last executing test programs: 20.594327687s ago: executing program 3 (id=6330): syz_emit_ethernet(0x86, &(0x7f000000a100)=ANY=[@ANYBLOB="ffffffffffff0180c200000086dd6012000c00503a00fe8000000000000000000000000000bbfe8000000000000000000000000000aa030290780000000060f4004000001100fc000000000000000000000000000000000000000000000000000000000000008800005bb093e9201c9a3b2d4f88c30000000000fb36eeca6fad50b375a22a58"], 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) memfd_create(0x0, 0x8) sched_setscheduler(0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) readv(r0, &(0x7f0000002140)=[{&(0x7f00000010c0)=""/29, 0x1d}], 0x1) write$binfmt_script(r0, &(0x7f0000000300)={'#! ', './file0', [{0x20, '/dev/cpu/#/msr\x00'}, {0x20, './cgroup.cpu/syz0\x00'}, {0x20, '%'}, {0x20, '+\\+'}, {0x20, '!:Q]\\.'}], 0xa, "346472d022ee98264da8cbe73b8e6489b7391960c980d82ef1470c8c5ba8fd08c444b073987ce203986e2e1fa44b4d78c874a0fc3633c744ee60e52582d059770ecba328cc5ed7174637e587f3bc88f02175645e9d365ed6e8f125bfdb5598f265744fcf172c3cde01ab3f4943c6"}, 0xa9) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @remote}, 0x1c) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_int(r3, &(0x7f00000002c0)='cpuset.sched_load_balance\x00', 0x2, 0x0) sendfile(r4, r4, 0x0, 0x9c) iopl(0x3) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r5, 0x0) dup(0xffffffffffffffff) add_key$fscrypt_provisioning(&(0x7f0000000180), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00abcdefghijklmnopqrstpvwxyz0123456'], 0x29, 0xfffffffffffffffe) 17.30617623s ago: executing program 3 (id=6339): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x20, 0x9, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x10}}, 0x48}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'gre0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x31, 0x4, 0x0, 0x2, 0xc4, 0x67, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0x14, 0x0, 0x0, 0x9, [0x5, 0x0, 0x5, 0x0]}, @timestamp_prespec={0x44, 0x44, 0xc0, 0x3, 0x0, [{@private=0xa010102}, {@multicast1}, {@remote, 0x8000}, {@dev={0xac, 0x14, 0x14, 0x35}, 0x65c}, {@broadcast}, {@empty}, {@multicast1}, {@private=0xa010100, 0x7}]}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x8, [{@dev}, {@remote}, {@multicast2, 0x7}, {@private=0xa010100}, {@rand_addr=0x64010101}, {@broadcast, 0x52b1}, {@multicast2}]}, @noop, @noop, @noop, @end, @rr={0x7, 0x17, 0x0, [@dev, @remote, @multicast1, @private=0xa010102, @remote]}]}}}}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) 16.782635349s ago: executing program 3 (id=6343): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000580)={0x4c, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x4c}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)={0x1c, 0x3, 0x6, 0x0, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) 16.636225412s ago: executing program 3 (id=6345): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f00000001c0)=0x8, 0x4) getsockopt$inet_sctp_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000240), &(0x7f0000000280)=0x4) bpf$MAP_CREATE(0x0, 0x0, 0x0) mkdir(0x0, 0x0) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x10) unshare(0x64000600) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x8, 0x8, 0x0, 0x1}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x6, 0xc, &(0x7f0000000000)=@framed={{}, [@ringbuf_output={{0x18, 0x5}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x45}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}, @call={0x85, 0x0, 0x0, 0x7d}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r6}, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x5, 0x5, 0x9fd, 0x84, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b700000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f000000ac00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='sys_enter\x00', r7}, 0x10) 13.32640967s ago: executing program 3 (id=6357): syz_genetlink_get_family_id$smc(0x0, 0xffffffffffffffff) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)={0x60, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x60}}, 0x0) socket$inet6(0xa, 0x6, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000080603000000000000000000020000000500010007"], 0x1c}}, 0x0) recvfrom(r1, 0x0, 0x800000000000000, 0x0, 0x0, 0x0) 12.330336923s ago: executing program 1 (id=6359): syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cgroup.controllers\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001740)='memory.events\x00', 0x275a, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) write$binfmt_script(r3, &(0x7f0000000000), 0x208e24b) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000140)={0x40000001}) syz_emit_ethernet(0x4e8, &(0x7f00000001c0)={@dev, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb653e", 0x4b2, 0x3a, 0x0, @dev, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0xe, "7db4265c9f6aa3b46521199ea778d105c24ab977edb940e63f49a7129f45462e5eecc39f468544e3c13aa9017ccd638e784912ef2c2589d0d45cf0ed4bbe909218459bcbeaf63697aef1702b895af582b2e3b5cd435f497d415f29c5d941df10c1ca58197441e0e9b3400d983b10420fa979a3"}, {0x0, 0x4, "1598a4a8a719ffe0621615f6d04dcae3360546cf06f2665bae2296931fd1d71c1f7e"}, {0x0, 0x2, "d429145c793e823829b4376332b2c98aee"}, {0x0, 0x7e, "130c3818a2eaac43f1a6efc4f7772852ea05bff405aa28758ba53e0f2060e4e027f24bb723a5571d0da2ebeb3fe47f34e606cb3987e3681841f511126b773758e143f6be25d6965fcca35155fec3f970e2067f5db8a5de787eaf96b5957e6b988c02ae9fe26ec3118d9fdcca129d1269b290f687cde5b4eaba737c806335ca0d1e43697d144c6df4dc0d31e84004bc22e87b6e2daab5674479c76a1be360d309e7e7e5fa089032b331a3ceea18d92124681c0b78a0f1665ffcba0bee11950f6b4912bb302b3e648fad7ff4862ccc823e720fdb20af8ab0a6a09dfcdacf69923d60a0efeacf81e1e7e17db9547a4962bdec794c013af7210e54d43f3fe7da2f88c674f4cfd818f6a7461368bf62f1d5f98fd9394eb74bf0559f1c6b1ebec57dba007f143108ca4be3fa330cc21a411b0b7af23ebd9282be17fb702a5ca61650b283eec78e0280e4f2713b42bd4e3615c48c55c1abe5827601038109736f9c6b7242e7c9c917309397b864eedf5ca71db1debb609b6381b54955706017731319e0cc41083f99bd11da748b47d8715080899eb15caf19df36632b73bb22596b8e16186a2e51e277f8c78df609ca44a83914e8f7a8b053210573941b560ff8b114326678c6851c74596300b1c2a1ddc0af5b4cb5f15fa61e42214341368152275070973f3063f35fded9eeb535a0837783921dc2b705e0a0ceacca1882ff23813bc9199a9be39559c9f82a7452ce6113780cd7d26f532b72603afbfe994f5baf7257c9a33b9ac1ecd0b69da263daa9ac7e6a8d4400341926ed1f0c0e9086009c7945c0b255716f5b0dac45a9af480dc1f17beba2a2cddeafed29ecc91ce704895e28d0c46e639591c667a7f34500ea98ef557801dccf733fa61f3cf6740e40418745a42a738440ba9fc2ec415ba0fbf34800e6987b902302d552cf869eb350a9a862cd946f8285b03f03067dc9bae653dc701d97c7e6f7c1f0767624ac9e48b041c51697968b1e1733921270e569ac0b1ac7c25d00936ad05f14d67d3225d6a8cecd9fb63205ab14131e2e742977860e4a38ec056cda185aa357a059d0180056816a7902bdc0951253005099039bd945a6a4e525123cd4fcb8c5b335626464707fc21e92039b9190020eb9ef84c61cddede466a4c3ea2572927153997c33433ce9de0a7d2ed0b5fb0dce9cc6630bd0635a66be0cb490689169618184e896233d49b8f0e0717ae5d557333d54887ed8d983ee01091326af86e76583131104c66753efd58c32e499be23a05249b98e505c4c0237e2e70506fed29a33169d02b74ba5cbefad267e1107f4468e1144ece9656d35b88e405405fbb1438510f0395752c61e57e760de178a58a8da65040946656220817732fa0cd36189027287597cc5ebe709ca9d9a507babd39f1e56a37657326c7ffb654c"}]}}}}}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r6, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r7, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000240), 0x3af4701e) sendfile(r8, r2, 0x0, 0x10000a007) ioctl$BTRFS_IOC_SNAP_CREATE(r1, 0x50009401, &(0x7f0000000340)={{r1}, "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"}) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="600000000206050000000000000000feff00000014000300686173683a69702c706f72742c6970000900020073797a32000000000500040000000000050005000a000000050001000600000014000780080006400000000008000840"], 0x60}}, 0x0) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000180)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) syz_emit_ethernet(0x3e, &(0x7f0000000640)={@local, @broadcast, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "1111ce", 0x8, 0x0, 0x0, @local, @private2, {[@srh]}}}}}, 0x0) 12.012307638s ago: executing program 3 (id=6361): syz_emit_ethernet(0x86, &(0x7f000000a100)=ANY=[@ANYBLOB="ffffffffffff0180c200000086dd6012000c00503a00fe8000000000000000000000000000bbfe8000000000000000000000000000aa030290780000000060f4004000001100fc000000000000000000000000000000000000000000000000000000000000008800005bb093e9201c9a3b2d4f88c30000000000fb36eeca6fad50b375a22a58"], 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) memfd_create(0x0, 0x8) sched_setscheduler(0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) readv(r0, &(0x7f0000002140)=[{&(0x7f00000010c0)=""/29, 0x1d}], 0x1) write$binfmt_script(r0, &(0x7f0000000300)={'#! ', './file0', [{0x20, '/dev/cpu/#/msr\x00'}, {0x20, './cgroup.cpu/syz0\x00'}, {0x20, '%'}, {0x20, '+\\+'}, {0x20, '!:Q]\\.'}], 0xa, "346472d022ee98264da8cbe73b8e6489b7391960c980d82ef1470c8c5ba8fd08c444b073987ce203986e2e1fa44b4d78c874a0fc3633c744ee60e52582d059770ecba328cc5ed7174637e587f3bc88f02175645e9d365ed6e8f125bfdb5598f265744fcf172c3cde01ab3f4943c6"}, 0xa9) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x4}, 0x1c) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_int(r3, &(0x7f00000002c0)='cpuset.sched_load_balance\x00', 0x2, 0x0) sendfile(r4, r4, 0x0, 0x9c) iopl(0x3) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r5, 0x0) dup(0xffffffffffffffff) add_key$fscrypt_provisioning(&(0x7f0000000180), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00abcdefghijklmnopqrstpvwxyz0123456'], 0x29, 0xfffffffffffffffe) 10.953441959s ago: executing program 1 (id=6363): syz_emit_ethernet(0x86, &(0x7f000000a100)=ANY=[@ANYBLOB="ffffffffffff0180c200000086dd6012000c00503a00fe8000000000000000000000000000bbfe8000000000000000000000000000aa030290780000000060f4004000001100fc000000000000000000000000000000000000000000000000000000000000008800005bb093e9201c9a3b2d4f88c30000000000fb36eeca6fad50b375a22a58"], 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) memfd_create(0x0, 0x8) sched_setscheduler(0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) readv(r0, &(0x7f0000002140)=[{&(0x7f00000010c0)=""/29, 0x1d}], 0x1) write$binfmt_script(r0, &(0x7f0000000300)={'#! ', './file0', [{0x20, '/dev/cpu/#/msr\x00'}, {0x20, './cgroup.cpu/syz0\x00'}, {0x20, '%'}, {0x20, '+\\+'}, {0x20, '!:Q]\\.'}], 0xa, "346472d022ee98264da8cbe73b8e6489b7391960c980d82ef1470c8c5ba8fd08c444b073987ce203986e2e1fa44b4d78c874a0fc3633c744ee60e52582d059770ecba328cc5ed7174637e587f3bc88f02175645e9d365ed6e8f125bfdb5598f265744fcf172c3cde01ab3f4943c6"}, 0xa9) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @remote}, 0x1c) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_int(r3, &(0x7f00000002c0)='cpuset.sched_load_balance\x00', 0x2, 0x0) sendfile(r4, r4, 0x0, 0x9c) iopl(0x3) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r5, 0x0) dup(0xffffffffffffffff) add_key$fscrypt_provisioning(&(0x7f0000000180), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00abcdefghijklmnopqrstpvwxyz0123456'], 0x29, 0xfffffffffffffffe) 10.802730878s ago: executing program 2 (id=6364): open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, &(0x7f0000000040)=0x12, 0x4) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000001140)={0x0, 0x0, &(0x7f00000000c0), 0x19d, 0x0, &(0x7f0000000140)="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"}) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r2 = syz_usb_connect$cdc_ncm(0x0, 0xcc, &(0x7f0000003440)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xba, 0x2, 0x1, 0x5, 0x0, 0x1, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x6, 0x24, 0x6, 0x0, 0x1, ';'}, {0x5, 0x24, 0x0, 0x562}, {0xd, 0x24, 0xf, 0x1, 0x77, 0x40, 0x0, 0xff}, {0x6, 0x24, 0x1a, 0x311, 0x8}, [@country_functional={0x10, 0x24, 0x7, 0x4, 0xfc00, [0x9, 0x1, 0x7ff, 0x7f, 0x6]}, @country_functional={0xc, 0x24, 0x7, 0xd9, 0x2, [0x3, 0x17c, 0x543]}, @call_mgmt={0x5, 0x24, 0x1, 0x1, 0x8}, @mdlm_detail={0x27, 0x24, 0x13, 0x7f, "d9f62b8b787a06263152755fc26d0ffd3185cc6f4ec2b3ca3f875b6e356f9c5682cf3d"}, @mdlm={0x15, 0x24, 0x12, 0xfffb}]}, {{0x9, 0x5, 0x81, 0x3, 0x40, 0x81, 0xbf, 0xff}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200, 0x3, 0x80, 0x4}}, {{0x9, 0x5, 0x3, 0x2, 0x0, 0x1f, 0x4d}}}}}}}]}}, &(0x7f0000000840)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x250, 0x7f, 0x0, 0x0, 0x10, 0x40}, 0x34, &(0x7f0000000100)={0x5, 0xf, 0x34, 0x5, [@ssp_cap={0x10, 0x10, 0xa, 0x1, 0x1, 0x1, 0xff00, 0x1, [0xff0000]}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x6, 0x7, 0x3, 0x3}, @ext_cap={0x7, 0x10, 0x2, 0x12, 0x2, 0x3, 0x9}, @ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0xc, 0x10, 0x8, 0x5, 0xfc, 0xe9}]}, 0x1, [{0x101, &(0x7f0000000700)=@string={0x101, 0x3, "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"}}]}) syz_usb_control_io$cdc_ncm(r2, &(0x7f00000009c0)={0x14, &(0x7f0000000880)={0x0, 0xc, 0xf8, {0xf8, 0x23, "b718f59a3ac120a29be448eb20ffd4a1cbdbe751e8391e6c0aac82810bb4a414eef45bd1234ea4e31bfa60c7f49fd515440d887370b8a17623aa491b01173d6ba4deea3bb8a110c80f50bb2b3326188d515e3e0252286c7925fe187b81bcfd9213e9664003581865dda608032290b5a4782f737226d6a702d7a54dd73430b6abebbc544992090138430c7899f4b55ab523a1361d702de958d94f6b7c6c3ea9be39b012c06f9b9e8ed026d87147da89ba9024093579898f970e13543cc3fd1026e5dcf788175506c47ed627da6b9fcb741f78436abc46d90d9360314bc3837dc097dc07f0ee16e1f6787942291eb59d85f596de1c04f6"}}, &(0x7f0000000980)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000c00)={0x44, &(0x7f0000000c80)=ANY=[@ANYBLOB="400e1800000039629046a25102e9b18ba51e183aa0291da2616a60ed8537b32640948c8610314dd76c"], &(0x7f0000000a40)={0x0, 0xa, 0xffffffffffffffa1, 0x1}, &(0x7f0000000a80)={0x0, 0x8, 0x1, 0x80}, &(0x7f0000000ac0)={0x20, 0x80, 0x1c, {0x9, 0x1, 0x1, 0x4, 0x0, 0x1000, 0x4, 0x0, 0x0, 0x3ff, 0x8, 0xffb}}, &(0x7f0000000b00)={0x20, 0x85, 0x4}, &(0x7f0000000b40)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000000b80)={0x20, 0x87, 0x2, 0x2}, &(0x7f0000000bc0)={0x20, 0x89, 0xffffffffffffffb3, 0x1}}) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) r4 = eventfd(0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000540)={0x0, 0x0, 0x0, &(0x7f00000002c0)=""/138, 0x0}) ioctl$VHOST_SET_LOG_FD(r3, 0x4004af07, &(0x7f0000000240)=r4) ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f0000000040)={0x1, r4}) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000940)) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f0000000000)=0x20000) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), 0xffffffffffffffff) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) setsockopt$inet6_tcp_int(r6, 0x6, 0x2000000000000022, &(0x7f0000000040)=0x1, 0x4) sendto$inet6(r6, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d80)={&(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x0, 0x2a}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000200)={r7, 0x20, &(0x7f00000001c0)={&(0x7f0000000980)=""/121, 0xffffffffffffffeb, 0x0, 0x0}}, 0xb) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000001400)={0x2020}, 0x2020) 10.633936234s ago: executing program 0 (id=6365): r0 = socket$nl_route(0x10, 0x3, 0x0) timer_create(0x0, 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100)) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, 0x0, 0x0) r3 = dup3(r2, r1, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000300)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f0000000740)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f00000001c0)={@flat=@weak_handle, @flat=@weak_binder, @flat=@weak_handle}, &(0x7f0000000240)={0x0, 0x18, 0x84}}}], 0x0, 0x0, 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="3400000011001304", @ANYRES32=0x0, @ANYBLOB="000000000000000014"], 0x34}}, 0x0) 9.980473871s ago: executing program 4 (id=6366): syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cgroup.controllers\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001740)='memory.events\x00', 0x275a, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) write$binfmt_script(r3, &(0x7f0000000000), 0x208e24b) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000140)={0x40000001}) syz_emit_ethernet(0x4e8, &(0x7f00000001c0)={@dev, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb653e", 0x4b2, 0x3a, 0x0, @dev, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0xe, "7db4265c9f6aa3b46521199ea778d105c24ab977edb940e63f49a7129f45462e5eecc39f468544e3c13aa9017ccd638e784912ef2c2589d0d45cf0ed4bbe909218459bcbeaf63697aef1702b895af582b2e3b5cd435f497d415f29c5d941df10c1ca58197441e0e9b3400d983b10420fa979a3"}, {0x0, 0x4, "1598a4a8a719ffe0621615f6d04dcae3360546cf06f2665bae2296931fd1d71c1f7e"}, {0x0, 0x2, "d429145c793e823829b4376332b2c98aee"}, {0x0, 0x7e, "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"}]}}}}}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r6, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r7, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r9, &(0x7f0000000240), 0x3af4701e) sendfile(r8, r2, 0x0, 0x10000a007) ioctl$BTRFS_IOC_SNAP_CREATE(r1, 0x50009401, &(0x7f0000000340)={{}, "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"}) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="600000000206050000000000000000feff00000014000300686173683a69702c706f72742c6970000900020073797a32000000000500040000000000050005000a000000050001000600000014000780080006400000000008000840"], 0x60}}, 0x0) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000180)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) syz_emit_ethernet(0x3e, &(0x7f0000000640)={@local, @broadcast, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "1111ce", 0x8, 0x0, 0x0, @local, @private2, {[@srh]}}}}}, 0x0) 8.851641628s ago: executing program 2 (id=6368): syz_emit_ethernet(0x86, &(0x7f000000a100)=ANY=[@ANYBLOB="ffffffffffff0180c200000086dd6012000c00503a00fe8000000000000000000000000000bbfe8000000000000000000000000000aa030290780000000060f4004000001100fc000000000000000000000000000000000000000000000000000000000000008800005bb093e9201c9a3b2d4f88c30000000000fb36eeca6fad50b375a22a58"], 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) memfd_create(0x0, 0x8) sched_setscheduler(0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) readv(r0, &(0x7f0000002140)=[{&(0x7f00000010c0)=""/29, 0x1d}], 0x1) write$binfmt_script(r0, &(0x7f0000000300)={'#! ', './file0', [{0x20, '/dev/cpu/#/msr\x00'}, {0x20, './cgroup.cpu/syz0\x00'}, {0x20, '%'}, {0x20, '+\\+'}, {0x20, '!:Q]\\.'}], 0xa, "346472d022ee98264da8cbe73b8e6489b7391960c980d82ef1470c8c5ba8fd08c444b073987ce203986e2e1fa44b4d78c874a0fc3633c744ee60e52582d059770ecba328cc5ed7174637e587f3bc88f02175645e9d365ed6e8f125bfdb5598f265744fcf172c3cde01ab3f4943c6"}, 0xa9) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @remote}, 0x1c) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_int(r3, &(0x7f00000002c0)='cpuset.sched_load_balance\x00', 0x2, 0x0) sendfile(r4, r4, 0x0, 0x9c) iopl(0x3) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r5, 0x0) dup(0xffffffffffffffff) add_key$fscrypt_provisioning(&(0x7f0000000180), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00abcdefghijklmnopqrstpvwxyz0123456'], 0x29, 0xfffffffffffffffe) 8.355972155s ago: executing program 4 (id=6369): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081044e81f782db44b9040a1d08030e000000e8fea4a11800150006", 0x21}], 0x1, 0x0, 0x0, 0x7400}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe"], 0xfe1b) r0 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x33fe0) 8.201096066s ago: executing program 1 (id=6370): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x20, 0x9, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x10}}, 0x48}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'gre0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x32, 0x4, 0x0, 0x2, 0xc8, 0x67, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0x18, 0x0, 0x0, 0x9, [0x401, 0x5, 0x0, 0x5, 0x0]}, @timestamp_prespec={0x44, 0x44, 0xc0, 0x3, 0x0, [{@private=0xa010102}, {@multicast1}, {@remote, 0x8000}, {@dev={0xac, 0x14, 0x14, 0x35}, 0x65c}, {@broadcast}, {@empty}, {@multicast1}, {@private=0xa010100, 0x7}]}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x8, [{@dev}, {@remote}, {@multicast2, 0x7}, {@private=0xa010100}, {@rand_addr=0x64010101}, {@broadcast, 0x52b1}, {@multicast2}]}, @noop, @noop, @noop, @end, @rr={0x7, 0x17, 0x0, [@dev, @remote, @multicast1, @private=0xa010102, @remote]}]}}}}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) 7.893986901s ago: executing program 4 (id=6371): r0 = socket$rds(0x15, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() r2 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) listen(r2, 0xffff8000) r3 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r3, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000002}, 0x10) getsockopt$inet_int(r3, 0x10d, 0xeb, &(0x7f00000002c0), &(0x7f0000000080)=0x3) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) sendmsg$rds(r0, &(0x7f0000002180)={&(0x7f0000000100)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000001fc0)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f0000000280)=[{&(0x7f00000006c0)=""/4096, 0x1000}, {0x0}, {&(0x7f0000000180)=""/205, 0xcd}], 0x3}}, @rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f0000001ec0)=[{&(0x7f0000001a00)=""/161, 0xa1}], 0x1, 0x76}}], 0x90}, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r4, 0x11, 0x0, &(0x7f0000000000)=0x200, 0x4) 7.702432302s ago: executing program 4 (id=6372): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000280)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000100)="5c00000014006b", 0x7}, {&(0x7f00000017c0)="00000000ffffffff1f01a0c9a1171aa56a7f9138a6c073e99f8f2ffed6bd642c1238663e9e5189a46cb56c776afa8ec3d4d4d9c0648fc18bad3a6b5656235d60cb5af5c5a69e10ed9fd4ea", 0x4b}, {&(0x7f0000001840)="9a9245a259250adbc6e2", 0xa}], 0x3, 0x0, 0x0, 0x1f00c00e}, 0x0) 7.369248122s ago: executing program 0 (id=6373): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0xfffd) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000540)=0x6, 0x4) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x20000023896) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @thr={0x0, &(0x7f00000003c0)}}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae09, &(0x7f0000000040)=ANY=[]) 6.406903941s ago: executing program 1 (id=6374): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x20, 0x9, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x10}}, 0x48}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'gre0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x32, 0x4, 0x0, 0x2, 0xc8, 0x67, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0x18, 0x0, 0x0, 0x9, [0x401, 0x5, 0x0, 0x5, 0x0]}, @timestamp_prespec={0x44, 0x44, 0xc0, 0x3, 0x0, [{@private=0xa010102}, {@multicast1}, {@remote, 0x8000}, {@dev={0xac, 0x14, 0x14, 0x35}, 0x65c}, {@broadcast}, {@empty}, {@multicast1}, {@private=0xa010100, 0x7}]}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x8, [{@dev}, {@remote}, {@multicast2, 0x7}, {@private=0xa010100}, {@rand_addr=0x64010101}, {@broadcast, 0x52b1}, {@multicast2}]}, @noop, @noop, @noop, @end, @rr={0x7, 0x17, 0x0, [@dev, @remote, @multicast1, @private=0xa010102, @remote]}]}}}}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) 5.917575832s ago: executing program 0 (id=6375): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x20, 0x9, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x10}}, 0x48}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'gre0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x32, 0x4, 0x0, 0x2, 0xc8, 0x67, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0x18, 0x0, 0x0, 0x9, [0x401, 0x5, 0x0, 0x5, 0x0]}, @timestamp_prespec={0x44, 0x44, 0xc0, 0x3, 0x0, [{@private=0xa010102}, {@multicast1}, {@remote, 0x8000}, {@dev={0xac, 0x14, 0x14, 0x35}, 0x65c}, {@broadcast}, {@empty}, {@multicast1}, {@private=0xa010100, 0x7}]}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x8, [{@dev}, {@remote}, {@multicast2, 0x7}, {@private=0xa010100}, {@rand_addr=0x64010101}, {@broadcast, 0x52b1}, {@multicast2}]}, @noop, @noop, @noop, @end, @rr={0x7, 0x17, 0x0, [@dev, @remote, @multicast1, @private=0xa010102, @remote]}]}}}}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) 5.462872174s ago: executing program 2 (id=6376): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) fcntl$setownex(r5, 0x24, &(0x7f0000000100)={0x3}) r6 = socket$phonet(0x23, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000280)={'wlan1\x00'}) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r7, 0x0, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) inotify_init() inotify_add_watch(0xffffffffffffffff, &(0x7f0000000140)='.\x00', 0x0) ioctl$KVM_CHECK_EXTENSION(r4, 0xae03, 0x3c) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'nr0\x00'}) r8 = socket$kcm(0x2, 0x2, 0x2) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) 5.34028693s ago: executing program 1 (id=6377): syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cgroup.controllers\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001740)='memory.events\x00', 0x275a, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) write$binfmt_script(r3, &(0x7f0000000000), 0x208e24b) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000140)={0x40000001}) syz_emit_ethernet(0x4e8, &(0x7f00000001c0)={@dev, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb653e", 0x4b2, 0x3a, 0x0, @dev, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0xe, "7db4265c9f6aa3b46521199ea778d105c24ab977edb940e63f49a7129f45462e5eecc39f468544e3c13aa9017ccd638e784912ef2c2589d0d45cf0ed4bbe909218459bcbeaf63697aef1702b895af582b2e3b5cd435f497d415f29c5d941df10c1ca58197441e0e9b3400d983b10420fa979a3"}, {0x0, 0x4, "1598a4a8a719ffe0621615f6d04dcae3360546cf06f2665bae2296931fd1d71c1f7e"}, {0x0, 0x2, "d429145c793e823829b4376332b2c98aee"}, {0x0, 0x7e, "130c3818a2eaac43f1a6efc4f7772852ea05bff405aa28758ba53e0f2060e4e027f24bb723a5571d0da2ebeb3fe47f34e606cb3987e3681841f511126b773758e143f6be25d6965fcca35155fec3f970e2067f5db8a5de787eaf96b5957e6b988c02ae9fe26ec3118d9fdcca129d1269b290f687cde5b4eaba737c806335ca0d1e43697d144c6df4dc0d31e84004bc22e87b6e2daab5674479c76a1be360d309e7e7e5fa089032b331a3ceea18d92124681c0b78a0f1665ffcba0bee11950f6b4912bb302b3e648fad7ff4862ccc823e720fdb20af8ab0a6a09dfcdacf69923d60a0efeacf81e1e7e17db9547a4962bdec794c013af7210e54d43f3fe7da2f88c674f4cfd818f6a7461368bf62f1d5f98fd9394eb74bf0559f1c6b1ebec57dba007f143108ca4be3fa330cc21a411b0b7af23ebd9282be17fb702a5ca61650b283eec78e0280e4f2713b42bd4e3615c48c55c1abe5827601038109736f9c6b7242e7c9c917309397b864eedf5ca71db1debb609b6381b54955706017731319e0cc41083f99bd11da748b47d8715080899eb15caf19df36632b73bb22596b8e16186a2e51e277f8c78df609ca44a83914e8f7a8b053210573941b560ff8b114326678c6851c74596300b1c2a1ddc0af5b4cb5f15fa61e42214341368152275070973f3063f35fded9eeb535a0837783921dc2b705e0a0ceacca1882ff23813bc9199a9be39559c9f82a7452ce6113780cd7d26f532b72603afbfe994f5baf7257c9a33b9ac1ecd0b69da263daa9ac7e6a8d4400341926ed1f0c0e9086009c7945c0b255716f5b0dac45a9af480dc1f17beba2a2cddeafed29ecc91ce704895e28d0c46e639591c667a7f34500ea98ef557801dccf733fa61f3cf6740e40418745a42a738440ba9fc2ec415ba0fbf34800e6987b902302d552cf869eb350a9a862cd946f8285b03f03067dc9bae653dc701d97c7e6f7c1f0767624ac9e48b041c51697968b1e1733921270e569ac0b1ac7c25d00936ad05f14d67d3225d6a8cecd9fb63205ab14131e2e742977860e4a38ec056cda185aa357a059d0180056816a7902bdc0951253005099039bd945a6a4e525123cd4fcb8c5b335626464707fc21e92039b9190020eb9ef84c61cddede466a4c3ea2572927153997c33433ce9de0a7d2ed0b5fb0dce9cc6630bd0635a66be0cb490689169618184e896233d49b8f0e0717ae5d557333d54887ed8d983ee01091326af86e76583131104c66753efd58c32e499be23a05249b98e505c4c0237e2e70506fed29a33169d02b74ba5cbefad267e1107f4468e1144ece9656d35b88e405405fbb1438510f0395752c61e57e760de178a58a8da65040946656220817732fa0cd36189027287597cc5ebe709ca9d9a507babd39f1e56a37657326c7ffb654c"}]}}}}}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r6, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r7, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r8, &(0x7f0000000240), 0x3af4701e) sendfile(0xffffffffffffffff, r2, 0x0, 0x10000a007) ioctl$BTRFS_IOC_SNAP_CREATE(r1, 0x50009401, &(0x7f0000000340)={{r1}, "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"}) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="600000000206050000000000000000feff00000014000300686173683a69702c706f72742c6970000900020073797a32000000000500040000000000050005000a000000050001000600000014000780080006400000000008000840"], 0x60}}, 0x0) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000180)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) syz_emit_ethernet(0x3e, &(0x7f0000000640)={@local, @broadcast, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "1111ce", 0x8, 0x0, 0x0, @local, @private2, {[@srh]}}}}}, 0x0) 4.120760507s ago: executing program 2 (id=6378): r0 = socket$nl_route(0x10, 0x3, 0x0) timer_create(0x0, 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100)) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, 0x0, 0x0) r3 = dup3(r2, r1, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000300)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f0000000740)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f00000001c0)={@flat=@weak_handle, @flat=@weak_binder, @flat=@weak_handle}, &(0x7f0000000240)={0x0, 0x18, 0x84}}}], 0x0, 0x0, 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="3400000011001304", @ANYRES32=0x0, @ANYBLOB="000000000000000014"], 0x34}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) 3.759970794s ago: executing program 0 (id=6379): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) sched_setscheduler(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0xfffd) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000540)=0x6, 0x4) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x20000023896) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @thr={0x0, &(0x7f00000003c0)}}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$TCSETSF(r3, 0x5409, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae09, &(0x7f0000000040)=ANY=[]) 2.229180549s ago: executing program 4 (id=6380): syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="04"], 0x22) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000003c0)="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", 0xfffffffffffffd8a, 0x0) poll(&(0x7f0000000040), 0x1f, 0x3) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000700)=@ipv4_delroute={0x24, 0x19, 0x1, 0x70bd2c, 0x0, {}, [@RTA_ENCAP_TYPE={0x6}]}, 0x24}}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001140)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x2c, 0x0, 0x1, 0x201, 0x0, 0x0, {0x5, 0x0, 0x4}, [@CTA_SEQ_ADJ_REPLY={0xc, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x5}]}, @CTA_SEQ_ADJ_ORIG={0xc, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x9}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x4000004) r5 = dup(r4) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r2, 0x0, 0xe80, 0x0, &(0x7f0000000240)="ffffffff75664a0a90f73e9eb3cf", 0x0, 0x60ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) fcntl$getownex(r6, 0x10, 0x0) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000680)=ANY=[@ANYBLOB="98030000", @ANYRES16=r7, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r9, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff080211000001"], 0x398}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x3a0ffffffff) 1.956417136s ago: executing program 0 (id=6381): r0 = socket$rds(0x15, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) listen(r1, 0xffff8000) r2 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000002}, 0x10) getsockopt$inet_int(r2, 0x10d, 0xeb, &(0x7f00000002c0), &(0x7f0000000080)=0x3) sendmsg$rds(r0, &(0x7f0000002180)={&(0x7f0000000100)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000001fc0)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f0000000280)=[{&(0x7f00000006c0)=""/4096, 0x1000}, {0x0}, {&(0x7f0000000180)=""/205, 0xcd}], 0x3}}, @rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f0000001ec0)=[{&(0x7f0000001a00)=""/161, 0xa1}], 0x1, 0x76}}], 0x90}, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r3, 0x11, 0x0, &(0x7f0000000000)=0x200, 0x4) 1.745757611s ago: executing program 0 (id=6382): r0 = socket$nl_route(0x10, 0x3, 0x0) timer_create(0x0, 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100)) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, 0x0, 0x0) r3 = dup3(r2, r1, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000300)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f0000000740)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f00000001c0)={@flat=@weak_handle, @flat=@weak_binder, @flat=@weak_handle}, &(0x7f0000000240)={0x0, 0x18, 0x84}}}], 0x0, 0x0, 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="3400000011001304", @ANYRES32=0x0, @ANYBLOB="000000000000000014"], 0x34}}, 0x0) 1.252783351s ago: executing program 2 (id=6383): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="1500000065ffff001000000800395032303030"], 0x15) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="58000000000000009fed2788c5532994414b47034801d524faf4166382", @ANYRES32], 0x58) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) 1.165873396s ago: executing program 1 (id=6384): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0xfffd) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000540)=0x6, 0x4) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x20000023896) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @thr={0x0, &(0x7f00000003c0)}}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae09, &(0x7f0000000040)=ANY=[]) 880.580707ms ago: executing program 4 (id=6385): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x20, 0x9, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x10}}, 0x48}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'gre0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x32, 0x4, 0x0, 0x2, 0xc8, 0x67, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0x18, 0x0, 0x0, 0x9, [0x401, 0x5, 0x0, 0x5, 0x0]}, @timestamp_prespec={0x44, 0x44, 0xc0, 0x3, 0x0, [{@private=0xa010102}, {@multicast1}, {@remote, 0x8000}, {@dev={0xac, 0x14, 0x14, 0x35}, 0x65c}, {@broadcast}, {@empty}, {@multicast1}, {@private=0xa010100, 0x7}]}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x8, [{@dev}, {@remote}, {@multicast2, 0x7}, {@private=0xa010100}, {@rand_addr=0x64010101}, {@broadcast, 0x52b1}, {@multicast2}]}, @noop, @noop, @noop, @end, @rr={0x7, 0x17, 0x0, [@dev, @remote, @multicast1, @private=0xa010102, @remote]}]}}}}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) 0s ago: executing program 2 (id=6386): syz_emit_ethernet(0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getpid() sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x6) futex(&(0x7f0000001300)=0x80000001, 0x800000000006, 0x0, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = signalfd(0xffffffffffffffff, &(0x7f00000002c0), 0x8) read$FUSE(r0, &(0x7f0000002900)={0x2020}, 0x2020) kernel console output (not intermixed with test programs): g VLAN 0 to HW filter on device team0 [ 2306.268705][T23414] bridge0: port 1(bridge_slave_0) entered blocking state [ 2306.275985][T23414] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2306.907003][T27281] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 2306.972830][T27281] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 2307.064631][T27281] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 2307.098644][T27281] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 2307.149372][ T5153] bridge0: port 2(bridge_slave_1) entered blocking state [ 2307.156753][ T5153] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2307.277332][T24761] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 2307.485738][T24761] usb 4-1: Using ep0 maxpacket: 32 [ 2307.533286][T24761] usb 4-1: config index 0 descriptor too short (expected 35577, got 27) [ 2307.559991][T24761] usb 4-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 2307.574501][T24761] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 2307.587456][T24761] usb 4-1: config 1 has no interface number 0 [ 2307.603880][T24761] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2307.637991][T24761] usb 4-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 2307.669814][T24761] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 2307.689415][T24761] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2307.743514][T24761] snd_usb_pod 4-1:1.1: Line 6 Pocket POD found [ 2307.796392][T27281] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2307.931198][T27281] 8021q: adding VLAN 0 to HW filter on device team0 [ 2308.014451][T27439] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2308.038927][ T5153] bridge0: port 1(bridge_slave_0) entered blocking state [ 2308.046017][T27439] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2308.046508][ T5153] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2308.166698][T11862] bridge0: port 2(bridge_slave_1) entered blocking state [ 2308.174186][T11862] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2308.571643][T24761] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now attached [ 2308.584867][T27259] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2308.900802][T27259] veth0_vlan: entered promiscuous mode [ 2308.954571][T27259] veth1_vlan: entered promiscuous mode [ 2308.966807][T20687] usb 4-1: USB disconnect, device number 59 [ 2308.994661][T20687] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now disconnected [ 2309.120080][T27259] veth0_macvtap: entered promiscuous mode [ 2309.163696][T27259] veth1_macvtap: entered promiscuous mode [ 2309.234569][T27281] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2309.250723][T27259] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2309.278422][T27259] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2309.311018][T27259] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2309.329384][T27259] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2309.352293][T27259] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2309.391185][T27259] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2309.412026][T27259] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2309.445559][T27259] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2309.470314][T27259] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2309.491704][T27259] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2309.561437][T27259] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2309.605681][T27259] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2309.624683][T27259] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2309.648482][T27259] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2309.881294][T27281] veth0_vlan: entered promiscuous mode [ 2309.954679][T27281] veth1_vlan: entered promiscuous mode [ 2309.976031][T11862] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 2310.151776][ T2881] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2310.183182][ T2881] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2310.185582][T11862] usb 5-1: Using ep0 maxpacket: 8 [ 2310.236268][T11862] usb 5-1: config 0 has an invalid interface number: 193 but max is 0 [ 2310.244562][T11862] usb 5-1: config 0 contains an unexpected descriptor of type 0x1, skipping [ 2310.257435][T27281] veth0_macvtap: entered promiscuous mode [ 2310.305361][T11862] usb 5-1: config 0 has an invalid descriptor of length 231, skipping remainder of the config [ 2310.338853][T11862] usb 5-1: config 0 has no interface number 0 [ 2310.357523][T27281] veth1_macvtap: entered promiscuous mode [ 2310.365631][T11862] usb 5-1: config 0 interface 193 altsetting 0 endpoint 0x4 has invalid maxpacket 1024, setting to 64 [ 2310.387735][ T5197] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2310.412197][T11862] usb 5-1: config 0 interface 193 altsetting 0 endpoint 0x5 has invalid maxpacket 1032, setting to 64 [ 2310.423321][ T5197] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2310.443621][T11862] usb 5-1: config 0 interface 193 altsetting 0 has a duplicate endpoint with address 0x4, skipping [ 2310.501275][T11862] usb 5-1: config 0 interface 193 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 13 [ 2310.510028][T27281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2310.535235][T11862] usb 5-1: New USB device found, idVendor=03eb, idProduct=2002, bcdDevice= 1.00 [ 2310.559898][T27281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2310.565311][T11862] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2310.582251][T27281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2310.597884][T27281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2310.622178][T11862] usb 5-1: config 0 descriptor?? [ 2310.625425][T27281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2310.641992][T11862] usb-storage 5-1:0.193: USB Mass Storage device detected [ 2310.647171][T27281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2310.682701][T11862] usb-storage 5-1:0.193: Quirks match for vid 03eb pid 2002: 20 [ 2310.688429][T27281] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2310.769712][T27281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2310.794538][T27281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2310.811105][T27281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2310.824619][T27281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2310.840360][T27281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2310.885236][T27281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2310.918279][T27281] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2311.081095][T27281] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2311.132841][T27281] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2311.169161][T27281] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2311.217212][T27281] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2312.168167][T17092] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2312.193195][T17092] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2312.284477][T17092] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2312.294375][T17092] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2312.965008][ T29] audit: type=1326 audit(1719941432.343:785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27496 comm="syz.2.5689" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f76ddb75f19 code=0x0 [ 2313.036296][ T9175] usb 5-1: USB disconnect, device number 49 [ 2313.724429][T27509] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5691'. [ 2313.733515][T27509] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2313.741077][T27509] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2313.749711][T27509] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2313.759136][T27509] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2315.410627][T27520] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 2315.967673][ T29] audit: type=1326 audit(1719941435.343:786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27527 comm="syz.2.5696" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f76ddb75f19 code=0x0 [ 2317.210133][ T29] audit: type=1326 audit(1719941436.533:787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27551 comm="syz.1.5704" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f556bd75f19 code=0x0 [ 2317.464722][ T29] audit: type=1326 audit(1719941436.843:788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27556 comm="syz.2.5705" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f76ddb75f19 code=0x0 [ 2317.553681][ T29] audit: type=1326 audit(1719941436.863:789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27559 comm="syz.4.5706" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe34f775f19 code=0x0 [ 2323.430875][ T29] audit: type=1326 audit(1719941442.363:790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27605 comm="syz.2.5719" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f76ddb75f19 code=0x0 [ 2323.453821][ C1] vkms_vblank_simulate: vblank timer overrun [ 2323.753164][ T29] audit: type=1326 audit(1719941443.133:791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27611 comm="syz.3.5713" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f967d975f19 code=0x0 [ 2323.853488][ T29] audit: type=1400 audit(1719941443.223:792): avc: denied { sqpoll } for pid=27626 comm="syz.2.5724" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 2324.716590][T27634] overlayfs: missing 'lowerdir' [ 2326.375165][T27652] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5730'. [ 2327.403609][ T29] audit: type=1326 audit(1719941446.773:793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27654 comm="syz.4.5732" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe34f775f19 code=0x0 [ 2327.984908][T27670] 9pnet_fd: Insufficient options for proto=fd [ 2330.024817][T27694] netlink: 724 bytes leftover after parsing attributes in process `syz.0.5739'. [ 2332.403199][T27710] 9pnet_fd: Insufficient options for proto=fd [ 2334.786259][ T29] audit: type=1326 audit(1719941454.153:794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27728 comm="syz.4.5752" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe34f775f19 code=0x0 [ 2335.852558][T27750] netlink: 724 bytes leftover after parsing attributes in process `syz.3.5756'. [ 2337.095567][T27758] 9pnet_fd: Insufficient options for proto=fd [ 2339.036713][T20687] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 2339.245644][T20687] usb 3-1: Using ep0 maxpacket: 32 [ 2339.271715][T20687] usb 3-1: config index 0 descriptor too short (expected 35577, got 27) [ 2339.287658][T20687] usb 3-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 2339.306923][T20687] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 2339.331483][T20687] usb 3-1: config 1 has no interface number 0 [ 2339.351584][T20687] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2339.382398][T20687] usb 3-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 2339.462211][T20687] usb 3-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 2339.547592][T20687] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2339.587369][T20687] snd_usb_pod 3-1:1.1: Line 6 Pocket POD found [ 2339.675516][T23414] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 2339.883160][T27769] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2339.902028][T23414] usb 5-1: config 0 has no interfaces? [ 2339.914694][T23414] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2db4, bcdDevice= 0.00 [ 2339.939614][T27769] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2339.951727][T23414] usb 5-1: New USB device strings: Mfr=0, Product=9, SerialNumber=0 [ 2339.973087][T23414] usb 5-1: Product: syz [ 2340.005190][T23414] usb 5-1: config 0 descriptor?? [ 2340.435221][T23414] usb 5-1: USB disconnect, device number 50 [ 2340.451271][T27785] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2340.491335][T27785] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2340.595947][T20687] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now attached [ 2341.316126][T24761] usb 3-1: USB disconnect, device number 44 [ 2341.340110][T24761] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now disconnected [ 2341.796113][T27799] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 2341.810005][T27799] qnx6: wrong signature (magic) in superblock #1. [ 2341.816677][T27799] qnx6: unable to read the first superblock [ 2341.951883][T27804] netlink: 1752 bytes leftover after parsing attributes in process `syz.4.5773'. [ 2343.706658][T27813] netlink: 724 bytes leftover after parsing attributes in process `syz.4.5776'. [ 2344.358405][ T29] audit: type=1326 audit(1719941463.733:795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27822 comm="syz.1.5779" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f556bd75f19 code=0x0 [ 2344.890287][T27840] input: syz0 as /devices/virtual/input/input50 [ 2346.267049][T27848] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.5786'. [ 2346.302678][T27849] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 2346.318633][T27849] qnx6: wrong signature (magic) in superblock #1. [ 2346.325115][T27849] qnx6: unable to read the first superblock [ 2346.756564][T23414] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 2347.125404][T23414] usb 1-1: Using ep0 maxpacket: 32 [ 2347.151568][T23414] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 129, changing to 11 [ 2347.185604][T23414] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 2347.203816][T23414] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 2347.225135][T23414] usb 1-1: string descriptor 0 read error: -22 [ 2347.232150][T23414] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2347.252576][T23414] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2347.265802][T23750] Bluetooth: hci5: command 0x0406 tx timeout [ 2347.687160][T27862] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5791'. [ 2347.701770][T27862] bridge0: port 2(bridge_slave_1) entered disabled state [ 2347.723777][T27862] bridge0: port 2(bridge_slave_1) entered blocking state [ 2347.731331][T27862] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2347.770772][T23414] cdc_ncm 1-1:1.0: bind() failure [ 2347.798221][T23414] cdc_ncm 1-1:1.1: probe with driver cdc_ncm failed with error -71 [ 2347.817520][T23414] cdc_mbim 1-1:1.1: probe with driver cdc_mbim failed with error -71 [ 2347.877223][T23414] usbtest 1-1:1.1: probe with driver usbtest failed with error -71 [ 2347.941087][T23414] usb 1-1: USB disconnect, device number 60 [ 2348.785577][ T5153] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 2348.988178][ T5153] usb 1-1: config index 0 descriptor too short (expected 106, got 36) [ 2349.016149][ T5153] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2349.054830][ T5153] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2349.115550][ T5153] usb 1-1: New USB device found, idVendor=1b1c, idProduct=1b3e, bcdDevice= 0.00 [ 2349.124764][ T5153] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2349.214873][ T5153] usb 1-1: config 0 descriptor?? [ 2350.372622][T27890] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=27890 comm=syz.4.5798 [ 2350.396238][T27890] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5798'. [ 2350.440525][ T1250] ieee802154 phy0 wpan0: encryption failed: -22 [ 2350.460868][ T1250] ieee802154 phy1 wpan1: encryption failed: -22 [ 2351.184230][ T5153] corsair 0003:1B1C:1B3E.0026: unknown main item tag 0x0 [ 2351.192162][ T5153] corsair 0003:1B1C:1B3E.0026: unknown main item tag 0x0 [ 2351.199674][ T5153] corsair 0003:1B1C:1B3E.0026: unknown main item tag 0x0 [ 2351.208203][ T5153] corsair 0003:1B1C:1B3E.0026: unknown main item tag 0x0 [ 2351.215813][ T5153] corsair 0003:1B1C:1B3E.0026: unknown main item tag 0x0 [ 2351.224364][ T5153] corsair 0003:1B1C:1B3E.0026: failed to start in urb: -90 [ 2351.244736][ T5153] corsair 0003:1B1C:1B3E.0026: hidraw0: USB HID v0.00 Device [HID 1b1c:1b3e] on usb-dummy_hcd.0-1/input0 [ 2351.300555][T27131] usb 1-1: USB disconnect, device number 61 [ 2351.534332][T27899] netlink: 724 bytes leftover after parsing attributes in process `syz.3.5799'. [ 2351.642647][T27903] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 2351.654519][T27903] qnx6: wrong signature (magic) in superblock #1. [ 2351.661426][T27903] qnx6: unable to read the first superblock [ 2352.215385][ T29] audit: type=1326 audit(1719941471.563:796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27904 comm="syz.1.5802" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f556bd75f19 code=0x0 [ 2352.469795][T23546] Bluetooth: hci0: command 0x0406 tx timeout [ 2352.700350][T20687] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 2352.945472][T20687] usb 5-1: Using ep0 maxpacket: 32 [ 2352.962044][T20687] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 129, changing to 11 [ 2353.014396][T20687] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 2353.065345][T20687] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 2353.106607][T20687] usb 5-1: string descriptor 0 read error: -22 [ 2353.131530][T20687] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2353.164083][T20687] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2353.773178][T20687] cdc_ncm 5-1:1.0: bind() failure [ 2354.108554][T20687] cdc_ncm 5-1:1.1: probe with driver cdc_ncm failed with error -71 [ 2354.125486][T20687] cdc_mbim 5-1:1.1: probe with driver cdc_mbim failed with error -71 [ 2354.147036][T20687] usbtest 5-1:1.1: probe with driver usbtest failed with error -71 [ 2354.189795][T20687] usb 5-1: USB disconnect, device number 51 [ 2354.215060][T27940] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=27940 comm=syz.3.5810 [ 2354.303199][T27940] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5810'. [ 2355.437542][T27956] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 2355.448444][T27956] qnx6: wrong signature (magic) in superblock #1. [ 2355.454915][T27956] qnx6: unable to read the first superblock [ 2357.723610][T27995] Mount JFS Failure: -22 [ 2358.670395][T28008] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 2358.681363][T28008] qnx6: wrong signature (magic) in superblock #1. [ 2358.688097][T28008] qnx6: unable to read the first superblock [ 2359.273901][T28019] Mount JFS Failure: -22 [ 2359.863192][ T29] audit: type=1326 audit(1719941479.233:797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28027 comm="syz.3.5840" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f967d975f19 code=0x0 [ 2361.239283][T23546] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 2361.255880][T23546] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 2361.267003][T23546] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 2361.290881][T23546] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 2361.332223][T23546] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 2361.341287][T23546] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 2361.918822][T27974] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2362.127675][T28056] Mount JFS Failure: -22 [ 2362.208292][T27974] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2362.587507][T28066] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 2362.600046][T28066] qnx6: wrong signature (magic) in superblock #1. [ 2362.606631][T28066] qnx6: unable to read the first superblock [ 2362.672755][T27974] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2362.723933][ T29] audit: type=1326 audit(1719941482.083:798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28057 comm="syz.3.5848" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f967d975f19 code=0x0 [ 2363.284939][T27974] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2363.545630][T23546] Bluetooth: hci2: command tx timeout [ 2363.664769][T28075] input: syz0 as /devices/virtual/input/input52 [ 2364.779496][T28049] chnl_net:caif_netlink_parms(): no params data found [ 2364.902114][T28081] netlink: 'syz.4.5853': attribute type 1 has an invalid length. [ 2364.929232][T28081] netlink: 9388 bytes leftover after parsing attributes in process `syz.4.5853'. [ 2365.355499][T28049] bridge0: port 1(bridge_slave_0) entered blocking state [ 2365.400608][T28049] bridge0: port 1(bridge_slave_0) entered disabled state [ 2365.432940][T28049] bridge_slave_0: entered allmulticast mode [ 2365.473782][T28049] bridge_slave_0: entered promiscuous mode [ 2365.570171][T28049] bridge0: port 2(bridge_slave_1) entered blocking state [ 2365.575475][T23546] Bluetooth: hci2: command tx timeout [ 2365.609499][T28049] bridge0: port 2(bridge_slave_1) entered disabled state [ 2365.650521][T28049] bridge_slave_1: entered allmulticast mode [ 2365.707860][T28049] bridge_slave_1: entered promiscuous mode [ 2365.970129][T28049] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2366.062836][T27974] bridge_slave_1: left allmulticast mode [ 2366.081680][T27974] bridge_slave_1: left promiscuous mode [ 2366.105670][T27974] bridge0: port 2(bridge_slave_1) entered disabled state [ 2366.393069][T27974] bridge_slave_0: left allmulticast mode [ 2366.409327][T27974] bridge_slave_0: left promiscuous mode [ 2366.415300][T27974] bridge0: port 1(bridge_slave_0) entered disabled state [ 2367.656092][T23546] Bluetooth: hci2: command tx timeout [ 2367.893820][T28109] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 2367.906204][T28109] qnx6: wrong signature (magic) in superblock #1. [ 2367.912671][T28109] qnx6: unable to read the first superblock [ 2368.324363][T28116] netlink: 'syz.4.5864': attribute type 1 has an invalid length. [ 2368.345137][T28116] netlink: 9388 bytes leftover after parsing attributes in process `syz.4.5864'. [ 2368.985687][T27974] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2369.000620][T27974] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2369.014969][T27974] bond0 (unregistering): Released all slaves [ 2369.044633][T28049] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2369.317876][T28049] team0: Port device team_slave_0 added [ 2369.387644][T28049] team0: Port device team_slave_1 added [ 2369.775637][T23546] Bluetooth: hci2: command tx timeout [ 2370.285969][T28049] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2370.315245][T28049] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2370.920995][T28049] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2371.228780][T28049] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2371.238013][T28049] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2371.341996][T28049] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2371.676238][T28153] netlink: 'syz.1.5874': attribute type 1 has an invalid length. [ 2371.757718][T28153] netlink: 9388 bytes leftover after parsing attributes in process `syz.1.5874'. [ 2371.948575][T28159] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 2371.959405][T28159] qnx6: wrong signature (magic) in superblock #1. [ 2371.965939][T28159] qnx6: unable to read the first superblock [ 2372.083491][T28049] hsr_slave_0: entered promiscuous mode [ 2372.108724][T28049] hsr_slave_1: entered promiscuous mode [ 2372.131495][T28049] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2372.155388][T28049] Cannot create hsr debugfs directory [ 2372.279449][T27974] hsr_slave_0: left promiscuous mode [ 2372.317062][T27974] hsr_slave_1: left promiscuous mode [ 2372.342365][T27974] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2372.362860][T27974] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2372.388714][T27974] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2372.415573][T27974] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2372.657716][T27974] veth1_macvtap: left promiscuous mode [ 2372.685710][T27974] veth0_macvtap: left promiscuous mode [ 2372.701469][T27974] veth1_vlan: left promiscuous mode [ 2372.718998][T27974] veth0_vlan: left promiscuous mode [ 2374.434026][ T29] audit: type=1326 audit(1719941493.813:799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28183 comm="syz.0.5884" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb8e3d75f19 code=0x0 [ 2374.685702][T28196] netlink: 'syz.1.5886': attribute type 1 has an invalid length. [ 2374.698773][T28196] netlink: 9388 bytes leftover after parsing attributes in process `syz.1.5886'. [ 2375.806628][T27974] team0 (unregistering): Port device team_slave_1 removed [ 2375.902961][T27974] team0 (unregistering): Port device team_slave_0 removed [ 2378.173544][T28223] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 2378.209718][T28223] qnx6: wrong signature (magic) in superblock #1. [ 2378.232829][T28223] qnx6: unable to read the first superblock [ 2378.279620][T28227] netlink: 'syz.1.5896': attribute type 1 has an invalid length. [ 2378.302154][T28227] netlink: 9352 bytes leftover after parsing attributes in process `syz.1.5896'. [ 2378.337271][T28227] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5896'. [ 2378.459509][T28049] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 2378.519098][T28049] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 2378.551555][T28049] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 2378.594311][T28049] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 2379.056090][T28049] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2379.144386][T28049] 8021q: adding VLAN 0 to HW filter on device team0 [ 2379.193691][ T5135] bridge0: port 1(bridge_slave_0) entered blocking state [ 2379.201103][ T5135] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2379.254857][ T5135] bridge0: port 2(bridge_slave_1) entered blocking state [ 2379.262191][ T5135] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2379.335209][T28249] kvm: MWAIT instruction emulated as NOP! [ 2379.409705][T28049] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2379.971586][T28049] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2380.021212][T28264] netlink: 'syz.1.5906': attribute type 1 has an invalid length. [ 2380.041272][T28264] netlink: 9352 bytes leftover after parsing attributes in process `syz.1.5906'. [ 2380.064304][T28264] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5906'. [ 2380.145110][T28049] veth0_vlan: entered promiscuous mode [ 2380.178989][T28049] veth1_vlan: entered promiscuous mode [ 2380.313420][T28049] veth0_macvtap: entered promiscuous mode [ 2380.347330][T28049] veth1_macvtap: entered promiscuous mode [ 2380.425684][T28049] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2380.436862][ T29] audit: type=1326 audit(1719941499.813:800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28267 comm="syz.1.5907" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f556bd75f19 code=0x0 [ 2380.461236][T28049] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2380.473785][T28049] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2380.506802][T28049] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2380.554865][T28049] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2380.626404][T28049] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2380.673172][T28049] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2380.694713][T28049] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2380.731553][T28049] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2380.776983][T28049] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2380.818905][T28049] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2380.880521][T28049] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2380.900156][T28049] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2380.947700][T28049] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2380.959162][ T29] audit: type=1400 audit(1719941500.333:801): avc: denied { map } for pid=28274 comm="syz.3.5908" path="socket:[130885]" dev="sockfs" ino=130885 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 2381.020508][ T29] audit: type=1400 audit(1719941500.373:802): avc: denied { read } for pid=28274 comm="syz.3.5908" path="socket:[130885]" dev="sockfs" ino=130885 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 2381.312179][T11537] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2381.350112][T11537] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2381.501387][T11537] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2381.523300][T11537] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2384.003339][T28304] netlink: 'syz.0.5916': attribute type 1 has an invalid length. [ 2384.022096][T28304] netlink: 9352 bytes leftover after parsing attributes in process `syz.0.5916'. [ 2384.096805][T28304] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5916'. [ 2384.267874][T28305] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 2384.292891][T28305] qnx6: wrong signature (magic) in superblock #1. [ 2384.314433][T28305] qnx6: unable to read the first superblock [ 2384.538248][ T29] audit: type=1400 audit(1719941503.913:803): avc: denied { connect } for pid=28310 comm="syz.0.5918" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 2385.785555][ T9175] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 2385.955163][ T29] audit: type=1326 audit(1719941505.333:804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28340 comm="syz.0.5925" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb8e3d75f19 code=0x0 [ 2386.005714][ T9175] usb 3-1: Using ep0 maxpacket: 32 [ 2386.014771][ T9175] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 129, changing to 11 [ 2386.031203][ T9175] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 2386.041822][ T9175] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 2386.076101][ T9175] usb 3-1: string descriptor 0 read error: -22 [ 2386.083742][ T9175] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2386.093853][ T9175] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2386.681023][ T9175] cdc_ncm 3-1:1.0: bind() failure [ 2386.702306][ T9175] cdc_ncm 3-1:1.1: probe with driver cdc_ncm failed with error -71 [ 2386.726283][ T9175] cdc_mbim 3-1:1.1: probe with driver cdc_mbim failed with error -71 [ 2386.742649][ T9175] usbtest 3-1:1.1: probe with driver usbtest failed with error -71 [ 2386.758085][ T9175] usb 3-1: USB disconnect, device number 45 [ 2386.952415][T28354] netlink: 'syz.0.5928': attribute type 1 has an invalid length. [ 2386.978688][T28354] netlink: 9352 bytes leftover after parsing attributes in process `syz.0.5928'. [ 2387.005376][T28354] netlink: 'syz.0.5928': attribute type 1 has an invalid length. [ 2387.034148][T28354] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5928'. [ 2388.409664][T28377] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 2388.473091][T28377] qnx6: wrong signature (magic) in superblock #1. [ 2388.489167][T28377] qnx6: unable to read the first superblock [ 2389.521903][T23750] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 2389.537201][T23750] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 2389.559544][T23750] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 2389.579187][T23750] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 2389.590198][T23750] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 2389.599133][T23750] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 2389.645589][T28396] netlink: 'syz.3.5939': attribute type 1 has an invalid length. [ 2389.660218][ T29] audit: type=1326 audit(1719941509.023:805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28389 comm="syz.2.5938" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbb0f775f19 code=0x0 [ 2389.707975][T28396] netlink: 9352 bytes leftover after parsing attributes in process `syz.3.5939'. [ 2389.770555][T28396] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5939'. [ 2389.971735][T27974] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2391.169786][T27974] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2391.330591][T27974] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2391.545592][T24761] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 2391.591264][T27974] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2391.655668][T23750] Bluetooth: hci4: command tx timeout [ 2391.745410][T24761] usb 3-1: Using ep0 maxpacket: 32 [ 2391.781228][T24761] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 129, changing to 11 [ 2391.808161][T24761] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 2391.818370][T24761] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 2391.829786][T24761] usb 3-1: string descriptor 0 read error: -22 [ 2391.838591][T24761] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2391.848246][T24761] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2393.485717][T27974] bridge_slave_1: left allmulticast mode [ 2393.491560][T27974] bridge_slave_1: left promiscuous mode [ 2393.568784][T27974] bridge0: port 2(bridge_slave_1) entered disabled state [ 2393.707710][T27974] bridge_slave_0: left allmulticast mode [ 2393.719772][T27974] bridge_slave_0: left promiscuous mode [ 2393.735556][T23750] Bluetooth: hci4: command tx timeout [ 2393.821479][T27974] bridge0: port 1(bridge_slave_0) entered disabled state [ 2394.300960][T28438] netlink: 'syz.0.5950': attribute type 1 has an invalid length. [ 2394.343710][T28438] netlink: 9352 bytes leftover after parsing attributes in process `syz.0.5950'. [ 2394.357616][T28438] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5950'. [ 2394.651107][ T29] audit: type=1326 audit(1719941514.033:806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28441 comm="syz.1.5952" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f556bd75f19 code=0x0 [ 2395.259722][T27974] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2395.277876][T27974] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2395.310794][T27974] bond0 (unregistering): Released all slaves [ 2395.395653][T24761] cdc_ncm 3-1:1.0: bind() failure [ 2395.418515][T28390] chnl_net:caif_netlink_parms(): no params data found [ 2395.425446][T24761] cdc_ncm 3-1:1.1: probe with driver cdc_ncm failed with error -71 [ 2395.436033][T24761] cdc_mbim 3-1:1.1: probe with driver cdc_mbim failed with error -71 [ 2395.455935][T24761] usbtest 3-1:1.1: probe with driver usbtest failed with error -71 [ 2395.499950][T24761] usb 3-1: USB disconnect, device number 46 [ 2395.799692][T28453] fuse: Unknown parameter 'use00000000000000000000' [ 2395.828142][T23750] Bluetooth: hci4: command tx timeout [ 2396.014306][ T29] audit: type=1326 audit(1719941515.393:807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28448 comm="syz.2.5953" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fbb0f775f19 code=0x0 [ 2396.532629][T28390] bridge0: port 1(bridge_slave_0) entered blocking state [ 2396.561040][T28390] bridge0: port 1(bridge_slave_0) entered disabled state [ 2396.576539][T28390] bridge_slave_0: entered allmulticast mode [ 2396.598937][T28390] bridge_slave_0: entered promiscuous mode [ 2396.641277][T27974] hsr_slave_0: left promiscuous mode [ 2396.663997][T27974] hsr_slave_1: left promiscuous mode [ 2396.682327][T27974] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2396.692506][T27974] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2396.742921][T27974] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2396.763076][T27974] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2396.867579][T27974] veth1_macvtap: left promiscuous mode [ 2396.873663][T27974] veth0_macvtap: left promiscuous mode [ 2396.879905][T27974] veth1_vlan: left promiscuous mode [ 2396.886112][T27974] veth0_vlan: left promiscuous mode [ 2397.223218][T28480] netlink: 'syz.0.5960': attribute type 1 has an invalid length. [ 2397.257832][T28480] netlink: 9352 bytes leftover after parsing attributes in process `syz.0.5960'. [ 2397.290917][T28480] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5960'. [ 2397.904581][ T29] audit: type=1326 audit(1719941517.283:808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28486 comm="syz.0.5963" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb8e3d75f19 code=0x0 [ 2397.941446][T23750] Bluetooth: hci4: command tx timeout [ 2398.882027][T28495] fuse: Unknown parameter 'use00000000000000000000' [ 2399.787048][T27974] team0 (unregistering): Port device team_slave_1 removed [ 2399.969103][T27974] team0 (unregistering): Port device team_slave_0 removed [ 2400.012666][T28520] netlink: 'syz.0.5971': attribute type 1 has an invalid length. [ 2400.045679][T28520] netlink: 9352 bytes leftover after parsing attributes in process `syz.0.5971'. [ 2400.069971][T28520] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5971'. [ 2401.915470][ T29] audit: type=1326 audit(1719941521.273:809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28529 comm="syz.3.5975" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f967d975f19 code=0x0 [ 2402.215505][T23546] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 2402.235569][T23546] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 2402.249886][T23546] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 2402.276720][T23546] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 2402.299250][T23546] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 2402.307215][T23546] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 2402.540401][T28390] bridge0: port 2(bridge_slave_1) entered blocking state [ 2402.547827][T28390] bridge0: port 2(bridge_slave_1) entered disabled state [ 2402.555121][T28390] bridge_slave_1: entered allmulticast mode [ 2402.576371][T28390] bridge_slave_1: entered promiscuous mode [ 2402.693898][T28390] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2402.764740][T28390] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2403.937989][T28390] team0: Port device team_slave_0 added [ 2404.004904][T28390] team0: Port device team_slave_1 added [ 2404.205365][T28553] netlink: 'syz.1.5981': attribute type 1 has an invalid length. [ 2404.241634][T28553] netlink: 9352 bytes leftover after parsing attributes in process `syz.1.5981'. [ 2404.257940][T28553] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5981'. [ 2404.289838][T28390] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2404.308193][T28390] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2404.364953][T28390] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2404.386745][T23546] Bluetooth: hci0: command tx timeout [ 2404.403380][T28390] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2404.425294][T28390] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2404.465343][T28390] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2404.708619][T28390] hsr_slave_0: entered promiscuous mode [ 2404.774291][T28390] hsr_slave_1: entered promiscuous mode [ 2404.807101][T28390] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2404.835007][T28390] Cannot create hsr debugfs directory [ 2404.840718][ T5153] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 2405.055328][ T5153] usb 2-1: Using ep0 maxpacket: 32 [ 2405.077157][ T5153] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 129, changing to 11 [ 2405.105337][ T5153] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 2405.135454][ T5153] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 2405.166353][ T5153] usb 2-1: string descriptor 0 read error: -22 [ 2405.172827][ T5153] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2405.213299][ T5153] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2405.566413][T27974] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2405.903111][T27974] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2405.958966][ T5153] cdc_ncm 2-1:1.0: bind() failure [ 2405.988631][ T5153] cdc_ncm 2-1:1.1: probe with driver cdc_ncm failed with error -71 [ 2406.028572][ T5153] cdc_mbim 2-1:1.1: probe with driver cdc_mbim failed with error -71 [ 2406.048096][ T5153] usbtest 2-1:1.1: probe with driver usbtest failed with error -71 [ 2406.095861][ T5153] usb 2-1: USB disconnect, device number 56 [ 2406.115515][ T29] audit: type=1326 audit(1719941525.493:810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28569 comm="syz.3.5986" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f967d975f19 code=0x0 [ 2406.184485][T27974] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2406.220692][T28532] chnl_net:caif_netlink_parms(): no params data found [ 2406.294447][T27974] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2406.457989][T23546] Bluetooth: hci0: command tx timeout [ 2406.736366][T28532] bridge0: port 1(bridge_slave_0) entered blocking state [ 2406.743765][T28532] bridge0: port 1(bridge_slave_0) entered disabled state [ 2406.753942][T28532] bridge_slave_0: entered allmulticast mode [ 2406.767722][T28532] bridge_slave_0: entered promiscuous mode [ 2406.785191][T28532] bridge0: port 2(bridge_slave_1) entered blocking state [ 2406.792585][T28532] bridge0: port 2(bridge_slave_1) entered disabled state [ 2406.799964][T28532] bridge_slave_1: entered allmulticast mode [ 2406.809337][T28532] bridge_slave_1: entered promiscuous mode [ 2407.083514][T28532] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2407.138334][T28532] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2407.453727][T27974] bridge_slave_1: left allmulticast mode [ 2407.459556][T27974] bridge_slave_1: left promiscuous mode [ 2407.480691][T27974] bridge0: port 2(bridge_slave_1) entered disabled state [ 2407.521334][T27974] bridge_slave_0: left allmulticast mode [ 2407.541573][T27974] bridge_slave_0: left promiscuous mode [ 2407.557431][T27974] bridge0: port 1(bridge_slave_0) entered disabled state [ 2407.712976][T28536] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 2407.734373][T28536] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 2407.743267][T28536] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 2407.755116][T28536] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 2407.764536][T28536] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 2407.776174][T28536] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 2408.547869][T23750] Bluetooth: hci0: command tx timeout [ 2408.699858][T23750] Bluetooth: hci1: command 0x0406 tx timeout [ 2408.973995][T28603] binder: 28599:28603 ioctl 4018620d 0 returned -22 [ 2409.382284][T27974] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2409.425659][T27974] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2409.455814][T27974] bond0 (unregistering): Released all slaves [ 2409.539201][T28532] team0: Port device team_slave_0 added [ 2409.569894][T28532] team0: Port device team_slave_1 added [ 2409.723375][T28603] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5994'. [ 2409.845488][T23546] Bluetooth: hci5: command tx timeout [ 2410.051738][T28532] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2410.063867][T28532] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2410.100398][T28532] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2410.176069][T28532] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2410.183070][T28532] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2410.214077][T28532] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2410.262256][T28390] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 2410.354401][T28390] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 2410.445930][T28390] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 2410.514360][T27974] hsr_slave_0: left promiscuous mode [ 2410.533470][T27974] hsr_slave_1: left promiscuous mode [ 2410.583293][T27974] veth1_macvtap: left promiscuous mode [ 2410.589033][T27974] veth0_macvtap: left promiscuous mode [ 2410.594928][T27974] veth1_vlan: left promiscuous mode [ 2410.608688][T27974] veth0_vlan: left promiscuous mode [ 2410.615531][T23546] Bluetooth: hci0: command tx timeout [ 2410.809022][T28622] fuse: Bad value for 'fd' [ 2411.744375][ T1250] ieee802154 phy0 wpan0: encryption failed: -22 [ 2411.751942][ T1250] ieee802154 phy1 wpan1: encryption failed: -22 [ 2411.873305][T27974] team0 (unregistering): Port device team_slave_1 removed [ 2411.895389][T23546] Bluetooth: hci5: command tx timeout [ 2411.992552][T27974] team0 (unregistering): Port device team_slave_0 removed [ 2412.876977][ T9175] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 2412.901294][T28390] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 2412.933746][T28631] netlink: 'syz.2.6003': attribute type 4 has an invalid length. [ 2412.991577][T28532] hsr_slave_0: entered promiscuous mode [ 2413.014992][T28532] hsr_slave_1: entered promiscuous mode [ 2413.033359][T28532] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2413.043634][T28532] Cannot create hsr debugfs directory [ 2413.089449][ T9175] usb 4-1: config index 0 descriptor too short (expected 106, got 36) [ 2413.103537][ T9175] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2413.134181][ T9175] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2413.162906][ T9175] usb 4-1: New USB device found, idVendor=1b1c, idProduct=1b3e, bcdDevice= 0.00 [ 2413.177843][ T9175] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2413.201025][ T9175] usb 4-1: config 0 descriptor?? [ 2413.424823][ T29] audit: type=1326 audit(1719941532.803:811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28641 comm="syz.2.6007" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fbb0f775f19 code=0x0 [ 2413.694420][ T9175] corsair 0003:1B1C:1B3E.0027: unknown main item tag 0x0 [ 2413.711969][ T9175] corsair 0003:1B1C:1B3E.0027: unknown main item tag 0x0 [ 2413.757315][ T9175] corsair 0003:1B1C:1B3E.0027: unknown main item tag 0x0 [ 2413.792318][ T9175] corsair 0003:1B1C:1B3E.0027: unknown main item tag 0x0 [ 2413.819412][ T9175] corsair 0003:1B1C:1B3E.0027: unknown main item tag 0x0 [ 2413.844793][ T9175] corsair 0003:1B1C:1B3E.0027: failed to start in urb: -90 [ 2413.956139][ T9175] corsair 0003:1B1C:1B3E.0027: hidraw0: USB HID v0.00 Device [HID 1b1c:1b3e] on usb-dummy_hcd.3-1/input0 [ 2413.975662][T23546] Bluetooth: hci5: command tx timeout [ 2413.993940][ T9175] usb 4-1: USB disconnect, device number 60 [ 2414.201357][T28590] chnl_net:caif_netlink_parms(): no params data found [ 2414.630359][T27974] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2414.913287][T27974] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2415.305302][T27974] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2415.537315][T28663] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd [ 2415.863118][T28590] bridge0: port 1(bridge_slave_0) entered blocking state [ 2415.901870][T28590] bridge0: port 1(bridge_slave_0) entered disabled state [ 2415.915769][T28590] bridge_slave_0: entered allmulticast mode [ 2415.930277][T28590] bridge_slave_0: entered promiscuous mode [ 2415.953031][T28390] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2416.001666][T28390] 8021q: adding VLAN 0 to HW filter on device team0 [ 2416.065702][T23546] Bluetooth: hci5: command tx timeout [ 2416.108630][T27974] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2416.144905][T28590] bridge0: port 2(bridge_slave_1) entered blocking state [ 2416.161714][T28590] bridge0: port 2(bridge_slave_1) entered disabled state [ 2416.170018][T28590] bridge_slave_1: entered allmulticast mode [ 2416.178692][T28590] bridge_slave_1: entered promiscuous mode [ 2416.198664][ T5153] bridge0: port 1(bridge_slave_0) entered blocking state [ 2416.205949][ T5153] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2416.437758][ T5135] bridge0: port 2(bridge_slave_1) entered blocking state [ 2416.445066][ T5135] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2416.494741][T28590] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2416.520982][T28590] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2416.770370][T28590] team0: Port device team_slave_0 added [ 2416.814112][T28590] team0: Port device team_slave_1 added [ 2416.885882][T28675] netlink: 'syz.2.6013': attribute type 4 has an invalid length. [ 2417.125435][T27974] bridge_slave_1: left allmulticast mode [ 2417.131396][T27974] bridge_slave_1: left promiscuous mode [ 2417.143558][T27974] bridge0: port 2(bridge_slave_1) entered disabled state [ 2417.213662][T27974] bridge_slave_0: left allmulticast mode [ 2417.219769][T27974] bridge_slave_0: left promiscuous mode [ 2417.233736][T27974] bridge0: port 1(bridge_slave_0) entered disabled state [ 2418.804741][T27974] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2418.853407][T27974] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2418.903453][T27974] bond0 (unregistering): Released all slaves [ 2419.202318][T28590] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2419.273000][T28590] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2419.492293][T28590] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2419.824192][T28590] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2419.851664][T28590] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2419.975683][T28590] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2421.141288][T27974] hsr_slave_0: left promiscuous mode [ 2421.164615][T27974] hsr_slave_1: left promiscuous mode [ 2421.185729][T27974] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2421.193216][T27974] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2421.199219][T28699] fuse: Unknown parameter '0x0000000000000003' [ 2421.212076][T27974] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2421.225633][T27974] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2421.298918][T27974] veth1_macvtap: left promiscuous mode [ 2421.304565][T27974] veth0_macvtap: left promiscuous mode [ 2421.314840][T27974] veth1_vlan: left promiscuous mode [ 2421.320540][T27974] veth0_vlan: left promiscuous mode [ 2422.978526][T27974] team0 (unregistering): Port device team_slave_1 removed [ 2423.130797][T27974] team0 (unregistering): Port device team_slave_0 removed [ 2424.719919][T28532] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 2424.831482][T28731] input: syz0 as /devices/virtual/input/input53 [ 2425.170061][T28729] fuse: Bad value for 'fd' [ 2425.471898][T28590] hsr_slave_0: entered promiscuous mode [ 2425.490830][T28590] hsr_slave_1: entered promiscuous mode [ 2425.687810][T28532] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 2425.732712][T28532] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 2425.832154][T28532] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 2426.098018][T28390] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2426.901969][T28532] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2427.101526][T28532] 8021q: adding VLAN 0 to HW filter on device team0 [ 2427.196636][T11862] bridge0: port 1(bridge_slave_0) entered blocking state [ 2427.203997][T11862] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2427.247147][ T5135] bridge0: port 2(bridge_slave_1) entered blocking state [ 2427.254392][ T5135] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2427.600282][T28390] veth0_vlan: entered promiscuous mode [ 2427.770480][T28590] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 2427.787874][T28390] veth1_vlan: entered promiscuous mode [ 2427.800394][T28590] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 2427.848338][T28590] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 2427.889571][T28590] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 2428.133297][T28390] veth0_macvtap: entered promiscuous mode [ 2428.222459][T28390] veth1_macvtap: entered promiscuous mode [ 2428.417265][T28390] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2428.431459][T28390] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2428.462946][T28390] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2428.556853][T28390] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2428.577285][T28390] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2428.599878][T28390] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2428.703899][T28390] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2428.755374][T28390] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2428.769325][T28390] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2428.795327][T28390] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2428.964551][T28532] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2429.034244][T28590] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2429.332842][T28590] 8021q: adding VLAN 0 to HW filter on device team0 [ 2429.342759][T27974] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2429.370932][T27974] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2429.432641][T27116] bridge0: port 1(bridge_slave_0) entered blocking state [ 2429.439986][T27116] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2429.575773][T28532] veth0_vlan: entered promiscuous mode [ 2429.623058][T20687] bridge0: port 2(bridge_slave_1) entered blocking state [ 2429.630516][T20687] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2429.664421][T11537] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2429.686216][T11537] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2429.701154][T28532] veth1_vlan: entered promiscuous mode [ 2429.932876][T28590] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2430.054108][T28770] netlink: 72 bytes leftover after parsing attributes in process `syz.4.5936'. [ 2430.132972][T28532] veth0_macvtap: entered promiscuous mode [ 2430.160962][T28532] veth1_macvtap: entered promiscuous mode [ 2430.287637][T28532] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2430.316232][T28532] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2430.336810][T28532] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2430.352441][T28532] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2430.414148][T28532] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2430.583159][T28532] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2430.952668][T28532] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2430.962769][T28532] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2431.133347][T28532] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2431.339033][T28532] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2431.385400][T28778] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6035'. [ 2431.394463][T28778] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2431.402261][T28778] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2431.424921][T28778] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2431.433054][T28778] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2431.558275][T28532] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2431.585517][T28532] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2431.594292][T28532] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2431.638359][T28532] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2432.205497][T28590] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2432.417518][T11537] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2432.465477][T11537] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2432.981309][T24202] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2433.029865][T28794] input: syz0 as /devices/virtual/input/input54 [ 2433.058101][T24202] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2433.286313][T28590] veth0_vlan: entered promiscuous mode [ 2433.349732][T28590] veth1_vlan: entered promiscuous mode [ 2433.516233][T28590] veth0_macvtap: entered promiscuous mode [ 2433.550690][T28590] veth1_macvtap: entered promiscuous mode [ 2433.713283][T28590] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2433.724021][T28590] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2433.738558][T28590] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2433.749251][T28590] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2433.770361][T28590] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2433.839973][T28590] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2434.525137][T28590] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2434.590311][T28590] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2434.628592][T28590] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2434.634837][T28809] netlink: 72 bytes leftover after parsing attributes in process `syz.0.6043'. [ 2434.690159][T28590] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2434.772779][T28590] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2434.830636][T28810] 9pnet_fd: Insufficient options for proto=fd [ 2434.875418][T28590] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2434.884244][T28590] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2434.947318][T28590] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2435.652604][ T2881] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2435.670708][ T2881] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2435.950083][ T5197] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2435.995704][ T5197] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2440.714712][T28853] netlink: 72 bytes leftover after parsing attributes in process `syz.0.6053'. [ 2444.876985][ T29] audit: type=1326 audit(1719941564.263:812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28881 comm="syz.3.6065" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f967d975f19 code=0x0 [ 2446.024140][T11537] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2446.182197][T28895] 9pnet_fd: Insufficient options for proto=fd [ 2446.558906][T11537] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2446.781699][T11537] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2447.163867][T11537] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2448.570870][T23750] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 2448.584250][T23750] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 2448.593505][T23750] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 2448.618206][T23750] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 2448.638903][T23750] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 2448.646717][T23750] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 2449.687442][T11537] bridge_slave_1: left allmulticast mode [ 2449.707660][T11537] bridge_slave_1: left promiscuous mode [ 2449.715147][T11537] bridge0: port 2(bridge_slave_1) entered disabled state [ 2449.756294][T11537] bridge_slave_0: left allmulticast mode [ 2449.761968][T11537] bridge_slave_0: left promiscuous mode [ 2449.790570][T11537] bridge0: port 1(bridge_slave_0) entered disabled state [ 2450.867209][T23546] Bluetooth: hci1: command tx timeout [ 2452.318844][T11537] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2452.417612][T28949] 9pnet_fd: Insufficient options for proto=fd [ 2452.725701][T11537] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2452.802880][T11537] bond0 (unregistering): Released all slaves [ 2452.920489][T28951] sch_fq: defrate 0 ignored. [ 2452.944789][T23546] Bluetooth: hci1: command tx timeout [ 2454.250066][T28969] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6087'. [ 2454.971107][ T9175] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 2455.004603][T11537] hsr_slave_0: left promiscuous mode [ 2455.017068][T23546] Bluetooth: hci1: command tx timeout [ 2455.035113][T11537] hsr_slave_1: left promiscuous mode [ 2455.291948][T11537] veth1_macvtap: left promiscuous mode [ 2455.319577][T11537] veth0_macvtap: left promiscuous mode [ 2455.343760][T11537] veth1_vlan: left promiscuous mode [ 2455.364345][T11537] veth0_vlan: left promiscuous mode [ 2455.728913][ T9175] usb 1-1: Using ep0 maxpacket: 32 [ 2455.753617][ T9175] usb 1-1: config index 0 descriptor too short (expected 156, got 27) [ 2455.774849][ T9175] usb 1-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 2455.810437][ T9175] usb 1-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 2455.838374][ T9175] usb 1-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 2455.880519][ T9175] usb 1-1: config 0 interface 0 has no altsetting 0 [ 2455.915026][ T9175] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 2455.947029][ T9175] usb 1-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 2455.996450][ T9175] usb 1-1: Product: syz [ 2456.015283][ T9175] usb 1-1: Manufacturer: syz [ 2456.030728][ T9175] usb 1-1: SerialNumber: syz [ 2456.067364][ T9175] usb 1-1: config 0 descriptor?? [ 2456.097554][ T9175] ldusb 1-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 2456.120906][ T9175] ldusb 1-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 2456.768805][T23414] usb 1-1: USB disconnect, device number 62 [ 2456.794285][T23414] ldusb 1-1:0.0: LD USB Device #0 now disconnected [ 2457.104250][T23546] Bluetooth: hci1: command tx timeout [ 2457.374828][T28998] 9pnet_fd: Insufficient options for proto=fd [ 2458.054767][T11537] team0 (unregistering): Port device team_slave_1 removed [ 2458.199251][T11537] team0 (unregistering): Port device team_slave_0 removed [ 2461.549076][T28916] chnl_net:caif_netlink_parms(): no params data found [ 2461.635669][ T9175] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 2461.865706][ T9175] usb 3-1: Using ep0 maxpacket: 32 [ 2461.890567][ T9175] usb 3-1: config index 0 descriptor too short (expected 156, got 27) [ 2462.235346][ T9175] usb 3-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 2462.252816][ T9175] usb 3-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 2462.265096][ T9175] usb 3-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 2462.278928][ T9175] usb 3-1: config 0 interface 0 has no altsetting 0 [ 2462.290936][ T9175] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 2462.315319][ T9175] usb 3-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 2462.323834][ T9175] usb 3-1: Product: syz [ 2462.364936][T28916] bridge0: port 1(bridge_slave_0) entered blocking state [ 2462.370551][ T9175] usb 3-1: Manufacturer: syz [ 2462.393162][T28916] bridge0: port 1(bridge_slave_0) entered disabled state [ 2462.421223][T28916] bridge_slave_0: entered allmulticast mode [ 2462.421922][ T9175] usb 3-1: SerialNumber: syz [ 2462.458699][T28916] bridge_slave_0: entered promiscuous mode [ 2462.486140][ T9175] usb 3-1: config 0 descriptor?? [ 2462.500858][T28916] bridge0: port 2(bridge_slave_1) entered blocking state [ 2462.504701][ T9175] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 2462.532363][T28916] bridge0: port 2(bridge_slave_1) entered disabled state [ 2462.578891][ T9175] ldusb 3-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 2462.580613][T28916] bridge_slave_1: entered allmulticast mode [ 2462.615142][T28916] bridge_slave_1: entered promiscuous mode [ 2462.812291][T28916] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2462.862166][T28916] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2463.067097][T28916] team0: Port device team_slave_0 added [ 2463.100501][T28916] team0: Port device team_slave_1 added [ 2463.140142][T29048] 9pnet_fd: Insufficient options for proto=fd [ 2463.191373][T11862] usb 3-1: USB disconnect, device number 47 [ 2463.227078][T11862] ldusb 3-1:0.0: LD USB Device #0 now disconnected [ 2463.299200][T28916] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2463.314030][T28916] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2463.351526][T28916] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2463.368257][T28916] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2463.386156][T28916] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2463.434518][T28916] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2463.812274][T29051] input: syz0 as /devices/virtual/input/input55 [ 2463.820360][T28916] hsr_slave_0: entered promiscuous mode [ 2463.844613][T28916] hsr_slave_1: entered promiscuous mode [ 2463.871832][T28916] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2463.890242][T28916] Cannot create hsr debugfs directory [ 2465.303239][T28916] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 2465.361905][T28916] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 2465.430100][T28916] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 2465.512745][T28916] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 2465.761258][T29068] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6115'. [ 2465.770784][T29068] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2465.778756][T29068] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2465.801579][T29068] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2465.809625][T29068] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2467.039631][T28916] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2467.133666][T28916] 8021q: adding VLAN 0 to HW filter on device team0 [ 2467.182221][T20687] bridge0: port 1(bridge_slave_0) entered blocking state [ 2467.189742][T20687] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2467.257485][T20687] bridge0: port 2(bridge_slave_1) entered blocking state [ 2467.265086][T20687] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2467.975596][T27131] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 2468.186528][T27131] usb 2-1: Using ep0 maxpacket: 32 [ 2468.204459][T27131] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 129, changing to 11 [ 2468.255384][T27131] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 2468.300057][T27131] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 2468.338061][T27131] usb 2-1: string descriptor 0 read error: -22 [ 2468.344720][T27131] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2468.385577][T27131] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2468.416688][T28916] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2468.982967][T27131] cdc_ncm 2-1:1.0: bind() failure [ 2469.009556][T27131] cdc_ncm 2-1:1.1: probe with driver cdc_ncm failed with error -71 [ 2469.038130][T27131] cdc_mbim 2-1:1.1: probe with driver cdc_mbim failed with error -71 [ 2469.064945][T27131] usbtest 2-1:1.1: probe with driver usbtest failed with error -71 [ 2469.109845][T27131] usb 2-1: USB disconnect, device number 57 [ 2469.390652][T28916] veth0_vlan: entered promiscuous mode [ 2469.437804][T28916] veth1_vlan: entered promiscuous mode [ 2469.492423][T29115] 9pnet_fd: Insufficient options for proto=fd [ 2469.569687][T28916] veth0_macvtap: entered promiscuous mode [ 2469.594736][T28916] veth1_macvtap: entered promiscuous mode [ 2469.654676][T28916] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2469.678218][T28916] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2469.695492][T28916] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2469.714456][T28916] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2469.729233][T28916] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2469.777967][T28916] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2469.792781][T28916] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2469.812506][T28916] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2469.833817][T28916] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2469.849854][T28916] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2469.902460][T28916] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2469.922618][T28916] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2469.934382][T28916] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2469.948747][T28916] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2470.321276][T23801] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2470.351399][T23801] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2470.470204][T11537] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2470.482464][T11537] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2473.200623][ T1250] ieee802154 phy0 wpan0: encryption failed: -22 [ 2473.209805][ T1250] ieee802154 phy1 wpan1: encryption failed: -22 [ 2475.102507][T29199] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=29199 comm=syz.1.6136 [ 2475.177045][T29199] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6136'. [ 2478.322246][T29228] 9pnet_fd: Insufficient options for proto=fd [ 2479.385291][T29245] input: syz0 as /devices/virtual/input/input56 [ 2480.422150][T29252] overlayfs: missing 'workdir' [ 2480.573171][T29250] Bluetooth: MGMT ver 1.22 [ 2480.632583][ T29] audit: type=1400 audit(1719941600.013:813): avc: denied { read } for pid=29249 comm="syz.4.6149" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 2481.149045][T29257] netlink: 'syz.4.6151': attribute type 3 has an invalid length. [ 2481.156953][T29257] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.6151'. [ 2481.605288][ T5135] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 2481.801834][ T5135] usb 1-1: config 0 has no interfaces? [ 2482.229369][ T5135] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2db4, bcdDevice= 0.00 [ 2482.245242][ T5135] usb 1-1: New USB device strings: Mfr=0, Product=9, SerialNumber=0 [ 2482.254630][ T5135] usb 1-1: Product: syz [ 2482.262783][ T5135] usb 1-1: config 0 descriptor?? [ 2482.362569][T29277] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6155'. [ 2482.797275][ T5132] usb 1-1: USB disconnect, device number 63 [ 2484.273088][T29291] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6159'. [ 2485.347459][T23414] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 2485.650691][T29304] netlink: 'syz.3.6164': attribute type 3 has an invalid length. [ 2485.658506][T29304] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.6164'. [ 2485.815447][T23414] usb 2-1: Using ep0 maxpacket: 32 [ 2485.820828][T23546] Bluetooth: hci2: command 0x0406 tx timeout [ 2485.833150][T23414] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 129, changing to 11 [ 2485.865278][T23414] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 2485.875024][T23414] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 2485.928900][T23414] usb 2-1: string descriptor 0 read error: -22 [ 2485.957983][T23414] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2485.991143][T23414] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2486.759645][T23414] cdc_ncm 2-1:1.0: bind() failure [ 2486.800323][T23414] cdc_ncm 2-1:1.1: probe with driver cdc_ncm failed with error -71 [ 2486.841988][T23414] cdc_mbim 2-1:1.1: probe with driver cdc_mbim failed with error -71 [ 2486.864393][T23414] usbtest 2-1:1.1: probe with driver usbtest failed with error -71 [ 2486.906253][T23414] usb 2-1: USB disconnect, device number 58 [ 2487.506067][T29320] syzkaller0: entered promiscuous mode [ 2487.517803][T29320] syzkaller0: entered allmulticast mode [ 2487.558351][T29323] 9pnet_fd: Insufficient options for proto=fd [ 2488.616638][T29335] input: syz0 as /devices/virtual/input/input57 [ 2490.169129][T29342] netlink: 'syz.0.6175': attribute type 3 has an invalid length. [ 2490.176984][T29342] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.6175'. [ 2491.545485][ T5132] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 2491.768707][ T5132] usb 5-1: Using ep0 maxpacket: 32 [ 2491.782914][ T5132] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 129, changing to 11 [ 2491.813673][ T5132] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 2491.866496][ T5132] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 2491.906366][ T5132] usb 5-1: string descriptor 0 read error: -22 [ 2491.925615][ T5132] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2491.945967][ T5132] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2492.735478][T20687] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 2492.958627][T20687] usb 1-1: Using ep0 maxpacket: 32 [ 2492.973573][T20687] usb 1-1: config index 0 descriptor too short (expected 35577, got 27) [ 2492.994967][T20687] usb 1-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 2493.003973][T20687] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 2493.026042][T20687] usb 1-1: config 1 has no interface number 0 [ 2493.033020][T20687] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2493.060776][T20687] usb 1-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 2493.097370][T20687] usb 1-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 2493.107192][T20687] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2493.143422][T20687] snd_usb_pod 1-1:1.1: Line 6 Pocket POD found [ 2493.372939][T29369] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2493.383647][T29369] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2493.806954][T29387] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2493.838331][T29387] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2493.888841][T20687] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now attached [ 2494.141408][T20687] usb 1-1: USB disconnect, device number 64 [ 2494.161398][T20687] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now disconnected [ 2494.650028][T29389] 9pnet_fd: Insufficient options for proto=fd [ 2496.379723][ T5132] cdc_ncm 5-1:1.0: bind() failure [ 2496.412552][ T5132] cdc_ncm 5-1:1.1: probe with driver cdc_ncm failed with error -71 [ 2496.443769][ T5132] cdc_mbim 5-1:1.1: probe with driver cdc_mbim failed with error -71 [ 2496.465024][ T5132] usbtest 5-1:1.1: probe with driver usbtest failed with error -71 [ 2496.543031][ T5132] usb 5-1: USB disconnect, device number 52 [ 2497.755294][T24761] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 2497.965335][T24761] usb 2-1: Using ep0 maxpacket: 32 [ 2498.009380][T24761] usb 2-1: config index 0 descriptor too short (expected 35577, got 27) [ 2498.035454][T24761] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 2498.066238][T24761] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 2498.115288][T24761] usb 2-1: config 1 has no interface number 0 [ 2498.121493][T24761] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2498.189660][T24761] usb 2-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 2498.219517][T24761] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 2498.243250][T24761] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2498.288325][T24761] snd_usb_pod 2-1:1.1: Line 6 Pocket POD found [ 2498.506990][T29425] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2498.525808][T29425] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2498.956884][T29442] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2498.979055][T23414] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 2498.987313][T29442] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2499.045645][T24761] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now attached [ 2499.232498][T23414] usb 1-1: config index 0 descriptor too short (expected 106, got 36) [ 2499.259440][T23414] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2499.281342][T23414] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2499.307723][T23414] usb 1-1: New USB device found, idVendor=1b1c, idProduct=1b3e, bcdDevice= 0.00 [ 2499.319089][T23414] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2499.332842][T23414] usb 1-1: config 0 descriptor?? [ 2499.350555][ T5132] usb 2-1: USB disconnect, device number 59 [ 2499.371028][ T5132] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now disconnected [ 2499.494146][T29444] netlink: 44 bytes leftover after parsing attributes in process `syz.3.6203'. [ 2499.698924][T29447] 9pnet_fd: Insufficient options for proto=fd [ 2499.751820][T23414] corsair 0003:1B1C:1B3E.0028: unknown main item tag 0x0 [ 2499.781067][T23414] corsair 0003:1B1C:1B3E.0028: unknown main item tag 0x0 [ 2499.796327][T23414] corsair 0003:1B1C:1B3E.0028: unknown main item tag 0x0 [ 2499.804146][T23414] corsair 0003:1B1C:1B3E.0028: unknown main item tag 0x0 [ 2499.822035][T23414] corsair 0003:1B1C:1B3E.0028: unknown main item tag 0x0 [ 2499.831496][T23414] corsair 0003:1B1C:1B3E.0028: failed to start in urb: -90 [ 2499.844798][T23414] corsair 0003:1B1C:1B3E.0028: hidraw0: USB HID v0.00 Device [HID 1b1c:1b3e] on usb-dummy_hcd.0-1/input0 [ 2499.959551][T23414] usb 1-1: USB disconnect, device number 65 [ 2500.509337][T29453] syzkaller0: entered promiscuous mode [ 2500.583074][T29453] syzkaller0: entered allmulticast mode [ 2500.929173][T29462] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6207'. [ 2503.837060][ T5132] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 2504.059259][ T5132] usb 2-1: Using ep0 maxpacket: 32 [ 2504.080224][ T5132] usb 2-1: config index 0 descriptor too short (expected 35577, got 27) [ 2504.090370][ T5132] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 2504.099297][ T5132] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 2504.122634][ T5132] usb 2-1: config 1 has no interface number 0 [ 2504.129650][ T5132] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2504.144339][ T5132] usb 2-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 2504.291563][ T5132] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 2504.326506][ T5132] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2504.359920][ T5132] snd_usb_pod 2-1:1.1: Line 6 Pocket POD found [ 2504.786926][T29500] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2504.903498][ T29] audit: type=1326 audit(1719941624.253:814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29504 comm="syz.2.6219" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbb0f775f19 code=0x0 [ 2505.779287][T29500] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2505.876322][T23750] Bluetooth: hci2: ACL packet for unknown connection handle 0 [ 2506.162867][T29511] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2506.192529][T23414] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 2506.193351][T29511] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2506.311278][ T5132] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now attached [ 2506.386205][T23414] usb 3-1: config index 0 descriptor too short (expected 106, got 36) [ 2506.394842][T23414] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2506.429157][T23414] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2506.457204][T23414] usb 3-1: New USB device found, idVendor=1b1c, idProduct=1b3e, bcdDevice= 0.00 [ 2506.478143][T23414] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2506.502806][T23414] usb 3-1: config 0 descriptor?? [ 2506.587900][ T5132] usb 2-1: USB disconnect, device number 60 [ 2506.601678][ T5132] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now disconnected [ 2506.921761][T29514] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 2506.932844][T29514] qnx6: wrong signature (magic) in superblock #1. [ 2506.939478][T29514] qnx6: unable to read the first superblock [ 2506.986864][T23414] corsair 0003:1B1C:1B3E.0029: unknown main item tag 0x0 [ 2506.994008][T23414] corsair 0003:1B1C:1B3E.0029: unknown main item tag 0x0 [ 2507.010682][T23414] corsair 0003:1B1C:1B3E.0029: unknown main item tag 0x0 [ 2507.018408][T23414] corsair 0003:1B1C:1B3E.0029: unknown main item tag 0x0 [ 2507.025655][T23414] corsair 0003:1B1C:1B3E.0029: unknown main item tag 0x0 [ 2507.034055][T23414] corsair 0003:1B1C:1B3E.0029: failed to start in urb: -90 [ 2507.044012][T23414] corsair 0003:1B1C:1B3E.0029: hidraw0: USB HID v0.00 Device [HID 1b1c:1b3e] on usb-dummy_hcd.2-1/input0 [ 2507.198468][T23414] usb 3-1: USB disconnect, device number 48 [ 2508.126675][T29528] 9pnet_fd: Insufficient options for proto=fd [ 2509.046871][T29530] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=29530 comm=syz.2.6225 [ 2510.959788][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 2512.245929][T23546] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 2512.270900][T23546] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 2512.281556][T23546] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 2512.290942][T23546] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 2512.314646][T23546] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 2512.325053][T23546] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 2512.669621][T29530] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6225'. [ 2514.435398][T29575] 9pnet_fd: Insufficient options for proto=fd [ 2514.528030][T23546] Bluetooth: hci4: command tx timeout [ 2515.091508][T23750] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 2515.105451][T23750] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 2515.114639][T23750] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 2515.139286][T23750] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 2515.149793][T23750] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 2515.160164][T23750] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 2515.520913][T29553] chnl_net:caif_netlink_parms(): no params data found [ 2516.150458][T24202] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2516.378424][T29553] bridge0: port 1(bridge_slave_0) entered blocking state [ 2516.415514][T29553] bridge0: port 1(bridge_slave_0) entered disabled state [ 2516.445877][T29553] bridge_slave_0: entered allmulticast mode [ 2516.454182][T29553] bridge_slave_0: entered promiscuous mode [ 2516.464898][T29553] bridge0: port 2(bridge_slave_1) entered blocking state [ 2516.472233][T29553] bridge0: port 2(bridge_slave_1) entered disabled state [ 2516.480043][T29553] bridge_slave_1: entered allmulticast mode [ 2516.489495][T29553] bridge_slave_1: entered promiscuous mode [ 2516.560037][T29602] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=29602 comm=syz.1.6244 [ 2516.697272][T23750] Bluetooth: hci4: command tx timeout [ 2517.257400][T24202] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2517.296842][T23750] Bluetooth: hci6: command tx timeout [ 2517.445993][T29602] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6244'. [ 2517.704355][T24202] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2520.216081][T29612] 9pnet_fd: Insufficient options for proto=fd [ 2520.258495][T23546] Bluetooth: hci6: command tx timeout [ 2520.265670][T23750] Bluetooth: hci4: command tx timeout [ 2520.680263][T29553] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2520.836427][T24202] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2520.909185][T29553] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2520.996610][ T29] audit: type=1326 audit(1719941640.383:815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29616 comm="syz.2.6248" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fbb0f775f19 code=0x0 [ 2521.241201][T29553] team0: Port device team_slave_0 added [ 2521.392851][T29553] team0: Port device team_slave_1 added [ 2521.629921][T29553] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2521.648865][T29553] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2521.674821][ C1] vkms_vblank_simulate: vblank timer overrun [ 2521.691018][T29553] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2521.750384][T29574] chnl_net:caif_netlink_parms(): no params data found [ 2521.783143][T29553] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2521.794929][T29553] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2521.820918][ C1] vkms_vblank_simulate: vblank timer overrun [ 2521.861214][T29553] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2521.928592][T24202] bridge_slave_1: left allmulticast mode [ 2521.936054][T24202] bridge_slave_1: left promiscuous mode [ 2521.942016][T24202] bridge0: port 2(bridge_slave_1) entered disabled state [ 2521.954671][T24202] bridge_slave_0: left allmulticast mode [ 2521.962036][T24202] bridge_slave_0: left promiscuous mode [ 2521.968121][T24202] bridge0: port 1(bridge_slave_0) entered disabled state [ 2521.988580][T23750] block nbd2: Receive control failed (result -32) [ 2522.008684][T29649] block nbd2: shutting down sockets [ 2522.325718][T23750] Bluetooth: hci4: command tx timeout [ 2522.331218][T23750] Bluetooth: hci6: command tx timeout [ 2522.742810][T29660] 9pnet_fd: Insufficient options for proto=fd [ 2523.162644][T29658] fuse: Bad value for 'fd' [ 2524.091091][T24202] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2524.109757][T24202] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2524.123381][T24202] bond0 (unregistering): Released all slaves [ 2524.377274][T23750] Bluetooth: hci6: command tx timeout [ 2524.424177][T29553] hsr_slave_0: entered promiscuous mode [ 2524.432958][T29553] hsr_slave_1: entered promiscuous mode [ 2524.441224][T29553] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2524.449289][T29553] Cannot create hsr debugfs directory [ 2524.767292][T29574] bridge0: port 1(bridge_slave_0) entered blocking state [ 2524.792369][T29574] bridge0: port 1(bridge_slave_0) entered disabled state [ 2524.819080][T29574] bridge_slave_0: entered allmulticast mode [ 2524.853635][T29574] bridge_slave_0: entered promiscuous mode [ 2524.927817][T29574] bridge0: port 2(bridge_slave_1) entered blocking state [ 2524.935758][T29574] bridge0: port 2(bridge_slave_1) entered disabled state [ 2524.944229][T29574] bridge_slave_1: entered allmulticast mode [ 2524.964895][T29574] bridge_slave_1: entered promiscuous mode [ 2525.063669][T29574] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2525.096911][T24202] hsr_slave_0: left promiscuous mode [ 2525.127603][T24202] hsr_slave_1: left promiscuous mode [ 2525.146770][T24202] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2525.154350][T24202] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2525.171691][T24202] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2525.183074][T24202] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2525.244086][T24202] veth1_macvtap: left promiscuous mode [ 2525.256748][T24202] veth0_macvtap: left promiscuous mode [ 2525.262485][T24202] veth1_vlan: left promiscuous mode [ 2525.273730][T24202] veth0_vlan: left promiscuous mode [ 2527.382764][T29699] 9pnet_fd: Insufficient options for proto=fd [ 2529.643629][T24202] team0 (unregistering): Port device team_slave_1 removed [ 2529.741702][T28536] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 2529.742331][T24202] team0 (unregistering): Port device team_slave_0 removed [ 2529.763219][T28536] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 2529.800195][T28536] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 2529.840409][T28536] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 2529.850980][T28536] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 2529.858723][T28536] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 2530.671135][T29574] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2530.724813][T29691] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6266'. [ 2530.892596][T29574] team0: Port device team_slave_0 added [ 2530.934370][T29574] team0: Port device team_slave_1 added [ 2530.983185][T29714] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6272'. [ 2531.291146][T29574] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2531.300107][T29574] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2531.336981][T29574] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2531.418240][T29574] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2531.432074][T29574] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2531.464803][T29574] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2531.575268][T23750] Bluetooth: hci5: command 0x0406 tx timeout [ 2531.975565][T23546] Bluetooth: hci0: command tx timeout [ 2532.167425][T29574] hsr_slave_0: entered promiscuous mode [ 2532.179304][T29574] hsr_slave_1: entered promiscuous mode [ 2532.200913][T29574] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2532.209275][T29574] Cannot create hsr debugfs directory [ 2533.121185][T24202] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2533.443371][T24202] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2533.584117][T29709] chnl_net:caif_netlink_parms(): no params data found [ 2533.884700][T24202] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2534.055575][T23546] Bluetooth: hci0: command tx timeout [ 2534.483400][T24202] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2534.706241][ T1250] ieee802154 phy0 wpan0: encryption failed: -22 [ 2534.713041][ T1250] ieee802154 phy1 wpan1: encryption failed: -22 [ 2534.887065][T29709] bridge0: port 1(bridge_slave_0) entered blocking state [ 2534.894334][T29709] bridge0: port 1(bridge_slave_0) entered disabled state [ 2534.911767][T29709] bridge_slave_0: entered allmulticast mode [ 2534.921426][T29709] bridge_slave_0: entered promiscuous mode [ 2534.976934][T29709] bridge0: port 2(bridge_slave_1) entered blocking state [ 2534.989110][T29709] bridge0: port 2(bridge_slave_1) entered disabled state [ 2534.998222][T29709] bridge_slave_1: entered allmulticast mode [ 2535.007311][T29709] bridge_slave_1: entered promiscuous mode [ 2535.097482][T29553] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 2535.115988][T29553] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 2535.202751][T29574] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2535.253928][T29709] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2535.267554][T29553] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 2535.293102][T29752] fuse: Unknown parameter '0x0000000000000006' [ 2535.293180][T29553] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 2535.361753][T29709] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2535.421746][T29574] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2535.581130][T29574] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2535.694275][T29574] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2535.833577][T29709] team0: Port device team_slave_0 added [ 2535.880282][T29757] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6283'. [ 2535.925949][T29709] team0: Port device team_slave_1 added [ 2536.103453][T29709] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2536.113198][T29709] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2536.139750][T23546] Bluetooth: hci0: command tx timeout [ 2536.153285][T29709] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2536.183676][T29709] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2536.222496][T29709] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2536.260670][T29709] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2536.343833][T24202] bridge_slave_1: left allmulticast mode [ 2536.369829][T24202] bridge_slave_1: left promiscuous mode [ 2536.376561][T24202] bridge0: port 2(bridge_slave_1) entered disabled state [ 2536.389419][T24202] bridge_slave_0: left allmulticast mode [ 2536.406654][T24202] bridge_slave_0: left promiscuous mode [ 2536.412570][T24202] bridge0: port 1(bridge_slave_0) entered disabled state [ 2536.433470][ T29] audit: type=1400 audit(1719941655.813:816): avc: denied { read } for pid=29758 comm="syz.3.6284" name="/" dev="configfs" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 2536.463447][T24202] bridge_slave_1: left allmulticast mode [ 2536.469316][T24202] bridge_slave_1: left promiscuous mode [ 2536.487092][ T29] audit: type=1400 audit(1719941655.813:817): avc: denied { open } for pid=29758 comm="syz.3.6284" path="/560/file0" dev="configfs" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 2536.510502][T24202] bridge0: port 2(bridge_slave_1) entered disabled state [ 2536.533654][T24202] bridge_slave_0: left allmulticast mode [ 2536.547847][ T29] audit: type=1326 audit(1719941655.903:818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29758 comm="syz.3.6284" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f967d975f19 code=0x0 [ 2536.547892][T24202] bridge_slave_0: left promiscuous mode [ 2536.580082][T24202] bridge0: port 1(bridge_slave_0) entered disabled state [ 2537.725062][T24202] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2537.759013][T24202] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2537.814822][T24202] bond0 (unregistering): Released all slaves [ 2538.149904][T24202] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2538.174060][T24202] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2538.197289][T24202] bond0 (unregistering): Released all slaves [ 2538.220428][T23546] Bluetooth: hci0: command tx timeout [ 2538.906218][T29709] hsr_slave_0: entered promiscuous mode [ 2538.925046][T29709] hsr_slave_1: entered promiscuous mode [ 2538.952602][T29709] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2538.981867][T29709] Cannot create hsr debugfs directory [ 2539.717245][T29574] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 2539.928135][T29574] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 2540.075340][T29574] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 2540.130120][T24202] hsr_slave_0: left promiscuous mode [ 2540.137289][T24202] hsr_slave_1: left promiscuous mode [ 2540.143855][T24202] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2540.152257][T24202] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2540.162294][T24202] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2540.174329][T24202] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2540.192020][T24202] hsr_slave_0: left promiscuous mode [ 2540.198542][T24202] hsr_slave_1: left promiscuous mode [ 2540.250406][T24202] veth1_macvtap: left promiscuous mode [ 2540.256106][T24202] veth0_macvtap: left promiscuous mode [ 2540.262708][T24202] veth1_vlan: left promiscuous mode [ 2540.268233][T24202] veth0_vlan: left promiscuous mode [ 2540.279596][T24202] veth1_macvtap: left promiscuous mode [ 2540.285220][T24202] veth0_macvtap: left promiscuous mode [ 2540.290970][T24202] veth1_vlan: left promiscuous mode [ 2540.296529][T24202] veth0_vlan: left promiscuous mode [ 2541.458883][T24202] team0 (unregistering): Port device team_slave_1 removed [ 2541.562089][T24202] team0 (unregistering): Port device team_slave_0 removed [ 2543.124584][T24202] team0 (unregistering): Port device team_slave_1 removed [ 2543.192075][T24202] team0 (unregistering): Port device team_slave_0 removed [ 2543.971419][T29553] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2543.990259][T29574] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 2544.017721][T29787] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6291'. [ 2544.027184][T29787] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2544.034653][T29787] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2544.044605][T29787] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2544.052985][T29787] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2544.343512][T29553] 8021q: adding VLAN 0 to HW filter on device team0 [ 2544.410195][T11862] bridge0: port 1(bridge_slave_0) entered blocking state [ 2544.417499][T11862] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2544.430499][T11862] bridge0: port 2(bridge_slave_1) entered blocking state [ 2544.437839][T11862] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2545.145341][T29574] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2545.215943][T20687] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 2545.259068][T29574] 8021q: adding VLAN 0 to HW filter on device team0 [ 2545.373678][ T5132] bridge0: port 1(bridge_slave_0) entered blocking state [ 2545.381063][ T5132] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2545.404265][ T5132] bridge0: port 2(bridge_slave_1) entered blocking state [ 2545.411686][ T5132] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2545.429815][T20687] usb 3-1: Using ep0 maxpacket: 8 [ 2545.438489][T20687] usb 3-1: config 0 has an invalid interface number: 193 but max is 0 [ 2545.458042][T20687] usb 3-1: config 0 contains an unexpected descriptor of type 0x1, skipping [ 2545.471694][T20687] usb 3-1: config 0 has an invalid descriptor of length 231, skipping remainder of the config [ 2545.484181][T20687] usb 3-1: config 0 has no interface number 0 [ 2545.492981][T20687] usb 3-1: config 0 interface 193 altsetting 0 endpoint 0x4 has invalid maxpacket 1024, setting to 64 [ 2545.533114][T20687] usb 3-1: config 0 interface 193 altsetting 0 endpoint 0x5 has invalid maxpacket 1032, setting to 64 [ 2545.555122][T20687] usb 3-1: config 0 interface 193 altsetting 0 has a duplicate endpoint with address 0x4, skipping [ 2545.567693][T20687] usb 3-1: config 0 interface 193 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 13 [ 2545.597216][T20687] usb 3-1: New USB device found, idVendor=03eb, idProduct=2002, bcdDevice= 1.00 [ 2545.618562][T20687] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2545.655381][T20687] usb 3-1: config 0 descriptor?? [ 2545.677621][T20687] usb-storage 3-1:0.193: USB Mass Storage device detected [ 2545.681289][T29709] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 2545.707402][T20687] usb-storage 3-1:0.193: Quirks match for vid 03eb pid 2002: 20 [ 2545.726340][T29709] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 2545.802355][T29709] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 2545.849824][T29709] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 2545.895106][T29553] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2546.541840][T29709] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2546.666820][T29709] 8021q: adding VLAN 0 to HW filter on device team0 [ 2546.717199][ T9175] bridge0: port 1(bridge_slave_0) entered blocking state [ 2546.724538][ T9175] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2546.771581][ T9175] bridge0: port 2(bridge_slave_1) entered blocking state [ 2546.778953][ T9175] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2546.968115][T29553] veth0_vlan: entered promiscuous mode [ 2547.033937][T29553] veth1_vlan: entered promiscuous mode [ 2547.066885][T29574] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2547.190960][T29817] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6295'. [ 2547.237184][T29553] veth0_macvtap: entered promiscuous mode [ 2547.282756][T29553] veth1_macvtap: entered promiscuous mode [ 2547.392174][T29574] veth0_vlan: entered promiscuous mode [ 2547.412917][T29553] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2547.432634][T29553] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2547.522328][T29553] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2547.533163][T29553] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2547.548163][T29553] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2547.560249][T29553] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2547.782171][T29574] veth1_vlan: entered promiscuous mode [ 2547.896777][ T9175] usb 3-1: USB disconnect, device number 49 [ 2548.016077][T29709] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2548.386631][T29574] veth0_macvtap: entered promiscuous mode [ 2548.515975][T29574] veth1_macvtap: entered promiscuous mode [ 2548.579985][T24202] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2548.582343][T29574] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2548.618986][T24202] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2548.659621][T29574] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2548.706882][T29574] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2548.828035][T29574] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2548.856237][T29574] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2548.888369][T29574] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2548.906461][T29574] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2548.920137][T29574] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2548.929208][T29574] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2548.946029][T29574] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2548.986769][ T2881] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2549.013333][ T2881] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2549.220004][T29709] veth0_vlan: entered promiscuous mode [ 2549.322445][T29709] veth1_vlan: entered promiscuous mode [ 2549.458298][ T744] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2549.490283][ T744] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2549.793322][T17092] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2549.806972][T17092] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2550.440311][T29843] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6299'. [ 2550.449699][T29844] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6230'. [ 2550.460075][T29844] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2550.467773][T29844] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2550.482874][T29844] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2550.490457][T29844] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2550.597861][T29709] veth0_macvtap: entered promiscuous mode [ 2550.640992][T29709] veth1_macvtap: entered promiscuous mode [ 2550.721105][T29709] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2550.743432][T29709] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2550.792936][T29709] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2550.849857][T29709] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2550.893290][T29709] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2550.928727][T29709] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2550.982103][T29709] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2551.001749][T29709] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2551.059704][T29709] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2551.112373][T29709] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2552.599592][T24202] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2552.633059][T24202] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2552.730902][T24202] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2552.748728][T24202] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2552.769257][T29862] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 2552.780946][T29862] qnx6: wrong signature (magic) in superblock #1. [ 2552.787589][T29862] qnx6: unable to read the first superblock [ 2553.152385][T29867] netlink: 'syz.1.6271': attribute type 21 has an invalid length. [ 2553.178678][T29867] netlink: 164 bytes leftover after parsing attributes in process `syz.1.6271'. [ 2555.973210][ T29] audit: type=1326 audit(1719941675.353:819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29879 comm="syz.1.6308" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff91ff75f19 code=0x0 [ 2556.739445][ T29] audit: type=1326 audit(1719941676.113:820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29893 comm="syz.4.6310" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4cfd975f19 code=0x0 [ 2558.807246][T17452] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 2558.901192][T29923] netlink: 'syz.2.6316': attribute type 21 has an invalid length. [ 2558.919793][T29923] netlink: 164 bytes leftover after parsing attributes in process `syz.2.6316'. [ 2559.027685][T17452] usb 1-1: config 0 has no interfaces? [ 2559.036582][T17452] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2db4, bcdDevice= 0.00 [ 2559.054372][T17452] usb 1-1: New USB device strings: Mfr=0, Product=9, SerialNumber=0 [ 2559.067150][T17452] usb 1-1: Product: syz [ 2559.083754][T17452] usb 1-1: config 0 descriptor?? [ 2559.180090][T29932] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6314'. [ 2559.471046][ T5132] usb 1-1: USB disconnect, device number 66 [ 2559.695452][T17452] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 2559.905354][T17452] usb 2-1: Using ep0 maxpacket: 32 [ 2559.949278][T17452] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 129, changing to 11 [ 2559.975833][T17452] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 2560.009835][T17452] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 2560.046172][T17452] usb 2-1: string descriptor 0 read error: -22 [ 2560.052657][T17452] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2560.080371][T17452] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2560.575605][T17452] cdc_ncm 2-1:1.0: bind() failure [ 2560.602776][T17452] cdc_ncm 2-1:1.1: probe with driver cdc_ncm failed with error -71 [ 2560.628094][T17452] cdc_mbim 2-1:1.1: probe with driver cdc_mbim failed with error -71 [ 2560.657033][T17452] usbtest 2-1:1.1: probe with driver usbtest failed with error -71 [ 2560.695492][T17452] usb 2-1: USB disconnect, device number 61 [ 2560.795314][T24761] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 2560.998227][T24761] usb 1-1: config 0 has no interfaces? [ 2561.021177][T24761] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2db4, bcdDevice= 0.00 [ 2561.048635][T24761] usb 1-1: New USB device strings: Mfr=0, Product=9, SerialNumber=0 [ 2561.070488][T24761] usb 1-1: Product: syz [ 2561.097468][T24761] usb 1-1: config 0 descriptor?? [ 2561.375073][T24761] usb 1-1: USB disconnect, device number 67 [ 2561.883478][T29965] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=29965 comm=syz.1.6328 [ 2561.941353][T29965] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6328'. [ 2562.736802][T29968] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6329'. [ 2562.984509][ T29] audit: type=1326 audit(1719941682.363:821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29963 comm="syz.3.6330" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f967d975f19 code=0x0 [ 2564.567928][T29984] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6332'. [ 2564.577071][T29984] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2564.584519][T29984] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2565.005875][T29984] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2565.013466][T29984] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2567.003504][ T29] audit: type=1326 audit(1719941686.383:822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30027 comm="syz.2.6350" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fbb0f775f19 code=0x0 [ 2567.365313][T20687] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 2567.581232][T20687] usb 2-1: config 0 has no interfaces? [ 2567.593012][T20687] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2db4, bcdDevice= 0.00 [ 2567.629720][T20687] usb 2-1: New USB device strings: Mfr=0, Product=9, SerialNumber=0 [ 2567.652999][T20687] usb 2-1: Product: syz [ 2567.687693][T20687] usb 2-1: config 0 descriptor?? [ 2568.035671][T20687] usb 2-1: USB disconnect, device number 62 [ 2568.309329][T30045] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6351'. [ 2568.320914][T30045] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2568.328598][T30045] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2568.397135][T30045] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2568.404805][T30045] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2569.200190][T20687] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 2569.685933][T20687] usb 5-1: Using ep0 maxpacket: 32 [ 2569.936722][T20687] usb 5-1: config index 0 descriptor too short (expected 35577, got 27) [ 2569.945594][T20687] usb 5-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 2569.966459][T20687] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 2569.976661][T20687] usb 5-1: config 1 has no interface number 0 [ 2569.983386][T20687] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2569.994087][T20687] usb 5-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 2570.330466][T20687] usb 5-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 2570.355711][T20687] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2570.403472][T20687] snd_usb_pod 5-1:1.1: Line 6 Pocket POD found [ 2570.638595][T30047] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2570.665797][T30047] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2570.750922][T30047] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2570.800720][T30047] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2570.819829][ T29] audit: type=1326 audit(1719941690.193:823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30062 comm="syz.3.6361" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f967d975f19 code=0x0 [ 2570.953750][T20687] snd_usb_pod 5-1:1.1: invalid control EP [ 2570.985604][T20687] snd_usb_pod 5-1:1.1: cannot start listening: -22 [ 2571.022873][T20687] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now disconnected [ 2571.041914][T20687] snd_usb_pod 5-1:1.1: probe with driver snd_usb_pod failed with error -22 [ 2571.362032][T20687] usb 5-1: USB disconnect, device number 53 [ 2571.760690][ T29] audit: type=1326 audit(1719941691.143:824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30077 comm="syz.1.6363" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff91ff75f19 code=0x0 [ 2571.945306][ T5153] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 2572.145252][ T5153] usb 3-1: Using ep0 maxpacket: 32 [ 2572.164212][ T5153] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 129, changing to 11 [ 2572.195250][ T5153] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 2572.265247][ T5153] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 2572.289422][ T5153] usb 3-1: string descriptor 0 read error: -22 [ 2572.325420][ T5153] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2572.345273][ T5153] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2572.852415][ T5153] cdc_ncm 3-1:1.0: bind() failure [ 2572.894689][ T5153] cdc_ncm 3-1:1.1: probe with driver cdc_ncm failed with error -71 [ 2572.916703][ T5153] cdc_mbim 3-1:1.1: probe with driver cdc_mbim failed with error -71 [ 2572.964615][ T5153] usbtest 3-1:1.1: probe with driver usbtest failed with error -71 [ 2573.002191][T30093] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6365'. [ 2573.055620][ T5153] usb 3-1: USB disconnect, device number 50 [ 2573.909674][T23750] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 2573.964581][T23750] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 2573.987953][T23750] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 2573.998883][T23750] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 2574.007665][T23750] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 2574.015361][T23750] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 2574.063584][ T29] audit: type=1326 audit(1719941693.443:825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30094 comm="syz.2.6368" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fbb0f775f19 code=0x0 [ 2574.349813][T17092] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2574.526926][T17092] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2574.808791][T17092] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2575.010282][T17092] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2576.135517][T23750] Bluetooth: hci1: command tx timeout [ 2576.825763][T17092] bridge_slave_1: left allmulticast mode [ 2576.831530][T17092] bridge_slave_1: left promiscuous mode [ 2576.863458][T17092] bridge0: port 2(bridge_slave_1) entered disabled state [ 2576.896782][T17092] bridge_slave_0: left allmulticast mode [ 2576.902510][T17092] bridge_slave_0: left promiscuous mode [ 2576.911036][T17092] bridge0: port 1(bridge_slave_0) entered disabled state [ 2578.215289][T23750] Bluetooth: hci1: command tx timeout [ 2580.154033][T23750] Bluetooth: hci4: Received unexpected HCI Event 0x00 [ 2580.295370][T23750] Bluetooth: hci1: command tx timeout [ 2580.537495][T30155] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6380'. [ 2580.556215][T17092] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2580.579417][T17092] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2580.600175][T17092] bond0 (unregistering): Released all slaves [ 2580.853647][T30096] chnl_net:caif_netlink_parms(): no params data found [ 2580.925193][T30149] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6378'. [ 2581.144928][T30163] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6382'. [ 2582.375484][T23750] Bluetooth: hci1: command tx timeout [ 2687.625133][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 2687.632157][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P30167/1:b..l [ 2687.641003][ C1] rcu: (detected by 1, t=10502 jiffies, g=261813, q=607 ncpus=2) [ 2687.648856][ C1] task:syz.1.6384 state:R running task stack:26688 pid:30167 tgid:30167 ppid:29709 flags:0x00004000 [ 2687.662287][ C1] Call Trace: [ 2687.665649][ C1] [ 2687.668616][ C1] __schedule+0xf15/0x5d00 [ 2687.673087][ C1] ? mark_lock+0xb5/0xc60 [ 2687.677476][ C1] ? __pfx___schedule+0x10/0x10 [ 2687.682373][ C1] ? hlock_class+0x4e/0x130 [ 2687.686932][ C1] ? mark_held_locks+0x9f/0xe0 [ 2687.691757][ C1] preempt_schedule_irq+0x51/0x90 [ 2687.696857][ C1] irqentry_exit+0x36/0x90 [ 2687.701320][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2687.707394][ C1] RIP: 0010:lock_acquire+0x1f2/0x560 [ 2687.712755][ C1] Code: c1 05 9a ad 96 7e 83 f8 01 0f 85 ea 02 00 00 9c 58 f6 c4 02 0f 85 d5 02 00 00 48 85 ed 74 01 fb 48 b8 00 00 00 00 00 fc ff df <48> 01 c3 48 c7 03 00 00 00 00 48 c7 43 08 00 00 00 00 48 8b 84 24 [ 2687.732410][ C1] RSP: 0018:ffffc9000318f288 EFLAGS: 00000206 [ 2687.738533][ C1] RAX: dffffc0000000000 RBX: 1ffff92000631e53 RCX: 00000000c62827c2 [ 2687.746551][ C1] RDX: 0000000000000001 RSI: ffffffff8b2cb200 RDI: ffffffff8b8ff600 [ 2687.754578][ C1] RBP: 0000000000000200 R08: 0000000000000000 R09: fffffbfff284ce58 [ 2687.762594][ C1] R10: ffffffff942672c7 R11: 0000000000000001 R12: 0000000000000000 [ 2687.770606][ C1] R13: 0000000000000000 R14: ffffffff8dbb1620 R15: 0000000000000000 [ 2687.778630][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 2687.783724][ C1] ? debug_check_no_obj_freed+0x328/0x600 [ 2687.789587][ C1] ? page_ext_put+0x3e/0xd0 [ 2687.794139][ C1] page_ext_get+0x3a/0x310 [ 2687.798602][ C1] ? page_ext_get+0x34/0x310 [ 2687.803236][ C1] __reset_page_owner+0x32/0x400 [ 2687.808316][ C1] free_unref_folios+0x991/0x1310 [ 2687.813403][ C1] folios_put_refs+0x487/0x6d0 [ 2687.818240][ C1] ? __pfx_folios_put_refs+0x10/0x10 [ 2687.823598][ C1] ? lru_add_drain_cpu+0x454/0x860 [ 2687.828813][ C1] free_pages_and_swap_cache+0x36d/0x510 [ 2687.834526][ C1] ? __pfx_free_pages_and_swap_cache+0x10/0x10 [ 2687.840854][ C1] ? __pfx___might_resched+0x10/0x10 [ 2687.846193][ C1] __tlb_batch_free_encoded_pages+0xf9/0x290 [ 2687.852250][ C1] tlb_flush_mmu+0xe9/0x590 [ 2687.856842][ C1] unmap_page_range+0x1f37/0x3f20 [ 2687.862017][ C1] ? __pfx_unmap_page_range+0x10/0x10 [ 2687.867445][ C1] ? uprobe_munmap+0x20/0x570 [ 2687.872196][ C1] unmap_single_vma+0x194/0x2b0 [ 2687.877115][ C1] unmap_vmas+0x22f/0x490 [ 2687.881502][ C1] ? __pfx_unmap_vmas+0x10/0x10 [ 2687.886412][ C1] ? __pfx_lock_release+0x10/0x10 [ 2687.891519][ C1] ? lru_add_drain_cpu+0x454/0x860 [ 2687.896707][ C1] exit_mmap+0x1b8/0xb20 [ 2687.901022][ C1] ? __pfx_exit_mmap+0x10/0x10 [ 2687.905854][ C1] __mmput+0x12a/0x4d0 [ 2687.909969][ C1] mmput+0x62/0x70 [ 2687.913734][ C1] do_exit+0x9b7/0x2ba0 [ 2687.917942][ C1] ? __pfx_do_exit+0x10/0x10 [ 2687.922670][ C1] ? preempt_schedule_thunk+0x1a/0x30 [ 2687.928098][ C1] do_group_exit+0xd3/0x2a0 [ 2687.932669][ C1] __x64_sys_exit_group+0x3e/0x50 [ 2687.937789][ C1] do_syscall_64+0xcd/0x250 [ 2687.942350][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2687.948309][ C1] RIP: 0033:0x7ff91ff75f19 [ 2687.952780][ C1] RSP: 002b:00007ffd7ce414f8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 2687.961249][ C1] RAX: ffffffffffffffda RBX: 00007ffd7ce415f0 RCX: 00007ff91ff75f19 [ 2687.969259][ C1] RDX: 0000000000000064 RSI: 0000000000000000 RDI: 0000000000000000 [ 2687.977263][ C1] RBP: 0000000000000001 R08: 000000177ce4162f R09: 0000000000000000 [ 2687.985274][ C1] R10: 0000000000000006 R11: 0000000000000246 R12: 0000000000000001 [ 2687.993292][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2688.001310][ C1] [ 2688.004363][ C1] rcu: rcu_preempt kthread starved for 10372 jiffies! g261813 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 2688.015685][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 2688.025696][ C1] rcu: RCU grace-period kthread stack dump: [ 2688.031610][ C1] task:rcu_preempt state:R running task stack:26816 pid:17 tgid:17 ppid:2 flags:0x00004000 [ 2688.043409][ C1] Call Trace: [ 2688.046720][ C1] [ 2688.049683][ C1] __schedule+0xf15/0x5d00 [ 2688.054173][ C1] ? __pfx___lock_acquire+0x10/0x10 [ 2688.059528][ C1] ? __pfx___schedule+0x10/0x10 [ 2688.064427][ C1] ? schedule+0x298/0x350 [ 2688.068799][ C1] ? __pfx_lock_release+0x10/0x10 [ 2688.073884][ C1] ? __pfx___mod_timer+0x10/0x10 [ 2688.078883][ C1] ? lock_acquire+0x1b1/0x560 [ 2688.083618][ C1] ? lockdep_init_map_type+0x16d/0x7d0 [ 2688.089143][ C1] schedule+0xe7/0x350 [ 2688.093252][ C1] schedule_timeout+0x136/0x2a0 [ 2688.098164][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 2688.103587][ C1] ? __pfx_process_timeout+0x10/0x10 [ 2688.108925][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 2688.114773][ C1] ? prepare_to_swait_event+0xf0/0x470 [ 2688.120290][ C1] rcu_gp_fqs_loop+0x1eb/0xb00 [ 2688.125110][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 2688.130442][ C1] ? _raw_spin_unlock_irq+0x2e/0x50 [ 2688.135685][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 2688.141536][ C1] rcu_gp_kthread+0x271/0x380 [ 2688.146274][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 2688.151522][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 2688.156771][ C1] ? __kthread_parkme+0x148/0x220 [ 2688.161834][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 2688.167086][ C1] kthread+0x2c1/0x3a0 [ 2688.171208][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 2688.176452][ C1] ? __pfx_kthread+0x10/0x10 [ 2688.181104][ C1] ret_from_fork+0x45/0x80 [ 2688.185581][ C1] ? __pfx_kthread+0x10/0x10 [ 2688.190224][ C1] ret_from_fork_asm+0x1a/0x30 [ 2688.195053][ C1] [ 2688.198110][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 2688.204470][ C1] CPU: 1 PID: 0 Comm: swapper/1 Not tainted 6.10.0-rc6-syzkaller-00051-g1dfe225e9af5 #0 [ 2688.214222][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 2688.224307][ C1] RIP: 0010:acpi_safe_halt+0x1a/0x20 [ 2688.229648][ C1] Code: 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 65 48 8b 05 88 63 1c 75 48 8b 00 a8 08 75 0c 66 90 0f 00 2d 58 be b3 00 fb f4 c3 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2688.249309][ C1] RSP: 0018:ffffc900001a7d58 EFLAGS: 00000246 [ 2688.255423][ C1] RAX: 0000000000004000 RBX: 0000000000000001 RCX: ffffffff8ae75899 [ 2688.263434][ C1] RDX: 0000000000000001 RSI: ffff88801b281000 RDI: ffff88801b281064 [ 2688.271442][ C1] RBP: ffff88801b281064 R08: 0000000000000001 R09: ffffed1017266fdd [ 2688.279449][ C1] R10: ffff8880b9337eeb R11: 0000000000000000 R12: ffff88801a713000 [ 2688.287455][ C1] R13: ffffffff8e742500 R14: 0000000000000001 R15: 0000000000000000 [ 2688.295462][ C1] FS: 0000000000000000(0000) GS:ffff8880b9300000(0000) knlGS:0000000000000000 [ 2688.304456][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2688.311086][ C1] CR2: 00007fbb10493d58 CR3: 0000000020cf4000 CR4: 00000000003526f0 [ 2688.319097][ C1] Call Trace: [ 2688.322406][ C1] [ 2688.325280][ C1] ? show_regs+0x8c/0xa0 [ 2688.329586][ C1] ? rcu_check_gp_kthread_starvation+0x31b/0x450 [ 2688.335981][ C1] ? do_raw_spin_unlock+0x172/0x230 [ 2688.341229][ C1] ? rcu_sched_clock_irq+0x22a2/0x3100 [ 2688.346753][ C1] ? __pfx_lock_release+0x10/0x10 [ 2688.351846][ C1] ? __pfx_rcu_sched_clock_irq+0x10/0x10 [ 2688.357540][ C1] ? __asan_memcpy+0x3c/0x60 [ 2688.362221][ C1] ? update_process_times+0x175/0x220 [ 2688.367634][ C1] ? __pfx_update_process_times+0x10/0x10 [ 2688.373397][ C1] ? __pfx_tick_nohz_handler+0x10/0x10 [ 2688.378916][ C1] ? update_wall_time+0x1c/0x40 [ 2688.383825][ C1] ? tick_nohz_handler+0x376/0x530 [ 2688.388985][ C1] ? __pfx_tick_nohz_handler+0x10/0x10 [ 2688.394497][ C1] ? __hrtimer_run_queues+0x657/0xcc0 [ 2688.399913][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 2688.405673][ C1] ? ktime_get_update_offsets_now+0x201/0x310 [ 2688.411802][ C1] ? hrtimer_interrupt+0x31b/0x800 [ 2688.416967][ C1] ? __sysvec_apic_timer_interrupt+0x10f/0x450 [ 2688.423186][ C1] ? sysvec_apic_timer_interrupt+0x90/0xb0 [ 2688.429055][ C1] [ 2688.432016][ C1] [ 2688.435068][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2688.441286][ C1] ? ct_kernel_exit+0x139/0x190 [ 2688.446218][ C1] ? acpi_safe_halt+0x1a/0x20 [ 2688.450956][ C1] acpi_idle_enter+0xc5/0x160 [ 2688.455780][ C1] cpuidle_enter_state+0x85/0x500 [ 2688.460859][ C1] ? __pfx_tsc_verify_tsc_adjust+0x10/0x10 [ 2688.466739][ C1] cpuidle_enter+0x4e/0xa0 [ 2688.471206][ C1] do_idle+0x313/0x3f0 [ 2688.475324][ C1] ? __pfx_do_idle+0x10/0x10 [ 2688.479964][ C1] cpu_startup_entry+0x4f/0x60 [ 2688.484784][ C1] start_secondary+0x220/0x2b0 [ 2688.489609][ C1] ? __pfx_start_secondary+0x10/0x10 [ 2688.494951][ C1] common_startup_64+0x13e/0x148 [ 2688.499956][ C1]