last executing test programs: 7m15.044006246s ago: executing program 2 (id=2266): prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18020000020000000000000000000000850000008700000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000040000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000008200000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bind$inet(r1, 0x0, 0x0) fanotify_init(0x200, 0x0) socket$kcm(0x21, 0x2, 0x2) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x1fffffffffe, 0xfffffffffffffffd, 0x80000001, 0x0, 0x1000001000, 0x9}, 0x0, &(0x7f00000002c0)={0x3fb, 0x8000, 0x400000000001, 0x9, 0x40000000000000, 0xf, 0xf4e0, 0x2}, 0x0, 0x0) 7m13.50099256s ago: executing program 2 (id=2269): sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, 0x0, 0xc881) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000)={'#! ', './file0', [{0x20, 'axA\x9b^\xfb^$\r\'uij\r\xd9\xef\xd2Et^Q\v\x9fOFL\x95`Z\xae\xc3a\xfe%\x94\x1a\xebt\xc6\x06\x8fD,\xf7\xae#\x80\x80\xdf\xa3\xcaO\xc6\x8a\x91\x90\xadR\aW\xe1\xf3n\xca\xa3\x8f\xd6F\x03\x0e\x9b\xe5yb\xfc\xa19wUs\x83\xf1{&\n\x1d\x8e\x82y\x1a.B\x0e\xea\x17\xc7\xe7H\xa9\xd4\x8e\xe7 gD\x89*\xb5c\xc5\x8a\xe6R\xe5YGq\xf5\xb6\x95\xbc\x112\x9bno\xc8\x06\xb6\b\xcc\x03{Sn\x94G\x01\xb4\xffJQ8t\x99vY\xaaf\xc7,\x9f\xbb\x15G\x1cr\x19\xef\xab\n\xa8\xbc\xbd\xa2E\x16\x1cm\xbd=\x98\x7fU\xcbg\x15%\x95\xb11\x017\x83*\x14\xcbt\xc2\xcb\x04\x1e~?\xb9j\x18\x96\x84EA\xeaB\a\x83\xba\xdco<\x00'/256}]}, 0x10c) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r0, 0x890b, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x6, @null, @bpq0, 0x0, [@bcast, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) connect$rose(0xffffffffffffffff, &(0x7f0000000100)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x0, [@null, @null, @null, @default, @bcast, @default]}, 0x40) 7m11.556525398s ago: executing program 2 (id=2273): bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) recvmmsg(r1, &(0x7f0000003c40)=[{{0x0, 0x0, 0x0}, 0x80000000}], 0x1, 0x60010002, 0x0) chdir(0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x48, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4, {0x3}}}}]}]}, 0x48}}, 0x0) 7m2.276036718s ago: executing program 2 (id=2290): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket(0x1, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)=@tcp6=r2}, 0x20) sendmmsg$unix(r2, &(0x7f0000001680), 0x0, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r3 = syz_create_resource$binfmt(0x0) close(0xffffffffffffffff) execveat$binfmt(0xffffffffffffff9c, r3, 0x0, 0x0, 0x0) openat$binfmt(0xffffffffffffff9c, r3, 0x2, 0x0) execveat$binfmt(0xffffffffffffff9c, r3, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) sync_file_range(r0, 0xffffffffffffa525, 0x7, 0x3) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r6 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0xffa1, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r5, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYBLOB="35874207"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 7m0.51331832s ago: executing program 2 (id=2299): socket$kcm(0x10, 0x2, 0x0) syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f0000000980)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x1200800, &(0x7f00000008c0)=ANY=[@ANYBLOB="706172743d3078303030303030303030303030303031302c6e6c733d69736f383835392d332c747970653d7cfa42012c666f7263652c6769643d", @ANYRESHEX=0x0, @ANYBLOB="00000000f5", @ANYRESHEX=0x0, @ANYBLOB="056c"], 0x3, 0x6c4, &(0x7f0000001500)="$eJzs3U+IHGndB/BvdSY96byQnd3NZvOKsMMGFt1gMpNmTQRho4jkECToZa9DMtkM6WSXyaxkg5iOugqePMkePKxIPOxJRIT1IOJ6FgQvnnIPePOQgzpSVd09PTOdzkwmmR7j5wM19VQ99TzPr36pP109EyrA/6xzb2V/N0XOHT9/s1y+d7fduXe3fa1fTjKdpJFM1bMUraT4NDmbesr/lyt73RUPG+eN+58UUx9+3K6XpnpTtX1jXLtNRm7ZTQ4MFvYlma2L/9xyt5v6q6aqn4tr/T3c9Ih1g0bFIO4yYcf6iYNJW92ku1bZeGTzrZ+3wJ51u75vbjKTHEx9d61ucfXVobXL0T2Wsdem7u7FAQAAAE/LyGf5Yc89yIPczKHdCQcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACeDUX9zsCiNzX65dkU/ff/N4feqd+ccLg79MHlavbN5yYdCAAAAAAAAADsyCsP8iA3c6i/vFpUv/N/tVo4XP38v7yXG1nMck7kZhaykpUsZz7JzFBHzZsLKyvL85tb/jRly9XV1du9lqdGtjy1Pq7uxj8tGPWXBt2d7j0AAAAAAAAAPDO+l3Nrv/8HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIC9oEj21bNqOtwvz6QxleRAkmYxO9i8OdFgt6gYU/eHXYwDAAAAJqTVmx8q/l0XVovqmf9I9dh8IO/lelaylJV0sphLvUfp8qm/8Zduu3PvbvtaOW3u+Ct/31YcVY+pv3sYPfJctcVLgxbn8vV8K8czmwtZzlK+nYWsZDGz+VpVWkiRmd7D/8y9u630Y90c79l1Sxc2xvbKULmM72gVSSuXs1TFdiIXm/3QG73tjg6N9ttmsmHEO2V2ijd7tpijS715uUc/ecTXGrtrptrz/YOMzPVyX2bj+eG8b879No+TjSPNpzH4Durw2ijl4saRHivnB3vzMtc/fLo53+ZXaesz0f1xudQ/+o6Mz3ny+b/+8cKVxvWrVy7fOL53DqPHtPGYaA9l4uUtZaJTZqK7g0wc2En8T06zl436Krq9q+WrVdtDWco38k4uZTGnM5f5nMlcvpRTaefUUF5fGp/X6lxrbO9cO/a5XqG8J/1o6N60a6YfVlHm9fmhvA5f6WaquuE1a1l6YQtZKpoZnaW/jQxl6jO9QjnG94fuOJO3MRPzQ5l4cXwmfv6v1SQ3OtevLl9ZeHfMGLd+f/C1frlfKE/bD9Zfm3/xJPdrG3q7Wx4vL5T/WKlvG8NHR1n3Yr+uzlcxlbV2hwd16+9zzWaq87mue9SZWvZ05M6onuq6l0eO0q7qjg7VrfuUk3fSGXwKAWAPO/j6wWbrfuvPrY9aP2hdaZ0/8NXpM9OfbWb/n6Z+t+9XjV82vly8no/y3RyadKQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPAsuPH+rasLnc7i8h4spPGEO7wzsqqfinpNc2w//Ze17Yn87IHCvl4+Bmumxx1Rv04ypsPmJPailWRPJDNTuzDWdEZUnR+saSWNQTxJru6RF9wBT8PJlWvvnrzx/q0vLF1beHvx7cXrp86cfvN0+4vzt09eXuosztU/Jx0l8DSsfQyYdCQAAAAAAAAAAADAVu3Gf28YMWzRncC+AgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP+dzr2V/d0UmZ87MVcu37vb7pRTv7y25VSSRpLiO0nxaXI29ZSZoe6Kh43zxv1Pfvbahx+31/qa6m/f2NDuN/9YXd3mXnR7U2aT7OvNH216S/1dHOqvu83AasVgD8uEHesnDibtPwEAAP//yoYBHQ==") r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, 0x0, 0x0) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000c18000)="ad56b6", 0x3) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c000280050001000000000024000280140001800800010000"], 0x64}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0x3, 0x2}, {0x0, [0x2e]}}, 0x0, 0x26, 0x0, 0x1}, 0x28) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x14, 0x3, 0x1, 0x401, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r6) sendmsg$NLBL_MGMT_C_ADDDEF(r6, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) 6m59.15310185s ago: executing program 2 (id=2300): bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) recvmmsg(r1, &(0x7f0000003c40)=[{{0x0, 0x0, 0x0}, 0x80000000}], 0x1, 0x60010002, 0x0) chdir(0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x48, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4, {0x3}}}}]}]}, 0x48}}, 0x0) 6m43.792367472s ago: executing program 32 (id=2300): bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) recvmmsg(r1, &(0x7f0000003c40)=[{{0x0, 0x0, 0x0}, 0x80000000}], 0x1, 0x60010002, 0x0) chdir(0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x48, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4, {0x3}}}}]}]}, 0x48}}, 0x0) 1m3.624126608s ago: executing program 4 (id=2947): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket(0x1, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)=@tcp6=r2}, 0x20) sendmmsg$unix(r2, &(0x7f0000001680), 0x0, 0x0) r3 = syz_create_resource$binfmt(0x0) execveat$binfmt(0xffffffffffffff9c, r3, 0x0, 0x0, 0x0) openat$binfmt(0xffffffffffffff9c, r3, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) sync_file_range(r0, 0xffffffffffffa525, 0x7, 0x3) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r6 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0xffa1, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r5, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYBLOB="35874207"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 1m2.267481997s ago: executing program 4 (id=2949): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha384\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) 1m2.027839157s ago: executing program 4 (id=2951): socket$kcm(0x10, 0x2, 0x0) syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f0000000980)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x1200800, &(0x7f00000008c0)=ANY=[@ANYBLOB="706172743d3078303030303030303030303030303031302c6e6c733d69736f383835392d332c747970653d7cfa42012c666f7263652c6769643d", @ANYRESHEX=0x0, @ANYBLOB="00000000f5", @ANYRESHEX=0x0, @ANYBLOB="056c"], 0x3, 0x6c4, &(0x7f0000001500)="$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") r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, 0x0, 0x0) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000c18000)="ad56b6", 0x3) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c000280050001000000000024000280140001800800010000"], 0x64}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0x3, 0x2}, {0x0, [0x2e]}}, 0x0, 0x26, 0x0, 0x1}, 0x28) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x14, 0x3, 0x1, 0x401, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r6) sendmsg$NLBL_MGMT_C_ADDDEF(r6, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) 1m0.843901383s ago: executing program 4 (id=2954): prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18020000020000000000000000000000850000008700000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000040000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000008200000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bind$inet(r1, 0x0, 0x0) socket$kcm(0x21, 0x2, 0x2) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x1fffffffffe, 0xfffffffffffffffd, 0x80000001, 0x0, 0x1000001000, 0x9}, 0x0, &(0x7f00000002c0)={0x3fb, 0x8000, 0x400000000001, 0x9, 0x40000000000000, 0xf, 0xf4e0, 0x2}, 0x0, 0x0) 59.584319484s ago: executing program 4 (id=2956): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000200)="da467702e2520108dcebc5560e4f93142974b51221138c2cdf5b4d5781", 0x1d}], 0x1, 0x0, 0x0, 0x4000}, 0x0) socketpair(0x15, 0x3, 0x1, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$rds(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000640)=""/10, 0xa}, {&(0x7f00000006c0)=""/85, 0x55}, {&(0x7f0000000740)=""/127, 0x7f}, {&(0x7f00000007c0)=""/2, 0x2}, {&(0x7f0000000800)=""/194, 0xc2}, {&(0x7f0000000900)=""/124, 0x7c}], 0x6, &(0x7f0000000a80)=[@rdma_dest={0x18, 0x114, 0x2, {0x9, 0x4}}, @mask_cswp={0x58, 0x114, 0x9, {{0x17, 0x80000000}, &(0x7f0000000a00)=0x7, 0x0, 0x0, 0x7, 0x3, 0x5e13, 0x78, 0x1000000000000}}], 0x70, 0x4000000}, 0x4000080) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$inet(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000002c0)="beaa38543627a7a662afe0d83fc3e43fc6c358893ae9cb8787f4659b80c54d51815d240ba45b930936aecd07ff84b35954a5a75c1ba4252e11ab09ebfa468f58829bb24aebceb9", 0x47}], 0x1}, 0x20048050) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) write$P9_RSTATu(0xffffffffffffffff, 0x0, 0x232) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 59.225381153s ago: executing program 4 (id=2959): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket(0x1, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)=@tcp6=r2}, 0x20) sendmmsg$unix(r2, &(0x7f0000001680), 0x0, 0x0) r3 = syz_create_resource$binfmt(0x0) execveat$binfmt(0xffffffffffffff9c, r3, 0x0, 0x0, 0x0) openat$binfmt(0xffffffffffffff9c, r3, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) sync_file_range(r0, 0xffffffffffffa525, 0x7, 0x3) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r6 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0xffa1, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r5, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYBLOB="35874207"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 55.143701743s ago: executing program 0 (id=2965): prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18020000020000000000000000000000850000008700000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000040000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000008200000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bind$inet(r1, 0x0, 0x0) socket$kcm(0x21, 0x2, 0x2) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x1fffffffffe, 0xfffffffffffffffd, 0x80000001, 0x0, 0x1000001000, 0x9}, 0x0, &(0x7f00000002c0)={0x3fb, 0x8000, 0x400000000001, 0x9, 0x40000000000000, 0xf, 0xf4e0, 0x2}, 0x0, 0x0) 53.993819606s ago: executing program 0 (id=2966): syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) 53.364521837s ago: executing program 0 (id=2967): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$RTC_UIE_ON(0xffffffffffffffff, 0x7003) fsopen(0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000f80)={[{@grpquota}, {}, {@nombcache}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@nodelalloc}, {@noblock_validity}, {@noauto_da_alloc}]}, 0xfe, 0x54c, &(0x7f0000000400)="$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") setxattr$incfs_id(&(0x7f0000000140)='./file0/file0\x00', &(0x7f00000001c0), &(0x7f0000000540), 0xff57, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x1c0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f000001aa40)=""/102400, 0x19000) poll(0x0, 0x0, 0x9) unlink(&(0x7f0000000080)='./file0/file0\x00') r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x84, &(0x7f0000009b00)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x6000, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x4c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x20, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}, {0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xb0}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 52.302204153s ago: executing program 0 (id=2969): socket$kcm(0x10, 0x2, 0x0) syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f0000000980)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x1200800, &(0x7f00000008c0)=ANY=[@ANYBLOB="706172743d3078303030303030303030303030303031302c6e6c733d69736f383835392d332c747970653d7cfa42012c666f7263652c6769643d", @ANYRESHEX=0x0, @ANYBLOB="00000000f5", @ANYRESHEX=0x0, @ANYBLOB="056c"], 0x3, 0x6c4, &(0x7f0000001500)="$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") r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, 0x0, 0x0) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000c18000)="ad56b6", 0x3) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c000280050001000000000024000280140001800800010000"], 0x64}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0x3, 0x2}, {0x0, [0x2e]}}, 0x0, 0x26, 0x0, 0x1}, 0x28) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x14, 0x3, 0x1, 0x401, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r6) 49.86033738s ago: executing program 0 (id=2971): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha384\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0x5, &(0x7f0000000000)={0xffffffff, 0x1000086}, 0x0) sched_setaffinity(0x0, 0x43, &(0x7f0000000040)=0x2) read$msr(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r2) sendmsg$ETHTOOL_MSG_TSINFO_GET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x14, r3, 0x6a98047402e98331, 0x70bd21, 0xffa1}, 0x14}, 0x1, 0x0, 0x0, 0x24000044}, 0x4008800) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) close_range(r4, r4, 0x2) move_mount(r4, 0x0, r4, 0x0, 0x256) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) 47.433066207s ago: executing program 0 (id=2975): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x4fed0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002300)={0x1c, 0x34, 0x107, 0xffffffff, 0xfffffffe, {0xff, 0x7c}, [@nested={0x8, 0x4, 0x0, 0x1, [@nested={0x4, 0x149}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) socket$netlink(0x10, 0x3, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000001"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r6, 0xaf01, 0x0) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x43}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4a}, 0x90) 32.058725699s ago: executing program 33 (id=2975): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x4fed0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002300)={0x1c, 0x34, 0x107, 0xffffffff, 0xfffffffe, {0xff, 0x7c}, [@nested={0x8, 0x4, 0x0, 0x1, [@nested={0x4, 0x149}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) socket$netlink(0x10, 0x3, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000001"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r6, 0xaf01, 0x0) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x43}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4a}, 0x90) 14.84331778s ago: executing program 3 (id=3018): prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18020000020000000000000000000000850000008700000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000040000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000008200000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bind$inet(r1, 0x0, 0x0) fanotify_init(0x200, 0x0) socket$kcm(0x21, 0x2, 0x2) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x1fffffffffe, 0xfffffffffffffffd, 0x80000001, 0x0, 0x1000001000, 0x9}, 0x0, &(0x7f00000002c0)={0x3fb, 0x8000, 0x400000000001, 0x9, 0x40000000000000, 0xf, 0xf4e0, 0x2}, 0x0, 0x0) 13.700294052s ago: executing program 3 (id=3019): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x4fed0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002300)={0x1c, 0x34, 0x107, 0xffffffff, 0xfffffffe, {0xff, 0x7c}, [@nested={0x8, 0x4, 0x0, 0x1, [@nested={0x4, 0x149}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) socket$netlink(0x10, 0x3, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000001"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r6, 0xaf01, 0x0) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x43}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4a}, 0x90) 13.422193105s ago: executing program 1 (id=3020): pipe(0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket(0x27, 0x4, 0x80000000) creat(&(0x7f0000000280)='./cgroup.net/devices.allow\x00', 0x141) openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000340)={r2, r1, 0x0, 0x1, &(0x7f00000000c0)='\x00'}, 0x30) r6 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\n\x00\x00\x00\a\x00\x00'], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000000)='percpu_alloc_percpu\x00'}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x9, 0x5, 0x8, 0x40, 0x42}, 0x48) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r8 = timerfd_create(0x0, 0x0) timerfd_settime(r8, 0x3, &(0x7f0000000440)={{0x0, 0x989680}}, 0x0) close_range(r7, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000001a00), r5) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r6, 0x0, 0x48044) 10.904536008s ago: executing program 3 (id=3022): syz_open_dev$vim2m(0x0, 0x800, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, 0x0, 0x0) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f0000000340), 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0x0, 0x0, &(0x7f0000000bc0)) r1 = socket(0x10, 0x803, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000006c0)="5c00000013006bcd9e3fe3dc6e48aa310b6b8703100000001f03000000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4014) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r2, 0x0, 0x80c0) sendmsg$nl_route_sched(r1, 0x0, 0x400c084) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, 0x0, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) fstat(r2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) dup(0xffffffffffffffff) syz_io_uring_setup(0xa39, 0x0, 0x0, &(0x7f0000000340)) r5 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$F2FS_IOC_GET_PIN_FILE(r5, 0x8004f50e, 0x0) 10.784149938s ago: executing program 1 (id=3023): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket(0x1, 0x2, 0x0) sendmmsg$unix(r2, &(0x7f0000001680), 0x0, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r3 = syz_create_resource$binfmt(0x0) execveat$binfmt(0xffffffffffffff9c, r3, 0x0, 0x0, 0x0) openat$binfmt(0xffffffffffffff9c, r3, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) sync_file_range(r0, 0xffffffffffffa525, 0x7, 0x3) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r6 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0xffa1, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r5, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYBLOB="35874207"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 9.789237539s ago: executing program 3 (id=3024): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000200)="da467702e2520108dcebc5560e4f93142974b51221138c2cdf5b4d5781", 0x1d}], 0x1, 0x0, 0x0, 0x4000}, 0x0) socketpair(0x15, 0x3, 0x1, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$rds(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000640)=""/10, 0xa}, {&(0x7f00000006c0)=""/85, 0x55}, {&(0x7f0000000740)=""/127, 0x7f}, {&(0x7f00000007c0)=""/2, 0x2}, {&(0x7f0000000800)=""/194, 0xc2}, {&(0x7f0000000900)=""/124, 0x7c}], 0x6, &(0x7f0000000a80)=[@rdma_dest={0x18, 0x114, 0x2, {0x9, 0x4}}, @mask_cswp={0x58, 0x114, 0x9, {{0x17, 0x80000000}, &(0x7f0000000a00)=0x7, 0x0, 0x0, 0x7, 0x3, 0x5e13, 0x78, 0x1000000000000}}], 0x70, 0x4000000}, 0x4000080) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$inet(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000002c0)="beaa38543627a7a662afe0d83fc3e43fc6c358893ae9cb8787f4659b80c54d51815d240ba45b930936aecd07ff84b35954a5a75c1ba4252e11ab09ebfa468f58829bb24aebceb9", 0x47}], 0x1}, 0x20048050) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) write$P9_RSTATu(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x232) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 9.77918478s ago: executing program 5 (id=3025): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$RTC_UIE_ON(0xffffffffffffffff, 0x7003) fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000f80)={[{@grpquota}, {}, {@nombcache}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@nodelalloc}, {@noblock_validity}, {@noauto_da_alloc}]}, 0xfe, 0x54c, &(0x7f0000000400)="$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") setxattr$incfs_id(&(0x7f0000000140)='./file0/file0\x00', &(0x7f00000001c0), &(0x7f0000000540), 0xff57, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x1c0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f000001aa40)=""/102400, 0x19000) poll(0x0, 0x0, 0x9) unlink(&(0x7f0000000080)='./file0/file0\x00') r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x6000, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x4}, {0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 8.861849914s ago: executing program 5 (id=3026): socketpair$unix(0x1, 0x3, 0x0, 0x0) sync_file_range(0xffffffffffffffff, 0xffffffffffffa525, 0x7, 0x3) 8.628200162s ago: executing program 5 (id=3027): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_test', 0x13b481, 0x16) r1 = userfaultfd(0x80801) r2 = openat$rtc(0xffffffffffffff9c, 0x0, 0x8002, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_GET(r3, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000580)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="11ea2cbd7000ffdbdf250b000000180001801400020076657468305f746f5f62726964676500"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x10) ioctl$RTC_SET_TIME(r2, 0x4024700a, 0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000ffb000/0x1000)=nil, 0x1000}}) clock_gettime(0x0, &(0x7f00000002c0)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000100)={0x5, 0x1000, 0x7fffffffffffffff, 0x2, 0x5, 0x8000000000000001, 0x2, 0x3}, &(0x7f0000000180)={0xed, 0x5, 0x3, 0xb2ef, 0x4, 0x9, 0x4, 0x7}, &(0x7f0000000280)={0xa, 0x5a13, 0xfff, 0x2, 0x8, 0x7, 0x3ff, 0x1}, &(0x7f0000000300)={r6, r7+10000000}, &(0x7f0000000380)={&(0x7f0000000340)={[0x5]}, 0x8}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(0xffffffffffffffff, 0xc03064ca, &(0x7f0000000ac0)={0x0, 0x0, 0x5, 0x0, 0x4}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) openat$vimc1(0xffffffffffffff9c, 0x0, 0x2, 0x0) 7.995611083s ago: executing program 1 (id=3028): pipe(0x0) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000340)={r1, r0, 0x0, 0x1, &(0x7f00000000c0)='\x00'}, 0x30) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\n\x00\x00\x00\a\x00\x00'], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x9, 0x5, 0x8, 0x40, 0x42}, 0x48) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) timerfd_create(0x0, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) 7.952456927s ago: executing program 3 (id=3029): r0 = socket$inet_sctp(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(r3, 0x0, 0x0) sendmsg$NFT_BATCH(r3, 0x0, 0x20008000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) clock_gettime(0x37e08658adf9aa53, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x4000000) unshare(0x20000400) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r5 = socket$tipc(0x1e, 0x2, 0x0) getsockopt$sock_buf(r5, 0x1, 0x1a, 0x0, &(0x7f00000001c0)) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000100), 0x106, 0xa}}, 0x20) syz_emit_ethernet(0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000480)={0x50000015}) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x8940, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000d40)={0x44, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x44}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast1=0xe0004001}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x0) sendmsg$inet_sctp(r0, 0x0, 0x8000) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001800)=ANY=[@ANYBLOB="1201000000000040b40461de000000000001090224"], 0x0) socket$nl_generic(0x10, 0x3, 0x10) 7.163507381s ago: executing program 5 (id=3030): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x2008084) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = open(&(0x7f00009e1000)='./file0\x00', 0x64c02, 0x1d2) fcntl$setlease(r3, 0x400, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) 6.098905327s ago: executing program 5 (id=3031): socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(sha1-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000c18000), 0x0) sendmsg$alg(0xffffffffffffffff, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x14}, 0x4801) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) fsmount(r5, 0x1, 0x0) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="14"], &(0x7f0000000180), 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x8e79f0352167ea94) 3.730010818s ago: executing program 1 (id=3032): socket$kcm(0x10, 0x2, 0x0) syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f0000000980)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x1200800, &(0x7f00000008c0)=ANY=[@ANYBLOB="706172743d3078303030303030303030303030303031302c6e6c733d69736f383835392d332c747970653d7cfa42012c666f7263652c6769643d", @ANYRESHEX=0x0, @ANYBLOB="00000000f5", @ANYRESHEX=0x0, @ANYBLOB="056c"], 0x3, 0x6c4, &(0x7f0000001500)="$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") r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c000280050001000000000024000280140001800800010000"], 0x64}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0x3, 0x2}, {0x0, [0x2e]}}, 0x0, 0x26, 0x0, 0x1}, 0x28) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x14, 0x3, 0x1, 0x401, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r6) sendmsg$NLBL_MGMT_C_ADDDEF(r6, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) 2.623475718s ago: executing program 1 (id=3033): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x20000, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x4, 0xf}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_TARGET={0x8, 0x1, 0xa000}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r3, @ANYBLOB="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"], 0x270}, 0x1, 0x0, 0x0, 0x8015}, 0x4) sendmmsg(r1, &(0x7f0000000000), 0x400000000000235, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/devices.allow\x00', 0x21002, 0x48) write$cgroup_devices(r4, &(0x7f0000000280)=ANY=[@ANYBLOB='b 7:'], 0x4e) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000005c0)={0x1, @pix={0x80, 0x8, 0x35314241, 0x9, 0x2, 0x0, 0x5, 0x4, 0x1, 0x6, 0x0, 0x3}}) signalfd4(r0, &(0x7f0000000040)={[0x7]}, 0x8, 0x80000) getresuid(&(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100)) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000001a40)=""/102392, 0x18ff8) r6 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xffffffffffffffb3, &(0x7f0000000040)=[{&(0x7f00000000c0)="1400000016000b63d25a8064000000001724fc60", 0x14}], 0x1}, 0x8c4) 2.379517518s ago: executing program 5 (id=3034): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_netdev_private(r0, 0x8914, &(0x7f0000000000)) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r1, 0x890b, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x6, @null, @bpq0, 0x0, [@bcast, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r2, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1, @default}, 0x1c) connect$rose(r2, &(0x7f0000000100)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x0, [@null, @null, @null, @default, @bcast, @default]}, 0x40) 1.348118501s ago: executing program 3 (id=3035): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d00200700", @ANYRES32=r1, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYRES16=r2, @ANYRES32=r2], 0x44}}, 0x0) 0s ago: executing program 1 (id=3036): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000000)='console\x00', 0xffffffffffffffff, 0x0, 0x2}, 0x18) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x80000000005, 0x100000001000087}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x14, &(0x7f0000000040)=0x6) getpid() r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x50) write(r0, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setscheduler(0x0, 0x2, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) tkill(0x0, 0x3f) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000004980)=@newsa={0x144, 0x10, 0x1, 0x0, 0x0, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@mcast2, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@remote, 0x0, 0x6c}, @in=@dev={0xac, 0x14, 0x14, 0x1c}, {0x0, 0x0, 0x0, 0xfffffff800000003, 0x0, 0x0, 0xffffffffffffffd}, {0x0, 0x4}, {}, 0x0, 0x0, 0x2, 0x1, 0x6}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @mark={0xc, 0x15, {0x35075a, 0x1}}]}, 0x144}, 0x1, 0x0, 0x0, 0x4004050}, 0x8000) io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, 0x0, 0x0) sendmsg$AUDIT_SET(0xffffffffffffffff, 0x0, 0x4) kernel console output (not intermixed with test programs): Insufficient options for proto=fd [ 935.679605][ C1] raw-gadget.1 gadget.1: ignoring, device is not running [ 935.688804][ T9023] dvb_usb_rtl28xxu: probe of 2-1:0.0 failed with error -71 [ 935.703422][ T9023] usb 2-1: USB disconnect, device number 27 [ 935.975711][ T9376] usb 4-1: string descriptor 0 read error: -71 [ 935.986179][ T9376] usb 4-1: New USB device found, idVendor=07b0, idProduct=0007, bcdDevice=ba.57 [ 936.015215][ T9376] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 936.048546][ T9376] usb 4-1: config 0 descriptor?? [ 936.054217][ T9376] usb 4-1: can't set config #0, error -71 [ 936.069646][ T9020] usb 1-1: new full-speed USB device number 33 using dummy_hcd [ 936.087127][ T9376] usb 4-1: USB disconnect, device number 38 [ 936.269290][ T9020] usb 1-1: config 0 has an invalid interface number: 110 but max is 0 [ 936.287515][ T9020] usb 1-1: config 0 has no interface number 0 [ 936.293826][ T9020] usb 1-1: config 0 interface 110 altsetting 2 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 936.317516][ T9020] usb 1-1: config 0 interface 110 has no altsetting 0 [ 936.335795][ T9020] usb 1-1: New USB device found, idVendor=0547, idProduct=2720, bcdDevice=af.55 [ 936.356166][ T9020] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 936.365583][ T9020] usb 1-1: Product: syz [ 936.369952][ T9020] usb 1-1: Manufacturer: syz [ 936.374660][ T9020] usb 1-1: SerialNumber: syz [ 936.389252][ T9020] usb 1-1: config 0 descriptor?? [ 936.426386][T11319] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 936.872792][ T9375] dvb_usb_rtl28xxu: probe of 5-1:0.0 failed with error -71 [ 936.885034][ T9375] usb 5-1: USB disconnect, device number 25 [ 939.232640][ T9020] cdc_subset: probe of 1-1:0.110 failed with error -71 [ 939.282776][ T9020] usb 1-1: USB disconnect, device number 33 [ 941.987637][ T9022] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 942.335152][ T7] usb 4-1: new full-speed USB device number 39 using dummy_hcd [ 942.499835][ T9022] usb 3-1: config 0 has an invalid interface number: 221 but max is 0 [ 942.508890][ T9022] usb 3-1: config 0 has no interface number 0 [ 942.544149][T11395] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1821'. [ 942.732369][ T7] usb 4-1: config 0 has an invalid interface number: 110 but max is 0 [ 942.753827][ T7] usb 4-1: config 0 has no interface number 0 [ 942.773324][ T7] usb 4-1: config 0 interface 110 altsetting 2 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 942.875211][ T47] Bluetooth: hci3: Unknown advertising packet type: 0xffff [ 942.875499][ T47] Bluetooth: hci3: adv larger than maximum supported [ 942.883506][ T47] Bluetooth: hci3: Malformed LE Event: 0x0d [ 945.743463][ T7] usb 4-1: config 0 interface 110 has no altsetting 0 [ 945.995155][ T7] usb 4-1: string descriptor 0 read error: -71 [ 946.001597][ T7] usb 4-1: New USB device found, idVendor=0547, idProduct=2720, bcdDevice=af.55 [ 946.011738][ T7] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 946.022448][ T7] usb 4-1: config 0 descriptor?? [ 946.029423][ T7] usb 4-1: can't set config #0, error -71 [ 946.058271][ T7] usb 4-1: USB disconnect, device number 39 [ 950.114792][ T9022] usb 3-1: string descriptor 0 read error: -71 [ 950.175667][ T9022] usb 3-1: New USB device found, idVendor=07b0, idProduct=0007, bcdDevice=ba.57 [ 950.364281][ T9022] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 950.423975][ T9022] usb 3-1: config 0 descriptor?? [ 950.448376][ T9022] usb 3-1: can't set config #0, error -71 [ 950.481575][ T9022] usb 3-1: USB disconnect, device number 35 [ 952.364302][T11451] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1834'. [ 953.014328][T11464] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1838'. [ 954.517653][ T9020] usb 1-1: new full-speed USB device number 34 using dummy_hcd [ 954.747565][ T9025] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 954.791743][ T9020] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 954.824373][ T9020] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 954.970009][ T9020] usb 1-1: Product: syz [ 954.974760][ T9020] usb 1-1: Manufacturer: syz [ 954.979818][ T9020] usb 1-1: SerialNumber: syz [ 954.988489][ T9020] usb 1-1: config 0 descriptor?? [ 955.002375][ T9025] usb 3-1: config 0 has an invalid interface number: 221 but max is 0 [ 955.017688][ T9025] usb 3-1: config 0 has no interface number 0 [ 955.784571][ T9020] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 955.830208][ T9025] usb 3-1: New USB device found, idVendor=07b0, idProduct=0007, bcdDevice=ba.57 [ 955.865567][ T9025] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 955.887172][ T9025] usb 3-1: Product: syz [ 956.021550][ T9025] usb 3-1: Manufacturer: syz [ 956.077575][ T9025] usb 3-1: SerialNumber: syz [ 956.169820][ T47] Bluetooth: hci0: Unknown advertising packet type: 0xffff [ 956.170119][ T47] Bluetooth: hci0: adv larger than maximum supported [ 956.177965][ T47] Bluetooth: hci0: Malformed LE Event: 0x0d [ 957.658670][ T9020] dvb_usb_rtl28xxu: probe of 1-1:0.0 failed with error -110 [ 957.720320][ T9025] usb 3-1: config 0 descriptor?? [ 958.820200][ T9020] usb 1-1: USB disconnect, device number 34 [ 961.174238][T11509] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1850'. [ 962.317095][ T9025] usb 3-1: can't set config #0, error -71 [ 962.342030][ T9025] usb 3-1: USB disconnect, device number 36 [ 963.510354][T11536] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1858'. [ 968.243666][T11567] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1865'. [ 969.892283][ T47] Bluetooth: hci1: Unknown advertising packet type: 0xffff [ 969.892359][ T47] Bluetooth: hci1: adv larger than maximum supported [ 969.900449][ T47] Bluetooth: hci1: Malformed LE Event: 0x0d [ 975.266166][T11613] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1881'. [ 977.369760][T11631] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1885'. [ 977.873821][T11635] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1887'. [ 981.140590][ T9025] usb 1-1: new full-speed USB device number 35 using dummy_hcd [ 981.402043][ T9025] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 981.417499][ T9025] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 981.425715][ T9025] usb 1-1: Product: syz [ 981.430531][ T9025] usb 1-1: Manufacturer: syz [ 981.435252][ T9025] usb 1-1: SerialNumber: syz [ 981.468387][ T9025] usb 1-1: config 0 descriptor?? [ 982.535177][ T9025] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 984.899671][ T9025] dvb_usb_rtl28xxu: probe of 1-1:0.0 failed with error -71 [ 984.912871][ T9025] usb 1-1: USB disconnect, device number 35 [ 986.814913][T11695] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1898'. [ 990.801547][T11738] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 991.380572][ T9376] usb 5-1: new full-speed USB device number 26 using dummy_hcd [ 991.711085][ T9376] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 991.729836][ T9376] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 991.740713][ T9376] usb 5-1: Product: syz [ 991.745157][ T9376] usb 5-1: Manufacturer: syz [ 991.821527][ T9376] usb 5-1: SerialNumber: syz [ 991.919388][ T9376] usb 5-1: config 0 descriptor?? [ 992.507595][ T4425] usb 1-1: new full-speed USB device number 36 using dummy_hcd [ 992.808736][ T9376] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 992.860453][T11753] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1918'. [ 992.871124][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 992.877557][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.022964][ T4425] usb 1-1: config 0 has an invalid interface number: 110 but max is 0 [ 993.748191][ T9376] dvb_usb_rtl28xxu: probe of 5-1:0.0 failed with error -32 [ 993.967599][ T4425] usb 1-1: config 0 has no interface number 0 [ 993.974605][ T4425] usb 1-1: config 0 interface 110 altsetting 2 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 993.996369][ T4425] usb 1-1: config 0 interface 110 has no altsetting 0 [ 994.085448][ T4425] usb 1-1: New USB device found, idVendor=0547, idProduct=2720, bcdDevice=af.55 [ 994.128807][ T4425] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 994.161032][ T4425] usb 1-1: Product: syz [ 994.165402][ T4425] usb 1-1: Manufacturer: syz [ 994.175664][ T4425] usb 1-1: SerialNumber: syz [ 994.220989][ T4425] usb 1-1: config 0 descriptor?? [ 994.243113][T11743] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 994.409470][ T4425] cdc_subset: probe of 1-1:0.110 failed with error -71 [ 994.437038][ T4425] usb 1-1: USB disconnect, device number 36 [ 995.931103][T11773] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1921'. [ 996.635750][ T4425] usb 5-1: USB disconnect, device number 26 [ 999.777598][ T9025] usb 1-1: new full-speed USB device number 37 using dummy_hcd [ 999.997488][ T9025] usb 1-1: config 0 has an invalid interface number: 110 but max is 0 [ 1000.006639][ T9025] usb 1-1: config 0 has no interface number 0 [ 1000.016222][ T9025] usb 1-1: config 0 interface 110 altsetting 2 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 1000.030228][ T9025] usb 1-1: config 0 interface 110 has no altsetting 0 [ 1000.058408][ T9025] usb 1-1: New USB device found, idVendor=0547, idProduct=2720, bcdDevice=af.55 [ 1000.068800][ T9025] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1000.081468][ T9025] usb 1-1: Product: syz [ 1000.086198][ T9025] usb 1-1: Manufacturer: syz [ 1000.094415][ T9025] usb 1-1: SerialNumber: syz [ 1000.158455][ T9025] usb 1-1: config 0 descriptor?? [ 1000.166829][T11802] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1001.457529][ T7369] usb 3-1: new full-speed USB device number 37 using dummy_hcd [ 1001.586122][ T9022] usb 2-1: new full-speed USB device number 28 using dummy_hcd [ 1001.724643][ T7369] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1001.750142][ T7369] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1001.781953][ T7369] usb 3-1: Product: syz [ 1001.786364][ T7369] usb 3-1: Manufacturer: syz [ 1001.801434][ T7369] usb 3-1: SerialNumber: syz [ 1001.845472][ T7369] usb 3-1: config 0 descriptor?? [ 1001.879535][ T9022] usb 2-1: config 0 has an invalid interface number: 110 but max is 0 [ 1001.888626][ T9022] usb 2-1: config 0 has no interface number 0 [ 1001.895035][ T9022] usb 2-1: config 0 interface 110 altsetting 2 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 1001.906897][ T9022] usb 2-1: config 0 interface 110 has no altsetting 0 [ 1001.928565][ T9022] usb 2-1: New USB device found, idVendor=0547, idProduct=2720, bcdDevice=af.55 [ 1001.944422][ T9022] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1001.953294][ T9022] usb 2-1: Product: syz [ 1001.965013][ T9022] usb 2-1: Manufacturer: syz [ 1001.969889][ T9022] usb 2-1: SerialNumber: syz [ 1001.985868][T11821] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1939'. [ 1001.996882][ T9025] cdc_subset: probe of 1-1:0.110 failed with error -71 [ 1002.031803][ T9022] usb 2-1: config 0 descriptor?? [ 1002.037713][T11812] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 1002.061766][ T7369] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1002.077603][ T9025] usb 1-1: USB disconnect, device number 37 [ 1004.316946][ T7369] dvb_usb_rtl28xxu: probe of 3-1:0.0 failed with error -71 [ 1004.328782][ T7369] usb 3-1: USB disconnect, device number 37 [ 1005.019917][ T9022] cdc_subset: probe of 2-1:0.110 failed with error -71 [ 1005.109524][ T9022] usb 2-1: USB disconnect, device number 28 [ 1009.567611][ T4317] usb 3-1: new full-speed USB device number 38 using dummy_hcd [ 1009.825926][T11882] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1954'. [ 1009.899337][ T4317] usb 3-1: config 0 has an invalid interface number: 110 but max is 0 [ 1009.924615][ T4317] usb 3-1: config 0 has no interface number 0 [ 1009.956208][ T4317] usb 3-1: config 0 interface 110 altsetting 2 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 1009.986950][ T4317] usb 3-1: config 0 interface 110 has no altsetting 0 [ 1010.014083][ T4317] usb 3-1: New USB device found, idVendor=0547, idProduct=2720, bcdDevice=af.55 [ 1010.033633][ T4317] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1010.050892][ T4317] usb 3-1: Product: syz [ 1010.063704][ T4317] usb 3-1: Manufacturer: syz [ 1010.068695][ T4317] usb 3-1: SerialNumber: syz [ 1010.084625][ T4317] usb 3-1: config 0 descriptor?? [ 1010.095151][T11872] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1010.797446][ T9023] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 1010.947489][ T9023] usb 2-1: device descriptor read/64, error -71 [ 1011.009420][ T47] Bluetooth: hci0: Unknown advertising packet type: 0xffff [ 1011.009456][ T47] Bluetooth: hci0: adv larger than maximum supported [ 1011.016786][ T47] Bluetooth: hci0: Malformed LE Event: 0x0d [ 1012.617078][ T4317] cdc_subset: probe of 3-1:0.110 failed with error -71 [ 1012.806650][ T4317] usb 3-1: USB disconnect, device number 38 [ 1012.858259][ T9023] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 1013.057814][ T9023] usb 2-1: device descriptor read/64, error -71 [ 1013.178040][ T9023] usb usb2-port1: attempt power cycle [ 1013.660398][T11906] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1961'. [ 1017.425469][T11923] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1966'. [ 1023.917525][ T9377] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 1023.956640][ T47] Bluetooth: hci2: Unknown advertising packet type: 0xffff [ 1023.956672][ T47] Bluetooth: hci2: adv larger than maximum supported [ 1023.964352][ T47] Bluetooth: hci2: Malformed LE Event: 0x0d [ 1026.757490][ T9377] usb 3-1: device descriptor read/64, error -71 [ 1028.180483][ T9376] usb 5-1: new full-speed USB device number 27 using dummy_hcd [ 1028.185856][ T9375] usb 2-1: new full-speed USB device number 32 using dummy_hcd [ 1028.659472][ T9375] usb 2-1: config 0 has an invalid interface number: 110 but max is 0 [ 1028.687187][ T9375] usb 2-1: config 0 has no interface number 0 [ 1028.869309][ T9376] usb 5-1: config 0 has an invalid interface number: 110 but max is 0 [ 1028.877829][ T9375] usb 2-1: config 0 interface 110 altsetting 2 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 1028.891019][ T9376] usb 5-1: config 0 has no interface number 0 [ 1029.612099][ T9376] usb 5-1: config 0 interface 110 altsetting 2 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 1029.623248][ T9375] usb 2-1: config 0 interface 110 has no altsetting 0 [ 1029.630874][ T9376] usb 5-1: config 0 interface 110 has no altsetting 0 [ 1029.652435][ T9375] usb 2-1: New USB device found, idVendor=0547, idProduct=2720, bcdDevice=af.55 [ 1029.710671][ T9376] usb 5-1: New USB device found, idVendor=0547, idProduct=2720, bcdDevice=af.55 [ 1029.721174][ T9375] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1029.747604][ T9376] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1029.760136][ T9375] usb 2-1: Product: syz [ 1029.857801][ T9375] usb 2-1: Manufacturer: syz [ 1030.271083][ T9376] usb 5-1: Product: syz [ 1030.277631][ T9375] usb 2-1: SerialNumber: syz [ 1030.284300][ T9376] usb 5-1: Manufacturer: syz [ 1030.327909][ T9375] usb 2-1: config 0 descriptor?? [ 1030.342027][ T9376] usb 5-1: SerialNumber: syz [ 1030.363228][ T9375] usb 2-1: can't set config #0, error -71 [ 1030.384024][ T9376] usb 5-1: config 0 descriptor?? [ 1030.415224][ T9375] usb 2-1: USB disconnect, device number 32 [ 1030.454127][ T9376] usb 5-1: can't set config #0, error -71 [ 1030.495210][ T9376] usb 5-1: USB disconnect, device number 27 [ 1031.656435][T12038] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1998'. [ 1031.666304][T12038] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1998'. [ 1031.675930][T12038] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1998'. [ 1031.685065][T12038] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1998'. [ 1032.870426][T12030] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1999'. [ 1033.244346][T12036] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2002'. [ 1037.020381][T12083] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2013'. [ 1037.029558][T12083] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2013'. [ 1037.038684][T12083] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2013'. [ 1037.048144][T12083] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2013'. [ 1039.122126][T12087] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2014'. [ 1041.980179][ T8623] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 1042.057800][ T9376] usb 5-1: new full-speed USB device number 28 using dummy_hcd [ 1042.213532][ T8623] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1042.235121][ T8623] usb 2-1: config 0 has no interfaces? [ 1042.291147][ T9376] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1042.327768][ T8623] usb 2-1: New USB device found, idVendor=04b4, idProduct=de61, bcdDevice= 0.00 [ 1042.716392][ T9376] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1042.866747][ T8623] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1042.903797][ T9376] usb 5-1: Product: syz [ 1042.908372][ T9376] usb 5-1: Manufacturer: syz [ 1042.912980][ T9376] usb 5-1: SerialNumber: syz [ 1042.926176][ T8623] usb 2-1: config 0 descriptor?? [ 1042.947964][ T9376] usb 5-1: config 0 descriptor?? [ 1043.936811][ T9376] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1045.086969][ T4425] usb 2-1: USB disconnect, device number 33 [ 1045.260970][ T9376] dvb_usb_rtl28xxu: probe of 5-1:0.0 failed with error -71 [ 1045.292659][ T9376] usb 5-1: USB disconnect, device number 28 [ 1045.611112][T12158] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2033'. [ 1050.014111][T12200] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2044'. [ 1050.023367][T12200] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2044'. [ 1050.032465][T12200] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2044'. [ 1050.041543][T12200] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2044'. [ 1051.129302][T12199] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2045'. [ 1052.483383][ T9020] usb 1-1: new full-speed USB device number 38 using dummy_hcd [ 1053.261305][ T9020] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1053.270905][ T9020] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1053.279008][ T9020] usb 1-1: Product: syz [ 1053.283868][ T9020] usb 1-1: Manufacturer: syz [ 1053.288653][ T9020] usb 1-1: SerialNumber: syz [ 1053.296924][ T9020] usb 1-1: config 0 descriptor?? [ 1053.624717][ T9020] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1054.077482][ T9376] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 1054.300801][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.307508][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.339809][ T9376] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1054.357173][ T9376] usb 3-1: config 0 has no interfaces? [ 1054.369228][ T9376] usb 3-1: New USB device found, idVendor=04b4, idProduct=de61, bcdDevice= 0.00 [ 1054.389119][ T9376] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1054.416011][ T9376] usb 3-1: config 0 descriptor?? [ 1055.049615][ T9020] dvb_usb_rtl28xxu: probe of 1-1:0.0 failed with error -71 [ 1055.081922][ T9020] usb 1-1: USB disconnect, device number 38 [ 1055.647729][ T4331] usb 3-1: USB disconnect, device number 41 [ 1056.998995][T12248] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2058'. [ 1058.780809][ T8623] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 1059.230301][ T8623] usb 4-1: device descriptor read/64, error -71 [ 1059.577924][ T8623] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 1059.738239][ T8623] usb 4-1: device descriptor read/64, error -71 [ 1059.857772][ T8623] usb usb4-port1: attempt power cycle [ 1060.547541][ T8623] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 1060.608140][ T8623] usb 4-1: device descriptor read/8, error -71 [ 1060.728565][ T9376] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 1060.897439][ T8623] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 1060.937693][ T8623] usb 4-1: device descriptor read/8, error -71 [ 1060.962637][ T9376] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1061.051706][ T9376] usb 2-1: config 0 has no interfaces? [ 1061.067806][ T9376] usb 2-1: New USB device found, idVendor=04b4, idProduct=de61, bcdDevice= 0.00 [ 1061.076956][ T9376] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1061.085641][ T8623] usb usb4-port1: unable to enumerate USB device [ 1061.133582][ T9376] usb 2-1: config 0 descriptor?? [ 1062.057640][T12293] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2070'. [ 1063.202534][ T47] Bluetooth: hci3: Unknown advertising packet type: 0xffff [ 1063.202575][ T47] Bluetooth: hci3: adv larger than maximum supported [ 1063.209963][ T47] Bluetooth: hci3: Malformed LE Event: 0x0d [ 1066.776740][ T8623] usb 2-1: USB disconnect, device number 34 [ 1069.804820][T12349] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2084'. [ 1070.810245][ T4398] usb 2-1: new full-speed USB device number 35 using dummy_hcd [ 1071.737759][ T4398] usb 2-1: config 0 has an invalid interface number: 110 but max is 0 [ 1071.786199][ T4398] usb 2-1: config 0 has no interface number 0 [ 1071.808666][ T4398] usb 2-1: config 0 interface 110 altsetting 2 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 1071.828364][ T4398] usb 2-1: config 0 interface 110 has no altsetting 0 [ 1071.871980][ T4398] usb 2-1: New USB device found, idVendor=0547, idProduct=2720, bcdDevice=af.55 [ 1071.915284][ T4398] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1071.975546][ T4398] usb 2-1: Product: syz [ 1071.997585][ T4398] usb 2-1: Manufacturer: syz [ 1072.002259][ T4398] usb 2-1: SerialNumber: syz [ 1072.552041][ T4398] usb 2-1: config 0 descriptor?? [ 1072.565922][T12354] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1074.616585][ T4398] cdc_subset: probe of 2-1:0.110 failed with error -71 [ 1074.763347][ T4398] usb 2-1: USB disconnect, device number 35 [ 1076.379119][T12402] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2096'. [ 1077.732798][ T8623] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 1079.907439][ T8623] usb 3-1: device not accepting address 42, error -71 [ 1080.635723][ T9375] usb 5-1: new full-speed USB device number 29 using dummy_hcd [ 1080.873901][ T9375] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1080.927736][ T9375] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1080.966525][ T9375] usb 5-1: Product: syz [ 1080.976671][ T9375] usb 5-1: Manufacturer: syz [ 1081.017431][ T9375] usb 5-1: SerialNumber: syz [ 1081.025918][ T9375] usb 5-1: config 0 descriptor?? [ 1081.133237][ T9375] usb 5-1: can't set config #0, error -71 [ 1081.141807][ T9375] usb 5-1: USB disconnect, device number 29 [ 1083.327533][ T4402] usb 5-1: new full-speed USB device number 30 using dummy_hcd [ 1083.521355][ T4402] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1083.544749][ T4402] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1083.580004][ T4402] usb 5-1: Product: syz [ 1083.584476][ T4402] usb 5-1: Manufacturer: syz [ 1083.605920][ T4402] usb 5-1: SerialNumber: syz [ 1083.636448][ T4402] usb 5-1: config 0 descriptor?? [ 1083.861127][ T4402] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1084.107535][T12452] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2110'. [ 1085.259083][ T4402] dvb_usb_rtl28xxu: probe of 5-1:0.0 failed with error -71 [ 1085.987899][ T4402] usb 5-1: USB disconnect, device number 30 [ 1086.498914][ T9375] usb 2-1: new full-speed USB device number 36 using dummy_hcd [ 1086.712027][ T9375] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1086.734379][ T9375] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1086.768614][ T9375] usb 2-1: Product: syz [ 1086.789647][ T9375] usb 2-1: Manufacturer: syz [ 1086.805444][ T9375] usb 2-1: SerialNumber: syz [ 1086.998230][ T9375] usb 2-1: config 0 descriptor?? [ 1087.991192][ T9375] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1088.808685][ T4331] usb 4-1: new full-speed USB device number 44 using dummy_hcd [ 1088.857895][ T4402] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 1089.011866][ T4331] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1089.037406][ T4331] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1089.055883][ T4331] usb 4-1: Product: syz [ 1089.063837][ T4402] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1089.076132][ T4331] usb 4-1: Manufacturer: syz [ 1089.085691][ T4331] usb 4-1: SerialNumber: syz [ 1089.085697][ T4402] usb 1-1: config 0 has no interfaces? [ 1089.085730][ T4402] usb 1-1: New USB device found, idVendor=04b4, idProduct=de61, bcdDevice= 0.00 [ 1089.106550][ T4331] usb 4-1: config 0 descriptor?? [ 1089.154780][ T4402] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1089.175190][ T4402] usb 1-1: config 0 descriptor?? [ 1089.323269][ T4331] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1089.436123][ T9375] dvb_usb_rtl28xxu: probe of 2-1:0.0 failed with error -71 [ 1089.450238][ T9375] usb 2-1: USB disconnect, device number 36 [ 1089.487461][ T4402] usb 5-1: new full-speed USB device number 31 using dummy_hcd [ 1089.675192][ T4402] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1089.685997][ T4402] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1089.700830][ T4402] usb 5-1: Product: syz [ 1089.705338][ T4402] usb 5-1: Manufacturer: syz [ 1089.713500][ T4402] usb 5-1: SerialNumber: syz [ 1089.725154][ T4402] usb 5-1: config 0 descriptor?? [ 1089.939630][ T4402] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1090.753617][ T4331] dvb_usb_rtl28xxu: probe of 4-1:0.0 failed with error -71 [ 1091.258598][ T4331] usb 4-1: USB disconnect, device number 44 [ 1091.267266][ T9375] usb 1-1: USB disconnect, device number 39 [ 1091.362277][ T4402] dvb_usb_rtl28xxu: probe of 5-1:0.0 failed with error -71 [ 1091.391914][ T4402] usb 5-1: USB disconnect, device number 31 [ 1094.275119][T12536] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2135'. [ 1094.284810][T12536] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2135'. [ 1094.294372][T12536] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2135'. [ 1094.303356][T12536] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2135'. [ 1099.670857][T12581] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2147'. [ 1099.810772][ T9375] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 1102.010653][ T9375] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1102.091364][ T9375] usb 5-1: config 0 has no interfaces? [ 1102.226076][ T9375] usb 5-1: New USB device found, idVendor=04b4, idProduct=de61, bcdDevice= 0.00 [ 1102.382376][ T9375] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1102.530356][ T9375] usb 5-1: config 0 descriptor?? [ 1102.624335][ T9375] usb 5-1: can't set config #0, error -71 [ 1103.206168][ T9375] usb 5-1: USB disconnect, device number 32 [ 1103.511882][T12593] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2150'. [ 1110.544586][T12637] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2162'. [ 1113.921145][T12647] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2163'. [ 1113.930323][T12647] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2163'. [ 1113.939428][T12647] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2163'. [ 1113.948954][T12647] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2163'. [ 1116.159083][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 1116.169102][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 1117.587705][ T9025] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 1117.598135][ C1] raw-gadget.0 gadget.3: ignoring, device is not running [ 1117.757469][ T9025] usb 4-1: device descriptor read/64, error -32 [ 1118.027439][ T9025] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 1118.823769][ T9025] usb 4-1: device descriptor read/all, error -71 [ 1119.067479][ T9025] usb usb4-port1: attempt power cycle [ 1121.347580][ T8623] usb 1-1: new full-speed USB device number 40 using dummy_hcd [ 1123.369573][ T8623] usb 1-1: device descriptor read/all, error -71 [ 1128.697463][ T8623] usb 3-1: new full-speed USB device number 44 using dummy_hcd [ 1128.922120][ T8623] usb 3-1: config 0 has an invalid interface number: 110 but max is 0 [ 1128.957621][ T8623] usb 3-1: config 0 has no interface number 0 [ 1128.982322][ T8623] usb 3-1: config 0 interface 110 altsetting 2 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 1129.874129][ T8623] usb 3-1: config 0 interface 110 has no altsetting 0 [ 1130.425117][ T8623] usb 3-1: New USB device found, idVendor=0547, idProduct=2720, bcdDevice=af.55 [ 1130.469516][ T8623] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1130.517643][ T8623] usb 3-1: Product: syz [ 1130.539263][ T8623] usb 3-1: Manufacturer: syz [ 1130.560155][ T8623] usb 3-1: SerialNumber: syz [ 1130.585800][ T8623] usb 3-1: config 0 descriptor?? [ 1130.601398][T12742] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1130.707450][ T4317] usb 2-1: new full-speed USB device number 37 using dummy_hcd [ 1131.785341][ T4317] usb 2-1: config 0 has an invalid interface number: 110 but max is 0 [ 1131.795149][ T4317] usb 2-1: config 0 has no interface number 0 [ 1131.806949][ T4317] usb 2-1: config 0 interface 110 altsetting 2 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 1131.878675][ T4317] usb 2-1: config 0 interface 110 has no altsetting 0 [ 1131.926937][ T4317] usb 2-1: New USB device found, idVendor=0547, idProduct=2720, bcdDevice=af.55 [ 1131.947800][ T4317] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1131.955980][ T4317] usb 2-1: Product: syz [ 1131.963939][ T4317] usb 2-1: Manufacturer: syz [ 1131.970746][ T4317] usb 2-1: SerialNumber: syz [ 1131.995713][ T4317] usb 2-1: config 0 descriptor?? [ 1132.014517][T12761] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1133.024103][T12773] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2203'. [ 1133.033182][T12773] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2203'. [ 1133.042409][T12773] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2203'. [ 1133.051366][T12773] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2203'. [ 1133.592217][ T9377] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 1134.063359][ T8623] cdc_subset: probe of 3-1:0.110 failed with error -71 [ 1134.127939][ T8623] usb 3-1: USB disconnect, device number 44 [ 1135.448605][ T4317] cdc_subset: probe of 2-1:0.110 failed with error -71 [ 1135.590653][ T4317] usb 2-1: USB disconnect, device number 37 [ 1137.647756][ T4324] usb 5-1: new full-speed USB device number 33 using dummy_hcd [ 1137.889312][ T4324] usb 5-1: config 0 has an invalid interface number: 110 but max is 0 [ 1137.929841][ T4324] usb 5-1: config 0 has no interface number 0 [ 1138.013413][T12818] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2214'. [ 1138.103552][ T4324] usb 5-1: config 0 interface 110 altsetting 2 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 1138.922870][ T4324] usb 5-1: config 0 interface 110 has no altsetting 0 [ 1138.947662][ T4324] usb 5-1: New USB device found, idVendor=0547, idProduct=2720, bcdDevice=af.55 [ 1138.967142][ T4324] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1138.984394][ T4324] usb 5-1: Product: syz [ 1138.997391][ T4324] usb 5-1: Manufacturer: syz [ 1139.002278][ T4324] usb 5-1: SerialNumber: syz [ 1139.037631][ T4324] usb 5-1: config 0 descriptor?? [ 1139.043871][T12808] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1140.655376][ T4324] cdc_subset: probe of 5-1:0.110 failed with error -71 [ 1140.953997][ T4324] usb 5-1: USB disconnect, device number 33 [ 1141.260558][T12839] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2221'. [ 1145.931021][T12869] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2228'. [ 1145.942592][T12869] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2228'. [ 1145.953335][T12869] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2228'. [ 1145.963207][T12869] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2228'. [ 1147.347379][ T9025] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 1148.434555][ T9025] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1149.548428][ T9025] usb 2-1: config 0 has no interfaces? [ 1149.578990][ T9025] usb 2-1: New USB device found, idVendor=04b4, idProduct=de61, bcdDevice= 0.00 [ 1149.645035][T12897] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2236'. [ 1149.654292][T12897] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2236'. [ 1149.663842][T12897] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2236'. [ 1149.672930][T12897] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2236'. [ 1150.063309][ T9025] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1150.098781][ T9025] usb 2-1: config 0 descriptor?? [ 1150.219307][ T9025] usb 2-1: can't set config #0, error -71 [ 1150.244405][ T9025] usb 2-1: USB disconnect, device number 38 [ 1151.908625][T12917] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2243'. [ 1151.919671][T12917] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2243'. [ 1151.930250][T12917] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2243'. [ 1151.940330][T12917] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2243'. [ 1159.997900][T12984] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2260'. [ 1172.274330][T13072] fuse: Unknown parameter 'group_i00000000000000000000' [ 1173.877943][ T4331] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 1175.022987][ T4331] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1175.059148][ T4331] usb 1-1: config 0 has no interfaces? [ 1175.100987][ T4331] usb 1-1: New USB device found, idVendor=04b4, idProduct=de61, bcdDevice= 0.00 [ 1175.193047][ T4331] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1175.224874][ T4331] usb 1-1: config 0 descriptor?? [ 1176.097814][ T4331] usb 1-1: USB disconnect, device number 42 [ 1177.180601][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.187009][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 1177.476312][T13126] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2299'. [ 1177.487205][T13126] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2299'. [ 1177.497054][T13126] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2299'. [ 1177.506299][T13126] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2299'. [ 1183.617472][ T4398] usb 1-1: new full-speed USB device number 43 using dummy_hcd [ 1184.549115][ T4398] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1184.591909][ T4398] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1184.655066][T13178] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2312'. [ 1184.664398][T13178] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2312'. [ 1184.673574][T13178] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2312'. [ 1184.682637][T13178] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2312'. [ 1185.636714][ T4398] usb 1-1: Product: syz [ 1185.641624][ T4398] usb 1-1: Manufacturer: syz [ 1185.646388][ T4398] usb 1-1: SerialNumber: syz [ 1189.803170][ T4398] usb 1-1: config 0 descriptor?? [ 1189.844219][ T4398] usb 1-1: can't set config #0, error -71 [ 1189.909647][ T4398] usb 1-1: USB disconnect, device number 43 [ 1192.687477][ T4398] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 1194.362795][ T4398] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1194.377760][ T4398] usb 1-1: config 0 has no interfaces? [ 1194.383403][ T4398] usb 1-1: New USB device found, idVendor=04b4, idProduct=de61, bcdDevice= 0.00 [ 1194.447629][ T4398] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1194.458418][ T4398] usb 1-1: config 0 descriptor?? [ 1194.472969][ T4398] usb 1-1: can't set config #0, error -71 [ 1194.734206][T13230] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2323'. [ 1194.743971][T13230] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2323'. [ 1194.753307][T13230] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2323'. [ 1194.762288][T13230] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2323'. [ 1195.178101][ T4398] usb 1-1: USB disconnect, device number 44 [ 1195.642373][ T47] Bluetooth: hci1: Unknown advertising packet type: 0xffff [ 1195.642668][ T47] Bluetooth: hci1: adv larger than maximum supported [ 1195.650901][ T47] Bluetooth: hci1: Malformed LE Event: 0x0d [ 1199.758326][ T4672] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1200.014562][T13245] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1200.171294][T13245] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1200.189709][T13245] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1200.200137][T13245] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1200.562439][T13245] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1200.967560][T13245] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1203.013377][ T4672] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1203.025222][T13245] Bluetooth: hci4: command 0x0409 tx timeout [ 1203.224926][ T4672] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1203.909012][ T4672] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1205.077843][T13244] chnl_net:caif_netlink_parms(): no params data found [ 1205.097467][T13245] Bluetooth: hci4: command 0x041b tx timeout [ 1206.802738][T13244] bridge0: port 1(bridge_slave_0) entered blocking state [ 1207.032742][ T4402] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 1207.479366][T13244] bridge0: port 1(bridge_slave_0) entered disabled state [ 1207.555940][T13245] Bluetooth: hci4: command 0x040f tx timeout [ 1207.637593][T13244] device bridge_slave_0 entered promiscuous mode [ 1207.891541][ T4402] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1207.910063][ T4402] usb 1-1: config 0 has no interfaces? [ 1208.664024][ T4402] usb 1-1: New USB device found, idVendor=04b4, idProduct=de61, bcdDevice= 0.00 [ 1208.685809][ T4402] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1208.724475][ T4402] usb 1-1: config 0 descriptor?? [ 1208.741171][ T4402] usb 1-1: can't set config #0, error -71 [ 1208.785751][ T4402] usb 1-1: USB disconnect, device number 45 [ 1209.096831][T13244] bridge0: port 2(bridge_slave_1) entered blocking state [ 1209.487515][T13244] bridge0: port 2(bridge_slave_1) entered disabled state [ 1209.495750][T13244] device bridge_slave_1 entered promiscuous mode [ 1209.577587][T13245] Bluetooth: hci4: command 0x0419 tx timeout [ 1209.714583][T13244] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1209.892513][T13244] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1210.849664][T13244] team0: Port device team_slave_0 added [ 1210.949011][T13244] team0: Port device team_slave_1 added [ 1211.114592][T13244] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1211.146489][T13244] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1211.269942][T13244] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1211.654481][T13244] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1211.663473][T13244] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1211.799735][T13244] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1212.105387][T13244] device hsr_slave_0 entered promiscuous mode [ 1212.129210][T13244] device hsr_slave_1 entered promiscuous mode [ 1212.156822][T13244] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1212.183618][T13244] Cannot create hsr debugfs directory [ 1216.243663][T13374] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2352'. [ 1216.252631][T13374] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2352'. [ 1216.261678][T13374] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2352'. [ 1216.270604][T13374] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2352'. [ 1216.514646][ T4672] device hsr_slave_0 left promiscuous mode [ 1216.527589][ T4672] device hsr_slave_1 left promiscuous mode [ 1216.534489][ T4672] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1216.543961][ T4672] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1216.555041][ T4672] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1216.563645][ T4672] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1216.839679][ T4672] device bridge_slave_1 left promiscuous mode [ 1216.846988][ T4672] bridge0: port 2(bridge_slave_1) entered disabled state [ 1216.915073][ T4672] device bridge_slave_0 left promiscuous mode [ 1216.951472][ T4672] bridge0: port 1(bridge_slave_0) entered disabled state [ 1216.973906][T13388] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2356'. [ 1217.653300][T13392] netlink: 'syz.1.2356': attribute type 11 has an invalid length. [ 1219.399265][ T4672] device veth1_macvtap left promiscuous mode [ 1219.421989][ T4672] device veth0_macvtap left promiscuous mode [ 1219.471942][ T4672] device veth1_vlan left promiscuous mode [ 1219.492826][ T4672] device veth0_vlan left promiscuous mode [ 1223.367707][ T4324] usb 1-1: new full-speed USB device number 46 using dummy_hcd [ 1223.601488][ T4324] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1223.611137][ T4324] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1223.620333][ T4324] usb 1-1: Product: syz [ 1223.624711][ T4324] usb 1-1: Manufacturer: syz [ 1223.630622][ T4324] usb 1-1: SerialNumber: syz [ 1223.639132][ T4324] usb 1-1: config 0 descriptor?? [ 1223.665564][ T4672] team0 (unregistering): Port device team_slave_1 removed [ 1223.727835][ T4672] team0 (unregistering): Port device team_slave_0 removed [ 1223.798272][ T4672] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1223.852165][ T4324] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1223.875013][ T4672] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1225.847516][ T4324] dvb_usb_rtl28xxu: probe of 1-1:0.0 failed with error -71 [ 1225.867982][ T4324] usb 1-1: USB disconnect, device number 46 [ 1225.918089][ T4672] bond0 (unregistering): Released all slaves [ 1227.898145][T13244] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1228.277411][T13244] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1228.419266][T13244] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1228.431218][T13244] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1228.578780][T13467] netlink: 'syz.0.2371': attribute type 10 has an invalid length. [ 1228.594099][T13467] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2371'. [ 1228.615270][T13467] device team0 entered promiscuous mode [ 1228.627974][T13467] device team_slave_0 entered promiscuous mode [ 1228.645648][T13467] device team_slave_1 entered promiscuous mode [ 1228.658351][T13467] bridge0: port 3(team0) entered blocking state [ 1228.708571][T13467] bridge0: port 3(team0) entered disabled state [ 1229.088627][T13467] bridge0: port 3(team0) entered blocking state [ 1229.095838][T13467] bridge0: port 3(team0) entered forwarding state [ 1229.755096][T13244] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1229.825103][T12606] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1229.843806][T12606] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1229.894352][T13244] 8021q: adding VLAN 0 to HW filter on device team0 [ 1230.271923][T12606] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1230.399382][T12606] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1230.505237][T12606] bridge0: port 1(bridge_slave_0) entered blocking state [ 1230.513988][T12606] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1230.894021][T12606] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1231.697926][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1232.559470][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1232.745891][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 1232.753398][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1232.908789][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1232.927721][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1232.938010][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1232.964232][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1233.105048][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1233.125809][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1233.240512][T13244] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1233.389438][T13244] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1233.478086][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1233.488405][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1233.658698][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1233.668307][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1233.677088][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1233.701092][T12606] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1234.759847][T13516] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2380'. [ 1234.962848][T13519] netlink: 'syz.0.2380': attribute type 11 has an invalid length. [ 1238.629200][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.636391][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 1238.822820][T13244] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1238.831065][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1238.839577][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1241.751404][T13594] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2395'. [ 1241.761053][T13594] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2395'. [ 1241.771057][T13594] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2395'. [ 1241.780175][T13594] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2395'. [ 1244.311900][T12843] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 1246.740568][ T4413] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1246.774469][ T4413] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1246.928019][T13244] device veth0_vlan entered promiscuous mode [ 1247.033543][ T4413] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1247.053085][ T4413] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1247.105352][ T4413] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1247.128338][ T4413] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1247.150318][T13244] device veth1_vlan entered promiscuous mode [ 1247.301376][ T4413] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1247.325273][ T4413] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1247.386188][ T4413] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1247.456634][ T4413] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1247.477929][T13244] device veth0_macvtap entered promiscuous mode [ 1247.511915][T13244] device veth1_macvtap entered promiscuous mode [ 1247.571428][T13244] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1247.598517][T13244] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1247.617528][T13244] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1247.675948][T13244] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1247.722396][T13244] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1247.788366][T13244] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1247.848237][T13244] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1247.906002][T13244] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1247.950768][T13244] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1248.048173][ T4413] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1248.076918][ T4413] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1248.116947][ T4413] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1248.298616][ T4413] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1248.300255][T13641] netlink: 'syz.4.2404': attribute type 11 has an invalid length. [ 1248.409618][T13244] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1248.437076][T13244] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1248.491231][T13244] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1249.115291][T13244] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1249.147452][T13244] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1249.202085][T13244] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1249.242113][T13244] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1249.295283][T13244] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1249.370518][T13244] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1249.399993][ T4413] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1249.468572][ T4413] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1249.520499][T13244] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1249.563459][T13244] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1249.607491][T13244] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1249.659123][T13244] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1252.097778][ T5196] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1252.128077][ T5196] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1252.654247][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1252.911472][ T8145] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1252.939224][ T8145] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1253.808698][ T4419] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1256.507351][ T4324] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 1257.205549][ T4324] usb 2-1: unable to read config index 0 descriptor/all [ 1257.227411][ T4324] usb 2-1: can't read configurations, error -71 [ 1260.665716][ T47] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1260.675752][ T4279] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1260.685001][ T4279] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1260.699759][ T4279] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1260.720789][ T4279] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1260.746303][ T4279] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1260.955833][ T4562] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1262.316390][ T4562] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1262.524463][ T4562] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1262.779103][T13245] Bluetooth: hci4: command 0x0409 tx timeout [ 1263.228619][T13745] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2425'. [ 1263.243319][ T4562] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1263.552966][T13745] netlink: 'syz.3.2425': attribute type 11 has an invalid length. [ 1263.841926][T13718] chnl_net:caif_netlink_parms(): no params data found [ 1264.927384][T13245] Bluetooth: hci4: command 0x041b tx timeout [ 1266.937394][ T4279] Bluetooth: hci4: command 0x040f tx timeout [ 1267.342586][T13718] bridge0: port 1(bridge_slave_0) entered blocking state [ 1267.351329][T13718] bridge0: port 1(bridge_slave_0) entered disabled state [ 1267.360258][T13718] device bridge_slave_0 entered promiscuous mode [ 1267.369437][T13718] bridge0: port 2(bridge_slave_1) entered blocking state [ 1267.376721][T13718] bridge0: port 2(bridge_slave_1) entered disabled state [ 1267.385383][T13718] device bridge_slave_1 entered promiscuous mode [ 1269.017478][ T4279] Bluetooth: hci4: command 0x0419 tx timeout [ 1269.020860][T13718] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1269.137912][T13718] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1270.158894][T13718] team0: Port device team_slave_0 added [ 1270.169988][T13790] netlink: 'syz.1.2436': attribute type 10 has an invalid length. [ 1270.183986][T13790] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2436'. [ 1270.210931][T13790] device team0 entered promiscuous mode [ 1270.216806][T13790] device team_slave_0 entered promiscuous mode [ 1270.226487][T13790] device team_slave_1 entered promiscuous mode [ 1270.234177][T13790] bridge0: port 3(team0) entered blocking state [ 1270.241157][T13790] bridge0: port 3(team0) entered disabled state [ 1270.268231][T13790] bridge0: port 3(team0) entered blocking state [ 1270.274716][T13790] bridge0: port 3(team0) entered forwarding state [ 1270.381813][T13718] team0: Port device team_slave_1 added [ 1271.738616][T13718] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1271.746382][T13718] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1271.773096][T13718] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1271.785554][T13718] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1271.794068][T13718] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1271.827397][T13718] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1272.207671][ T4402] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 1273.148864][ T4402] usb 4-1: device descriptor read/all, error -71 [ 1276.079923][T13718] device hsr_slave_0 entered promiscuous mode [ 1276.100527][T13718] device hsr_slave_1 entered promiscuous mode [ 1276.211304][T13718] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1276.250658][T13718] Cannot create hsr debugfs directory [ 1276.315575][ T4562] device hsr_slave_0 left promiscuous mode [ 1276.481907][ T4562] device hsr_slave_1 left promiscuous mode [ 1276.497729][ T4562] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1277.279536][ T4562] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1277.477850][ T4562] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1277.485541][ T4562] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1277.513768][ T4562] device bridge_slave_1 left promiscuous mode [ 1277.520317][ T4562] bridge0: port 2(bridge_slave_1) entered disabled state [ 1278.278943][ T4562] device bridge_slave_0 left promiscuous mode [ 1278.285205][ T4562] bridge0: port 1(bridge_slave_0) entered disabled state [ 1278.474528][ T4562] device veth1_macvtap left promiscuous mode [ 1278.481075][ T4562] device veth0_macvtap left promiscuous mode [ 1278.487734][ T4562] device veth1_vlan left promiscuous mode [ 1278.493801][ T4562] device veth0_vlan left promiscuous mode [ 1284.153331][ T4562] team0 (unregistering): Port device team_slave_1 removed [ 1284.232115][ T4562] team0 (unregistering): Port device team_slave_0 removed [ 1284.311577][ T4562] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1284.402278][ T4562] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1285.869894][ T4562] bond0 (unregistering): Released all slaves [ 1290.657491][ T4402] usb 5-1: new full-speed USB device number 34 using dummy_hcd [ 1290.841778][ T4402] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1290.881851][ T4402] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1290.923032][ T4402] usb 5-1: Product: syz [ 1290.994090][ T4402] usb 5-1: Manufacturer: syz [ 1291.045171][ T4402] usb 5-1: SerialNumber: syz [ 1291.116119][ T4402] usb 5-1: config 0 descriptor?? [ 1291.221688][T13718] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1291.350425][ T4402] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1291.385434][T13718] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1291.511032][T13718] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1291.696312][T13718] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1292.294469][T13718] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1292.355250][ T5196] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1292.400272][ T5196] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1292.428936][T13718] 8021q: adding VLAN 0 to HW filter on device team0 [ 1292.469851][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1292.490388][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1292.525003][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 1292.532190][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1292.604171][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1292.633268][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1292.666623][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1292.715365][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 1292.722813][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1292.773607][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1292.778133][ T4402] dvb_usb_rtl28xxu: probe of 5-1:0.0 failed with error -71 [ 1292.793075][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1292.868913][ T4402] usb 5-1: USB disconnect, device number 34 [ 1292.906808][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1292.996915][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1293.042490][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1293.087086][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1293.115059][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1293.249236][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1293.258218][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1293.282130][T13718] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1293.324132][T13718] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1293.337597][ T5196] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1294.383062][ T5196] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1296.927469][ T9025] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 1299.302710][ T4522] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1299.330273][ T4522] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1299.381418][T13718] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1299.477470][ T4331] usb 2-1: new full-speed USB device number 41 using dummy_hcd [ 1299.689285][ T4331] usb 2-1: config 0 has an invalid interface number: 110 but max is 0 [ 1299.717049][ T4331] usb 2-1: config 0 has no interface number 0 [ 1299.754398][ T4331] usb 2-1: config 0 interface 110 altsetting 2 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 1299.813932][ T4331] usb 2-1: config 0 interface 110 has no altsetting 0 [ 1299.849304][ T4331] usb 2-1: New USB device found, idVendor=0547, idProduct=2720, bcdDevice=af.55 [ 1299.902675][ T4331] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1299.955554][ T4331] usb 2-1: Product: syz [ 1300.006408][ T4331] usb 2-1: Manufacturer: syz [ 1300.046840][ T4331] usb 2-1: SerialNumber: syz [ 1300.060582][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.067504][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 1300.114656][ T4331] usb 2-1: config 0 descriptor?? [ 1300.151605][T14014] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1303.580288][ T4331] cdc_subset: probe of 2-1:0.110 failed with error -71 [ 1303.605436][ T4331] usb 2-1: USB disconnect, device number 41 [ 1304.605206][ T4413] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1305.415354][ T4413] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1305.484366][T13718] device veth0_vlan entered promiscuous mode [ 1305.528613][ T4413] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1305.563313][ T4413] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1305.789767][ T4413] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1305.805646][ T4413] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1305.973647][T13718] device veth1_vlan entered promiscuous mode [ 1306.697066][T13835] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1306.728468][T13835] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1306.775939][T13718] device veth0_macvtap entered promiscuous mode [ 1307.759233][ T4413] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1307.792898][T13718] device veth1_macvtap entered promiscuous mode [ 1307.952948][T13718] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1307.971375][T13718] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1307.995376][T13718] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1308.006468][T13718] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1308.091243][T13718] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1308.118792][T13718] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1308.153975][T13718] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1308.211999][T13718] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1308.223976][T13718] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1308.237787][T13718] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1308.248575][T13718] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1308.258737][T13718] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1308.269639][T13718] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1308.279753][T13718] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1308.422915][T13718] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1308.441631][T13718] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1308.509344][T14094] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2498'. [ 1308.518555][T14094] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2498'. [ 1308.527718][T14094] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2498'. [ 1308.536748][T14094] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2498'. [ 1309.142644][T13718] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1309.176267][T13718] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1309.245297][ T4457] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1309.261318][ T4457] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1309.274448][ T4457] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1309.300093][ T4457] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1310.536641][T13718] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1310.559223][T13718] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1310.599803][T13718] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1311.466934][T13718] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1313.059812][ T4457] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1313.080394][ T4457] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1313.684935][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1313.753012][ T51] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1313.774536][ T51] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1313.877154][ T5196] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1316.755459][T13245] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1316.766097][T13245] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1316.775382][T13245] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1316.785127][ T47] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1316.793102][ T47] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1316.801704][ T47] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1316.847332][ T4317] usb 5-1: new full-speed USB device number 35 using dummy_hcd [ 1316.979104][ T51] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1317.018179][ T4317] usb 5-1: device descriptor read/64, error -71 [ 1317.306423][ T4317] usb 5-1: new full-speed USB device number 36 using dummy_hcd [ 1317.401464][ T51] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1317.520152][ T4317] usb 5-1: device descriptor read/64, error -71 [ 1317.698485][ T4317] usb usb5-port1: attempt power cycle [ 1318.149491][ T51] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1318.167487][ T4317] usb 5-1: new full-speed USB device number 37 using dummy_hcd [ 1318.858833][ T47] Bluetooth: hci4: command 0x0409 tx timeout [ 1319.007817][ T4317] usb 5-1: device descriptor read/8, error -71 [ 1319.171087][ T51] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1319.277510][ T4317] usb 5-1: new full-speed USB device number 38 using dummy_hcd [ 1319.328024][ T4317] usb 5-1: device descriptor read/8, error -71 [ 1319.591409][ T4317] usb usb5-port1: unable to enumerate USB device [ 1319.612403][T14168] chnl_net:caif_netlink_parms(): no params data found [ 1320.103536][T14168] bridge0: port 1(bridge_slave_0) entered blocking state [ 1320.114316][T14168] bridge0: port 1(bridge_slave_0) entered disabled state [ 1320.129618][T14168] device bridge_slave_0 entered promiscuous mode [ 1320.140197][T14208] netlink: 2064 bytes leftover after parsing attributes in process `syz.1.2524'. [ 1320.154217][T14168] bridge0: port 2(bridge_slave_1) entered blocking state [ 1320.162628][T14168] bridge0: port 2(bridge_slave_1) entered disabled state [ 1320.173138][T14168] device bridge_slave_1 entered promiscuous mode [ 1320.937422][ T47] Bluetooth: hci4: command 0x041b tx timeout [ 1321.926720][T14168] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1322.195718][T14168] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1322.491165][T14168] team0: Port device team_slave_0 added [ 1323.212022][ T47] Bluetooth: hci4: command 0x040f tx timeout [ 1323.443457][T14168] team0: Port device team_slave_1 added [ 1324.322269][T14168] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1324.349044][T14168] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1324.516610][T14168] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1324.717373][ T4331] usb 1-1: new full-speed USB device number 48 using dummy_hcd [ 1324.805867][T14168] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1324.823344][T14168] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1324.887721][ T4331] usb 1-1: device descriptor read/64, error -71 [ 1324.929450][T14168] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1325.178801][ T4331] usb 1-1: new full-speed USB device number 49 using dummy_hcd [ 1325.256631][T14258] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2533'. [ 1325.266160][T14258] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2533'. [ 1325.275361][T14258] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2533'. [ 1325.284422][T14258] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2533'. [ 1325.377546][ T4331] usb 1-1: device descriptor read/64, error -71 [ 1325.467557][ T47] Bluetooth: hci4: command 0x0419 tx timeout [ 1325.508213][ T4331] usb usb1-port1: attempt power cycle [ 1325.776397][T14168] device hsr_slave_0 entered promiscuous mode [ 1325.838047][T14168] device hsr_slave_1 entered promiscuous mode [ 1325.883512][T14168] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1325.891596][T14168] Cannot create hsr debugfs directory [ 1325.917340][ T4331] usb 1-1: new full-speed USB device number 50 using dummy_hcd [ 1325.948956][ T51] device hsr_slave_0 left promiscuous mode [ 1325.959209][ T4331] usb 1-1: device descriptor read/8, error -71 [ 1325.978030][ T51] device hsr_slave_1 left promiscuous mode [ 1325.996316][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1326.026610][ T51] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1326.047863][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1326.055346][ T51] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1326.084022][ T51] device bridge_slave_1 left promiscuous mode [ 1326.122103][ T51] bridge0: port 2(bridge_slave_1) entered disabled state [ 1326.200739][ T51] device bridge_slave_0 left promiscuous mode [ 1326.222346][ T51] bridge0: port 1(bridge_slave_0) entered disabled state [ 1326.233026][ T4331] usb 1-1: new full-speed USB device number 51 using dummy_hcd [ 1326.268072][ T4331] usb 1-1: device descriptor read/8, error -71 [ 1326.417966][ T4331] usb usb1-port1: unable to enumerate USB device [ 1326.426627][ T51] device veth1_macvtap left promiscuous mode [ 1326.467034][ T51] device veth0_macvtap left promiscuous mode [ 1326.537833][ T51] device veth1_vlan left promiscuous mode [ 1326.568130][ T51] device veth0_vlan left promiscuous mode [ 1328.489125][ T51] team0 (unregistering): Port device team_slave_1 removed [ 1328.570689][ T51] team0 (unregistering): Port device team_slave_0 removed [ 1328.811184][ T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1329.795587][ T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1331.480002][ T51] bond0 (unregistering): Released all slaves [ 1335.237637][ T4317] usb 2-1: new full-speed USB device number 42 using dummy_hcd [ 1335.444010][ T4317] usb 2-1: config 0 has an invalid interface number: 110 but max is 0 [ 1335.881994][ T4317] usb 2-1: config 0 has no interface number 0 [ 1336.210109][ T4317] usb 2-1: config 0 interface 110 altsetting 2 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 1336.235702][ T4317] usb 2-1: config 0 interface 110 has no altsetting 0 [ 1336.304488][ T4317] usb 2-1: New USB device found, idVendor=0547, idProduct=2720, bcdDevice=af.55 [ 1336.348340][ T4317] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1336.372498][ T4317] usb 2-1: Product: syz [ 1336.376730][ T4317] usb 2-1: Manufacturer: syz [ 1336.392589][ T4317] usb 2-1: SerialNumber: syz [ 1336.446309][ T4317] usb 2-1: config 0 descriptor?? [ 1336.473898][T14329] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1336.881188][T14358] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2557'. [ 1336.890393][T14358] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2557'. [ 1336.899635][T14358] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2557'. [ 1336.908750][T14358] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2557'. [ 1339.009667][ T4317] cdc_subset: probe of 2-1:0.110 failed with error -71 [ 1339.117172][ T4317] usb 2-1: USB disconnect, device number 42 [ 1339.380036][T14168] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1339.392141][T14168] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1339.402520][T14168] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1339.412938][T14168] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1339.498482][T14168] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1339.519060][T14168] 8021q: adding VLAN 0 to HW filter on device team0 [ 1339.636218][ T5196] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1340.718085][ T5196] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1340.757532][ T5196] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1340.798311][ T5196] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1340.842290][ T5196] bridge0: port 1(bridge_slave_0) entered blocking state [ 1340.849499][ T5196] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1340.907928][ T5196] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1340.934508][ T5196] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1340.947933][ T5196] bridge0: port 2(bridge_slave_1) entered blocking state [ 1340.955080][ T5196] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1340.998993][ T5196] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1341.010462][ T5196] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1341.039121][ T5196] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1341.068530][ T5196] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1341.081180][ T5196] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1341.108284][ T5196] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1341.128202][ T5196] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1341.163866][ T5196] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1341.188846][ T5196] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1341.226229][T14168] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1341.308249][T14168] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1341.333514][ T5196] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1341.548378][ T5196] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1341.595317][ T5196] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1343.610448][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1343.629228][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1343.741607][T14168] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1353.375221][ T4562] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1353.428183][ T4562] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1354.366628][ T4562] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1354.386159][ T4562] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1354.419780][T14168] device veth0_vlan entered promiscuous mode [ 1354.438165][ T4562] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1354.482556][ T4562] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1354.535320][T14168] device veth1_vlan entered promiscuous mode [ 1354.697868][ T4413] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1354.719920][ T4413] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1354.839204][T14168] device veth0_macvtap entered promiscuous mode [ 1355.034885][T14168] device veth1_macvtap entered promiscuous mode [ 1355.085589][T14168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1355.098082][T14168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1355.110227][T14168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1355.120991][T14168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1355.883700][T14168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1355.920436][T14168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1355.932573][T14168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1355.943487][T14168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1355.964011][T14168] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1355.992165][T14168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1356.044822][T14168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1356.083702][T14168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1356.098093][T14168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1356.108285][T14168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1356.121391][T14168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1356.131522][T14168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1356.147414][T14168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1356.170204][T14168] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1356.190162][ T5290] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1356.208252][ T5290] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1356.248364][ T5290] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1356.276697][ T5290] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1356.289573][ T5290] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1356.301818][ T5290] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1356.316182][T14168] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1356.333012][T14168] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1356.345796][T14168] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1356.386191][T14168] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1356.447446][ T9024] usb 1-1: new full-speed USB device number 52 using dummy_hcd [ 1356.647660][ T9024] usb 1-1: config 0 has an invalid interface number: 110 but max is 0 [ 1356.656086][ T9024] usb 1-1: config 0 has no interface number 0 [ 1356.670500][ T9024] usb 1-1: config 0 interface 110 altsetting 2 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 1356.683756][ T9024] usb 1-1: config 0 interface 110 has no altsetting 0 [ 1356.700244][ T9024] usb 1-1: New USB device found, idVendor=0547, idProduct=2720, bcdDevice=af.55 [ 1356.710017][ T9024] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1356.721745][ T9024] usb 1-1: Product: syz [ 1356.726578][ T9024] usb 1-1: Manufacturer: syz [ 1356.757565][ T9024] usb 1-1: SerialNumber: syz [ 1356.792161][ T9024] usb 1-1: config 0 descriptor?? [ 1356.799996][T14532] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1357.794246][ T5290] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1357.828915][ T5290] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1357.875907][ T4413] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1357.936645][ T4413] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1357.952935][ T4413] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1358.027657][ T5290] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1359.837578][T14558] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2603'. [ 1359.846772][T14558] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2603'. [ 1359.855884][T14558] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2603'. [ 1359.864918][T14558] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2603'. [ 1360.533850][ T9024] cdc_subset: probe of 1-1:0.110 failed with error -71 [ 1360.589514][ T9024] usb 1-1: USB disconnect, device number 52 [ 1361.500651][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 1361.507032][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 1361.659939][T14574] loop5: detected capacity change from 0 to 1024 [ 1361.759412][T14574] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 1363.673197][T14168] EXT4-fs (loop5): unmounting filesystem. [ 1368.095210][ T9377] usb 5-1: new full-speed USB device number 39 using dummy_hcd [ 1368.247522][ T9377] usb 5-1: device descriptor read/64, error -71 [ 1369.247293][ T9377] usb 5-1: new full-speed USB device number 40 using dummy_hcd [ 1373.430605][T14676] loop5: detected capacity change from 0 to 1024 [ 1373.872449][T14676] hfsplus: invalid btree flag [ 1374.301606][T14676] hfsplus: failed to load extents file [ 1374.768745][T14696] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2630'. [ 1374.777949][T14696] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2630'. [ 1374.787007][T14696] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2630'. [ 1374.796047][T14696] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2630'. [ 1376.431461][ T4473] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 1376.740871][ T4473] usb 6-1: device descriptor read/64, error -71 [ 1377.667509][ T4473] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 1377.847482][ T4473] usb 6-1: device descriptor read/64, error -71 [ 1378.294741][ T4473] usb usb6-port1: attempt power cycle [ 1385.345272][T14776] loop5: detected capacity change from 0 to 64 [ 1386.747655][ T4331] usb 5-1: new full-speed USB device number 41 using dummy_hcd [ 1387.148242][ T4331] usb 5-1: device descriptor read/64, error -71 [ 1387.296717][T14792] netlink: 'syz.1.2654': attribute type 10 has an invalid length. [ 1387.353207][T14792] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2654'. [ 1387.867353][ T4331] usb 5-1: new full-speed USB device number 42 using dummy_hcd [ 1387.884837][T14798] loop5: detected capacity change from 0 to 1024 [ 1388.027545][ T4331] usb 5-1: device descriptor read/64, error -71 [ 1388.147750][ T4331] usb usb5-port1: attempt power cycle [ 1388.166009][T14798] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 1388.567651][ T4331] usb 5-1: new full-speed USB device number 43 using dummy_hcd [ 1390.050664][ T4331] usb 5-1: device descriptor read/8, error -71 [ 1391.085703][T14168] EXT4-fs (loop5): unmounting filesystem. [ 1395.104741][T14862] fuse: Bad value for 'fd' [ 1395.557439][ T9024] usb 4-1: new full-speed USB device number 52 using dummy_hcd [ 1395.727590][ T9024] usb 4-1: device descriptor read/64, error -71 [ 1396.597700][T14875] loop5: detected capacity change from 0 to 1024 [ 1396.713249][T14875] hfsplus: invalid btree flag [ 1396.717339][ T9024] usb 4-1: new full-speed USB device number 53 using dummy_hcd [ 1396.907611][T14875] hfsplus: failed to load extents file [ 1396.987312][ T9024] usb 4-1: device descriptor read/64, error -71 [ 1397.108098][ T9024] usb usb4-port1: attempt power cycle [ 1397.735827][ T9024] usb 4-1: new full-speed USB device number 54 using dummy_hcd [ 1397.966350][T14899] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2671'. [ 1397.975349][T14899] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2671'. [ 1397.984503][T14899] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2671'. [ 1397.993450][T14899] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2671'. [ 1400.138405][ T9024] usb 4-1: device descriptor read/8, error -71 [ 1400.262103][T14908] netlink: 'syz.3.2676': attribute type 10 has an invalid length. [ 1400.297762][T14908] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2676'. [ 1400.306805][T14908] device team0 entered promiscuous mode [ 1400.313040][T14908] device team_slave_0 entered promiscuous mode [ 1400.319760][T14908] device team_slave_1 entered promiscuous mode [ 1400.327012][T14908] bridge0: port 3(team0) entered blocking state [ 1400.335936][T14908] bridge0: port 3(team0) entered disabled state [ 1400.348920][T14908] bridge0: port 3(team0) entered blocking state [ 1400.355366][T14908] bridge0: port 3(team0) entered forwarding state [ 1407.617507][T14965] loop5: detected capacity change from 0 to 1024 [ 1407.647459][ T7] usb 2-1: new full-speed USB device number 43 using dummy_hcd [ 1407.775138][T14965] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 1407.807263][ T7] usb 2-1: device descriptor read/64, error -71 [ 1408.537644][ T7] usb 2-1: new full-speed USB device number 44 using dummy_hcd [ 1408.654180][T14168] EXT4-fs (loop5): unmounting filesystem. [ 1408.699318][ T7] usb 2-1: device descriptor read/64, error -71 [ 1408.818414][ T7] usb usb2-port1: attempt power cycle [ 1409.227311][ T7] usb 2-1: new full-speed USB device number 45 using dummy_hcd [ 1410.839266][ T7] usb 2-1: device descriptor read/8, error -71 [ 1413.148219][T15019] loop5: detected capacity change from 0 to 1024 [ 1413.733293][T15019] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 1415.023405][T15027] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2701'. [ 1417.344227][T14168] EXT4-fs (loop5): unmounting filesystem. [ 1417.707436][ T7] usb 4-1: new full-speed USB device number 56 using dummy_hcd [ 1417.867430][ T7] usb 4-1: device descriptor read/64, error -71 [ 1420.007283][ T7] usb 4-1: new full-speed USB device number 57 using dummy_hcd [ 1420.259232][ T7] usb 4-1: device descriptor read/64, error -71 [ 1420.579090][ T7] usb usb4-port1: attempt power cycle [ 1421.765274][T15098] netlink: 'syz.0.2714': attribute type 12 has an invalid length. [ 1421.803101][T15098] netlink: 'syz.0.2714': attribute type 29 has an invalid length. [ 1421.832055][T15098] netlink: 148 bytes leftover after parsing attributes in process `syz.0.2714'. [ 1421.885746][T15100] loop5: detected capacity change from 0 to 1024 [ 1421.935506][T15100] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 1422.943887][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 1422.952023][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 1423.651587][T15117] netlink: 'syz.1.2719': attribute type 12 has an invalid length. [ 1423.660880][T15117] netlink: 'syz.1.2719': attribute type 29 has an invalid length. [ 1423.669214][T15117] netlink: 148 bytes leftover after parsing attributes in process `syz.1.2719'. [ 1423.736166][T14168] EXT4-fs (loop5): unmounting filesystem. [ 1424.003619][T15122] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 1424.397356][ T9024] usb 4-1: new full-speed USB device number 59 using dummy_hcd [ 1427.017804][ T9024] usb 4-1: no configurations [ 1427.022650][ T9024] usb 4-1: can't read configurations, error -22 [ 1427.207405][ T9024] usb 4-1: new full-speed USB device number 60 using dummy_hcd [ 1428.583400][T15154] loop5: detected capacity change from 0 to 1024 [ 1428.654462][T15154] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 1428.788853][T14168] EXT4-fs (loop5): unmounting filesystem. [ 1431.050829][T15182] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 1432.110404][T15185] netlink: 'syz.4.2736': attribute type 10 has an invalid length. [ 1432.157454][T15185] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2736'. [ 1432.951866][T15185] device team0 entered promiscuous mode [ 1432.977592][T15185] device team_slave_0 entered promiscuous mode [ 1433.025864][T15185] device team_slave_1 entered promiscuous mode [ 1433.042059][T15185] bridge0: port 3(team0) entered blocking state [ 1433.049427][T15185] bridge0: port 3(team0) entered disabled state [ 1433.095696][T15185] bridge0: port 3(team0) entered blocking state [ 1433.102735][T15185] bridge0: port 3(team0) entered forwarding state [ 1434.887329][ T9025] usb 6-1: new full-speed USB device number 5 using dummy_hcd [ 1435.582056][ T9025] usb 6-1: no configurations [ 1435.602561][ T9025] usb 6-1: can't read configurations, error -22 [ 1435.817335][ T9025] usb 6-1: new full-speed USB device number 6 using dummy_hcd [ 1436.039636][ T9025] usb 6-1: no configurations [ 1436.044935][ T9025] usb 6-1: can't read configurations, error -22 [ 1437.098243][ T9025] usb usb6-port1: attempt power cycle [ 1437.587416][ T9025] usb 6-1: new full-speed USB device number 7 using dummy_hcd [ 1437.820592][ T9025] usb 6-1: device descriptor read/8, error -71 [ 1440.377527][ T4279] Bluetooth: hci4: command 0x0406 tx timeout [ 1441.894726][T15255] netlink: 2064 bytes leftover after parsing attributes in process `syz.3.2754'. [ 1442.277444][ T7249] usb 2-1: new full-speed USB device number 47 using dummy_hcd [ 1442.500230][ T7249] usb 2-1: no configurations [ 1442.506436][ T7249] usb 2-1: can't read configurations, error -22 [ 1442.727455][ T7249] usb 2-1: new full-speed USB device number 48 using dummy_hcd [ 1442.955711][ T7249] usb 2-1: no configurations [ 1442.963476][ T7249] usb 2-1: can't read configurations, error -22 [ 1442.985513][ T7249] usb usb2-port1: attempt power cycle [ 1444.267851][ T7249] usb 2-1: new full-speed USB device number 49 using dummy_hcd [ 1444.301630][ T7249] usb 2-1: no configurations [ 1444.306377][ T7249] usb 2-1: can't read configurations, error -22 [ 1445.098358][ T7249] usb 2-1: new full-speed USB device number 50 using dummy_hcd [ 1445.836541][ T7249] usb 2-1: device not accepting address 50, error -71 [ 1446.037694][ T7249] usb usb2-port1: unable to enumerate USB device [ 1448.206495][T15300] netlink: 'syz.3.2766': attribute type 12 has an invalid length. [ 1448.224850][T15300] netlink: 'syz.3.2766': attribute type 29 has an invalid length. [ 1448.250529][T15300] netlink: 148 bytes leftover after parsing attributes in process `syz.3.2766'. [ 1455.530374][T15343] loop5: detected capacity change from 0 to 64 [ 1465.115192][T15413] netlink: 'syz.0.2796': attribute type 10 has an invalid length. [ 1465.147444][T15413] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2796'. [ 1465.291503][T15418] loop5: detected capacity change from 0 to 1024 [ 1466.785995][T15420] netlink: 'syz.1.2798': attribute type 10 has an invalid length. [ 1466.897614][T15420] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2798'. [ 1467.245369][T15418] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 1468.774904][T14168] EXT4-fs (loop5): unmounting filesystem. [ 1469.077358][ T8623] usb 5-1: new full-speed USB device number 45 using dummy_hcd [ 1469.311320][ T8623] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1469.345042][ T8623] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1469.415053][ T8623] usb 5-1: Product: syz [ 1469.445844][ T8623] usb 5-1: Manufacturer: syz [ 1469.485378][ T8623] usb 5-1: SerialNumber: syz [ 1469.675174][ T8623] usb 5-1: config 0 descriptor?? [ 1470.180251][ T8623] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1470.302913][ T8623] dvb_usb_rtl28xxu: probe of 5-1:0.0 failed with error -32 [ 1471.900967][ T9022] usb 5-1: USB disconnect, device number 45 [ 1476.637681][ T9022] usb 5-1: new full-speed USB device number 46 using dummy_hcd [ 1476.866014][ T9022] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1477.478598][ T9022] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1477.755003][ T9022] usb 5-1: Product: syz [ 1477.794094][ T9022] usb 5-1: Manufacturer: syz [ 1477.807269][ T9022] usb 5-1: SerialNumber: syz [ 1477.824830][ T9022] usb 5-1: config 0 descriptor?? [ 1478.054202][ T9022] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1478.284832][ T9022] dvb_usb_rtl28xxu: probe of 5-1:0.0 failed with error -32 [ 1481.405782][T12843] usb 5-1: USB disconnect, device number 46 [ 1482.599073][T15555] netlink: 'syz.3.2837': attribute type 12 has an invalid length. [ 1482.607295][T15555] netlink: 'syz.3.2837': attribute type 29 has an invalid length. [ 1482.615397][T15555] netlink: 148 bytes leftover after parsing attributes in process `syz.3.2837'. [ 1484.381518][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 1484.391962][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 1492.581048][ T47] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1492.591981][ T47] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1492.600662][T13245] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1492.613593][ T47] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1492.624975][ T47] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1492.632668][ T47] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1493.075911][ T9] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1493.266329][ T9] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1493.410544][ T9] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1494.479109][ T9] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1494.703939][ T47] Bluetooth: hci2: command 0x0409 tx timeout [ 1496.129888][T15653] chnl_net:caif_netlink_parms(): no params data found [ 1496.552664][T15653] bridge0: port 1(bridge_slave_0) entered blocking state [ 1496.565498][T15653] bridge0: port 1(bridge_slave_0) entered disabled state [ 1496.574893][T15653] device bridge_slave_0 entered promiscuous mode [ 1496.777279][ T47] Bluetooth: hci2: command 0x041b tx timeout [ 1497.149807][T15653] bridge0: port 2(bridge_slave_1) entered blocking state [ 1497.156943][T15653] bridge0: port 2(bridge_slave_1) entered disabled state [ 1497.269394][T15653] device bridge_slave_1 entered promiscuous mode [ 1497.588306][T15708] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2875'. [ 1498.551375][T15653] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1498.693876][T15653] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1499.017419][ T47] Bluetooth: hci2: command 0x040f tx timeout [ 1500.389344][T15653] team0: Port device team_slave_0 added [ 1500.436786][T15653] team0: Port device team_slave_1 added [ 1500.631121][T15653] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1500.903196][T15745] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2882'. [ 1500.912352][T15745] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2882'. [ 1500.921986][T15745] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2882'. [ 1500.931009][T15745] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2882'. [ 1501.157293][ T47] Bluetooth: hci2: command 0x0419 tx timeout [ 1501.858934][T15653] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1502.004339][T15653] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1502.728021][T15653] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1502.758188][T15653] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1502.921968][T15653] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1505.604554][T15653] device hsr_slave_0 entered promiscuous mode [ 1505.708390][T15653] device hsr_slave_1 entered promiscuous mode [ 1506.031608][T15653] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1506.322884][T15793] loop5: detected capacity change from 0 to 764 [ 1506.334790][T15653] Cannot create hsr debugfs directory [ 1508.352717][ T9] device hsr_slave_0 left promiscuous mode [ 1508.417004][ T9] device hsr_slave_1 left promiscuous mode [ 1508.448203][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1508.466884][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1508.617643][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1508.635238][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1508.658580][ T9] bridge0: port 3(team0) entered disabled state [ 1508.704343][ T9] device bridge_slave_1 left promiscuous mode [ 1508.727088][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 1508.756492][ T9] device bridge_slave_0 left promiscuous mode [ 1508.769242][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 1512.404609][ T9] device veth1_macvtap left promiscuous mode [ 1512.426536][ T9] device veth0_macvtap left promiscuous mode [ 1512.436772][ T9] device veth1_vlan left promiscuous mode [ 1512.444305][ T9] device veth0_vlan left promiscuous mode [ 1514.046760][ T9] device team_slave_1 left promiscuous mode [ 1514.071466][ T9] team0 (unregistering): Port device team_slave_1 removed [ 1514.139770][ T9] device team_slave_0 left promiscuous mode [ 1514.148705][ T9] team0 (unregistering): Port device team_slave_0 removed [ 1514.211750][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1514.293546][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1514.998990][ T9] bond0 (unregistering): Released all slaves [ 1515.176580][T15825] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2903'. [ 1518.200347][T15895] netlink: 'syz.5.2917': attribute type 12 has an invalid length. [ 1518.224190][T15895] netlink: 'syz.5.2917': attribute type 29 has an invalid length. [ 1518.260408][T15895] netlink: 148 bytes leftover after parsing attributes in process `syz.5.2917'. [ 1520.449961][T15653] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1520.488106][T15653] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1520.576500][T15653] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1520.619254][T15653] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1522.303157][T15653] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1527.716910][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1527.742756][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1527.786683][T15653] 8021q: adding VLAN 0 to HW filter on device team0 [ 1527.844120][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1527.888473][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1527.931359][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 1527.939667][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1527.985370][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1527.999562][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1528.019242][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1528.048318][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 1528.055561][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1528.291840][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1528.348759][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1529.928338][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1530.017221][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1530.486973][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1530.518134][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1530.541568][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1530.556006][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1530.565091][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1530.804010][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1531.408540][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1531.429945][T15653] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1533.353222][ T4419] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1533.379291][ T4419] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1533.432177][T15653] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1533.568148][ T4522] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1533.607707][ T4522] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1533.739422][ T4413] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1533.785367][ T4413] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1533.808767][T15653] device veth0_vlan entered promiscuous mode [ 1533.829043][ T4413] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1533.844074][ T4413] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1534.071365][T15653] device veth1_vlan entered promiscuous mode [ 1534.387510][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1534.463962][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1534.804509][ T4413] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1534.845943][ T4413] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1534.954172][T15653] device veth0_macvtap entered promiscuous mode [ 1534.983392][T15653] device veth1_macvtap entered promiscuous mode [ 1535.033585][T15653] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1535.072672][T15653] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1535.097221][T15653] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1535.132352][T15653] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1535.164616][T15653] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1535.187262][T15653] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1535.207439][T15653] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1535.223176][T15653] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1535.252773][T15653] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1535.294328][T15653] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1535.325371][T15653] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1535.386720][T15653] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1535.494877][T15653] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1535.543165][T16064] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2951'. [ 1535.555348][T16064] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2951'. [ 1535.564802][T16064] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2951'. [ 1535.573987][T16064] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2951'. [ 1535.811361][T15653] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1536.009142][T16058] loop5: detected capacity change from 0 to 1024 [ 1536.056806][T15653] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1536.136071][T16058] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 1536.161849][T15653] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1536.224281][T15653] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1536.236001][T15653] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1536.251099][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1537.192114][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1537.200975][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1537.211172][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1537.222711][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1537.232665][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1537.277782][T15653] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1537.288915][T15653] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1537.298278][T15653] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1537.309200][T15653] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1537.435928][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1537.509181][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1537.526189][T14168] EXT4-fs (loop5): unmounting filesystem. [ 1537.619754][ T4457] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1537.654273][ T4457] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1537.709539][ T4457] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1537.770316][ T4457] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1543.243007][ T4279] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1543.263592][ T4279] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1543.272552][ T4279] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1543.284590][ T4279] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1543.292589][ T4279] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 1543.300124][ T4279] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1543.887056][ T4457] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1544.450975][ T4457] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1544.736664][ T4457] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1545.096833][ T4457] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1545.339144][ T4279] Bluetooth: hci5: command 0x0409 tx timeout [ 1545.821320][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 1545.828329][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 1546.746221][T16158] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2969'. [ 1546.755588][T16158] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2969'. [ 1546.764836][T16158] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2969'. [ 1546.774017][T16158] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2969'. [ 1547.417639][ T4279] Bluetooth: hci5: command 0x041b tx timeout [ 1549.507376][ T4279] Bluetooth: hci5: command 0x040f tx timeout [ 1549.601476][T16133] chnl_net:caif_netlink_parms(): no params data found [ 1551.558925][T16133] bridge0: port 1(bridge_slave_0) entered blocking state [ 1551.573624][T16133] bridge0: port 1(bridge_slave_0) entered disabled state [ 1551.588120][ T4279] Bluetooth: hci5: command 0x0419 tx timeout [ 1551.669330][T16133] device bridge_slave_0 entered promiscuous mode [ 1552.767384][T16133] bridge0: port 2(bridge_slave_1) entered blocking state [ 1552.776659][T16133] bridge0: port 2(bridge_slave_1) entered disabled state [ 1553.746365][T16133] device bridge_slave_1 entered promiscuous mode [ 1554.828176][T16133] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1555.143001][T16133] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1555.423148][T16133] team0: Port device team_slave_0 added [ 1555.440669][T16133] team0: Port device team_slave_1 added [ 1555.528756][T16226] fuse: Bad value for 'user_id' [ 1555.790978][T16133] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1555.866224][T16133] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1555.955371][T16133] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1556.141864][T16231] loop5: detected capacity change from 0 to 1024 [ 1556.759214][T16231] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 1557.178773][T16133] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1557.185809][T16133] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1557.253867][T16133] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1557.433701][ T4457] device hsr_slave_0 left promiscuous mode [ 1557.477562][ T4457] device hsr_slave_1 left promiscuous mode [ 1557.667448][ T4457] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1557.674938][ T4457] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1557.746503][ T4457] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1557.765224][ T4457] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1557.834747][ T4457] bridge0: port 3(team0) entered disabled state [ 1557.866025][ T4457] device bridge_slave_1 left promiscuous mode [ 1557.887660][ T4457] bridge0: port 2(bridge_slave_1) entered disabled state [ 1557.906491][ T4457] device bridge_slave_0 left promiscuous mode [ 1557.917400][ T4457] bridge0: port 1(bridge_slave_0) entered disabled state [ 1558.163612][T14168] EXT4-fs (loop5): unmounting filesystem. [ 1559.890416][T16275] loop5: detected capacity change from 0 to 1024 [ 1560.134714][ T4279] Bluetooth: hci2: Unknown advertising packet type: 0xffff [ 1560.135431][ T4279] Bluetooth: hci2: adv larger than maximum supported [ 1560.144573][ T4279] Bluetooth: hci2: Malformed LE Event: 0x0d [ 1562.488251][ T4457] device veth1_macvtap left promiscuous mode [ 1562.529243][ T4457] device veth0_macvtap left promiscuous mode [ 1562.591171][ T4457] device veth1_vlan left promiscuous mode [ 1562.645944][ T4457] device veth0_vlan left promiscuous mode [ 1563.068636][T16275] EXT4-fs warning (device loop5): ext4_multi_mount_protect:404: Unable to create kmmpd thread for loop5. [ 1565.383427][ T9377] usb 2-1: new full-speed USB device number 51 using dummy_hcd [ 1565.595272][ T9377] usb 2-1: config 0 has an invalid interface number: 110 but max is 0 [ 1565.615517][T16317] loop5: detected capacity change from 0 to 128 [ 1565.624023][ T9377] usb 2-1: config 0 has no interface number 0 [ 1565.649915][ T9377] usb 2-1: config 0 interface 110 has no altsetting 0 [ 1565.701909][ T9377] usb 2-1: New USB device found, idVendor=0547, idProduct=2720, bcdDevice=af.55 [ 1565.744425][ T9377] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1565.778969][ T9377] usb 2-1: Product: syz [ 1565.821760][ T9377] usb 2-1: Manufacturer: syz [ 1565.853719][ T9377] usb 2-1: SerialNumber: syz [ 1565.921840][ T9377] usb 2-1: config 0 descriptor?? [ 1566.257586][ T47] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1566.277621][ T47] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1566.286755][ T47] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1566.314393][ T47] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1566.345423][ T47] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1566.375648][ T47] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1567.263279][ T4457] device team_slave_1 left promiscuous mode [ 1567.314783][ T4457] team0 (unregistering): Port device team_slave_1 removed [ 1567.587701][ T9377] cdc_subset: probe of 2-1:0.110 failed with error -71 [ 1568.320873][ T9377] usb 2-1: USB disconnect, device number 51 [ 1568.353727][ T4457] device team_slave_0 left promiscuous mode [ 1568.372863][ T4457] team0 (unregistering): Port device team_slave_0 removed [ 1568.547556][ T4279] Bluetooth: hci1: command 0x0409 tx timeout [ 1568.705836][ T4457] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1569.311823][ T4457] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1570.617287][ T4279] Bluetooth: hci1: command 0x041b tx timeout [ 1571.483839][ T4457] bond0 (unregistering): Released all slaves [ 1571.806015][T16133] device hsr_slave_0 entered promiscuous mode [ 1571.814393][T16133] device hsr_slave_1 entered promiscuous mode [ 1572.330557][T16359] netlink: 2064 bytes leftover after parsing attributes in process `syz.3.3006'. [ 1572.433059][T16365] loop5: detected capacity change from 0 to 1024 [ 1572.697708][ T4279] Bluetooth: hci1: command 0x040f tx timeout [ 1574.787347][ T4279] Bluetooth: hci1: command 0x0419 tx timeout [ 1575.064137][T16320] chnl_net:caif_netlink_parms(): no params data found [ 1576.442988][ T4457] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1576.464998][T16320] bridge0: port 1(bridge_slave_0) entered blocking state [ 1576.482862][T16320] bridge0: port 1(bridge_slave_0) entered disabled state [ 1576.523328][T16320] device bridge_slave_0 entered promiscuous mode [ 1576.889553][ T4457] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1576.977821][T16320] bridge0: port 2(bridge_slave_1) entered blocking state [ 1577.015564][T16320] bridge0: port 2(bridge_slave_1) entered disabled state [ 1577.049339][T16320] device bridge_slave_1 entered promiscuous mode [ 1578.518560][ T33] hfsplus: b-tree write err: -5, ino 4 [ 1579.551104][ T4457] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1579.737761][T16320] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1579.750437][T16320] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1579.945331][ T4457] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1580.113423][T16320] team0: Port device team_slave_0 added [ 1580.135341][T16133] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1580.197540][ T8623] usb 6-1: new full-speed USB device number 9 using dummy_hcd [ 1580.199850][T16320] team0: Port device team_slave_1 added [ 1580.254910][T16133] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1580.348774][T16133] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1581.302179][ T8623] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1581.318665][ T8623] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1581.347251][ T8623] usb 6-1: Product: syz [ 1581.351586][ T8623] usb 6-1: Manufacturer: syz [ 1581.365494][ T8623] usb 6-1: SerialNumber: syz [ 1581.370858][T16133] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1581.385524][ T8623] usb 6-1: config 0 descriptor?? [ 1581.393574][T16320] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1581.482561][T16320] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1581.549978][T16320] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1581.597705][ T8623] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1581.645847][T16320] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1581.667365][T16320] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1581.745832][T16320] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1581.940654][ T4457] tipc: Left network mode [ 1582.057894][T16320] device hsr_slave_0 entered promiscuous mode [ 1582.075377][T16320] device hsr_slave_1 entered promiscuous mode [ 1582.103334][T16320] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1582.127800][T16320] Cannot create hsr debugfs directory [ 1583.303421][ T8623] dvb_usb_rtl28xxu: probe of 6-1:0.0 failed with error -71 [ 1583.347801][ T8623] usb 6-1: USB disconnect, device number 9 [ 1585.364728][T16133] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1585.837493][T16133] 8021q: adding VLAN 0 to HW filter on device team0 [ 1585.888328][ T4419] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1585.918135][ T4419] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1585.981406][ T4419] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1586.024512][ T4419] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1586.056392][ T4419] bridge0: port 1(bridge_slave_0) entered blocking state [ 1586.063782][ T4419] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1586.165832][ T4419] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1586.206239][ T4419] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1586.239073][ T4419] bridge0: port 2(bridge_slave_1) entered blocking state [ 1586.246857][ T4419] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1586.255040][ T4419] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1586.327387][T16464] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3021'. [ 1586.888460][T16466] netlink: 'syz.3.3022': attribute type 10 has an invalid length. [ 1586.932561][T16466] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3022'. [ 1586.954671][ T4413] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1587.351636][T16477] loop5: detected capacity change from 0 to 1024 [ 1587.410150][T16477] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 1588.162338][T14168] EXT4-fs (loop5): unmounting filesystem. [ 1589.002266][ T4413] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1589.045705][ T4413] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1589.088301][ T4413] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1589.119349][ T4413] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1589.208201][ T4415] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1589.234335][ T4415] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1589.270976][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1589.301240][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1589.397491][ T4413] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1589.421387][ T4413] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1589.457716][T16133] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1589.924390][T16320] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1590.955713][T16320] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1590.998372][T16320] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1591.217461][ T4398] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 1591.306993][T16320] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1591.470433][ T4398] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1591.545985][ T4398] usb 4-1: config 0 has no interfaces? [ 1591.580051][ T4398] usb 4-1: New USB device found, idVendor=04b4, idProduct=de61, bcdDevice= 0.00 [ 1591.616988][ T4398] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1591.679654][ T4398] usb 4-1: config 0 descriptor?? [ 1592.001367][ T4457] device hsr_slave_0 left promiscuous mode [ 1592.031276][ T4457] device hsr_slave_1 left promiscuous mode [ 1592.118329][ T4457] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1592.132365][ T4457] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1592.168026][ T4457] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1592.202571][ T4457] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1592.252373][ T4457] bridge0: port 3(team0) entered disabled state [ 1592.304893][ T4457] device bridge_slave_1 left promiscuous mode [ 1592.345535][ T4457] bridge0: port 2(bridge_slave_1) entered disabled state [ 1592.391727][ T4457] device bridge_slave_0 left promiscuous mode [ 1592.434706][ T4457] bridge0: port 1(bridge_slave_0) entered disabled state [ 1593.357775][ T4457] device veth1_macvtap left promiscuous mode [ 1593.363916][ T4457] device veth0_macvtap left promiscuous mode [ 1593.417489][ T4457] device veth1_vlan left promiscuous mode [ 1593.433583][ T4457] device veth0_vlan left promiscuous mode [ 1593.795995][T16542] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3032'. [ 1593.805376][T16542] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3032'. [ 1593.815232][T16542] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3032'. [ 1593.824829][T16542] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3032'. [ 1595.605154][ T4317] usb 4-1: USB disconnect, device number 61 [ 1595.758109][ T4457] device team_slave_1 left promiscuous mode [ 1595.769948][ T4457] team0 (unregistering): Port device team_slave_1 removed [ 1595.824438][ T4457] device team_slave_0 left promiscuous mode [ 1595.835895][ T4457] team0 (unregistering): Port device team_slave_0 removed [ 1595.894078][ T4457] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1595.965071][ T4457] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1596.669544][ T4457] bond0 (unregistering): Released all slaves [ 1596.882813][T16544] netlink: 'syz.1.3033': attribute type 12 has an invalid length. [ 1596.900148][T16544] netlink: 'syz.1.3033': attribute type 29 has an invalid length. [ 1596.908863][T16544] netlink: 148 bytes leftover after parsing attributes in process `syz.1.3033'. [ 1596.958869][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1596.980526][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1597.016512][T16133] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1597.024380][ C1] ================================================================== [ 1597.024400][ C1] BUG: KASAN: use-after-free in rose_timer_expiry+0x470/0x490 [ 1597.024581][ C1] Read of size 2 at addr ffff888056b9742a by task syz-executor/16133 [ 1597.024602][ C1] [ 1597.024621][ C1] CPU: 1 PID: 16133 Comm: syz-executor Not tainted 6.1.148-syzkaller #0 [ 1597.024644][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1597.024666][ C1] Call Trace: [ 1597.024682][ C1] [ 1597.024691][ C1] dump_stack_lvl+0x168/0x22e [ 1597.024721][ C1] ? __lock_acquire+0x7c50/0x7c50 [ 1597.024785][ C1] ? show_regs_print_info+0x12/0x12 [ 1597.024806][ C1] ? load_image+0x3b0/0x3b0 [ 1597.024843][ C1] ? _raw_spin_lock_irqsave+0xb0/0xf0 [ 1597.024924][ C1] ? __virt_addr_valid+0x188/0x540 [ 1597.024958][ C1] ? __virt_addr_valid+0x465/0x540 [ 1597.024984][ C1] ? rose_timer_expiry+0x470/0x490 [ 1597.025013][ C1] print_report+0xa8/0x210 [ 1597.025042][ C1] kasan_report+0x10b/0x140 [ 1597.025104][ C1] ? rose_timer_expiry+0x470/0x490 [ 1597.025137][ C1] rose_timer_expiry+0x470/0x490 [ 1597.025168][ C1] call_timer_fn+0x1a0/0x670 [ 1597.025211][ C1] ? rose_start_t1timer+0xd0/0xd0 [ 1597.025240][ C1] ? call_timer_fn+0xc1/0x670 [ 1597.025259][ C1] ? __run_timers+0x7c0/0x7c0 [ 1597.025281][ C1] ? _raw_spin_unlock_irq+0x1f/0x40 [ 1597.025308][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 1597.025355][ C1] ? rose_start_t1timer+0xd0/0xd0 [ 1597.025385][ C1] __run_timers+0x525/0x7c0 [ 1597.025409][ C1] ? detach_timer+0x350/0x350 [ 1597.025430][ C1] ? lock_chain_count+0x20/0x20 [ 1597.025458][ C1] run_timer_softirq+0x63/0xf0 [ 1597.025513][ C1] handle_softirqs+0x2a1/0x920 [ 1597.025571][ C1] ? __irq_exit_rcu+0x12f/0x220 [ 1597.025626][ C1] ? do_softirq+0x200/0x200 [ 1597.025657][ C1] ? irqtime_account_irq+0xb2/0x1b0 [ 1597.025884][ C1] __irq_exit_rcu+0x12f/0x220 [ 1597.025918][ C1] ? irq_exit_rcu+0x20/0x20 [ 1597.025954][ C1] irq_exit_rcu+0x5/0x20 [ 1597.025978][ C1] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 1597.026005][ C1] [ 1597.026013][ C1] [ 1597.026021][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1597.026054][ C1] RIP: 0010:console_emit_next_record+0xab0/0xc90 [ 1597.026098][ C1] Code: 96 5d 1a 00 4d 85 ff 75 16 e8 8c 5d 1a 00 eb 15 e8 85 5d 1a 00 e8 10 f1 af 08 4d 85 ff 74 ea e8 76 5d 1a 00 fb 48 8b 5c 24 48 <48> c7 84 24 80 00 00 00 0e 36 e0 45 4a c7 04 2b 00 00 00 00 4a c7 [ 1597.026119][ C1] RSP: 0018:ffffc900048ee7e0 EFLAGS: 00000293 [ 1597.026141][ C1] RAX: ffffffff816660ea RBX: 1ffff9200091dd0c RCX: ffff888043db3b80 [ 1597.026158][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1597.026171][ C1] RBP: ffffc900048eea20 R08: dffffc0000000000 R09: fffffbfff215bc49 [ 1597.026187][ C1] R10: fffffbfff215bc49 R11: 1ffffffff215bc48 R12: ffffffff81665e6d [ 1597.026204][ C1] R13: dffffc0000000000 R14: 0000000000000001 R15: 0000000000000200 [ 1597.026220][ C1] ? console_emit_next_record+0x82d/0xc90 [ 1597.026252][ C1] ? console_emit_next_record+0xaaa/0xc90 [ 1597.026290][ C1] ? __lock_acquire+0x7c50/0x7c50 [ 1597.026318][ C1] ? info_print_prefix+0x300/0x300 [ 1597.026352][ C1] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 1597.026385][ C1] ? __down_trylock_console_sem+0xeb/0x1e0 [ 1597.026415][ C1] ? __down_trylock_console_sem+0x184/0x1e0 [ 1597.026443][ C1] ? _printk+0xcc/0x110 [ 1597.026470][ C1] ? _printk+0xcc/0x110 [ 1597.026496][ C1] ? console_trylock+0x160/0x160 [ 1597.026526][ C1] console_unlock+0x223/0x630 [ 1597.026553][ C1] ? _printk+0xcc/0x110 [ 1597.026578][ C1] vprintk_emit+0x489/0x680 [ 1597.026605][ C1] ? printk_sprint+0x460/0x460 [ 1597.026632][ C1] ? __wake_up_common+0x5b/0x4e0 [ 1597.026663][ C1] ? __wake_up+0x11b/0x190 [ 1597.026696][ C1] _printk+0xcc/0x110 [ 1597.026726][ C1] ? load_image+0x3b0/0x3b0 [ 1597.026756][ C1] ? packet_notifier+0x72/0xa50 [ 1597.026845][ C1] ? rose_device_event+0x5e4/0x690 [ 1597.026875][ C1] vlan_device_event+0x1bed/0x1e00 [ 1597.026935][ C1] ? rose_info_show+0xc10/0xc10 [ 1597.026963][ C1] ? br_device_event+0x132/0x880 [ 1597.026982][ C1] ? phonet_exit_net+0x80/0x80 [ 1597.027001][ C1] ? register_vlan_dev+0x7f0/0x7f0 [ 1597.027028][ C1] ? br_switchdev_event+0x480/0x480 [ 1597.027046][ C1] ? bcm_notifier+0x9e/0x880 [ 1597.027076][ C1] ? isotp_notifier+0x9f/0x6a0 [ 1597.027131][ C1] ? ax25_device_event+0x6c/0x600 [ 1597.027155][ C1] ? j1939_netdev_notify+0xfd/0x2e0 [ 1597.027172][ C1] ? device_event+0xe4/0x220 [ 1597.027238][ C1] raw_notifier_call_chain+0xcb/0x160 [ 1597.027291][ C1] __dev_notify_flags+0x178/0x2d0 [ 1597.027337][ C1] ? __dev_change_flags+0x6a0/0x6a0 [ 1597.027356][ C1] ? __dev_change_flags+0x4bb/0x6a0 [ 1597.027378][ C1] ? dev_get_flags+0x1c0/0x1c0 [ 1597.027398][ C1] ? slab_free_freelist_hook+0x131/0x1a0 [ 1597.027421][ C1] ? preempt_count_add+0x8d/0x190 [ 1597.027481][ C1] dev_change_flags+0xe3/0x1a0 [ 1597.027503][ C1] do_setlink+0xc31/0x3c40 [ 1597.027556][ C1] ? nlmsg_parse_deprecated_strict+0x110/0x110 [ 1597.027581][ C1] ? stack_trace_save+0x98/0xe0 [ 1597.027606][ C1] ? __stack_depot_save+0x35/0x460 [ 1597.027783][ C1] ? __nla_validate_parse+0x1fd2/0x2990 [ 1597.027907][ C1] ? netlink_rcv_skb+0x1de/0x420 [ 1597.027988][ C1] ? netlink_unicast+0x74d/0x8d0 [ 1597.028018][ C1] ? __nla_validate+0x50/0x50 [ 1597.028054][ C1] ? validate_linkmsg+0x3db/0x4c0 [ 1597.028074][ C1] ? mutex_is_locked+0xe/0x40 [ 1597.028098][ C1] rtnl_newlink+0x17d6/0x1ff0 [ 1597.028125][ C1] ? rtnl_newlink+0x551/0x1ff0 [ 1597.028151][ C1] ? rtnl_setlink+0x450/0x450 [ 1597.028180][ C1] ? trace_raw_output_contention_end+0xd0/0xd0 [ 1597.028206][ C1] ? rcu_is_watching+0x11/0xa0 [ 1597.028282][ C1] ? trace_contention_end+0x5f/0x170 [ 1597.028304][ C1] ? __mutex_lock+0x19e/0xaf0 [ 1597.028329][ C1] ? rcu_read_unlock+0x8c/0xa0 [ 1597.028353][ C1] ? rtnl_setlink+0x450/0x450 [ 1597.028372][ C1] ? rtnetlink_rcv_msg+0x1d8/0xed0 [ 1597.028395][ C1] rtnetlink_rcv_msg+0x79b/0xed0 [ 1597.028421][ C1] ? rtnetlink_bind+0x80/0x80 [ 1597.028441][ C1] ? __local_bh_enable_ip+0x12a/0x1b0 [ 1597.028469][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 1597.028494][ C1] ? __local_bh_enable_ip+0x12a/0x1b0 [ 1597.028521][ C1] ? _local_bh_enable+0xa0/0xa0 [ 1597.028548][ C1] ? __dev_queue_xmit+0x26f/0x3760 [ 1597.028584][ C1] ? __dev_queue_xmit+0x26f/0x3760 [ 1597.028626][ C1] ? __dev_queue_xmit+0x15c9/0x3760 [ 1597.028655][ C1] ? __dev_queue_xmit+0x26f/0x3760 [ 1597.028682][ C1] ? netdev_core_pick_tx+0x340/0x340 [ 1597.028709][ C1] ? ref_tracker_free+0x630/0x7c0 [ 1597.028734][ C1] ? refcount_inc+0x70/0x70 [ 1597.028755][ C1] ? __copy_skb_header+0x417/0x5a0 [ 1597.028788][ C1] ? __skb_clone+0x480/0x790 [ 1597.028814][ C1] netlink_rcv_skb+0x1de/0x420 [ 1597.028835][ C1] ? rtnetlink_bind+0x80/0x80 [ 1597.029053][ C1] ? netlink_ack+0x1100/0x1100 [ 1597.029088][ C1] ? netlink_deliver_tap+0x2e/0x1b0 [ 1597.029113][ C1] netlink_unicast+0x74d/0x8d0 [ 1597.029256][ C1] netlink_sendmsg+0x89e/0xbc0 [ 1597.029283][ C1] ? netlink_getsockopt+0x540/0x540 [ 1597.029307][ C1] ? aa_sock_msg_perm+0x94/0x150 [ 1597.029398][ C1] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1597.029444][ C1] ? security_socket_sendmsg+0x7c/0xa0 [ 1597.029493][ C1] __sys_sendto+0x44f/0x5c0 [ 1597.029546][ C1] ? __ia32_sys_getpeername+0x80/0x80 [ 1597.029579][ C1] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 1597.029607][ C1] ? lock_chain_count+0x20/0x20 [ 1597.029634][ C1] __x64_sys_sendto+0xda/0xf0 [ 1597.029656][ C1] do_syscall_64+0x4c/0xa0 [ 1597.029677][ C1] ? clear_bhb_loop+0x60/0xb0 [ 1597.029695][ C1] ? clear_bhb_loop+0x60/0xb0 [ 1597.029714][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1597.029742][ C1] RIP: 0033:0x7f6d11990a7c [ 1597.029766][ C1] Code: 2a 5f 02 00 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 70 5f 02 00 48 8b [ 1597.029784][ C1] RSP: 002b:00007ffed6c09750 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 1597.029806][ C1] RAX: ffffffffffffffda RBX: 00007f6d126e4620 RCX: 00007f6d11990a7c [ 1597.029820][ C1] RDX: 000000000000002c RSI: 00007f6d126e4670 RDI: 0000000000000003 [ 1597.029833][ C1] RBP: 0000000000000000 R08: 00007ffed6c097a4 R09: 000000000000000c [ 1597.029846][ C1] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 1597.029858][ C1] R13: 0000000000000000 R14: 00007f6d126e4670 R15: 0000000000000000 [ 1597.029877][ C1] [ 1597.029884][ C1] [ 1597.029889][ C1] Allocated by task 16470: [ 1597.029898][ C1] kasan_set_track+0x4b/0x70 [ 1597.029972][ C1] __kasan_kmalloc+0x8e/0xa0 [ 1597.029996][ C1] __kmalloc_node_track_caller+0xae/0x230 [ 1597.030050][ C1] __alloc_skb+0x22a/0x7e0 [ 1597.030070][ C1] fdb_notify+0xa6/0x160 [ 1597.030086][ C1] fdb_add_local+0x155/0x250 [ 1597.030102][ C1] br_fdb_add_local+0x36/0x50 [ 1597.030118][ C1] __vlan_add+0x585/0x26e0 [ 1597.030160][ C1] nbp_vlan_add+0x25e/0x3b0 [ 1597.030177][ C1] br_vlan_info+0xf7/0x450 [ 1597.030222][ C1] br_process_vlan_info+0x545/0x7f0 [ 1597.030246][ C1] br_afspec+0x1f6/0x5c0 [ 1597.030269][ C1] br_setlink+0x282/0x7e0 [ 1597.030291][ C1] rtnl_bridge_setlink+0x4ba/0x720 [ 1597.030314][ C1] rtnetlink_rcv_msg+0x79b/0xed0 [ 1597.030336][ C1] netlink_rcv_skb+0x1de/0x420 [ 1597.030357][ C1] netlink_unicast+0x74d/0x8d0 [ 1597.030375][ C1] netlink_sendmsg+0x89e/0xbc0 [ 1597.030396][ C1] ____sys_sendmsg+0x59b/0x970 [ 1597.030417][ C1] ___sys_sendmsg+0x21c/0x290 [ 1597.030438][ C1] __se_sys_sendmsg+0x19e/0x270 [ 1597.030459][ C1] do_syscall_64+0x4c/0xa0 [ 1597.030476][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1597.030505][ C1] [ 1597.030510][ C1] Freed by task 16470: [ 1597.030519][ C1] kasan_set_track+0x4b/0x70 [ 1597.030542][ C1] kasan_save_free_info+0x2d/0x50 [ 1597.030569][ C1] ____kasan_slab_free+0x126/0x1e0 [ 1597.030591][ C1] slab_free_freelist_hook+0x131/0x1a0 [ 1597.030610][ C1] __kmem_cache_free+0xb6/0x1f0 [ 1597.030627][ C1] skb_release_data+0x5db/0x7c0 [ 1597.030647][ C1] consume_skb+0xa2/0x100 [ 1597.030666][ C1] netlink_broadcast+0xfd6/0x10d0 [ 1597.030684][ C1] nlmsg_notify+0xe7/0x1a0 [ 1597.030704][ C1] fdb_add_local+0x155/0x250 [ 1597.030721][ C1] br_fdb_add_local+0x36/0x50 [ 1597.030740][ C1] __vlan_add+0x585/0x26e0 [ 1597.030757][ C1] nbp_vlan_add+0x25e/0x3b0 [ 1597.030775][ C1] br_vlan_info+0xf7/0x450 [ 1597.030798][ C1] br_process_vlan_info+0x545/0x7f0 [ 1597.030823][ C1] br_afspec+0x1f6/0x5c0 [ 1597.030846][ C1] br_setlink+0x282/0x7e0 [ 1597.030870][ C1] rtnl_bridge_setlink+0x4ba/0x720 [ 1597.030890][ C1] rtnetlink_rcv_msg+0x79b/0xed0 [ 1597.030922][ C1] netlink_rcv_skb+0x1de/0x420 [ 1597.030942][ C1] netlink_unicast+0x74d/0x8d0 [ 1597.030962][ C1] netlink_sendmsg+0x89e/0xbc0 [ 1597.030984][ C1] ____sys_sendmsg+0x59b/0x970 [ 1597.031005][ C1] ___sys_sendmsg+0x21c/0x290 [ 1597.031024][ C1] __se_sys_sendmsg+0x19e/0x270 [ 1597.031045][ C1] do_syscall_64+0x4c/0xa0 [ 1597.031060][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1597.031087][ C1] [ 1597.031091][ C1] Last potentially related work creation: [ 1597.031098][ C1] kasan_save_stack+0x3a/0x60 [ 1597.031131][ C1] __kasan_record_aux_stack+0xb2/0xc0 [ 1597.031159][ C1] insert_work+0x54/0x3c0 [ 1597.031217][ C1] __queue_work+0xba3/0xfb0 [ 1597.031245][ C1] call_timer_fn+0x1a0/0x670 [ 1597.031262][ C1] __run_timers+0x550/0x7c0 [ 1597.031278][ C1] run_timer_softirq+0x63/0xf0 [ 1597.031307][ C1] handle_softirqs+0x2a1/0x920 [ 1597.031335][ C1] __irq_exit_rcu+0x12f/0x220 [ 1597.031364][ C1] irq_exit_rcu+0x5/0x20 [ 1597.031392][ C1] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 1597.031416][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1597.031447][ C1] [ 1597.031452][ C1] The buggy address belongs to the object at ffff888056b97400 [ 1597.031452][ C1] which belongs to the cache kmalloc-512 of size 512 [ 1597.031470][ C1] The buggy address is located 42 bytes inside of [ 1597.031470][ C1] 512-byte region [ffff888056b97400, ffff888056b97600) [ 1597.031490][ C1] [ 1597.031494][ C1] The buggy address belongs to the physical page: [ 1597.031508][ C1] page:ffffea00015ae500 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x56b94 [ 1597.031530][ C1] head:ffffea00015ae500 order:2 compound_mapcount:0 compound_pincount:0 [ 1597.031546][ C1] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 1597.031580][ C1] raw: 00fff00000010200 dead000000000100 dead000000000122 ffff888017441c80 [ 1597.031598][ C1] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 1597.031609][ C1] page dumped because: kasan: bad access detected [ 1597.031622][ C1] page_owner tracks the page as allocated [ 1597.031628][ C1] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 4268, tgid 4268 (syz-executor), ts 74001515183, free_ts 21717448367 [ 1597.031663][ C1] post_alloc_hook+0x173/0x1a0 [ 1597.031723][ C1] get_page_from_freelist+0x1a26/0x1ac0 [ 1597.031749][ C1] __alloc_pages+0x1df/0x4e0 [ 1597.031772][ C1] alloc_slab_page+0x5d/0x160 [ 1597.031791][ C1] new_slab+0x87/0x2c0 [ 1597.031809][ C1] ___slab_alloc+0xbc6/0x1220 [ 1597.031827][ C1] __kmem_cache_alloc_node+0x1a0/0x260 [ 1597.031844][ C1] __kmalloc+0xa0/0x240 [ 1597.031869][ C1] fib6_info_alloc+0x2e/0xe0 [ 1597.031942][ C1] ip6_route_info_create+0x44f/0x1210 [ 1597.031962][ C1] addrconf_f6i_alloc+0x1b9/0x3f0 [ 1597.031981][ C1] ipv6_add_addr+0x43a/0xf90 [ 1597.032029][ C1] add_addr+0x8c/0x2c0 [ 1597.032055][ C1] add_v4_addrs+0x6ff/0xc00 [ 1597.032081][ C1] addrconf_init_auto_addrs+0x733/0xa60 [ 1597.032109][ C1] addrconf_notify+0xaca/0xf40 [ 1597.032136][ C1] page last free stack trace: [ 1597.032142][ C1] free_unref_page_prepare+0x8b4/0x9a0 [ 1597.032165][ C1] free_unref_page+0x2e/0x3f0 [ 1597.032187][ C1] free_contig_range+0x9d/0x150 [ 1597.032213][ C1] destroy_args+0xef/0x8bf [ 1597.032287][ C1] debug_vm_pgtable+0x32a/0x37e [ 1597.032306][ C1] do_one_initcall+0x214/0x7a0 [ 1597.032332][ C1] do_initcall_level+0x137/0x1e4 [ 1597.032351][ C1] do_initcalls+0x4b/0x8a [ 1597.032365][ C1] kernel_init_freeable+0x3fa/0x5ac [ 1597.032379][ C1] kernel_init+0x19/0x1b0 [ 1597.032398][ C1] ret_from_fork+0x1f/0x30 [ 1597.032418][ C1] [ 1597.032421][ C1] Memory state around the buggy address: [ 1597.032429][ C1] ffff888056b97300: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1597.032440][ C1] ffff888056b97380: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1597.032451][ C1] >ffff888056b97400: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1597.032459][ C1] ^ [ 1597.032468][ C1] ffff888056b97480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1597.032478][ C1] ffff888056b97500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1597.032486][ C1] ================================================================== [ 1597.032559][ C1] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1597.032571][ C1] CPU: 1 PID: 16133 Comm: syz-executor Not tainted 6.1.148-syzkaller #0 [ 1597.032589][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1597.032599][ C1] Call Trace: [ 1597.032605][ C1] [ 1597.032612][ C1] dump_stack_lvl+0x168/0x22e [ 1597.032629][ C1] ? memcpy+0x3c/0x60 [ 1597.032653][ C1] ? show_regs_print_info+0x12/0x12 [ 1597.032670][ C1] ? load_image+0x3b0/0x3b0 [ 1597.032696][ C1] panic+0x2c9/0x710 [ 1597.032714][ C1] ? asm_sysvec_call_function_single+0x16/0x20 [ 1597.032731][ C1] ? bpf_jit_dump+0xd0/0xd0 [ 1597.032750][ C1] ? _raw_spin_unlock_irqrestore+0xa5/0x100 [ 1597.032773][ C1] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 1597.032795][ C1] ? _raw_spin_unlock+0x40/0x40 [ 1597.032816][ C1] check_panic_on_warn+0x80/0xa0 [ 1597.032834][ C1] ? rose_timer_expiry+0x470/0x490 [ 1597.032857][ C1] end_report+0x66/0x110 [ 1597.032876][ C1] kasan_report+0x118/0x140 [ 1597.032897][ C1] ? rose_timer_expiry+0x470/0x490 [ 1597.032929][ C1] rose_timer_expiry+0x470/0x490 [ 1597.032953][ C1] call_timer_fn+0x1a0/0x670 [ 1597.032967][ C1] ? rose_start_t1timer+0xd0/0xd0 [ 1597.032989][ C1] ? call_timer_fn+0xc1/0x670 [ 1597.033003][ C1] ? __run_timers+0x7c0/0x7c0 [ 1597.033019][ C1] ? _raw_spin_unlock_irq+0x1f/0x40 [ 1597.033040][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 1597.033066][ C1] ? rose_start_t1timer+0xd0/0xd0 [ 1597.033110][ C1] __run_timers+0x525/0x7c0 [ 1597.033128][ C1] ? detach_timer+0x350/0x350 [ 1597.033143][ C1] ? lock_chain_count+0x20/0x20 [ 1597.033166][ C1] run_timer_softirq+0x63/0xf0 [ 1597.033198][ C1] handle_softirqs+0x2a1/0x920 [ 1597.033224][ C1] ? __irq_exit_rcu+0x12f/0x220 [ 1597.033248][ C1] ? do_softirq+0x200/0x200 [ 1597.033279][ C1] ? irqtime_account_irq+0xb2/0x1b0 [ 1597.033303][ C1] __irq_exit_rcu+0x12f/0x220 [ 1597.033326][ C1] ? irq_exit_rcu+0x20/0x20 [ 1597.033362][ C1] irq_exit_rcu+0x5/0x20 [ 1597.033384][ C1] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 1597.033403][ C1] [ 1597.033408][ C1] [ 1597.033413][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1597.033447][ C1] RIP: 0010:console_emit_next_record+0xab0/0xc90 [ 1597.033499][ C1] Code: 96 5d 1a 00 4d 85 ff 75 16 e8 8c 5d 1a 00 eb 15 e8 85 5d 1a 00 e8 10 f1 af 08 4d 85 ff 74 ea e8 76 5d 1a 00 fb 48 8b 5c 24 48 <48> c7 84 24 80 00 00 00 0e 36 e0 45 4a c7 04 2b 00 00 00 00 4a c7 [ 1597.033512][ C1] RSP: 0018:ffffc900048ee7e0 EFLAGS: 00000293 [ 1597.033528][ C1] RAX: ffffffff816660ea RBX: 1ffff9200091dd0c RCX: ffff888043db3b80 [ 1597.033540][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1597.033549][ C1] RBP: ffffc900048eea20 R08: dffffc0000000000 R09: fffffbfff215bc49 [ 1597.033561][ C1] R10: fffffbfff215bc49 R11: 1ffffffff215bc48 R12: ffffffff81665e6d [ 1597.033577][ C1] R13: dffffc0000000000 R14: 0000000000000001 R15: 0000000000000200 [ 1597.033596][ C1] ? console_emit_next_record+0x82d/0xc90 [ 1597.033620][ C1] ? console_emit_next_record+0xaaa/0xc90 [ 1597.033647][ C1] ? __lock_acquire+0x7c50/0x7c50 [ 1597.033670][ C1] ? info_print_prefix+0x300/0x300 [ 1597.033696][ C1] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 1597.033719][ C1] ? __down_trylock_console_sem+0xeb/0x1e0 [ 1597.033742][ C1] ? __down_trylock_console_sem+0x184/0x1e0 [ 1597.033762][ C1] ? _printk+0xcc/0x110 [ 1597.033782][ C1] ? _printk+0xcc/0x110 [ 1597.033800][ C1] ? console_trylock+0x160/0x160 [ 1597.033827][ C1] console_unlock+0x223/0x630 [ 1597.033849][ C1] ? _printk+0xcc/0x110 [ 1597.033868][ C1] vprintk_emit+0x489/0x680 [ 1597.033889][ C1] ? printk_sprint+0x460/0x460 [ 1597.033915][ C1] ? __wake_up_common+0x5b/0x4e0 [ 1597.033937][ C1] ? __wake_up+0x11b/0x190 [ 1597.033957][ C1] _printk+0xcc/0x110 [ 1597.033978][ C1] ? load_image+0x3b0/0x3b0 [ 1597.034000][ C1] ? packet_notifier+0x72/0xa50 [ 1597.034018][ C1] ? rose_device_event+0x5e4/0x690 [ 1597.034039][ C1] vlan_device_event+0x1bed/0x1e00 [ 1597.034061][ C1] ? rose_info_show+0xc10/0xc10 [ 1597.034081][ C1] ? br_device_event+0x132/0x880 [ 1597.034096][ C1] ? phonet_exit_net+0x80/0x80 [ 1597.034110][ C1] ? register_vlan_dev+0x7f0/0x7f0 [ 1597.034129][ C1] ? br_switchdev_event+0x480/0x480 [ 1597.034142][ C1] ? bcm_notifier+0x9e/0x880 [ 1597.034163][ C1] ? isotp_notifier+0x9f/0x6a0 [ 1597.034179][ C1] ? ax25_device_event+0x6c/0x600 [ 1597.034197][ C1] ? j1939_netdev_notify+0xfd/0x2e0 [ 1597.034211][ C1] ? device_event+0xe4/0x220 [ 1597.034235][ C1] raw_notifier_call_chain+0xcb/0x160 [ 1597.034254][ C1] __dev_notify_flags+0x178/0x2d0 [ 1597.034272][ C1] ? __dev_change_flags+0x6a0/0x6a0 [ 1597.034286][ C1] ? __dev_change_flags+0x4bb/0x6a0 [ 1597.034303][ C1] ? dev_get_flags+0x1c0/0x1c0 [ 1597.034319][ C1] ? slab_free_freelist_hook+0x131/0x1a0 [ 1597.034336][ C1] ? preempt_count_add+0x8d/0x190 [ 1597.034353][ C1] dev_change_flags+0xe3/0x1a0 [ 1597.034370][ C1] do_setlink+0xc31/0x3c40 [ 1597.034394][ C1] ? nlmsg_parse_deprecated_strict+0x110/0x110 [ 1597.034413][ C1] ? stack_trace_save+0x98/0xe0 [ 1597.034432][ C1] ? __stack_depot_save+0x35/0x460 [ 1597.034457][ C1] ? __nla_validate_parse+0x1fd2/0x2990 [ 1597.034480][ C1] ? netlink_rcv_skb+0x1de/0x420 [ 1597.034498][ C1] ? netlink_unicast+0x74d/0x8d0 [ 1597.034521][ C1] ? __nla_validate+0x50/0x50 [ 1597.034551][ C1] ? validate_linkmsg+0x3db/0x4c0 [ 1597.034566][ C1] ? mutex_is_locked+0xe/0x40 [ 1597.034583][ C1] rtnl_newlink+0x17d6/0x1ff0 [ 1597.034604][ C1] ? rtnl_newlink+0x551/0x1ff0 [ 1597.034625][ C1] ? rtnl_setlink+0x450/0x450 [ 1597.034641][ C1] ? trace_raw_output_contention_end+0xd0/0xd0 [ 1597.034661][ C1] ? rcu_is_watching+0x11/0xa0 [ 1597.034683][ C1] ? trace_contention_end+0x5f/0x170 [ 1597.034701][ C1] ? __mutex_lock+0x19e/0xaf0 [ 1597.034721][ C1] ? rcu_read_unlock+0x8c/0xa0 [ 1597.034742][ C1] ? rtnl_setlink+0x450/0x450 [ 1597.034758][ C1] ? rtnetlink_rcv_msg+0x1d8/0xed0 [ 1597.034776][ C1] rtnetlink_rcv_msg+0x79b/0xed0 [ 1597.034797][ C1] ? rtnetlink_bind+0x80/0x80 [ 1597.034814][ C1] ? __local_bh_enable_ip+0x12a/0x1b0 [ 1597.034837][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 1597.034856][ C1] ? __local_bh_enable_ip+0x12a/0x1b0 [ 1597.034880][ C1] ? _local_bh_enable+0xa0/0xa0 [ 1597.034909][ C1] ? __dev_queue_xmit+0x26f/0x3760 [ 1597.034932][ C1] ? __dev_queue_xmit+0x26f/0x3760 [ 1597.034955][ C1] ? __dev_queue_xmit+0x15c9/0x3760 [ 1597.034981][ C1] ? __dev_queue_xmit+0x26f/0x3760 [ 1597.035005][ C1] ? netdev_core_pick_tx+0x340/0x340 [ 1597.035028][ C1] ? ref_tracker_free+0x630/0x7c0 [ 1597.035049][ C1] ? refcount_inc+0x70/0x70 [ 1597.035067][ C1] ? __copy_skb_header+0x417/0x5a0 [ 1597.035087][ C1] ? __skb_clone+0x480/0x790 [ 1597.035107][ C1] netlink_rcv_skb+0x1de/0x420 [ 1597.035124][ C1] ? rtnetlink_bind+0x80/0x80 [ 1597.035143][ C1] ? netlink_ack+0x1100/0x1100 [ 1597.035163][ C1] ? netlink_deliver_tap+0x2e/0x1b0 [ 1597.035182][ C1] netlink_unicast+0x74d/0x8d0 [ 1597.035202][ C1] netlink_sendmsg+0x89e/0xbc0 [ 1597.035223][ C1] ? netlink_getsockopt+0x540/0x540 [ 1597.035242][ C1] ? aa_sock_msg_perm+0x94/0x150 [ 1597.035265][ C1] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1597.035279][ C1] ? security_socket_sendmsg+0x7c/0xa0 [ 1597.035301][ C1] __sys_sendto+0x44f/0x5c0 [ 1597.035321][ C1] ? __ia32_sys_getpeername+0x80/0x80 [ 1597.035347][ C1] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 1597.035369][ C1] ? lock_chain_count+0x20/0x20 [ 1597.035390][ C1] __x64_sys_sendto+0xda/0xf0 [ 1597.035409][ C1] do_syscall_64+0x4c/0xa0 [ 1597.035423][ C1] ? clear_bhb_loop+0x60/0xb0 [ 1597.035437][ C1] ? clear_bhb_loop+0x60/0xb0 [ 1597.035451][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1597.035474][ C1] RIP: 0033:0x7f6d11990a7c [ 1597.035488][ C1] Code: 2a 5f 02 00 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 70 5f 02 00 48 8b [ 1597.035500][ C1] RSP: 002b:00007ffed6c09750 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 1597.035516][ C1] RAX: ffffffffffffffda RBX: 00007f6d126e4620 RCX: 00007f6d11990a7c [ 1597.035527][ C1] RDX: 000000000000002c RSI: 00007f6d126e4670 RDI: 0000000000000003 [ 1597.035537][ C1] RBP: 0000000000000000 R08: 00007ffed6c097a4 R09: 000000000000000c [ 1597.035546][ C1] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 1597.035555][ C1] R13: 0000000000000000 R14: 00007f6d126e4670 R15: 0000000000000000 [ 1597.035570][ C1] [ 1597.036067][ C1] Kernel Offset: disabled [ 1599.482943][ C1] Rebooting in 86400 seconds..