last executing test programs: 49.626420446s ago: executing program 3 (id=3218): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, 0x0, 0x0) connect$unix(r0, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) keyctl$dh_compute(0x17, 0x0, 0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x24, 0x0, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, 0x0, 0x0) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) r5 = fanotify_init(0x20, 0x1) write$bt_hci(r4, &(0x7f0000000180)=ANY=[@ANYRES8=r5], 0xe) 46.560121662s ago: executing program 3 (id=3226): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ptrace(0x10, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000400)={r4, r0}, 0xc) r5 = syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x4000000, 0x0, 0x0}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000600)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000005c0)={&(0x7f00000004c0)={0xd0, 0x0, 0x8, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @void}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}], @NL80211_ATTR_TX_RATES={0xac, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x4c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x7609, 0x6, 0x2, 0x1, 0x6, 0x1ff, 0xfffe]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0xc, 0x8, 0x101, 0x0, 0x10, 0x6, 0x7]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_2GHZ={0x14, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_2GHZ={0x30, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x2c, 0x2, [{0x1, 0x2}, {0x5, 0x3}, {0x0, 0x4}, {0x1}, {0x2, 0x7}, {0x5, 0xa}, {}, {0x1}, {0x5, 0x2}, {0x0, 0x1}, {0x1, 0x2}, {0x5, 0x5}, {0x7, 0x6}, {0x5, 0x7}, {0x4, 0x6}, {0x3, 0x4}, {0x2, 0x8}, {0x7, 0x9}, {0x0, 0x5}, {0x7, 0xa}, {0x1}, {0x2, 0x7}, {0x6, 0x9}, {0x1, 0x2}, {0x1, 0x5}, {0x3, 0x5}, {0x7, 0x6}, {0x6, 0xa}, {0x7, 0xa}, {0x7}, {0x4, 0x6}, {0x1, 0xa}, {0x6, 0xa}, {0x6, 0x4}, {0x0, 0x8}, {0x1, 0x5}, {0x6, 0x2}, {0x6, 0x7}, {0x3, 0xa}, {0x3, 0x6}]}]}, @NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}]}]}, 0xd0}, 0x1, 0x0, 0x0, 0x40050}, 0x40) ioctl$VIDIOC_S_SELECTION(r5, 0xc040565f, &(0x7f0000000940)={0xa, 0x100, 0x3, {0x8000, 0x1000, 0x4, 0x2}}) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_io_uring_setup(0x4e1, &(0x7f0000000380)={0x0, 0x1ffffa, 0x10100, 0x3, 0x1}, &(0x7f0000000180), &(0x7f00000001c0)) socket$netlink(0x10, 0x3, 0x4) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0) 45.505229618s ago: executing program 3 (id=3229): r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x20}}, 0x0) getsockname$packet(r0, 0x0, &(0x7f0000001480)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x5}, {0xffff, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x4c010}, 0x20000080) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000004000)=@newtfilter={0x480, 0x2c, 0xd29, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xa, 0xfff3}, {}, {0xc, 0xd}}, [@filter_kind_options=@f_flow={{0x9}, {0x450, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0xce2d}, @TCA_FLOW_POLICE={0x444, 0xa, 0x0, 0x1, [@TCA_POLICE_TBF={0x3c, 0x1, {0xfffff701, 0x6, 0x0, 0x1, 0xc0, {0x2, 0x2, 0x2, 0x9, 0x8, 0x1000}, {0x3, 0x1, 0x7, 0x5, 0x81, 0x5}, 0x100, 0xfffffff8, 0xffffffff}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xd, 0x9, 0x8, 0x4, 0xffff, 0x81, 0x1, 0x3, 0x8, 0x7fff, 0x80, 0x27a2, 0xffffffff, 0x9, 0x800, 0x200, 0x9, 0x0, 0x2, 0xd51, 0x1, 0x8, 0x9, 0x7, 0x6, 0x5, 0xfffffff7, 0x97d6, 0x7, 0x7ff, 0xff, 0x180000, 0x1, 0x4, 0x3, 0x3ff, 0xe, 0x6, 0x6, 0x2, 0x401, 0x5, 0x59b49ea4, 0x5, 0x0, 0x80000000, 0x6, 0xdc, 0x0, 0x27, 0x8, 0x3, 0x7, 0x7ff, 0x5830, 0xf3e5, 0x7, 0x6, 0x4, 0x4, 0x4, 0x4, 0x5, 0x82, 0x2, 0x1, 0x2, 0x7, 0xffff0000, 0x1, 0x100, 0x5, 0xd03, 0x9765, 0xbc, 0x8001, 0x100, 0x7, 0x4, 0xf23, 0x101, 0x5, 0x3, 0x9, 0x6, 0x1, 0x6, 0x8201, 0x80000001, 0xfffffff8, 0x3, 0xa, 0x4, 0xfff, 0x5, 0x2, 0xe2, 0xffffffff, 0x63, 0x7ff, 0x9, 0x3, 0xfffffff7, 0x400, 0x80000000, 0x4, 0x4916afbd, 0x40, 0x5, 0x7fff, 0x400, 0x100, 0x6, 0x8, 0xc, 0x9, 0x4, 0x5, 0x0, 0x19, 0xff8, 0x9, 0x2, 0xa768, 0x5, 0x5, 0xe, 0x6, 0x0, 0x3, 0x8, 0x1, 0x2c5, 0x7, 0x64d, 0xffff74df, 0x2e, 0x3, 0xff, 0x9, 0x5, 0xb6eb, 0xc0000, 0x1, 0x8, 0x7, 0x4, 0x1, 0x1, 0x8, 0xadb8, 0x64db, 0x0, 0xfffffffe, 0x8000, 0x9, 0x2, 0x6, 0x6, 0x7, 0x8, 0x3ff, 0x6, 0x3, 0x8001, 0x9, 0xfff, 0x5, 0x955f, 0x7, 0x7, 0x1, 0x4e, 0x80, 0x5, 0xffffff24, 0x3, 0x5, 0xf6, 0x3, 0x7fffffff, 0x7, 0x4, 0x7, 0x8, 0x4, 0x7f, 0x2, 0x6, 0x9, 0x4, 0x80000000, 0x4, 0x7, 0x6, 0xea, 0x6, 0x399a, 0x6, 0xf1b5, 0x9, 0x8, 0x6, 0x5, 0x10001, 0x2, 0x0, 0xf15, 0x4, 0xf4, 0x91, 0x30, 0xe, 0x1d, 0x9, 0x20c6, 0x8000, 0x7, 0x8bf, 0x39cd5496, 0x6f4, 0xfffffff9, 0xfb32, 0x9b67, 0xfffffff5, 0xf, 0x1, 0x1, 0xc7, 0x4, 0x3, 0x280a9915, 0x6, 0x4, 0x9, 0x8, 0x8000, 0x2, 0x9, 0xf, 0x8, 0x1, 0x3, 0x6, 0x9, 0xffffffff, 0x3, 0x7, 0x5, 0x9, 0x0, 0xfffffffc, 0xe, 0x5c2e34b6, 0x81, 0xb]}]}]}}]}, 0x480}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 33.977587634s ago: executing program 3 (id=3235): r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$NFT_MSG_GETTABLE(0xffffffffffffffff, 0x0, 0x44080) r4 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r4, &(0x7f0000000000)={0x1a, 0x104, 0x6f, 0x0, 0xa1, 0x42}, 0x10) connect$llc(r4, &(0x7f0000000340)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random="48bd00"}, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000540)={'wlan0\x00'}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f00000000c0)}) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x800) r5 = socket$pppl2tp(0x18, 0x1, 0x1) r6 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r5, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r6, {0x2, 0x2, @multicast2}, 0x2, 0x0, 0x4}}, 0x2e) getsockopt$sock_buf(r5, 0x1, 0x1c, 0x0, &(0x7f0000000100)) 32.738299903s ago: executing program 3 (id=3238): r0 = socket$netlink(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f0000000ec0)='cgroup.max.depth\x00', 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000040)=ANY=[], 0xffffff3e) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) timer_create(0x3, 0x0, &(0x7f0000000100)) ioprio_set$pid(0x3, 0x0, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r6, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000001c0)={&(0x7f00000002c0)={0x2c, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98f}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) 26.745941054s ago: executing program 3 (id=3250): r0 = syz_open_dev$usbfs(&(0x7f0000000140), 0x76, 0x101301) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xa}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() prctl$PR_SET_DUMPABLE(0x4, 0x3) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r2, 0x29, 0x4e, &(0x7f0000000000), 0x4) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$int_in(0xffffffffffffffff, 0x5452, 0x0) r4 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r4, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @dev}}, 0x80, &(0x7f0000000140), 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0xff00) socketpair$unix(0x1, 0x5, 0x0, 0x0) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000040)={'team0\x00', &(0x7f0000000140)=@ethtool_sfeatures={0x3b, 0x2, [{0x40209}, {0xffffff7e, 0x5461d6e9}]}}) ioctl$USBDEVFS_CLAIM_PORT(r0, 0x80045519, &(0x7f0000000480)=0x1) 15.818993561s ago: executing program 0 (id=3267): r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) socket$nl_netfilter(0x10, 0x3, 0xc) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0xb, @empty}, 0x1c) connect$inet6(r0, 0x0, 0x0) syz_usb_connect(0x2, 0x0, 0x0, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, 0x0, &(0x7f0000000140)) socket$kcm(0x10, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x11, 0x80a, 0x0) write(0xffffffffffffffff, &(0x7f0000000000), 0x0) syz_usb_connect(0x2, 0xee2, &(0x7f00000001c0)=ANY=[@ANYBLOB="12011003626ebe201104970083d5010203010902d00e048009200d09040f01095f2a5e03052406000105240001000d240f010e000000450e5c330506241a0300200c241b92700900070102000f0a2407021f060300050007240a0108060c09050a0200040a0106cd0bcdd35f0ef9f5bdd882900540f7d1c3869ed4d5b0433133ff90b4c92b648849d45fa990b4ee5648a56cf1498eaf5b729f1ac0744909da336eb40c2facbf1fea92e8e20f8f04595d93be4cb40709c49a37eddb7d8aaa7babdbd072404ae62783ce5c8919552a0fb9ba3ef65365a4858c130d9d7e0b97ad4f173d45e5fd8e020a3a30ef786cb4eb737785a8bf52b9db19df78e23271fe8daadb8327da9cf5bff80a1c693c305561adc32a0c92bc27e1860bd342f80c600a20a8bfb9744daf14d827f55c93cab20cb62c2eeed00905000060000105069b03e69879242f987fc20b35f3a537a3c430b45e7cf51d254eb783e90fda4bc941ce9194f5d5f702ffea766fd7ef3c7ed7c3253e5b4b2d2f0504e29c5740e3129abad6e9fae13e8a273329819c69aea33354ff8996744005de96843d0af5ec8738af77d39c26db1f655a0ba526a5f207e049549ffa89497fd72d725f8f8d281a7181f3bab45bb0554a82b809819959d17bf0085dd366f71d2b82550c013c7033865b7359dcb3ee09050e08100008008209050010ff03580720e911812730ec8b4587c65918276ed4c2f5d3dc4572d217126b0f401797e195015e18c19e6f0dade1893245ee1ad491217f765e958d7628570d7ed664178870c2378e21d782ec2096a05354826d5f98404ab52b2c14ac9a63761bf2c662387171240ab2d24d5da27eba866566f663589c18efe144103107d8dc1dace3ecf9e07bd7e9243be0d9096925eed1c8ac8c1bf0447b7e6216eee404420b0cc7e99c787ecaa33305e9a4158d80261608bd6a38ee4b9e50851fe0e5f1773c4af6aa47b8317914814dad48bb4dfc9179fe433a8738f340f9f1cbd5105610f7f2dea4a29c7ba31cf1bbd1bb9e86fa09050400400009080509050a034000f08104cb0c193f8d3e29cc102578cb9dfb7d0cb8c9c9777b3b4fdb87b88edb5627ac174bc3f9832711d9e653f696542d9daa7f724dc6f0b97e61e174bc4313ac25bf920f9ab5d1972b17a9c8cfe387abda989be0d51deae07332e8e130afd6a527ddcfdf1d96595bd1cfb755c0e7611e34559655f3d5ab49e45cd35616383800e9c543cc3240f16b38e12d6dd78804733a89cd8504ad8cfa752ddbd2d700fdf27c0bcc97a2a502506d5d2380f5caa24d4245967c68a770a2ca15610eb27be5868a6c0765417496ae2336d47597e1090500001000080206090500000004ec030e072501010004000725010001040009050e0820000109fee80527329667998a306a673ff1348c63cae1cff0f27b02f2a94676be26fefc345ba643351fca1e085ed92d43d481b4d4a9ebd7613543892e11ff822ae5d36360e13692957863dc5dece04024e6a7f1f51033ecfa11e4978d1dbc17e83104ca5829797b8e9fe2cb454647bcd5a4acb66833674515348c920e91df70c96ac98bcc78142c2b100e2ceeda087a8186d9bb0f2c95200e3eb65f34fb8dc4bdf72f61f2430f6b4f320870f401f7efc3436cb2059f365f498631f18b06d5a522095a4416427d31e4e07b9c365102f6e017f5172a472ca4054bae504ead27bd01b577877ea4c6dbf069ee2608090406030d362d3b0009240600007cfe75d50524000e000d240f010600000003000800c305240100020a24010100060201020c24020602020307790003ff0724070600000a0d24080307000049f05a5cb1910924050405733b2e8a0a240806060007cfeb5009240801110061002209050b01100003020109050c02ff03360b02d00d6800867c4260e600807116fc75ad0f767eeda0bcb41106de5abfdefecf31b96bd67bf362e3989e0dd36ce78d9727db295efd58c0969c62c896ad81cbc62eaaf18dfab4fd5d250b6ea5d64252dd77c0c6e50c92ec8a8d3d407b7c2f9f0779115cc84a049fa8adab3795887334e947fa65e7d2fd7d2cb471042c40cd8073a7dc3a9cd57726e5b672bb802b5391a04101f71ebbbfc67acb64a8057453516be5acdb32cc663ec6efe5b0c71e125b7d5fd8320a82bb5434603e60a8ae02d6bff28c7a256a6994c9b5272b63a63fd8d5680725018300080009050f1000040904fc0725018302050009050210000403010809050c002000690484a331a327da54ebc9a77daa08102223edf0906c72fbf9cd98fd65a63967738c580c5706d7a920af4f630b4818a81403abb8da5dc403ee80b40b4fc03f4013ad0ceeb77d2b44e3c47f4ab44b10e403fae9b5c6444bc6194e3d0ba45f2af6524a586d11aff3bc106fdaa913b7a97303aca80fcd38859b354fd5552bab8ccdbb74e5a6158feb9771577629d3688500e41b8df8c28c3cc6e0e4588839c72d02e600a3be629c090506f640000610020725018303ff7f07250102017f00090500002000037f0d09050210100006930407250180060800072501010806000905011108005c040009050c000004080cf0072501010502002f02644afe3b72fb976c23706070b10840ab12e7433d4299c052c1e3a0420eaee8ec67667cc318494202aad4441c27090509101000020200ac05a649e00b8511576cd035758d676809697ae8df9f091e40a4635127fab5f4eec79eb608c8b95f6ba6be1b6a5411f99f11fc1e70bfc79e408c84cd7dd68f71b34134c20247bd71137a1992b986bc46e28d359f3888c6bb5e08f029fc50429be743f8b796f642b1c13b524fb9bd33b86ec11a228b994c71e30d6b99de8183467884648c7a282293ecfc1cd162fba98628bf5af381e4b5f00eefed1744f50ca1e028fa8a0905250210000008ff07250180da040009050100ff03cb06010904a0010d86aa6f000a24010600040201020c240206ff01050f030004000924030100000604090624040104d70d24070206009bbd1ba59aa0f0052406000005240005000d240f01f700000001f8f8ff4007240a070b0b08090500020000814a8709050b00000480093a0725010004030009050a0040000700ef072501816a030009050d03000289720be9212464a83b094c4d1249e2f686a6939317209dfaf7ea1c31e37d2357e633cd29028f5a383858c3b7bbb697bf6129920d2842dd46e5372123daaad0baaf92c3517ab2f8c7b3b27c12ca21070a8e44a6a3b5fd29e33f868b58a1a5a3bee87414eafb3f0cb75da7ae1f6dee0d1a92da64bc09c3f591e70096a1f740c4f381472258211da63b9a60ff88d18390525231a3f4c0bb1a1af606b27c8f834a8f8a2cd8bd301b65b897ffb3c025ae0a88b0742622c0ab03d7e5a258e15b02f7815daef1902f6cc50b486c1fbe6ecd2817753262d1ea0dbef32fca95aacf75d4138702bd08e2982295d8fc5a9f090503030002879009472051315f1d2123f88d10a2da753bad4c7c52c3"], &(0x7f0000001240)={0x0, 0x0, 0x38, &(0x7f0000001280)=ANY=[@ANYBLOB="050f2f000300100109000005590900ff1c100a03240100000000040000c00000603f00000f7eff0000c0000014100403f0eb10f0d3f23f5ea92d272137"], 0x3, [{0x4, &(0x7f00000010c0)=@lang_id={0x4, 0x3, 0x860}}, {0x4, &(0x7f0000001100)=@lang_id={0x4, 0x3, 0x42a}}, {0x4, &(0x7f0000001140)=@lang_id={0x4, 0x3, 0xc2a}}]}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, &(0x7f00000004c0)=0x27) 14.891653645s ago: executing program 4 (id=3270): syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$NFT_MSG_GETTABLE(0xffffffffffffffff, 0x0, 0x44080) r3 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r3, &(0x7f0000000000)={0x1a, 0x104, 0x6f, 0x0, 0xa1, 0x42}, 0x10) connect$llc(r3, &(0x7f0000000340)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random="48bd00"}, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000540)={'wlan0\x00'}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x800) r4 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r4, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x2, @multicast2}, 0x2, 0x0, 0x4}}, 0x2e) getsockopt$sock_buf(r4, 0x1, 0x1c, 0x0, &(0x7f0000000100)) 12.726526938s ago: executing program 2 (id=3282): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='net/netlink\x00') openat$nullb(0xffffffffffffff9c, &(0x7f0000000300), 0x4000, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) dup(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xe1}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000340)=@abs={0x0, 0x0, 0x4000}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount$nfs(0x0, 0x0, &(0x7f0000000680), 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff}, 0x18) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$SIOCSIFMTU(r1, 0x8922, &(0x7f0000000180)={'veth1_vlan\x00', 0x8a}) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) preadv(r0, &(0x7f0000000280)=[{&(0x7f00000002c0)=""/116, 0x74}, {&(0x7f0000000240)=""/19, 0x13}, {&(0x7f00000003c0)=""/94, 0x5e}, {&(0x7f0000000a00)=""/195, 0xc3}], 0x4, 0x7, 0x101) 11.684305213s ago: executing program 0 (id=3274): syz_open_dev$loop(&(0x7f0000000100), 0xd79, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) write$UHID_INPUT(r0, &(0x7f00000010c0)={0x8, {"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", 0x1000}}, 0x1006) r1 = openat$dsp(0xffffffffffffff9c, 0x0, 0x802, 0x0) socket$igmp(0x2, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r5}, 0x10) setfsgid(0xee00) bind$inet6(0xffffffffffffffff, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r6 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) semctl$GETALL(0x0, 0x0, 0xd, &(0x7f0000000000)=""/26) pipe2$9p(&(0x7f0000000100), 0x80400) socket$xdp(0x2c, 0x3, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r1, 0x40045010, &(0x7f0000000000)) semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f0000000100)=""/203) 11.551521066s ago: executing program 2 (id=3275): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2}}}]}, 0x38}}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@gettclass={0x24, 0x2a, 0x129, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, 0x0, {0xb, 0xd}, {0x0, 0xfff1}, {0x8, 0xfff1}}}, 0x24}}, 0x24040010) 10.474898742s ago: executing program 0 (id=3276): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='net/netlink\x00') openat$nullb(0xffffffffffffff9c, &(0x7f0000000300), 0x4000, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) dup(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xe1}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000340)=@abs={0x0, 0x0, 0x4000}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount$nfs(0x0, 0x0, &(0x7f0000000680), 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff}, 0x18) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$SIOCSIFMTU(r1, 0x8922, &(0x7f0000000180)={'veth1_vlan\x00', 0x8a}) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) preadv(r0, &(0x7f0000000280)=[{&(0x7f00000002c0)=""/116, 0x74}, {&(0x7f0000000240)=""/19, 0x13}, {&(0x7f00000003c0)=""/94, 0x5e}, {&(0x7f0000000a00)=""/195, 0xc3}], 0x4, 0x7, 0x101) 9.201455361s ago: executing program 1 (id=3277): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x40d, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x5, 0x1}, @IFLA_BR_AGEING_TIME={0x8, 0x4, 0x2}]}}}]}, 0x44}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x8b}, 0x0) getrlimit(0xe, &(0x7f00000000c0)) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x1, 0x20}, 0xc) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, 0x0, 0x0) r4 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) close(r4) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000200)={0x0, &(0x7f0000000100)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_SETCRTC(r4, 0xc06864a2, &(0x7f0000000740)={0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "65366a50432b7ee2c7feddd91df868e7cfc6fa7272f3bf0a71b5d0c19323a260"}}) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r7, 0x4b3a, 0x1) ioctl$TCXONC(r7, 0x4b3a, 0x2) bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x3, @loopback, 0x400000}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, 0x0, 0x0) 8.038462509s ago: executing program 1 (id=3278): socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000400)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000002c0)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="a7db9483cae790e452d3566ec8defa14c5753abaaa", @ANYRES32, @ANYBLOB='\x00'/19, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/14], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1c, 0x0, 0x0, 0x8000, 0x2000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) renameat2(r3, &(0x7f0000000c00)='./file1\x00', 0xffffffffffffffff, 0x0, 0x2) r4 = socket$rds(0x15, 0x5, 0x0) bind$rds(r4, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r4, 0x0, 0x0) sendmsg$rds(r4, &(0x7f0000000680)={&(0x7f00000000c0)={0x2, 0x8, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[], 0x5c}}, 0x24040800) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="ec000000", @ANYRES16=r5, @ANYBLOB], 0xec}, 0x1, 0x0, 0x0, 0x4084}, 0x20000010) 8.037031769s ago: executing program 0 (id=3279): r0 = syz_open_dev$usbfs(&(0x7f0000000140), 0x76, 0x101301) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xa}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() prctl$PR_SET_DUMPABLE(0x4, 0x3) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r2, 0x29, 0x4e, &(0x7f0000000000), 0x4) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$int_in(0xffffffffffffffff, 0x5452, 0x0) r5 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r5, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @dev}}, 0x80, &(0x7f0000000140), 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0xff00) socketpair$unix(0x1, 0x5, 0x0, 0x0) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000040)={'team0\x00', &(0x7f0000000140)=@ethtool_sfeatures={0x3b, 0x2, [{0x40209}, {0xffffff7e, 0x5461d6e9}]}}) ioctl$USBDEVFS_CLAIM_PORT(r0, 0x80045519, &(0x7f0000000480)=0x1) 7.97316097s ago: executing program 2 (id=3280): syz_open_dev$loop(&(0x7f0000000100), 0xd79, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) write$UHID_INPUT(r0, &(0x7f00000010c0)={0x8, {"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", 0x1000}}, 0x1006) r1 = openat$dsp(0xffffffffffffff9c, 0x0, 0x802, 0x0) socket$igmp(0x2, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r5}, 0x10) setfsgid(0xee00) bind$inet6(0xffffffffffffffff, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r6 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) semctl$GETALL(0x0, 0x0, 0xd, &(0x7f0000000000)=""/26) pipe2$9p(&(0x7f0000000100), 0x80400) socket$xdp(0x2c, 0x3, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r1, 0x40045010, &(0x7f0000000000)) semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f0000000100)=""/203) 7.9565831s ago: executing program 4 (id=3281): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='net/netlink\x00') openat$nullb(0xffffffffffffff9c, &(0x7f0000000300), 0x4000, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) dup(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xe1}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000340)=@abs={0x0, 0x0, 0x4000}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount$nfs(0x0, 0x0, &(0x7f0000000680), 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff}, 0x18) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$SIOCSIFMTU(r1, 0x8922, &(0x7f0000000180)={'veth1_vlan\x00', 0x8a}) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) preadv(r0, &(0x7f0000000280)=[{&(0x7f00000002c0)=""/116, 0x74}, {&(0x7f0000000240)=""/19, 0x13}, {&(0x7f00000003c0)=""/94, 0x5e}, {&(0x7f0000000a00)=""/195, 0xc3}], 0x4, 0x7, 0x101) 6.981339384s ago: executing program 1 (id=3283): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0}, 0x18) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind$netrom(r2, 0x0, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r3) 5.515399277s ago: executing program 2 (id=3284): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f00000039c0)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0xb7, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000180)={r0, r1}) sendmsg$rds(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f0000002980)=""/4112, 0x1010}], 0x1}, 0x0) write(r2, 0x0, 0x0) recvmmsg(r2, &(0x7f00000006c0)=[{{0x0, 0xffffffffffffff0e, 0x0}, 0x45}], 0x52a, 0x40002000, 0x0) sendmmsg$inet(r2, &(0x7f0000000000), 0x1, 0x20048045) 5.31623572s ago: executing program 1 (id=3285): r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) socket$nl_netfilter(0x10, 0x3, 0xc) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0xb, @empty}, 0x1c) connect$inet6(r0, 0x0, 0x0) syz_usb_connect(0x2, 0x0, 0x0, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, 0x0, &(0x7f0000000140)) socket$kcm(0x10, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x11, 0x80a, 0x0) write(0xffffffffffffffff, &(0x7f0000000000), 0x0) syz_usb_connect(0x2, 0xee2, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], &(0x7f0000001240)={0x0, 0x0, 0x38, &(0x7f0000001280)=ANY=[@ANYBLOB="050f2f000300100109000005590900ff1c100a03240100000000040000c00000603f00000f7eff0000c0000014100403f0eb10f0d3f23f5ea92d272137"], 0x3, [{0x4, &(0x7f00000010c0)=@lang_id={0x4, 0x3, 0x860}}, {0x4, &(0x7f0000001100)=@lang_id={0x4, 0x3, 0x42a}}, {0x4, &(0x7f0000001140)=@lang_id={0x4, 0x3, 0xc2a}}]}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, &(0x7f00000004c0)=0x27) 4.918666876s ago: executing program 4 (id=3286): r0 = socket$netlink(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0xffffff3e) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) timer_create(0x3, 0x0, &(0x7f0000000100)) ioprio_set$pid(0x3, 0x0, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r4, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000001c0)={&(0x7f00000002c0)={0x2c, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98f}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) 4.767852048s ago: executing program 0 (id=3287): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='net/netlink\x00') openat$nullb(0xffffffffffffff9c, &(0x7f0000000300), 0x4000, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) dup(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xe1}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000340)=@abs={0x0, 0x0, 0x4000}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount$nfs(0x0, 0x0, &(0x7f0000000680), 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) ioctl$SIOCSIFMTU(r1, 0x8922, &(0x7f0000000180)={'veth1_vlan\x00', 0x8a}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) preadv(r0, &(0x7f0000000280)=[{&(0x7f00000002c0)=""/116, 0x74}, {&(0x7f0000000240)=""/19, 0x13}, {&(0x7f00000003c0)=""/94, 0x5e}, {&(0x7f0000000a00)=""/195, 0xc3}], 0x4, 0x7, 0x101) 4.767406108s ago: executing program 1 (id=3288): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='net/netlink\x00') openat$nullb(0xffffffffffffff9c, &(0x7f0000000300), 0x4000, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) dup(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xe1}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000340)=@abs={0x0, 0x0, 0x4000}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount$nfs(0x0, 0x0, &(0x7f0000000680), 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff}, 0x18) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$SIOCSIFMTU(r1, 0x8922, &(0x7f0000000180)={'veth1_vlan\x00', 0x8a}) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) preadv(r0, &(0x7f0000000280)=[{&(0x7f00000002c0)=""/116, 0x74}, {&(0x7f0000000240)=""/19, 0x13}, {&(0x7f00000003c0)=""/94, 0x5e}, {&(0x7f0000000a00)=""/195, 0xc3}], 0x4, 0x7, 0x101) 1.858943712s ago: executing program 2 (id=3289): socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000400)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000002c0)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="a7db9483cae790e452d3566ec8defa14c5753abaaa", @ANYRES32, @ANYBLOB='\x00'/19, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/20], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1c, 0x0, 0x0, 0x8000, 0x2000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) renameat2(r3, &(0x7f0000000c00)='./file1\x00', 0xffffffffffffffff, 0x0, 0x2) r4 = socket$rds(0x15, 0x5, 0x0) bind$rds(r4, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r4, 0x0, 0x0) sendmsg$rds(r4, &(0x7f0000000680)={&(0x7f00000000c0)={0x2, 0x8, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[], 0x5c}}, 0x24040800) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="ec000000", @ANYRES16=r5, @ANYBLOB], 0xec}, 0x1, 0x0, 0x0, 0x4084}, 0x20000010) 1.853489652s ago: executing program 4 (id=3290): ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8922, &(0x7f0000000280)={'ip6tnl0\x00', 0x7f}) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, 0x4, 0x8, 0x401, 0x0, 0x0, {}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x3a}, @CTA_TIMEOUT_L3PROTO={0x6}]}, 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r0, 0x8914, &(0x7f0000000000)) openat$tun(0xffffff9c, 0x0, 0xe000, 0x0) syz_init_net_socket$rose(0xb, 0x5, 0x0) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r1, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1, @null}, 0x1c) r2 = socket$caif_seqpacket(0x25, 0x5, 0x0) sendmsg$inet(r2, 0x0, 0x40) connect$rose(r1, &(0x7f00000000c0)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, 0x5, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @null]}, 0x40) connect$rose(0xffffffffffffffff, &(0x7f0000000140)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x2, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x40) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) 1.634374806s ago: executing program 1 (id=3291): syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$NFT_MSG_GETTABLE(0xffffffffffffffff, 0x0, 0x44080) r3 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r3, &(0x7f0000000000)={0x1a, 0x104, 0x6f, 0x0, 0xa1, 0x42}, 0x10) connect$llc(r3, &(0x7f0000000340)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random="48bd00"}, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000540)={'wlan0\x00'}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x800) r4 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r4, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x2, @multicast2}, 0x2, 0x0, 0x4}}, 0x2e) getsockopt$sock_buf(r4, 0x1, 0x1c, 0x0, &(0x7f0000000100)) 924.811007ms ago: executing program 2 (id=3292): ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8922, &(0x7f0000000280)={'ip6tnl0\x00', 0x7f}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r1, 0x8914, &(0x7f0000000000)) openat$tun(0xffffff9c, 0x0, 0xe000, 0x0) syz_init_net_socket$rose(0xb, 0x5, 0x0) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r2, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1, @null}, 0x1c) r3 = socket$caif_seqpacket(0x25, 0x5, 0x0) sendmsg$inet(r3, 0x0, 0x40) connect$rose(r2, &(0x7f00000000c0)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, 0x5, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @null]}, 0x40) connect$rose(0xffffffffffffffff, &(0x7f0000000140)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x2, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x40) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) 600.744921ms ago: executing program 0 (id=3293): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='net/netlink\x00') openat$nullb(0xffffffffffffff9c, &(0x7f0000000300), 0x4000, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) dup(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xe1}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000340)=@abs={0x0, 0x0, 0x4000}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount$nfs(0x0, 0x0, &(0x7f0000000680), 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff}, 0x18) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$SIOCSIFMTU(r1, 0x8922, &(0x7f0000000180)={'veth1_vlan\x00', 0x8a}) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) preadv(r0, &(0x7f0000000280)=[{&(0x7f00000002c0)=""/116, 0x74}, {&(0x7f0000000240)=""/19, 0x13}, {&(0x7f00000003c0)=""/94, 0x5e}, {&(0x7f0000000a00)=""/195, 0xc3}], 0x4, 0x7, 0x101) 549.078412ms ago: executing program 4 (id=3294): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind$netrom(r1, 0x0, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r2) 0s ago: executing program 4 (id=3295): syz_open_dev$loop(&(0x7f0000000100), 0xd79, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) write$UHID_INPUT(r0, &(0x7f00000010c0)={0x8, {"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", 0x1000}}, 0x1006) r1 = openat$dsp(0xffffffffffffff9c, 0x0, 0x802, 0x0) socket$igmp(0x2, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r5}, 0x10) setfsgid(0xee00) bind$inet6(0xffffffffffffffff, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r6 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) semctl$GETALL(0x0, 0x0, 0xd, &(0x7f0000000000)=""/26) pipe2$9p(&(0x7f0000000100), 0x80400) socket$xdp(0x2c, 0x3, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r1, 0x40045010, &(0x7f0000000000)) semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f0000000100)=""/203) kernel console output (not intermixed with test programs): ue, screwing up backlog [ 696.939092][ T4520] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 696.941394][ T4520] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 696.946043][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 696.948296][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 696.950526][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 696.953553][ T4712] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 699.784569][T13062] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 699.787152][T13062] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 702.574534][T10893] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 702.576946][T10893] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 702.579179][T10893] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 702.581473][T10893] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 702.587381][T11144] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 702.589670][T11144] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 702.591873][T11144] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 702.595026][ T4712] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 702.902500][T13101] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2783'. [ 702.905138][T13101] netlink: 'syz.2.2783': attribute type 5 has an invalid length. [ 702.907181][T13101] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2783'. [ 706.920798][T13115] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 706.923409][T13115] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 709.672321][T10187] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 709.674692][T10187] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 709.676877][T10187] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 709.678985][T10187] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 709.774147][T11143] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 709.776576][T11143] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 709.778870][T11143] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 709.798041][ T4543] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 710.251078][T13156] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2798'. [ 710.253573][T13156] netlink: 'syz.3.2798': attribute type 5 has an invalid length. [ 710.255841][T13156] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2798'. [ 710.260484][T13156] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 710.262912][T13156] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 710.265336][T13156] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 710.267653][T13156] device geneve2 entered promiscuous mode [ 711.603467][T13155] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 711.657527][T13155] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 711.676434][T13155] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 711.741521][T13155] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 711.885247][T13155] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 711.887600][T13155] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 713.019109][ T4520] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 713.027536][ T4520] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 713.219745][T13183] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 713.230375][T13183] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 713.280773][ T4520] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 713.308353][ T4520] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 713.935832][ T4300] Bluetooth: hci5: command 0x0409 tx timeout [ 713.946591][ T4520] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 714.311691][ T4520] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 714.331271][T13190] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 714.335189][T13190] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 714.338117][T13190] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 714.340251][T13190] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 714.342385][T13190] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 714.344690][T13190] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 714.346851][T13190] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 714.525890][ T4520] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 714.528923][ T4520] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 714.548067][T13153] chnl_net:caif_netlink_parms(): no params data found [ 714.710883][T13153] bridge0: port 1(bridge_slave_0) entered blocking state [ 714.712744][T13153] bridge0: port 1(bridge_slave_0) entered disabled state [ 714.718013][T13153] device bridge_slave_0 entered promiscuous mode [ 714.734486][T13153] bridge0: port 2(bridge_slave_1) entered blocking state [ 714.736610][T13153] bridge0: port 2(bridge_slave_1) entered disabled state [ 714.739354][T13153] device bridge_slave_1 entered promiscuous mode [ 714.929697][T13153] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 714.939354][T13153] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 715.006400][T13153] team0: Port device team_slave_0 added [ 715.012523][T13153] team0: Port device team_slave_1 added [ 715.049788][T13153] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 715.058352][T13153] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 715.076266][T13153] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 715.091990][T13153] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 715.096439][T13153] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 715.111710][T13153] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 715.366379][T13153] device hsr_slave_0 entered promiscuous mode [ 716.116376][ T4300] Bluetooth: hci5: command 0x041b tx timeout [ 716.267372][T13153] device hsr_slave_1 entered promiscuous mode [ 716.453857][T13153] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 716.457466][T13153] Cannot create hsr debugfs directory [ 717.907307][T13242] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 717.914198][T13242] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 718.183841][ T4300] Bluetooth: hci5: command 0x040f tx timeout [ 719.248140][ T4712] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 720.253912][T13155] Bluetooth: hci5: command 0x0419 tx timeout [ 722.049168][ T4520] bond0: (slave wlan1): Releasing backup interface [ 722.094753][ T4520] device wlan1 left promiscuous mode [ 722.364181][T13264] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 722.368087][T13264] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 722.370338][T13264] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 722.372503][T13264] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 722.374746][T13264] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 722.377017][T13264] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 722.379189][T13264] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 722.383439][T13264] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 722.385708][T13264] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 722.882822][T13153] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 722.977745][T13153] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 723.038556][T13153] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 723.086555][ T4520] device hsr_slave_0 left promiscuous mode [ 723.124571][ T4520] device hsr_slave_1 left promiscuous mode [ 723.235510][ T4520] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 723.240032][ T4520] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 723.247732][ T4520] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 723.255322][ T4520] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 723.266706][ T4520] device macsec0 left promiscuous mode [ 723.275094][ T4520] bridge0: port 3(macsec0) entered disabled state [ 723.458647][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 724.274563][T13312] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 724.363842][ T4520] device bridge_slave_1 left promiscuous mode [ 724.365861][ T4520] bridge0: port 2(bridge_slave_1) entered disabled state [ 724.415227][ T4520] device bridge_slave_0 left promiscuous mode [ 724.417214][ T4520] bridge0: port 1(bridge_slave_0) entered disabled state [ 725.394364][ T4520] device veth1_macvtap left promiscuous mode [ 725.396847][ T4520] device veth0_macvtap left promiscuous mode [ 725.398607][ T4520] device veth1_vlan left promiscuous mode [ 725.400409][ T4520] device veth0_vlan left promiscuous mode [ 725.803892][T11144] usb 1-1: new full-speed USB device number 28 using dummy_hcd [ 725.985417][T11144] usb 1-1: unable to get BOS descriptor or descriptor too short [ 725.988453][T11144] usb 1-1: not running at top speed; connect to a high speed hub [ 725.991998][T11144] usb 1-1: config 128 has an invalid interface number: 15 but max is 3 [ 725.994826][T11144] usb 1-1: config 128 contains an unexpected descriptor of type 0x1, skipping [ 725.997245][T11144] usb 1-1: config 128 has an invalid interface number: 6 but max is 3 [ 725.999714][T11144] usb 1-1: config 128 contains an unexpected descriptor of type 0x2, skipping [ 726.002292][T11144] usb 1-1: config 128 contains an unexpected descriptor of type 0x1, skipping [ 726.012817][T11144] usb 1-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 726.027661][T11144] usb 1-1: config 128 has 2 interfaces, different from the descriptor's value: 4 [ 726.030324][T11144] usb 1-1: config 128 has no interface number 0 [ 726.032111][T11144] usb 1-1: config 128 has no interface number 1 [ 726.034238][T11144] usb 1-1: config 128 interface 15 altsetting 1 endpoint 0xA has invalid maxpacket 1024, setting to 64 [ 726.037261][T11144] usb 1-1: config 128 interface 15 altsetting 1 has an invalid endpoint with address 0x0, skipping [ 726.040130][T11144] usb 1-1: config 128 interface 15 altsetting 1 has an invalid endpoint with address 0x0, skipping [ 726.043108][T11144] usb 1-1: config 128 interface 15 altsetting 1 has a duplicate endpoint with address 0xA, skipping [ 726.046544][T11144] usb 1-1: config 128 interface 15 altsetting 1 has an invalid endpoint with address 0x0, skipping [ 726.049420][T11144] usb 1-1: config 128 interface 15 altsetting 1 has an invalid endpoint with address 0x0, skipping [ 726.052375][T11144] usb 1-1: config 128 interface 15 altsetting 1 has a duplicate endpoint with address 0xE, skipping [ 726.055805][T11144] usb 1-1: config 128 interface 15 altsetting 1 has an invalid endpoint with address 0x27, skipping [ 726.058761][T11144] usb 1-1: config 128 interface 15 altsetting 1 has 10 endpoint descriptors, different from the interface descriptor's value: 9 [ 726.062472][T11144] usb 1-1: config 128 interface 6 altsetting 3 has 0 endpoint descriptors, different from the interface descriptor's value: 13 [ 726.077839][T11144] usb 1-1: config 128 interface 15 has no altsetting 0 [ 726.079871][T11144] usb 1-1: config 128 interface 6 has no altsetting 0 [ 726.083455][T11144] usb 1-1: New USB device found, idVendor=0411, idProduct=0097, bcdDevice=d5.83 [ 726.086281][T11144] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 726.088481][T11144] usb 1-1: Product: ప [ 726.089607][T11144] usb 1-1: Manufacturer: Ъ [ 726.090848][T11144] usb 1-1: SerialNumber: 밸奒⨰뎀ᥙ䴘쩳䚡璚䷙赽壒胹杒䊩䩳Ꮂꓘ搦盧硸库嶲᳠츿⫔谧鉎ﺌ㈌弴䆹㦾덮巪㊸ﻕᏺ좏纶킜낳娽㨟跎鋂い⿮ꇭ셹䋊촵쥊셷䑜㥊Ů볲孡䢾㝌함㤌๹坪瑩땮거饍 [ 726.105102][T13332] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 726.108212][T13332] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 726.322312][T11144] usb 1-1: USB disconnect, device number 28 [ 728.428234][ T4520] team0 (unregistering): Port device team_slave_1 removed [ 728.614699][ T4520] device team_slave_0 left promiscuous mode [ 728.618951][ T4520] team0 (unregistering): Port device team_slave_0 removed [ 728.814087][T11144] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 728.818420][ T4520] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 728.854976][ T4520] device bond_slave_1 left promiscuous mode [ 729.045180][ T4520] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 729.084194][ T4520] device bond_slave_0 left promiscuous mode [ 731.535539][ T4520] bond0 (unregistering): Released all slaves [ 731.757314][T13153] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 731.807433][T13323] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2835'. [ 731.810048][T13323] netlink: 'syz.4.2835': attribute type 5 has an invalid length. [ 731.812081][T13323] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2835'. [ 734.977083][T13153] 8021q: adding VLAN 0 to HW filter on device bond0 [ 735.055794][T13153] 8021q: adding VLAN 0 to HW filter on device team0 [ 735.057988][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 735.060539][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 735.113162][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 735.116229][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 735.121405][ T4363] bridge0: port 1(bridge_slave_0) entered blocking state [ 735.123391][ T4363] bridge0: port 1(bridge_slave_0) entered forwarding state [ 736.324192][T13368] netlink: 'syz.4.2847': attribute type 10 has an invalid length. [ 736.983628][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 736.986819][T13369] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2845'. [ 736.989480][T13369] netlink: 'syz.2.2845': attribute type 5 has an invalid length. [ 736.996978][T13369] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2845'. [ 737.011264][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 737.014656][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 737.019466][ T4363] bridge0: port 2(bridge_slave_1) entered blocking state [ 737.021520][ T4363] bridge0: port 2(bridge_slave_1) entered forwarding state [ 737.059347][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 737.065975][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 737.080022][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 737.140122][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 737.146888][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 737.155933][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 737.168542][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 737.176558][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 737.186411][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 737.257987][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 737.260851][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 737.272724][T13153] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 738.868181][T13391] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2851'. [ 738.870790][T13391] netlink: 'syz.2.2851': attribute type 5 has an invalid length. [ 738.873017][T13391] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2851'. [ 739.907560][T13404] netlink: 'syz.0.2856': attribute type 1 has an invalid length. [ 741.905316][ T2059] ieee802154 phy0 wpan0: encryption failed: -22 [ 741.913316][ T2059] ieee802154 phy1 wpan1: encryption failed: -22 [ 742.447438][T13404] 8021q: adding VLAN 0 to HW filter on device bond3 [ 744.713166][T10187] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 744.715632][T10187] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 744.721974][T13153] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 744.797705][ T4520] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 744.801381][ T4520] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 744.830894][ T4520] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 744.834448][ T4520] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 744.838205][ T4520] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 744.862943][ T4520] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 745.023398][T13443] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2863'. [ 745.026148][T13443] netlink: 'syz.3.2863': attribute type 5 has an invalid length. [ 745.028446][T13443] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2863'. [ 746.318875][T13153] device veth0_vlan entered promiscuous mode [ 746.361215][T13153] device veth1_vlan entered promiscuous mode [ 746.383048][ T4519] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 746.386167][ T4519] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 746.392881][T13153] device veth0_macvtap entered promiscuous mode [ 746.479082][T13153] device veth1_macvtap entered promiscuous mode [ 746.509937][T13153] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 746.520515][T13153] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 746.529886][T13153] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 746.548724][T13153] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 746.551789][T13153] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 746.570492][T13153] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 746.577861][T13153] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 746.580652][T13153] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 747.223091][T13153] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 747.235959][ T4393] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 747.238995][ T4393] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 747.241805][ T4393] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 747.259378][ T4393] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 747.283001][T13153] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 747.301976][T13153] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 747.306352][T13153] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 747.309188][T13153] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 747.311728][T13153] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 747.321513][T13153] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 747.324376][T13153] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 747.327361][T13153] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 747.331181][T13153] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 747.334222][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 747.341582][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 747.372488][T13153] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 747.383794][T13153] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 747.393990][T13153] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 747.407988][T13153] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 747.468626][T13460] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2870'. [ 748.369989][ T4717] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 748.445954][ T55] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 748.448388][ T55] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 748.461020][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 748.478709][T13470] netlink: 'syz.4.2871': attribute type 1 has an invalid length. [ 748.515256][T13470] 8021q: adding VLAN 0 to HW filter on device bond1 [ 748.527996][ T4391] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 748.530406][ T4391] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 748.609867][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 753.830234][T13511] netlink: 'syz.1.2881': attribute type 10 has an invalid length. [ 753.900894][T13512] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2881'. [ 753.983576][T13511] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 756.374662][T13533] netlink: 'syz.2.2886': attribute type 1 has an invalid length. [ 756.501980][T13533] 8021q: adding VLAN 0 to HW filter on device bond1 [ 760.983841][ T27] kauditd_printk_skb: 23 callbacks suppressed [ 760.983880][ T27] audit: type=1326 audit(4129213921.130:1975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13565 comm="syz.2.2893" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9af5a8a8 code=0x7ffc0000 [ 761.894421][ T27] audit: type=1326 audit(4129213921.130:1976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13565 comm="syz.2.2893" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9af5a8a8 code=0x7ffc0000 [ 762.115445][ T27] audit: type=1326 audit(4129213921.130:1977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13565 comm="syz.2.2893" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=79 compat=0 ip=0xffff9af5a8a8 code=0x7ffc0000 [ 762.313609][ T27] audit: type=1326 audit(4129213921.130:1978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13565 comm="syz.2.2893" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9af5a8a8 code=0x7ffc0000 [ 762.507164][ T27] audit: type=1326 audit(4129213921.130:1979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13565 comm="syz.2.2893" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9af5a8a8 code=0x7ffc0000 [ 762.529021][ T27] audit: type=1326 audit(4129213921.130:1980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13565 comm="syz.2.2893" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffff9af5a8a8 code=0x7ffc0000 [ 762.543926][ T27] audit: type=1326 audit(4129213921.130:1981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13565 comm="syz.2.2893" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9af5a8a8 code=0x7ffc0000 [ 762.549999][ T27] audit: type=1326 audit(4129213921.130:1982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13565 comm="syz.2.2893" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9af5a8a8 code=0x7ffc0000 [ 762.562056][ T27] audit: type=1326 audit(4129213921.130:1983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13565 comm="syz.2.2893" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffff9af5a8a8 code=0x7ffc0000 [ 762.568289][ T27] audit: type=1326 audit(4129213921.130:1984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13565 comm="syz.2.2893" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9af5a8a8 code=0x7ffc0000 [ 762.637957][T13575] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2895'. [ 762.689825][T13575] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2895'. [ 764.033945][ T4543] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 764.400523][T13600] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2900'. [ 764.403140][T13600] netlink: 'syz.3.2900': attribute type 5 has an invalid length. [ 764.405384][T13600] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2900'. [ 765.569482][T13588] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 767.864029][ T4543] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 768.394825][ T27] kauditd_printk_skb: 21 callbacks suppressed [ 768.396225][ T27] audit: type=1326 audit(4129213928.540:2006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13617 comm="syz.0.2909" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaef5a8a8 code=0x7ffc0000 [ 768.402797][ T27] audit: type=1326 audit(4129213928.540:2007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13617 comm="syz.0.2909" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaef5a8a8 code=0x7ffc0000 [ 768.411995][ T27] audit: type=1326 audit(4129213928.540:2008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13617 comm="syz.0.2909" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=79 compat=0 ip=0xffffaef5a8a8 code=0x7ffc0000 [ 768.417162][ T27] audit: type=1326 audit(4129213928.540:2009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13617 comm="syz.0.2909" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaef5a8a8 code=0x7ffc0000 [ 768.419510][ T27] audit: type=1326 audit(4129213928.540:2010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13617 comm="syz.0.2909" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaef5a8a8 code=0x7ffc0000 [ 768.422167][ T27] audit: type=1326 audit(4129213928.550:2011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13617 comm="syz.0.2909" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffffaef5a8a8 code=0x7ffc0000 [ 768.424898][ T27] audit: type=1326 audit(4129213928.550:2012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13617 comm="syz.0.2909" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaef5a8a8 code=0x7ffc0000 [ 768.427129][ T27] audit: type=1326 audit(4129213928.550:2013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13617 comm="syz.0.2909" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaef5a8a8 code=0x7ffc0000 [ 768.428564][ T27] audit: type=1326 audit(4129213928.550:2014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13617 comm="syz.0.2909" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffffaef5a8a8 code=0x7ffc0000 [ 768.430644][ T27] audit: type=1326 audit(4129213928.550:2015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13617 comm="syz.0.2909" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaef5a8a8 code=0x7ffc0000 [ 769.367328][T13624] fuse: Unknown parameter 'use00000000000000000000' [ 771.239724][T13649] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 771.250967][T13649] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 771.335745][T13651] loop4: detected capacity change from 0 to 4096 [ 773.425533][T13670] fuse: Unknown parameter 'user_id00000000000000000000' [ 773.751331][T13680] loop0: detected capacity change from 0 to 4096 [ 775.543834][ T27] kauditd_printk_skb: 21 callbacks suppressed [ 775.543851][ T27] audit: type=1326 audit(4129213935.260:2037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13678 comm="syz.4.2924" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa255a8a8 code=0x7ffc0000 [ 775.553135][ T27] audit: type=1326 audit(4129213935.260:2038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13678 comm="syz.4.2924" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa255a8a8 code=0x7ffc0000 [ 775.591563][ T27] audit: type=1326 audit(4129213935.340:2039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13678 comm="syz.4.2924" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=79 compat=0 ip=0xffffa255a8a8 code=0x7ffc0000 [ 775.598527][ T27] audit: type=1326 audit(4129213935.340:2040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13678 comm="syz.4.2924" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa255a8a8 code=0x7ffc0000 [ 775.614338][ T27] audit: type=1326 audit(4129213935.340:2041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13678 comm="syz.4.2924" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa255a8a8 code=0x7ffc0000 [ 776.209692][ T27] audit: type=1326 audit(4129213935.340:2042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13678 comm="syz.4.2924" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffffa255a8a8 code=0x7ffc0000 [ 776.303816][ T27] audit: type=1326 audit(4129213935.340:2043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13678 comm="syz.4.2924" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa255a8a8 code=0x7ffc0000 [ 776.310546][ T27] audit: type=1326 audit(4129213935.340:2044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13678 comm="syz.4.2924" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa255a8a8 code=0x7ffc0000 [ 776.317859][ T27] audit: type=1326 audit(4129213935.340:2045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13678 comm="syz.4.2924" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffffa255a8a8 code=0x7ffc0000 [ 776.342380][ T27] audit: type=1326 audit(4129213935.340:2046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13678 comm="syz.4.2924" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa255a8a8 code=0x7ffc0000 [ 778.102425][T13709] netlink: 'syz.3.2932': attribute type 10 has an invalid length. [ 778.107200][T13708] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 778.109701][T13708] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 778.875214][T13709] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2932'. [ 780.491453][T13731] loop3: detected capacity change from 0 to 4096 [ 780.495456][T13718] fuse: Unknown parameter 'use00000000000000000000' [ 781.715061][ T27] kauditd_printk_skb: 21 callbacks suppressed [ 781.715100][ T27] audit: type=1326 audit(4129213941.790:2068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13734 comm="syz.0.2941" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaef5a8a8 code=0x7ffc0000 [ 781.724983][ T27] audit: type=1326 audit(4129213941.790:2069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13734 comm="syz.0.2941" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaef5a8a8 code=0x7ffc0000 [ 782.302060][ T27] audit: type=1326 audit(4129213941.800:2070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13734 comm="syz.0.2941" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=79 compat=0 ip=0xffffaef5a8a8 code=0x7ffc0000 [ 782.317476][ T27] audit: type=1326 audit(4129213941.800:2071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13734 comm="syz.0.2941" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaef5a8a8 code=0x7ffc0000 [ 782.329582][ T27] audit: type=1326 audit(4129213941.800:2072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13734 comm="syz.0.2941" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaef5a8a8 code=0x7ffc0000 [ 782.336618][ T27] audit: type=1326 audit(4129213941.810:2073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13734 comm="syz.0.2941" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffffaef5a8a8 code=0x7ffc0000 [ 782.479667][ T27] audit: type=1326 audit(4129213941.810:2074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13734 comm="syz.0.2941" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaef5a8a8 code=0x7ffc0000 [ 782.501980][ T27] audit: type=1326 audit(4129213941.810:2075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13734 comm="syz.0.2941" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaef5a8a8 code=0x7ffc0000 [ 782.843752][ T27] audit: type=1326 audit(4129213941.810:2076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13734 comm="syz.0.2941" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=203 compat=0 ip=0xffffaef5a8a8 code=0x7ffc0000 [ 782.850057][ T27] audit: type=1326 audit(4129213941.810:2077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13734 comm="syz.0.2941" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaef5a8a8 code=0x7ffc0000 [ 787.114865][T13763] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 787.117420][T13763] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 787.122059][T13766] netlink: 'syz.0.2947': attribute type 10 has an invalid length. [ 787.141267][T13766] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2947'. [ 787.856364][ T27] kauditd_printk_skb: 4 callbacks suppressed [ 787.856433][ T27] audit: type=1326 audit(4129213947.560:2082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13762 comm="syz.4.2946" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa255a8a8 code=0x7ffc0000 [ 788.004694][ T4543] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 788.030742][ T27] audit: type=1326 audit(4129213947.560:2083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13762 comm="syz.4.2946" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa255a8a8 code=0x7ffc0000 [ 788.069372][ T27] audit: type=1326 audit(4129213947.580:2084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13762 comm="syz.4.2946" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=79 compat=0 ip=0xffffa255a8a8 code=0x7ffc0000 [ 788.075719][ T27] audit: type=1326 audit(4129213947.580:2085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13762 comm="syz.4.2946" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa255a8a8 code=0x7ffc0000 [ 788.081865][ T27] audit: type=1326 audit(4129213947.580:2086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13762 comm="syz.4.2946" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa255a8a8 code=0x7ffc0000 [ 788.088068][ T27] audit: type=1326 audit(4129213947.590:2087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13762 comm="syz.4.2946" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffffa255a8a8 code=0x7ffc0000 [ 788.094103][ T27] audit: type=1326 audit(4129213947.590:2088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13762 comm="syz.4.2946" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa255a8a8 code=0x7ffc0000 [ 788.100147][ T27] audit: type=1326 audit(4129213947.590:2089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13762 comm="syz.4.2946" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa255a8a8 code=0x7ffc0000 [ 788.106191][ T27] audit: type=1326 audit(4129213947.610:2090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13762 comm="syz.4.2946" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffffa255a8a8 code=0x7ffc0000 [ 788.115789][ T27] audit: type=1326 audit(4129213947.610:2091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13762 comm="syz.4.2946" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa255a8a8 code=0x7ffc0000 [ 788.412370][T13781] fuse: Unknown parameter 'use00000000000000000000' [ 793.501468][T13822] netlink: 'syz.4.2962': attribute type 10 has an invalid length. [ 793.549741][T13822] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2962'. [ 793.739665][T13155] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 793.768021][T13155] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 793.771045][T13155] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 793.773611][T13155] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 793.784594][T13155] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 793.787526][T13155] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 794.052037][T13830] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 794.076416][T13830] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 795.433523][T13834] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 795.801169][T10309] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 795.806563][T10309] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 796.042251][T13155] Bluetooth: hci1: command 0x0409 tx timeout [ 797.310279][ T27] kauditd_printk_skb: 38 callbacks suppressed [ 797.310295][ T27] audit: type=1326 audit(4129213956.270:2130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13843 comm="syz.3.2969" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb815a8a8 code=0x7ffc0000 [ 797.334521][ T27] audit: type=1326 audit(4129213956.270:2131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13843 comm="syz.3.2969" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb815a8a8 code=0x7ffc0000 [ 797.381777][ T27] audit: type=1326 audit(4129213956.300:2132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13843 comm="syz.3.2969" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=79 compat=0 ip=0xffffb815a8a8 code=0x7ffc0000 [ 797.417288][ T27] audit: type=1326 audit(4129213956.300:2133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13843 comm="syz.3.2969" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb815a8a8 code=0x7ffc0000 [ 797.447157][ T27] audit: type=1326 audit(4129213956.300:2134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13843 comm="syz.3.2969" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb815a8a8 code=0x7ffc0000 [ 798.286015][T13155] Bluetooth: hci1: command 0x041b tx timeout [ 798.660987][ T27] audit: type=1326 audit(4129213956.310:2135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13843 comm="syz.3.2969" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffffb815a8a8 code=0x7ffc0000 [ 798.700382][ T27] audit: type=1326 audit(4129213956.310:2136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13843 comm="syz.3.2969" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb815a8a8 code=0x7ffc0000 [ 798.856366][ T27] audit: type=1326 audit(4129213956.310:2137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13843 comm="syz.3.2969" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb815a8a8 code=0x7ffc0000 [ 798.862989][ T27] audit: type=1326 audit(4129213956.320:2138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13843 comm="syz.3.2969" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=203 compat=0 ip=0xffffb815a8a8 code=0x7ffc0000 [ 798.871917][ T27] audit: type=1326 audit(4129213956.320:2139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13843 comm="syz.3.2969" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb815a8a8 code=0x7ffc0000 [ 798.891607][T10309] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 798.900932][T10309] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 799.295878][T13864] netlink: 'syz.1.2973': attribute type 10 has an invalid length. [ 799.585183][T13869] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2973'. [ 800.784701][T13825] chnl_net:caif_netlink_parms(): no params data found [ 800.803845][T13155] Bluetooth: hci1: command 0x040f tx timeout [ 801.615740][T10309] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 801.618969][T10309] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 801.631863][T13883] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2976'. [ 801.634716][T13883] netlink: 'syz.3.2976': attribute type 5 has an invalid length. [ 801.636792][T13883] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2976'. [ 801.774402][ T2059] ieee802154 phy0 wpan0: encryption failed: -22 [ 801.776250][ T2059] ieee802154 phy1 wpan1: encryption failed: -22 [ 802.492169][T13895] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 802.506918][T10309] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 802.509809][T10309] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 802.526366][T13895] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 802.719199][T13825] bridge0: port 1(bridge_slave_0) entered blocking state [ 802.721235][T13825] bridge0: port 1(bridge_slave_0) entered disabled state [ 802.728731][T13825] device bridge_slave_0 entered promiscuous mode [ 802.738532][T13825] bridge0: port 2(bridge_slave_1) entered blocking state [ 802.740639][T13825] bridge0: port 2(bridge_slave_1) entered disabled state [ 802.743260][T13825] device bridge_slave_1 entered promiscuous mode [ 803.768435][T13155] Bluetooth: hci1: command 0x0419 tx timeout [ 803.777617][ T27] kauditd_printk_skb: 21 callbacks suppressed [ 803.777654][ T27] audit: type=1326 audit(4129213963.960:2161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13897 comm="syz.0.2982" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaef5a8a8 code=0x7ffc0000 [ 803.983969][ T27] audit: type=1326 audit(4129213963.960:2162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13897 comm="syz.0.2982" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaef5a8a8 code=0x7ffc0000 [ 804.021852][ T27] audit: type=1326 audit(4129213963.960:2163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13897 comm="syz.0.2982" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=79 compat=0 ip=0xffffaef5a8a8 code=0x7ffc0000 [ 804.030926][T13825] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 804.051945][T13825] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 804.084351][ T27] audit: type=1326 audit(4129213963.960:2164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13897 comm="syz.0.2982" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaef5a8a8 code=0x7ffc0000 [ 804.090579][ T27] audit: type=1326 audit(4129213963.960:2165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13897 comm="syz.0.2982" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaef5a8a8 code=0x7ffc0000 [ 804.134805][ T27] audit: type=1326 audit(4129213963.960:2166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13897 comm="syz.0.2982" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffffaef5a8a8 code=0x7ffc0000 [ 804.165940][T13825] team0: Port device team_slave_0 added [ 804.246850][ T27] audit: type=1326 audit(4129213963.960:2167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13897 comm="syz.0.2982" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaef5a8a8 code=0x7ffc0000 [ 804.253366][ T27] audit: type=1326 audit(4129213963.960:2168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13897 comm="syz.0.2982" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaef5a8a8 code=0x7ffc0000 [ 804.273870][ T27] audit: type=1326 audit(4129213963.960:2169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13897 comm="syz.0.2982" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=203 compat=0 ip=0xffffaef5a8a8 code=0x7ffc0000 [ 804.279993][ T27] audit: type=1326 audit(4129213963.960:2170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13897 comm="syz.0.2982" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaef5a8a8 code=0x7ffc0000 [ 804.313360][T13825] team0: Port device team_slave_1 added [ 805.491139][T13825] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 805.493243][T13825] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 805.525849][T13825] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 805.536301][T13825] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 805.538353][T13825] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 805.554698][T13825] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 806.827859][T13926] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2988'. [ 806.830466][T13926] netlink: 'syz.1.2988': attribute type 5 has an invalid length. [ 806.832587][T13926] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2988'. [ 806.838686][T13926] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 806.841089][T13926] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 806.843358][T13926] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 806.846173][T13926] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 806.848723][T13926] device geneve2 entered promiscuous mode [ 806.863030][T13929] netlink: 'syz.0.2990': attribute type 10 has an invalid length. [ 807.013260][T13929] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2990'. [ 807.046136][T13825] device hsr_slave_0 entered promiscuous mode [ 807.074393][T13825] device hsr_slave_1 entered promiscuous mode [ 807.843930][T13825] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 807.849509][T13825] Cannot create hsr debugfs directory [ 807.853887][T13941] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2991'. [ 807.856416][T13941] netlink: 'syz.4.2991': attribute type 5 has an invalid length. [ 807.858624][T13941] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2991'. [ 810.165275][ T27] kauditd_printk_skb: 4 callbacks suppressed [ 810.166343][ T27] audit: type=1326 audit(4129213970.240:2175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13953 comm="syz.4.2994" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa255a8a8 code=0x7ffc0000 [ 810.326031][ T27] audit: type=1326 audit(4129213970.280:2176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13953 comm="syz.4.2994" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa255a8a8 code=0x7ffc0000 [ 810.339494][T13959] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 810.342100][T13959] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 813.557723][T14006] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3004'. [ 814.168284][T13999] netlink: 'syz.1.3004': attribute type 10 has an invalid length. [ 815.373960][T14029] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3015'. [ 815.376852][T14029] netlink: 'syz.0.3015': attribute type 5 has an invalid length. [ 815.378952][T14029] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3015'. [ 816.829238][T14043] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 816.831711][T14043] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 817.259779][ T27] audit: type=1326 audit(4129213977.400:2177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14035 comm="syz.0.3008" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaef5a8a8 code=0x7ffc0000 [ 817.336250][ T27] audit: type=1326 audit(4129213977.400:2178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14035 comm="syz.0.3008" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaef5a8a8 code=0x7ffc0000 [ 817.492282][ T27] audit: type=1326 audit(4129213977.450:2179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14035 comm="syz.0.3008" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=79 compat=0 ip=0xffffaef5a8a8 code=0x7ffc0000 [ 817.529371][ T27] audit: type=1326 audit(4129213977.450:2180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14035 comm="syz.0.3008" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaef5a8a8 code=0x7ffc0000 [ 817.584671][ T27] audit: type=1326 audit(4129213977.450:2181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14035 comm="syz.0.3008" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaef5a8a8 code=0x7ffc0000 [ 817.693550][ T27] audit: type=1326 audit(4129213977.450:2182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14035 comm="syz.0.3008" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffffaef5a8a8 code=0x7ffc0000 [ 817.795032][ T27] audit: type=1326 audit(4129213977.450:2183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14035 comm="syz.0.3008" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaef5a8a8 code=0x7ffc0000 [ 817.868614][ T27] audit: type=1326 audit(4129213977.450:2184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14035 comm="syz.0.3008" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaef5a8a8 code=0x7ffc0000 [ 817.934028][ T27] audit: type=1326 audit(4129213977.450:2185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14035 comm="syz.0.3008" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=203 compat=0 ip=0xffffaef5a8a8 code=0x7ffc0000 [ 817.988211][ T27] audit: type=1326 audit(4129213977.450:2186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14035 comm="syz.0.3008" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaef5a8a8 code=0x7ffc0000 [ 818.228425][T14074] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3017'. [ 818.366922][T14069] netlink: 'syz.0.3017': attribute type 10 has an invalid length. [ 820.614107][T10309] bond0: (slave wlan1): Releasing backup interface [ 820.811012][T10309] device wlan1 left promiscuous mode [ 821.643361][T14100] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3022'. [ 821.647301][T14100] netlink: 'syz.1.3022': attribute type 5 has an invalid length. [ 821.649478][T14100] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3022'. [ 821.978339][T14105] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 821.980907][T14105] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 822.994720][ T27] kauditd_printk_skb: 4 callbacks suppressed [ 822.994865][ T27] audit: type=1326 audit(4129213982.510:2191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14108 comm="syz.3.3026" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb815a8a8 code=0x7ffc0000 [ 823.355956][ T27] audit: type=1326 audit(4129213982.510:2192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14108 comm="syz.3.3026" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb815a8a8 code=0x7ffc0000 [ 823.365892][ T27] audit: type=1326 audit(4129213982.520:2193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14108 comm="syz.3.3026" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=79 compat=0 ip=0xffffb815a8a8 code=0x7ffc0000 [ 823.375981][ T27] audit: type=1326 audit(4129213982.520:2194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14108 comm="syz.3.3026" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb815a8a8 code=0x7ffc0000 [ 823.386621][ T27] audit: type=1326 audit(4129213982.520:2195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14108 comm="syz.3.3026" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb815a8a8 code=0x7ffc0000 [ 823.394522][ T27] audit: type=1326 audit(4129213982.520:2196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14108 comm="syz.3.3026" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffffb815a8a8 code=0x7ffc0000 [ 823.529877][ T27] audit: type=1326 audit(4129213982.530:2197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14108 comm="syz.3.3026" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb815a8a8 code=0x7ffc0000 [ 823.564072][ T27] audit: type=1326 audit(4129213982.530:2198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14108 comm="syz.3.3026" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb815a8a8 code=0x7ffc0000 [ 823.581218][ T27] audit: type=1326 audit(4129213982.530:2199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14108 comm="syz.3.3026" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=203 compat=0 ip=0xffffb815a8a8 code=0x7ffc0000 [ 823.595766][ T27] audit: type=1326 audit(4129213982.530:2200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14108 comm="syz.3.3026" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb815a8a8 code=0x7ffc0000 [ 823.993276][T14123] netlink: 'syz.1.3030': attribute type 10 has an invalid length. [ 824.436617][T14123] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3030'. [ 824.584916][T10309] device hsr_slave_0 left promiscuous mode [ 824.774262][T10309] device hsr_slave_1 left promiscuous mode [ 826.495767][T10309] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 826.497883][T10309] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 826.501323][T10309] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 826.503489][T10309] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 826.686880][T10309] device veth1_macvtap left promiscuous mode [ 826.688791][T10309] device veth0_macvtap left promiscuous mode [ 826.690720][T10309] device veth1_vlan left promiscuous mode [ 826.693436][T10309] device veth0_vlan left promiscuous mode [ 828.045398][T10309] bond1 (unregistering): Released all slaves [ 830.057584][T10309] team0 (unregistering): Port device team_slave_1 removed [ 830.254163][T10309] device team_slave_0 left promiscuous mode [ 830.256888][T10309] team0 (unregistering): Port device team_slave_0 removed [ 830.434511][T10309] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 830.501058][T10309] device bond_slave_0 left promiscuous mode [ 833.046552][T10309] bond0 (unregistering): Released all slaves [ 833.107882][T13825] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 833.156671][T14146] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3034'. [ 833.159323][T14146] netlink: 'syz.0.3034': attribute type 5 has an invalid length. [ 833.161478][T14146] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3034'. [ 833.224608][T13825] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 833.258467][T13825] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 835.055698][ T4300] Bluetooth: hci5: command 0x0406 tx timeout [ 835.055944][ T27] kauditd_printk_skb: 4 callbacks suppressed [ 835.055955][ T27] audit: type=1326 audit(4129213993.940:2205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14152 comm="syz.4.3037" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa255a8a8 code=0x7ffc0000 [ 835.068613][ T27] audit: type=1326 audit(4129213993.940:2206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14152 comm="syz.4.3037" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa255a8a8 code=0x7ffc0000 [ 835.075360][ T27] audit: type=1326 audit(4129213993.940:2207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14152 comm="syz.4.3037" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=79 compat=0 ip=0xffffa255a8a8 code=0x7ffc0000 [ 835.082121][ T27] audit: type=1326 audit(4129213993.940:2208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14152 comm="syz.4.3037" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa255a8a8 code=0x7ffc0000 [ 835.089263][ T27] audit: type=1326 audit(4129213993.940:2209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14152 comm="syz.4.3037" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa255a8a8 code=0x7ffc0000 [ 835.107242][T13825] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 835.124261][ T27] audit: type=1326 audit(4129213993.940:2210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14152 comm="syz.4.3037" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffffa255a8a8 code=0x7ffc0000 [ 835.150325][ T27] audit: type=1326 audit(4129213993.940:2211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14152 comm="syz.4.3037" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa255a8a8 code=0x7ffc0000 [ 835.171611][ T27] audit: type=1326 audit(4129213993.940:2212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14152 comm="syz.4.3037" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa255a8a8 code=0x7ffc0000 [ 835.209828][ T27] audit: type=1326 audit(4129213993.940:2213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14152 comm="syz.4.3037" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=203 compat=0 ip=0xffffa255a8a8 code=0x7ffc0000 [ 835.274715][ T27] audit: type=1326 audit(4129213993.940:2214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14152 comm="syz.4.3037" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa255a8a8 code=0x7ffc0000 [ 836.173628][T14184] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3044'. [ 836.241698][T13825] 8021q: adding VLAN 0 to HW filter on device bond0 [ 836.267876][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 836.270695][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 836.346387][T13825] 8021q: adding VLAN 0 to HW filter on device team0 [ 836.352429][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 836.364492][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 836.367095][ T4363] bridge0: port 1(bridge_slave_0) entered blocking state [ 836.369145][ T4363] bridge0: port 1(bridge_slave_0) entered forwarding state [ 836.371500][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 836.431958][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 836.444275][ T4363] bridge0: port 2(bridge_slave_1) entered blocking state [ 836.446255][ T4363] bridge0: port 2(bridge_slave_1) entered forwarding state [ 836.448857][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 837.755902][T13509] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 838.266091][T13509] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 838.269032][T13509] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 838.344150][T13509] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 838.347172][T13509] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 838.350568][T13509] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 838.358971][T13509] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 838.368963][T13825] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 838.371842][T13825] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 842.983785][T13966] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 842.986638][T13966] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 843.005238][T13966] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 843.029938][T13966] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 843.034518][T13966] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 843.082327][T14243] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3055'. [ 845.976642][T13509] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 845.979074][T13509] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 845.986113][T13825] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 846.080119][T10309] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 846.083037][T10309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 847.010631][ T4393] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 847.016457][ T4393] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 847.020403][ T4393] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 847.031443][ T4393] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 847.778808][T13825] device veth0_vlan entered promiscuous mode [ 847.803267][T13825] device veth1_vlan entered promiscuous mode [ 847.918651][T14300] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3067'. [ 847.945726][ T4519] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 847.948815][ T4519] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 847.952762][T13825] device veth0_macvtap entered promiscuous mode [ 847.988013][T13825] device veth1_macvtap entered promiscuous mode [ 848.169411][ T4606] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 848.172096][ T4606] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 848.192352][T13825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 848.203861][T13825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 848.206789][T13825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 848.209551][T13825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 848.212085][T13825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 849.376021][T13825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 849.379111][T13825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 849.381910][T13825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 849.417220][T14308] loop0: detected capacity change from 0 to 4096 [ 849.475126][T13825] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 849.477769][ T4520] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 849.480543][ T4520] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 849.499787][T13825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 849.502646][T13825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 849.532071][T13825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 849.548344][T13825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 849.561481][T13825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 849.577326][T13825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 849.580823][T13825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 849.594357][T13825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 849.600772][T13825] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 849.663389][ T4520] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 849.666447][ T4520] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 849.682725][T13825] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 849.686661][T13825] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 849.714523][T13825] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 849.717073][T13825] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 850.971773][ T4519] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 850.991851][ T4393] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 851.010596][ T4393] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 851.038642][ T4519] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 851.167795][ T4520] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 851.231389][ T4606] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 853.800312][ T4300] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 853.808193][ T4302] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 853.812275][ T4302] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 853.815473][ T4300] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 853.817979][ T4300] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 853.820321][ T4302] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 855.863868][ T4302] Bluetooth: hci4: command 0x0409 tx timeout [ 858.517252][T13155] Bluetooth: hci4: command 0x041b tx timeout [ 858.966809][T14404] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3084'. [ 858.969394][T14404] netlink: 'syz.3.3084': attribute type 5 has an invalid length. [ 858.971543][T14404] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3084'. [ 859.041067][T14419] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3087'. [ 859.043713][T14419] netlink: 'syz.0.3087': attribute type 5 has an invalid length. [ 859.045808][T14419] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3087'. [ 860.620052][T13155] Bluetooth: hci4: command 0x040f tx timeout [ 860.668638][ T4520] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 861.359940][ T4520] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 862.301895][T14462] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3101'. [ 862.304899][T14462] netlink: 'syz.1.3101': attribute type 5 has an invalid length. [ 862.307267][T14462] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3101'. [ 862.567901][T14468] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 862.570648][T14468] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 862.763919][ T4302] Bluetooth: hci4: command 0x0419 tx timeout [ 864.288951][ T2059] ieee802154 phy0 wpan0: encryption failed: -22 [ 864.298720][ T2059] ieee802154 phy1 wpan1: encryption failed: -22 [ 864.697946][ T4520] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 864.736060][T14366] chnl_net:caif_netlink_parms(): no params data found [ 864.951541][ T4520] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 864.970312][T14488] netlink: 'syz.0.3097': attribute type 1 has an invalid length. [ 864.990874][T14488] 8021q: adding VLAN 0 to HW filter on device bond4 [ 865.061861][T14495] device bond4 entered promiscuous mode [ 865.090332][T14366] bridge0: port 1(bridge_slave_0) entered blocking state [ 865.092409][T14366] bridge0: port 1(bridge_slave_0) entered disabled state [ 865.110236][T14366] device bridge_slave_0 entered promiscuous mode [ 865.124923][T14366] bridge0: port 2(bridge_slave_1) entered blocking state [ 865.127122][T14366] bridge0: port 2(bridge_slave_1) entered disabled state [ 865.143909][T14366] device bridge_slave_1 entered promiscuous mode [ 865.206223][T14366] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 865.210754][T14366] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 865.276969][T14366] team0: Port device team_slave_0 added [ 865.281343][T14366] team0: Port device team_slave_1 added [ 866.173047][T14366] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 866.175865][T14366] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 866.193967][T14366] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 866.215047][T14366] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 866.216971][T14366] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 866.697798][T14366] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 866.947826][T14366] device hsr_slave_0 entered promiscuous mode [ 869.426340][T14366] device hsr_slave_1 entered promiscuous mode [ 869.514058][T14366] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 869.516623][T14366] Cannot create hsr debugfs directory [ 871.051372][T14543] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3107'. [ 871.054106][T14543] netlink: 'syz.4.3107': attribute type 5 has an invalid length. [ 871.056145][T14543] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3107'. [ 871.329309][T14559] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 871.331867][T14559] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 878.616902][T14640] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 878.619555][T14640] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 884.009368][ T27] kauditd_printk_skb: 18 callbacks suppressed [ 885.117764][ T27] audit: type=1326 audit(4129214044.180:2233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14695 comm="syz.1.3138" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9155a8a8 code=0x7ffc0000 [ 885.761449][ T27] audit: type=1326 audit(4129214044.180:2234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14695 comm="syz.1.3138" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9155a8a8 code=0x7ffc0000 [ 885.802330][ T27] audit: type=1326 audit(4129214044.190:2235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14695 comm="syz.1.3138" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=79 compat=0 ip=0xffff9155a8a8 code=0x7ffc0000 [ 885.823848][ T27] audit: type=1326 audit(4129214044.190:2236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14695 comm="syz.1.3138" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9155a8a8 code=0x7ffc0000 [ 885.951407][ T27] audit: type=1326 audit(4129214044.190:2237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14695 comm="syz.1.3138" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9155a8a8 code=0x7ffc0000 [ 886.022284][ T27] audit: type=1326 audit(4129214044.190:2238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14695 comm="syz.1.3138" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffff9155a8a8 code=0x7ffc0000 [ 886.028602][ T27] audit: type=1326 audit(4129214044.190:2239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14695 comm="syz.1.3138" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9155a8a8 code=0x7ffc0000 [ 886.034766][ T27] audit: type=1326 audit(4129214044.190:2240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14695 comm="syz.1.3138" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9155a8a8 code=0x7ffc0000 [ 886.040862][ T27] audit: type=1326 audit(4129214044.190:2241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14695 comm="syz.1.3138" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffff9155a8a8 code=0x7ffc0000 [ 886.059842][ T27] audit: type=1326 audit(4129214044.190:2242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14695 comm="syz.1.3138" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9155a8a8 code=0x7ffc0000 [ 887.790198][T14733] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3145'. [ 887.892305][T14366] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 888.088530][T14366] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 889.299984][ T27] kauditd_printk_skb: 7 callbacks suppressed [ 889.300024][ T27] audit: type=1326 audit(4129214049.430:2250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14773 comm="syz.0.3154" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaef5a8a8 code=0x7ffc0000 [ 889.886010][ T27] audit: type=1326 audit(4129214049.430:2251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14773 comm="syz.0.3154" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaef5a8a8 code=0x7ffc0000 [ 890.273225][ T27] audit: type=1326 audit(4129214049.430:2252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14773 comm="syz.0.3154" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=79 compat=0 ip=0xffffaef5a8a8 code=0x7ffc0000 [ 890.279853][ T27] audit: type=1326 audit(4129214049.430:2253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14773 comm="syz.0.3154" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaef5a8a8 code=0x7ffc0000 [ 890.311133][ T27] audit: type=1326 audit(4129214049.430:2254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14773 comm="syz.0.3154" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaef5a8a8 code=0x7ffc0000 [ 890.323722][ T27] audit: type=1326 audit(4129214049.430:2255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14773 comm="syz.0.3154" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffffaef5a8a8 code=0x7ffc0000 [ 890.337503][ T27] audit: type=1326 audit(4129214049.430:2256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14773 comm="syz.0.3154" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaef5a8a8 code=0x7ffc0000 [ 890.392912][ T27] audit: type=1326 audit(4129214049.430:2257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14773 comm="syz.0.3154" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaef5a8a8 code=0x7ffc0000 [ 890.422543][ T27] audit: type=1326 audit(4129214049.430:2258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14773 comm="syz.0.3154" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=203 compat=0 ip=0xffffaef5a8a8 code=0x7ffc0000 [ 891.171303][ T27] audit: type=1326 audit(4129214049.430:2259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14773 comm="syz.0.3154" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaef5a8a8 code=0x7ffc0000 [ 891.204019][T14366] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 891.884629][T14366] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 892.078674][T14366] 8021q: adding VLAN 0 to HW filter on device bond0 [ 892.466172][T13548] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 892.469281][T13548] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 892.477320][T14366] 8021q: adding VLAN 0 to HW filter on device team0 [ 892.621768][ T4520] device hsr_slave_0 left promiscuous mode [ 892.664289][ T4520] device hsr_slave_1 left promiscuous mode [ 892.723987][ T4520] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 892.726233][ T4520] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 892.729950][ T4520] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 892.732877][ T4520] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 892.738313][ T4520] device bridge_slave_1 left promiscuous mode [ 892.742451][ T4520] bridge0: port 2(bridge_slave_1) entered disabled state [ 892.938566][ T4520] device bridge_slave_0 left promiscuous mode [ 892.940532][ T4520] bridge0: port 1(bridge_slave_0) entered disabled state [ 893.853946][ T4520] device veth1_macvtap left promiscuous mode [ 893.855910][ T4520] device veth0_macvtap left promiscuous mode [ 893.857698][ T4520] device veth1_vlan left promiscuous mode [ 893.859440][ T4520] device veth0_vlan left promiscuous mode [ 897.467532][ T4520] team0 (unregistering): Port device team_slave_1 removed [ 897.645097][ T4520] team0 (unregistering): Port device team_slave_0 removed [ 897.854685][ T4520] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 898.104521][ T4520] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 900.746358][ T4520] bond0 (unregistering): Released all slaves [ 901.039608][T13966] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 901.042375][T13966] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 901.044986][T13966] bridge0: port 1(bridge_slave_0) entered blocking state [ 901.046957][T13966] bridge0: port 1(bridge_slave_0) entered forwarding state [ 901.049293][T13966] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 901.051945][T13966] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 901.054612][T13966] bridge0: port 2(bridge_slave_1) entered blocking state [ 901.056608][T13966] bridge0: port 2(bridge_slave_1) entered forwarding state [ 901.058864][T13966] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 901.061692][T13966] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 901.066132][T13966] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 901.084702][T14814] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3160'. [ 901.164620][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 901.169645][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 901.172373][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 901.221148][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 901.230456][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 901.238580][T14366] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 901.241365][T14366] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 901.278805][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 901.289939][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 901.307643][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 902.555214][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 902.733872][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 904.316675][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 904.318932][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 904.336116][T14366] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 904.865141][ T4606] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 904.871764][ T4606] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 905.244402][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 905.247127][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 905.249966][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 905.282717][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 905.298325][T14366] device veth0_vlan entered promiscuous mode [ 905.318271][T14366] device veth1_vlan entered promiscuous mode [ 905.523827][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 905.526973][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 905.589751][T14366] device veth0_macvtap entered promiscuous mode [ 905.611388][T14366] device veth1_macvtap entered promiscuous mode [ 905.620584][T13509] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 905.623439][T13509] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 906.334131][T13509] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 906.352375][T13509] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 906.468189][T14366] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 906.471268][T14366] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 906.480295][T14366] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 906.483357][T14366] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 906.486814][T14366] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 906.489590][T14366] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 906.492201][T14366] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 906.495386][T14366] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 906.499307][T14366] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 906.503368][T14366] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 906.543888][T14366] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 906.546661][T14366] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 906.549415][T14366] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 906.552021][T14366] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 906.563683][T14366] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 906.566619][T14366] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 906.569486][T14366] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 906.573232][T14366] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 906.591982][T14366] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 906.597728][T14366] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 906.600107][T14366] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 906.602450][T14366] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 907.564908][T13509] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 907.567983][T13509] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 907.571189][T13509] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 907.608477][T13509] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 908.704351][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 908.706964][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 908.765226][T12219] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 908.987191][ T4606] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 909.079304][ T4606] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 909.249419][T13509] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 912.684754][ T4302] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 912.690198][ T4302] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 912.694138][ T4302] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 912.713703][ T4302] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 912.736156][ T4302] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 912.738364][ T4302] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 914.409998][T13564] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 914.447202][T13564] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 914.756028][T14946] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 914.760554][T14946] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 914.796938][T13564] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 914.799746][T13564] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 914.823813][ T4302] Bluetooth: hci1: command 0x0409 tx timeout [ 914.955475][T13564] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 914.958375][T13564] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 915.177655][T13564] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 915.180675][T13564] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 915.199874][T14929] chnl_net:caif_netlink_parms(): no params data found [ 916.686735][T14929] bridge0: port 1(bridge_slave_0) entered blocking state [ 916.689559][T14929] bridge0: port 1(bridge_slave_0) entered disabled state [ 916.748970][T14929] device bridge_slave_0 entered promiscuous mode [ 916.836718][T14929] bridge0: port 2(bridge_slave_1) entered blocking state [ 916.838755][T14929] bridge0: port 2(bridge_slave_1) entered disabled state [ 916.841428][T14929] device bridge_slave_1 entered promiscuous mode [ 916.893779][ T4302] Bluetooth: hci1: command 0x041b tx timeout [ 916.989710][T14929] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 917.006296][T14929] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 917.307370][T14929] team0: Port device team_slave_0 added [ 917.310781][T14929] team0: Port device team_slave_1 added [ 918.973712][ T4302] Bluetooth: hci1: command 0x040f tx timeout [ 920.075423][T14929] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 920.077460][T14929] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 920.127728][T14929] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 920.169810][T14929] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 920.171829][T14929] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 920.246104][T14929] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 920.639994][T14988] netlink: 'syz.1.3208': attribute type 10 has an invalid length. [ 921.054417][ T4302] Bluetooth: hci1: command 0x0419 tx timeout [ 921.255406][T14929] device hsr_slave_0 entered promiscuous mode [ 921.464962][T14929] device hsr_slave_1 entered promiscuous mode [ 921.604182][T14929] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 921.606519][T14929] Cannot create hsr debugfs directory [ 924.349165][ T4342] usb 1-1: new full-speed USB device number 29 using dummy_hcd [ 924.541065][ T4342] usb 1-1: unable to get BOS descriptor or descriptor too short [ 924.543897][ T4342] usb 1-1: not running at top speed; connect to a high speed hub [ 924.549897][ T4342] usb 1-1: config 128 has an invalid interface number: 15 but max is 3 [ 924.552312][ T4342] usb 1-1: config 128 contains an unexpected descriptor of type 0x1, skipping [ 924.567409][ T4342] usb 1-1: config 128 has an invalid interface number: 6 but max is 3 [ 924.570870][ T4342] usb 1-1: config 128 contains an unexpected descriptor of type 0x2, skipping [ 924.573284][ T4342] usb 1-1: config 128 contains an unexpected descriptor of type 0x1, skipping [ 924.584014][ T4342] usb 1-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 924.590330][ T4342] usb 1-1: config 128 has 2 interfaces, different from the descriptor's value: 4 [ 924.598090][ T4342] usb 1-1: config 128 has no interface number 0 [ 924.599875][ T4342] usb 1-1: config 128 has no interface number 1 [ 924.601734][ T4342] usb 1-1: config 128 interface 15 altsetting 1 endpoint 0xA has invalid maxpacket 1024, setting to 64 [ 924.608392][ T4342] usb 1-1: config 128 interface 15 altsetting 1 has an invalid endpoint with address 0x0, skipping [ 924.611395][ T4342] usb 1-1: config 128 interface 15 altsetting 1 has an invalid endpoint with address 0x0, skipping [ 924.619831][ T4342] usb 1-1: config 128 interface 15 altsetting 1 has a duplicate endpoint with address 0xA, skipping [ 924.622804][ T4342] usb 1-1: config 128 interface 15 altsetting 1 has an invalid endpoint with address 0x0, skipping [ 924.629590][ T4342] usb 1-1: config 128 interface 15 altsetting 1 has an invalid endpoint with address 0x0, skipping [ 924.632731][ T4342] usb 1-1: config 128 interface 15 altsetting 1 has a duplicate endpoint with address 0xE, skipping [ 924.644092][ T4342] usb 1-1: config 128 interface 15 altsetting 1 has an invalid endpoint with address 0x27, skipping [ 924.647010][ T4342] usb 1-1: config 128 interface 15 altsetting 1 has 10 endpoint descriptors, different from the interface descriptor's value: 9 [ 924.650563][ T4342] usb 1-1: config 128 interface 6 altsetting 3 has 0 endpoint descriptors, different from the interface descriptor's value: 13 [ 924.655069][ T2059] ieee802154 phy0 wpan0: encryption failed: -22 [ 924.656808][ T2059] ieee802154 phy1 wpan1: encryption failed: -22 [ 924.663518][ T4342] usb 1-1: config 128 interface 15 has no altsetting 0 [ 924.665680][ T4342] usb 1-1: config 128 interface 6 has no altsetting 0 [ 924.672603][ T4342] usb 1-1: New USB device found, idVendor=0411, idProduct=0097, bcdDevice=d5.83 [ 924.681194][ T4342] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 924.683394][ T4342] usb 1-1: Product: ప [ 924.687182][ T4342] usb 1-1: Manufacturer: Ъ [ 924.688477][ T4342] usb 1-1: SerialNumber: 밸奒⨰뎀ᥙ䴘쩳䚡璚䷙赽壒胹杒䊩䩳Ꮂꓘ搦盧硸库嶲᳠츿⫔谧鉎ﺌ㈌弴䆹㦾덮巪㊸ﻕᏺ좏纶킜낳娽㨟跎鋂い⿮ꇭ셹䋊촵쥊셷䑜㥊Ů볲孡䢾㝌함㤌๹坪瑩땮거饍 [ 924.718749][T15028] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 924.721474][T15028] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 924.946231][ T4342] usb 1-1: USB disconnect, device number 29 [ 925.096460][T15063] netlink: 'syz.3.3212': attribute type 10 has an invalid length. [ 928.575903][ T27] kauditd_printk_skb: 21 callbacks suppressed [ 928.576436][ T27] audit: type=1326 audit(4129214088.000:2281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15078 comm="syz.3.3216" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb815a8a8 code=0x7ffc0000 [ 928.960400][ T27] audit: type=1326 audit(4129214088.000:2282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15078 comm="syz.3.3216" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb815a8a8 code=0x7ffc0000 [ 929.646250][T13564] bond0: (slave wlan1): Releasing backup interface [ 929.714645][T13564] device wlan1 left promiscuous mode [ 930.636027][T15112] netlink: 'syz.2.3222': attribute type 10 has an invalid length. [ 930.757955][T15112] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 932.093130][T15136] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 932.175313][T15136] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 932.284682][T14929] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 933.015128][T13564] device hsr_slave_0 left promiscuous mode [ 933.071070][T13564] device hsr_slave_1 left promiscuous mode [ 933.153853][T13564] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 933.156395][T13564] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 933.161249][T13564] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 933.165619][T13564] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 933.487460][ T27] audit: type=1326 audit(4129214093.640:2283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15154 comm="syz.1.3228" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9155a8a8 code=0x7ffc0000 [ 933.506089][ T27] audit: type=1326 audit(4129214093.640:2284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15154 comm="syz.1.3228" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9155a8a8 code=0x7ffc0000 [ 934.091521][T13564] device veth1_macvtap left promiscuous mode [ 934.093348][T13564] device veth0_macvtap left promiscuous mode [ 934.098996][T13564] device veth1_vlan left promiscuous mode [ 934.102300][T13564] device veth0_vlan left promiscuous mode [ 934.124217][ T27] audit: type=1326 audit(4129214093.650:2285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15154 comm="syz.1.3228" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=79 compat=0 ip=0xffff9155a8a8 code=0x7ffc0000 [ 934.131161][ T27] audit: type=1326 audit(4129214093.650:2286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15154 comm="syz.1.3228" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9155a8a8 code=0x7ffc0000 [ 934.137820][ T27] audit: type=1326 audit(4129214093.650:2287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15154 comm="syz.1.3228" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9155a8a8 code=0x7ffc0000 [ 934.144660][T15157] loop2: detected capacity change from 0 to 4096 [ 934.153736][ T27] audit: type=1326 audit(4129214093.650:2288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15154 comm="syz.1.3228" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffff9155a8a8 code=0x7ffc0000 [ 934.234419][ T27] audit: type=1326 audit(4129214093.660:2289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15154 comm="syz.1.3228" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9155a8a8 code=0x7ffc0000 [ 934.240469][ T27] audit: type=1326 audit(4129214093.660:2290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15154 comm="syz.1.3228" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9155a8a8 code=0x7ffc0000 [ 934.305470][ T27] audit: type=1326 audit(4129214093.660:2291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15154 comm="syz.1.3228" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=203 compat=0 ip=0xffff9155a8a8 code=0x7ffc0000 [ 934.311832][ T27] audit: type=1326 audit(4129214093.660:2292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15154 comm="syz.1.3228" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9155a8a8 code=0x7ffc0000 [ 934.318117][ T27] audit: type=1326 audit(4129214093.660:2293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15154 comm="syz.1.3228" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9155a8a8 code=0x7ffc0000 [ 934.324205][ T27] audit: type=1326 audit(4129214093.660:2294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15154 comm="syz.1.3228" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=209 compat=0 ip=0xffff9155a8a8 code=0x7ffc0000 [ 936.267065][T15185] loop0: detected capacity change from 0 to 4096 [ 938.394452][T13564] bond1 (unregistering): Released all slaves [ 941.209460][T13564] team0 (unregistering): Port device team_slave_1 removed [ 941.414238][T13564] device team_slave_0 left promiscuous mode [ 941.419159][T13564] team0 (unregistering): Port device team_slave_0 removed [ 941.625131][T13564] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 941.663941][T13564] device bond_slave_1 left promiscuous mode [ 941.875356][T13564] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 941.914226][T13564] device bond_slave_0 left promiscuous mode [ 944.445550][T13564] bond0 (unregistering): Released all slaves [ 944.507246][T14929] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 944.566147][T14929] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 944.642436][T15190] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3232'. [ 944.645128][T15190] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3232'. [ 944.649540][T15190] device geneve2 entered promiscuous mode [ 944.671293][T14929] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 945.938147][T15215] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 945.940714][T15215] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 946.029333][T14929] 8021q: adding VLAN 0 to HW filter on device bond0 [ 946.040998][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 946.043540][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 946.080146][T14929] 8021q: adding VLAN 0 to HW filter on device team0 [ 946.085500][T10187] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 946.088520][T10187] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 946.091312][T10187] bridge0: port 1(bridge_slave_0) entered blocking state [ 946.093348][T10187] bridge0: port 1(bridge_slave_0) entered forwarding state [ 946.100248][T10187] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 946.102766][T10187] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 946.105786][T10187] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 946.108310][T10187] bridge0: port 2(bridge_slave_1) entered blocking state [ 946.110329][T10187] bridge0: port 2(bridge_slave_1) entered forwarding state [ 946.121711][ T4520] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 946.125764][ T4520] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 946.130552][ T4520] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 946.135792][ T4520] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 946.142895][ T4520] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 946.880528][T12219] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 946.883624][T12219] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 946.886849][T12219] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 946.889554][T12219] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 946.892152][T12219] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 946.895140][T12219] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 947.074672][ T27] kauditd_printk_skb: 2 callbacks suppressed [ 947.074685][ T27] audit: type=1326 audit(4129214107.250:2297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15223 comm="syz.0.3240" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaef5a8a8 code=0x7ffc0000 [ 947.082974][ T27] audit: type=1326 audit(4129214107.250:2298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15223 comm="syz.0.3240" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaef5a8a8 code=0x7ffc0000 [ 947.089354][ T27] audit: type=1326 audit(4129214107.250:2299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15223 comm="syz.0.3240" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=79 compat=0 ip=0xffffaef5a8a8 code=0x7ffc0000 [ 947.095574][ T27] audit: type=1326 audit(4129214107.250:2300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15223 comm="syz.0.3240" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaef5a8a8 code=0x7ffc0000 [ 947.101800][ T27] audit: type=1326 audit(4129214107.250:2301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15223 comm="syz.0.3240" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaef5a8a8 code=0x7ffc0000 [ 947.108162][ T27] audit: type=1326 audit(4129214107.250:2302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15223 comm="syz.0.3240" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffffaef5a8a8 code=0x7ffc0000 [ 947.114531][ T27] audit: type=1326 audit(4129214107.250:2303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15223 comm="syz.0.3240" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaef5a8a8 code=0x7ffc0000 [ 947.120691][ T27] audit: type=1326 audit(4129214107.250:2304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15223 comm="syz.0.3240" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaef5a8a8 code=0x7ffc0000 [ 947.127223][ T27] audit: type=1326 audit(4129214107.260:2305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15223 comm="syz.0.3240" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=203 compat=0 ip=0xffffaef5a8a8 code=0x7ffc0000 [ 947.133431][ T27] audit: type=1326 audit(4129214107.260:2306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15223 comm="syz.0.3240" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaef5a8a8 code=0x7ffc0000 [ 948.582601][ T4520] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 948.585601][ T4520] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 948.619600][T14929] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 948.810224][T15245] loop2: detected capacity change from 0 to 4096 [ 949.751906][ T4520] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 949.754854][ T4520] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 949.767962][T14929] device veth0_vlan entered promiscuous mode [ 949.809178][T14929] device veth1_vlan entered promiscuous mode [ 949.811809][T12219] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 949.818481][T12219] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 949.966053][T12219] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 949.984208][T12219] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 949.986247][T12219] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 950.005497][T10187] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 950.008199][T10187] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 950.010911][T10187] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 950.211381][T14929] device veth0_macvtap entered promiscuous mode [ 950.674818][T14929] device veth1_macvtap entered promiscuous mode [ 950.743340][T14929] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 950.757853][T14929] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 950.760521][T14929] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 950.763295][T14929] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 950.770083][T14929] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 950.772811][T14929] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 950.779550][T14929] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 950.782448][T14929] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 950.789851][T14929] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 950.792292][T12219] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 950.795049][T12219] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 950.797706][T12219] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 950.800956][T12219] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 950.805310][T14929] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 950.808160][T14929] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 950.814989][T14929] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 950.817930][T14929] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 950.820658][T14929] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 950.835679][T14929] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 950.846543][T14929] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 950.849732][T14929] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 950.871213][T14929] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 950.882816][T12219] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 950.885827][T12219] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 950.891294][T14929] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 950.904079][T14929] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 950.910925][T14929] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 950.947088][T14929] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 951.758446][T15273] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3248'. [ 951.760914][T15273] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3248'. [ 951.765803][T15273] device geneve3 entered promiscuous mode [ 951.989055][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 951.991607][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 952.010805][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 952.031626][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 952.034292][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 952.049287][T10187] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 952.503790][T11144] usb 1-1: new full-speed USB device number 30 using dummy_hcd [ 952.796458][T11144] usb 1-1: not running at top speed; connect to a high speed hub [ 952.905106][ T27] kauditd_printk_skb: 4 callbacks suppressed [ 952.905121][ T27] audit: type=1326 audit(4129214113.090:2311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15278 comm="syz.1.3252" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9155a8a8 code=0x7ffc0000 [ 952.913170][ T27] audit: type=1326 audit(4129214113.090:2312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15278 comm="syz.1.3252" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=79 compat=0 ip=0xffff9155a8a8 code=0x7ffc0000 [ 953.033733][T11144] usb 1-1: config 128 has an invalid interface number: 15 but max is 3 [ 953.036110][T11144] usb 1-1: config 128 contains an unexpected descriptor of type 0x1, skipping [ 953.038589][T11144] usb 1-1: config 128 has an invalid interface number: 6 but max is 3 [ 953.040778][T11144] usb 1-1: config 128 contains an unexpected descriptor of type 0x2, skipping [ 953.043186][T11144] usb 1-1: config 128 contains an unexpected descriptor of type 0x1, skipping [ 953.172678][ T27] audit: type=1326 audit(4129214113.090:2313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15278 comm="syz.1.3252" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9155a8a8 code=0x7ffc0000 [ 953.195508][T11144] usb 1-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 953.198419][T11144] usb 1-1: config 128 has 2 interfaces, different from the descriptor's value: 4 [ 953.200905][T11144] usb 1-1: config 128 has no interface number 0 [ 953.202586][T11144] usb 1-1: config 128 has no interface number 1 [ 953.204473][T11144] usb 1-1: config 128 interface 15 altsetting 1 endpoint 0xA has invalid maxpacket 1024, setting to 64 [ 953.207440][T11144] usb 1-1: config 128 interface 15 altsetting 1 has an invalid endpoint with address 0x0, skipping [ 953.210360][T11144] usb 1-1: config 128 interface 15 altsetting 1 has an invalid endpoint with address 0x0, skipping [ 953.213362][T11144] usb 1-1: config 128 interface 15 altsetting 1 has a duplicate endpoint with address 0xA, skipping [ 953.216479][T11144] usb 1-1: config 128 interface 15 altsetting 1 has an invalid endpoint with address 0x0, skipping [ 953.216861][ T27] audit: type=1326 audit(4129214113.090:2314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15278 comm="syz.1.3252" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9155a8a8 code=0x7ffc0000 [ 953.219416][T11144] usb 1-1: config 128 interface 15 altsetting 1 has an invalid endpoint with address 0x0, skipping [ 953.228598][T11144] usb 1-1: config 128 interface 15 altsetting 1 has a duplicate endpoint with address 0xE, skipping [ 953.231675][T11144] usb 1-1: config 128 interface 15 altsetting 1 has an invalid endpoint with address 0x27, skipping [ 953.234821][T11144] usb 1-1: config 128 interface 15 altsetting 1 has 10 endpoint descriptors, different from the interface descriptor's value: 9 [ 953.238491][T11144] usb 1-1: config 128 interface 6 altsetting 3 has 0 endpoint descriptors, different from the interface descriptor's value: 13 [ 953.242150][T11144] usb 1-1: config 128 interface 15 has no altsetting 0 [ 953.244232][T11144] usb 1-1: config 128 interface 6 has no altsetting 0 [ 953.255196][T11144] usb 1-1: New USB device found, idVendor=0411, idProduct=0097, bcdDevice=d5.83 [ 953.257841][T11144] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 953.259991][T11144] usb 1-1: Product: syz [ 953.261132][T11144] usb 1-1: Manufacturer: syz [ 953.262386][T11144] usb 1-1: SerialNumber: syz [ 953.275528][ T27] audit: type=1326 audit(4129214113.100:2315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15278 comm="syz.1.3252" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffff9155a8a8 code=0x7ffc0000 [ 953.275827][T15281] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 953.295122][T15281] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 953.323760][ T27] audit: type=1326 audit(4129214113.100:2316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15278 comm="syz.1.3252" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9155a8a8 code=0x7ffc0000 [ 953.329969][ T27] audit: type=1326 audit(4129214113.100:2317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15278 comm="syz.1.3252" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9155a8a8 code=0x7ffc0000 [ 953.393907][ T27] audit: type=1326 audit(4129214113.100:2318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15278 comm="syz.1.3252" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=203 compat=0 ip=0xffff9155a8a8 code=0x7ffc0000 [ 953.424033][ T27] audit: type=1326 audit(4129214113.100:2319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15278 comm="syz.1.3252" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9155a8a8 code=0x7ffc0000 [ 953.430130][ T27] audit: type=1326 audit(4129214113.100:2320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15278 comm="syz.1.3252" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9155a8a8 code=0x7ffc0000 [ 953.512212][T11144] usb 1-1: USB disconnect, device number 30 [ 953.561680][T13155] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 953.566497][T13155] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 953.569660][T13155] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 953.573181][T13155] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 953.576066][T13155] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 953.578307][T13155] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 953.866848][ T4307] device syz_tun left promiscuous mode [ 954.400967][T10187] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 954.422829][T10187] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 955.694158][T13155] Bluetooth: hci0: command 0x0409 tx timeout [ 956.896283][T10187] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 956.899267][T10187] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 957.106138][T10187] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 957.111493][T10187] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 957.210832][T15293] chnl_net:caif_netlink_parms(): no params data found [ 957.494876][T15293] bridge0: port 1(bridge_slave_0) entered blocking state [ 957.503835][T15293] bridge0: port 1(bridge_slave_0) entered disabled state [ 957.520740][T15293] device bridge_slave_0 entered promiscuous mode [ 957.554291][T15293] bridge0: port 2(bridge_slave_1) entered blocking state [ 957.570685][T15293] bridge0: port 2(bridge_slave_1) entered disabled state [ 957.573429][T15293] device bridge_slave_1 entered promiscuous mode [ 957.723164][T15293] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 957.753395][T15293] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 957.773853][T13155] Bluetooth: hci0: command 0x041b tx timeout [ 959.285139][T15293] team0: Port device team_slave_0 added [ 959.289338][T15293] team0: Port device team_slave_1 added [ 959.387965][T10187] tipc: Left network mode [ 959.521954][T15293] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 959.524083][T15293] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 959.531025][T15293] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 959.543568][T15293] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 959.553856][T15293] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 959.561024][T15293] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 962.502532][ T4302] Bluetooth: hci0: command 0x040f tx timeout [ 962.683037][T15293] device hsr_slave_0 entered promiscuous mode [ 962.706248][T15293] device hsr_slave_1 entered promiscuous mode [ 962.803203][T15293] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 962.904095][T15293] Cannot create hsr debugfs directory [ 963.518114][T15362] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3264'. [ 963.520602][T15362] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3264'. [ 963.535713][T15362] device geneve2 entered promiscuous mode [ 963.878143][T13465] usb 1-1: new full-speed USB device number 31 using dummy_hcd [ 964.186509][T13465] usb 1-1: not running at top speed; connect to a high speed hub [ 964.560469][T13465] usb 1-1: config 128 has an invalid interface number: 15 but max is 3 [ 964.565505][T13465] usb 1-1: config 128 contains an unexpected descriptor of type 0x1, skipping [ 964.568211][T13465] usb 1-1: config 128 has an invalid interface number: 6 but max is 3 [ 964.574240][T13155] Bluetooth: hci0: command 0x0419 tx timeout [ 964.636688][T13465] usb 1-1: config 128 contains an unexpected descriptor of type 0x2, skipping [ 964.652993][T13465] usb 1-1: config 128 contains an unexpected descriptor of type 0x1, skipping [ 964.663104][T13465] usb 1-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 964.670583][T13465] usb 1-1: config 128 has 2 interfaces, different from the descriptor's value: 4 [ 964.687143][T13465] usb 1-1: config 128 has no interface number 0 [ 964.688885][T13465] usb 1-1: config 128 has no interface number 1 [ 964.689467][ T27] kauditd_printk_skb: 3 callbacks suppressed [ 964.689480][ T27] audit: type=1326 audit(4129214124.860:2324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15375 comm="syz.4.3270" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8d75a8a8 code=0x7ffc0000 [ 964.700667][ T27] audit: type=1326 audit(4129214124.860:2325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15375 comm="syz.4.3270" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8d75a8a8 code=0x7ffc0000 [ 964.721698][T13465] usb 1-1: config 128 interface 15 altsetting 1 endpoint 0xA has invalid maxpacket 1024, setting to 64 [ 964.745470][T13465] usb 1-1: config 128 interface 15 altsetting 1 has an invalid endpoint with address 0x0, skipping [ 964.748631][T13465] usb 1-1: config 128 interface 15 altsetting 1 has an invalid endpoint with address 0x0, skipping [ 964.762736][ T27] audit: type=1326 audit(4129214124.940:2326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15375 comm="syz.4.3270" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=79 compat=0 ip=0xffff8d75a8a8 code=0x7ffc0000 [ 964.769424][T13465] usb 1-1: config 128 interface 15 altsetting 1 has a duplicate endpoint with address 0xA, skipping [ 964.773742][ T27] audit: type=1326 audit(4129214124.950:2327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15375 comm="syz.4.3270" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8d75a8a8 code=0x7ffc0000 [ 964.775537][T13465] usb 1-1: config 128 interface 15 altsetting 1 has an invalid endpoint with address 0x0, skipping [ 964.779814][ T27] audit: type=1326 audit(4129214124.950:2328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15375 comm="syz.4.3270" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8d75a8a8 code=0x7ffc0000 [ 964.779856][ T27] audit: type=1326 audit(4129214124.960:2329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15375 comm="syz.4.3270" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffff8d75a8a8 code=0x7ffc0000 [ 964.788844][T13465] usb 1-1: config 128 interface 15 altsetting 1 has an invalid endpoint with address 0x0, skipping [ 964.788870][T13465] usb 1-1: config 128 interface 15 altsetting 1 has a duplicate endpoint with address 0xE, skipping [ 964.807164][T13465] usb 1-1: config 128 interface 15 altsetting 1 has an invalid endpoint with address 0x27, skipping [ 964.815593][T13465] usb 1-1: config 128 interface 15 altsetting 1 has 10 endpoint descriptors, different from the interface descriptor's value: 9 [ 964.822719][T13465] usb 1-1: config 128 interface 6 altsetting 3 has 0 endpoint descriptors, different from the interface descriptor's value: 13 [ 964.844174][ T27] audit: type=1326 audit(4129214124.960:2330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15375 comm="syz.4.3270" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8d75a8a8 code=0x7ffc0000 [ 964.861941][ T27] audit: type=1326 audit(4129214124.960:2331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15375 comm="syz.4.3270" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8d75a8a8 code=0x7ffc0000 [ 964.869113][T13465] usb 1-1: config 128 interface 15 has no altsetting 0 [ 964.871186][T13465] usb 1-1: config 128 interface 6 has no altsetting 0 [ 964.885758][T13465] usb 1-1: New USB device found, idVendor=0411, idProduct=0097, bcdDevice=d5.83 [ 964.888286][T13465] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 964.891784][T13465] usb 1-1: Product: ప [ 964.892887][T13465] usb 1-1: Manufacturer: Ъ [ 964.894206][T13465] usb 1-1: SerialNumber: syz [ 964.911142][T15369] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 964.913617][T15369] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 964.921992][ T27] audit: type=1326 audit(4129214124.960:2332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15375 comm="syz.4.3270" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=203 compat=0 ip=0xffff8d75a8a8 code=0x7ffc0000 [ 964.992955][ T27] audit: type=1326 audit(4129214124.960:2333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15375 comm="syz.4.3270" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8d75a8a8 code=0x7ffc0000 [ 965.749622][T13465] usb 1-1: USB disconnect, device number 31 [ 973.279869][T15462] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 973.283620][T15462] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 973.335187][T10187] bond0: (slave wlan1): Releasing backup interface [ 973.374121][T10187] device wlan1 left promiscuous mode [ 977.894502][ T27] kauditd_printk_skb: 4 callbacks suppressed [ 977.894523][ T27] audit: type=1326 audit(4129214138.080:2338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15495 comm="syz.1.3291" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9155a8a8 code=0x7ffc0000 [ 977.898387][ T27] audit: type=1326 audit(4129214138.080:2339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15495 comm="syz.1.3291" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=79 compat=0 ip=0xffff9155a8a8 code=0x7ffc0000 [ 977.913597][ T27] audit: type=1326 audit(4129214138.090:2340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15495 comm="syz.1.3291" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9155a8a8 code=0x7ffc0000 [ 977.920955][ T27] audit: type=1326 audit(4129214138.090:2341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15495 comm="syz.1.3291" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffff9155a8a8 code=0x7ffc0000 [ 977.928173][ T27] audit: type=1326 audit(4129214138.090:2342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15495 comm="syz.1.3291" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9155a8a8 code=0x7ffc0000 [ 977.938905][ T27] audit: type=1326 audit(4129214138.090:2343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15495 comm="syz.1.3291" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=203 compat=0 ip=0xffff9155a8a8 code=0x7ffc0000 [ 977.947328][ T27] audit: type=1326 audit(4129214138.090:2344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15495 comm="syz.1.3291" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9155a8a8 code=0x7ffc0000 [ 977.953535][ T27] audit: type=1326 audit(4129214138.100:2345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15495 comm="syz.1.3291" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=209 compat=0 ip=0xffff9155a8a8 code=0x7ffc0000 [ 978.010091][T15498] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 978.024101][ T27] audit: type=1326 audit(4129214138.100:2346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15495 comm="syz.1.3291" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9155a8a8 code=0x7ffc0000 [ 978.030269][ T27] audit: type=1326 audit(4129214138.100:2347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15495 comm="syz.1.3291" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9155a8a8 code=0x7ffc0000 [ 978.111667][T10187] device hsr_slave_0 left promiscuous mode [ 978.584537][T10187] device hsr_slave_1 left promiscuous mode [ 978.653957][ T4302] Bluetooth: hci4: command 0x0406 tx timeout [ 979.124385][T10187] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 979.124530][T15504] ================================================================== [ 979.126706][T10187] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 979.128647][T15504] BUG: KASAN: use-after-free in rose_transmit_link+0x4f8/0x66c [ 979.132528][T15504] Read of size 1 at addr ffff0000f4750c32 by task syz.2.3292/15504 [ 979.134659][T15504] [ 979.135276][T15504] CPU: 0 PID: 15504 Comm: syz.2.3292 Not tainted 6.1.141-syzkaller #0 [ 979.137491][T15504] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 979.140217][T15504] Call trace: [ 979.141185][T15504] dump_backtrace+0x1c8/0x1f4 [ 979.142456][T15504] show_stack+0x2c/0x3c [ 979.143580][T15504] __dump_stack+0x30/0x40 [ 979.144763][T15504] dump_stack_lvl+0xf8/0x160 [ 979.146034][T15504] print_address_description+0x88/0x220 [ 979.147546][T15504] print_report+0x50/0x68 [ 979.148772][T15504] kasan_report+0xa8/0x100 [ 979.149975][T15504] __asan_report_load1_noabort+0x2c/0x38 [ 979.151490][T15504] rose_transmit_link+0x4f8/0x66c [ 979.152891][T15504] rose_write_internal+0xeec/0x17c0 [ 979.154322][T15504] rose_release+0x224/0x518 [ 979.155556][T15504] sock_close+0xb4/0x1f8 [ 979.156714][T15504] __fput+0x1bc/0x7c0 [ 979.157813][T15504] ____fput+0x20/0x30 [ 979.158927][T15504] task_work_run+0x1ec/0x270 [ 979.160166][T15504] get_signal+0x1120/0x1310 [ 979.161391][T15504] do_notify_resume+0x340/0x2b0c [ 979.162805][T15504] el0_svc+0x98/0x138 [ 979.163868][T15504] el0t_64_sync_handler+0x84/0xf0 [ 979.165206][T15504] el0t_64_sync+0x18c/0x190 [ 979.166418][T15504] [ 979.167014][T15504] Allocated by task 13886: [ 979.168208][T15504] kasan_set_track+0x4c/0x80 [ 979.169436][T15504] kasan_save_alloc_info+0x28/0x34 [ 979.170829][T15504] __kasan_kmalloc+0xa0/0xb8 [ 979.172079][T15504] kmalloc_trace+0x7c/0x94 [ 979.173272][T15504] rose_add_node+0x1f4/0xba4 [ 979.174525][T15504] rose_rt_ioctl+0xa04/0xde4 [ 979.175767][T15504] rose_ioctl+0x378/0xb80 [ 979.176952][T15504] sock_do_ioctl+0xf8/0x240 [ 979.178245][T15504] sock_ioctl+0x5c4/0x840 [ 979.179447][T15504] __arm64_sys_ioctl+0x14c/0x1c8 [ 979.180802][T15504] invoke_syscall+0x98/0x2bc [ 979.182065][T15504] el0_svc_common+0x138/0x258 [ 979.183411][T15504] do_el0_svc+0x58/0x13c [ 979.184662][T15504] el0_svc+0x58/0x138 [ 979.185783][T15504] el0t_64_sync_handler+0x84/0xf0 [ 979.187155][T15504] el0t_64_sync+0x18c/0x190 [ 979.188364][T15504] [ 979.188962][T15504] Freed by task 15484: [ 979.190122][T15504] kasan_set_track+0x4c/0x80 [ 979.191383][T15504] kasan_save_free_info+0x3c/0x60 [ 979.192785][T15504] ____kasan_slab_free+0x148/0x1b0 [ 979.194192][T15504] __kasan_slab_free+0x18/0x28 [ 979.195519][T15504] slab_free_freelist_hook+0x16c/0x1ec [ 979.197032][T15504] __kmem_cache_free+0xc0/0x224 [ 979.198331][T15504] kfree+0xd0/0x1ac [ 979.199379][T15504] rose_remove_neigh+0x23c/0x2b8 [ 979.200746][T15504] rose_rt_device_down+0x33c/0x394 [ 979.202141][T15504] rose_device_event+0x5d8/0x68c [ 979.203505][T15504] raw_notifier_call_chain+0xd4/0x164 [ 979.204970][T15504] __dev_notify_flags+0x250/0x46c [ 979.206403][T15504] dev_change_flags+0xc8/0x154 [ 979.207747][T15504] dev_ifsioc+0x524/0xed0 [ 979.209045][T15504] dev_ioctl+0x4c8/0xc8c [ 979.210240][T15504] sock_do_ioctl+0x18c/0x240 [ 979.211538][T15504] sock_ioctl+0x5c4/0x840 [ 979.212773][T15504] __arm64_sys_ioctl+0x14c/0x1c8 [ 979.214094][T15504] invoke_syscall+0x98/0x2bc [ 979.215364][T15504] el0_svc_common+0x138/0x258 [ 979.216636][T15504] do_el0_svc+0x58/0x13c [ 979.217875][T15504] el0_svc+0x58/0x138 [ 979.218934][T15504] el0t_64_sync_handler+0x84/0xf0 [ 979.220306][T15504] el0t_64_sync+0x18c/0x190 [ 979.221518][T15504] [ 979.222199][T15504] Last potentially related work creation: [ 979.223758][T15504] kasan_save_stack+0x40/0x70 [ 979.225135][T15504] __kasan_record_aux_stack+0xc0/0xdc [ 979.226638][T15504] kasan_record_aux_stack_noalloc+0x14/0x20 [ 979.228318][T15504] insert_work+0x64/0x37c [ 979.229537][T15504] __queue_work+0xcbc/0x123c [ 979.230840][T15504] delayed_work_timer_fn+0x74/0x90 [ 979.232322][T15504] call_timer_fn+0x1b8/0x964 [ 979.233571][T15504] __run_timers+0x490/0x6bc [ 979.234961][T15504] run_timer_softirq+0x7c/0x114 [ 979.236328][T15504] handle_softirqs+0x318/0xc6c [ 979.237641][T15504] __do_softirq+0x14/0x20 [ 979.239020][T15504] [ 979.239688][T15504] Second to last potentially related work creation: [ 979.241581][T15504] kasan_save_stack+0x40/0x70 [ 979.242900][T15504] __kasan_record_aux_stack+0xc0/0xdc [ 979.244406][T15504] kasan_record_aux_stack_noalloc+0x14/0x20 [ 979.246153][T15504] insert_work+0x64/0x37c [ 979.247356][T15504] __queue_work+0xcbc/0x123c [ 979.248691][T15504] delayed_work_timer_fn+0x74/0x90 [ 979.250128][T15504] call_timer_fn+0x1b8/0x964 [ 979.251452][T15504] __run_timers+0x490/0x6bc [ 979.252722][T15504] run_timer_softirq+0x7c/0x114 [ 979.254107][T15504] handle_softirqs+0x318/0xc6c [ 979.255442][T15504] __do_softirq+0x14/0x20 [ 979.256744][T15504] [ 979.257360][T15504] The buggy address belongs to the object at ffff0000f4750c00 [ 979.257360][T15504] which belongs to the cache kmalloc-512 of size 512 [ 979.261421][T15504] The buggy address is located 50 bytes inside of [ 979.261421][T15504] 512-byte region [ffff0000f4750c00, ffff0000f4750e00) [ 979.265071][T15504] [ 979.265725][T15504] The buggy address belongs to the physical page: [ 979.267535][T15504] page:00000000f891aeb0 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x134750 [ 979.270449][T15504] head:00000000f891aeb0 order:2 compound_mapcount:0 compound_pincount:0 [ 979.272952][T15504] flags: 0x5ffc00000010200(slab|head|node=0|zone=2|lastcpupid=0x7ff) [ 979.275363][T15504] raw: 05ffc00000010200 dead000000000100 dead000000000122 ffff0000c0002600 [ 979.277906][T15504] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 979.280306][T15504] page dumped because: kasan: bad access detected [ 979.282092][T15504] [ 979.282767][T15504] Memory state around the buggy address: [ 979.284301][T15504] ffff0000f4750b00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 979.286600][T15504] ffff0000f4750b80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 979.288895][T15504] >ffff0000f4750c00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 979.291175][T15504] ^ [ 979.292756][T15504] ffff0000f4750c80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 979.295002][T15504] ffff0000f4750d00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 979.297310][T15504] ================================================================== [ 979.415144][T10187] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 979.418862][T10187] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 979.439464][T15504] Disabling lock debugging due to kernel taint [ 979.441293][T15504] ------------[ cut here ]------------ [ 979.442744][T15504] ODEBUG: assert_init not available (active state 0) object type: timer_list hint: rose_t0timer_expiry+0x0/0x344 [ 979.446203][T15504] WARNING: CPU: 1 PID: 15504 at lib/debugobjects.c:518 debug_print_object+0x148/0x1d4 [ 979.448674][T15504] Modules linked in: [ 979.449660][T15504] CPU: 1 PID: 15504 Comm: syz.2.3292 Tainted: G B 6.1.141-syzkaller #0 [ 979.452161][T15504] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 979.454721][T15504] pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 979.456759][T15504] pc : debug_print_object+0x148/0x1d4 [ 979.458213][T15504] lr : debug_print_object+0x148/0x1d4 [ 979.459675][T15504] sp : ffff8000215a7620 [ 979.460802][T15504] x29: ffff8000215a7620 x28: dfff800000000000 x27: 0000000000000000 [ 979.462932][T15504] x26: ffff800015070000 x25: ffff8000083ad878 x24: dfff800000000000 [ 979.465022][T15504] x23: 0000000000000000 x22: ffff800010a9f6f0 x21: ffff800011f6a080 [ 979.467077][T15504] x20: ffff800011a9ad00 x19: ffff800011f69bc0 x18: ffff800011a7bce0 [ 979.469231][T15504] x17: 203a657079742074 x16: ffff800008042940 x15: 0000000000000002 [ 979.471351][T15504] x14: 00000000ffffffff x13: 0000000000000001 x12: 0000000000080000 [ 979.473534][T15504] x11: 000000000007ffff x10: ffff800028699000 x9 : 3cc36dfcb524fc00 [ 979.475660][T15504] x8 : 3cc36dfcb524fc00 x7 : 0000000000000001 x6 : 0000000000000001 [ 979.477787][T15504] x5 : ffff8000215a70b8 x4 : ffff800015154700 x3 : ffff8000083115f4 [ 979.479989][T15504] x2 : 0000000000000001 x1 : 0000000100000000 x0 : 0000000000000000 [ 979.482139][T15504] Call trace: [ 979.483013][T15504] debug_print_object+0x148/0x1d4 [ 979.484425][T15504] debug_object_assert_init+0x250/0x2c8 [ 979.485909][T15504] timer_delete+0x48/0x1e8 [ 979.487096][T15504] rose_transmit_link+0x43c/0x66c [ 979.488416][T15504] rose_write_internal+0xeec/0x17c0 [ 979.489865][T15504] rose_release+0x224/0x518 [ 979.491068][T15504] sock_close+0xb4/0x1f8 [ 979.492207][T15504] __fput+0x1bc/0x7c0 [ 979.493289][T15504] ____fput+0x20/0x30 [ 979.494360][T15504] task_work_run+0x1ec/0x270 [ 979.495593][T15504] get_signal+0x1120/0x1310 [ 979.496835][T15504] do_notify_resume+0x340/0x2b0c [ 979.498218][T15504] el0_svc+0x98/0x138 [ 979.499313][T15504] el0t_64_sync_handler+0x84/0xf0 [ 979.500654][T15504] el0t_64_sync+0x18c/0x190 [ 979.501916][T15504] irq event stamp: 1011 [ 979.503043][T15504] hardirqs last enabled at (1011): [] finish_lock_switch+0xb0/0x1c4 [ 979.505608][T15504] hardirqs last disabled at (1010): [] __schedule+0x298/0x1b2c [ 979.508087][T15504] softirqs last enabled at (630): [] lock_sock_nested+0xe0/0x130 [ 979.510764][T15504] softirqs last disabled at (628): [] lock_sock_nested+0x88/0x130 [ 979.513326][T15504] ---[ end trace 0000000000000000 ]--- [ 979.704789][T10187] device veth1_macvtap left promiscuous mode [ 979.707054][T10187] device veth0_macvtap left promiscuous mode [ 979.709098][T10187] device veth1_vlan left promiscuous mode [ 979.710890][T10187] device veth0_vlan left promiscuous mode [ 980.395351][T10187] bond1 (unregistering): Released all slaves [ 982.074486][T10187] team0 (unregistering): Port device team_slave_1 removed [ 982.265059][T10187] team0 (unregistering): Port device team_slave_0 removed [ 982.425128][T10187] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 982.464068][T10187] device bond_slave_1 left promiscuous mode [ 984.874860][T10187] bond0 (unregistering): Released all slaves [ 984.945297][T15293] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 985.006095][T15293] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 985.045485][T15293] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 985.068669][T15293] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 985.134299][T15293] 8021q: adding VLAN 0 to HW filter on device bond0 [ 985.139496][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 985.142051][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 985.156222][T15293] 8021q: adding VLAN 0 to HW filter on device team0 [ 985.160910][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 985.163991][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 985.166733][ T4363] bridge0: port 1(bridge_slave_0) entered blocking state [ 985.168745][ T4363] bridge0: port 1(bridge_slave_0) entered forwarding state [ 985.171269][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 985.192051][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 985.194902][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 985.197666][ T4363] bridge0: port 2(bridge_slave_1) entered blocking state [ 985.199767][ T4363] bridge0: port 2(bridge_slave_1) entered forwarding state [ 985.206214][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 985.211389][T13548] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 985.216347][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 985.219165][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 985.222042][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 985.226961][T13548] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 985.229959][T13548] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 985.238452][T13548] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 985.241535][T13548] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 985.246698][T15293] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 985.250185][T15293] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 985.252738][T13548] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 985.256019][T13548] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 985.331618][T15293] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 985.335176][T13548] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 985.337369][T13548] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 985.344818][ T4520] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 985.347595][ T4520] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 985.357938][ T4520] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 985.360754][ T4520] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 985.363433][ T4520] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 985.378326][ T4520] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 985.382427][T15293] device veth0_vlan entered promiscuous mode [ 985.387398][T15293] device veth1_vlan entered promiscuous mode [ 985.398714][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 985.401300][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 985.404371][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 985.406991][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 985.410819][T15293] device veth0_macvtap entered promiscuous mode [ 985.414713][T15293] device veth1_macvtap entered promiscuous mode [ 985.431465][T15293] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 985.435485][T15293] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 985.438226][T15293] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 985.440975][T15293] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 985.443602][T15293] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 985.447319][T15293] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 985.449902][T15293] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 985.452801][T15293] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 985.457010][T15293] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 985.459276][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 985.461923][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 985.467719][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 985.470506][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 985.475864][T15293] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 985.478703][T15293] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 985.481371][T15293] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 985.484647][T15293] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 985.487360][T15293] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 985.490236][T15293] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 985.492843][T15293] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 985.496368][T15293] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 985.499947][T15293] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 985.502399][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 985.508351][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 985.512642][T15293] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 985.516552][T15293] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 985.519002][T15293] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 985.521432][T15293] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 985.550006][T13509] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 985.552267][T13509] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 985.557942][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 985.565435][T13509] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 985.567618][T13509] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 985.569710][T13509] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 986.094310][ T2059] ieee802154 phy0 wpan0: encryption failed: -22 [ 986.096061][ T2059] ieee802154 phy1 wpan1: encryption failed: -22