [ 1245.130721][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1245.140844][ C1] Call Trace: [ 1245.144187][ C1] [ 1245.147085][ C1] dump_stack_lvl+0x18c/0x250 [ 1245.151904][ C1] ? show_regs_print_info+0x20/0x20 [ 1245.157191][ C1] ? load_image+0x400/0x400 [ 1245.161832][ C1] panic+0x2dc/0x730 [ 1245.165787][ C1] ? bpf_jit_dump+0xd0/0xd0 [ 1245.170348][ C1] __warn+0x2e0/0x470 [ 1245.174378][ C1] ? debug_check_no_obj_freed+0x446/0x540 [ 1245.180146][ C1] ? debug_check_no_obj_freed+0x446/0x540 [ 1245.186009][ C1] report_bug+0x2be/0x4f0 [ 1245.190628][ C1] ? debug_check_no_obj_freed+0x446/0x540 [ 1245.196426][ C1] ? debug_check_no_obj_freed+0x446/0x540 [ 1245.202198][ C1] ? debug_check_no_obj_freed+0x448/0x540 [ 1245.207972][ C1] handle_bug+0xcf/0x120 [ 1245.212273][ C1] exc_invalid_op+0x1a/0x50 [ 1245.216830][ C1] asm_exc_invalid_op+0x1a/0x20 [ 1245.221798][ C1] RIP: 0010:debug_check_no_obj_freed+0x446/0x540 [ 1245.228207][ C1] Code: 4c 8b 4d 00 48 c7 c7 a0 8b 1c 8b 48 c7 c6 00 88 1c 8b 48 c7 c2 20 8d 1c 8b 8b 0c 24 4d 89 f8 41 55 e8 ae 44 20 fd 48 83 c4 08 <0f> 0b 4c 8b 6c 24 18 48 b9 00 00 00 00 00 fc ff df ff 05 83 80 5a [ 1245.247870][ C1] RSP: 0018:ffffc900001f0a50 EFLAGS: 00010296 [ 1245.253983][ C1] RAX: 3aeedd901d3ecd00 RBX: ffffffff97586ef8 RCX: ffff888067541e00 [ 1245.261996][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000002 [ 1245.270015][ C1] RBP: ffffffff8accab20 R08: ffffc900001f0647 R09: 1ffff9200003e0c8 [ 1245.278037][ C1] R10: dffffc0000000000 R11: fffff5200003e0c9 R12: ffff88802e4a4600 [ 1245.286056][ C1] R13: ffffffff89796190 R14: ffff88802e4a4000 R15: ffff88802e4a4490 [ 1245.294072][ C1] ? rose_transmit_link+0x740/0x740 [ 1245.299362][ C1] slab_free_freelist_hook+0xd2/0x1a0 [ 1245.304789][ C1] ? rose_timer_expiry+0x4c6/0x5f0 [ 1245.310042][ C1] __kmem_cache_free+0xba/0x1e0 [ 1245.315047][ C1] rose_timer_expiry+0x4c6/0x5f0 [ 1245.320137][ C1] ? call_timer_fn+0x171/0x540 [ 1245.324940][ C1] call_timer_fn+0x189/0x540 [ 1245.329575][ C1] ? rose_start_t1timer+0xd0/0xd0 [ 1245.334653][ C1] ? call_timer_fn+0xd2/0x540 [ 1245.339379][ C1] ? __run_timers+0x800/0x800 [ 1245.344102][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 1245.349358][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 1245.354596][ C1] ? rose_start_t1timer+0xd0/0xd0 [ 1245.359667][ C1] __run_timers+0x542/0x800 [ 1245.364227][ C1] ? detach_timer+0x2b0/0x2b0 [ 1245.368959][ C1] ? lock_chain_count+0x20/0x20 [ 1245.373851][ C1] run_timer_softirq+0x67/0xf0 [ 1245.378708][ C1] handle_softirqs+0x280/0x820 [ 1245.383534][ C1] ? __irq_exit_rcu+0xd3/0x190 [ 1245.388358][ C1] ? do_softirq+0x1a0/0x1a0 [ 1245.392920][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 1245.398174][ C1] __irq_exit_rcu+0xd3/0x190 [ 1245.402897][ C1] ? irq_exit_rcu+0x20/0x20 [ 1245.407479][ C1] irq_exit_rcu+0x9/0x20 [ 1245.411767][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 1245.417448][ C1] [ 1245.420419][ C1] [ 1245.423386][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1245.429416][ C1] RIP: 0010:__sanitizer_cov_trace_switch+0x1e/0x120 [ 1245.436065][ C1] Code: 48 89 74 0a 18 48 89 44 0a 20 c3 90 f3 0f 1e fa 48 8b 06 48 8b 4e 08 48 83 c1 f8 48 c1 c1 3d 48 83 f9 02 7f 1e 48 85 c9 74 3c <48> 83 f9 01 0f 85 ee 00 00 00 b9 03 00 00 00 48 85 c0 75 36 e9 df [ 1245.455765][ C1] RSP: 0018:ffffc9000bd57110 EFLAGS: 00000202 [ 1245.461884][ C1] RAX: 0000000000000003 RBX: ffffffff8f0e770c RCX: 0000000000000001 [ 1245.469900][ C1] RDX: 0000000000000000 RSI: ffffffff8cfa07e0 RDI: 0000000000000001 [ 1245.477915][ C1] RBP: ffffc9000bd57238 R08: ffffc9000bd57247 R09: 0000000000000000 [ 1245.485930][ C1] R10: ffffc9000bd57238 R11: fffff520017aae49 R12: ffffc9000bd571e8 [ 1245.493945][ C1] R13: dffffc0000000000 R14: 0000000000000001 R15: ffffffff8f0e7710 [ 1245.501978][ C1] unwind_next_frame+0x16d9/0x2970 [ 1245.507145][ C1] ? get_signal+0x12fc/0x13f0 [ 1245.511875][ C1] ? get_signal+0x12fc/0x13f0 [ 1245.516600][ C1] ? stack_trace_save+0x100/0x100 [ 1245.521855][ C1] arch_stack_walk+0x144/0x190 [ 1245.526834][ C1] ? arch_do_signal_or_restart+0xc2/0x800 [ 1245.532694][ C1] stack_trace_save+0xaa/0x100 [ 1245.537497][ C1] ? stack_trace_snprint+0xf0/0xf0 [ 1245.542752][ C1] ? mark_lock+0x94/0x320 [ 1245.547131][ C1] kasan_set_track+0x4e/0x70 [ 1245.551766][ C1] ? kasan_set_track+0x4e/0x70 [ 1245.556666][ C1] ? kasan_save_free_info+0x2e/0x50 [ 1245.561916][ C1] ? ____kasan_slab_free+0x126/0x1e0 [ 1245.567332][ C1] ? slab_free_freelist_hook+0x130/0x1a0 [ 1245.573006][ C1] ? kmem_cache_free+0xf8/0x270 [ 1245.577903][ C1] ? ___pte_free_tlb+0x2d/0x130 [ 1245.582805][ C1] ? free_pgd_range+0x628/0xb10 [ 1245.587783][ C1] ? free_pgtables+0x697/0x770 [ 1245.592601][ C1] ? exit_mmap+0x420/0xb90 [ 1245.597054][ C1] ? __mmput+0x118/0x3c0 [ 1245.601348][ C1] ? exit_mm+0x1f2/0x2c0 [ 1245.605637][ C1] ? do_exit+0x8dd/0x2460 [ 1245.610010][ C1] ? do_group_exit+0x21b/0x2d0 [ 1245.614828][ C1] ? get_signal+0x12fc/0x13f0 [ 1245.619574][ C1] ? kmem_cache_free+0xf8/0x270 [ 1245.624473][ C1] kasan_save_free_info+0x2e/0x50 [ 1245.629703][ C1] ____kasan_slab_free+0x126/0x1e0 [ 1245.634977][ C1] slab_free_freelist_hook+0x130/0x1a0 [ 1245.640489][ C1] ? ___pte_free_tlb+0x2d/0x130 [ 1245.645386][ C1] kmem_cache_free+0xf8/0x270 [ 1245.650112][ C1] ___pte_free_tlb+0x2d/0x130 [ 1245.654837][ C1] free_pgd_range+0x628/0xb10 [ 1245.659594][ C1] free_pgtables+0x697/0x770 [ 1245.664249][ C1] exit_mmap+0x420/0xb90 [ 1245.668554][ C1] ? exit_mm_release+0x1a/0x30 [ 1245.673364][ C1] ? vm_brk+0x30/0x30 [ 1245.677430][ C1] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 1245.683136][ C1] ? uprobe_clear_state+0x278/0x290 [ 1245.688382][ C1] ? mm_update_next_owner+0x562/0x6c0 [ 1245.693802][ C1] __mmput+0x118/0x3c0 [ 1245.697951][ C1] exit_mm+0x1f2/0x2c0 [ 1245.702076][ C1] ? do_exit+0x2460/0x2460 [ 1245.706548][ C1] ? taskstats_exit+0x35e/0x9e0 [ 1245.711469][ C1] do_exit+0x8dd/0x2460 [ 1245.715711][ C1] ? put_task_struct+0xc0/0xc0 [ 1245.720531][ C1] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 1245.726566][ C1] ? get_signal+0x1068/0x13f0 [ 1245.731282][ C1] ? lock_chain_count+0x20/0x20 [ 1245.736173][ C1] ? _raw_spin_lock_irq+0xbb/0xf0 [ 1245.741242][ C1] do_group_exit+0x21b/0x2d0 [ 1245.745895][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 1245.751144][ C1] get_signal+0x12fc/0x13f0 [ 1245.755981][ C1] arch_do_signal_or_restart+0xc2/0x800 [ 1245.761578][ C1] ? __ia32_sys_get_robust_list+0x110/0x110 [ 1245.767521][ C1] ? get_sigframe_size+0x20/0x20 [ 1245.772527][ C1] ? exit_to_user_mode_loop+0x3b/0x110 [ 1245.778042][ C1] exit_to_user_mode_loop+0x70/0x110 [ 1245.783461][ C1] exit_to_user_mode_prepare+0xee/0x180 [ 1245.789060][ C1] syscall_exit_to_user_mode+0x1a/0x50 [ 1245.794661][ C1] do_syscall_64+0x61/0xa0 [ 1245.799126][ C1] ? clear_bhb_loop+0x40/0x90 [ 1245.804017][ C1] ? clear_bhb_loop+0x40/0x90 [ 1245.808761][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1245.814723][ C1] RIP: 0033:0x7f265cd9bf79 [ 1245.819192][ C1] Code: Unable to access opcode bytes at 0x7f265cd9bf4f. [ 1245.826283][ C1] RSP: 002b:00007f265dce80e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1245.834748][ C1] RAX: fffffffffffffe00 RBX: 00007f265d015fa8 RCX: 00007f265cd9bf79 [ 1245.842760][ C1] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f265d015fa8 [ 1245.850864][ C1] RBP: 00007f265d015fa0 R08: 0000000000000000 R09: 0000000000000000 [ 1245.858882][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1245.866917][ C1] R13: 00007f265d016038 R14: 00007ffff5f524d0 R15: 00007ffff5f525b8 [ 1245.874974][ C1] [ 1245.878627][ C1] Kernel Offset: disabled [ 1245.883088][ C1] Rebooting in 86400 seconds..