last executing test programs: 8m1.204646455s ago: executing program 0 (id=1687): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WOWLAN(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYRES32], 0x34}}, 0x20044002) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x17, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="e73e1d8ffdac3ec23909000000"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x20, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet(0x10, 0x3, 0xb) r2 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000080)=0xfffffffffbfffffe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) semget$private(0x0, 0x4000, 0x0) unshare(0x8000000) semget$private(0x0, 0x4000, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$SOUND_MIXER_READ_VOLUME(0xffffffffffffffff, 0x40086603, &(0x7f0000000040)) mkdir(0xffffffffffffffff, 0x15) chdir(&(0x7f0000000300)='./file0\x00') socket$xdp(0x2c, 0x3, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) modify_ldt$write(0x1, &(0x7f0000000200)={0x0, 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, 0x10) 8m0.554541233s ago: executing program 0 (id=1689): r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r0, 0x0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="e4000000", @ANYRES16=r3, @ANYBLOB="07002abd5248ffdbdf2507ff000008000300", @ANYRES32=r4, @ANYBLOB="0c00990001000c0069000000140004002f6163766c616e3100000000000000000400cc00080005000a"], 0xe4}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)={0x1c, r9, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001440)={0x1c, r7, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r6}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 8m0.185303217s ago: executing program 0 (id=1691): syz_open_dev$sndctrl(0x0, 0x1, 0x100) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000002c0)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = syz_open_dev$sg(0x0, 0x0, 0x5) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)) r5 = socket$pptp(0x18, 0x1, 0x2) accept(r5, 0x0, 0x0) writev(r4, &(0x7f0000000400)=[{0x0}], 0x1) 7m59.00988904s ago: executing program 0 (id=1695): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0) mount$bind(0x0, 0x0, 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) mount$bind(&(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x12f451, 0x0) mount$bind(&(0x7f00000000c0)='.\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x80700a, 0x0) 7m58.642791821s ago: executing program 0 (id=1696): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, 0x0, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r4}, 0x18) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/netlink\x00') preadv(r5, &(0x7f0000000600)=[{&(0x7f0000000880)=""/214, 0xd6}], 0x1, 0x6c, 0x0) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_open_dev$vcsu(0x0, 0x8, 0x101) ioctl$SYNC_IOC_FILE_INFO(0xffffffffffffffff, 0xc0383e04, 0x0) ioctl$HCIINQUIRY(r6, 0x400448ca, 0x0) ioctl$sock_bt_hci(r6, 0x400448c9, 0x0) syz_usb_connect$cdc_ncm(0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 7m56.26872048s ago: executing program 0 (id=1704): syz_io_uring_submit(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000000) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x30dd3000) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x101040, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141082) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) 7m55.903489109s ago: executing program 32 (id=1704): syz_io_uring_submit(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000000) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x30dd3000) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x101040, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141082) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) 2m30.22054266s ago: executing program 1 (id=2627): r0 = socket(0x2a, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) bind$inet(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$cec(0x0, 0x0, 0x0) ioctl$CEC_S_MODE(r3, 0x40046109, 0x0) syz_open_dev$cec(0x0, 0x0, 0x401) sendto$packet(r1, &(0x7f0000000240)="f2435f0100088000000000850800", 0xe, 0x0, &(0x7f0000000200)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c00000013000100000000000000000000000002", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r2, @ANYBLOB="1400350064756d6d7930"], 0x3c}}, 0x0) ioctl$SIOCSIFMTU(r0, 0x8922, 0x0) 2m29.260465483s ago: executing program 1 (id=2629): io_uring_setup(0x36dc, &(0x7f0000000000)) openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x20080, 0x0) eventfd2(0x0, 0x80000) socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_setup(0xbea, &(0x7f0000000380)={0x0, 0x5887, 0x10}, 0x0, 0x0) syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141121) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$tipc(0x1e, 0x2, 0x0) syz_open_dev$sndctrl(&(0x7f0000001ac0), 0x0, 0x0) socket$tipc(0x1e, 0x2, 0x0) socket$packet(0x11, 0x2, 0x300) socket$tipc(0x1e, 0x2, 0x0) r0 = getpid() syz_pidfd_open(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r1, 0x10e, 0xc, &(0x7f0000000040)=0x8, 0x4) sendmsg$nl_route(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000012000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00', @ANYRES32=r1], 0x28}}, 0x802) 2m28.9956302s ago: executing program 1 (id=2631): openat$yama_ptrace_scope(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() openat$zero(0xffffffffffffff9c, &(0x7f00000000c0), 0x442000, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r3) sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000300)={0x3c, r4, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4}, @NLBL_CIPSOV4_A_MLSCATLST={0x10, 0xc, 0x0, 0x1, [{0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x195be}]}]}]}, 0x3c}}, 0x0) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x3c, 0x0, 0x4, 0x70bd26, 0x25dfdbfe, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x7}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x6}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x3c}, 0x1, 0x0, 0x0, 0x400c000}, 0x0) r5 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000480), r3) sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000004c0)={&(0x7f00000005c0)={0x12c, r5, 0x800, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_MLSCATLST={0x118, 0xc, 0x0, 0x1, [{0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1e52}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4763766a}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x47f19946}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x493fa8e2}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7db42539}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc7b5}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x35b584a}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xde43}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9470}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xb6031db}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5e2a}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x66ed9324}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1285d1ab}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x81af}]}, {0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3e8d}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd289}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4788bab2}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x340c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd6fc}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x40f55a9a}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1463021a}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x562f20b2}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x95ab}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x35daa980}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1e1872ec}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3320}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x225e91eb}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1f477944}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x574941e3}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1613}]}]}]}, 0x12c}, 0x1, 0x0, 0x0, 0x4}, 0x4000801) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0x5ba8, 0xfffffffffffffffd) openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) 2m24.096649494s ago: executing program 1 (id=2647): socket$inet6(0xa, 0x2, 0x0) openat$kvm(0xffffff9c, &(0x7f0000000180), 0x10141, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000000000106d049cc20000000000010902240001"], 0x0) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r3, &(0x7f0000000300)={0x2020}, 0x2020) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000140)={&(0x7f00000006c0)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r2, 0xc02064b6, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r2, 0xc06864a2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, {0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xa152, 0x0, 0x0, 0x3c, 0x0, 0x0, "b4bc323ef77d1f0000568400"}}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000180)={&(0x7f00000000c0)=[0x0, 0x0], 0x2}) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCSMAXCID(r5, 0x40047451, &(0x7f0000000200)) pwritev(r5, &(0x7f0000000280)=[{&(0x7f0000000300)="00214717a70700000002030600710a5f1feb54985de3", 0x16}, {&(0x7f0000002340)="7a6f3054f92b20c2ecf29fc5275028ce9edfde9147a599f0b6bee224ae7d47247140e9b53c220d0720a95746e48eb6b2a64c2532664b363f63b45c3e5b86b0fabe52f7bcf3bf24ed17e1b99e7b38abdbbb5783c987ecd34d7aff30f9c3cc66d1c723b9b15657cc6f9c1a39340bde5ef26349b760a0aff4ecfc10fadf5847d424d386d549c69f815b755e20793ef0030da21bd253944f660087d592d542c9ed3c1900bc00b7b9c984b5800e312e386be0c62eefc58901339ef894293ab0b4741e1b497b53c97eca61d576b6b9e19598aed5b5973211b5d58fd507d6a249d4cbfaecf5d8d8bd2c838a90", 0xe9}, {0x0}, {&(0x7f0000002440)="23686f20f32f6a960567bfcf9f9b20d426f24920123cdaf2ec6c88ec56a79959347c02e4585fb0a595365964922a2c0703f0257739eb631686185798880ebd9d7617f1f27d4870020e93b4e439cfa972f6b498d36d1bd00e6c076124cd8086b0ee228e4bbb2b3ba9a284a9faff50a3e5e3ac1005a27e7f28df982adaa04733c5e0981b4dbd8c9df35137fbd608b7351aa0032641dff6d8877a5a6ffb097ab1c014966b408ea899b03880ad8d81d4e755089ab9476edf3805bc39ffaae1988e1db164658992b936c6289a1b6e3c98fa652ff624ca05c9737895c3fe7158bb4384a58f87932ba62b1a7dd73fea21e312e2de42852d2bf6d2fc9299499386d555e580bce4ed25f34a7845e0fb77e2201d0c9b1e0bb81301ef8f144c4fb0d382cca7e62fda50fe31085cbaa67f8185a972dcf0d963decf8ae5351c8e46a740304cacbfbbc7cbed3f444fc4625155df44826dfb73293b76f75ff1ec8803e53832fbca34e2a63798946bf8dd0ae63fb515261fa1a5e1716f6aa883cd14c493b03b72b0ec0456674b860d36da85e5500c07936a05434c778b18134dee0f8af293fc765908b7e4dfdf5b2f836236b2f2c49166850d8f969c3a52740081ffa3673ed72bb4c5a5b5f37b79bd97f82082b60b8147820aad745f69eb000beafc21f1b803377bc1a555454444ba778638dfd1c5ed0aaa852d6519686e70195697d7fcead89cdb6693c2945f5a2e3ddc58c7385810d7888479500d28d5a7be96612976caab9ee86d7095c172f497883dea01e7e2e438a237bc36b0f34706d357a79b575942d6f5668025b4f5548bc9c3e36ac16c5d5f6d39815fda3982598105a81866ec440fa5d56a931d6ae08d6459ab58a281590721bc7d03b9737387576465f73de64f6e5b9ca48939d020103dba277957bddd4276a0117b9053af9d934f311e6d5ecaa40a81f636cac0fc1b22e1a3f3c3c13d6f6c0da08b52fbaf699b8ac35a7f734a4154a79cda52c776fc16842bfaa2b7e1bd0f60d5aa5772fba19c2f22fb23fe3f47271a25fa31ec06df5143e5d22aa8ed1ed87fe8e6343b1ccb34d2f633e94b77ae1e41f16ef4c1021ea899042459d0d22ea57620db3073985feb77db03a8d1e62e88ece903e3c75e9cd059b2d0660ec511cedf923b9a8be66d2c4c3b5c5aa22669dd32be4f61561e6184aa9791bd3a6b24b437ecae51abc7501d620c77f196c142e0291e6f84cd84fa9f61011ffa870950abc4e122a61f5a6fa2b1a85b2b254e01ee5096cd01ea7bd041fee3e77ce6592b5e35ff8259c4b6562ccc01cfb987098a023168dc69cf97fe61f6a187fdb2e0389f7dab32adc220ed07aae4892cf6bd07a34eb4d824e666a847a671020f95996ae3fa880e4abd70f9ca2b48beabde2a91a913b73cf6de7f327c221472072a91a94d6b679d864a0054ce61ced766261e47279064c7c6906ba02d6a84e8f77ab2fcbbadd88da84635029fa83c6c6330fb86f34a2b1357a9302f580cfa920e2a1869383660496dcfc86a86cc7aa3886a4641d37334d880df455df3652c2c2247acd0ef0b97d7b8cfc737b81b82937c96d7478b48fa800dabda052d752944d0016d4ac6597a2b975a754291018b77eaa626f2be1c59a3959bb6e3ad8db2903e0f5df038ab8747c048f14f27e89a3a41bfbc4e92df5ab477ad4f80191037c23b16e676c483914216eb2918040a0e087342c2860e0910c89d8e508546b303860a85fedec321526d4c976dbe0cad9dafe95f03f5068783c2de6bcdadb4f1a49f7b8821a032bb8f4790a57b1381ae4082d0d2cf9b2a43a1325d8265223572559199a3968a55c81bb6c375fa062bf1c4045c42bb07a458882a551e434c86cba2df2445ed0be7c9f48385534acd5f7a071e904d7240835e30923574ae19ad6c9fa44b76891fc0bb5969149caa792fea98155899f5cb12e0798b99bbed6fd1bd3fdb644fc57cbeab232af4a50bc67c0979d215b72ff637b05d5ef2f6f7459b43d1f286afb8f4d25158f42e7b09e32fe9ea0d3265793a22f7fae89edfa975fabe7a5775ade470867e8dab5f3ffe6de225872859fd59c7a0e2f216109be6c87a0529098f7d926d4aef2cb7e7f7fef336ef0f2eab5886ed2f5aee5358c867afbcef941a95428a622a0609dd8795c1fa7ab5c05e27851323d29b98f81627a4dd0922353e35b10b6e18d6764ef47d6f6dcd19fb818856aa39d909a03f9d291d41ad9df4d499f6ad9e012d66d3e7c5180d77ce8a4dbe4ed7971e9e05eb610585c6ef74ed0f4921f6bfacebfbb7dd36c87d7b7b4406cb6abdb0af25831ff97f3cd8e4b4d2908f0a96b179ea6e21d2cfbd8d170e29a30c60d5b8c6eabe7ad325d563d3779b87fd2e20682c97f9ca2dbb607d1216e65a5ccdf18c670629d8d373d9fd485bf60c54df356846b9cfb3b8651762907c52f7ee4cf46fb881ff9a573a452be20b6a5729c74820201b0d897185dd77ca057d14b0b570518aa492c2539edaab80e97f4d3e0948bf98b6a1af9c49178f98562ad5d952911d4185ba818ad615db0ab178fc750efbd7a764deafe44040a8e7182ba980f7371978299f13dd4402b621d0a0050787356e5a2b76ecd70be82aee4b4cdd349cebb32684f0453fb573ccff1c6e05d6dfef0a53aee69590dc18067430f6bde218bd21034e1d59394358feefd10ddea961f51379cadb4695f48568c9a8b82fd24b113b0a0214c440151b4459baed4de8f96bbd81bb6d44cd1ef234ddda952cd56f6fa3c65d2a2f3fdcd50deab2bb32d0e5ecb247c1703d757eed09e7e0714ea64aaa4849bf45686fa6d4e81fd057b646b3c9b31adcabf4406200c2345cde800e59bd7fd07e79008068ca79ba9cf703c468a942a2e299c13d5c810a956af6b1b2b7436bb6939f3f8f45be114d13aea082bdc3189cce311ac18843f80092d9d1f9ced59cb9997aee4aca08baae1021ba2713658209a5e0870bdb3738a530fe4c5e8e7465c8497fceb43ebaa4198265e120bffe15b92f6277db01afed82bf7a958be903c1a5eca6fdbd34b92229aa6e2c6eed87d5f7799d12d6a8b02518ea539534549bcf1c190a7870b3353305be7d51257fea126870d6fc8a59239313e307ac9cbf91895c87a6cf4a53e5e2a8cbeade4ecb2e1b8fc2140765075950882eb8869c8e969bd7cbe06abcb256d1bdba7100593dfc2432b7e117372c33ecf6487464161c6c909dd9577f1915c5d339cfe3dbae2ec1e917ca49a7bce0e6dd90a1f653d0b5f41149cbba6c341659c9668b774a90e81f8925854758a4a6a84f8ea00a9ded772d7c999b69885406b426036bea039841eef6b8c723eb732841d3bf2b25d1709764ef269c673325e686b822247e3c55a64d0c1c6af91b18cccd53fb44583e33b2dc409b74b1ec4ef1dcb99efabbefa386c0aa25849b8b3dfddda03a5554ee24a60700fe968d7a57d95ed1f5b8f05a1d6ac2f5fb9306e18358dd247e519cb1ee1033109758b615b1fd2522b081e8dd8c8bcae537421d37ab625a5a139f88cdf70bed326aad1b4d4abd064822960d62e895a20f66b211765e421a207a75e9434c6a780626477c222d53708ca6e4965c5d82d9ee4b0a1e259e0c4aa3aecffbb94b1ed2884641f9888391edd0904bd3c739bd673cd2ba082fea211f40aad7da1e953b3168496aedb6fe798ec720e6565151b62a4758458fa9ea54c8e882e2ebf85c56c0be7431c8a3533ea2fc6fb62ee93a1ada07d2bf5da58fa6f01b2318d631f4991203a0bbaa8861d6de1b66aae4dafcf6ca780ecc8e727592e9dd4c78cbb5be78237a44a072e65546b78bb15b0f7c01892810a5df1e98558e120402f3054ee991cf8b3f7a62bb203efdf7a7e332bc70ed26ed40f9d0911661eaa7e12a1773c78f4d6fd1de3fda6b6585840582ccf7bb7ee1e5ac07bff2f6fbe21e33752c42b68361bf29712b822a94751fdef7c60ec3377de176fc44067b50e6836fae90321cef0c3676f2da687883eef36e99ad49847a3a614b5b495f90dce176ff48d16f55cf593f07b224c5e141f3dcfa1cd8335c916063202a8224e332668510944a6d6dbe46c721afc4a9bfb02801b866be9a271e40d889bdd88484391c329d650aff9f2f2b23d38d2c91bbe97056a79b63671a14233788e7134e2e09266cbb7047d151297364137754e27929b9ed48367b64f7ac6fdb41688be60e971976b6d72d801366794fac0d13437edc47342980305af5369eebf538967b88ee91f83cff22666e4d2dc261f2e61e82f21a89a19d1abafa883a73f46d6a7dd84905bfd95971f09dc27ee07c398116cb54cdd8d723d049ac78795c532f53afda07b8f3707ba9b51ff74715392c12f503a0739605588c1cbee6d44478942985cbd2de0293f766a55572aca40e66a8941d9625030c0caaba01f8dec0f219298307fc626d52e460259dd49886ab9c4caf7753be0d69a6f1a8ef47ad92d23fd562b50a53d6d0b31f09b8faa7871983465c15710aac7d702d43bc076cfddddcbd17b3db2a1b2e81b9f8a34b7d6ca1769d12c8bdd1465212c299887b71cba9a3213f3741123ccf332ed8bbb86be30d090cde25b093882de5c0689aee6d4c0f09b2a3ea6ff86a4cffb125f407393ea79fc0f751660af7a320da1f5d39c53b8eef645cb06bcf67026d53d8331e027f136653c0c38fd4b71be9d5727ac6d224bf9ad1d6a5dd59cfcbdc72b9db7c03b8d6b5eb73edd7ff60d7a3371aa246e4880e09be2856ee4855c11ccc53ac0b56a622b86e95ea535056e3845fef2123365758abce589e8f00b55879384e613d63b708311d9b53177c1b416519f2235c1bb50e83efa2c7005ed72ebbf9d90d97fb7d2384aca74de6a4fdc26f7efda484f25cf2e263e2d638f7e809f54fe08313164673af02a19f59a6b7243707b4168a03af9e97249b80442e42e1da9c802f57cf43927b6d4de1ef5f43caa28ece56f6fb90f4a1e68e901841e231ee37e46098c51140d93b9b6e8c5bc69f06af67cb39173ec225bbeeef0078d2c668ebf22b48d09dd9b3e3d2de866a59189d7dd14a85a2fa43e79f4d6157dc068a8e4969e9d9f4157f32d2dd50b2ed11824ffc3768ef7a68f9f06c3173627ed03b60fa0aa667cf08457af528401b7178e9f2dcd7c7dce67f4a138d3547def00f2f3df54f8de4a216d3922ce423f35cd88c7c4982fbd9b7bf0a3884cc765bd0708cbc0ece121aa330ef3b95e5a66873f5dc87481597f46c3ff6b7ad32721fc5a690bad623531730966a588af7006c5dfbf516a009e27bf2d6388dd986a89bbb140a08972c52ea228a5a3ae4d413d4023bab88cb446f76046116d150d002eb4335147ec29886509d82aa77e742a30222ed60a11b7ba16704c2ef1c97534f49b677f420bfa80a16b684e038c3cdb7add1be24d82a847ba7b99c467dd522091f98a6284ccc558d02f086084df47d7212eb6533704fb103d747402588e575c7bfaa575e8200212b6f29b80f99b16483da6c76745c3a1968df2d0b9635df51d9acead87a5746b40ae6de6592b1664df8d6b2a72b181368ca53b6c7d66d64038a014c2ba469ee035d77dd6f96c023f8ba4e5b31482ff4297058ff2c3ff9fabe3b95b0c8b6f9539cc1a34b1262ae26431cc276a92befa9f847896e894239b128860021b6742e6401474532fa0856282c9d25b6fc7923fbbb886da0310e49ddacd471ac31f7a562d9db6bf328e6c3789eb7a7e906a5937b671c79ac8f640d5abe7b9aea2be3af829e8eb8ae7872f2be36acf601dbaffbd5d6320ec5541b04d44412e5f0b399c0585adb4aeb4c18", 0x1000}, {&(0x7f0000000240)="69626249b71a224c", 0x8}], 0x5, 0x7, 0x0) ioctl$DRM_IOCTL_MODE_SETPLANE(r2, 0xc03064b7, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}) ioctl$DRM_IOCTL_MODE_SETPLANE(r2, 0xc03064b7, &(0x7f0000000a00)={r4, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x5, 0x0, 0x0, 0x7fffffff, 0xfffffffc}) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r6, 0x84, 0xc, 0x0, 0x0) syz_open_dev$sg(0x0, 0x3, 0x0) inotify_add_watch(r3, 0x0, 0x10000146) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000003440)=ANY=[@ANYBLOB="387426f827302da44876fd179988373eec7aaaac2e6948be706f1e0ff5d6ec92d53c76caeb13d7dff54f3a26b5178f2690a841551e69815bf5a796663278637d9fcf25dc3e0fdaa6295f193022d06dcc07f3e0e1a70d9a02bef9e8239388ccea18ce947eb18742d95eb6e23deb7fdfc507995c6da16b3596cc3ff4a5498f94b890d93970e97a42fc05307a35e05aec0eea5beb1f0e8a4a16194fd19f173906c66143a5c2650d1643f67f969e236b"], 0x478) 2m18.008996466s ago: executing program 1 (id=2660): connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x9, &(0x7f0000000040)=0x3, 0x4) 2m17.884943451s ago: executing program 3 (id=1972): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vcan0\x00'}) close(0xffffffffffffffff) r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000800), 0x20081, 0x0) ioctl$PTP_PIN_GETFUNC2(r0, 0xc0603d0f, &(0x7f0000000840)={'\x00', 0x10000, 0x2}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socket$inet6_udplite(0xa, 0x2, 0x88) socket$inet6_udplite(0xa, 0x2, 0x88) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @mcast2, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x0, 0x0, 0x0, 0x50}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) r4 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r4, &(0x7f00000001c0)={0xa, 0x4e21, 0x8, @loopback}, 0x1c) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x14, 0x52, 0x1, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x33, 0x0, 0x0) sendmsg(r4, &(0x7f00000000c0)={0x0, 0x953a, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xfff2}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 2m17.833796538s ago: executing program 1 (id=2662): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) unshare(0x68040200) syz_usb_connect(0x0, 0x2d, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000083667d1040206402d14e010203010902"], 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x14, r4, 0x701, 0xfffffffc, 0x0, {0xb}}, 0x14}, 0x1, 0x0, 0x0, 0x24044004}, 0x4000) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d031, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r5 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x2b, 0x5e, 0x6, 0x10, 0x77d, 0x627a, 0x10, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xce, 0x0, 0x0, 0x3, 0xe0, 0x46}}]}}]}}, 0x0) r6 = syz_open_dev$vim2m(&(0x7f0000000080), 0x8, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r6, 0xc0d05605, &(0x7f0000000140)={0x2, @pix={0x1, 0x7, 0x32315559, 0x8, 0x203, 0x2, 0x8, 0x6, 0x1, 0x2, 0x0, 0x1}}) socket$netlink(0x10, 0x3, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000000)='gid_map\x00') ioctl$IOCTL_VMCI_NOTIFICATIONS_RECEIVE(r7, 0x7a6, &(0x7f0000000880)={0x2, 0x3, 0xe2, 0xe4, 0xfe, 0x9}) syz_open_procfs(0x0, &(0x7f0000000080)='net/vlan/vlan0\x00') r8 = getpid() ioctl$KVM_CAP_HYPERV_ENLIGHTENED_VMCS(r7, 0x4068aea3, &(0x7f0000000800)={0xa3, 0x0, &(0x7f00000007c0)}) r9 = syz_pidfd_open(r8, 0x0) setns(r9, 0x24020000) syz_usb_control_io$uac1(r5, &(0x7f00000000c0)={0xc, &(0x7f0000000380)=ANY=[@ANYBLOB], 0x0}, 0x0) syz_clone(0x6d9ba900, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000100)={0x556, 0x300, 0x2000, 0x4b0, 0xbbba, 0x0, 0x0, 0x0, {0x0, 0x8}, {}, {}, {0x0, 0xfffffffd}, 0x0, 0x3f0, 0x0, 0xd613, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) 2m2.729223351s ago: executing program 33 (id=2662): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) unshare(0x68040200) syz_usb_connect(0x0, 0x2d, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000083667d1040206402d14e010203010902"], 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x14, r4, 0x701, 0xfffffffc, 0x0, {0xb}}, 0x14}, 0x1, 0x0, 0x0, 0x24044004}, 0x4000) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d031, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r5 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x2b, 0x5e, 0x6, 0x10, 0x77d, 0x627a, 0x10, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xce, 0x0, 0x0, 0x3, 0xe0, 0x46}}]}}]}}, 0x0) r6 = syz_open_dev$vim2m(&(0x7f0000000080), 0x8, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r6, 0xc0d05605, &(0x7f0000000140)={0x2, @pix={0x1, 0x7, 0x32315559, 0x8, 0x203, 0x2, 0x8, 0x6, 0x1, 0x2, 0x0, 0x1}}) socket$netlink(0x10, 0x3, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000000)='gid_map\x00') ioctl$IOCTL_VMCI_NOTIFICATIONS_RECEIVE(r7, 0x7a6, &(0x7f0000000880)={0x2, 0x3, 0xe2, 0xe4, 0xfe, 0x9}) syz_open_procfs(0x0, &(0x7f0000000080)='net/vlan/vlan0\x00') r8 = getpid() ioctl$KVM_CAP_HYPERV_ENLIGHTENED_VMCS(r7, 0x4068aea3, &(0x7f0000000800)={0xa3, 0x0, &(0x7f00000007c0)}) r9 = syz_pidfd_open(r8, 0x0) setns(r9, 0x24020000) syz_usb_control_io$uac1(r5, &(0x7f00000000c0)={0xc, &(0x7f0000000380)=ANY=[@ANYBLOB], 0x0}, 0x0) syz_clone(0x6d9ba900, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000100)={0x556, 0x300, 0x2000, 0x4b0, 0xbbba, 0x0, 0x0, 0x0, {0x0, 0x8}, {}, {}, {0x0, 0xfffffffd}, 0x0, 0x3f0, 0x0, 0xd613, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) 1m55.724486902s ago: executing program 3 (id=1972): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vcan0\x00'}) close(0xffffffffffffffff) r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000800), 0x20081, 0x0) ioctl$PTP_PIN_GETFUNC2(r0, 0xc0603d0f, &(0x7f0000000840)={'\x00', 0x10000, 0x2}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socket$inet6_udplite(0xa, 0x2, 0x88) socket$inet6_udplite(0xa, 0x2, 0x88) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @mcast2, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x0, 0x0, 0x0, 0x50}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) r4 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r4, &(0x7f00000001c0)={0xa, 0x4e21, 0x8, @loopback}, 0x1c) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x14, 0x52, 0x1, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x33, 0x0, 0x0) sendmsg(r4, &(0x7f00000000c0)={0x0, 0x953a, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xfff2}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 1m24.423416247s ago: executing program 3 (id=1972): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vcan0\x00'}) close(0xffffffffffffffff) r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000800), 0x20081, 0x0) ioctl$PTP_PIN_GETFUNC2(r0, 0xc0603d0f, &(0x7f0000000840)={'\x00', 0x10000, 0x2}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socket$inet6_udplite(0xa, 0x2, 0x88) socket$inet6_udplite(0xa, 0x2, 0x88) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @mcast2, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x0, 0x0, 0x0, 0x50}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) r4 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r4, &(0x7f00000001c0)={0xa, 0x4e21, 0x8, @loopback}, 0x1c) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x14, 0x52, 0x1, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x33, 0x0, 0x0) sendmsg(r4, &(0x7f00000000c0)={0x0, 0x953a, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xfff2}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 57.408457586s ago: executing program 3 (id=1972): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vcan0\x00'}) close(0xffffffffffffffff) r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000800), 0x20081, 0x0) ioctl$PTP_PIN_GETFUNC2(r0, 0xc0603d0f, &(0x7f0000000840)={'\x00', 0x10000, 0x2}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socket$inet6_udplite(0xa, 0x2, 0x88) socket$inet6_udplite(0xa, 0x2, 0x88) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @mcast2, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x0, 0x0, 0x0, 0x50}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) r4 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r4, &(0x7f00000001c0)={0xa, 0x4e21, 0x8, @loopback}, 0x1c) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x14, 0x52, 0x1, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x33, 0x0, 0x0) sendmsg(r4, &(0x7f00000000c0)={0x0, 0x953a, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xfff2}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 34.92552966s ago: executing program 3 (id=1972): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vcan0\x00'}) close(0xffffffffffffffff) r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000800), 0x20081, 0x0) ioctl$PTP_PIN_GETFUNC2(r0, 0xc0603d0f, &(0x7f0000000840)={'\x00', 0x10000, 0x2}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socket$inet6_udplite(0xa, 0x2, 0x88) socket$inet6_udplite(0xa, 0x2, 0x88) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @mcast2, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x0, 0x0, 0x0, 0x50}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) r4 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r4, &(0x7f00000001c0)={0xa, 0x4e21, 0x8, @loopback}, 0x1c) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x14, 0x52, 0x1, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x33, 0x0, 0x0) sendmsg(r4, &(0x7f00000000c0)={0x0, 0x953a, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xfff2}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 13.536198641s ago: executing program 3 (id=1972): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vcan0\x00'}) close(0xffffffffffffffff) r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000800), 0x20081, 0x0) ioctl$PTP_PIN_GETFUNC2(r0, 0xc0603d0f, &(0x7f0000000840)={'\x00', 0x10000, 0x2}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socket$inet6_udplite(0xa, 0x2, 0x88) socket$inet6_udplite(0xa, 0x2, 0x88) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @mcast2, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x0, 0x0, 0x0, 0x50}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) r4 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r4, &(0x7f00000001c0)={0xa, 0x4e21, 0x8, @loopback}, 0x1c) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x14, 0x52, 0x1, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x33, 0x0, 0x0) sendmsg(r4, &(0x7f00000000c0)={0x0, 0x953a, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xfff2}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 3.946462683s ago: executing program 6 (id=3143): r0 = socket(0x18, 0x2, 0x0) setsockopt(r0, 0x1000000000029, 0x9, &(0x7f0000000040)="03000000", 0x4) r1 = dup(r0) select(0x40, &(0x7f0000000000)={0x400000000000000, 0x1000, 0x83, 0xd, 0x0, 0x20000000000004, 0xe924, 0x9}, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) setsockopt(r1, 0x1000000000029, 0xd, &(0x7f0000000000)="ffdaf64c000000004f0527000000055e473e0000", 0x14) 3.807760954s ago: executing program 2 (id=3146): ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, &(0x7f00000000c0)) r0 = syz_io_uring_setup(0x3dfc, &(0x7f0000000400)={0x0, 0x100002, 0x10300, 0x2, 0xffffffff}, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r0, 0xa3d, 0x0, 0x0, 0x0, 0xff39) exit(0x7) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000080)) writev(0xffffffffffffffff, &(0x7f0000000480)=[{&(0x7f0000000040)="06", 0x1}], 0x1) 3.728727539s ago: executing program 6 (id=3147): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r4, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001300)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd27, 0x8000, {0x0, 0x0, 0x0, r3, {0x8, 0x7}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x1, 0x10}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) 3.638658185s ago: executing program 4 (id=3149): r0 = shmget$private(0x0, 0x2000, 0x386, &(0x7f00003e4000/0x2000)=nil) shmctl$IPC_RMID(r0, 0x0) shmctl$SHM_UNLOCK(r0, 0x4) 3.432874138s ago: executing program 4 (id=3151): r0 = socket(0x18, 0x2, 0x0) getsockopt$sock_linger(r0, 0xffff, 0x80, &(0x7f0000000140), &(0x7f0000000180)=0x8) 3.007271047s ago: executing program 4 (id=3152): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000}) 2.800732678s ago: executing program 2 (id=3153): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) r0 = syz_open_pts(0xffffffffffffffff, 0x0) fcntl$lock(r0, 0x9, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1000300000000}) flock(r0, 0x1) fcntl$lock(r0, 0x8, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x100000001}) syz_open_pts(0xffffffffffffffff, 0x0) syz_open_pts(0xffffffffffffffff, 0x0) 2.778185767s ago: executing program 6 (id=3154): syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a82300000904000002ca744d00090503034d00ff99090805", @ANYRES32], &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0xa, [{0x0, 0x0}]}) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r1, r0, 0x0) 2.777464242s ago: executing program 4 (id=3155): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) mount$cgroup(0x0, 0x0, 0x0, 0x2008000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r1, 0x400455c8, 0x1000000000000002) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000100)=0x12) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000340)=0xff) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$SCSI_IOCTL_GET_PCI(0xffffffffffffffff, 0x5393, 0x0) 2.748620589s ago: executing program 5 (id=3156): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) chmod(&(0x7f0000000180)='./file0\x00', 0x23f) setgid(0xffffffffffffffff) setgroups(0x0, 0x0) setuid(0xffffffffffffffff) faccessat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x2) 2.580805595s ago: executing program 5 (id=3157): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r0, &(0x7f00000017c0)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000280)="03", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000340)="7f", 0x1}], 0x1}}], 0x2, 0x8000) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000100)={0x0, @in6={{0xa, 0x4e23, 0x2, @loopback}}}, 0x84) 2.551149259s ago: executing program 2 (id=3158): r0 = socket(0x18, 0x2, 0x0) setsockopt(r0, 0x1000000000029, 0xa, &(0x7f00000001c0)='\x00\x00\x00\x00', 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) setsockopt(r0, 0x1000000000029, 0x9, &(0x7f0000000040)="8858cd20", 0x4) 2.451189838s ago: executing program 2 (id=3159): write$binfmt_aout(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[@ANYRESDEC], 0x20) 2.400619577s ago: executing program 5 (id=3160): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x16}, @NFTA_CT_DIRECTION={0x5, 0x3, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x80}, 0x1, 0x0, 0x0, 0x840}, 0x0) syz_emit_ethernet(0x36, &(0x7f00000002c0)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x65, 0x0, 0xf, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0xffff}}}}}}, 0x0) syz_emit_ethernet(0x37, &(0x7f0000000500)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x29, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0x0, 0x0, 0x1000}, {'+'}}}}}}, 0x0) 2.298139847s ago: executing program 2 (id=3161): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYRES32=r2, @ANYBLOB="0a000600080211000001"], 0x38}}, 0x80) 2.190316748s ago: executing program 5 (id=3162): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$inet_sctp(0x2, 0x5, 0x84) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x10) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e22, @local}, 0x10) sendto$inet(r0, &(0x7f0000000100)="ab", 0x1, 0xe61e2840a154b0c0, &(0x7f0000000000)={0x2, 0x4e22, @loopback}, 0x10) 1.98699893s ago: executing program 2 (id=3163): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) ioctl$VIDIOC_S_FREQUENCY(0xffffffffffffffff, 0x402c5639, &(0x7f0000000040)={0x0, 0x2, 0x4009}) ioctl$VIDIOC_S_STD(0xffffffffffffffff, 0x40085618, &(0x7f0000000480)=0x7) bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x57) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) get_robust_list(0x0, &(0x7f0000000100)=0x0, &(0x7f0000000180)) r3 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r3, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) r4 = socket$kcm(0xa, 0x2, 0x0) sendmsg$sock(r4, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev={0xfe, 0x80, '\x00', 0x2c}}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@txtime={{0x18, 0x1, 0x24, 0xff80000}}], 0x18}, 0x0) r5 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000500)={'team0\x00', 0x0}) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000800)=@newqdisc={0xac, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r6, {0x0, 0xfff2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x7c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x2], [0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x18, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x26f}]}]}]}}]}, 0xac}}, 0x0) 1.673072148s ago: executing program 5 (id=3164): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) sendmsg$nl_route_sched_retired(r1, 0x0, 0x0) recvmmsg$unix(r1, &(0x7f0000002a00)=[{{0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f0000000600)=""/161, 0xa1}, {&(0x7f0000000340)=""/63, 0x3f}, {&(0x7f00000006c0)=""/196, 0xc4}, {&(0x7f00000007c0)=""/213, 0xd5}, {&(0x7f00000008c0)=""/181, 0xb5}, {&(0x7f0000000480)=""/72, 0x48}, {&(0x7f0000000980)=""/92, 0x5c}, {&(0x7f0000000a00)=""/34, 0x22}, {&(0x7f0000000a40)=""/12, 0xc}], 0x9}}], 0x1, 0x2021, 0x0) 676.69147ms ago: executing program 5 (id=3165): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r4, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001300)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd27, 0x8000, {0x0, 0x0, 0x0, r3, {0x8, 0x7}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x1, 0x10}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) 626.756769ms ago: executing program 4 (id=3166): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0xa0c}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000600)=0x6) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000140), r3) sendmsg$NLBL_CALIPSO_C_ADD(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x24, r4, 0x1, 0x70bd29, 0xa5dfdbfd, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x24000801}, 0x4040054) sendmsg$NLBL_CALIPSO_C_REMOVE(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010028bd70005fd5df25020000200800010002000000e9dd6e0a84a0c4020db0e822cbad225a73ca674870ff7901d0a675557c74b1c5f14a111116e9850ce9f25bfd319f6dd242bf3b"], 0x1c}}, 0xc0) 171.924432ms ago: executing program 6 (id=3167): r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000001580)={&(0x7f0000000140)=@in={0x2, 0x4e21, @rand_addr=0x64010101}, 0x10, &(0x7f00000014c0)=[{&(0x7f0000000180)}], 0x1, &(0x7f0000001500)=[@dstaddrv4={0x18, 0x84, 0x7, @dev={0xac, 0x14, 0x14, 0x19}}, @dstaddrv4={0x18, 0x84, 0x7, @local}], 0x30, 0x2}, 0x24008810) 56.821409ms ago: executing program 6 (id=3168): mknod(&(0x7f0000000040)='./file0\x00', 0x8000, 0xe02) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x615, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x11, r0, 0x0) 10.21083ms ago: executing program 4 (id=3169): clock_settime(0x100000000000000, &(0x7f0000000040)={0x7fffffff}) 0s ago: executing program 6 (id=3170): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000002c0)) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000180)={0x80000020}, 0x3e) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) kernel console output (not intermixed with test programs): 0][ T5832] usb 6-1: config 0 descriptor?? [ 970.903927][T11839] team0 (unregistering): Port device team_slave_0 removed [ 971.124949][T14279] Bluetooth: hci2: command tx timeout [ 971.321814][ T5832] plantronics 0003:047F:FFFF.000F: No inputs registered, leaving [ 971.359137][ T5832] plantronics 0003:047F:FFFF.000F: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 971.781959][T15224] chnl_net:caif_netlink_parms(): no params data found [ 972.078177][ T5905] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 972.191122][T15224] bridge0: port 1(bridge_slave_0) entered blocking state [ 972.222455][T15224] bridge0: port 1(bridge_slave_0) entered disabled state [ 972.236253][T15224] bridge_slave_0: entered allmulticast mode [ 972.254767][T15224] bridge_slave_0: entered promiscuous mode [ 972.264930][ T5905] usb 5-1: Using ep0 maxpacket: 8 [ 972.275929][ T5905] usb 5-1: config 0 has an invalid interface number: 31 but max is 0 [ 972.289445][T15224] bridge0: port 2(bridge_slave_1) entered blocking state [ 972.297487][ T5905] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 972.308725][T15224] bridge0: port 2(bridge_slave_1) entered disabled state [ 972.316279][ T5905] usb 5-1: config 0 has no interface number 0 [ 972.322802][T15224] bridge_slave_1: entered allmulticast mode [ 972.332402][ T5905] usb 5-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 972.346004][T15224] bridge_slave_1: entered promiscuous mode [ 972.363770][ T5905] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 972.434259][ T5905] usb 5-1: Product: syz [ 972.453366][ T5905] usb 5-1: Manufacturer: syz [ 972.487229][ T5905] usb 5-1: SerialNumber: syz [ 972.516494][ T5905] usb 5-1: config 0 descriptor?? [ 972.653993][T15224] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 972.676041][T15224] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 972.770013][ T5905] usb 5-1: Found UVC 0.04 device syz (046d:08c3) [ 972.801486][ T5905] usb 5-1: No valid video chain found. [ 972.840638][ T5905] usb 5-1: USB disconnect, device number 42 [ 972.901725][T15224] team0: Port device team_slave_0 added [ 972.973979][T15224] team0: Port device team_slave_1 added [ 973.119908][T15224] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 973.204631][T14279] Bluetooth: hci2: command tx timeout [ 973.210218][T15224] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 973.297723][T15224] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 973.320612][ T47] usb 6-1: USB disconnect, device number 11 [ 973.361145][T15328] netlink: 'syz.5.2391': attribute type 10 has an invalid length. [ 973.367288][T15224] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 973.414777][T15224] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 973.501469][T15224] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 973.587244][T15328] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 973.612260][T15328] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 973.682491][T15329] bond0: entered promiscuous mode [ 973.705351][T15329] bond_slave_0: entered promiscuous mode [ 973.720738][T15329] bond_slave_1: entered promiscuous mode [ 973.747313][T15329] batadv0: entered promiscuous mode [ 973.795349][T15338] trusted_key: syz.4.2393 sent an empty control message without MSG_MORE. [ 974.119143][T15224] hsr_slave_0: entered promiscuous mode [ 974.129252][T15224] hsr_slave_1: entered promiscuous mode [ 974.136028][T15224] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 974.143721][T15224] Cannot create hsr debugfs directory [ 974.336688][T15349] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2397'. [ 975.275204][T14279] Bluetooth: hci2: command tx timeout [ 975.290136][T15375] syz_tun: entered allmulticast mode [ 975.412770][T15377] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2402'. [ 975.435868][T15373] syz_tun: left allmulticast mode [ 975.946492][T15392] input input38: cannot allocate more than FF_MAX_EFFECTS effects [ 978.616622][T15224] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 978.624170][T15416] autofs: Unknown parameter '0x0000000000000000' [ 978.714119][T15224] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 978.757777][T15420] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.2412'. [ 978.790172][T15224] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 978.837505][T15224] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 979.529255][T15224] 8021q: adding VLAN 0 to HW filter on device bond0 [ 979.768049][T15224] 8021q: adding VLAN 0 to HW filter on device team0 [ 979.828991][T15439] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2418'. [ 979.857903][ T3466] bridge0: port 1(bridge_slave_0) entered blocking state [ 979.865143][ T3466] bridge0: port 1(bridge_slave_0) entered forwarding state [ 980.030415][T15445] input input39: cannot allocate more than FF_MAX_EFFECTS effects [ 980.428436][ T6178] bridge0: port 2(bridge_slave_1) entered blocking state [ 980.435586][ T6178] bridge0: port 2(bridge_slave_1) entered forwarding state [ 980.546121][T15224] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 980.574970][T15224] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 981.902966][T15224] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 982.020362][T15224] veth0_vlan: entered promiscuous mode [ 982.206542][T15224] veth1_vlan: entered promiscuous mode [ 982.288806][T15478] autofs: Unknown parameter '0x0000000000000000' [ 983.045332][T15478] nvme_fabrics: missing parameter 'transport=%s' [ 983.188017][T15224] veth0_macvtap: entered promiscuous mode [ 983.220371][T15224] veth1_macvtap: entered promiscuous mode [ 983.255111][T15478] nvme_fabrics: missing parameter 'nqn=%s' [ 983.340560][T15224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 983.713207][T15224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 983.873925][T15224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 984.074320][T15224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 984.265461][T15224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 984.348252][T15490] 9pnet_fd: Insufficient options for proto=fd [ 984.404805][T15224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 984.542219][T15224] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 984.711704][T15224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 984.973334][T15224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 985.616067][ T5905] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 985.672259][T15224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 985.689061][T15224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 985.726988][T15224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 985.791629][ T5905] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 985.812733][T15224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 985.824566][ T5905] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 985.829442][T15224] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 985.965789][T15224] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 985.989638][T15224] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 986.020060][T15224] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 986.027449][ T5905] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 986.037810][T15224] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 986.262266][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 986.292380][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 986.335627][ T5905] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 986.415377][ T5905] usb 5-1: config 0 descriptor?? [ 986.469552][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 986.529761][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 986.652858][T15518] input input40: cannot allocate more than FF_MAX_EFFECTS effects [ 987.280385][ T5905] pyra 0003:1E7D:2CF6.0010: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.4-1/input0 [ 987.359253][T15526] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2433'. [ 987.742102][ T6178] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 987.848330][ T5905] pyra 0003:1E7D:2CF6.0010: couldn't init struct pyra_device [ 987.888711][ T5905] pyra 0003:1E7D:2CF6.0010: couldn't install mouse [ 987.916737][ T5905] pyra 0003:1E7D:2CF6.0010: probe with driver pyra failed with error -32 [ 987.958333][ T5905] usb 5-1: USB disconnect, device number 43 [ 988.022074][ T6178] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 988.208048][ T6178] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 988.299571][ T6178] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 988.446656][ T6178] bridge_slave_1: left allmulticast mode [ 988.452346][ T6178] bridge_slave_1: left promiscuous mode [ 988.477384][ T6178] bridge0: port 2(bridge_slave_1) entered disabled state [ 988.490746][ T6178] bridge_slave_0: left allmulticast mode [ 988.502223][ T6178] bridge_slave_0: left promiscuous mode [ 988.513055][ T6178] bridge0: port 1(bridge_slave_0) entered disabled state [ 988.859849][T15560] 9pnet_fd: Insufficient options for proto=fd [ 988.867260][T15556] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 989.094906][ T47] usb 5-1: new full-speed USB device number 44 using dummy_hcd [ 989.293671][ T47] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 989.335979][ T47] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 989.369538][ T47] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 989.408324][ T47] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 989.457545][ T47] usb 5-1: config 0 descriptor?? [ 989.495516][ T47] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 989.502189][ T47] dvb-usb: bulk message failed: -22 (3/0) [ 989.565494][ T47] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 989.611335][ T47] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 989.659481][ T47] usb 5-1: media controller created [ 989.680135][ T47] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 989.727436][ T47] dvb-usb: bulk message failed: -22 (6/0) [ 989.733292][ T47] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 989.773891][T13462] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 989.783680][T13462] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 989.793042][T13462] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 989.813020][ T47] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input41 [ 989.828908][ T47] dvb-usb: schedule remote query interval to 150 msecs. [ 989.836439][T13462] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 989.848330][ T47] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 989.859066][T13462] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 989.871033][ T47] usb 5-1: USB disconnect, device number 44 [ 990.110177][ T6178] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 990.125893][ T47] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 990.181461][ T6178] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 990.231441][ T6178] bond0 (unregistering): Released all slaves [ 990.293988][T15559] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 990.338436][T15559] bridge0: port 2(bridge_slave_1) entered disabled state [ 990.345892][T15559] bridge0: port 1(bridge_slave_0) entered disabled state [ 991.548795][ T53] Bluetooth: (null): Invalid header checksum [ 991.637770][ T53] Bluetooth: (null): Invalid header checksum [ 991.945272][T13462] Bluetooth: hci2: command tx timeout [ 992.446049][T15614] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2449'. [ 992.594684][ T6178] hsr_slave_0: left promiscuous mode [ 992.656656][ T6178] hsr_slave_1: left promiscuous mode [ 992.756512][ T6178] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 992.808029][ T6178] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 992.894086][ T6178] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 992.928037][ T6178] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 992.960644][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 992.970181][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.089174][ T6178] veth1_macvtap: left promiscuous mode [ 993.219997][ T6178] veth0_macvtap: left promiscuous mode [ 993.234065][ T6178] veth1_vlan: left promiscuous mode [ 993.249978][ T6178] veth0_vlan: left promiscuous mode [ 993.774018][ T5896] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 993.944621][ T5896] usb 5-1: Using ep0 maxpacket: 8 [ 993.961416][ T5896] usb 5-1: config 0 has an invalid interface number: 31 but max is 0 [ 993.981265][ T5896] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 994.003012][T13462] Bluetooth: hci2: command tx timeout [ 994.011135][ T5896] usb 5-1: config 0 has no interface number 0 [ 994.021592][ T5896] usb 5-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 994.044556][ T5896] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 994.061614][ T5896] usb 5-1: Product: syz [ 994.096209][T15648] input input42: cannot allocate more than FF_MAX_EFFECTS effects [ 994.154880][ T5896] usb 5-1: Manufacturer: syz [ 994.439500][ T5896] usb 5-1: SerialNumber: syz [ 994.472595][ T5896] usb 5-1: config 0 descriptor?? [ 994.714168][ T5896] usb 5-1: Found UVC 0.04 device syz (046d:08c3) [ 994.746650][ T5896] usb 5-1: No valid video chain found. [ 994.770975][ T5896] usb 5-1: USB disconnect, device number 45 [ 996.080242][T13462] Bluetooth: hci2: command tx timeout [ 996.802049][ T6178] team0 (unregistering): Port device team_slave_1 removed [ 996.841423][ T6178] team0 (unregistering): Port device team_slave_0 removed [ 997.542471][T15675] ptm ptm0: ldisc open failed (-12), clearing slot 0 [ 997.565622][T15681] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2464'. [ 997.757905][T15586] chnl_net:caif_netlink_parms(): no params data found [ 998.154876][T13462] Bluetooth: hci2: command tx timeout [ 998.312337][T15586] bridge0: port 1(bridge_slave_0) entered blocking state [ 998.345811][T15586] bridge0: port 1(bridge_slave_0) entered disabled state [ 998.375302][T15586] bridge_slave_0: entered allmulticast mode [ 998.453648][T15586] bridge_slave_0: entered promiscuous mode [ 998.613632][T15586] bridge0: port 2(bridge_slave_1) entered blocking state [ 998.648478][T15586] bridge0: port 2(bridge_slave_1) entered disabled state [ 998.666786][T15586] bridge_slave_1: entered allmulticast mode [ 998.708156][T15586] bridge_slave_1: entered promiscuous mode [ 999.334470][T15586] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 999.408816][T15586] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1000.083090][T15586] team0: Port device team_slave_0 added [ 1000.102498][T15586] team0: Port device team_slave_1 added [ 1000.221482][T15586] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1000.228560][T15586] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1000.256039][T15586] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1000.279244][ T6178] Bluetooth: (null): Invalid header checksum [ 1000.285679][ T6178] Bluetooth: (null): Invalid header checksum [ 1000.295150][T15586] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1000.303660][T15586] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1000.397505][T11839] Bluetooth: (null): Invalid header checksum [ 1000.405261][T15586] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1000.497593][T11839] Bluetooth: (null): Invalid header checksum [ 1000.533091][T15741] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2476'. [ 1000.612388][ T3510] Bluetooth: (null): Invalid header checksum [ 1000.639386][T15586] hsr_slave_0: entered promiscuous mode [ 1000.648505][T15586] hsr_slave_1: entered promiscuous mode [ 1000.657234][T15586] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1000.664938][T15586] Cannot create hsr debugfs directory [ 1000.715527][ T3510] Bluetooth: (null): Invalid header checksum [ 1000.827149][ T3510] Bluetooth: (null): Invalid header checksum [ 1002.205449][ T30] audit: type=1326 audit(1747025964.504:382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15761 comm="syz.4.2480" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4004d8e969 code=0x0 [ 1003.439215][T15788] xt_hashlimit: size too large, truncated to 1048576 [ 1003.469670][T15586] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1003.528852][T15586] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1003.561772][T15586] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1003.611236][T15586] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1003.950627][T15586] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1003.984365][T15586] 8021q: adding VLAN 0 to HW filter on device team0 [ 1004.002835][T11839] bridge0: port 1(bridge_slave_0) entered blocking state [ 1004.010048][T11839] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1004.055060][T11839] bridge0: port 2(bridge_slave_1) entered blocking state [ 1004.062244][T11839] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1004.476867][T15812] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2488'. [ 1004.632723][T15586] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1004.743663][T15817] xt_hashlimit: size too large, truncated to 1048576 [ 1004.777558][T15586] veth0_vlan: entered promiscuous mode [ 1004.837253][T15586] veth1_vlan: entered promiscuous mode [ 1004.933493][T15586] veth0_macvtap: entered promiscuous mode [ 1005.006853][T15586] veth1_macvtap: entered promiscuous mode [ 1005.110491][T15586] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1005.165636][T15586] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1005.189500][T15586] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1005.217966][T15586] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1005.242834][T15586] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1005.264933][T15586] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1005.320168][T15586] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1005.470190][T15586] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1005.485010][T15586] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1005.499472][T15586] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1005.519009][T15586] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1005.530156][T15586] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1006.251739][T15586] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1006.282153][T15586] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1006.388306][T15586] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1006.449913][T15586] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1006.517568][T15586] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1006.528354][T15586] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1007.555952][ T3510] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1007.618483][ T3510] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1007.772927][T11839] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1007.835288][T11839] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1008.715753][T15865] xt_hashlimit: size too large, truncated to 1048576 [ 1009.275187][T11839] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1009.666471][T11839] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1009.836824][T11839] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1009.960795][T11839] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1010.148346][T11839] bridge_slave_1: left allmulticast mode [ 1010.155589][T11839] bridge_slave_1: left promiscuous mode [ 1010.161336][T11839] bridge0: port 2(bridge_slave_1) entered disabled state [ 1010.171385][T11839] bridge_slave_0: left allmulticast mode [ 1010.177870][T11839] bridge_slave_0: left promiscuous mode [ 1010.183582][T11839] bridge0: port 1(bridge_slave_0) entered disabled state [ 1010.476683][T11839] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1010.488744][T11839] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1010.498901][T11839] bond0 (unregistering): Released all slaves [ 1010.801658][T15889] netlink: 'syz.2.2500': attribute type 16 has an invalid length. [ 1010.884913][T11074] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 1011.227632][T11074] usb 6-1: config index 0 descriptor too short (expected 23569, got 27) [ 1011.864573][T11074] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1011.895670][T11074] usb 6-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1011.910189][T11074] usb 6-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1011.934814][T11074] usb 6-1: Manufacturer: syz [ 1012.058250][T11074] usb 6-1: config 0 descriptor?? [ 1012.097914][T11074] igorplugusb 6-1:0.0: incorrect number of endpoints [ 1012.245241][T11839] hsr_slave_0: left promiscuous mode [ 1012.280992][T11839] hsr_slave_1: left promiscuous mode [ 1012.295090][T11839] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1012.302509][T11839] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1012.348207][T15887] netlink: 1284 bytes leftover after parsing attributes in process `syz.5.2498'. [ 1012.362903][T14279] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1012.376272][T11839] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1012.384059][T14279] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1012.402828][T14279] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1012.414579][T11839] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1012.425578][T14279] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1012.438135][T14279] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1012.602590][T15920] Invalid ELF header magic: != ELF [ 1012.770930][T11839] veth1_macvtap: left promiscuous mode [ 1012.814067][T11839] veth0_macvtap: left promiscuous mode [ 1012.886724][T11839] veth1_vlan: left promiscuous mode [ 1012.929949][T11839] veth0_vlan: left promiscuous mode [ 1013.853404][ T5832] usb 6-1: USB disconnect, device number 12 [ 1014.554889][T13462] Bluetooth: hci2: command tx timeout [ 1014.563376][T15935] xt_hashlimit: size too large, truncated to 1048576 [ 1017.028289][T13462] Bluetooth: hci2: command tx timeout [ 1017.352869][T11839] team0 (unregistering): Port device team_slave_1 removed [ 1017.478135][T15960] netlink: 136 bytes leftover after parsing attributes in process `syz.2.2516'. [ 1017.581930][T11839] team0 (unregistering): Port device team_slave_0 removed [ 1018.448714][T15965] nvme_fabrics: missing parameter 'transport=%s' [ 1018.499437][T15965] nvme_fabrics: missing parameter 'nqn=%s' [ 1018.594572][ T9913] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 1018.787878][ T9913] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1018.800245][ T9913] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1018.850594][ T9913] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 1018.881979][ T9913] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1018.898236][T15972] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2521'. [ 1018.919935][ T9913] usb 2-1: config 0 descriptor?? [ 1019.035268][T13462] Bluetooth: hci2: command tx timeout [ 1019.449598][ T9913] pyra 0003:1E7D:2CF6.0011: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.1-1/input0 [ 1020.051182][ T9913] pyra 0003:1E7D:2CF6.0011: couldn't init struct pyra_device [ 1020.069181][ T9913] pyra 0003:1E7D:2CF6.0011: couldn't install mouse [ 1020.091379][T15986] xt_hashlimit: size too large, truncated to 1048576 [ 1020.119971][ T9913] pyra 0003:1E7D:2CF6.0011: probe with driver pyra failed with error -32 [ 1020.194701][ T9913] usb 2-1: USB disconnect, device number 39 [ 1020.595438][T15915] chnl_net:caif_netlink_parms(): no params data found [ 1021.164159][T13462] Bluetooth: hci2: command tx timeout [ 1022.367545][T16019] nvme_fabrics: missing parameter 'transport=%s' [ 1022.524647][T16019] nvme_fabrics: missing parameter 'nqn=%s' [ 1022.630877][T15915] bridge0: port 1(bridge_slave_0) entered blocking state [ 1022.676908][T15915] bridge0: port 1(bridge_slave_0) entered disabled state [ 1022.684174][T15915] bridge_slave_0: entered allmulticast mode [ 1022.840796][T15915] bridge_slave_0: entered promiscuous mode [ 1022.869477][T15915] bridge0: port 2(bridge_slave_1) entered blocking state [ 1022.882244][T16032] xt_hashlimit: size too large, truncated to 1048576 [ 1022.922766][T15915] bridge0: port 2(bridge_slave_1) entered disabled state [ 1022.992269][T15915] bridge_slave_1: entered allmulticast mode [ 1023.057378][T15915] bridge_slave_1: entered promiscuous mode [ 1023.246183][T16038] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2533'. [ 1023.300709][T15915] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1023.460843][T15915] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1023.812687][T15915] team0: Port device team_slave_0 added [ 1023.852537][T15915] team0: Port device team_slave_1 added [ 1024.516006][T16048] fuse: Bad value for 'fd' [ 1024.685617][T15915] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1024.692591][T15915] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1024.804590][T15915] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1024.833503][T15915] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1024.884547][T15915] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1024.931154][T15915] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1025.172032][ T5832] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 1025.346224][ T5832] usb 6-1: Using ep0 maxpacket: 16 [ 1025.375852][ T5832] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1025.415037][ T5832] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1025.461803][ T5832] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1025.471061][T10907] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 1025.479018][ T5832] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1025.491888][ T5832] usb 6-1: Product: syz [ 1025.496104][ T5832] usb 6-1: Manufacturer: syz [ 1025.500938][ T5832] usb 6-1: SerialNumber: syz [ 1025.510608][ T5832] usb 6-1: config 0 descriptor?? [ 1025.522186][ T5832] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1025.533498][ T5832] em28xx 6-1:0.0: Audio interface 0 found (Vendor Class) [ 1025.686351][T10907] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1025.711751][T10907] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1025.730036][T10907] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1025.750423][T10907] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1025.760801][T10907] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1025.783575][T10907] usb 5-1: config 0 descriptor?? [ 1025.814329][T15915] hsr_slave_0: entered promiscuous mode [ 1025.826089][T15915] hsr_slave_1: entered promiscuous mode [ 1025.849174][T15915] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1025.868661][T15915] Cannot create hsr debugfs directory [ 1026.151858][ T5832] em28xx 6-1:0.0: chip ID is em2870 [ 1026.287915][T10907] plantronics 0003:047F:FFFF.0012: No inputs registered, leaving [ 1026.339200][T10907] plantronics 0003:047F:FFFF.0012: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 1026.489459][T10907] usb 5-1: USB disconnect, device number 46 [ 1027.340628][T15915] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1027.356269][T15915] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1027.373298][T15915] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1027.393673][T15915] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1027.477444][T16099] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2545'. [ 1027.669151][T15915] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1027.694243][T15915] 8021q: adding VLAN 0 to HW filter on device team0 [ 1027.708522][T11839] bridge0: port 1(bridge_slave_0) entered blocking state [ 1027.715692][T11839] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1027.740508][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 1027.747655][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1028.319261][T15915] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1028.450176][T10907] usb 6-1: USB disconnect, device number 13 [ 1028.479983][T10907] em28xx 6-1:0.0: Disconnecting em28xx [ 1028.545872][T10907] em28xx 6-1:0.0: Freeing device [ 1028.643598][T15915] veth0_vlan: entered promiscuous mode [ 1028.763712][T15915] veth1_vlan: entered promiscuous mode [ 1029.133247][T16143] 9pnet_fd: p9_fd_create_unix (16143): problem connecting socket: ./cgroup: -111 [ 1029.602075][T15915] veth0_macvtap: entered promiscuous mode [ 1029.652192][T15915] veth1_macvtap: entered promiscuous mode [ 1029.852216][T15915] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1029.898737][T15915] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1029.949372][T15915] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1030.001636][T15915] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1030.053963][T15915] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1030.184672][T15915] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1030.290086][T15915] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1030.374400][T15915] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1030.495908][T15915] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1030.511505][T15915] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1030.526865][T15915] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1030.553569][T15915] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1030.564721][T15915] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1030.614262][T15915] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1030.663647][T16162] bond_slave_0: entered promiscuous mode [ 1030.669648][T16162] bond_slave_1: entered promiscuous mode [ 1030.690038][T16162] vlan2: entered promiscuous mode [ 1030.704309][T16162] bond0: entered promiscuous mode [ 1030.812240][T15915] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1030.823748][T15915] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1030.833920][T15915] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1030.845890][T15915] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1031.110909][T16171] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2559'. [ 1031.327961][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1031.412676][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1031.572697][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1031.604074][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1032.374363][T16199] 9pnet_fd: p9_fd_create_unix (16199): problem connecting socket: ./cgroup: -111 [ 1032.845671][ T30] audit: type=1326 audit(1747025995.144:383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16194 comm="syz.4.2565" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4004d8e969 code=0x0 [ 1033.120150][ T3466] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1033.308418][ T3466] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1033.423622][ T3466] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1033.508626][ T3466] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1033.696009][ T3466] bridge_slave_1: left allmulticast mode [ 1033.701690][ T3466] bridge_slave_1: left promiscuous mode [ 1033.708141][ T3466] bridge0: port 2(bridge_slave_1) entered disabled state [ 1033.717865][ T3466] bridge_slave_0: left allmulticast mode [ 1033.723507][ T3466] bridge_slave_0: left promiscuous mode [ 1033.729493][ T3466] bridge0: port 1(bridge_slave_0) entered disabled state [ 1034.012440][ T3466] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1034.023102][ T3466] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1034.038006][ T3466] bond0 (unregistering): Released all slaves [ 1034.437890][T16233] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2570'. [ 1035.004916][ T5886] usb 5-1: new full-speed USB device number 47 using dummy_hcd [ 1035.245072][ T30] audit: type=1326 audit(1747025997.524:384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16247 comm="syz.2.2574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f4ad8e969 code=0x7ffc0000 [ 1035.314572][ T30] audit: type=1326 audit(1747025997.524:385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16247 comm="syz.2.2574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5f4ad8e969 code=0x7ffc0000 [ 1035.386754][ T5886] usb 5-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 1035.416712][ T5886] usb 5-1: New USB device found, idVendor=3344, idProduct=22f0, bcdDevice=ef.4d [ 1035.475491][ T5886] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1035.518732][T16254] trusted_key: encrypted_key: insufficient parameters specified [ 1035.666043][ T5886] usb 5-1: Product: syz [ 1035.737718][ T5886] usb 5-1: Manufacturer: syz [ 1035.795035][ T5886] usb 5-1: SerialNumber: syz [ 1035.894559][ T30] audit: type=1326 audit(1747025997.524:386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16247 comm="syz.2.2574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f4ad8e969 code=0x7ffc0000 [ 1035.916705][ T30] audit: type=1326 audit(1747025997.524:387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16247 comm="syz.2.2574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f4ad8e969 code=0x7ffc0000 [ 1036.184025][ T30] audit: type=1326 audit(1747025997.524:388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16247 comm="syz.2.2574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5f4ad8e969 code=0x7ffc0000 [ 1036.776460][ T30] audit: type=1326 audit(1747025997.524:389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16247 comm="syz.2.2574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f4ad8e969 code=0x7ffc0000 [ 1036.901467][ T30] audit: type=1326 audit(1747025997.524:390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16247 comm="syz.2.2574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f4ad8e969 code=0x7ffc0000 [ 1037.477723][ T30] audit: type=1326 audit(1747025997.524:391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16247 comm="syz.2.2574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5f4ad8e969 code=0x7ffc0000 [ 1037.520610][ T30] audit: type=1326 audit(1747025997.524:392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16247 comm="syz.2.2574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f4ad8e969 code=0x7ffc0000 [ 1037.594378][ T3466] hsr_slave_0: left promiscuous mode [ 1037.604873][ T3466] hsr_slave_1: left promiscuous mode [ 1037.611797][ T3466] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1037.901497][T14279] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1037.910937][T14279] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1037.919701][T14279] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1037.928721][T14279] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1037.936562][T14279] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1038.444654][ T3466] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1038.477293][ T3466] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1038.493858][ T3466] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1038.535697][T16241] Process accounting resumed [ 1038.614681][ T5886] usb 5-1: selecting invalid altsetting 1 [ 1038.688852][ T3466] veth1_macvtap: left promiscuous mode [ 1038.739317][ T3466] veth0_macvtap: left promiscuous mode [ 1038.754208][ T5886] LME2510(C): Firmware Status: 00 00 00 00 00 00 [ 1038.754317][ T5886] dvb_usb_lmedm04 5-1:2.0: probe with driver dvb_usb_lmedm04 failed with error -22 [ 1038.754375][ T3466] veth1_vlan: left promiscuous mode [ 1038.791346][ T3466] veth0_vlan: left promiscuous mode [ 1038.829909][ T5886] usb 5-1: USB disconnect, device number 47 [ 1038.852042][ T30] kauditd_printk_skb: 16 callbacks suppressed [ 1038.852057][ T30] audit: type=1326 audit(1747026001.144:409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16278 comm="syz.4.2579" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4004d8e969 code=0x0 [ 1039.200710][T16291] IPVS: set_ctl: invalid protocol: 92 0.0.0.0:20004 [ 1039.567041][T16294] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2583'. [ 1039.682263][ T3466] team0 (unregistering): Port device team_slave_1 removed [ 1039.757184][ T3466] team0 (unregistering): Port device team_slave_0 removed [ 1040.395278][T16270] bridge_slave_1: left allmulticast mode [ 1040.400939][T16270] bridge_slave_1: left promiscuous mode [ 1040.428061][T16270] bridge0: port 2(bridge_slave_1) entered disabled state [ 1040.452106][T16270] bridge_slave_0: left allmulticast mode [ 1040.464387][T16270] bridge_slave_0: left promiscuous mode [ 1040.471138][T16270] bridge0: port 1(bridge_slave_0) entered disabled state [ 1040.478421][T10071] Bluetooth: hci2: command tx timeout [ 1040.714370][T16300] xt_hashlimit: size too large, truncated to 1048576 [ 1042.844794][T16323] 9pnet_fd: p9_fd_create_unix (16323): problem connecting socket: ./cgroup: -111 [ 1042.856664][T10071] Bluetooth: hci2: command tx timeout [ 1043.969445][T16263] chnl_net:caif_netlink_parms(): no params data found [ 1044.647190][T16263] bridge0: port 1(bridge_slave_0) entered blocking state [ 1044.674136][T16263] bridge0: port 1(bridge_slave_0) entered disabled state [ 1044.737086][T16263] bridge_slave_0: entered allmulticast mode [ 1044.849519][T16263] bridge_slave_0: entered promiscuous mode [ 1044.875240][T10071] Bluetooth: hci2: command tx timeout [ 1044.903316][ T5896] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 1044.984979][T16263] bridge0: port 2(bridge_slave_1) entered blocking state [ 1044.992211][T16263] bridge0: port 2(bridge_slave_1) entered disabled state [ 1045.008127][T16263] bridge_slave_1: entered allmulticast mode [ 1045.150962][T16263] bridge_slave_1: entered promiscuous mode [ 1045.266585][ T5896] usb 6-1: config 0 has no interfaces? [ 1045.275956][ T5896] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1045.302665][ T5896] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1045.353384][ T5896] usb 6-1: Product: syz [ 1045.382675][ T5896] usb 6-1: Manufacturer: syz [ 1045.390667][T16263] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1045.413764][ T5896] usb 6-1: SerialNumber: syz [ 1045.436251][T16263] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1045.453302][ T5896] usb 6-1: config 0 descriptor?? [ 1046.830179][T16373] xt_hashlimit: size too large, truncated to 1048576 [ 1047.035334][T10071] Bluetooth: hci2: command tx timeout [ 1047.350292][T16370] macsec1: entered allmulticast mode [ 1047.469842][T16370] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1047.479656][T16370] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1047.547883][T16263] team0: Port device team_slave_0 added [ 1047.682342][T16382] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2599'. [ 1047.955897][T16388] IPVS: set_ctl: invalid protocol: 92 0.0.0.0:20004 [ 1048.639454][T16263] team0: Port device team_slave_1 added [ 1048.721520][T16383] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 1048.969872][T16263] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1049.015218][T16263] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1049.058459][T16263] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1049.082337][T16263] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1049.090303][T16263] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1049.154524][T16263] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1049.662606][ T47] usb 6-1: USB disconnect, device number 14 [ 1049.743609][T16263] hsr_slave_0: entered promiscuous mode [ 1049.779018][T16263] hsr_slave_1: entered promiscuous mode [ 1049.817699][T16263] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1049.862874][T16263] Cannot create hsr debugfs directory [ 1050.202729][T16420] xt_hashlimit: size too large, truncated to 1048576 [ 1051.217765][T16426] 8021q: VLANs not supported on vcan0 [ 1051.298882][ T5886] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 1051.394853][T16432] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2614'. [ 1051.575200][ T5886] usb 5-1: Using ep0 maxpacket: 32 [ 1051.895986][ T5886] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 1052.155729][ T5886] usb 5-1: config 0 has no interface number 0 [ 1052.192693][ T5886] usb 5-1: config 0 interface 184 has no altsetting 0 [ 1052.316266][ T5886] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1052.342578][ T5886] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1052.415454][ T5886] usb 5-1: Product: syz [ 1052.442464][ T5886] usb 5-1: Manufacturer: syz [ 1052.477649][ T5886] usb 5-1: SerialNumber: syz [ 1052.503880][ T5886] usb 5-1: config 0 descriptor?? [ 1053.265047][ T47] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 1053.525448][ T47] usb 6-1: config index 0 descriptor too short (expected 23569, got 27) [ 1053.655073][ T47] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1053.676016][ T47] usb 6-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1053.850866][ T47] usb 6-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1053.874954][ T47] usb 6-1: Manufacturer: syz [ 1053.989716][T16478] xt_hashlimit: size too large, truncated to 1048576 [ 1054.428992][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.435641][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.462708][ T47] usb 6-1: config 0 descriptor?? [ 1054.926302][T16263] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1055.008515][ T47] igorplugusb 6-1:0.0: incorrect number of endpoints [ 1055.051093][T16263] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1055.234141][ T5886] usb 5-1: can't set config #0, error -71 [ 1055.255587][T16263] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1055.315013][T16466] netlink: 1284 bytes leftover after parsing attributes in process `syz.5.2623'. [ 1055.344834][ T5886] usb 5-1: USB disconnect, device number 48 [ 1055.602729][T16488] Invalid ELF header magic: != ELF [ 1055.641707][T16263] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1056.267227][T10907] usb 6-1: USB disconnect, device number 15 [ 1056.372368][T16500] netlink: 156 bytes leftover after parsing attributes in process `syz.4.2630'. [ 1057.125190][T16263] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1057.309316][T16263] 8021q: adding VLAN 0 to HW filter on device team0 [ 1057.463227][ T6298] bridge0: port 1(bridge_slave_0) entered blocking state [ 1057.470381][ T6298] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1057.603619][ T6298] bridge0: port 2(bridge_slave_1) entered blocking state [ 1057.610781][ T6298] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1058.111963][T16263] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1058.214960][T16263] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1058.993289][T16534] xt_hashlimit: size too large, truncated to 1048576 [ 1060.315283][T16552] netlink: 1284 bytes leftover after parsing attributes in process `syz.2.2642'. [ 1060.562718][T16556] Invalid ELF header magic: != ELF [ 1061.121880][T16263] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1061.331021][T16263] veth0_vlan: entered promiscuous mode [ 1061.630834][T16263] veth1_vlan: entered promiscuous mode [ 1061.780470][T16263] veth0_macvtap: entered promiscuous mode [ 1061.840339][T16263] veth1_macvtap: entered promiscuous mode [ 1061.960877][T16263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1062.037094][ T5886] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 1062.099751][T16263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1062.144769][T16263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1062.156747][T16263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1062.244895][ T5886] usb 2-1: Using ep0 maxpacket: 16 [ 1062.270548][T16263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1062.316494][ T5886] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1062.454362][T16263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1062.680042][ T5886] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1062.706470][T16263] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1062.782730][T16593] xt_hashlimit: size too large, truncated to 1048576 [ 1063.617832][ T5886] usb 2-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 1063.710482][T16263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1063.766421][T16263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1063.800639][T16263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1063.841219][T16263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1063.954789][ T5886] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1063.990257][ T5886] usb 2-1: config 0 descriptor?? [ 1064.020892][T16263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1064.047496][T16263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1064.115675][T16263] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1064.152245][T16263] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1064.319361][T16263] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1064.887024][T16263] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1064.928279][T16263] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1065.334288][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1065.388903][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1065.558006][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1065.591204][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1065.653793][T16623] netlink: 1284 bytes leftover after parsing attributes in process `syz.2.2658'. [ 1065.794262][T16625] Invalid ELF header magic: != ELF [ 1066.570800][ T5905] usb 2-1: USB disconnect, device number 40 [ 1066.737042][ T5832] usb 5-1: new low-speed USB device number 49 using dummy_hcd [ 1067.415917][ T5832] usb 5-1: config 45 has too many interfaces: 190, using maximum allowed: 32 [ 1067.455599][ T5832] usb 5-1: config 45 has 1 interface, different from the descriptor's value: 190 [ 1067.473599][ T5832] usb 5-1: config 45 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1067.570161][ T5832] usb 5-1: config 45 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1067.624557][ T5832] usb 5-1: New USB device found, idVendor=046d, idProduct=c52f, bcdDevice= 0.00 [ 1067.659241][ T5832] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1067.709794][ T5832] usb 5-1: can't set config #45, error -71 [ 1067.766020][ T5832] usb 5-1: USB disconnect, device number 49 [ 1067.867996][ T36] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1068.145560][T16647] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2661'. [ 1068.161959][ T36] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1068.215025][ T5896] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 1068.250884][T16647] ip_vti0: entered allmulticast mode [ 1068.297562][ T36] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1068.375245][ T5896] usb 2-1: Using ep0 maxpacket: 16 [ 1068.389248][ T5896] usb 2-1: config 0 has no interfaces? [ 1068.418358][ T5896] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1068.428369][ T5896] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1068.438511][ T5896] usb 2-1: Product: syz [ 1068.442700][ T5896] usb 2-1: Manufacturer: syz [ 1068.448646][ T5896] usb 2-1: SerialNumber: syz [ 1068.480848][ T5896] usb 2-1: config 0 descriptor?? [ 1068.563383][ T36] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1068.737439][ T36] bridge_slave_1: left allmulticast mode [ 1068.743141][ T36] bridge_slave_1: left promiscuous mode [ 1068.749531][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 1068.760229][ T36] bridge_slave_0: left allmulticast mode [ 1068.766675][ T36] bridge_slave_0: left promiscuous mode [ 1068.772511][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 1068.846301][T16650] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1068.873686][T16650] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1069.854432][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1069.932905][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1070.017902][ T36] bond0 (unregistering): Released all slaves [ 1070.335027][T13462] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1070.346774][T13462] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1070.356306][T13462] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1070.376123][T13462] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1070.393725][T13462] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1070.998707][ T36] hsr_slave_0: left promiscuous mode [ 1071.005457][ T36] hsr_slave_1: left promiscuous mode [ 1071.011699][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1071.021488][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1071.030108][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1071.039828][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1071.061188][ T36] veth1_macvtap: left promiscuous mode [ 1071.067365][ T36] veth0_macvtap: left promiscuous mode [ 1071.073025][ T36] veth1_vlan: left promiscuous mode [ 1071.082659][ T36] veth0_vlan: left promiscuous mode [ 1072.475839][T13462] Bluetooth: hci2: command tx timeout [ 1073.343775][ T36] team0 (unregistering): Port device team_slave_1 removed [ 1073.436356][ T36] team0 (unregistering): Port device team_slave_0 removed [ 1073.825229][ T47] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 1074.015003][ T47] usb 5-1: Using ep0 maxpacket: 8 [ 1074.053047][ T47] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1074.062723][ T47] usb 5-1: config 4 interface 0 has no altsetting 0 [ 1074.078990][ T47] usb 5-1: string descriptor 0 read error: -22 [ 1074.085739][ T47] usb 5-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 1074.095385][ T47] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1074.246052][ T47] usb 5-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 1074.267789][ T47] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1074.279695][ T47] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 1074.292411][ T47] usb 5-1: media controller created [ 1074.314173][ T47] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1074.554808][T13462] Bluetooth: hci2: command tx timeout [ 1075.888225][T16680] chnl_net:caif_netlink_parms(): no params data found [ 1076.222898][T16680] bridge0: port 1(bridge_slave_0) entered blocking state [ 1076.234663][T16680] bridge0: port 1(bridge_slave_0) entered disabled state [ 1076.242110][T16680] bridge_slave_0: entered allmulticast mode [ 1076.250618][T16680] bridge_slave_0: entered promiscuous mode [ 1076.269963][T16774] team_slave_0: entered promiscuous mode [ 1076.276914][T16774] team_slave_1: entered promiscuous mode [ 1076.289147][T16774] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1076.302741][T16774] macvlan2: entered promiscuous mode [ 1076.310434][T16774] team0: entered promiscuous mode [ 1076.320896][T16774] bond0: (slave macvlan2): Enslaving as an active interface with an up link [ 1076.332406][T16680] bridge0: port 2(bridge_slave_1) entered blocking state [ 1076.346792][T16680] bridge0: port 2(bridge_slave_1) entered disabled state [ 1076.354346][T16680] bridge_slave_1: entered allmulticast mode [ 1076.362343][T16680] bridge_slave_1: entered promiscuous mode [ 1076.462027][T16680] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1076.488145][T16680] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1076.632660][T16680] team0: Port device team_slave_0 added [ 1076.638694][T13462] Bluetooth: hci2: command tx timeout [ 1076.721172][T16680] team0: Port device team_slave_1 added [ 1076.797710][T16680] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1076.813086][T16680] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1076.856167][T16680] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1076.875919][ T5832] usb 5-1: USB disconnect, device number 50 [ 1076.911722][T16680] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1076.936803][T16680] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1077.008016][T16680] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1077.784986][ T5905] usb 5-1: new full-speed USB device number 51 using dummy_hcd [ 1077.871518][T16680] hsr_slave_0: entered promiscuous mode [ 1077.901434][T16680] hsr_slave_1: entered promiscuous mode [ 1077.919276][T16680] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1077.940186][T16680] Cannot create hsr debugfs directory [ 1078.058680][ T5905] usb 5-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 1078.094028][ T5905] usb 5-1: New USB device found, idVendor=3344, idProduct=22f0, bcdDevice=ef.4d [ 1078.147238][ T5905] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1078.210144][ T5905] usb 5-1: Product: syz [ 1078.277733][ T5905] usb 5-1: Manufacturer: syz [ 1078.679640][ T5905] usb 5-1: SerialNumber: syz [ 1078.724731][T13462] Bluetooth: hci2: command tx timeout [ 1079.704136][T16819] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2695'. [ 1080.114589][T16799] Process accounting resumed [ 1080.186420][ T5905] usb 5-1: selecting invalid altsetting 1 [ 1080.212894][ T5905] LME2510(C): Firmware Status: 00 00 00 00 00 00 [ 1080.213006][ T5905] dvb_usb_lmedm04 5-1:2.0: probe with driver dvb_usb_lmedm04 failed with error -22 [ 1080.260625][ T5905] usb 5-1: USB disconnect, device number 51 [ 1080.430573][T16680] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1080.609296][T16680] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1080.636831][T16680] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1081.477778][T16680] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1081.729773][T16680] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1081.769722][T16680] 8021q: adding VLAN 0 to HW filter on device team0 [ 1081.946855][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 1081.954043][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1082.032788][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 1082.040002][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1082.517769][T16680] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1083.586646][T16680] veth0_vlan: entered promiscuous mode [ 1083.746765][T16680] veth1_vlan: entered promiscuous mode [ 1084.040849][T10071] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1084.055178][T10071] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1084.067485][T10071] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1084.077410][T10071] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1084.085716][T10071] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1084.164750][T16680] veth0_macvtap: entered promiscuous mode [ 1084.278272][T16680] veth1_macvtap: entered promiscuous mode [ 1084.412113][T16680] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1084.438834][T16680] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1084.469155][T16680] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1084.498565][T16680] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1084.538745][T16680] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1084.574178][T16680] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1084.596673][T16680] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1084.886423][T16680] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1085.056568][T16680] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1085.075485][T16680] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1085.117507][T16680] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1085.144528][T16680] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1085.169802][T16680] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1085.214378][T16680] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1085.332398][T16680] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1085.366969][T16680] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1085.415384][T16680] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1085.424137][T16680] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1086.255958][T13462] Bluetooth: hci5: command tx timeout [ 1086.947251][ T1109] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1086.954531][ T6298] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1086.991348][ T1109] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1087.007460][ T6298] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1087.080424][T16896] chnl_net:caif_netlink_parms(): no params data found [ 1088.314681][T13462] Bluetooth: hci5: command tx timeout [ 1088.875296][ T5905] usb 6-1: new full-speed USB device number 16 using dummy_hcd [ 1090.319507][T16979] Process accounting resumed [ 1090.395169][T13462] Bluetooth: hci5: command tx timeout [ 1090.567912][ T5905] usb 6-1: device not accepting address 16, error -71 [ 1090.749033][ T36] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1090.773080][T16896] bridge0: port 1(bridge_slave_0) entered blocking state [ 1090.780342][T16896] bridge0: port 1(bridge_slave_0) entered disabled state [ 1090.787981][T16896] bridge_slave_0: entered allmulticast mode [ 1090.802520][T16896] bridge_slave_0: entered promiscuous mode [ 1090.813016][T16896] bridge0: port 2(bridge_slave_1) entered blocking state [ 1090.828207][T16896] bridge0: port 2(bridge_slave_1) entered disabled state [ 1090.835824][T16896] bridge_slave_1: entered allmulticast mode [ 1090.842763][T16896] bridge_slave_1: entered promiscuous mode [ 1090.873816][ T36] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1090.972118][T16896] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1091.012264][ T36] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1091.036128][T16896] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1091.094221][T16896] team0: Port device team_slave_0 added [ 1091.126753][ T36] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1091.150911][T16896] team0: Port device team_slave_1 added [ 1091.241770][T16896] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1091.259303][T16896] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1091.288875][T16896] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1091.309349][T16896] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1091.320043][T16896] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1091.354629][T16896] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1091.548063][T16896] hsr_slave_0: entered promiscuous mode [ 1091.554295][T16896] hsr_slave_1: entered promiscuous mode [ 1091.561466][T16896] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1091.569431][T16896] Cannot create hsr debugfs directory [ 1091.576823][ T36] bridge_slave_1: left allmulticast mode [ 1091.582481][ T36] bridge_slave_1: left promiscuous mode [ 1091.588833][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 1091.599795][ T36] bridge_slave_0: left allmulticast mode [ 1091.606359][ T36] bridge_slave_0: left promiscuous mode [ 1091.615108][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 1092.485079][T13462] Bluetooth: hci5: command tx timeout [ 1092.744855][T10071] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1092.757081][T10071] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1092.767940][T10071] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1092.790574][T10071] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1092.799680][T10071] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1093.081761][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1093.104858][T17036] xt_hashlimit: size too large, truncated to 1048576 [ 1093.391968][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1093.503829][ T36] bond0 (unregistering): Released all slaves [ 1094.112959][T17043] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2745'. [ 1095.040546][T13462] Bluetooth: hci2: command tx timeout [ 1096.669981][T17041] Process accounting resumed [ 1097.124655][T13462] Bluetooth: hci2: command tx timeout [ 1097.415340][ T36] hsr_slave_0: left promiscuous mode [ 1097.478023][ T36] hsr_slave_1: left promiscuous mode [ 1097.559710][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1097.621958][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1097.670683][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1097.688757][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1097.698136][T17071] openvswitch: netlink: Multiple metadata blocks provided [ 1097.709936][ T5896] usb 2-1: USB disconnect, device number 41 [ 1097.747436][ T36] veth1_macvtap: left promiscuous mode [ 1097.754161][ T36] veth0_macvtap: left promiscuous mode [ 1097.765214][ T36] veth1_vlan: left promiscuous mode [ 1097.772307][ T36] veth0_vlan: left promiscuous mode [ 1098.221798][T17087] random: crng reseeded on system resumption [ 1099.071963][ T30] audit: type=1326 audit(1747026061.364:410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17094 comm="syz.4.2756" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4004d8e969 code=0x0 [ 1099.195917][T13462] Bluetooth: hci2: command tx timeout [ 1099.339396][ T36] team0 (unregistering): Port device team_slave_1 removed [ 1099.526629][ T36] team0 (unregistering): Port device team_slave_0 removed [ 1100.338977][T16896] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1100.382027][T17106] openvswitch: netlink: Multiple metadata blocks provided [ 1100.407530][T16896] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1100.437200][T16896] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1100.493476][T16896] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1100.548988][T17026] chnl_net:caif_netlink_parms(): no params data found [ 1100.745811][T17026] bridge0: port 1(bridge_slave_0) entered blocking state [ 1100.753282][T17026] bridge0: port 1(bridge_slave_0) entered disabled state [ 1100.760596][T17026] bridge_slave_0: entered allmulticast mode [ 1100.768785][T17026] bridge_slave_0: entered promiscuous mode [ 1100.778653][T17026] bridge0: port 2(bridge_slave_1) entered blocking state [ 1100.785943][T17026] bridge0: port 2(bridge_slave_1) entered disabled state [ 1100.793286][T17026] bridge_slave_1: entered allmulticast mode [ 1100.802072][T17026] bridge_slave_1: entered promiscuous mode [ 1100.856596][T17026] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1100.881191][T17026] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1101.059327][ T6298] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1101.087927][ T6298] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 1101.275572][T13462] Bluetooth: hci2: command tx timeout [ 1101.277400][T17026] team0: Port device team_slave_0 added [ 1101.678302][ T6298] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1101.774277][ T6298] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 1102.089407][T17026] team0: Port device team_slave_1 added [ 1102.636381][T17102] Process accounting resumed [ 1103.486711][T17140] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2766'. [ 1103.542883][ T6298] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1103.620246][T17145] random: crng reseeded on system resumption [ 1103.696514][T17146] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2767'. [ 1103.704741][ T6298] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 1104.232021][T17026] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1104.262307][T17026] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1104.319629][T17026] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1104.388054][ T6298] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1104.430010][ T6298] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 1104.459539][T17026] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1104.466909][T17026] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1104.555411][T17026] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1104.752696][T17026] hsr_slave_0: entered promiscuous mode [ 1104.785057][T17026] hsr_slave_1: entered promiscuous mode [ 1104.801044][T17026] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1104.821246][T17026] Cannot create hsr debugfs directory [ 1104.859002][T16896] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1105.378605][T17179] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2776'. [ 1106.366320][T16896] 8021q: adding VLAN 0 to HW filter on device team0 [ 1106.366847][T17188] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2778'. [ 1109.582541][ T30] audit: type=1326 audit(1747026071.874:411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17202 comm="syz.2.2782" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5f4ad8e969 code=0x0 [ 1109.735379][T17214] netlink: 76 bytes leftover after parsing attributes in process `syz.5.2786'. [ 1110.826019][T17222] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2788'. [ 1110.952803][ T6298] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1110.962024][ T6298] bond_slave_0: left promiscuous mode [ 1110.970593][ T6298] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1110.979986][ T6298] bond_slave_1: left promiscuous mode [ 1110.987122][ T6298] bond0 (unregistering): Released all slaves [ 1111.193845][ T6298] tipc: Disabling bearer [ 1111.213686][ T6298] tipc: Left network mode [ 1111.223416][ T3510] bridge0: port 1(bridge_slave_0) entered blocking state [ 1111.230554][ T3510] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1111.242060][ T3510] bridge0: port 2(bridge_slave_1) entered blocking state [ 1111.249211][ T3510] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1112.359011][ T6298] hsr_slave_0: left promiscuous mode [ 1112.367362][ T6298] hsr_slave_1: left promiscuous mode [ 1112.373380][ T6298] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1112.386348][ T6298] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1112.419086][T17249] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2800'. [ 1112.433839][ T6298] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1112.614224][ T6298] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1112.639363][ T6298] veth1_macvtap: left promiscuous mode [ 1112.645226][ T6298] veth0_macvtap: left promiscuous mode [ 1112.650846][ T6298] veth1_vlan: left promiscuous mode [ 1112.656450][ T6298] veth0_vlan: left promiscuous mode [ 1113.633925][ T6298] team0 (unregistering): Port device team_slave_1 removed [ 1113.713210][ T6298] team0 (unregistering): Port device team_slave_0 removed [ 1114.113743][ T6298] lo (unregistering): left allmulticast mode [ 1114.773612][T17277] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2804'. [ 1114.952298][T17026] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1114.973052][T16896] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1114.983159][T17026] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1115.080287][T17026] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1115.119488][T17026] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1115.452026][T17026] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1115.481415][T17026] 8021q: adding VLAN 0 to HW filter on device team0 [ 1115.501480][ T3510] bridge0: port 1(bridge_slave_0) entered blocking state [ 1115.508713][ T3510] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1115.536079][ T3510] bridge0: port 2(bridge_slave_1) entered blocking state [ 1115.543282][ T3510] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1115.841281][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 1115.847932][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 1115.895378][T16896] veth0_vlan: entered promiscuous mode [ 1115.906165][T16896] veth1_vlan: entered promiscuous mode [ 1115.927255][T16896] veth0_macvtap: entered promiscuous mode [ 1115.936940][T16896] veth1_macvtap: entered promiscuous mode [ 1115.951257][T16896] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1115.961946][T16896] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1115.977679][T16896] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1115.989491][T16896] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1116.003936][T16896] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1116.015636][T16896] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1116.034533][T16896] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1116.082847][T16896] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1116.118464][T16896] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1116.147300][T16896] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1116.263913][T16896] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1116.364514][T16896] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1116.415191][T16896] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1116.544093][T16896] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1117.620119][T17026] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1118.129805][ T3510] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1118.141434][T17026] veth0_vlan: entered promiscuous mode [ 1118.162422][ T3510] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1118.308937][T17333] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2812'. [ 1118.456659][T17026] veth1_vlan: entered promiscuous mode [ 1118.476802][ T6178] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1118.491782][ T6178] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1118.531691][T17026] veth0_macvtap: entered promiscuous mode [ 1118.549356][T17026] veth1_macvtap: entered promiscuous mode [ 1118.688861][T17026] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1118.703969][T17026] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1118.720582][T17026] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1118.731344][T17026] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1118.751422][T17026] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1118.773170][T17026] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1118.786284][T17026] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1118.839569][T17026] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1118.882812][T17026] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1118.926842][T17026] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1119.122723][T17026] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1119.133191][T17026] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1119.135510][T17358] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2815'. [ 1119.144010][T17026] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1119.163953][T17026] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1119.687684][T17026] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1119.701078][T17026] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1119.710931][T17026] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1119.724751][T17026] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1120.211043][ T6178] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1120.250267][ T6178] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1120.399661][ T6178] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1120.420930][ T6178] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1121.115292][ T5832] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 1121.353581][ T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1121.365077][ T5832] usb 5-1: Using ep0 maxpacket: 32 [ 1121.402086][ T5832] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1121.424596][ T5832] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1121.444802][ T5832] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1121.453350][ T5832] usb 5-1: Product: syz [ 1121.460284][ T5832] usb 5-1: Manufacturer: syz [ 1121.465810][ T5832] usb 5-1: SerialNumber: syz [ 1121.503419][ T5832] usb 5-1: config 0 descriptor?? [ 1121.579349][T17382] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1121.802676][ T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1121.946842][T17382] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2821'. [ 1122.001916][T10907] usb 5-1: USB disconnect, device number 52 [ 1122.020477][ T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1122.131764][ T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1122.363862][ T12] bridge_slave_1: left allmulticast mode [ 1122.384344][ T12] bridge_slave_1: left promiscuous mode [ 1122.391874][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 1122.417395][ T12] bridge_slave_0: left allmulticast mode [ 1122.432146][ T12] bridge_slave_0: left promiscuous mode [ 1122.445169][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 1123.144659][T17433] fuse: Bad value for 'fd' [ 1123.151470][T17432] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2826'. [ 1123.331485][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1123.358541][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1123.397678][ T12] bond0 (unregistering): Released all slaves [ 1124.769238][T17462] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2832'. [ 1125.202335][T10071] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1125.218729][T10071] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1125.229563][T10071] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1125.242791][T10071] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1125.251819][T10071] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1125.269415][ T12] hsr_slave_0: left promiscuous mode [ 1125.289036][ T12] hsr_slave_1: left promiscuous mode [ 1125.316621][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1125.324136][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1125.341403][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1125.355468][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1125.385587][ T12] veth1_macvtap: left promiscuous mode [ 1125.391306][ T12] veth0_macvtap: left promiscuous mode [ 1125.398465][ T12] veth1_vlan: left promiscuous mode [ 1125.403918][ T12] veth0_vlan: left promiscuous mode [ 1126.873126][T17506] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2840'. [ 1127.313441][T10071] Bluetooth: hci2: command tx timeout [ 1128.372263][ T12] team0 (unregistering): Port device team_slave_1 removed [ 1128.964144][ T12] team0 (unregistering): Port device team_slave_0 removed [ 1129.356268][T10071] Bluetooth: hci2: command tx timeout [ 1130.615199][T17474] chnl_net:caif_netlink_parms(): no params data found [ 1131.240557][T17584] 9pnet_fd: p9_fd_create_unix (17584): problem connecting socket: ./cgroup: -111 [ 1131.523904][T10071] Bluetooth: hci2: command tx timeout [ 1132.496663][T17474] bridge0: port 1(bridge_slave_0) entered blocking state [ 1133.142104][T17474] bridge0: port 1(bridge_slave_0) entered disabled state [ 1133.286800][T17474] bridge_slave_0: entered allmulticast mode [ 1133.311008][T17474] bridge_slave_0: entered promiscuous mode [ 1133.772790][T10071] Bluetooth: hci2: command tx timeout [ 1133.961306][T17583] Set syz1 is full, maxelem 65536 reached [ 1134.074619][T17474] bridge0: port 2(bridge_slave_1) entered blocking state [ 1134.134630][T17474] bridge0: port 2(bridge_slave_1) entered disabled state [ 1134.200249][T17474] bridge_slave_1: entered allmulticast mode [ 1134.236894][T17474] bridge_slave_1: entered promiscuous mode [ 1134.258781][T17607] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2854'. [ 1134.518837][T17611] pim6reg: entered allmulticast mode [ 1134.877237][T17474] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1135.109727][T17474] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1135.139698][T17621] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2859'. [ 1135.697613][T17474] team0: Port device team_slave_0 added [ 1135.862817][T17474] team0: Port device team_slave_1 added [ 1136.294241][T17474] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1136.403186][T17474] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1136.444255][T17474] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1136.467663][T17474] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1136.480367][T17474] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1136.553096][T17474] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1137.007761][T17650] xt_hashlimit: size too large, truncated to 1048576 [ 1137.639352][T17474] hsr_slave_0: entered promiscuous mode [ 1137.808578][T17474] hsr_slave_1: entered promiscuous mode [ 1137.831765][T17474] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1137.906811][T17474] Cannot create hsr debugfs directory [ 1138.319441][T17662] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2871'. [ 1140.016135][T17474] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1140.053702][T17474] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1140.386590][T17474] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1141.071546][T17474] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1141.290739][T17721] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2883'. [ 1141.699716][T17474] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1142.097575][T17474] 8021q: adding VLAN 0 to HW filter on device team0 [ 1142.136320][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 1142.143531][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1142.232629][ T3510] bridge0: port 2(bridge_slave_1) entered blocking state [ 1142.239781][ T3510] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1142.394575][T11074] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 1142.419776][T17474] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1142.558983][T17474] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1143.144675][T11074] usb 6-1: Using ep0 maxpacket: 16 [ 1143.189441][T11074] usb 6-1: config 0 has no interfaces? [ 1143.310418][T11074] usb 6-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 1143.360397][T11074] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1143.389006][T11074] usb 6-1: Product: syz [ 1143.393211][T11074] usb 6-1: Manufacturer: syz [ 1143.413462][T11074] usb 6-1: SerialNumber: syz [ 1143.438467][T11074] usb 6-1: config 0 descriptor?? [ 1144.326819][T11074] usb 6-1: USB disconnect, device number 18 [ 1144.567013][T17474] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1144.688699][T17474] veth0_vlan: entered promiscuous mode [ 1144.719492][T17474] veth1_vlan: entered promiscuous mode [ 1144.802251][T17474] veth0_macvtap: entered promiscuous mode [ 1144.827348][T17474] veth1_macvtap: entered promiscuous mode [ 1144.882720][T17474] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1144.917032][T17474] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1144.944989][T17474] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1144.968445][T17474] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1145.009139][T17474] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1145.040273][T17474] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1145.062620][T17781] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2896'. [ 1145.086161][T17474] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1145.226057][T17474] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1145.256513][T17474] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1145.279659][T17474] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1145.290460][T17474] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1145.301669][T17474] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1145.313187][T17474] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1145.328436][T17474] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1145.343770][T17474] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1145.352599][T17474] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1145.362336][T17474] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1145.457406][T17474] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1146.087828][ T6298] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1146.324962][ T6298] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1146.754089][ T1091] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1146.770087][ T1091] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1148.289970][ T6298] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1148.432807][ T6298] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1148.840240][ T6298] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1148.931079][ T6298] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1149.118500][ T6298] bridge_slave_1: left allmulticast mode [ 1149.124193][ T6298] bridge_slave_1: left promiscuous mode [ 1149.133520][ T6298] bridge0: port 2(bridge_slave_1) entered disabled state [ 1149.143616][ T6298] bridge_slave_0: left allmulticast mode [ 1149.153466][ T6298] bridge_slave_0: left promiscuous mode [ 1149.159587][ T6298] bridge0: port 1(bridge_slave_0) entered disabled state [ 1149.644753][ T6298] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1149.655948][ T6298] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1149.666598][ T6298] bond0 (unregistering): Released all slaves [ 1150.064272][T17863] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2909'. [ 1150.077455][T17864] openvswitch: netlink: Multiple metadata blocks provided [ 1151.416864][T17884] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 1152.293954][T13462] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1152.323880][T13462] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1152.341473][T13462] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1152.370097][T13462] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1152.379020][T13462] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1152.444920][ T6298] hsr_slave_0: left promiscuous mode [ 1152.556189][ T6298] hsr_slave_1: left promiscuous mode [ 1152.576492][ T6298] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1152.622243][ T6298] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1152.727936][ T6298] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1152.862697][ T6298] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1153.365185][ T6298] veth1_macvtap: left promiscuous mode [ 1153.365916][T17924] openvswitch: netlink: Multiple metadata blocks provided [ 1153.387193][ T6298] veth0_macvtap: left promiscuous mode [ 1153.394691][ T6298] veth1_vlan: left promiscuous mode [ 1153.414910][ T6298] veth0_vlan: left promiscuous mode [ 1154.194562][ T5905] usb 5-1: new full-speed USB device number 53 using dummy_hcd [ 1154.415268][T13462] Bluetooth: hci2: command tx timeout [ 1154.468257][ T5905] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1154.482766][ T5905] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 2 [ 1154.492286][ T5905] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1154.503570][ T5905] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1154.578386][T17944] xt_hashlimit: size too large, truncated to 1048576 [ 1155.085218][ T5905] usb 5-1: config 0 descriptor?? [ 1155.361426][ T47] usb 5-1: USB disconnect, device number 53 [ 1156.474564][T13462] Bluetooth: hci2: command tx timeout [ 1156.806160][T17956] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2936'. [ 1157.252535][ T6298] team0 (unregistering): Port device team_slave_1 removed [ 1157.298652][ T30] audit: type=1326 audit(1747026119.594:412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17970 comm="syz.4.2943" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4004d8e969 code=0x0 [ 1157.370425][ T6298] team0 (unregistering): Port device team_slave_0 removed [ 1158.555611][T13462] Bluetooth: hci2: command tx timeout [ 1158.604743][T18005] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2947'. [ 1158.615204][ T5872] usb 7-1: new full-speed USB device number 2 using dummy_hcd [ 1158.797330][ T5872] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1158.821766][ T5872] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 2 [ 1158.878114][ T5872] usb 7-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1158.924138][ T5872] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1159.037862][ T5872] usb 7-1: config 0 descriptor?? [ 1159.074548][ T30] audit: type=1326 audit(1747026121.364:413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18018 comm="syz.5.2955" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2d0438e969 code=0x0 [ 1159.221179][T17897] chnl_net:caif_netlink_parms(): no params data found [ 1159.250130][ T5832] usb 7-1: USB disconnect, device number 2 [ 1159.400529][T18035] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2959'. [ 1159.522947][T17897] bridge0: port 1(bridge_slave_0) entered blocking state [ 1159.547585][T17897] bridge0: port 1(bridge_slave_0) entered disabled state [ 1159.571139][T17897] bridge_slave_0: entered allmulticast mode [ 1159.584102][T17897] bridge_slave_0: entered promiscuous mode [ 1159.601759][T17897] bridge0: port 2(bridge_slave_1) entered blocking state [ 1159.611596][T17897] bridge0: port 2(bridge_slave_1) entered disabled state [ 1159.621266][T17897] bridge_slave_1: entered allmulticast mode [ 1159.727120][T17897] bridge_slave_1: entered promiscuous mode [ 1160.634887][T13462] Bluetooth: hci2: command tx timeout [ 1160.749003][T17897] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1160.820690][T17897] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1161.139117][T17897] team0: Port device team_slave_0 added [ 1161.235597][T17897] team0: Port device team_slave_1 added [ 1162.395466][T18082] xt_hashlimit: size too large, truncated to 1048576 [ 1162.973299][T18088] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2971'. [ 1163.135494][T17897] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1163.142491][T17897] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1163.245092][T17897] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1163.347681][T17897] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1163.381961][T17897] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1163.514641][T17897] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1163.822656][T17897] hsr_slave_0: entered promiscuous mode [ 1163.845947][T17897] hsr_slave_1: entered promiscuous mode [ 1163.852589][T17897] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1163.868370][T17897] Cannot create hsr debugfs directory [ 1165.475138][T17897] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1165.502623][T17897] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1165.529685][T17897] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1165.552710][T17897] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1165.993648][T17897] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1166.096856][T17897] 8021q: adding VLAN 0 to HW filter on device team0 [ 1166.152576][ T30] audit: type=1326 audit(1747026128.444:414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18168 comm="syz.6.2993" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f935558e969 code=0x0 [ 1166.175189][ T3466] bridge0: port 1(bridge_slave_0) entered blocking state [ 1166.182393][ T3466] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1166.194694][ T5872] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 1166.241247][ T6298] bridge0: port 2(bridge_slave_1) entered blocking state [ 1166.248507][ T6298] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1166.358845][ T5872] usb 6-1: config index 0 descriptor too short (expected 23569, got 27) [ 1166.381080][ T5872] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1166.434374][ T5872] usb 6-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1166.474135][ T5872] usb 6-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1166.511828][ T5872] usb 6-1: Manufacturer: syz [ 1166.529984][ T5872] usb 6-1: config 0 descriptor?? [ 1166.573610][ T5872] igorplugusb 6-1:0.0: incorrect number of endpoints [ 1166.801876][T18163] netlink: 1284 bytes leftover after parsing attributes in process `syz.5.2991'. [ 1167.197320][T18191] Invalid ELF header magic: != ELF [ 1167.685127][ T5832] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 1167.699299][T10907] usb 6-1: USB disconnect, device number 19 [ 1167.760700][T17897] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1167.854595][ T5832] usb 7-1: Using ep0 maxpacket: 8 [ 1167.868651][ T5832] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1167.894963][ T5832] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1167.941566][T17897] veth0_vlan: entered promiscuous mode [ 1167.966628][ T5832] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1167.997521][ T5832] usb 7-1: config 0 descriptor?? [ 1168.009577][T17897] veth1_vlan: entered promiscuous mode [ 1168.091407][T17897] veth0_macvtap: entered promiscuous mode [ 1168.107607][T17897] veth1_macvtap: entered promiscuous mode [ 1168.150919][T17897] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1168.183171][T17897] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1168.212070][T17897] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1168.265761][ T5832] iowarrior 7-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 1168.296562][T17897] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1168.327402][T17897] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1168.353480][T17897] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1168.393600][T17897] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1168.581734][T17897] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1169.218566][T17897] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1169.229450][T17897] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1169.306030][ T5832] usb 7-1: USB disconnect, device number 3 [ 1169.340727][T17897] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1169.382281][T17897] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1169.423981][T17897] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1169.543746][T17897] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1169.557280][T17897] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1169.570942][T17897] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1169.584192][T17897] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1169.593092][T17897] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1169.800637][ T3510] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1169.819821][ T3510] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1169.906211][ T3510] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1169.929043][ T3510] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1170.769929][T14066] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1171.036037][T14066] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1171.342098][T14066] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1171.412519][T14066] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1171.655553][T14066] bridge_slave_1: left allmulticast mode [ 1171.661519][T14066] bridge_slave_1: left promiscuous mode [ 1171.668623][T14066] bridge0: port 2(bridge_slave_1) entered disabled state [ 1171.680145][T14066] bridge_slave_0: left allmulticast mode [ 1171.686097][T14066] bridge_slave_0: left promiscuous mode [ 1171.691814][T14066] bridge0: port 1(bridge_slave_0) entered disabled state [ 1172.013459][T14066] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1172.025814][T14066] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1172.035880][T14066] bond0 (unregistering): Released all slaves [ 1172.375175][T14066] hsr_slave_0: left promiscuous mode [ 1172.464279][T14066] hsr_slave_1: left promiscuous mode [ 1172.483126][T14066] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1172.514269][T14066] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1172.553111][T14066] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1172.581213][T14066] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1172.664342][T14066] veth1_macvtap: left promiscuous mode [ 1172.695975][T14066] veth0_macvtap: left promiscuous mode [ 1172.722064][T14066] veth1_vlan: left promiscuous mode [ 1172.747545][T14066] veth0_vlan: left promiscuous mode [ 1173.019099][T10071] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1173.037973][T10071] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1173.050680][T10071] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1173.059486][T10071] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1173.071983][T11074] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 1173.073589][T10071] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1173.178036][T18303] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3016'. [ 1173.248127][T11074] usb 7-1: config index 0 descriptor too short (expected 23569, got 27) [ 1173.258168][T11074] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1173.270177][T11074] usb 7-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1173.280692][T11074] usb 7-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1173.289066][T11074] usb 7-1: Manufacturer: syz [ 1173.309066][T11074] usb 7-1: config 0 descriptor?? [ 1173.336658][T11074] igorplugusb 7-1:0.0: incorrect number of endpoints [ 1173.530002][T18295] netlink: 1284 bytes leftover after parsing attributes in process `syz.6.3014'. [ 1173.647375][T18307] Invalid ELF header magic: != ELF [ 1174.096832][ T5872] usb 7-1: USB disconnect, device number 4 [ 1174.175166][T14066] team0 (unregistering): Port device team_slave_1 removed [ 1174.220754][T14066] team0 (unregistering): Port device team_slave_0 removed [ 1175.115248][T10071] Bluetooth: hci2: command tx timeout [ 1176.402118][T18357] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3034'. [ 1176.732493][T18298] chnl_net:caif_netlink_parms(): no params data found [ 1177.318349][T10071] Bluetooth: hci2: command tx timeout [ 1177.368246][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.380019][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 1178.176763][T18298] bridge0: port 1(bridge_slave_0) entered blocking state [ 1178.218560][T18298] bridge0: port 1(bridge_slave_0) entered disabled state [ 1178.237906][T18298] bridge_slave_0: entered allmulticast mode [ 1178.296778][T18298] bridge_slave_0: entered promiscuous mode [ 1178.446026][T18298] bridge0: port 2(bridge_slave_1) entered blocking state [ 1178.501890][T18298] bridge0: port 2(bridge_slave_1) entered disabled state [ 1178.529359][T18298] bridge_slave_1: entered allmulticast mode [ 1178.568633][T18298] bridge_slave_1: entered promiscuous mode [ 1178.706582][T18298] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1178.829621][ T5886] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 1178.856945][T18298] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1178.997778][ T5886] usb 5-1: Using ep0 maxpacket: 16 [ 1178.999987][T18298] team0: Port device team_slave_0 added [ 1179.042579][T18298] team0: Port device team_slave_1 added [ 1179.204154][T18298] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1179.220316][T18298] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1179.281752][ T5886] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1179.342469][T18298] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1179.354523][T10071] Bluetooth: hci2: command tx timeout [ 1179.384196][T18298] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1179.429508][ T5886] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1179.475004][T18298] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1179.555275][T18298] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1179.634713][ T5886] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1179.657861][ T5886] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1179.776826][ T5886] usb 5-1: Product: syz [ 1179.819336][ T5886] usb 5-1: Manufacturer: syz [ 1179.840104][ T5886] usb 5-1: SerialNumber: syz [ 1179.862705][ T5886] usb 5-1: config 0 descriptor?? [ 1179.892571][ T5886] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1179.934708][ T5886] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class) [ 1179.994192][T18298] hsr_slave_0: entered promiscuous mode [ 1180.023732][T18298] hsr_slave_1: entered promiscuous mode [ 1180.047251][T18298] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1180.094691][T18298] Cannot create hsr debugfs directory [ 1180.494271][ T5886] em28xx 5-1:0.0: chip ID is em2870 [ 1180.723382][T18450] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1181.063011][T18461] 9pnet_fd: p9_fd_create_unix (18461): problem connecting socket: ./cgroup: -111 [ 1181.494549][T10071] Bluetooth: hci2: command tx timeout [ 1181.769754][ T5832] usb 5-1: USB disconnect, device number 54 [ 1181.817984][ T5832] em28xx 5-1:0.0: Disconnecting em28xx [ 1181.861501][ T5832] em28xx 5-1:0.0: Freeing device [ 1181.990838][T18475] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3061'. [ 1182.488154][T18490] No control pipe specified [ 1182.731623][T18298] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1182.773974][T18298] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1183.021835][T18298] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1183.545195][T18519] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3069'. [ 1183.823046][T18298] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1184.481041][T18298] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1184.495538][T18531] 9pnet_fd: p9_fd_create_unix (18531): problem connecting socket: ./cgroup: -111 [ 1184.609704][T18298] 8021q: adding VLAN 0 to HW filter on device team0 [ 1184.712377][T11839] bridge0: port 1(bridge_slave_0) entered blocking state [ 1184.719597][T11839] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1184.809171][ T3466] bridge0: port 2(bridge_slave_1) entered blocking state [ 1184.816357][ T3466] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1184.867647][T18536] netlink: 1284 bytes leftover after parsing attributes in process `syz.2.3071'. [ 1184.982495][T18538] Invalid ELF header magic: != ELF [ 1186.399110][T18570] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3080'. [ 1186.591488][T18298] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1186.698649][T18574] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3081'. [ 1187.822487][T18298] veth0_vlan: entered promiscuous mode [ 1187.908040][T18298] veth1_vlan: entered promiscuous mode [ 1188.040073][T18298] veth0_macvtap: entered promiscuous mode [ 1188.089829][T18298] veth1_macvtap: entered promiscuous mode [ 1188.181502][T18298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1188.402134][T18298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1188.574347][T18298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1188.741500][T18298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1188.783500][ T5832] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 1188.792473][T18298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1188.841782][T18298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1188.887571][T18298] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1188.907783][T18298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1188.942068][ T5832] usb 5-1: config index 0 descriptor too short (expected 23569, got 27) [ 1188.942553][T18298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1188.992811][T18298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1189.001220][ T5832] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1189.013903][T18298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1189.044735][T18298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1189.066856][ T5832] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1189.071309][T18298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1189.098946][ T5832] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1189.113441][T18298] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1189.133879][ T5832] usb 5-1: Manufacturer: syz [ 1189.139295][T18599] netdevsim netdevsim5: Direct firmware load for ./file0 failed with error -2 [ 1189.139361][T18599] netdevsim netdevsim5: Falling back to sysfs fallback for: ./file0 [ 1189.309217][T18298] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1189.335694][ T5832] usb 5-1: config 0 descriptor?? [ 1189.373239][T18298] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1189.391090][ T5832] igorplugusb 5-1:0.0: incorrect number of endpoints [ 1189.392639][T18298] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1189.591482][T18594] netlink: 1284 bytes leftover after parsing attributes in process `syz.4.3087'. [ 1189.609990][T18298] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1189.618748][T18598] usb 7-1: new full-speed USB device number 5 using dummy_hcd [ 1190.381709][T18598] usb 7-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 1190.487207][T18623] Invalid ELF header magic: != ELF [ 1190.826853][T18598] usb 7-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 1190.843881][T18598] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1190.908449][T18598] usb 7-1: Product: syz [ 1190.933444][T18627] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3096'. [ 1190.955326][T18598] usb 7-1: Manufacturer: syz [ 1190.960606][T18598] usb 7-1: SerialNumber: syz [ 1191.028786][T14066] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1191.120498][T18598] usb 7-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 1191.152229][ T5905] usb 5-1: USB disconnect, device number 55 [ 1191.201016][T14066] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1191.312591][ T3466] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1191.346844][ T3466] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1191.450702][T18598] usb 7-1: dvb_usb_v2: this USB2.0 device cannot be run on a USB1.1 port (it lacks a hardware PID filter) [ 1191.520327][T18638] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 1191.539876][T18598] usb 7-1: USB disconnect, device number 5 [ 1192.081567][T14066] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1192.752200][T14066] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1192.901266][T14066] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1193.047210][T14066] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1193.330534][T14066] bridge_slave_1: left allmulticast mode [ 1193.344535][T14066] bridge_slave_1: left promiscuous mode [ 1193.350369][T14066] bridge0: port 2(bridge_slave_1) entered disabled state [ 1193.379541][T14066] bridge_slave_0: left allmulticast mode [ 1193.393551][T14066] bridge_slave_0: left promiscuous mode [ 1193.399966][T14066] bridge0: port 1(bridge_slave_0) entered disabled state [ 1193.727709][T14066] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1193.739428][T14066] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1193.749925][T14066] bond0 (unregistering): Released all slaves [ 1194.011729][T14066] hsr_slave_0: left promiscuous mode [ 1194.020139][T14066] hsr_slave_1: left promiscuous mode [ 1194.026611][T14066] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1194.034025][T14066] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1194.047519][T14066] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1194.058051][T14066] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1194.087003][T14066] veth1_macvtap: left promiscuous mode [ 1194.092582][T14066] veth0_macvtap: left promiscuous mode [ 1194.103054][T14066] veth1_vlan: left promiscuous mode [ 1194.108473][T14066] veth0_vlan: left promiscuous mode [ 1195.346331][T13462] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1195.357586][T13462] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1195.373464][T13462] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1195.382406][T13462] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1195.403163][T13462] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1195.711451][T14066] team0 (unregistering): Port device team_slave_1 removed [ 1195.787229][T14066] team0 (unregistering): Port device team_slave_0 removed [ 1196.473839][T18737] random: crng reseeded on system resumption [ 1196.479989][T18738] kvm: kvm [18735]: vcpu0, guest rIP: 0xfff0 Unhandled RDMSR(0x4000001b) [ 1197.472753][T13462] Bluetooth: hci2: command tx timeout [ 1198.250953][T18719] chnl_net:caif_netlink_parms(): no params data found [ 1199.475172][T18719] bridge0: port 1(bridge_slave_0) entered blocking state [ 1199.483829][T18719] bridge0: port 1(bridge_slave_0) entered disabled state [ 1199.492185][T18719] bridge_slave_0: entered allmulticast mode [ 1199.501144][T18719] bridge_slave_0: entered promiscuous mode [ 1199.515907][T18719] bridge0: port 2(bridge_slave_1) entered blocking state [ 1199.524811][T13462] Bluetooth: hci2: command tx timeout [ 1199.524990][T18719] bridge0: port 2(bridge_slave_1) entered disabled state [ 1199.538297][T18719] bridge_slave_1: entered allmulticast mode [ 1199.557599][T18719] bridge_slave_1: entered promiscuous mode [ 1199.576806][ T6178] Bluetooth: (null): Invalid header checksum [ 1199.592367][ T6178] Bluetooth: (null): Invalid header checksum [ 1199.685956][ T6298] Bluetooth: (null): Invalid header checksum [ 1199.789867][T18719] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1199.802201][T14066] Bluetooth: (null): Invalid header checksum [ 1199.823122][T18719] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1199.905769][ T6178] Bluetooth: (null): Invalid header checksum [ 1199.928548][T18719] team0: Port device team_slave_0 added [ 1199.943151][T18719] team0: Port device team_slave_1 added [ 1200.015075][ T6178] Bluetooth: (null): Invalid header checksum [ 1200.069918][T18719] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1200.094880][T18719] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1200.137985][T14066] Bluetooth: (null): Invalid header checksum [ 1200.143349][T18719] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1200.173756][T18719] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1200.226629][T18719] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1200.256811][T18753] Process accounting resumed [ 1200.323905][T18719] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1201.380971][T18719] hsr_slave_0: entered promiscuous mode [ 1201.407644][T18719] hsr_slave_1: entered promiscuous mode [ 1201.416166][T18719] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1201.434549][T18719] Cannot create hsr debugfs directory [ 1201.606290][T13462] Bluetooth: hci2: command tx timeout [ 1203.014588][ T47] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 1203.187254][ T47] usb 7-1: Using ep0 maxpacket: 8 [ 1203.219804][ T47] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 1203.249776][ T47] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1203.277700][T18882] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3161'. [ 1203.289158][ T47] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1203.305925][ T47] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1203.322478][ T47] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1203.339118][ T47] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 1203.350787][ T47] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1203.385946][T18719] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1203.417385][T18719] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1203.431931][ T47] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1203.492032][T18719] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1203.519951][ T47] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1203.531994][ T47] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1203.611284][T18719] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1203.641068][ T47] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 1203.674511][T13462] Bluetooth: hci2: command tx timeout [ 1203.694166][ T47] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1203.774792][ T47] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1203.837541][ T47] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1203.923634][ T47] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1203.987490][ T47] usb 7-1: string descriptor 0 read error: -22 [ 1203.990840][T18719] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1204.024215][ T47] usb 7-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1204.073640][ T47] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1204.158033][ T47] adutux 7-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1204.172842][T18719] 8021q: adding VLAN 0 to HW filter on device team0 [ 1204.210094][ T3510] bridge0: port 1(bridge_slave_0) entered blocking state [ 1204.217275][ T3510] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1204.254446][ T3510] bridge0: port 2(bridge_slave_1) entered blocking state [ 1204.261603][ T3510] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1204.321474][T18719] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1204.332740][T18719] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1204.597742][ T47] usb 7-1: USB disconnect, device number 6 [ 1310.504394][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 1310.511472][ C0] rcu: 1-...!: (0 ticks this GP) idle=c02c/1/0x4000000000000000 softirq=110388/110388 fqs=0 [ 1310.522773][ C0] rcu: (detected by 0, t=10502 jiffies, g=92801, q=339 ncpus=2) [ 1310.530518][ C0] Sending NMI from CPU 0 to CPUs 1: [ 1310.530557][ C1] NMI backtrace for cpu 1 [ 1310.530580][ C1] CPU: 1 UID: 0 PID: 16899 Comm: udevd Not tainted 6.15.0-rc6-syzkaller #0 PREEMPT(full) [ 1310.530598][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1310.530611][ C1] RIP: 0010:__lock_acquire+0x543/0xd20 [ 1310.530638][ C1] Code: 00 75 19 90 48 c7 c7 9b 19 92 8d 48 c7 c6 0f 96 81 8d e8 10 06 e6 ff 90 0f 0b 90 90 90 31 c9 48 8b 3c 24 0f b6 81 c4 00 00 00 <84> c0 0f 84 68 ff ff ff 41 0f b6 f4 0f b6 d0 40 38 c6 0f 42 d6 80 [ 1310.530652][ C1] RSP: 0018:ffffc90000a08ae0 EFLAGS: 00000006 [ 1310.530666][ C1] RAX: 0000000000000002 RBX: 0000000000000002 RCX: ffffffff931b3f28 [ 1310.530677][ C1] RDX: 0000000000000002 RSI: 0000000000004000 RDI: ffff88802ea29e00 [ 1310.530688][ C1] RBP: ffff88802ea2a8f0 R08: 0000000000000000 R09: 0000000000080000 [ 1310.530698][ C1] R10: 0000000000000000 R11: ffffffff84b7752a R12: 0000000000000002 [ 1310.530709][ C1] R13: 0000000000000000 R14: ffff88802ea2a960 R15: ffff88802ea2a968 [ 1310.530720][ C1] FS: 00007f2421579880(0000) GS:ffff8881261fb000(0000) knlGS:0000000000000000 [ 1310.530734][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1310.530745][ C1] CR2: 000055f428eae660 CR3: 000000005a91a000 CR4: 00000000003526f0 [ 1310.530758][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1310.530767][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1310.530777][ C1] Call Trace: [ 1310.530785][ C1] [ 1310.530801][ C1] ? debug_object_deactivate+0x9a/0x250 [ 1310.530825][ C1] lock_acquire+0x120/0x360 [ 1310.530843][ C1] ? debug_object_deactivate+0x9a/0x250 [ 1310.530866][ C1] ? do_raw_spin_unlock+0x122/0x240 [ 1310.530884][ C1] _raw_spin_lock_irqsave+0xa7/0xf0 [ 1310.530900][ C1] ? debug_object_deactivate+0x9a/0x250 [ 1310.530920][ C1] ? __pfx__raw_spin_lock_irqsave+0x10/0x10 [ 1310.530940][ C1] debug_object_deactivate+0x9a/0x250 [ 1310.530964][ C1] debug_deactivate+0x1d/0x200 [ 1310.530988][ C1] __hrtimer_run_queues+0x2b0/0xc60 [ 1310.531016][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 1310.531035][ C1] ? read_tsc+0x9/0x20 [ 1310.531059][ C1] hrtimer_interrupt+0x45b/0xaa0 [ 1310.531090][ C1] __sysvec_apic_timer_interrupt+0x108/0x410 [ 1310.531109][ C1] sysvec_apic_timer_interrupt+0xa1/0xc0 [ 1310.531126][ C1] [ 1310.531131][ C1] [ 1310.531137][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1310.531154][ C1] RIP: 0010:unwind_next_frame+0xc6d/0x2390 [ 1310.531171][ C1] Code: 00 00 00 fc ff df 48 8b 44 24 30 80 3c 28 00 4c 8b 7c 24 18 74 08 4c 89 ff e8 cf e8 ad 00 49 89 1f 48 8b 44 24 58 80 3c 28 00 <48> 8b 5c 24 70 4c 8b 6c 24 50 4c 8b 64 24 10 74 08 48 89 df e8 aa [ 1310.531184][ C1] RSP: 0018:ffffc90003f1f0d8 EFLAGS: 00000246 [ 1310.531198][ C1] RAX: 1ffff920007e3e3c RBX: ffffffff822ed84e RCX: 1ffff920007e3e01 [ 1310.531209][ C1] RDX: ffffffff903d8e8a RSI: 0000000000000002 RDI: ffffc90003f1f878 [ 1310.531226][ C1] RBP: dffffc0000000000 R08: 0000000000000005 R09: 0000000000000000 [ 1310.531236][ C1] R10: 0000000000000000 R11: ffffffff8171a9f5 R12: ffffc90003f20000 [ 1310.531247][ C1] R13: 1ffff920007e3e37 R14: ffffc90003f1f1a8 R15: ffffc90003f1f1f0 [ 1310.531260][ C1] ? do_dentry_open+0x35e/0x1970 [ 1310.531275][ C1] ? unwind_next_frame+0xa5/0x2390 [ 1310.531295][ C1] ? unwind_next_frame+0xc3c/0x2390 [ 1310.531314][ C1] ? unwind_next_frame+0xa5/0x2390 [ 1310.531330][ C1] ? security_file_open+0xb1/0x270 [ 1310.531348][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1310.531364][ C1] arch_stack_walk+0x11c/0x150 [ 1310.531384][ C1] ? do_dentry_open+0x35e/0x1970 [ 1310.531401][ C1] stack_trace_save+0x9c/0xe0 [ 1310.531415][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 1310.531428][ C1] ? mas_destroy+0x16b2/0x1c60 [ 1310.531444][ C1] ? __lock_acquire+0xaac/0xd20 [ 1310.531464][ C1] kasan_save_track+0x3e/0x80 [ 1310.531483][ C1] ? kasan_save_track+0x3e/0x80 [ 1310.531501][ C1] ? __kasan_kmalloc+0x93/0xb0 [ 1310.531520][ C1] ? __kmalloc_noprof+0x27a/0x4f0 [ 1310.531540][ C1] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 1310.531559][ C1] ? tomoyo_check_open_permission+0x1c1/0x3b0 [ 1310.531574][ C1] ? security_file_open+0xb1/0x270 [ 1310.531610][ C1] __kasan_kmalloc+0x93/0xb0 [ 1310.531631][ C1] __kmalloc_noprof+0x27a/0x4f0 [ 1310.531651][ C1] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 1310.531672][ C1] tomoyo_realpath_from_path+0xe3/0x5d0 [ 1310.531697][ C1] tomoyo_check_open_permission+0x1c1/0x3b0 [ 1310.531714][ C1] ? tomoyo_check_open_permission+0x16a/0x3b0 [ 1310.531730][ C1] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 1310.531751][ C1] ? __lock_acquire+0xaac/0xd20 [ 1310.531777][ C1] ? mnt_get_write_access+0x68/0x2a0 [ 1310.531794][ C1] ? tomoyo_file_open+0x166/0x220 [ 1310.531816][ C1] security_file_open+0xb1/0x270 [ 1310.531833][ C1] do_dentry_open+0x35e/0x1970 [ 1310.531855][ C1] vfs_open+0x3b/0x340 [ 1310.531868][ C1] ? path_openat+0x2ecd/0x3830 [ 1310.531886][ C1] path_openat+0x2ee5/0x3830 [ 1310.531903][ C1] ? arch_stack_walk+0xfc/0x150 [ 1310.531934][ C1] ? __pfx_path_openat+0x10/0x10 [ 1310.531949][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1310.531972][ C1] do_filp_open+0x1fa/0x410 [ 1310.531990][ C1] ? __pfx_do_filp_open+0x10/0x10 [ 1310.532016][ C1] ? _raw_spin_unlock+0x28/0x50 [ 1310.532030][ C1] ? alloc_fd+0x64c/0x6c0 [ 1310.532055][ C1] do_sys_openat2+0x121/0x1c0 [ 1310.532072][ C1] ? __pfx_do_sys_openat2+0x10/0x10 [ 1310.532094][ C1] __x64_sys_openat+0x138/0x170 [ 1310.532116][ C1] do_syscall_64+0xf6/0x210 [ 1310.532135][ C1] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 1310.532150][ C1] ? clear_bhb_loop+0x45/0xa0 [ 1310.532166][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1310.532181][ C1] RIP: 0033:0x7f2420ea7407 [ 1310.532201][ C1] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 1310.532219][ C1] RSP: 002b:00007ffdfdee6580 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 1310.532234][ C1] RAX: ffffffffffffffda RBX: 00007f2421579880 RCX: 00007f2420ea7407 [ 1310.532245][ C1] RDX: 0000000000080241 RSI: 00007ffdfdee6ae0 RDI: ffffffffffffff9c [ 1310.532257][ C1] RBP: 0000000000000004 R08: 0000000000000000 R09: 0000000000000000 [ 1310.532266][ C1] R10: 00000000000001b6 R11: 0000000000000202 R12: 000055626efc7dfc [ 1310.532276][ C1] R13: 000055626efc7dfc R14: 0000000000000001 R15: 000055626efe2140 [ 1310.532294][ C1] [ 1310.532549][ C0] rcu: rcu_preempt kthread timer wakeup didn't happen for 10501 jiffies! g92801 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 [ 1311.171035][ C0] rcu: Possible timer handling issue on cpu=1 timer-softirq=93888 [ 1311.178926][ C0] rcu: rcu_preempt kthread starved for 10502 jiffies! g92801 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=1 [ 1311.190295][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 1311.200260][ C0] rcu: RCU grace-period kthread stack dump: [ 1311.206142][ C0] task:rcu_preempt state:I stack:27304 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00004000 [ 1311.218065][ C0] Call Trace: [ 1311.221343][ C0] [ 1311.224281][ C0] __schedule+0x168f/0x4c70 [ 1311.228801][ C0] ? do_raw_spin_unlock+0x122/0x240 [ 1311.234011][ C0] ? schedule+0x165/0x360 [ 1311.238344][ C0] ? __pfx___schedule+0x10/0x10 [ 1311.243213][ C0] ? schedule+0x91/0x360 [ 1311.247457][ C0] schedule+0x165/0x360 [ 1311.251625][ C0] schedule_timeout+0x12b/0x270 [ 1311.256482][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 1311.261864][ C0] ? __pfx_process_timeout+0x10/0x10 [ 1311.267185][ C0] ? prepare_to_swait_event+0x341/0x380 [ 1311.272755][ C0] rcu_gp_fqs_loop+0x301/0x1540 [ 1311.277615][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 1311.282830][ C0] ? __pfx_rcu_gp_init+0x10/0x10 [ 1311.287788][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 1311.293085][ C0] ? _raw_spin_unlock_irq+0x2e/0x50 [ 1311.298295][ C0] ? finish_swait+0xcd/0x1f0 [ 1311.302894][ C0] rcu_gp_kthread+0x99/0x390 [ 1311.307495][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1311.312699][ C0] ? __kthread_parkme+0x7b/0x200 [ 1311.317640][ C0] ? __kthread_parkme+0x1a1/0x200 [ 1311.322672][ C0] kthread+0x70e/0x8a0 [ 1311.326752][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1311.331957][ C0] ? __pfx_kthread+0x10/0x10 [ 1311.336555][ C0] ? __pfx_kthread+0x10/0x10 [ 1311.341148][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 1311.346348][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 1311.351550][ C0] ? __pfx_kthread+0x10/0x10 [ 1311.356146][ C0] ret_from_fork+0x4b/0x80 [ 1311.360563][ C0] ? __pfx_kthread+0x10/0x10 [ 1311.365159][ C0] ret_from_fork_asm+0x1a/0x30 [ 1311.369949][ C0]