last executing test programs: 48.442390573s ago: executing program 1 (id=3608): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, 0x0, 0x0) connect$unix(r0, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) keyctl$dh_compute(0x17, 0x0, 0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x24, 0x0, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, 0x0, 0x0) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000300)='sched_switch\x00'}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) r5 = fanotify_init(0x20, 0x1) write$bt_hci(r4, &(0x7f0000000180)=ANY=[@ANYRES8=r5], 0xe) 45.261257672s ago: executing program 1 (id=3616): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x40d, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x5, 0x1}, @IFLA_BR_AGEING_TIME={0x8, 0x4, 0x2}]}}}]}, 0x44}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x8b}, 0x0) getrlimit(0xe, &(0x7f00000000c0)) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x1, 0x20}, 0xc) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, 0x0, 0x0) r4 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) close(r4) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000200)={0x0, &(0x7f0000000100)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_SETCRTC(r4, 0xc06864a2, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r6, 0x4b3a, 0x1) ioctl$TCXONC(r6, 0x4b3a, 0x2) bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x3, @loopback, 0x400000}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in={{0x2, 0x4e24, @loopback}}, 0x102, 0xfffe, 0x0, 0x0, 0x54}, 0x9c) 43.38036506s ago: executing program 1 (id=3619): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f00000039c0)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0xb7, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000180)={r0, r1}) sendmsg$rds(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f0000002980)=""/4112, 0x1010}], 0x1}, 0x0) write(r2, 0x0, 0x0) recvmmsg(r2, &(0x7f00000006c0)=[{{0x0, 0xffffffffffffff0e, 0x0}, 0x45}], 0x52a, 0x40002000, 0x0) sendmmsg$inet(r2, &(0x7f0000000000), 0x1, 0x20048045) 41.220508163s ago: executing program 1 (id=3625): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ptrace(0x10, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000400)={r4, r0}, 0xc) r5 = syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x4000000, 0x0, 0x0}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000600)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000005c0)={&(0x7f00000004c0)={0xd0, 0x0, 0x8, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @void}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}], @NL80211_ATTR_TX_RATES={0xac, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x4c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x7609, 0x6, 0x2, 0x1, 0x6, 0x1ff, 0xfffe]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0xc, 0x8, 0x101, 0x0, 0x10, 0x6, 0x7]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_2GHZ={0x14, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_2GHZ={0x30, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x2c, 0x2, [{0x1, 0x2}, {0x5, 0x3}, {0x0, 0x4}, {0x1}, {0x2, 0x7}, {0x5, 0xa}, {}, {0x1}, {0x5, 0x2}, {0x0, 0x1}, {0x1, 0x2}, {0x5, 0x5}, {0x7, 0x6}, {0x5, 0x7}, {0x4, 0x6}, {0x3, 0x4}, {0x2, 0x8}, {0x7, 0x9}, {0x0, 0x5}, {0x7, 0xa}, {0x1}, {0x2, 0x7}, {0x6, 0x9}, {0x1, 0x2}, {0x1, 0x5}, {0x3, 0x5}, {0x7, 0x6}, {0x6, 0xa}, {0x7, 0xa}, {0x7}, {0x4, 0x6}, {0x1, 0xa}, {0x6, 0xa}, {0x6, 0x4}, {0x0, 0x8}, {0x1, 0x5}, {0x6, 0x2}, {0x6, 0x7}, {0x3, 0xa}, {0x3, 0x6}]}]}, @NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}]}]}, 0xd0}, 0x1, 0x0, 0x0, 0x40050}, 0x40) ioctl$VIDIOC_S_SELECTION(r5, 0xc040565f, &(0x7f0000000940)={0xa, 0x100, 0x3, {0x8000, 0x1000, 0x4, 0x2}}) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_io_uring_setup(0x4e1, &(0x7f0000000380)={0x0, 0x1ffffa, 0x10100, 0x3, 0x1}, &(0x7f0000000180), &(0x7f00000001c0)) socket$netlink(0x10, 0x3, 0x4) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0) 37.655406278s ago: executing program 1 (id=3628): r0 = socket$netlink(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r4, &(0x7f0000000ec0)='cgroup.max.depth\x00', 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) timer_create(0x3, 0x0, &(0x7f0000000100)) ioprio_set$pid(0x3, 0x0, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000001c0)={&(0x7f00000002c0)={0x2c, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98f}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) 35.389419372s ago: executing program 1 (id=3631): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x40d, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x5, 0x1}, @IFLA_BR_AGEING_TIME={0x8, 0x4, 0x2}]}}}]}, 0x44}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x8b}, 0x0) getrlimit(0xe, &(0x7f00000000c0)) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x1, 0x20}, 0xc) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, 0x0, 0x0) r4 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) close(r4) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000200)={0x0, &(0x7f0000000100)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_SETCRTC(r4, 0xc06864a2, &(0x7f0000000740)={0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "65366a50432b7ee2c7feddd91df868e7cfc6fa7272f3bf0a71b5d0c19323a260"}}) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r7, 0x4b3a, 0x1) ioctl$TCXONC(r7, 0x4b3a, 0x2) bind$inet6(r3, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in={{0x2, 0x4e24, @loopback}}, 0x102, 0xfffe, 0x0, 0x0, 0x54}, 0x9c) 19.803916889s ago: executing program 32 (id=3631): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x40d, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x5, 0x1}, @IFLA_BR_AGEING_TIME={0x8, 0x4, 0x2}]}}}]}, 0x44}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x8b}, 0x0) getrlimit(0xe, &(0x7f00000000c0)) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x1, 0x20}, 0xc) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, 0x0, 0x0) r4 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) close(r4) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000200)={0x0, &(0x7f0000000100)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_SETCRTC(r4, 0xc06864a2, &(0x7f0000000740)={0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "65366a50432b7ee2c7feddd91df868e7cfc6fa7272f3bf0a71b5d0c19323a260"}}) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r7, 0x4b3a, 0x1) ioctl$TCXONC(r7, 0x4b3a, 0x2) bind$inet6(r3, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in={{0x2, 0x4e24, @loopback}}, 0x102, 0xfffe, 0x0, 0x0, 0x54}, 0x9c) 17.526263794s ago: executing program 0 (id=3672): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ptrace(0x10, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000400)={r4, r0}, 0xc) r5 = syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x4000000, 0x0, 0x0}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000600)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000005c0)={&(0x7f00000004c0)={0xd0, 0x0, 0x8, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @void}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}], @NL80211_ATTR_TX_RATES={0xac, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x4c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x7609, 0x6, 0x2, 0x1, 0x6, 0x1ff, 0xfffe]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0xc, 0x8, 0x101, 0x0, 0x10, 0x6, 0x7]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_2GHZ={0x14, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_2GHZ={0x30, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x2c, 0x2, [{0x1, 0x2}, {0x5, 0x3}, {0x0, 0x4}, {0x1}, {0x2, 0x7}, {0x5, 0xa}, {}, {0x1}, {0x5, 0x2}, {0x0, 0x1}, {0x1, 0x2}, {0x5, 0x5}, {0x5, 0x7}, {0x2, 0x3}, {0x4, 0x6}, {0x3, 0x4}, {0x2, 0x8}, {0x7, 0x9}, {0x0, 0x5}, {0x7, 0xa}, {0x1}, {0x2, 0x7}, {0x6, 0x9}, {0x1, 0x2}, {0x1, 0x5}, {0x3, 0x5}, {0x7, 0x6}, {0x6, 0xa}, {0x7, 0xa}, {0x7}, {0x4, 0x6}, {0x1, 0xa}, {0x6, 0xa}, {0x6, 0x4}, {0x0, 0x8}, {0x1, 0x5}, {0x6, 0x2}, {0x6, 0x7}, {0x3, 0xa}, {0x3, 0x6}]}]}, @NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}]}]}, 0xd0}, 0x1, 0x0, 0x0, 0x40050}, 0x40) ioctl$VIDIOC_S_SELECTION(r5, 0xc040565f, &(0x7f0000000940)={0xa, 0x100, 0x3, {0x8000, 0x1000, 0x4, 0x2}}) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_io_uring_setup(0x4e1, &(0x7f0000000380)={0x0, 0x1ffffa, 0x10100, 0x3, 0x1}, &(0x7f0000000180), &(0x7f00000001c0)) socket$netlink(0x10, 0x3, 0x4) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0) 13.467705965s ago: executing program 3 (id=3670): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='net/netlink\x00') openat$nullb(0xffffffffffffff9c, &(0x7f0000000300), 0x4000, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) dup(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xe1}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000340)=@abs={0x0, 0x0, 0x4000}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount$nfs(0x0, 0x0, &(0x7f0000000680), 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff}, 0x18) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$SIOCSIFMTU(r1, 0x8922, &(0x7f0000000180)={'veth1_vlan\x00', 0x8a}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) preadv(r0, &(0x7f0000000280)=[{&(0x7f00000002c0)=""/116, 0x74}, {&(0x7f0000000240)=""/19, 0x13}, {&(0x7f00000003c0)=""/94, 0x5e}, {&(0x7f0000000a00)=""/195, 0xc3}], 0x4, 0x7, 0x101) 9.814564311s ago: executing program 3 (id=3676): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='net/netlink\x00') openat$nullb(0xffffffffffffff9c, &(0x7f0000000300), 0x4000, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) dup(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xe1}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000340)=@abs={0x0, 0x0, 0x4000}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount$nfs(0x0, 0x0, &(0x7f0000000680), 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff}, 0x18) ioctl$SIOCSIFMTU(r1, 0x8922, &(0x7f0000000180)={'veth1_vlan\x00', 0x8a}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) preadv(r0, &(0x7f0000000280)=[{&(0x7f00000002c0)=""/116, 0x74}, {&(0x7f0000000240)=""/19, 0x13}, {&(0x7f00000003c0)=""/94, 0x5e}, {&(0x7f0000000a00)=""/195, 0xc3}], 0x4, 0x7, 0x101) 9.754509142s ago: executing program 2 (id=3678): socket$pppoe(0x18, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) sched_setscheduler(r0, 0x6, &(0x7f0000000100)=0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x1f0581, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f0000847fff)='X', 0x1, 0x0, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}}], 0x1, 0x11) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setfsuid(0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = socket$phonet_pipe(0x23, 0x5, 0x2) openat$vimc0(0xffffff9c, &(0x7f0000000340), 0x2, 0x0) connect$phonet_pipe(r4, 0x0, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x20040010) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x20000000000, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0x0, 0x9, 0x0, 0xf, 0x80000002}, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) r5 = socket$inet6(0xa, 0x1, 0x84) setsockopt$sock_linger(r5, 0x1, 0xd, &(0x7f0000000040)={0x1, 0xffffffff}, 0x8) close(r5) 8.659156838s ago: executing program 3 (id=3679): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='net/netlink\x00') openat$nullb(0xffffffffffffff9c, &(0x7f0000000300), 0x4000, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) dup(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xe1}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000340)=@abs={0x0, 0x0, 0x4000}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount$nfs(0x0, 0x0, &(0x7f0000000680), 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) ioctl$SIOCSIFMTU(r1, 0x8922, &(0x7f0000000180)={'veth1_vlan\x00', 0x8a}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) preadv(r0, &(0x7f0000000280)=[{&(0x7f00000002c0)=""/116, 0x74}, {&(0x7f0000000240)=""/19, 0x13}, {&(0x7f00000003c0)=""/94, 0x5e}, {&(0x7f0000000a00)=""/195, 0xc3}], 0x4, 0x7, 0x101) 7.489141606s ago: executing program 0 (id=3680): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r0, 0x0, 0x0) 7.144572522s ago: executing program 0 (id=3682): socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000400)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000002c0)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="a7db9483cae790e452d3566ec8defa14c5753abaaa", @ANYRES32, @ANYBLOB='\x00'/19, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/14], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1c, 0x0, 0x0, 0x8000, 0x2000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) renameat2(r3, &(0x7f0000000c00)='./file1\x00', 0xffffffffffffffff, 0x0, 0x2) r4 = socket$rds(0x15, 0x5, 0x0) bind$rds(r4, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r4, 0x0, 0x0) sendmsg$rds(r4, &(0x7f0000000680)={&(0x7f00000000c0)={0x2, 0x8, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[], 0x5c}}, 0x24040800) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="ec000000", @ANYRES16=r5, @ANYBLOB], 0xec}, 0x1, 0x0, 0x0, 0x4084}, 0x20000010) 7.144195671s ago: executing program 3 (id=3683): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000400)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000002c0)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000004c0)='rcu_utilization\x00', r3}, 0x18) r4 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(r4, 0x111, 0x4, 0x1, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="a7db9483cae790e452d3566ec8defa14c5753abaaa", @ANYRES32, @ANYBLOB='\x00'/19, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1c, 0x0, 0x0, 0x8000, 0x2000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) renameat2(r4, &(0x7f0000000c00)='./file1\x00', 0xffffffffffffffff, 0x0, 0x2) r5 = socket$rds(0x15, 0x5, 0x0) bind$rds(r5, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r5, &(0x7f0000000680)={&(0x7f00000000c0)={0x2, 0x8, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[], 0x5c}}, 0x24040800) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$wireguard(&(0x7f00000005c0), r6) sendmsg$WG_CMD_SET_DEVICE(r6, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="ec000000", @ANYRES16=r7, @ANYBLOB="01000000000000000000010000000800050001000000140002007767310000000000000000000000000024000300a0cb879a47f5bc644c0e693fa6d031c74a1553b6e901b9ff2f518c78042fb5420800050000000000900008808c00008024000100975c9d81c983c8209ee781254b899f8ed925ae9f0923c23c62f53c57cdbf691c640009801c000080060001000200000008000200ffffffff05000300030000001c000080060001000200000008000200ac141427050003"], 0xec}, 0x1, 0x0, 0x0, 0x4084}, 0x20000010) 7.143093891s ago: executing program 4 (id=3684): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='net/netlink\x00') openat$nullb(0xffffffffffffff9c, &(0x7f0000000300), 0x4000, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) dup(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xe1}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000340)=@abs={0x0, 0x0, 0x4000}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount$nfs(0x0, 0x0, &(0x7f0000000680), 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff}, 0x18) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$SIOCSIFMTU(r1, 0x8922, &(0x7f0000000180)={'veth1_vlan\x00', 0x8a}) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) preadv(r0, &(0x7f0000000280)=[{&(0x7f00000002c0)=""/116, 0x74}, {&(0x7f0000000240)=""/19, 0x13}, {&(0x7f00000003c0)=""/94, 0x5e}, {&(0x7f0000000a00)=""/195, 0xc3}], 0x4, 0x7, 0x101) 5.332615059s ago: executing program 0 (id=3685): r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) socket$nl_netfilter(0x10, 0x3, 0xc) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0xb, @empty}, 0x1c) connect$inet6(r0, 0x0, 0x0) syz_usb_connect(0x2, 0x0, 0x0, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, 0x0, &(0x7f0000000140)) socket$kcm(0x10, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x11, 0x80a, 0x0) write(0xffffffffffffffff, &(0x7f0000000000), 0x0) syz_usb_connect(0x2, 0xee2, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], &(0x7f0000001240)={0x0, 0x0, 0x38, &(0x7f0000001280)=ANY=[@ANYBLOB="050f2f000300100109000005590900ff1c100a03240100000000040000c00000603f00000f7eff0000c0000014100403f0eb10f0d3f23f5ea92d272137"], 0x3, [{0x4, &(0x7f00000010c0)=@lang_id={0x4, 0x3, 0x860}}, {0x4, &(0x7f0000001100)=@lang_id={0x4, 0x3, 0x42a}}, {0x4, &(0x7f0000001140)=@lang_id={0x4, 0x3, 0xc2a}}]}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, &(0x7f00000004c0)=0x27) 5.331640389s ago: executing program 3 (id=3686): r0 = socket$netlink(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0xffffff3e) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) timer_create(0x3, 0x0, &(0x7f0000000100)) ioprio_set$pid(0x3, 0x0, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r4, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000001c0)={&(0x7f00000002c0)={0x2c, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98f}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) 4.739844558s ago: executing program 2 (id=3687): socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000400)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000002c0)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="a7db9483cae790e452d3566ec8defa14c5753abaaa", @ANYRES32, @ANYBLOB='\x00'/19, @ANYRES32=0x0, @ANYBLOB='\x00'/19], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1c, 0x0, 0x0, 0x8000, 0x2000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) renameat2(r3, &(0x7f0000000c00)='./file1\x00', 0xffffffffffffffff, 0x0, 0x2) r4 = socket$rds(0x15, 0x5, 0x0) bind$rds(r4, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r4, 0x0, 0x0) sendmsg$rds(r4, &(0x7f0000000680)={&(0x7f00000000c0)={0x2, 0x8, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[], 0x5c}}, 0x24040800) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="ec000000", @ANYRES16=r5, @ANYBLOB], 0xec}, 0x1, 0x0, 0x0, 0x4084}, 0x20000010) 4.559072541s ago: executing program 4 (id=3688): socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000400)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000002c0)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="a7db9483cae790e452d3566ec8defa14c5753abaaa", @ANYRES32, @ANYBLOB='\x00'/19, @ANYRES32=0x0, @ANYBLOB='\x00'/18], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1c, 0x0, 0x0, 0x8000, 0x2000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) renameat2(r3, &(0x7f0000000c00)='./file1\x00', 0xffffffffffffffff, 0x0, 0x2) r4 = socket$rds(0x15, 0x5, 0x0) bind$rds(r4, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r4, 0x0, 0x0) sendmsg$rds(r4, &(0x7f0000000680)={&(0x7f00000000c0)={0x2, 0x8, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[], 0x5c}}, 0x24040800) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="ec000000", @ANYRES16=r5, @ANYBLOB], 0xec}, 0x1, 0x0, 0x0, 0x4084}, 0x20000010) 3.612392255s ago: executing program 2 (id=3689): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ptrace(0x10, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000400)={r4, r0}, 0xc) r5 = syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x4000000, 0x0, 0x0}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000600)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000005c0)={&(0x7f00000004c0)={0xd0, 0x0, 0x8, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @void}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}], @NL80211_ATTR_TX_RATES={0xac, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x4c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x7609, 0x6, 0x2, 0x1, 0x6, 0x1ff, 0xfffe]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0xc, 0x8, 0x101, 0x0, 0x10, 0x6, 0x7]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_2GHZ={0x14, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_2GHZ={0x30, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x2c, 0x2, [{0x1, 0x2}, {0x5, 0x3}, {0x0, 0x4}, {0x1}, {0x2, 0x7}, {0x5, 0xa}, {}, {0x1}, {0x5, 0x2}, {0x0, 0x1}, {0x1, 0x2}, {0x5, 0x5}, {0x5, 0x7}, {0x2, 0x3}, {0x4, 0x6}, {0x3, 0x4}, {0x2, 0x8}, {0x7, 0x9}, {0x0, 0x5}, {0x7, 0xa}, {0x1}, {0x2, 0x7}, {0x6, 0x9}, {0x1, 0x2}, {0x1, 0x5}, {0x3, 0x5}, {0x7, 0x6}, {0x6, 0xa}, {0x7, 0xa}, {0x7}, {0x4, 0x6}, {0x1, 0xa}, {0x6, 0xa}, {0x6, 0x4}, {0x0, 0x8}, {0x1, 0x5}, {0x6, 0x2}, {0x6, 0x7}, {0x3, 0xa}, {0x3, 0x6}]}]}, @NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}]}]}, 0xd0}, 0x1, 0x0, 0x0, 0x40050}, 0x40) ioctl$VIDIOC_S_SELECTION(r5, 0xc040565f, &(0x7f0000000940)={0xa, 0x100, 0x3, {0x8000, 0x1000, 0x4, 0x2}}) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_io_uring_setup(0x4e1, &(0x7f0000000380)={0x0, 0x1ffffa, 0x10100, 0x3, 0x1}, &(0x7f0000000180), &(0x7f00000001c0)) socket$netlink(0x10, 0x3, 0x4) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0) 3.611460855s ago: executing program 4 (id=3690): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$unix(0x1, 0x2, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010028bd7000fddbdf25070000000800", @ANYRES32=r6, @ANYBLOB="0c009900ff070000700000001400040073797a6b616c6c6572300000000000000800050007"], 0x50}, 0x1, 0x0, 0x0, 0x91}, 0x24044884) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r7) socket$inet_sctp(0x2, 0x1, 0x84) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) 2.580813151s ago: executing program 2 (id=3691): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f00000039c0)=ANY=[@ANYBLOB="180000000300000000000000a012544f95002b000000000093adffa82255f674412d020000000000005ab527ee3697f1ed4436dd1164b1b3f427f6ba6b34f98125f30e631d273683626e00dc254d570d4a6b78a5833488cfe410090000004aa900003d3cd62f00158e6eee8501000000520a0000151d016e6cafbe9309aba218812868a51d129e78f6ae170bf5a52001a3cd000041f0db74596fd72c002a60c1bc7dc8c38b000024b9dd1145d03ff45f70685c6bd9ff41c69b7de4758c1096a1dc52f29e8b701d2d17ebc406e89dcbb7677e6528b0856e31eb9474c0106fc48e1f8c1a5f6945ac24cf609068f6ff21e88b3cfc22df01d51e242443618c02e0a428da651366e4bac9d97328fa2a82b5e8741e02056d933bedf59ff232cebc68b91af50479387467824262852c7939db5672d07cdbe8e148bf56497e5d56d06c7551b870b2851c3f0a1aab7158edeeccd92e3a88dc0f432187ce92d7b17a21c8f1b3369ebfcb4cb2946601b0f04edb256c604f068773f6db9d661bd7f0e2536f00000000000000005521458b7d1e341c6f864f983d745f5865aad41d29158ae7602a2d6cd415e8351ebc283df54d6bec664709ff03f1aa3dc7f1580ace9bf2afd28d7157e67fb98d121a96eb373845255012e028cb2654d493afb4b35faae176f99b745eda2967199cc93685bb444f9bc50713061385537e8e4871d4acf3e3dc10e13ef227f627a40000ad1fa253d33fa74f172d0007ae4e1e347c0cff28235a6bb7aa3804b907a8f2880c5cb1cb385e6add14652003c7cdd3324f07d1ff07000000000000000009dd872ec64fa6c718bbd1aa591140cff0be4c6f8df084c5e9734ae30aa9afdc7125f01ab03a9b1074407136b4506000f0916aada035df2e0452a9b39e73aeeb6eaf14652dda689e2051d9b7eb85f3f2d5ab2c51944da8d7391d5b6b97419a3b76600cd1aa0afe5f8f46df4c5124ca425d374b371867a79b31f3f514573f1e30d1fd2d763f3ee9210b15c1d60be2168fffcd599a2cb77f124e22f87673675805494db821f39b50d5fd8c6b2a3a324c257bc97def5f07f2b77f05a4f81a9cf8110971b749ccd74089ed6b86f81ca3d247d8f71d290ed1b1a11f7a67125170c88c3b6a50696332226401b110da9c4407eca22debc99335583b00013c3130978fa069af8223b38ced735c2d90c6d84c30a0d87d42647489b39601be5c27696cf2f16625c0c102000000000000009ef52134842e64171f3963841086e3797a4825d081f240080000534187738655d7a6240412c8f283cc0c1eba2866dc9580000000000000007fffffffff554b82d9c162f3556076b80552d961ca74d1ffdaccf0ea5f02e0163a9ccb9087e6c3b3917bb74fd3d560700a1fab44e77e312b3b129e000302d613916c9bcf9f0000fac73a5b6bfb01f7ada800e50000000000fdaf2f7b3b79a433e08074ea2462974ab2cbd2190780fa39c43ea647eb1cfa2638f56daee57ed14bc74de0fd87a9ce638190f3570e0b4c80ef682df22237270955afb6008846557ee3bc09fda6dbb6550d597300eb82a184c96ffde5a30e5433d866665b98ca2002c836e89feef904c22ff2634b7bfbf5c0d586cda5b45fd00dede1e88a4d41dee7cc8d0834fb8d124638fec58faeb4c16abb440df2a694f4cdcaa4f65c22f000000000000000000000000000d503d79906958102000000000000000000001ffff0ef89b2a68d2bb2dd163e863314e8449801b52bb93f6c9084659ce777dda8563c859656a357770289a61faa95a82bf1cfb7f2f97252e9322abe282c3344fc6738b4467893b9bf0000000000000001062a35376413c29f7c6f7bde29b9f4bddd5e328661f4615e627a6f608ad53a4168fe8e5d7d934aa289b4bd2b870000000000000000000000000000fc4b4ff50000009b777883a02ffd92dfc4cb4114b9f9cf4ad155110cd3ace2b322ae31bfa27847c799c8869a1ea5018e525e6383ad7fd9795170e7b11e247603000000001459c7f606d721d3979676bffb3049166ab84ac1061991bd57c2566c10c296352a5105b6164e3f2491e4793e2b70590dcc71f110da96366c40dd44a2c9882d3aa0f8a797b8fea6efcfb5276b7679f15559cdaabf5fc14add71d0bca37405ded69b77ab4a3d7487fd50c5002adef9546abb7a2d9c085b189b5ff30e4e0c13f60870fde1f88d830b11002135e8e7262f29b6d7923bfbe0bd2a8be179e56b41ff3792cee2fc37eee739c3008ce740d8804f8e705f0dc59d000021363e8df94ff175b48dc8c12def681a11647946595445bf1cb7d2778cd27a6b3b2966b08be600000020a8a711d193bae0ab2db9ed9c6cb3c3de42ab89524414cae922141f7baf17ebb790ad60bd0387837e63f9880fd70259e35590afb4843cd4e9989398eaa89cefb3aa13cab8d015cbaf1561d95362decd73b8f8cbf8269cac091cfaaa3c7e46d6e79145fc0f1d1b383752ccb40515a772356d746914540216adf4c0f44f1cff3760afa252720ec6dad3a98671ecdaff46cddffb1f05a0c0976070d603a442d014822369fa3eacbb69bd1b0a074357acd5d02161fed146ad3aa15d2b8101b7bd1e091ada78ecd50181f4b35cae1b29aff91494c916323b61f815c4e0701657087ad11eef97952921365bc898ba2c76a9b6e0052f43b1ad2dfdf3f958fc1d32e692bc8846c78a956ada453c67c1c2cdc4f8b1c94e9adc106e85b31e030d955c5578e107a6e8ca0d4dd05344c3e2af25d9a3b0f7805624016aeab271a75f0bacb101a156ef8948064569154a7de08f80e4df4c339b69431b0a5671097d89212b465b0b32275deae10a77e334c9fc074d181bdeb5be80a6249d472e78e6be57a5ccd354cf181e099605a644ecade221a2be926210b2690d09e4b7a3dea25403397439979c27d5613262de10bacecfff2d58437f012df4252c018795310c25e8fce18ed366ac2caade564ca869727a7d63c26271e17d7aba48971835530311545273d3caadeb5d2017dc816126b6f2068f68a4111ddd587b5df4b5d8f1ce00231a2092eb2e797c491a1e66f73606fd95bb01b53a2d862b6262f0259da51ff7517ace7361460a4669a97f7d0bf095c2787f00bdbfee19670d1e0ec5e6c3cb09972fa4d94986157b96d6695177c99d83716651129320924352cda7b8ead91c3301af620c1e8d7004d29ad77f54836779600bb0b247139d429df96362db3ecfbd36fa8164fabdcf2e58b720e8e1c03a74daf593f92a8ecc03f8c8e3af9ae07dc03780cc0d69da9e3528c1693fb51998731992ceb27dcc0be5be4decefe41b78bc1847bf54b087e095172f06cfa6d4bf958b1d4544947ff1230655199db4f475006047fe83caca97758dffa53cee764f85932eb20d54241b2d515c0826dfe1f0f40ae920455a4548fb35e2a345c05b1c252b7877bb3d834b0b3579a36249146f832ef258df5127318c7017ac1a996c4f902f82deb60fd113ccf812d55ffd625057bd4ff3960992b85bc8d32edfca386be16b1c549aec52e31e1405f86c7760282901750b732ec06b0db735222a56f3ebb16fad3e9269495230cd88b0ea2e3affa196a2f0adf733bc6afd37a659ecc933d636c1b27d3a16c5ea25301f9b5789e4aa8e7228e3002f146aa5e575bb74b1ebb82147edf8161d362704377058e887c608be8719ea1b6c490f79e0832e2ddd7e217c7adddd4731e032d7eb35bdc38160c676d840e2e8be9033a686cf7061f5f55e2851736aa8c2f3bad8ac05c048e20d8c03b68008a70b8f80c93ebd2ababb5c65fe9abc4642d7b58d8c93efd7b6b39c68a16d75a7852dfc37a6a50cb28a9b6f685a465d08fc603d81d8ddd5296fae97be1401a8be7748a71fcdc85ba2049e96c4e6dce59b88cd5472726bc237fbcf3ffcbf32e2aac9b2f9d6013b59780ded723b08c767fa091e2fa4d51863500fcd5041bcc98a685504835743194113ea0b97b4f9ddc395b9ac4defefadd37a8871fd91f31a56eb96ecf90000000000000000000000000000000000000000000c447ea475c236c3b7f24079fe375f3f861fc54d9d8a04a6cb8c0dbf9e9cc53a84a5795ae5ebcbd825e3572df16fbdcd395e995fa4fcbbf31583d9e1d3ff537f401a3139200a8bd2122157887199cd54075a4d5b29935dda5c6aa0f3ac6895eb73c7abbd4603abdaa8629dedb2cab0fa80f9514ad310491a9a300015c18cdfd9342cff50d849d7516134d45d1a8cf157abe0c79de543993cf689f8a7113508fbf8a610417045e6c38a5d4ff4656dbd9656ad6ce625e1674ab57944ebb834743a248a2be304ba1e037cb63a16"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0xb7, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000180)={r0, r1}) sendmsg$rds(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f0000002980)=""/4112, 0x1010}], 0x1}, 0x0) write(r2, 0x0, 0x0) recvmmsg(r2, &(0x7f00000006c0)=[{{0x0, 0xffffffffffffff0e, 0x0}, 0x45}], 0x52a, 0x40002000, 0x0) sendmmsg$inet(r2, &(0x7f0000000000), 0x1, 0x20048045) 2.273189465s ago: executing program 4 (id=3692): socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000400)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000002c0)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="a7db9483cae790e452d3566ec8defa14c5753abaaa", @ANYRES32, @ANYBLOB='\x00'/19, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/20], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1c, 0x0, 0x0, 0x8000, 0x2000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) renameat2(r3, &(0x7f0000000c00)='./file1\x00', 0xffffffffffffffff, 0x0, 0x2) r4 = socket$rds(0x15, 0x5, 0x0) bind$rds(r4, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r4, 0x0, 0x0) sendmsg$rds(r4, &(0x7f0000000680)={&(0x7f00000000c0)={0x2, 0x8, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[], 0x5c}}, 0x24040800) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="ec000000", @ANYRES16=r5, @ANYBLOB], 0xec}, 0x1, 0x0, 0x0, 0x4084}, 0x20000010) 1.385338619s ago: executing program 0 (id=3693): r0 = socket$netlink(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f0000000ec0)='cgroup.max.depth\x00', 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000040)=ANY=[], 0xffffff3e) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) timer_create(0x3, 0x0, &(0x7f0000000100)) ioprio_set$pid(0x3, 0x0, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r6, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000001c0)={&(0x7f00000002c0)={0x2c, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98f}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) 1.34308981s ago: executing program 2 (id=3694): r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x20}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20000080) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000004000)=@newtfilter={0x480, 0x2c, 0xd29, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {0xa, 0xfff3}, {}, {0xc, 0xd}}, [@filter_kind_options=@f_flow={{0x9}, {0x450, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0xce2d}, @TCA_FLOW_POLICE={0x444, 0xa, 0x0, 0x1, [@TCA_POLICE_TBF={0x3c, 0x1, {0xfffff701, 0x6, 0x0, 0x1, 0xc0, {0x2, 0x2, 0x2, 0x9, 0x8, 0x1000}, {0x3, 0x1, 0x7, 0x5, 0x81, 0x5}, 0x100, 0xfffffff8, 0xffffffff}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xd, 0x9, 0x8, 0x4, 0xffff, 0x81, 0x1, 0x3, 0x8, 0x7fff, 0x80, 0x27a2, 0xffffffff, 0x9, 0x800, 0x200, 0x9, 0x0, 0x2, 0xd51, 0x1, 0x8, 0x9, 0x7, 0x6, 0x5, 0xfffffff7, 0x97d6, 0x7, 0x7ff, 0xff, 0x180000, 0x1, 0x4, 0x3, 0x3ff, 0xe, 0x6, 0x6, 0x2, 0x401, 0x5, 0x59b49ea4, 0x5, 0x0, 0x80000000, 0x6, 0xdc, 0x0, 0x27, 0x8, 0x3, 0x7, 0x7ff, 0x5830, 0xf3e5, 0x7, 0x6, 0x4, 0x4, 0x4, 0x4, 0x5, 0x82, 0x2, 0x1, 0x2, 0x7, 0xffff0000, 0x1, 0x100, 0x5, 0xd03, 0x9765, 0xbc, 0x8001, 0x100, 0x7, 0x4, 0xf23, 0x101, 0x5, 0x3, 0x9, 0x6, 0x1, 0x6, 0x8201, 0x80000001, 0xfffffff8, 0x3, 0xa, 0x4, 0xfff, 0x5, 0x2, 0xe2, 0xffffffff, 0x63, 0x7ff, 0x9, 0x3, 0xfffffff7, 0x400, 0x80000000, 0x4, 0x4916afbd, 0x40, 0x5, 0x7fff, 0x400, 0x100, 0x6, 0x8, 0xc, 0x9, 0x4, 0x5, 0x0, 0x19, 0xff8, 0x9, 0x2, 0xa768, 0x5, 0x5, 0xe, 0x6, 0x0, 0x3, 0x8, 0x1, 0x2c5, 0x7, 0x64d, 0xffff74df, 0x2e, 0x3, 0xff, 0x9, 0x5, 0xb6eb, 0xc0000, 0x1, 0x8, 0x7, 0x4, 0x1, 0x1, 0x8, 0xadb8, 0x64db, 0x0, 0xfffffffe, 0x8000, 0x9, 0x2, 0x6, 0x6, 0x7, 0x8, 0x3ff, 0x6, 0x3, 0x8001, 0x9, 0xfff, 0x5, 0x955f, 0x7, 0x7, 0x1, 0x4e, 0x80, 0x5, 0xffffff24, 0x3, 0x5, 0xf6, 0x3, 0x7fffffff, 0x7, 0x4, 0x7, 0x8, 0x4, 0x7f, 0x2, 0x6, 0x9, 0x4, 0x80000000, 0x4, 0x7, 0x6, 0xea, 0x6, 0x399a, 0x6, 0xf1b5, 0x9, 0x8, 0x6, 0x5, 0x10001, 0x2, 0x0, 0xf15, 0x4, 0xf4, 0x91, 0x30, 0xe, 0x1d, 0x9, 0x20c6, 0x8000, 0x7, 0x8bf, 0x39cd5496, 0x6f4, 0xfffffff9, 0xfb32, 0x9b67, 0xfffffff5, 0xf, 0x1, 0x1, 0xc7, 0x4, 0x3, 0x280a9915, 0x6, 0x4, 0x9, 0x8, 0x8000, 0x2, 0x9, 0xf, 0x8, 0x1, 0x3, 0x6, 0x9, 0xffffffff, 0x3, 0x7, 0x5, 0x9, 0x0, 0xfffffffc, 0xe, 0x5c2e34b6, 0x81, 0xb]}]}]}}]}, 0x480}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.32417015s ago: executing program 4 (id=3695): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='net/netlink\x00') openat$nullb(0xffffffffffffff9c, &(0x7f0000000300), 0x4000, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) dup(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xe1}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000340)=@abs={0x0, 0x0, 0x4000}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount$nfs(0x0, 0x0, &(0x7f0000000680), 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) ioctl$SIOCSIFMTU(r1, 0x8922, &(0x7f0000000180)={'veth1_vlan\x00', 0x8a}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) preadv(r0, &(0x7f0000000280)=[{&(0x7f00000002c0)=""/116, 0x74}, {&(0x7f0000000240)=""/19, 0x13}, {&(0x7f00000003c0)=""/94, 0x5e}, {&(0x7f0000000a00)=""/195, 0xc3}], 0x4, 0x7, 0x101) 66.407028ms ago: executing program 0 (id=3696): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000400)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000002c0)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000004c0)='rcu_utilization\x00', r3}, 0x18) r4 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(r4, 0x111, 0x4, 0x1, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="a7db9483cae790e452d3566ec8defa14c5753abaaa", @ANYRES32, @ANYBLOB='\x00'/19, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1c, 0x0, 0x0, 0x8000, 0x2000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) renameat2(r4, &(0x7f0000000c00)='./file1\x00', 0xffffffffffffffff, 0x0, 0x2) r5 = socket$rds(0x15, 0x5, 0x0) bind$rds(r5, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r5, &(0x7f0000000680)={&(0x7f00000000c0)={0x2, 0x8, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[], 0x5c}}, 0x24040800) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$wireguard(&(0x7f00000005c0), r6) sendmsg$WG_CMD_SET_DEVICE(r6, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="ec000000", @ANYRES16=r7, @ANYBLOB="01000000000000000000010000000800050001000000140002007767310000000000000000000000000024000300a0cb879a47f5bc644c0e693fa6d031c74a1553b6e901b9ff2f518c78042fb5420800050000000000900008808c00008024000100975c9d81c983c8209ee781254b899f8ed925ae9f0923c23c62f53c57cdbf691c640009801c000080060001000200000008000200ffffffff05000300030000001c000080060001000200000008000200ac141427050003"], 0xec}, 0x1, 0x0, 0x0, 0x4084}, 0x20000010) 65.739508ms ago: executing program 3 (id=3697): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='net/netlink\x00') openat$nullb(0xffffffffffffff9c, &(0x7f0000000300), 0x4000, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) dup(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xe1}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000340)=@abs={0x0, 0x0, 0x4000}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount$nfs(0x0, 0x0, &(0x7f0000000680), 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff}, 0x18) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$SIOCSIFMTU(r1, 0x8922, &(0x7f0000000180)={'veth1_vlan\x00', 0x8a}) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) preadv(r0, &(0x7f0000000280)=[{&(0x7f00000002c0)=""/116, 0x74}, {&(0x7f0000000240)=""/19, 0x13}, {&(0x7f00000003c0)=""/94, 0x5e}, {&(0x7f0000000a00)=""/195, 0xc3}], 0x4, 0x7, 0x101) 56.246479ms ago: executing program 4 (id=3698): ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8922, &(0x7f0000000280)={'ip6tnl0\x00', 0x7f}) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, 0x4, 0x8, 0x401, 0x0, 0x0, {}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x3a}, @CTA_TIMEOUT_L3PROTO={0x6}]}, 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r0, 0x8914, &(0x7f0000000000)) openat$tun(0xffffff9c, 0x0, 0xe000, 0x0) syz_init_net_socket$rose(0xb, 0x5, 0x0) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r1, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1, @null}, 0x1c) r2 = socket$caif_seqpacket(0x25, 0x5, 0x0) sendmsg$inet(r2, 0x0, 0x40) connect$rose(r1, &(0x7f00000000c0)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, 0x5, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @null]}, 0x40) connect$rose(0xffffffffffffffff, &(0x7f0000000140)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x2, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x40) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) 0s ago: executing program 2 (id=3699): r0 = socket$netlink(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f0000000ec0)='cgroup.max.depth\x00', 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000040)=ANY=[], 0xffffff3e) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) timer_create(0x3, 0x0, &(0x7f0000000100)) ioprio_set$pid(0x3, 0x0, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r6, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000001c0)={&(0x7f00000002c0)={0x2c, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98f}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) kernel console output (not intermixed with test programs): 4066][ T4493] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 676.012252][T12753] device veth1_vlan entered promiscuous mode [ 676.019672][T13116] loop2: detected capacity change from 0 to 7 [ 676.033077][T13116] Dev loop2: unable to read RDB block 7 [ 676.036898][T13116] loop2: unable to read partition table [ 676.038523][T13116] loop2: partition table beyond EOD, truncated [ 676.051913][T13115] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 676.053736][T13116] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 676.054555][T13115] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 676.095970][ T7595] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 676.098626][ T7595] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 676.101449][ T7595] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 676.112406][ T7595] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 676.122083][T12753] device veth0_macvtap entered promiscuous mode [ 676.131974][T12753] device veth1_macvtap entered promiscuous mode [ 676.205433][T12753] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 676.208209][T12753] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 676.210917][T12753] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 676.228136][T12753] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 676.238275][T12753] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 676.244270][T12753] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 676.247815][T13123] loop0: detected capacity change from 0 to 4096 [ 676.250930][T12753] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 676.270035][T13128] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2932'. [ 676.275842][ T7586] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 676.279282][ T7586] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 676.282593][ T7586] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 676.299001][ T7586] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 676.306955][T12753] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 676.309873][T12753] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 676.320869][T12753] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 676.372900][T12753] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 676.375690][T12753] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 676.378466][T12753] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 676.414880][T12753] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 676.431574][T12753] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 676.444522][T12753] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 676.447052][T12753] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 676.449369][T12753] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 676.486989][ T7609] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 676.489815][ T7609] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 676.798033][T13137] netlink: 'syz.3.2934': attribute type 10 has an invalid length. [ 676.815921][ T7611] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 676.818399][ T7611] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 676.849008][ T7586] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 676.867504][ T7586] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 676.870005][ T7586] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 677.089874][ T7609] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 677.354442][ T27] kauditd_printk_skb: 9 callbacks suppressed [ 677.354547][ T27] audit: type=1326 audit(933.171:3316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13139 comm="syz.4.2936" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8e15a8a8 code=0x7ffc0000 [ 677.562250][ T27] audit: type=1326 audit(933.171:3317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13139 comm="syz.4.2936" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8e15a8a8 code=0x7ffc0000 [ 677.987587][ T27] audit: type=1326 audit(933.251:3318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13139 comm="syz.4.2936" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=79 compat=0 ip=0xffff8e15a8a8 code=0x7ffc0000 [ 678.000090][ T27] audit: type=1326 audit(933.251:3319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13139 comm="syz.4.2936" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8e15a8a8 code=0x7ffc0000 [ 678.013160][ T27] audit: type=1326 audit(933.251:3320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13139 comm="syz.4.2936" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8e15a8a8 code=0x7ffc0000 [ 678.045702][ T27] audit: type=1326 audit(933.261:3321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13139 comm="syz.4.2936" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffff8e15a8a8 code=0x7ffc0000 [ 678.085707][ T27] audit: type=1326 audit(933.261:3322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13139 comm="syz.4.2936" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8e15a8a8 code=0x7ffc0000 [ 678.839799][ T27] audit: type=1326 audit(933.271:3323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13139 comm="syz.4.2936" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8e15a8a8 code=0x7ffc0000 [ 678.863124][ T27] audit: type=1326 audit(933.281:3324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13139 comm="syz.4.2936" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffff8e15a8a8 code=0x7ffc0000 [ 678.869272][ T27] audit: type=1326 audit(933.281:3325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13139 comm="syz.4.2936" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8e15a8a8 code=0x7ffc0000 [ 678.904901][ T2061] ieee802154 phy0 wpan0: encryption failed: -22 [ 678.906753][ T2061] ieee802154 phy1 wpan1: encryption failed: -22 [ 679.076166][T13158] (syz.2.2828,13158,0):ocfs2_fill_super:990 ERROR: superblock probe failed! [ 679.078667][T13158] (syz.2.2828,13158,0):ocfs2_fill_super:1176 ERROR: status = -22 [ 680.062800][T13168] loop2: detected capacity change from 0 to 7 [ 680.071329][T13168] Dev loop2: unable to read RDB block 7 [ 680.073035][T13168] loop2: unable to read partition table [ 680.074559][T13168] loop2: partition table beyond EOD, truncated [ 680.161190][T13168] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 680.265159][T12756] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 680.284743][T12756] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 680.288367][T12756] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 680.319462][T12756] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 680.336514][T12756] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 680.338930][T12756] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 680.451987][T13175] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 680.479753][T13175] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 680.837718][T13184] netlink: 'syz.3.2947': attribute type 10 has an invalid length. [ 680.856852][T13184] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2947'. [ 681.010933][T13186] netlink: 'syz.1.2957': attribute type 10 has an invalid length. [ 681.068203][T13186] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2957'. [ 683.121955][ T4299] Bluetooth: hci2: command 0x0409 tx timeout [ 683.159085][ T27] kauditd_printk_skb: 24 callbacks suppressed [ 683.159233][ T27] audit: type=1326 audit(937.961:3350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13190 comm="syz.2.2949" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa3b5a8a8 code=0x7ffc0000 [ 683.256615][ T27] audit: type=1326 audit(937.961:3351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13190 comm="syz.2.2949" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa3b5a8a8 code=0x7ffc0000 [ 683.664019][ T27] audit: type=1326 audit(938.061:3352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13190 comm="syz.2.2949" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=79 compat=0 ip=0xffffa3b5a8a8 code=0x7ffc0000 [ 683.669845][ T27] audit: type=1326 audit(938.061:3353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13190 comm="syz.2.2949" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa3b5a8a8 code=0x7ffc0000 [ 683.759272][ T27] audit: type=1326 audit(938.061:3354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13190 comm="syz.2.2949" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa3b5a8a8 code=0x7ffc0000 [ 683.811180][ T27] audit: type=1326 audit(938.161:3355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13190 comm="syz.2.2949" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffffa3b5a8a8 code=0x7ffc0000 [ 683.863060][T13171] chnl_net:caif_netlink_parms(): no params data found [ 683.871617][ T27] audit: type=1326 audit(938.161:3356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13190 comm="syz.2.2949" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa3b5a8a8 code=0x7ffc0000 [ 683.903643][T13211] loop2: detected capacity change from 0 to 7 [ 683.912118][ T27] audit: type=1326 audit(938.161:3357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13190 comm="syz.2.2949" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa3b5a8a8 code=0x7ffc0000 [ 683.916481][T13211] Dev loop2: unable to read RDB block 7 [ 683.924045][ T27] audit: type=1326 audit(938.261:3358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13190 comm="syz.2.2949" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffffa3b5a8a8 code=0x7ffc0000 [ 683.932251][T13211] loop2: unable to read partition table [ 683.940844][ T27] audit: type=1326 audit(938.261:3359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13190 comm="syz.2.2949" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa3b5a8a8 code=0x7ffc0000 [ 683.945294][T13211] loop2: partition table beyond EOD, truncated [ 683.969898][T13211] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 684.123279][T13171] bridge0: port 1(bridge_slave_0) entered blocking state [ 684.125419][T13171] bridge0: port 1(bridge_slave_0) entered disabled state [ 684.130522][T13171] device bridge_slave_0 entered promiscuous mode [ 684.150078][T13171] bridge0: port 2(bridge_slave_1) entered blocking state [ 684.157302][T13171] bridge0: port 2(bridge_slave_1) entered disabled state [ 684.164743][T13171] device bridge_slave_1 entered promiscuous mode [ 684.222916][T13171] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 684.227395][T13171] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 684.232904][T13226] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 684.243864][T13226] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 684.284617][T13171] team0: Port device team_slave_0 added [ 684.288274][T13171] team0: Port device team_slave_1 added [ 684.303129][T13171] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 684.304938][T13171] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 684.312351][T13171] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 684.316933][T13171] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 684.319029][T13171] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 684.355553][T13171] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 684.380485][T13229] loop3: detected capacity change from 0 to 4096 [ 684.443071][T13171] device hsr_slave_0 entered promiscuous mode [ 684.565881][T13171] device hsr_slave_1 entered promiscuous mode [ 684.601434][T13171] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 684.603906][T13171] Cannot create hsr debugfs directory [ 685.131633][T12756] Bluetooth: hci2: command 0x041b tx timeout [ 685.670266][T13237] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 685.705422][T13237] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 685.738052][T13171] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 685.741818][T13240] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2963'. [ 685.766473][T13239] netlink: 'syz.0.2963': attribute type 10 has an invalid length. [ 685.891309][T13171] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 687.213173][T12756] Bluetooth: hci2: command 0x040f tx timeout [ 687.725831][T13171] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 687.858323][T13255] loop2: detected capacity change from 0 to 7 [ 687.863491][T13117] Dev loop2: unable to read RDB block 7 [ 687.865338][T13117] loop2: unable to read partition table [ 687.866986][T13117] loop2: partition table beyond EOD, truncated [ 687.908509][T13255] Dev loop2: unable to read RDB block 7 [ 687.910275][T13255] loop2: unable to read partition table [ 687.912249][T13255] loop2: partition table beyond EOD, truncated [ 687.914136][T13255] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 687.923624][T13171] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 688.167465][T13262] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 688.174615][T13262] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 688.207453][T13171] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 688.237147][T13171] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 688.427643][T13171] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 688.463022][T13171] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 688.513225][T13269] netlink: 'syz.0.2974': attribute type 10 has an invalid length. [ 688.590651][T13171] 8021q: adding VLAN 0 to HW filter on device bond0 [ 688.604256][ T7607] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 688.607199][ T7607] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 688.615865][T13171] 8021q: adding VLAN 0 to HW filter on device team0 [ 688.628694][ T7607] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 688.632738][ T7607] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 688.635503][ T7607] bridge0: port 1(bridge_slave_0) entered blocking state [ 688.637464][ T7607] bridge0: port 1(bridge_slave_0) entered forwarding state [ 688.652583][ T7607] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 688.657422][ T7607] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 688.664649][ T7607] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 688.669856][ T7607] bridge0: port 2(bridge_slave_1) entered blocking state [ 688.671963][ T7607] bridge0: port 2(bridge_slave_1) entered forwarding state [ 688.678763][ T7607] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 688.704254][ T7607] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 688.708490][ T7607] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 688.718915][ T7607] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 688.722747][ T7607] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 688.725856][ T7607] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 688.746354][ T7607] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 688.749544][ T7607] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 688.754104][ T7607] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 688.757035][ T7607] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 688.760017][ T7607] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 689.161689][T13171] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 689.164872][ T7611] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 689.167326][ T7611] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 689.391204][T12756] Bluetooth: hci2: command 0x0419 tx timeout [ 690.398785][ T27] kauditd_printk_skb: 41 callbacks suppressed [ 690.399730][ T27] audit: type=1326 audit(946.281:3401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13282 comm="syz.2.2977" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa3b5a8a8 code=0x7ffc0000 [ 690.423797][ T27] audit: type=1326 audit(946.281:3402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13282 comm="syz.2.2977" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa3b5a8a8 code=0x7ffc0000 [ 690.787097][ T27] audit: type=1326 audit(946.301:3403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13282 comm="syz.2.2977" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=79 compat=0 ip=0xffffa3b5a8a8 code=0x7ffc0000 [ 690.948456][ T27] audit: type=1326 audit(946.301:3404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13282 comm="syz.2.2977" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa3b5a8a8 code=0x7ffc0000 [ 690.986432][T13290] loop2: detected capacity change from 0 to 7 [ 691.027365][ T27] audit: type=1326 audit(946.301:3405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13282 comm="syz.2.2977" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa3b5a8a8 code=0x7ffc0000 [ 691.036167][T13290] Dev loop2: unable to read RDB block 7 [ 691.038843][T13290] loop2: unable to read partition table [ 691.042745][T13290] loop2: partition table beyond EOD, truncated [ 691.046773][T13290] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 691.056880][ T27] audit: type=1326 audit(946.311:3406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13282 comm="syz.2.2977" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffffa3b5a8a8 code=0x7ffc0000 [ 691.068565][ T27] audit: type=1326 audit(946.311:3407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13282 comm="syz.2.2977" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa3b5a8a8 code=0x7ffc0000 [ 691.076993][ T27] audit: type=1326 audit(946.321:3408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13282 comm="syz.2.2977" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa3b5a8a8 code=0x7ffc0000 [ 691.089509][ T27] audit: type=1326 audit(946.331:3409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13282 comm="syz.2.2977" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffffa3b5a8a8 code=0x7ffc0000 [ 691.098556][ T27] audit: type=1326 audit(946.331:3410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13282 comm="syz.2.2977" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa3b5a8a8 code=0x7ffc0000 [ 691.150680][ T3913] Dev loop2: unable to read RDB block 7 [ 691.154035][ T3913] loop2: unable to read partition table [ 691.155833][ T3913] loop2: partition table beyond EOD, truncated [ 692.121207][T13305] netlink: 'syz.1.2984': attribute type 10 has an invalid length. [ 692.158738][T13306] loop2: detected capacity change from 0 to 4096 [ 693.587162][ T1683] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 693.590902][ T1683] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 693.605405][ T4653] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 693.608265][ T4653] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 693.611524][ T4653] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 693.614558][ T4653] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 693.618451][T13171] device veth0_vlan entered promiscuous mode [ 693.627381][T13171] device veth1_vlan entered promiscuous mode [ 694.378054][ T7609] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 694.380897][ T7609] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 694.385867][ T7609] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 694.409993][ T7609] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 694.463757][T13171] device veth0_macvtap entered promiscuous mode [ 694.468452][T13171] device veth1_macvtap entered promiscuous mode [ 694.574915][T13171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 694.586535][T13336] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 694.589091][T13336] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 694.589209][T13171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 694.606669][T13171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 694.777991][T13171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 694.801201][T13171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 694.804739][T13171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 694.808963][T13171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 694.826930][T13171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 695.255300][T13171] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 695.346025][ T268] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 695.353358][ T268] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 695.419548][ T268] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 695.521746][ T268] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 695.544449][T13171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 695.549869][T13171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 695.560288][T13171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 695.569945][T13171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 695.578269][T13171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 695.581577][T13171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 695.584543][T13171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 695.587676][T13171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 695.592431][T13171] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 695.597426][T13171] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 695.600025][T13171] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 695.605039][T13171] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 695.607586][T13171] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 695.616817][ T4653] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 695.621929][ T4653] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 695.693482][T13345] (syz.3.2995,13345,1):ocfs2_fill_super:990 ERROR: superblock probe failed! [ 695.695881][T13345] (syz.3.2995,13345,1):ocfs2_fill_super:1176 ERROR: status = -22 [ 695.736219][ T7609] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 695.738834][ T7609] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 695.757151][ T4653] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 695.779446][ T7609] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 695.782087][ T7609] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 695.789181][ T4653] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 695.927745][T13347] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2942'. [ 696.148246][T13349] netlink: 'syz.2.2997': attribute type 10 has an invalid length. [ 696.244061][T13349] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 698.500878][ T27] kauditd_printk_skb: 41 callbacks suppressed [ 698.500894][ T27] audit: type=1326 audit(953.801:3452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13368 comm="syz.4.3002" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa555a8a8 code=0x7ffc0000 [ 698.519300][ T27] audit: type=1326 audit(953.801:3453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13368 comm="syz.4.3002" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa555a8a8 code=0x7ffc0000 [ 698.535949][ T27] audit: type=1326 audit(953.861:3454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13368 comm="syz.4.3002" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=79 compat=0 ip=0xffffa555a8a8 code=0x7ffc0000 [ 698.591107][ T27] audit: type=1326 audit(953.861:3455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13368 comm="syz.4.3002" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa555a8a8 code=0x7ffc0000 [ 698.649175][ T27] audit: type=1326 audit(953.861:3456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13368 comm="syz.4.3002" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa555a8a8 code=0x7ffc0000 [ 698.655335][ T27] audit: type=1326 audit(953.871:3457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13368 comm="syz.4.3002" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffffa555a8a8 code=0x7ffc0000 [ 698.684723][ T27] audit: type=1326 audit(953.871:3458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13368 comm="syz.4.3002" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa555a8a8 code=0x7ffc0000 [ 698.712202][ T27] audit: type=1326 audit(953.871:3459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13368 comm="syz.4.3002" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa555a8a8 code=0x7ffc0000 [ 698.728027][T12756] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 698.736255][T12756] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 698.739508][T12756] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 698.744411][T12756] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 698.748005][T12756] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 698.752125][T12756] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 698.765348][ T27] audit: type=1326 audit(953.881:3460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13368 comm="syz.4.3002" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffffa555a8a8 code=0x7ffc0000 [ 698.775316][ T27] audit: type=1326 audit(953.891:3461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13368 comm="syz.4.3002" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa555a8a8 code=0x7ffc0000 [ 699.233455][T13376] chnl_net:caif_netlink_parms(): no params data found [ 699.281356][T13376] bridge0: port 1(bridge_slave_0) entered blocking state [ 699.289313][T13376] bridge0: port 1(bridge_slave_0) entered disabled state [ 699.292328][T13376] device bridge_slave_0 entered promiscuous mode [ 699.296611][T13376] bridge0: port 2(bridge_slave_1) entered blocking state [ 699.298657][T13376] bridge0: port 2(bridge_slave_1) entered disabled state [ 699.301576][T13376] device bridge_slave_1 entered promiscuous mode [ 699.304592][T13397] netlink: 'syz.1.3009': attribute type 10 has an invalid length. [ 699.325684][T13376] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 699.332609][T13376] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 699.352841][T13376] team0: Port device team_slave_0 added [ 699.356181][T13376] team0: Port device team_slave_1 added [ 699.373416][T13376] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 699.375806][T13376] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 699.383328][T13376] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 699.387684][T13376] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 699.389752][T13376] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 699.397006][T13376] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 699.523618][T13376] device hsr_slave_0 entered promiscuous mode [ 699.629007][T13376] device hsr_slave_1 entered promiscuous mode [ 699.741302][T13376] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 699.743461][T13376] Cannot create hsr debugfs directory [ 700.932144][ T47] Bluetooth: hci4: command 0x0409 tx timeout [ 702.981280][ T47] Bluetooth: hci4: command 0x041b tx timeout [ 703.070502][T13376] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 703.075277][T13376] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 703.333666][T13376] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 703.336436][T13376] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 703.354974][T13432] netlink: 'syz.4.3019': attribute type 10 has an invalid length. [ 704.032043][T13432] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 704.127171][T13376] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 704.131215][T13376] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 704.403228][T13376] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 704.406320][T13376] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 705.569003][T12756] Bluetooth: hci4: command 0x040f tx timeout [ 707.656899][T12756] Bluetooth: hci4: command 0x0419 tx timeout [ 707.819926][T13471] (syz.4.3030,13471,1):ocfs2_fill_super:990 ERROR: superblock probe failed! [ 707.822699][T13471] (syz.4.3030,13471,1):ocfs2_fill_super:1176 ERROR: status = -22 [ 707.910901][T13376] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 707.953329][T13376] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 708.105257][T13376] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 708.143527][T13376] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 708.382881][T13376] 8021q: adding VLAN 0 to HW filter on device bond0 [ 708.430456][ T7617] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 708.433698][ T7617] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 708.439578][T13376] 8021q: adding VLAN 0 to HW filter on device team0 [ 708.448066][ T7617] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 708.457148][ T7617] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 708.463914][ T7617] bridge0: port 1(bridge_slave_0) entered blocking state [ 708.465890][ T7617] bridge0: port 1(bridge_slave_0) entered forwarding state [ 708.468543][ T7617] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 708.540703][ T1683] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 708.548501][ T1683] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 708.554395][ T1683] bridge0: port 2(bridge_slave_1) entered blocking state [ 708.556371][ T1683] bridge0: port 2(bridge_slave_1) entered forwarding state [ 708.566659][ T1683] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 708.569909][ T1683] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 708.573735][ T1683] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 708.578260][ T1683] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 708.646077][ T1683] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 708.649737][ T1683] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 708.653038][ T1683] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 708.655951][ T1683] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 708.658557][ T1683] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 708.664678][T13376] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 708.668489][T13376] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 708.671481][ T1683] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 708.674490][ T1683] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 708.859487][ T7617] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 708.863019][ T7617] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 708.882008][T13376] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 710.133799][ T27] kauditd_printk_skb: 7 callbacks suppressed [ 710.133815][ T27] audit: type=1326 audit(965.911:3469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13476 comm="syz.2.3041" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa3b5a8a8 code=0x7ffc0000 [ 710.145060][ T27] audit: type=1326 audit(965.911:3470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13476 comm="syz.2.3041" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa3b5a8a8 code=0x7ffc0000 [ 710.151481][ T27] audit: type=1326 audit(965.911:3471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13476 comm="syz.2.3041" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffffa3b5a8a8 code=0x7ffc0000 [ 710.157402][ T27] audit: type=1326 audit(965.911:3472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13476 comm="syz.2.3041" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa3b5a8a8 code=0x7ffc0000 [ 710.220131][ T27] audit: type=1326 audit(965.911:3473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13476 comm="syz.2.3041" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa3b5a8a8 code=0x7ffc0000 [ 710.241624][ T27] audit: type=1326 audit(965.911:3474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13476 comm="syz.2.3041" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=203 compat=0 ip=0xffffa3b5a8a8 code=0x7ffc0000 [ 710.277928][ T27] audit: type=1326 audit(965.911:3475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13476 comm="syz.2.3041" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa3b5a8a8 code=0x7ffc0000 [ 710.392976][ T27] audit: type=1326 audit(965.911:3476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13476 comm="syz.2.3041" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa3b5a8a8 code=0x7ffc0000 [ 710.399007][ T27] audit: type=1326 audit(965.911:3477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13476 comm="syz.2.3041" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=209 compat=0 ip=0xffffa3b5a8a8 code=0x7ffc0000 [ 710.428700][ T27] audit: type=1326 audit(965.911:3478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13476 comm="syz.2.3041" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa3b5a8a8 code=0x7ffc0000 [ 710.470249][ T7586] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 710.473814][ T7586] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 710.487786][T13496] netlink: 'syz.1.3034': attribute type 10 has an invalid length. [ 711.292976][T13376] device veth0_vlan entered promiscuous mode [ 711.306809][ T4653] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 711.312520][ T4653] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 711.325924][ T4653] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 711.330109][ T4653] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 711.487252][T13376] device veth1_vlan entered promiscuous mode [ 711.503243][T13376] device veth0_macvtap entered promiscuous mode [ 711.507394][T13376] device veth1_macvtap entered promiscuous mode [ 711.516837][T13376] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 711.519698][T13376] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 711.522356][T13376] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 711.525121][T13376] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 711.527690][T13376] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 711.530399][T13376] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 711.589356][T13376] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 711.592350][T13376] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 711.594990][T13376] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 711.598907][T13376] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 711.604361][T13376] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 712.508808][ T4493] bond0: (slave wlan1): Releasing backup interface [ 712.818581][ T7617] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 712.821953][ T7617] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 712.824892][ T7617] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 712.868566][ T7617] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 712.881627][ T7617] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 712.899425][ T7617] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 712.908756][ T7617] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 712.922965][ T7617] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 713.166960][T13376] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 713.169773][T13376] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 713.172462][T13376] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 713.175226][T13376] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 713.177702][T13376] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 713.180430][T13376] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 713.183386][T13376] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 713.186121][T13376] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 713.188682][T13376] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 713.191905][T13376] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 713.195845][T13376] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 713.242327][ T7617] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 713.245091][ T7617] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 713.969842][T13520] fuse: Unknown parameter 'group_id00000000000000000000' [ 714.349556][T13376] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 714.352353][T13376] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 715.352854][T13376] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 715.967396][T13376] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 716.014613][T13540] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3046'. [ 716.017144][T13540] netlink: 'syz.0.3046': attribute type 5 has an invalid length. [ 716.019236][T13540] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3046'. [ 716.896505][ T27] kauditd_printk_skb: 1 callbacks suppressed [ 716.896520][ T27] audit: type=1326 audit(972.271:3480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13541 comm="syz.4.3048" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa555a8a8 code=0x7ffc0000 [ 716.942657][ T27] audit: type=1326 audit(972.271:3481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13541 comm="syz.4.3048" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa555a8a8 code=0x7ffc0000 [ 716.956459][ T4493] device hsr_slave_0 left promiscuous mode [ 716.975067][ T27] audit: type=1326 audit(972.281:3482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13541 comm="syz.4.3048" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffffa555a8a8 code=0x7ffc0000 [ 717.014513][ T4493] device hsr_slave_1 left promiscuous mode [ 717.015468][ T27] audit: type=1326 audit(972.281:3483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13541 comm="syz.4.3048" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa555a8a8 code=0x7ffc0000 [ 717.022537][ T27] audit: type=1326 audit(972.281:3484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13541 comm="syz.4.3048" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa555a8a8 code=0x7ffc0000 [ 717.029086][ T27] audit: type=1326 audit(972.281:3485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13541 comm="syz.4.3048" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=203 compat=0 ip=0xffffa555a8a8 code=0x7ffc0000 [ 717.036040][ T27] audit: type=1326 audit(972.281:3486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13541 comm="syz.4.3048" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa555a8a8 code=0x7ffc0000 [ 717.046053][ T27] audit: type=1326 audit(972.281:3487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13541 comm="syz.4.3048" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa555a8a8 code=0x7ffc0000 [ 717.053920][ T27] audit: type=1326 audit(972.291:3488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13541 comm="syz.4.3048" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=209 compat=0 ip=0xffffa555a8a8 code=0x7ffc0000 [ 717.060252][ T27] audit: type=1326 audit(972.291:3489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13541 comm="syz.4.3048" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa555a8a8 code=0x7ffc0000 [ 719.115755][T13575] fuse: Unknown parameter 'group_id00000000000000000000' [ 723.385418][ T4493] team0 (unregistering): Port device team_slave_1 removed [ 723.584284][ T4493] team0 (unregistering): Port device team_slave_0 removed [ 723.782954][ T4493] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 724.023615][ T4493] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 728.263525][ T4493] bond0 (unregistering): Released all slaves [ 728.334584][T13550] netlink: 'syz.1.3050': attribute type 10 has an invalid length. [ 728.337835][ T7597] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 728.340139][ T7597] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 728.354087][T13592] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 728.357036][T13592] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 728.530639][ T7597] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 728.537064][ T7611] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 728.539413][ T7611] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 728.555224][ T7611] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 728.654790][T13624] netlink: 'syz.1.3076': attribute type 10 has an invalid length. [ 730.608630][T13635] loop3: detected capacity change from 0 to 4096 [ 730.790168][T12756] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 730.795098][T12756] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 730.799709][T12756] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 730.802669][T12756] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 730.806697][T12756] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 730.809066][T12756] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 733.315441][T12756] Bluetooth: hci0: command 0x0409 tx timeout [ 733.669167][T13648] chnl_net:caif_netlink_parms(): no params data found [ 735.325211][T13648] bridge0: port 1(bridge_slave_0) entered blocking state [ 735.327180][T13648] bridge0: port 1(bridge_slave_0) entered disabled state [ 735.381203][ T47] Bluetooth: hci0: command 0x041b tx timeout [ 735.383215][T13648] device bridge_slave_0 entered promiscuous mode [ 735.588846][T13681] netlink: 'syz.2.3080': attribute type 10 has an invalid length. [ 735.647414][T13648] bridge0: port 2(bridge_slave_1) entered blocking state [ 735.649448][T13648] bridge0: port 2(bridge_slave_1) entered disabled state [ 735.655013][T13648] device bridge_slave_1 entered promiscuous mode [ 736.397832][T13648] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 736.412746][T13648] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 736.476379][T13648] team0: Port device team_slave_0 added [ 736.484172][T13648] team0: Port device team_slave_1 added [ 736.529483][T13648] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 736.531819][T13648] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 736.539030][T13648] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 736.545992][T13648] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 736.550243][T13648] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 736.566199][T13648] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 736.694513][T13648] device hsr_slave_0 entered promiscuous mode [ 736.879432][T13648] device hsr_slave_1 entered promiscuous mode [ 736.943530][T13648] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 736.948597][T13648] Cannot create hsr debugfs directory [ 738.959395][ T4493] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 738.971453][ T4493] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 740.049186][ T4493] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 740.052283][ T4493] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 740.332864][ T2061] ieee802154 phy0 wpan0: encryption failed: -22 [ 740.335439][ T2061] ieee802154 phy1 wpan1: encryption failed: -22 [ 740.442880][ T4493] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 740.445786][ T4493] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 740.455029][T13730] loop2: detected capacity change from 0 to 4096 [ 741.098481][ T4493] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 741.426687][ T4493] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 742.471004][T13743] netlink: 'syz.1.3093': attribute type 10 has an invalid length. [ 743.704213][T13756] loop1: detected capacity change from 0 to 4096 [ 746.202133][T13648] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 746.779667][T13648] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 747.033128][T13648] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 749.041843][T13648] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 749.220517][T13825] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 749.226661][T13825] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 749.509319][T13648] 8021q: adding VLAN 0 to HW filter on device bond0 [ 749.569498][T13840] loop1: detected capacity change from 0 to 4096 [ 749.590627][ T7617] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 749.593824][ T7617] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 749.608754][T13648] 8021q: adding VLAN 0 to HW filter on device team0 [ 749.971321][ T7617] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 749.975210][ T7617] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 749.978075][ T7617] bridge0: port 1(bridge_slave_0) entered blocking state [ 749.980268][ T7617] bridge0: port 1(bridge_slave_0) entered forwarding state [ 750.010421][ T7617] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 751.309565][ T4493] bond0: (slave wlan1): Releasing backup interface [ 752.183562][T13862] loop1: detected capacity change from 0 to 4096 [ 752.932284][ T7617] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 752.935185][ T7617] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 752.937932][ T7617] bridge0: port 2(bridge_slave_1) entered blocking state [ 752.939978][ T7617] bridge0: port 2(bridge_slave_1) entered forwarding state [ 752.952677][ T7617] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 752.959037][ T7617] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 752.969712][ T7617] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 752.985179][ T7617] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 752.991692][ T7617] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 753.000703][ T7617] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 753.008107][ T7617] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 753.076768][ T7586] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 753.080380][ T7586] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 753.086333][ T7586] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 753.094367][ T7586] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 753.103628][T13648] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 754.822423][ T4493] device hsr_slave_0 left promiscuous mode [ 754.926734][ T4493] device hsr_slave_1 left promiscuous mode [ 755.071569][ T4493] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 755.074507][ T4493] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 755.111771][ T4493] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 755.290150][ T4493] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 755.587294][T13898] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 755.590191][T13898] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 758.172710][ T4493] device veth1_macvtap left promiscuous mode [ 758.174441][ T4493] device veth0_macvtap left promiscuous mode [ 758.176104][ T4493] device veth1_vlan left promiscuous mode [ 758.177907][ T4493] device veth0_vlan left promiscuous mode [ 761.936628][ T4493] team0 (unregistering): Port device team_slave_1 removed [ 762.141534][ T4493] device team_slave_0 left promiscuous mode [ 762.144186][ T4493] team0 (unregistering): Port device team_slave_0 removed [ 762.322024][ T4493] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 762.572221][ T4493] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 762.891192][ T47] Bluetooth: hci5: command 0x0406 tx timeout [ 765.183926][ T4493] bond0 (unregistering): Released all slaves [ 765.262597][T13648] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 765.294397][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 765.296714][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 765.321565][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 765.325028][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 765.460191][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 765.469773][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 765.487217][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 765.501842][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 765.647420][T13648] device veth0_vlan entered promiscuous mode [ 765.649751][T13924] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3126'. [ 765.687445][T13924] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3126'. [ 766.437595][T13648] device veth1_vlan entered promiscuous mode [ 766.465934][T13932] loop4: detected capacity change from 0 to 4096 [ 766.469051][T13648] device veth0_macvtap entered promiscuous mode [ 766.519264][ T7586] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 766.522044][ T7586] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 766.529285][ T7586] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 766.557577][ T7586] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 766.590655][T13648] device veth1_macvtap entered promiscuous mode [ 766.617788][ T7586] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 766.631831][T13648] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 766.634647][T13648] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 766.652094][T13648] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 766.654948][T13648] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 766.677933][T13648] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 766.680834][T13648] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 766.756132][T13648] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 766.759036][T13648] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 766.761726][T13648] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 766.764547][T13648] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 766.768411][T13648] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 766.772269][T13648] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 766.775128][T13648] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 766.777743][T13648] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 766.780484][T13648] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 766.801611][T13648] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 767.621769][T13648] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 767.734946][T13648] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 767.737924][T13648] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 767.740680][T13648] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 767.743658][T13648] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 767.748843][T13648] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 767.759036][T13648] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 767.770185][T13648] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 767.777077][T13648] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 767.784944][T13648] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 767.965765][ T7586] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 767.968805][ T7586] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 767.972973][ T7586] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 767.975754][ T7586] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 768.055187][ T5105] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 768.057675][ T5105] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 768.102205][ T7586] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 768.132201][T13953] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 768.134728][T13953] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 768.322796][ T4437] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 768.325300][ T4437] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 768.343620][ T4437] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 768.469577][T13960] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3132'. [ 768.475259][T13960] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3132'. [ 768.477681][T13960] netlink: 'syz.1.3132': attribute type 5 has an invalid length. [ 768.479756][T13960] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3132'. [ 770.875789][T13974] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 770.900459][T13974] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 771.092177][ T47] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 771.099394][ T47] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 771.105669][ T47] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 771.110402][ T47] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 771.114347][ T47] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 771.116811][ T47] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 771.346935][T13986] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3140'. [ 771.389161][T13986] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3140'. [ 772.330184][T13980] chnl_net:caif_netlink_parms(): no params data found [ 772.564450][T13980] bridge0: port 1(bridge_slave_0) entered blocking state [ 772.566676][T13980] bridge0: port 1(bridge_slave_0) entered disabled state [ 772.581452][T13980] device bridge_slave_0 entered promiscuous mode [ 773.133781][T12756] Bluetooth: hci3: command 0x0409 tx timeout [ 773.660824][T13980] bridge0: port 2(bridge_slave_1) entered blocking state [ 773.667467][T13980] bridge0: port 2(bridge_slave_1) entered disabled state [ 773.669997][T13980] device bridge_slave_1 entered promiscuous mode [ 773.738114][T13980] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 773.748968][T13980] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 773.863256][T14011] loop2: detected capacity change from 0 to 4096 [ 773.945412][T13980] team0: Port device team_slave_0 added [ 773.948717][T13980] team0: Port device team_slave_1 added [ 774.088109][T13980] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 774.089958][T13980] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 774.159577][T13980] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 774.187579][T13980] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 774.203273][T13980] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 774.214807][T13980] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 775.191871][T13980] device hsr_slave_0 entered promiscuous mode [ 775.211212][T12756] Bluetooth: hci3: command 0x041b tx timeout [ 775.271503][T13980] device hsr_slave_1 entered promiscuous mode [ 775.391647][T13980] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 775.397821][T13980] Cannot create hsr debugfs directory [ 775.428476][T14029] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 775.430954][T14029] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 775.492417][T14031] netlink: 'syz.0.3152': attribute type 10 has an invalid length. [ 775.643444][T14034] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3150'. [ 776.360926][T14037] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3152'. [ 777.184230][T14031] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 777.212994][T14036] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3150'. [ 777.215563][T14036] netlink: 'syz.3.3150': attribute type 5 has an invalid length. [ 777.217751][T14036] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3150'. [ 777.222473][T14036] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 777.224861][T14036] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 777.227235][T14036] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 777.229579][T14036] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 777.232047][T14036] device geneve2 entered promiscuous mode [ 777.333459][ T4299] Bluetooth: hci3: command 0x040f tx timeout [ 779.280951][T13980] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 779.295255][T13980] netdevsim netdevsim1 eth3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 779.482971][T12756] Bluetooth: hci3: command 0x0419 tx timeout [ 779.492175][T13980] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 779.494822][T13980] netdevsim netdevsim1 eth2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 781.324326][T13980] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 781.344072][T13980] netdevsim netdevsim1 eth1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 781.596409][T13980] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 781.599229][T13980] netdevsim netdevsim1 eth0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 782.600844][T14080] loop3: detected capacity change from 0 to 4096 [ 783.251496][ T4441] usb 1-1: new full-speed USB device number 28 using dummy_hcd [ 783.446669][T13980] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 783.483941][T13980] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 783.513619][ T4441] usb 1-1: unable to get BOS descriptor or descriptor too short [ 783.516273][ T4441] usb 1-1: not running at top speed; connect to a high speed hub [ 783.523464][ T4441] usb 1-1: config 128 has an invalid interface number: 15 but max is 3 [ 783.527463][T13980] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 783.529931][ T4441] usb 1-1: config 128 contains an unexpected descriptor of type 0x1, skipping [ 783.538431][ T4441] usb 1-1: config 128 has an invalid interface number: 6 but max is 3 [ 783.540835][ T4441] usb 1-1: config 128 contains an unexpected descriptor of type 0x2, skipping [ 783.543596][ T4441] usb 1-1: config 128 contains an unexpected descriptor of type 0x1, skipping [ 783.546209][ T4441] usb 1-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 783.549070][ T4441] usb 1-1: config 128 has 2 interfaces, different from the descriptor's value: 4 [ 783.552123][ T4441] usb 1-1: config 128 has no interface number 0 [ 783.554019][ T4441] usb 1-1: config 128 has no interface number 1 [ 783.555777][ T4441] usb 1-1: config 128 interface 15 altsetting 1 endpoint 0xA has invalid maxpacket 1024, setting to 64 [ 783.558841][ T4441] usb 1-1: config 128 interface 15 altsetting 1 has an invalid endpoint with address 0x0, skipping [ 783.562639][ T4441] usb 1-1: config 128 interface 15 altsetting 1 has an invalid endpoint with address 0x0, skipping [ 783.565731][ T4441] usb 1-1: config 128 interface 15 altsetting 1 has a duplicate endpoint with address 0xA, skipping [ 783.568767][ T4441] usb 1-1: config 128 interface 15 altsetting 1 has an invalid endpoint with address 0x0, skipping [ 783.572065][ T4441] usb 1-1: config 128 interface 15 altsetting 1 has an invalid endpoint with address 0x0, skipping [ 783.575112][ T4441] usb 1-1: config 128 interface 15 altsetting 1 has a duplicate endpoint with address 0xE, skipping [ 783.578230][ T4441] usb 1-1: config 128 interface 15 altsetting 1 has an invalid endpoint with address 0x27, skipping [ 783.585915][T13980] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 783.588475][ T4441] usb 1-1: config 128 interface 15 altsetting 1 has 10 endpoint descriptors, different from the interface descriptor's value: 9 [ 783.601148][ T4441] usb 1-1: config 128 interface 6 altsetting 3 has 0 endpoint descriptors, different from the interface descriptor's value: 13 [ 783.609255][ T4441] usb 1-1: config 128 interface 15 has no altsetting 0 [ 783.613747][ T4441] usb 1-1: config 128 interface 6 has no altsetting 0 [ 783.637852][ T4441] usb 1-1: New USB device found, idVendor=0411, idProduct=0097, bcdDevice=d5.83 [ 783.640349][ T4441] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 783.661528][ T4441] usb 1-1: Product: ప [ 783.662744][ T4441] usb 1-1: Manufacturer: Ъ [ 783.664054][ T4441] usb 1-1: SerialNumber: 밸奒⨰뎀ᥙ䴘쩳䚡璚䷙赽壒胹杒䊩䩳Ꮂꓘ搦盧硸库嶲᳠츿⫔谧鉎ﺌ㈌弴䆹㦾덮巪㊸ﻕᏺ좏纶킜낳娽㨟跎鋂い⿮ꇭ셹䋊촵쥊셷䑜㥊Ů볲孡䢾㝌함㤌๹坪瑩땮거饍 [ 783.683050][T14084] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 783.685577][T14084] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 783.748070][T13980] 8021q: adding VLAN 0 to HW filter on device bond0 [ 783.759348][ T4493] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 783.768677][ T4493] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 783.776983][T13980] 8021q: adding VLAN 0 to HW filter on device team0 [ 783.789211][ T4405] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 783.797176][ T4405] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 783.809402][ T4405] bridge0: port 1(bridge_slave_0) entered blocking state [ 783.811512][ T4405] bridge0: port 1(bridge_slave_0) entered forwarding state [ 783.834906][ T4405] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 783.838692][ T4405] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 783.842034][ T4405] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 783.844832][ T4405] bridge0: port 2(bridge_slave_1) entered blocking state [ 783.846861][ T4405] bridge0: port 2(bridge_slave_1) entered forwarding state [ 783.849538][ T4405] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 783.862783][ T4405] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 783.866216][ T4405] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 783.870891][ T4405] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 783.883362][ T4405] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 783.886297][ T4405] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 783.889265][ T4405] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 783.893092][ T4405] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 783.896145][ T4405] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 783.898872][ T4405] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 783.902501][ T4405] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 783.905193][ T4441] usb 1-1: USB disconnect, device number 28 [ 783.907341][T13980] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 784.032863][ T1683] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 784.035137][ T1683] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 784.041744][T13980] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 784.058323][ T1683] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 784.061635][ T1683] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 784.080338][ T1683] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 784.083214][ T1683] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 784.086174][ T1683] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 784.088766][ T1683] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 784.097480][T13980] device veth0_vlan entered promiscuous mode [ 784.105655][T13980] device veth1_vlan entered promiscuous mode [ 784.123434][ T1683] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 784.126038][ T1683] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 784.128691][ T1683] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 784.133465][ T1683] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 784.138892][T13980] device veth0_macvtap entered promiscuous mode [ 784.143906][T13980] device veth1_macvtap entered promiscuous mode [ 784.153399][T13980] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 784.156357][T13980] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 784.159091][T13980] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 784.162148][T13980] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 784.164971][T13980] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 784.167825][T13980] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 784.170639][T13980] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 784.173563][T13980] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 784.176275][T13980] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 784.179172][T13980] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 784.182103][T13980] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 784.184954][T13980] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 784.189655][T13980] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 784.193674][ T4405] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 784.197487][ T4405] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 784.200065][ T4405] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 784.203990][ T4405] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 784.208555][T13980] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 784.211379][T13980] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 784.214155][T13980] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 784.217104][T13980] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 784.219989][T13980] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 784.223589][T13980] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 784.226379][T13980] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 784.229309][T13980] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 784.232828][T13980] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 784.235789][T13980] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 784.238451][T13980] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 784.241476][T13980] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 784.245734][T13980] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 784.248566][ T1683] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 784.252874][ T1683] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 784.259027][T13980] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 784.261664][T13980] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 784.264090][T13980] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 784.266448][T13980] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 784.338287][ T7609] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 784.346030][ T7609] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 784.352492][ T4405] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 784.360342][ T7609] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 784.363708][ T7609] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 784.370813][ T4493] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 786.422952][T14115] netlink: 'syz.4.3167': attribute type 10 has an invalid length. [ 788.464529][T14128] netlink: 52 bytes leftover after parsing attributes in process `syz.4.3167'. [ 793.525983][T14168] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3176'. [ 793.528572][T14168] netlink: 'syz.3.3176': attribute type 5 has an invalid length. [ 793.530614][T14168] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3176'. [ 795.042264][ T27] kauditd_printk_skb: 1 callbacks suppressed [ 795.042411][ T27] audit: type=1326 audit(1047.921:3491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14158 comm="syz.2.3177" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa3b5a8a8 code=0x7ffc0000 [ 795.252598][ T27] audit: type=1326 audit(1047.921:3492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14158 comm="syz.2.3177" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa3b5a8a8 code=0x7ffc0000 [ 795.274190][ T27] audit: type=1326 audit(1047.921:3493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14158 comm="syz.2.3177" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=79 compat=0 ip=0xffffa3b5a8a8 code=0x7ffc0000 [ 795.280034][ T27] audit: type=1326 audit(1047.921:3494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14158 comm="syz.2.3177" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa3b5a8a8 code=0x7ffc0000 [ 795.301654][ T27] audit: type=1326 audit(1047.931:3495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14158 comm="syz.2.3177" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa3b5a8a8 code=0x7ffc0000 [ 795.307560][ T27] audit: type=1326 audit(1047.931:3496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14158 comm="syz.2.3177" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffffa3b5a8a8 code=0x7ffc0000 [ 795.313625][ T27] audit: type=1326 audit(1047.931:3497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14158 comm="syz.2.3177" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa3b5a8a8 code=0x7ffc0000 [ 795.319562][ T27] audit: type=1326 audit(1047.931:3498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14158 comm="syz.2.3177" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa3b5a8a8 code=0x7ffc0000 [ 795.325442][ T27] audit: type=1326 audit(1047.931:3499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14158 comm="syz.2.3177" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffffa3b5a8a8 code=0x7ffc0000 [ 795.331522][ T27] audit: type=1326 audit(1047.931:3500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14158 comm="syz.2.3177" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa3b5a8a8 code=0x7ffc0000 [ 799.704429][T14212] fuse: Unknown parameter 'user_id00000000000000000000' [ 801.771988][T14246] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3195'. [ 801.774716][T14246] netlink: 'syz.1.3195': attribute type 5 has an invalid length. [ 801.776842][T14246] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3195'. [ 801.799102][T14246] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 801.801648][T14246] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 801.803993][T14246] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 801.806365][T14246] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 801.809081][T14246] device geneve2 entered promiscuous mode [ 801.979090][ T2061] ieee802154 phy0 wpan0: encryption failed: -22 [ 801.997137][ T2061] ieee802154 phy1 wpan1: encryption failed: -22 [ 804.246726][ T4299] Bluetooth: hci2: command 0x0406 tx timeout [ 807.515251][T14276] loop4: detected capacity change from 0 to 4096 [ 807.715304][T14280] fuse: Unknown parameter 'user_id00000000000000000000' [ 811.706064][T14326] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3217'. [ 811.708511][T14326] netlink: 'syz.3.3217': attribute type 5 has an invalid length. [ 811.710693][T14326] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3217'. [ 812.215131][T14336] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 815.283353][T14370] loop2: detected capacity change from 0 to 4096 [ 817.780924][T14394] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3234'. [ 817.783746][T14394] netlink: 'syz.2.3234': attribute type 5 has an invalid length. [ 817.785911][T14394] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3234'. [ 817.807747][T14394] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 817.810293][T14394] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 817.812919][T14394] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 817.815349][T14394] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 817.818132][T14394] device geneve2 entered promiscuous mode [ 823.092944][T14422] loop1: detected capacity change from 0 to 4096 [ 824.448652][T14444] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3247'. [ 824.451427][T14444] netlink: 'syz.0.3247': attribute type 5 has an invalid length. [ 824.453688][T14444] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3247'. [ 824.460105][T14444] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 824.462725][T14444] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 824.465073][T14444] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 824.467396][T14444] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 824.469967][T14444] device geneve2 entered promiscuous mode [ 824.492087][T12756] Bluetooth: hci4: command 0x0406 tx timeout [ 831.303816][T14492] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3261'. [ 831.306261][T14492] netlink: 'syz.2.3261': attribute type 5 has an invalid length. [ 831.308404][T14492] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3261'. [ 831.312527][T14493] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3263'. [ 831.314955][T14493] netlink: 'syz.1.3263': attribute type 5 has an invalid length. [ 831.314973][T14493] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3263'. [ 832.399012][T14503] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3264'. [ 832.401526][T14503] netlink: 'syz.4.3264': attribute type 5 has an invalid length. [ 832.403674][T14503] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3264'. [ 832.408299][T14503] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 832.410642][T14503] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 832.413183][T14503] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 832.415460][T14503] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 832.417828][T14503] device geneve2 entered promiscuous mode [ 833.684684][T14511] loop3: detected capacity change from 0 to 4096 [ 838.276939][T14562] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3282'. [ 838.279439][T14562] netlink: 'syz.0.3282': attribute type 5 has an invalid length. [ 838.282421][T14562] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3282'. [ 839.546375][T14584] loop1: detected capacity change from 0 to 4096 [ 842.524300][T14630] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3305'. [ 842.797341][T14637] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 842.816602][T14637] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 843.271690][T14646] loop2: detected capacity change from 0 to 4096 [ 847.726584][T14684] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 847.729218][T14684] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 849.753088][T14698] loop2: detected capacity change from 0 to 4096 [ 853.426708][T14738] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 853.435192][T14738] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 854.328599][T14748] netlink: 'syz.0.3342': attribute type 10 has an invalid length. [ 854.507410][T14748] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3342'. [ 855.273694][T14761] loop1: detected capacity change from 0 to 4096 [ 856.449227][T14785] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 856.470806][T14785] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 857.591333][T14802] netlink: 'syz.2.3359': attribute type 10 has an invalid length. [ 857.810083][T14802] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3359'. [ 859.934585][T14826] loop2: detected capacity change from 0 to 4096 [ 861.894070][T14860] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3376'. [ 862.032583][T14856] netlink: 'syz.2.3376': attribute type 10 has an invalid length. [ 862.161356][ T4441] usb 1-1: new full-speed USB device number 29 using dummy_hcd [ 862.694629][ T4441] usb 1-1: unable to get BOS descriptor or descriptor too short [ 862.733576][ T4441] usb 1-1: not running at top speed; connect to a high speed hub [ 862.737253][ T4441] usb 1-1: config 128 has an invalid interface number: 15 but max is 3 [ 862.739455][ T4441] usb 1-1: config 128 contains an unexpected descriptor of type 0x1, skipping [ 862.771378][ T4441] usb 1-1: config 128 has an invalid interface number: 6 but max is 3 [ 862.773867][ T4441] usb 1-1: config 128 contains an unexpected descriptor of type 0x2, skipping [ 862.776217][ T4441] usb 1-1: config 128 contains an unexpected descriptor of type 0x1, skipping [ 862.778545][ T4441] usb 1-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 862.945198][ T4441] usb 1-1: config 128 has 2 interfaces, different from the descriptor's value: 4 [ 862.947998][ T4441] usb 1-1: config 128 has no interface number 0 [ 862.949868][ T4441] usb 1-1: config 128 has no interface number 1 [ 862.960895][ T4441] usb 1-1: config 128 interface 15 altsetting 1 endpoint 0xA has invalid maxpacket 1024, setting to 64 [ 862.964251][ T4441] usb 1-1: config 128 interface 15 altsetting 1 has an invalid endpoint with address 0x0, skipping [ 862.967428][ T4441] usb 1-1: config 128 interface 15 altsetting 1 has an invalid endpoint with address 0x0, skipping [ 862.970199][ T4441] usb 1-1: config 128 interface 15 altsetting 1 has a duplicate endpoint with address 0xA, skipping [ 863.175710][ T4441] usb 1-1: config 128 interface 15 altsetting 1 has an invalid endpoint with address 0x0, skipping [ 863.212233][ T2061] ieee802154 phy0 wpan0: encryption failed: -22 [ 863.214323][ T2061] ieee802154 phy1 wpan1: encryption failed: -22 [ 863.294658][ T4441] usb 1-1: config 128 interface 15 altsetting 1 has an invalid endpoint with address 0x0, skipping [ 863.368158][ T4441] usb 1-1: config 128 interface 15 altsetting 1 has a duplicate endpoint with address 0xE, skipping [ 863.464638][ T4441] usb 1-1: config 128 interface 15 altsetting 1 has an invalid endpoint with address 0x27, skipping [ 863.543624][ T4441] usb 1-1: config 128 interface 15 altsetting 1 has 10 endpoint descriptors, different from the interface descriptor's value: 9 [ 863.754095][ T4441] usb 1-1: config 128 interface 6 altsetting 3 has 0 endpoint descriptors, different from the interface descriptor's value: 13 [ 863.757855][ T4441] usb 1-1: config 128 interface 15 has no altsetting 0 [ 863.759714][ T4441] usb 1-1: config 128 interface 6 has no altsetting 0 [ 863.777578][ T4441] usb 1-1: New USB device found, idVendor=0411, idProduct=0097, bcdDevice=d5.83 [ 863.780022][ T4441] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 863.792324][ T4441] usb 1-1: Product: ప [ 863.793433][ T4441] usb 1-1: Manufacturer: Ъ [ 863.794650][ T4441] usb 1-1: SerialNumber: 밸奒⨰뎀ᥙ䴘쩳䚡璚䷙赽壒胹杒䊩䩳Ꮂꓘ搦盧硸库嶲᳠츿⫔谧鉎ﺌ㈌弴䆹㦾덮巪㊸ﻕᏺ좏纶킜낳娽㨟跎鋂い⿮ꇭ셹䋊촵쥊셷䑜㥊Ů볲孡䢾㝌함㤌๹坪瑩땮거饍 [ 863.883087][T14857] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 863.885700][T14857] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 865.091195][ T4441] usb 1-1: USB disconnect, device number 29 [ 865.124243][ T27] kauditd_printk_skb: 7 callbacks suppressed [ 865.124255][ T27] audit: type=1326 audit(1121.091:3508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14891 comm="syz.2.3384" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa3b5a8a8 code=0x7ffc0000 [ 865.135011][ T27] audit: type=1326 audit(1121.091:3509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14891 comm="syz.2.3384" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa3b5a8a8 code=0x7ffc0000 [ 865.189213][ T27] audit: type=1326 audit(1121.091:3510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14891 comm="syz.2.3384" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=79 compat=0 ip=0xffffa3b5a8a8 code=0x7ffc0000 [ 865.455616][ T27] audit: type=1326 audit(1121.091:3511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14891 comm="syz.2.3384" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa3b5a8a8 code=0x7ffc0000 [ 866.295448][ T27] audit: type=1326 audit(1121.091:3512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14891 comm="syz.2.3384" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa3b5a8a8 code=0x7ffc0000 [ 866.331475][T14899] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 866.353034][ T27] audit: type=1326 audit(1121.101:3513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14891 comm="syz.2.3384" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffffa3b5a8a8 code=0x7ffc0000 [ 866.367266][T14899] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 866.444431][ T27] audit: type=1326 audit(1121.101:3514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14891 comm="syz.2.3384" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa3b5a8a8 code=0x7ffc0000 [ 866.450324][ T27] audit: type=1326 audit(1121.101:3515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14891 comm="syz.2.3384" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa3b5a8a8 code=0x7ffc0000 [ 866.513159][ T27] audit: type=1326 audit(1121.101:3516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14891 comm="syz.2.3384" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=203 compat=0 ip=0xffffa3b5a8a8 code=0x7ffc0000 [ 868.058864][ T27] audit: type=1326 audit(1121.101:3517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14891 comm="syz.2.3384" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa3b5a8a8 code=0x7ffc0000 [ 868.122922][T14914] netlink: 'syz.2.3391': attribute type 10 has an invalid length. [ 868.158069][T14914] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3391'. [ 869.994113][T14943] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3400'. [ 869.994316][T14943] netlink: 'syz.0.3400': attribute type 5 has an invalid length. [ 869.994379][T14943] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3400'. [ 871.697961][T14959] netlink: 'syz.2.3405': attribute type 10 has an invalid length. [ 871.725398][T14959] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3405'. [ 871.745436][T14960] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 871.752910][T14960] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 873.058945][T14971] loop3: detected capacity change from 0 to 4096 [ 873.994786][T14989] netlink: 'syz.2.3413': attribute type 1 has an invalid length. [ 874.007379][T14989] 8021q: adding VLAN 0 to HW filter on device bond1 [ 874.030551][ T27] kauditd_printk_skb: 18 callbacks suppressed [ 874.030650][ T27] audit: type=1326 audit(1129.991:3536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14982 comm="syz.1.3412" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff7ff5a8a8 code=0x7ffc0000 [ 874.050104][ T27] audit: type=1326 audit(1129.991:3537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14982 comm="syz.1.3412" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff7ff5a8a8 code=0x7ffc0000 [ 874.160456][ T27] audit: type=1326 audit(1129.991:3538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14982 comm="syz.1.3412" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=79 compat=0 ip=0xffff7ff5a8a8 code=0x7ffc0000 [ 874.320649][ T27] audit: type=1326 audit(1129.991:3539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14982 comm="syz.1.3412" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff7ff5a8a8 code=0x7ffc0000 [ 874.480574][ T27] audit: type=1326 audit(1129.991:3540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14982 comm="syz.1.3412" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff7ff5a8a8 code=0x7ffc0000 [ 874.699591][ T27] audit: type=1326 audit(1129.991:3541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14982 comm="syz.1.3412" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffff7ff5a8a8 code=0x7ffc0000 [ 874.740842][ T27] audit: type=1326 audit(1129.991:3542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14982 comm="syz.1.3412" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff7ff5a8a8 code=0x7ffc0000 [ 874.753377][T14989] device bond1 entered promiscuous mode [ 874.922821][ T27] audit: type=1326 audit(1129.991:3543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14982 comm="syz.1.3412" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff7ff5a8a8 code=0x7ffc0000 [ 874.928925][ T27] audit: type=1326 audit(1129.991:3544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14982 comm="syz.1.3412" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=203 compat=0 ip=0xffff7ff5a8a8 code=0x7ffc0000 [ 874.952254][ T27] audit: type=1326 audit(1129.991:3545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14982 comm="syz.1.3412" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff7ff5a8a8 code=0x7ffc0000 [ 875.842892][T15016] netlink: 'syz.4.3420': attribute type 10 has an invalid length. [ 875.962680][T15016] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3420'. [ 876.841263][T15031] netlink: 76 bytes leftover after parsing attributes in process `syz.1.3424'. [ 877.269734][T15036] loop0: detected capacity change from 0 to 4096 [ 879.497089][T15070] netlink: 'syz.0.3437': attribute type 10 has an invalid length. [ 879.502527][T15070] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3437'. [ 880.087083][T15080] netlink: 'syz.0.3450': attribute type 10 has an invalid length. [ 880.542730][T15080] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3450'. [ 881.493576][T15094] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3439'. [ 881.496027][T15094] netlink: 'syz.1.3439': attribute type 5 has an invalid length. [ 881.498033][T15094] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3439'. [ 881.833744][ T27] kauditd_printk_skb: 18 callbacks suppressed [ 881.833756][ T27] audit: type=1326 audit(1137.801:3564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15096 comm="syz.0.3441" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9015a8a8 code=0x7ffc0000 [ 881.851103][ T27] audit: type=1326 audit(1137.801:3565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15096 comm="syz.0.3441" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9015a8a8 code=0x7ffc0000 [ 881.856956][ T27] audit: type=1326 audit(1137.811:3566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15096 comm="syz.0.3441" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=79 compat=0 ip=0xffff9015a8a8 code=0x7ffc0000 [ 881.871083][ T27] audit: type=1326 audit(1137.811:3567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15096 comm="syz.0.3441" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9015a8a8 code=0x7ffc0000 [ 881.877065][ T27] audit: type=1326 audit(1137.811:3568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15096 comm="syz.0.3441" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9015a8a8 code=0x7ffc0000 [ 881.891188][ T27] audit: type=1326 audit(1137.811:3569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15096 comm="syz.0.3441" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffff9015a8a8 code=0x7ffc0000 [ 881.897257][ T27] audit: type=1326 audit(1137.811:3570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15096 comm="syz.0.3441" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9015a8a8 code=0x7ffc0000 [ 881.941525][ T27] audit: type=1326 audit(1137.811:3571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15096 comm="syz.0.3441" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9015a8a8 code=0x7ffc0000 [ 881.947489][ T27] audit: type=1326 audit(1137.811:3572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15096 comm="syz.0.3441" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=203 compat=0 ip=0xffff9015a8a8 code=0x7ffc0000 [ 881.981165][ T27] audit: type=1326 audit(1137.811:3573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15096 comm="syz.0.3441" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9015a8a8 code=0x7ffc0000 [ 882.256684][T15105] loop2: detected capacity change from 0 to 4096 [ 884.322518][T15125] netlink: 76 bytes leftover after parsing attributes in process `syz.3.3449'. [ 884.391974][T15131] netlink: 'syz.4.3453': attribute type 10 has an invalid length. [ 884.410937][T15131] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3453'. [ 886.125921][T15156] netlink: 'syz.3.3462': attribute type 1 has an invalid length. [ 886.147405][T15156] 8021q: adding VLAN 0 to HW filter on device bond1 [ 886.194400][T15156] device bond1 entered promiscuous mode [ 886.248645][T15155] loop2: detected capacity change from 0 to 4096 [ 889.824297][T15187] netlink: 'syz.2.3469': attribute type 10 has an invalid length. [ 890.634350][T15187] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3469'. [ 891.498228][ T27] kauditd_printk_skb: 18 callbacks suppressed [ 891.498426][ T27] audit: type=1326 audit(1147.461:3592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15205 comm="syz.2.3475" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa3b5a8a8 code=0x7ffc0000 [ 891.541006][ C1] hrtimer: interrupt took 55360 ns [ 891.551761][ T27] audit: type=1326 audit(1147.461:3593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15205 comm="syz.2.3475" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa3b5a8a8 code=0x7ffc0000 [ 891.606515][ T27] audit: type=1326 audit(1147.461:3594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15205 comm="syz.2.3475" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=79 compat=0 ip=0xffffa3b5a8a8 code=0x7ffc0000 [ 891.620788][ T27] audit: type=1326 audit(1147.461:3595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15205 comm="syz.2.3475" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa3b5a8a8 code=0x7ffc0000 [ 891.768973][ T27] audit: type=1326 audit(1147.461:3596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15205 comm="syz.2.3475" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa3b5a8a8 code=0x7ffc0000 [ 891.775606][ T27] audit: type=1326 audit(1147.461:3597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15205 comm="syz.2.3475" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffffa3b5a8a8 code=0x7ffc0000 [ 891.781535][ T27] audit: type=1326 audit(1147.461:3598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15205 comm="syz.2.3475" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa3b5a8a8 code=0x7ffc0000 [ 891.787213][ T27] audit: type=1326 audit(1147.461:3599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15205 comm="syz.2.3475" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa3b5a8a8 code=0x7ffc0000 [ 891.793081][ T27] audit: type=1326 audit(1147.461:3600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15205 comm="syz.2.3475" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=203 compat=0 ip=0xffffa3b5a8a8 code=0x7ffc0000 [ 891.798957][ T27] audit: type=1326 audit(1147.461:3601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15205 comm="syz.2.3475" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa3b5a8a8 code=0x7ffc0000 [ 893.548702][T15228] loop1: detected capacity change from 0 to 4096 [ 895.155798][T15248] netlink: 'syz.2.3485': attribute type 10 has an invalid length. [ 895.183359][T15248] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3485'. [ 895.212470][T15251] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3488'. [ 896.107251][T12756] Bluetooth: hci3: command 0x0406 tx timeout [ 901.800175][T15303] loop4: detected capacity change from 0 to 4096 [ 901.890000][T15313] netlink: 'syz.2.3502': attribute type 10 has an invalid length. [ 902.108082][T15313] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3502'. [ 902.833628][ T27] kauditd_printk_skb: 35 callbacks suppressed [ 902.833640][ T27] audit: type=1326 audit(1158.801:3637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15318 comm="syz.1.3504" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff7ff5a8a8 code=0x7ffc0000 [ 902.848451][ T27] audit: type=1326 audit(1158.801:3638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15318 comm="syz.1.3504" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff7ff5a8a8 code=0x7ffc0000 [ 902.883869][ T27] audit: type=1326 audit(1158.801:3639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15318 comm="syz.1.3504" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=79 compat=0 ip=0xffff7ff5a8a8 code=0x7ffc0000 [ 902.921797][ T27] audit: type=1326 audit(1158.801:3640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15318 comm="syz.1.3504" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff7ff5a8a8 code=0x7ffc0000 [ 903.403454][ T27] audit: type=1326 audit(1158.801:3641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15318 comm="syz.1.3504" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff7ff5a8a8 code=0x7ffc0000 [ 903.489683][ T27] audit: type=1326 audit(1158.801:3642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15318 comm="syz.1.3504" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffff7ff5a8a8 code=0x7ffc0000 [ 903.508793][ T27] audit: type=1326 audit(1158.801:3643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15318 comm="syz.1.3504" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff7ff5a8a8 code=0x7ffc0000 [ 903.515289][ T27] audit: type=1326 audit(1158.801:3644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15318 comm="syz.1.3504" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff7ff5a8a8 code=0x7ffc0000 [ 903.553397][ T27] audit: type=1326 audit(1158.801:3645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15318 comm="syz.1.3504" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=203 compat=0 ip=0xffff7ff5a8a8 code=0x7ffc0000 [ 903.567516][T15336] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 903.570029][ T27] audit: type=1326 audit(1158.801:3646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15318 comm="syz.1.3504" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff7ff5a8a8 code=0x7ffc0000 [ 903.571789][T15336] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 907.670666][T15375] netlink: 'syz.4.3518': attribute type 10 has an invalid length. [ 908.072346][T15381] loop3: detected capacity change from 0 to 4096 [ 910.544257][T15400] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 910.546771][T15400] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 912.647863][T15418] netlink: 'syz.4.3530': attribute type 10 has an invalid length. [ 913.466708][ T27] kauditd_printk_skb: 4 callbacks suppressed [ 913.467142][ T27] audit: type=1326 audit(1169.341:3651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15424 comm="syz.2.3532" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa3b5a8a8 code=0x7ffc0000 [ 913.716701][ T27] audit: type=1326 audit(1169.341:3652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15424 comm="syz.2.3532" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa3b5a8a8 code=0x7ffc0000 [ 913.994910][ T27] audit: type=1326 audit(1169.341:3653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15424 comm="syz.2.3532" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=79 compat=0 ip=0xffffa3b5a8a8 code=0x7ffc0000 [ 914.043428][ T27] audit: type=1326 audit(1169.341:3654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15424 comm="syz.2.3532" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa3b5a8a8 code=0x7ffc0000 [ 914.049698][ T27] audit: type=1326 audit(1169.341:3655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15424 comm="syz.2.3532" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa3b5a8a8 code=0x7ffc0000 [ 914.055765][ T27] audit: type=1326 audit(1169.341:3656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15424 comm="syz.2.3532" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffffa3b5a8a8 code=0x7ffc0000 [ 914.088050][ T27] audit: type=1326 audit(1169.341:3657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15424 comm="syz.2.3532" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa3b5a8a8 code=0x7ffc0000 [ 914.102300][ T27] audit: type=1326 audit(1169.341:3658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15424 comm="syz.2.3532" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa3b5a8a8 code=0x7ffc0000 [ 914.117199][ T27] audit: type=1326 audit(1169.341:3659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15424 comm="syz.2.3532" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=203 compat=0 ip=0xffffa3b5a8a8 code=0x7ffc0000 [ 914.130770][ T27] audit: type=1326 audit(1169.341:3660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15424 comm="syz.2.3532" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa3b5a8a8 code=0x7ffc0000 [ 914.287250][T15434] loop4: detected capacity change from 0 to 4096 [ 916.368684][T15451] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 916.383489][T15451] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 918.056433][T15470] netlink: 'syz.2.3544': attribute type 10 has an invalid length. [ 923.287488][T15493] loop1: detected capacity change from 0 to 4096 [ 924.399552][ T27] kauditd_printk_skb: 18 callbacks suppressed [ 924.399565][ T27] audit: type=1326 audit(1180.361:3679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15514 comm="syz.0.3555" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9015a8a8 code=0x7ffc0000 [ 924.410597][ T27] audit: type=1326 audit(1180.361:3680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15514 comm="syz.0.3555" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9015a8a8 code=0x7ffc0000 [ 924.436000][ T27] audit: type=1326 audit(1180.361:3681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15514 comm="syz.0.3555" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=79 compat=0 ip=0xffff9015a8a8 code=0x7ffc0000 [ 924.465780][ T27] audit: type=1326 audit(1180.361:3682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15514 comm="syz.0.3555" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9015a8a8 code=0x7ffc0000 [ 924.563768][ T27] audit: type=1326 audit(1180.361:3683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15514 comm="syz.0.3555" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9015a8a8 code=0x7ffc0000 [ 924.608523][ T27] audit: type=1326 audit(1180.361:3684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15514 comm="syz.0.3555" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffff9015a8a8 code=0x7ffc0000 [ 924.659654][ T27] audit: type=1326 audit(1180.361:3685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15514 comm="syz.0.3555" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9015a8a8 code=0x7ffc0000 [ 924.668639][ T2061] ieee802154 phy0 wpan0: encryption failed: -22 [ 924.671952][ T2061] ieee802154 phy1 wpan1: encryption failed: -22 [ 924.721153][ T27] audit: type=1326 audit(1180.361:3686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15514 comm="syz.0.3555" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9015a8a8 code=0x7ffc0000 [ 924.833415][ T27] audit: type=1326 audit(1180.361:3687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15514 comm="syz.0.3555" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=203 compat=0 ip=0xffff9015a8a8 code=0x7ffc0000 [ 924.833577][ T27] audit: type=1326 audit(1180.361:3688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15514 comm="syz.0.3555" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9015a8a8 code=0x7ffc0000 [ 925.577440][T15527] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 925.580118][T15527] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 925.584530][T15529] netlink: 'syz.3.3560': attribute type 10 has an invalid length. [ 926.312681][T15529] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 929.929257][ T27] kauditd_printk_skb: 4 callbacks suppressed [ 929.929270][ T27] audit: type=1326 audit(1185.891:3693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15561 comm="syz.1.3568" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff7ff5a8a8 code=0x7ffc0000 [ 929.937317][ T27] audit: type=1326 audit(1185.891:3694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15561 comm="syz.1.3568" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff7ff5a8a8 code=0x7ffc0000 [ 929.954309][ T27] audit: type=1326 audit(1185.891:3695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15561 comm="syz.1.3568" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=79 compat=0 ip=0xffff7ff5a8a8 code=0x7ffc0000 [ 929.990783][ T27] audit: type=1326 audit(1185.891:3696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15561 comm="syz.1.3568" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff7ff5a8a8 code=0x7ffc0000 [ 930.214348][ T27] audit: type=1326 audit(1185.891:3697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15561 comm="syz.1.3568" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff7ff5a8a8 code=0x7ffc0000 [ 930.450541][ T27] audit: type=1326 audit(1185.891:3698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15561 comm="syz.1.3568" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffff7ff5a8a8 code=0x7ffc0000 [ 930.726113][ T27] audit: type=1326 audit(1185.891:3699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15561 comm="syz.1.3568" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff7ff5a8a8 code=0x7ffc0000 [ 931.021446][ T27] audit: type=1326 audit(1185.891:3700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15561 comm="syz.1.3568" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff7ff5a8a8 code=0x7ffc0000 [ 931.027993][ T27] audit: type=1326 audit(1185.891:3701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15561 comm="syz.1.3568" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=203 compat=0 ip=0xffff7ff5a8a8 code=0x7ffc0000 [ 931.034007][ T27] audit: type=1326 audit(1185.891:3702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15561 comm="syz.1.3568" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff7ff5a8a8 code=0x7ffc0000 [ 931.104123][T15567] loop2: detected capacity change from 0 to 4096 [ 933.318911][T15587] netlink: 'syz.1.3574': attribute type 10 has an invalid length. [ 934.423656][T15587] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 934.720749][T15603] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3576'. [ 934.723646][T15603] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3576'. [ 934.743945][T15603] device geneve3 entered promiscuous mode [ 940.254750][ T27] kauditd_printk_skb: 4 callbacks suppressed [ 940.254762][ T27] audit: type=1326 audit(1196.221:3707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15630 comm="syz.1.3581" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff7ff5a8a8 code=0x7ffc0000 [ 940.295063][ T27] audit: type=1326 audit(1196.221:3708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15630 comm="syz.1.3581" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff7ff5a8a8 code=0x7ffc0000 [ 940.485352][ T27] audit: type=1326 audit(1196.221:3709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15630 comm="syz.1.3581" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=79 compat=0 ip=0xffff7ff5a8a8 code=0x7ffc0000 [ 940.870001][ T27] audit: type=1326 audit(1196.221:3710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15630 comm="syz.1.3581" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff7ff5a8a8 code=0x7ffc0000 [ 941.200062][ T27] audit: type=1326 audit(1196.221:3711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15630 comm="syz.1.3581" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff7ff5a8a8 code=0x7ffc0000 [ 941.233698][ T27] audit: type=1326 audit(1196.221:3712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15630 comm="syz.1.3581" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffff7ff5a8a8 code=0x7ffc0000 [ 941.239771][ T27] audit: type=1326 audit(1196.221:3713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15630 comm="syz.1.3581" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff7ff5a8a8 code=0x7ffc0000 [ 941.245909][ T27] audit: type=1326 audit(1196.221:3714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15630 comm="syz.1.3581" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff7ff5a8a8 code=0x7ffc0000 [ 941.251764][ T27] audit: type=1326 audit(1196.221:3715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15630 comm="syz.1.3581" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=203 compat=0 ip=0xffff7ff5a8a8 code=0x7ffc0000 [ 941.257585][ T27] audit: type=1326 audit(1196.221:3716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15630 comm="syz.1.3581" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff7ff5a8a8 code=0x7ffc0000 [ 945.691306][T15669] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3588'. [ 945.693838][T15669] netlink: 'syz.2.3588': attribute type 5 has an invalid length. [ 945.695913][T15669] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3588'. [ 945.700544][T15669] device geneve4 entered promiscuous mode [ 948.096173][T15688] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3597'. [ 948.096583][T15688] netlink: 'syz.4.3597': attribute type 5 has an invalid length. [ 948.096808][T15688] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3597'. [ 954.569520][T15732] netlink: 'syz.0.3610': attribute type 10 has an invalid length. [ 957.897038][T15762] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3614'. [ 957.899871][T15762] netlink: 'syz.4.3614': attribute type 5 has an invalid length. [ 957.902135][T15762] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3614'. [ 957.923548][T15762] device geneve3 entered promiscuous mode [ 958.519503][T15767] netlink: 'syz.0.3626': attribute type 10 has an invalid length. [ 958.554594][T15767] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3626'. [ 966.752614][T15823] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3629'. [ 966.755269][T15823] netlink: 'syz.3.3629': attribute type 5 has an invalid length. [ 966.757363][T15823] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3629'. [ 966.763572][T15823] device geneve3 entered promiscuous mode [ 967.672715][T15831] netlink: 'syz.3.3632': attribute type 10 has an invalid length. [ 970.339369][T15831] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3632'. [ 974.946276][T15882] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3642'. [ 974.948802][T15882] netlink: 'syz.2.3642': attribute type 5 has an invalid length. [ 974.950815][T15882] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3642'. [ 977.496446][T15898] netlink: 'syz.4.3647': attribute type 10 has an invalid length. [ 977.549563][T15898] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3647'. [ 984.429853][T15950] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3659'. [ 984.432459][T15950] netlink: 'syz.3.3659': attribute type 5 has an invalid length. [ 984.434569][T15950] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3659'. [ 985.512665][T12756] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 985.516947][T12756] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 985.519966][T12756] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 985.545444][ T47] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 986.713534][ T2061] ieee802154 phy0 wpan0: encryption failed: -22 [ 986.715487][ T2061] ieee802154 phy1 wpan1: encryption failed: -22 [ 986.722105][ T47] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 986.725559][ T47] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 986.924564][T15979] netlink: 'syz.2.3663': attribute type 10 has an invalid length. [ 986.979214][T15979] netlink: 'syz.2.3663': attribute type 72 has an invalid length. [ 986.985703][T15979] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3663'. [ 987.715258][T15296] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 987.719577][T15296] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 987.942915][T15296] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 987.946280][T15296] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 988.812535][ T47] Bluetooth: hci1: command 0x0409 tx timeout [ 992.659126][ T47] Bluetooth: hci1: command 0x041b tx timeout [ 992.958084][T15296] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 992.960875][T15296] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 993.350046][T16032] netlink: 'syz.4.3677': attribute type 72 has an invalid length. [ 993.357147][T16032] netlink: 52 bytes leftover after parsing attributes in process `syz.4.3677'. [ 993.486880][T15296] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 993.490281][T15296] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 994.149478][T16028] netlink: 'syz.4.3677': attribute type 10 has an invalid length. [ 994.731138][ T47] Bluetooth: hci1: command 0x040f tx timeout [ 995.511317][T15961] chnl_net:caif_netlink_parms(): no params data found [ 995.764857][T15961] bridge0: port 1(bridge_slave_0) entered blocking state [ 995.772078][T15961] bridge0: port 1(bridge_slave_0) entered disabled state [ 995.814203][T15961] device bridge_slave_0 entered promiscuous mode [ 995.818062][T15961] bridge0: port 2(bridge_slave_1) entered blocking state [ 995.827915][T15961] bridge0: port 2(bridge_slave_1) entered disabled state [ 996.592854][T15961] device bridge_slave_1 entered promiscuous mode [ 997.515032][ T47] Bluetooth: hci1: command 0x0419 tx timeout [ 998.135269][T15961] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 998.951780][T15961] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 999.031551][T15961] team0: Port device team_slave_0 added [ 999.046633][T15961] team0: Port device team_slave_1 added [ 999.081087][T16021] usb 1-1: new full-speed USB device number 30 using dummy_hcd [ 999.166184][T15961] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 999.168248][T15961] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 999.191128][T15961] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 999.196067][T15961] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 999.199170][T15961] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 999.248177][T15961] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 999.272933][T16021] usb 1-1: not running at top speed; connect to a high speed hub [ 999.276434][T16021] usb 1-1: config 128 has an invalid interface number: 15 but max is 3 [ 999.278846][T16021] usb 1-1: config 128 contains an unexpected descriptor of type 0x1, skipping [ 999.311243][T16021] usb 1-1: config 128 has an invalid interface number: 6 but max is 3 [ 999.313607][T16021] usb 1-1: config 128 contains an unexpected descriptor of type 0x2, skipping [ 999.316079][T16021] usb 1-1: config 128 contains an unexpected descriptor of type 0x1, skipping [ 999.318584][T16021] usb 1-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 999.381264][T16102] netlink: 'syz.4.3690': attribute type 72 has an invalid length. [ 999.383518][T16102] netlink: 52 bytes leftover after parsing attributes in process `syz.4.3690'. [ 999.468894][T16021] usb 1-1: config 128 has 2 interfaces, different from the descriptor's value: 4 [ 999.472015][T16021] usb 1-1: config 128 has no interface number 0 [ 999.473889][T16021] usb 1-1: config 128 has no interface number 1 [ 999.477509][T16021] usb 1-1: config 128 interface 15 altsetting 1 endpoint 0xA has invalid maxpacket 1024, setting to 64 [ 999.480570][T16021] usb 1-1: config 128 interface 15 altsetting 1 has an invalid endpoint with address 0x0, skipping [ 999.482871][T16099] netlink: 'syz.4.3690': attribute type 10 has an invalid length. [ 999.483570][T16021] usb 1-1: config 128 interface 15 altsetting 1 has an invalid endpoint with address 0x0, skipping [ 999.488483][T16021] usb 1-1: config 128 interface 15 altsetting 1 has a duplicate endpoint with address 0xA, skipping [ 999.493202][T16021] usb 1-1: config 128 interface 15 altsetting 1 has an invalid endpoint with address 0x0, skipping [ 999.496333][T16021] usb 1-1: config 128 interface 15 altsetting 1 has an invalid endpoint with address 0x0, skipping [ 999.499303][T16021] usb 1-1: config 128 interface 15 altsetting 1 has a duplicate endpoint with address 0xE, skipping [ 999.503057][T16021] usb 1-1: config 128 interface 15 altsetting 1 has an invalid endpoint with address 0x27, skipping [ 999.506597][T16021] usb 1-1: config 128 interface 15 altsetting 1 has 10 endpoint descriptors, different from the interface descriptor's value: 9 [ 999.510335][T16021] usb 1-1: config 128 interface 6 altsetting 3 has 0 endpoint descriptors, different from the interface descriptor's value: 13 [ 999.685877][T16021] usb 1-1: config 128 interface 15 has no altsetting 0 [ 999.808648][T16021] usb 1-1: config 128 interface 6 has no altsetting 0 [ 999.915712][T16021] usb 1-1: New USB device found, idVendor=0411, idProduct=0097, bcdDevice=d5.83 [ 999.994632][T16021] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1000.080732][T16021] usb 1-1: Product: ప [ 1000.122484][T16021] usb 1-1: Manufacturer: Ъ [ 1000.242030][T16021] usb 1-1: SerialNumber: syz [ 1000.260436][T16077] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1000.264005][T16077] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1000.393126][T15961] device hsr_slave_0 entered promiscuous mode [ 1000.421835][T15961] device hsr_slave_1 entered promiscuous mode [ 1000.471073][T15961] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1000.473084][T15961] Cannot create hsr debugfs directory [ 1000.485462][T16021] usb 1-1: USB disconnect, device number 30 [ 1002.834990][T15961] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1003.828979][T16141] ================================================================== [ 1003.831188][T16141] BUG: KASAN: use-after-free in rose_get_neigh+0x17c/0x480 [ 1003.833156][T16141] Read of size 1 at addr ffff0000f1183430 by task syz.4.3698/16141 [ 1003.835304][T16141] [ 1003.835963][T16141] CPU: 0 PID: 16141 Comm: syz.4.3698 Not tainted 6.1.141-syzkaller #0 [ 1003.838320][T16141] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1003.841143][T16141] Call trace: [ 1003.842028][T16141] dump_backtrace+0x1c8/0x1f4 [ 1003.843297][T16141] show_stack+0x2c/0x3c [ 1003.844496][T16141] __dump_stack+0x30/0x40 [ 1003.845735][T16141] dump_stack_lvl+0xf8/0x160 [ 1003.847024][T16141] print_address_description+0x88/0x220 [ 1003.848571][T16141] print_report+0x50/0x68 [ 1003.849845][T16141] kasan_report+0xa8/0x100 [ 1003.851137][T16141] __asan_report_load1_noabort+0x2c/0x38 [ 1003.852746][T16141] rose_get_neigh+0x17c/0x480 [ 1003.854062][T16141] rose_connect+0x364/0xfe8 [ 1003.855344][T16141] __sys_connect+0x264/0x28c [ 1003.856641][T16141] __arm64_sys_connect+0x7c/0x94 [ 1003.858058][T16141] invoke_syscall+0x98/0x2bc [ 1003.859356][T16141] el0_svc_common+0x138/0x258 [ 1003.860660][T16141] do_el0_svc+0x58/0x13c [ 1003.861942][T16141] el0_svc+0x58/0x138 [ 1003.863087][T16141] el0t_64_sync_handler+0x84/0xf0 [ 1003.864513][T16141] el0t_64_sync+0x18c/0x190 [ 1003.865760][T16141] [ 1003.866426][T16141] Allocated by task 14336: [ 1003.867667][T16141] kasan_set_track+0x4c/0x80 [ 1003.868895][T16141] kasan_save_alloc_info+0x28/0x34 [ 1003.870309][T16141] __kasan_kmalloc+0xa0/0xb8 [ 1003.871591][T16141] kmalloc_trace+0x7c/0x94 [ 1003.872797][T16141] rose_add_node+0x1f4/0xba4 [ 1003.874071][T16141] rose_rt_ioctl+0xa04/0xde4 [ 1003.875337][T16141] rose_ioctl+0x378/0xb80 [ 1003.876490][T16141] sock_do_ioctl+0xf8/0x240 [ 1003.877699][T16141] sock_ioctl+0x5c4/0x840 [ 1003.878875][T16141] __arm64_sys_ioctl+0x14c/0x1c8 [ 1003.880242][T16141] invoke_syscall+0x98/0x2bc [ 1003.881476][T16141] el0_svc_common+0x138/0x258 [ 1003.882745][T16141] do_el0_svc+0x58/0x13c [ 1003.883900][T16141] el0_svc+0x58/0x138 [ 1003.885024][T16141] el0t_64_sync_handler+0x84/0xf0 [ 1003.886366][T16141] el0t_64_sync+0x18c/0x190 [ 1003.887628][T16141] [ 1003.888359][T16141] Freed by task 16141: [ 1003.889475][T16141] kasan_set_track+0x4c/0x80 [ 1003.890737][T16141] kasan_save_free_info+0x3c/0x60 [ 1003.892186][T16141] ____kasan_slab_free+0x148/0x1b0 [ 1003.893613][T16141] __kasan_slab_free+0x18/0x28 [ 1003.895124][T16141] slab_free_freelist_hook+0x16c/0x1ec [ 1003.896713][T16141] __kmem_cache_free+0xc0/0x224 [ 1003.898055][T16141] kfree+0xd0/0x1ac [ 1003.899138][T16141] rose_remove_neigh+0x23c/0x2b8 [ 1003.900495][T16141] rose_rt_device_down+0x33c/0x394 [ 1003.902024][T16141] rose_device_event+0x5d8/0x68c [ 1003.903455][T16141] raw_notifier_call_chain+0xd4/0x164 [ 1003.905015][T16141] __dev_notify_flags+0x250/0x46c [ 1003.906410][T16141] dev_change_flags+0xc8/0x154 [ 1003.907763][T16141] dev_ifsioc+0x524/0xed0 [ 1003.909060][T16141] dev_ioctl+0x4c8/0xc8c [ 1003.910343][T16141] sock_do_ioctl+0x18c/0x240 [ 1003.911702][T16141] sock_ioctl+0x5c4/0x840 [ 1003.913004][T16141] __arm64_sys_ioctl+0x14c/0x1c8 [ 1003.914476][T16141] invoke_syscall+0x98/0x2bc [ 1003.915816][T16141] el0_svc_common+0x138/0x258 [ 1003.917174][T16141] do_el0_svc+0x58/0x13c [ 1003.918453][T16141] el0_svc+0x58/0x138 [ 1003.919587][T16141] el0t_64_sync_handler+0x84/0xf0 [ 1003.921058][T16141] el0t_64_sync+0x18c/0x190 [ 1003.922420][T16141] [ 1003.923094][T16141] The buggy address belongs to the object at ffff0000f1183400 [ 1003.923094][T16141] which belongs to the cache kmalloc-512 of size 512 [ 1003.927267][T16141] The buggy address is located 48 bytes inside of [ 1003.927267][T16141] 512-byte region [ffff0000f1183400, ffff0000f1183600) [ 1003.931099][T16141] [ 1003.931802][T16141] The buggy address belongs to the physical page: [ 1003.933708][T16141] page:000000002c0bcf02 refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff0000f1181400 pfn:0x131180 [ 1003.937048][T16141] head:000000002c0bcf02 order:2 compound_mapcount:0 compound_pincount:0 [ 1003.939465][T16141] flags: 0x5ffc00000010200(slab|head|node=0|zone=2|lastcpupid=0x7ff) [ 1003.941810][T16141] raw: 05ffc00000010200 fffffc0003cdee08 fffffc0003c9f208 ffff0000c0002600 [ 1003.944196][T16141] raw: ffff0000f1181400 0000000000100008 00000001ffffffff 0000000000000000 [ 1003.946541][T16141] page dumped because: kasan: bad access detected [ 1003.948366][T16141] [ 1003.949022][T16141] Memory state around the buggy address: [ 1003.950578][T16141] ffff0000f1183300: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1003.952795][T16141] ffff0000f1183380: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1003.955050][T16141] >ffff0000f1183400: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1003.957339][T16141] ^ [ 1003.958957][T16141] ffff0000f1183480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1003.961329][T16141] ffff0000f1183500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1003.963667][T16141] ================================================================== [ 1003.966086][T16141] Disabling lock debugging due to kernel taint [ 1003.972103][T16144] ------------[ cut here ]------------ [ 1003.973703][T16144] ODEBUG: assert_init not available (active state 0) object type: timer_list hint: rose_t0timer_expiry+0x0/0x344 [ 1003.977459][T16144] WARNING: CPU: 0 PID: 16144 at lib/debugobjects.c:518 debug_print_object+0x148/0x1d4 [ 1003.980183][T16144] Modules linked in: [ 1003.981254][T16144] CPU: 0 PID: 16144 Comm: syz.4.3698 Tainted: G B 6.1.141-syzkaller #0 [ 1003.983667][T16144] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1003.986334][T16144] pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 1003.988492][T16144] pc : debug_print_object+0x148/0x1d4 [ 1003.990095][T16144] lr : debug_print_object+0x148/0x1d4 [ 1003.991606][T16144] sp : ffff800022ea77e0 [ 1003.992751][T16144] x29: ffff800022ea77e0 x28: dfff800000000000 x27: 000000000000000e [ 1003.994937][T16144] x26: ffff800015070000 x25: ffff8000083ad878 x24: dfff800000000000 [ 1003.997135][T16144] x23: 0000000000000000 x22: ffff800010a9f6f0 x21: ffff800011f6a080 [ 1003.999380][T16144] x20: ffff800011a9ad00 x19: ffff800011f69bc0 x18: ffff800011a7bce0 [ 1004.001608][T16144] x17: 1fffe00033ee2f76 x16: ffff800008042940 x15: 0000000040000000 [ 1004.003824][T16144] x14: 0000000000000002 x13: 0000000000ff0100 x12: 0000000000ff0100 [ 1004.006054][T16144] x11: ff00800008047bc4 x10: 0000000040000002 x9 : 9ffc892be8603e00 [ 1004.008165][T16144] x8 : 9ffc892be8603e00 x7 : 0000000000000004 x6 : ffff8000082516dc [ 1004.010358][T16144] x5 : 0000000000000000 x4 : 0000000000000001 x3 : 0000000000000000 [ 1004.012628][T16144] x2 : ffff800022ea7380 x1 : 0000000000000000 x0 : ffff800008251770 [ 1004.014785][T16144] Call trace: [ 1004.015693][T16144] debug_print_object+0x148/0x1d4 [ 1004.017122][T16144] debug_object_assert_init+0x250/0x2c8 [ 1004.018740][T16144] timer_delete+0x48/0x1e8 [ 1004.019968][T16144] rose_transmit_link+0x43c/0x66c [ 1004.021359][T16144] rose_write_internal+0xeec/0x17c0 [ 1004.022721][T16144] rose_connect+0x8bc/0xfe8 [ 1004.023894][T16144] __sys_connect+0x264/0x28c [ 1004.025123][T16144] __arm64_sys_connect+0x7c/0x94 [ 1004.026485][T16144] invoke_syscall+0x98/0x2bc [ 1004.027729][T16144] el0_svc_common+0x138/0x258 [ 1004.028969][T16144] do_el0_svc+0x58/0x13c [ 1004.030097][T16144] el0_svc+0x58/0x138 [ 1004.031156][T16144] el0t_64_sync_handler+0x84/0xf0 [ 1004.032492][T16144] el0t_64_sync+0x18c/0x190 [ 1004.033756][T16144] irq event stamp: 92 [ 1004.034830][T16144] hardirqs last enabled at (91): [] el0_svc_common+0x9c/0x258 [ 1004.037341][T16144] hardirqs last disabled at (92): [] __schedule+0x298/0x1b2c [ 1004.039769][T16144] softirqs last enabled at (86): [] local_bh_enable+0x10/0x34 [ 1004.042295][T16144] softirqs last disabled at (84): [] local_bh_disable+0x10/0x34 [ 1004.044785][T16144] ---[ end trace 0000000000000000 ]--- [ 1004.552562][T15296] bond0: (slave wlan1): Releasing backup interface [ 1004.604705][T15961] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1004.720733][T15961] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1005.096090][T15961] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1005.183986][T15296] device hsr_slave_0 left promiscuous mode [ 1005.221274][T15296] device hsr_slave_1 left promiscuous mode [ 1005.301186][T15296] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1005.303412][T15296] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1005.306101][T15296] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1005.308405][T15296] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1005.311281][T15296] device bridge_slave_1 left promiscuous mode [ 1005.313634][T15296] bridge0: port 2(bridge_slave_1) entered disabled state [ 1005.352360][T15296] device bridge_slave_0 left promiscuous mode [ 1005.354188][T15296] bridge0: port 1(bridge_slave_0) entered disabled state [ 1005.531139][T15296] device veth1_macvtap left promiscuous mode [ 1005.533061][T15296] device veth0_macvtap left promiscuous mode [ 1005.534926][T15296] device veth1_vlan left promiscuous mode [ 1005.536559][T15296] device veth0_vlan left promiscuous mode [ 1007.311913][T15296] team0 (unregistering): Port device team_slave_1 removed [ 1007.492819][T15296] team0 (unregistering): Port device team_slave_0 removed [ 1007.691844][T15296] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1007.906744][T15296] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1010.472234][T15296] bond0 (unregistering): Released all slaves [ 1010.747474][T15961] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1010.753986][ T5105] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1010.756361][ T5105] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1010.767842][T15961] 8021q: adding VLAN 0 to HW filter on device team0 [ 1010.772084][ T4493] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1010.774740][ T4493] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1010.777276][ T4493] bridge0: port 1(bridge_slave_0) entered blocking state [ 1010.779138][ T4493] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1010.792267][ T4493] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1010.794770][ T4493] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1010.797402][ T4493] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1010.799813][ T4493] bridge0: port 2(bridge_slave_1) entered blocking state [ 1010.801790][ T4493] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1010.810558][ T4493] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1010.822736][ T4493] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1010.825832][ T4493] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1010.828540][ T4493] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1010.831751][ T4493] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1010.834442][ T4493] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1010.837122][ T4493] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1010.839533][ T4493] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1010.843159][ T4493] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1010.845694][ T4493] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1010.849457][T15961] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1010.861580][ T4493] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1010.946603][ T5105] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1010.948789][ T5105] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1010.957599][T15961] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1011.118942][ T7586] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1011.121940][ T7586] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1011.151523][ T5105] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1011.154171][ T5105] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1011.158150][T15961] device veth0_vlan entered promiscuous mode [ 1011.161557][ T5105] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1011.164329][ T5105] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1011.168425][T15961] device veth1_vlan entered promiscuous mode [ 1011.190880][ T5105] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1011.199853][ T5105] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1011.202617][ T5105] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1011.205769][ T5105] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1011.209810][T15961] device veth0_macvtap entered promiscuous mode [ 1011.220613][T15961] device veth1_macvtap entered promiscuous mode [ 1011.238919][T15961] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1011.242859][T15961] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1011.245791][T15961] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1011.248786][T15961] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1011.253058][T15961] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1011.256046][T15961] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1011.258804][T15961] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1011.262052][T15961] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1011.264811][T15961] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1011.267763][T15961] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1011.270697][T15961] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1011.273893][T15961] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1011.277494][T15961] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1011.280743][ T5105] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1011.283452][ T5105] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1011.285928][ T5105] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1011.288587][ T5105] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1011.298099][T15961] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1011.301393][T15961] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1011.304335][T15961] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1011.307693][T15961] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1011.310526][T15961] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1011.314074][T15961] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1011.316944][T15961] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1011.319926][T15961] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1011.322964][T15961] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1011.326379][T15961] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1011.329475][T15961] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1011.332944][T15961] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1011.336777][T15961] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1011.375230][ T5105] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1011.378174][ T5105] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1011.384038][T15961] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1011.386791][T15961] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1011.389474][T15961] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1011.392561][T15961] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1011.429596][ T5105] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1011.433259][ T5105] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1011.435725][ T5105] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1011.453891][ T5105] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1011.456075][ T5105] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1011.458185][ T7586] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready