last executing test programs: 16m24.832216397s ago: executing program 4 (id=715): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$gtp(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r3, @ANYBLOB='\a\x00', @ANYRES32, @ANYBLOB="08000400000000000c0003000000000000000100080005000000000008000100", @ANYRES32=0x0, @ANYBLOB="0800020000000000060006"], 0x50}}, 0x0) 16m24.561868189s ago: executing program 4 (id=719): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000400000000000008000000180001801400020073797a5f74756e0000000000000000001c0002800400010014"], 0x48}, 0x1, 0x0, 0x0, 0x20004084}, 0x0) 16m24.30594843s ago: executing program 4 (id=722): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000006c0)=@allocspi={0x144, 0x16, 0x1, 0x0, 0x0, {{{@in6=@mcast1, @in6=@dev={0xfe, 0x80, '\x00', 0x1d}, 0x0, 0x0, 0x4e22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x33}, @in=@broadcast, {0x0, 0x0, 0x0, 0xfffffffffffffffd}, {}, {}, 0x0, 0x0, 0xa, 0x0, 0x0, 0x8285df75ef56f1f}, 0x5, 0x5}, [@algo_auth_trunc={0x4c, 0x14, {{'vmac64(seed)\x00'}, 0x0, 0x60}}]}, 0x144}, 0x1, 0x0, 0x0, 0x40011}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff02000000000000000000000000000100"/69], 0xfdef) 16m23.79209935s ago: executing program 4 (id=730): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in6=@loopback, @in6=@dev, 0x0, 0x0, 0x3, 0x0, 0xa}, {0x0, 0x0, 0x3683}, {0x0, 0x1}}, {{@in6=@loopback, 0x0, 0x2b}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x3}}, 0xe8) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x10}}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[], 0x10}}, 0x0) 16m23.513583841s ago: executing program 4 (id=734): bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$restrict_keyring(0x1d, r0, 0x0, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000040)='asymmetric\x00', &(0x7f0000000000)=@chain) 16m23.373557362s ago: executing program 4 (id=737): bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x50) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a31000000001400078005001500070000000800124000000000050005000200000005000400000000000d000300686173683a6e6574"], 0x5c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10040047}, 0x240008c4) 16m7.957974755s ago: executing program 32 (id=737): bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x50) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a31000000001400078005001500070000000800124000000000050005000200000005000400000000000d000300686173683a6e6574"], 0x5c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10040047}, 0x240008c4) 5m49.331808574s ago: executing program 3 (id=5178): ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000140)) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, 0x0, 0x0) ioctl$HIDIOCGNAME(0xffffffffffffffff, 0x80404806, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000500)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa802, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) close(r1) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xb, 0xd}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) recvmmsg(r4, &(0x7f0000005140)=[{{0x0, 0x0, &(0x7f0000001a80)=[{0x0}, {&(0x7f0000003080)=""/4096, 0x1000}], 0x2}, 0x3}], 0x1, 0x0, 0x0) 5m41.628230908s ago: executing program 3 (id=5208): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x3, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0xfffffffffffffdf4, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000400)='task_rename\x00', r1}, 0x18) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x10, 0x4, 0x8, 0x7, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000940)={{r3}, &(0x7f00000008c0), &(0x7f0000000900)=r2}, 0x20) 5m41.401286951s ago: executing program 3 (id=5212): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'ipvlan0\x00', 0x0}) sendmsg$ETHTOOL_MSG_DEBUG_SET(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000fedbdf2508000000180002801400038010", @ANYRES32=r3], 0x38}, 0x1, 0x0, 0x0, 0x4000814}, 0x0) 5m41.076592382s ago: executing program 3 (id=5214): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$bind(&(0x7f0000000200)='./file0\x00', &(0x7f0000000680)='./file0/../file0/../file0/../file0\x00', 0x0, 0x1b73404, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x9}}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000002c00)=ANY=[@ANYBLOB="b0"], 0xb0) getresuid(&(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) chroot(&(0x7f0000000040)='./file0/../file0/../file0/../file0\x00') r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='./file0/../file0/../file0/../file0\x00') 5m40.557489422s ago: executing program 3 (id=5216): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r4, 0x0, 0xf3a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) write(r1, &(0x7f0000000240)="94", 0x1) vmsplice(r4, &(0x7f0000000380)=[{&(0x7f0000013580)="0dd2e7c8926dc6acd0ae6c178054e95986faff9544de5fc4c30adf404da41181a77466ac5075905ea5f50134fdd517a957fe2ee59b61f9fe8d7aabe595ea23de2723e437af0423a56686a4c2d957be1a0ab922fbbd3cb1d8c6ab0d58440a327c8eb05d445b4ac5f20abe449e4084f8b996268d0564f67980d3ed3479e0edfe5cec7b4f89bface391c9c4c58ad123b91c33173c72326d1df18804a9ea20f9ece48f784d8ca2318e3d2b316666b5dfb7295c4915989d5bcb120e8fedaa97b93a137c256ce4", 0xc4}, {&(0x7f0000013680)="c578381bf5113dad8319d9ea5294285ae9a90384ce23866477bef9de4399237d8b3522c9c194e71edaf3332a2f169682f9d8fa271683d4d441b710409e506333e0c3b64e52e8720734b6787f4a84f5bebb046649c6c697d978affd349031b2cd874c7a8961a586a9f2d62f945e7a5bf2f5f7a31684c0503704881d2578a2a98ac3ef4e4a4b0dcdb70db735d5c1652eed3848b2dd4131bb0eb7", 0x99}], 0x2, 0x0) tee(r0, r4, 0x8f5, 0x100000000000000) write(r2, 0x0, 0x0) 5m40.212602878s ago: executing program 3 (id=5220): ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000140)) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, 0x0, 0x0) ioctl$HIDIOCGNAME(0xffffffffffffffff, 0x80404806, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000500)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa802, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) close(r1) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xb, 0xd}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) recvmmsg(r4, &(0x7f0000005140)=[{{0x0, 0x0, &(0x7f0000001a80)=[{0x0}, {&(0x7f0000003080)=""/4096, 0x1000}], 0x2}, 0x3}], 0x1, 0x0, 0x0) 5m38.947317722s ago: executing program 33 (id=5220): ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000140)) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, 0x0, 0x0) ioctl$HIDIOCGNAME(0xffffffffffffffff, 0x80404806, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000500)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa802, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) close(r1) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xb, 0xd}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) recvmmsg(r4, &(0x7f0000005140)=[{{0x0, 0x0, &(0x7f0000001a80)=[{0x0}, {&(0x7f0000003080)=""/4096, 0x1000}], 0x2}, 0x3}], 0x1, 0x0, 0x0) 16.864225453s ago: executing program 6 (id=6292): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0241, 0x0) socket$inet(0x2, 0x3, 0x5) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x9, 0x2, 0x56d, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000600), &(0x7f0000001f80), 0xfffffffb, r1}, 0x38) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200), &(0x7f00000004c0), 0x1000, r1}, 0x38) syz_init_net_socket$ax25(0x3, 0x2, 0xcb) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003b000b03d25a806c8c6394f90324fc60100000000a000200053582c137153e37000c0a80fc0b1000f835", 0x33fe0}], 0x1}, 0x0) r5 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r5, 0x114, 0x8, &(0x7f00000008c0), 0x4) setsockopt$PNPIPE_HANDLE(r5, 0x113, 0x3, &(0x7f00000000c0)=0x6, 0x4) close(r5) pipe(&(0x7f0000000100)) setsockopt$packet_int(r3, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1e}}, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r6}, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_DAT_CACHE(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000700)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB="05a300000000000000000d"], 0x1c}}, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1f, 0x13, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002420702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000022850000009400000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="034888a809003200030030"], 0xfdef) 14.514912345s ago: executing program 1 (id=6299): r0 = socket$kcm(0x10, 0x3, 0x10) quotactl_fd$Q_GETFMT(r0, 0xffffffff80000400, 0x0, 0x0) r1 = socket(0x1a, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8000002000000, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) syz_emit_ethernet(0x4e, &(0x7f0000000340)=ANY=[], 0x0) recvmsg$unix(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)}, 0x2141) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = epoll_create1(0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000180)={0xc0002000}) ioctl$TCSETSW2(r4, 0x402c542c, &(0x7f0000000040)={0x4, 0x80000000, 0x5, 0x0, 0x0, "362e851f84882fb90efa3fa665d2eb144970e2", 0x8, 0x81}) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) r6 = socket$unix(0x1, 0x1, 0x0) bind$unix(r6, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) mknod(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) 13.318085686s ago: executing program 6 (id=6301): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040), 0x100, 0x0) pwritev2(r0, &(0x7f00000005c0)=[{&(0x7f00000003c0)="af80c8c3dcc7ff6a7243eec2873fc1dfa8a28f92cf7fe26c7b80af26d3c3c2b649be0cd98f4980d2cd2cec455e0df2ef7d3f72d7cf6453a5c37ad403aa99eaee5ad6d5736e3e21b8359bbe1c8172a469edf02c5676100582ca4fe923d45647c60b0ebd10c2cb41137890bb4a3073acdc128e10", 0x73}, {&(0x7f0000000440)="2082ef15ee7de17aa24c5eb8b6309c1d6732841d89acc7829f0dea15e1cb686fd35f145edbc79a6c4f168c54747a7a930ec8fdae13cdd5de3d0119c0a706db5a86165b485762485b5ffa0adbdb8a8d5e09e3c4666544a85b02fe8f492a4ffa0359d4c00aeda69a7acc3ca2cb6c2645d8e44fccae569f9e64bfabf09c40f590d4691fab8aeb329be3bb0d4bdd5b8adf95d449b746e6ce5ecb06b649189e2538f7b75036f26bf4d600c3175c3d3fe1df97e8c7e10a", 0xb4}, {&(0x7f0000000500)="714a58a58f01aeec3a2ab4974073cdc58b07763406f7bffa915dffeaa669419f2a6d4b578261733580f309ffd34e81a49c073387124997e9e1aaf562b4cb6727a55149da1a62c7916d106ac46f4aa64a29c74aa3e48dee5efc2a3feecaf89163f04f7b795224d59abef220739a08fe519e1f4a3d68933c519760749659cad217b1462855cdda619d82c62682eec2ebeeb7", 0x91}, {&(0x7f0000000340)="d006ffa859082c7f10f5f426d474d69bbb66fc8c02988671cfd72a382d01d6", 0x1f}], 0x4, 0xfffffffc, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x140, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="020300020c00000000000000000000000200080008000000d700000000000000030006003c00000002004e20ac141400000000000000000002000100000000000000090000000080030005000000000002"], 0x60}, 0x1, 0x7}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180200000002000000000000000000008500000027000000850000000500000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x0, 0xe, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f0800", 0x0, 0x1302, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 12.344641812s ago: executing program 1 (id=6303): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000001000390400"/20, @ANYRES32=r3, @ANYBLOB="059900f3ffffff111800128008000100677470000c000280050005"], 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x8000) sendto$packet(r0, 0x0, 0x0, 0x4c0c0, &(0x7f0000000300)={0x11, 0x7, r3, 0x1, 0xa, 0x6, @remote}, 0x14) 12.195022447s ago: executing program 6 (id=6305): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_STATION(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000010c0)={0x44, r0, 0xb97534d5fe9704cf, 0x0, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x580}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x10}]}, 0x44}}, 0xc0c0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) setsockopt$inet_int(r2, 0x0, 0x13, &(0x7f0000000040), 0x4) 11.617370471s ago: executing program 1 (id=6306): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mount(&(0x7f00000000c0)=@nullb, &(0x7f0000000040)='.\x00', &(0x7f0000000140)='f2fs\x00', 0x0, 0x0) 11.599239661s ago: executing program 6 (id=6307): mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000007, 0x2172, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x5, 0x0, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x2) syz_io_uring_setup(0x1e21, &(0x7f0000000200)={0x0, 0xa871, 0x4000, 0x0, 0x2000000}, &(0x7f0000002000)=0x0, 0x0) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f0000000b00)={0x4, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042"}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000f40)={0x101, "7bb9595931028deda525e19bdeffafde2500f6d15c9e31df9454310ad7c18e65", 0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$rtc(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x1, 0x3}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x4, 0x400000000, 0x4, 0x7fffffff}, 0x0, 0x0) close_range(0xffffffffffffffff, r4, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x22}) r6 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r6, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e24, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000000600)=ANY=[], 0x10b8}, 0x200008c0) r7 = creat(&(0x7f0000000000)='./file0\x00', 0xecf86c37d53049cc) close(r7) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="40000000100001042d1c624f000e000000000000", @ANYRES32=0x0, @ANYBLOB="2b030000004000002000128008000100677470001400028008000100", @ANYRES32=r9, @ANYBLOB="3d283086", @ANYRES32=r9, @ANYBLOB], 0x40}}, 0x0) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 9.974700086s ago: executing program 1 (id=6312): openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/asound/timers\x00', 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$tipc(0x1e, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[], 0x50) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42f82, 0x0) r4 = fsopen(&(0x7f0000000140)='vfat\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000001100)='iocharset', &(0x7f0000001140)='\xe0^@&&}\'\x00', 0x0) ioctl$SNDCTL_DSP_SPEED(r3, 0xc0045002, &(0x7f0000000180)) write$dsp(r3, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000553000/0x3000)=nil, 0x3000, 0x2000002, 0x1010, 0xffffffffffffffff, 0x0) ioctl$PIO_UNIMAP(r5, 0x4b52, &(0x7f0000000100)={0xfffffffffffffcf0, 0x0}) ioctl$VIDIOC_SUBDEV_S_SELECTION(0xffffffffffffffff, 0xc040563e, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x4, {0x0, 0x7, 0x100, 0x3}}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_migrate_task\x00', 0xffffffffffffffff, 0x0, 0x2}, 0x1a) keyctl$join(0x1, &(0x7f0000000100)={'syz', 0x3}) 8.09119191s ago: executing program 2 (id=6314): r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x2, 0x0, 0x0) 7.085584072s ago: executing program 0 (id=6315): syz_emit_ethernet(0x76, &(0x7f0000000000)={@broadcast, @random="6c7621d7cc94", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "fec000", 0x40, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "98a350", 0x0, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x2}, @private1, [@hopopts={0x11}], "fafb17c103001c19"}}}}}}}, 0x0) 6.505581969s ago: executing program 0 (id=6316): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x400, 0x0, 0x32}, 0x9c) bind$inet6(0xffffffffffffffff, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) fallocate(r0, 0x11, 0x9, 0xfd) mknodat(0xffffffffffffffff, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) chdir(&(0x7f00000000c0)='./bus\x00') mkdir(&(0x7f0000000240)='./bus\x00', 0x0) r1 = syz_io_uring_setup(0x4db3, &(0x7f0000000440)={0x0, 0xc3f0, 0x2, 0x0, 0x100035d}, &(0x7f0000000000), &(0x7f00000001c0)) mkdir(&(0x7f0000000180)='./file0\x00', 0x334b2c0a33ad3927) syz_io_uring_setup(0x148b4, &(0x7f0000000100)={0x0, 0x5865, 0x7e, 0x3, 0x1c8, 0x0, r1}, &(0x7f0000000040), &(0x7f0000000200)) 6.489139995s ago: executing program 2 (id=6317): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000001000390400"/20, @ANYRES32=r3, @ANYBLOB="059900f3ffffff111800128008000100677470000c000280050005"], 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x8000) sendto$packet(r0, 0x0, 0x0, 0x4c0c0, &(0x7f0000000300)={0x11, 0x7, r3, 0x1, 0xa, 0x6, @remote}, 0x14) 6.381397398s ago: executing program 5 (id=6318): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r0, 0x18000000000002a0, 0x204, 0xfffff000, &(0x7f0000000040)="5aee41dea43e63a3f7fb7f11c72b", 0x0, 0xf000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 6.368406323s ago: executing program 6 (id=6319): r0 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) r2 = openat$kvm(0xffffff9c, &(0x7f0000000140), 0x41, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x2, &(0x7f0000000040)=0x10, 0x4) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f0000000040)) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_PIT(r3, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x4}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$BTRFS_IOC_QUOTA_CTL(r0, 0xc0109428, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r5, 0xffffffffffffffff, 0x200000000000000) 5.388990231s ago: executing program 1 (id=6320): openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) syz_open_dev$dmmidi(0x0, 0x6, 0x709b01) r1 = syz_open_dev$cec(&(0x7f0000000d00), 0x0, 0x0) r2 = syz_open_dev$cec(&(0x7f00000000c0), 0x0, 0x800) ioctl$CEC_S_MODE(r2, 0x40046109, &(0x7f0000000040)=0x31) ioctl$CEC_ADAP_S_LOG_ADDRS(r1, 0xc05c6104, &(0x7f0000000280)={"6d71f879", 0x401, 0x8, 0x9, 0x0, 0x0, "244a18d1c4e6469a005caf0c0ff58a", "ce4250d8", "1f020100", '\x00@\x00', ["27e203a56a36ac4f0b8b8c4f", "5e10229555954b0f02cd1469", "df006b40e4d22b8a7fa27b5a", "00040000000000fc2300"]}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) sendmsg$NFC_CMD_START_POLL(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYRES32=0x0, @ANYBLOB="08400e000000002097d0be3de4730aaf03477d47eeae5099e7884e20866ce9f1fab8f8575aa768887d6eb8d4c23bbc7f5cdb9c3896f14580b5ae929d923d3db0ee79ce3e0f25e18e426d63be0c9b1d67be9fa1baee84006b3514a6739635c99aaa2ce1902a373b9a388e7ff1f4209ff2848b7ca08199f9e13a9eaa2f589b7d"], 0x24}, 0x1, 0x0, 0x0, 0x8090}, 0x0) r5 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MIF(r5, 0x29, 0xca, &(0x7f0000000000)={0x4, 0x1, 0x4}, 0xc) setsockopt$MRT6_FLUSH(r5, 0x29, 0xd4, &(0x7f0000000080)=0xa, 0x4) getsockopt$IP_VS_SO_GET_VERSION(0xffffffffffffffff, 0x0, 0x480, &(0x7f00000000c0), 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r6 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) r7 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122"], 0x0) syz_usb_control_io$hid(r7, &(0x7f00000001c0)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_open_dev$evdev(0x0, 0x6828, 0x0) dup3(r6, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x5, 0x0, 0x0) 5.38851297s ago: executing program 5 (id=6321): r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000ac0)="580000001400add427323b472545b4560a117fffffff81000e220e227f000001925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff00007edcff48d744", 0x58}], 0x1) 5.333777309s ago: executing program 2 (id=6322): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb2570000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000001c0)='sched_switch\x00'}, 0xe) mknodat$loop(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000c00)=ANY=[@ANYRES32=r2, @ANYRES32, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20) sendmsg$inet(r0, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) 4.813234819s ago: executing program 0 (id=6323): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x400, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c) sendto$inet6(r1, &(0x7f0000847fff)='X', 0x1, 0x0, 0x0, 0x0) fallocate(r0, 0x11, 0x9, 0xfd) shutdown(r1, 0x2) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) mknodat(0xffffffffffffffff, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) chdir(&(0x7f00000000c0)='./bus\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdir(&(0x7f0000000240)='./bus\x00', 0x0) renameat2(r2, &(0x7f00000001c0)='./file0\x00', r2, &(0x7f0000000200)='./bus/file0\x00', 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) getdents64(r3, &(0x7f0000000f80)=""/4096, 0x1000) 4.729749473s ago: executing program 5 (id=6324): symlink(&(0x7f0000000300)='./file1\x00', 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x70bd2d, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1001, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000440)=0x2) clock_nanosleep(0x8, 0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x301, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0xc, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x1}]}]}], {0x14}}, 0x74}, 0x1, 0x0, 0x0, 0x400c041}, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0x5, 0x6576, 0x9}) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, 0xffffffffffffffff, 0x100000) bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000100)=@base={0x18, 0x4, 0x41, 0x0, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4002, 0x5, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socket$nl_generic(0x10, 0x3, 0x10) getpid() getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x11, 0x0, &(0x7f00000000c0)) 3.554663355s ago: executing program 2 (id=6325): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{}, {0x10000002}], 0x10, 0x0, @void, @value}, 0x90) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) recvmsg$unix(r4, 0x0, 0x0) setsockopt$sock_attach_bpf(r3, 0x84, 0x64, &(0x7f0000000000), 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r7) recvmsg$unix(r6, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000)=r8, 0x10) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x50, 0x2, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_NETMASK={0x5, 0x14, 0xf}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x50}}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) 3.11220442s ago: executing program 0 (id=6326): openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x2000000000000001, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x140, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r3, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100000000000000000002000000140001800500020001"], 0x28}, 0x1, 0x0, 0x0, 0x20044811}, 0x2000c094) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000100)=ANY=[@ANYBLOB="3800000003140100000000000000000009000200"], 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x8020) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='&\x00\x00\x00'], 0x50) write(0xffffffffffffffff, &(0x7f0000000000)='\"', 0x1) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000000)) 3.018117548s ago: executing program 6 (id=6327): openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/asound/timers\x00', 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) socket$tipc(0x1e, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0700000004000000090000000100000000000000", @ANYRES32, @ANYBLOB='\x00'/17, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42f82, 0x0) r4 = fsopen(&(0x7f0000000140)='vfat\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000001100)='iocharset', &(0x7f0000001140)='\xe0^@&&}\'\x00', 0x0) ioctl$SNDCTL_DSP_SPEED(r3, 0xc0045002, &(0x7f0000000180)) write$dsp(r3, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) 2.862025863s ago: executing program 5 (id=6328): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xb, 0x10, &(0x7f0000000040)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffff5}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x8300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) writev(r0, &(0x7f0000000280), 0x0) 1.839956942s ago: executing program 2 (id=6329): lsm_get_self_attr(0x64, &(0x7f00000000c0)={0x0, 0x0, 0xe3, 0xc3, ""/195}, &(0x7f0000000200)=0xe3, 0x0) msgget$private(0x0, 0xafb0e20fef6483ff) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) sched_setscheduler(0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r3, &(0x7f0000000280)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) 1.185539545s ago: executing program 1 (id=6330): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0241, 0x0) socket$inet(0x2, 0x3, 0x5) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x9, 0x2, 0x56d, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000600), &(0x7f0000001f80), 0xfffffffb, r1}, 0x38) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200), &(0x7f00000004c0), 0x1000, r1}, 0x38) syz_init_net_socket$ax25(0x3, 0x2, 0xcb) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003b000b03d25a806c8c6394f90324fc60100000000a000200053582c137153e37000c0a80fc0b1000f835", 0x33fe0}], 0x1}, 0x0) r5 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r5, 0x114, 0x8, &(0x7f00000008c0), 0x4) setsockopt$PNPIPE_HANDLE(r5, 0x113, 0x3, &(0x7f00000000c0)=0x6, 0x4) close(r5) pipe(&(0x7f0000000100)) setsockopt$packet_int(r3, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1e}}, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r6}, 0x10) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000700)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="05a300000000000000000d"], 0x1c}}, 0x0) 274.066629ms ago: executing program 2 (id=6331): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) dup(r0) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) dup(r1) syz_open_procfs(0xffffffffffffffff, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000000)) socket$inet_icmp_raw(0x2, 0x3, 0x1) pipe(&(0x7f00000000c0)) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00141202800800010008000000060002000100000008000500", @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00'], 0x54}}, 0x0) 229.066739ms ago: executing program 0 (id=6332): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000001000390400"/20, @ANYRES32=r3, @ANYBLOB="059900f3ffffff111800128008000100677470000c000280050005"], 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x8000) sendto$packet(r0, &(0x7f0000000640), 0x0, 0x4c0c0, &(0x7f0000000300)={0x11, 0x7, r3, 0x1, 0xa, 0x6, @remote}, 0x14) 80.144691ms ago: executing program 5 (id=6333): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xc0}}, 0x0) 69.196102ms ago: executing program 0 (id=6334): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000004bc0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000401}, 0x44084) r4 = socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect$cdc_ncm(0x1, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010000100"/20, @ANYRES32=0x0, @ANYBLOB="040101000000000014000300766c616e30000000000000000000000008000a00", @ANYRES32=r5], 0x3c}}, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{}], 0x1}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r3, {}, {}, {0x8, 0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x8881}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r7) 0s ago: executing program 5 (id=6335): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb2570000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000001c0)='sched_switch\x00'}, 0xe) mknodat$loop(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000c00)=ANY=[@ANYRES32=r2, @ANYRES32, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20) sendmsg$inet(r0, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) kernel console output (not intermixed with test programs): llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 705.880089][T17872] program syz.3.4610 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 706.586165][ T30] kauditd_printk_skb: 60 callbacks suppressed [ 706.586184][ T30] audit: type=1326 audit(1746317699.101:1186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17881 comm="syz.0.4613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdda3d8e969 code=0x7ffc0000 [ 706.697077][ T30] audit: type=1326 audit(1746317699.101:1187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17881 comm="syz.0.4613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdda3d8e969 code=0x7ffc0000 [ 706.760541][ T30] audit: type=1326 audit(1746317699.111:1188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17881 comm="syz.0.4613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fdda3d8e969 code=0x7ffc0000 [ 706.787665][ T30] audit: type=1326 audit(1746317699.111:1189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17881 comm="syz.0.4613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdda3d8e969 code=0x7ffc0000 [ 706.813969][ T30] audit: type=1326 audit(1746317699.111:1190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17881 comm="syz.0.4613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdda3d8e969 code=0x7ffc0000 [ 706.846897][ T30] audit: type=1326 audit(1746317699.151:1191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17881 comm="syz.0.4613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fdda3d8e969 code=0x7ffc0000 [ 706.851893][T17884] netlink: 12 bytes leftover after parsing attributes in process `wg1'. [ 706.869183][ T30] audit: type=1326 audit(1746317699.151:1192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17881 comm="syz.0.4613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdda3d8e969 code=0x7ffc0000 [ 706.912263][ T30] audit: type=1326 audit(1746317699.151:1193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17881 comm="syz.0.4613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdda3d8e969 code=0x7ffc0000 [ 706.948255][ T30] audit: type=1326 audit(1746317699.151:1194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17881 comm="syz.0.4613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fdda3d8e969 code=0x7ffc0000 [ 707.000674][ T30] audit: type=1326 audit(1746317699.151:1195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17881 comm="syz.0.4613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdda3d8e969 code=0x7ffc0000 [ 707.831282][T17888] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 707.850009][T17888] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 710.828402][T17918] IPv6: Can't replace route, no match found [ 710.879090][T17923] netlink: 12 bytes leftover after parsing attributes in process `wg1'. [ 711.137089][T17934] program syz.1.4632 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 711.325784][T13702] usb 6-1: new full-speed USB device number 22 using dummy_hcd [ 711.508934][T13702] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 711.533062][T13702] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 711.549928][T13702] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 711.562779][T13702] usb 6-1: New USB device strings: Mfr=145, Product=0, SerialNumber=0 [ 711.573757][T13702] usb 6-1: Manufacturer: syz [ 711.584913][T13702] usb 6-1: config 0 descriptor?? [ 711.597263][T13702] hub 6-1:0.0: USB hub found [ 711.829573][T13702] hub 6-1:0.0: config failed, can't read hub descriptor (err -90) [ 712.234753][T13702] usbhid 6-1:0.0: can't add hid device: -71 [ 712.255507][T13702] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 712.299069][T13702] usb 6-1: USB disconnect, device number 22 [ 712.398230][T17955] netlink: 12 bytes leftover after parsing attributes in process `wg1'. [ 712.623883][T17959] netlink: 12 bytes leftover after parsing attributes in process `wg1'. [ 712.779115][T17962] program syz.1.4643 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 714.328484][T17990] netlink: 12 bytes leftover after parsing attributes in process `wg1'. [ 714.514828][T17993] netlink: 12 bytes leftover after parsing attributes in process `wg1'. [ 715.402981][T18002] program syz.3.4655 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 717.486203][T17995] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 717.510092][T17995] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 717.621928][T17995] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 717.638795][T17995] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 717.668569][T17995] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 717.688706][T17995] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 717.719573][T17995] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 717.727659][T17995] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 717.736562][T17995] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 717.743696][T17995] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 717.756866][T17995] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 718.883027][T18026] netlink: 12 bytes leftover after parsing attributes in process `wg1'. [ 718.991884][T18029] program syz.5.4666 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 719.805670][T15821] Bluetooth: hci3: command 0x0406 tx timeout [ 719.811822][ T5825] Bluetooth: hci1: command 0x0406 tx timeout [ 719.817984][ T5825] Bluetooth: hci2: command 0x0406 tx timeout [ 719.824091][ T5825] Bluetooth: hci4: command 0x0c1a tx timeout [ 719.830216][T15821] Bluetooth: hci0: command 0x0406 tx timeout [ 721.876001][ T5821] Bluetooth: hci0: command 0x0406 tx timeout [ 721.882396][ T5821] Bluetooth: hci4: command 0x0c1a tx timeout [ 721.889554][ T5821] Bluetooth: hci3: command 0x0406 tx timeout [ 721.897301][ T5821] Bluetooth: hci2: command 0x0406 tx timeout [ 721.903962][ T5821] Bluetooth: hci1: command 0x0406 tx timeout [ 723.860540][T18076] netlink: 12 bytes leftover after parsing attributes in process `wg1'. [ 723.955659][ T5825] Bluetooth: hci4: command 0x0c1a tx timeout [ 724.651828][T18110] netlink: 36 bytes leftover after parsing attributes in process `wg1'. [ 724.690815][T18110] netlink: 12 bytes leftover after parsing attributes in process `wg1'. [ 727.941933][T18196] netlink: 36 bytes leftover after parsing attributes in process `wg1'. [ 727.961526][T18196] netlink: 12 bytes leftover after parsing attributes in process `wg1'. [ 728.097738][T18201] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4702'. [ 730.080393][T18218] kvm: kvm [18217]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc1) = 0x4000 [ 730.109976][T18218] kvm: kvm [18217]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc1) = 0x4000 [ 730.136416][T18218] kvm: kvm [18217]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc1) = 0x4000 [ 730.159018][T18218] kvm: kvm [18217]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc1) = 0x4000 [ 730.174307][T18218] kvm: kvm [18217]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc1) = 0x4000 [ 730.201455][T18218] kvm: kvm [18217]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc1) = 0x4000 [ 730.218411][T18218] kvm: kvm [18217]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc1) = 0x4000 [ 730.232207][T18218] kvm: kvm [18217]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc1) = 0x4000 [ 730.243747][T18218] kvm: kvm [18217]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc1) = 0x4000 [ 730.255447][T18218] kvm: kvm [18217]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc1) = 0x4000 [ 731.683855][T18234] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 731.759974][T18241] netlink: 36 bytes leftover after parsing attributes in process `wg1'. [ 731.772262][T18241] netlink: 12 bytes leftover after parsing attributes in process `wg1'. [ 732.037902][T18254] input: syz1 as /devices/virtual/input/input5 [ 732.073182][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 732.073201][ T30] audit: type=1107 audit(1746317720.597:1202): pid=18247 uid=0 auid=4294967295 ses=4294967295 subj=_ msg='¯' [ 732.364470][T18264] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4717'. [ 733.005868][ T30] audit: type=1326 audit(1746317721.517:1203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18268 comm="syz.5.4726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f923ff8e969 code=0x7ffc0000 [ 733.081408][ T30] audit: type=1326 audit(1746317721.527:1204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18268 comm="syz.5.4726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f923ff8e969 code=0x7ffc0000 [ 733.106428][ T30] audit: type=1326 audit(1746317721.567:1205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18268 comm="syz.5.4726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f923ff8e969 code=0x7ffc0000 [ 733.131520][ T30] audit: type=1326 audit(1746317721.567:1206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18268 comm="syz.5.4726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f923ff8e969 code=0x7ffc0000 [ 733.178065][ T30] audit: type=1326 audit(1746317721.567:1207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18268 comm="syz.5.4726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f923ff8e969 code=0x7ffc0000 [ 733.266224][ T30] audit: type=1326 audit(1746317721.567:1208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18268 comm="syz.5.4726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=17 compat=0 ip=0x7f923ff8e969 code=0x7ffc0000 [ 733.288881][ T30] audit: type=1326 audit(1746317721.567:1209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18268 comm="syz.5.4726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f923ff8e969 code=0x7ffc0000 [ 733.299785][T18274] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 733.321372][ T30] audit: type=1326 audit(1746317721.567:1210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18268 comm="syz.5.4726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f923ff8e969 code=0x7ffc0000 [ 733.567214][T18279] netlink: 20 bytes leftover after parsing attributes in process `wg1'. [ 733.989425][T18279] netlink: 12 bytes leftover after parsing attributes in process `wg1'. [ 734.696831][T18318] netlink: 20 bytes leftover after parsing attributes in process `wg1'. [ 734.711020][T18318] netlink: 12 bytes leftover after parsing attributes in process `wg1'. [ 736.212651][T18347] netlink: 20 bytes leftover after parsing attributes in process `wg1'. [ 736.234386][T18347] netlink: 12 bytes leftover after parsing attributes in process `wg1'. [ 739.903014][ T30] audit: type=1326 audit(1746317728.427:1211): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=_ pid=18385 comm="syz.1.4763" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6fd858e969 code=0x0 [ 740.454395][ T30] audit: type=1326 audit(1746317728.977:1212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18379 comm="syz.5.4762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f923ff8e969 code=0x7fc00000 [ 740.528049][T18388] x_tables: duplicate underflow at hook 2 [ 740.888533][T18400] ip6gretap1: entered allmulticast mode [ 741.021781][T18412] tipc: Started in network mode [ 741.036238][T18412] tipc: Node identity 8e4c357e10eb, cluster identity 4711 [ 741.044942][T18412] tipc: Enabled bearer , priority 0 [ 741.046547][T18411] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 741.083865][T18408] tipc: Resetting bearer [ 741.122542][T18411] kvm: pic: non byte read [ 741.136038][T18411] kvm: pic: level sensitive irq not supported [ 741.136574][T18411] kvm: pic: non byte read [ 742.241415][ T3076] tipc: Node number set to 2661758334 [ 746.741300][T18408] tipc: Disabling bearer [ 747.164843][T18471] Bluetooth: MGMT ver 1.23 [ 747.257952][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.264309][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 749.300799][ T30] audit: type=1326 audit(1746317737.817:1213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18498 comm="syz.5.4801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f923ff8e969 code=0x7ffc0000 [ 749.328490][T18500] tipc: Enabling of bearer rejected, failed to enable media [ 749.389958][ T30] audit: type=1326 audit(1746317737.817:1214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18498 comm="syz.5.4801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f923ff8e969 code=0x7ffc0000 [ 749.421882][ T30] audit: type=1326 audit(1746317737.827:1215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18498 comm="syz.5.4801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f923ff8e969 code=0x7ffc0000 [ 749.527748][ T30] audit: type=1326 audit(1746317737.827:1216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18498 comm="syz.5.4801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f923ff8e969 code=0x7ffc0000 [ 749.670735][ T30] audit: type=1326 audit(1746317737.827:1217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18498 comm="syz.5.4801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f923ff8e969 code=0x7ffc0000 [ 750.375611][ T30] audit: type=1326 audit(1746317737.877:1218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18498 comm="syz.5.4801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f923ff8e969 code=0x7ffc0000 [ 750.424294][ T30] audit: type=1326 audit(1746317737.877:1219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18498 comm="syz.5.4801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f923ff8e969 code=0x7ffc0000 [ 750.448543][ T30] audit: type=1326 audit(1746317737.877:1220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18498 comm="syz.5.4801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f923ff8e969 code=0x7ffc0000 [ 750.532315][ T30] audit: type=1326 audit(1746317737.877:1221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18498 comm="syz.5.4801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f923ff8e969 code=0x7ffc0000 [ 750.580302][ T30] audit: type=1326 audit(1746317737.877:1222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18498 comm="syz.5.4801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f923ff8e969 code=0x7ffc0000 [ 750.725624][ T976] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 750.888574][ T976] usb 2-1: config 0 interface 0 altsetting 7 endpoint 0x81 has invalid wMaxPacketSize 0 [ 750.900195][ T976] usb 2-1: config 0 interface 0 has no altsetting 0 [ 750.914373][ T976] usb 2-1: New USB device found, idVendor=0079, idProduct=0011, bcdDevice= 0.00 [ 750.934074][ T976] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 750.950909][ T976] usb 2-1: config 0 descriptor?? [ 751.366767][ T976] dragonrise 0003:0079:0011.001F: unbalanced collection at end of report description [ 751.380829][ T976] dragonrise 0003:0079:0011.001F: parse failed [ 751.389748][ T976] dragonrise 0003:0079:0011.001F: probe with driver dragonrise failed with error -22 [ 752.319560][ T24] usb 2-1: USB disconnect, device number 23 [ 752.391733][T18541] tipc: Enabling of bearer rejected, failed to enable media [ 753.698563][T18565] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4821'. [ 755.008223][T18586] tipc: Started in network mode [ 755.020388][T18586] tipc: Node identity 6abd80291277, cluster identity 4711 [ 755.048459][T18586] tipc: Enabled bearer , priority 0 [ 755.084774][T18583] tipc: Resetting bearer [ 756.065643][ T5941] tipc: Node number set to 2026537001 [ 756.291144][T18610] netlink: 12 bytes leftover after parsing attributes in process `wg1'. [ 759.623226][T18583] tipc: Disabling bearer [ 759.631680][T18643] hub 9-0:1.0: USB hub found [ 759.636853][T18643] hub 9-0:1.0: 1 port detected [ 759.642460][T18593] tipc: Started in network mode [ 759.649721][T18593] tipc: Node identity 6, cluster identity 4711 [ 759.656941][T18593] tipc: Node number set to 6 [ 759.805849][T18648] netlink: 12 bytes leftover after parsing attributes in process `wg1'. [ 761.373676][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 761.374086][ T30] audit: type=1326 audit(1746317749.787:1229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18654 comm="syz.1.4852" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fd858e969 code=0x7ffc0000 [ 761.405302][ T30] audit: type=1326 audit(1746317749.787:1230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18654 comm="syz.1.4852" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fd858e969 code=0x7ffc0000 [ 762.564958][ T30] audit: type=1326 audit(1746317749.787:1231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18654 comm="syz.1.4852" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6fd858e969 code=0x7ffc0000 [ 763.188257][ T30] audit: type=1326 audit(1746317749.787:1232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18654 comm="syz.1.4852" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fd858e969 code=0x7ffc0000 [ 763.210123][ T30] audit: type=1326 audit(1746317749.787:1233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18654 comm="syz.1.4852" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fd858e969 code=0x7ffc0000 [ 763.232024][ T30] audit: type=1326 audit(1746317749.797:1234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18654 comm="syz.1.4852" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6fd858e969 code=0x7ffc0000 [ 763.253852][ T30] audit: type=1326 audit(1746317749.797:1235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18654 comm="syz.1.4852" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fd858e969 code=0x7ffc0000 [ 763.323963][ T30] audit: type=1326 audit(1746317749.797:1236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18654 comm="syz.1.4852" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fd858e969 code=0x7ffc0000 [ 763.420098][ T30] audit: type=1326 audit(1746317749.797:1237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18654 comm="syz.1.4852" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6fd858e969 code=0x7ffc0000 [ 763.524113][ T30] audit: type=1326 audit(1746317749.797:1238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18654 comm="syz.1.4852" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fd858e969 code=0x7ffc0000 [ 765.296000][T18696] netlink: 12 bytes leftover after parsing attributes in process `wg1'. [ 767.847115][T18729] bridge_slave_0: left allmulticast mode [ 767.853255][T18729] bridge_slave_0: left promiscuous mode [ 767.860022][T18729] bridge0: port 1(bridge_slave_0) entered disabled state [ 767.905342][T18731] netlink: 'syz.1.4876': attribute type 10 has an invalid length. [ 767.918645][T18729] bridge_slave_1: left allmulticast mode [ 767.932965][T18729] bridge_slave_1: left promiscuous mode [ 767.950280][T18729] bridge0: port 2(bridge_slave_1) entered disabled state [ 767.963485][T18734] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4876'. [ 767.997669][T18729] bond0: (slave bond_slave_0): Releasing backup interface [ 768.030265][T18729] bond0: (slave bond_slave_1): Releasing backup interface [ 768.071077][T18729] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 768.093717][T18729] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 768.112415][T18729] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 768.130890][T18729] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 773.117582][ T5941] usb 6-1: new full-speed USB device number 23 using dummy_hcd [ 773.702262][T18810] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4904'. [ 773.880388][ T5941] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 773.947470][ T5941] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 774.001210][ T5941] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 774.031855][ T5941] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 774.064478][ T5941] usb 6-1: SerialNumber: syz [ 774.900266][ T5941] usb 6-1: 0:2 : does not exist [ 775.037589][ T30] kauditd_printk_skb: 40 callbacks suppressed [ 775.037606][ T30] audit: type=1326 audit(1746317763.567:1279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18791 comm="syz.5.4899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f923ff8e969 code=0x7ffc0000 [ 775.122545][ T30] audit: type=1326 audit(1746317763.607:1280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18791 comm="syz.5.4899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f923ff8e969 code=0x7ffc0000 [ 775.181443][ T5941] usb 6-1: USB disconnect, device number 23 [ 775.203535][ T30] audit: type=1326 audit(1746317763.617:1281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18791 comm="syz.5.4899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f923ff8e969 code=0x7ffc0000 [ 775.275633][ T30] audit: type=1326 audit(1746317763.617:1282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18791 comm="syz.5.4899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f923ff8e969 code=0x7ffc0000 [ 775.325614][ T30] audit: type=1326 audit(1746317763.617:1283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18791 comm="syz.5.4899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f923ff8e969 code=0x7ffc0000 [ 775.365874][ T30] audit: type=1326 audit(1746317763.627:1284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18791 comm="syz.5.4899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f923ff8e969 code=0x7ffc0000 [ 775.415714][ T30] audit: type=1326 audit(1746317763.627:1285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18791 comm="syz.5.4899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f923ff8e969 code=0x7ffc0000 [ 775.440260][ T30] audit: type=1326 audit(1746317763.627:1286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18791 comm="syz.5.4899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f923ff8e969 code=0x7ffc0000 [ 775.463603][ T30] audit: type=1326 audit(1746317763.627:1287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18791 comm="syz.5.4899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=285 compat=0 ip=0x7f923ff8e969 code=0x7ffc0000 [ 775.489190][ T30] audit: type=1326 audit(1746317763.627:1288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18791 comm="syz.5.4899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f923ff8e969 code=0x7ffc0000 [ 775.882733][T18851] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 776.272435][T18858] netlink: 536 bytes leftover after parsing attributes in process `syz.3.4921'. [ 777.046550][T18868] netlink: 'syz.1.4922': attribute type 10 has an invalid length. [ 777.146060][T18871] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4922'. [ 777.716242][ T5865] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 778.540697][T18904] netlink: 536 bytes leftover after parsing attributes in process `syz.5.4937'. [ 778.605709][T13702] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 778.669878][ T5865] usb 4-1: Using ep0 maxpacket: 32 [ 778.677800][ T5865] usb 4-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 778.705588][ T5865] usb 4-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 778.719845][ T5865] usb 4-1: config 0 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 778.734293][ T5865] usb 4-1: config 0 interface 0 has no altsetting 0 [ 778.740992][ T5865] usb 4-1: New USB device found, idVendor=5543, idProduct=0781, bcdDevice= 0.00 [ 778.750143][ T5865] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 778.766557][ T5865] usb 4-1: config 0 descriptor?? [ 778.791227][T13702] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 778.807926][T13702] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 778.820922][T13702] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 778.838405][T13702] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 778.859400][T13702] usb 2-1: SerialNumber: syz [ 779.395687][T18916] x_tables: duplicate underflow at hook 3 [ 779.952090][T13702] usb 2-1: 0:2 : does not exist [ 779.958664][T13702] usb 2-1: unit 5: unexpected type 0x0d [ 779.976582][T13702] usb 2-1: USB disconnect, device number 24 [ 780.757810][ T5865] uclogic 0003:5543:0781.0020: ignoring exceeding usage max [ 781.021297][ T5865] uclogic 0003:5543:0781.0020: unbalanced collection at end of report description [ 781.040344][ T5865] uclogic 0003:5543:0781.0020: parse failed [ 781.046435][ T5865] uclogic 0003:5543:0781.0020: probe with driver uclogic failed with error -22 [ 781.058678][ T5865] usb 4-1: USB disconnect, device number 37 [ 781.951251][T18925] program syz.5.4943 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 782.382930][T18938] netlink: 536 bytes leftover after parsing attributes in process `syz.2.4948'. [ 782.483070][T18941] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4947'. [ 782.508021][T18941] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4947'. [ 783.604987][T18972] netlink: 536 bytes leftover after parsing attributes in process `syz.0.4959'. [ 784.312590][T18983] bridge0: port 2(bridge_slave_1) entered disabled state [ 784.396310][T18989] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4966'. [ 784.959162][T19006] netlink: 536 bytes leftover after parsing attributes in process `syz.0.4972'. [ 785.883531][T19024] overlayfs: failed to clone upperpath [ 787.136215][T19038] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 787.146073][T19038] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 787.782649][T19042] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4985'. [ 787.784910][T19040] netlink: 536 bytes leftover after parsing attributes in process `syz.2.4984'. [ 788.956134][T19066] program syz.1.4993 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 790.003322][T19080] netlink: 536 bytes leftover after parsing attributes in process `syz.0.4998'. [ 791.402439][T19101] overlayfs: failed to clone upperpath [ 791.768687][T19105] program syz.2.5006 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 792.193307][T19115] netlink: 536 bytes leftover after parsing attributes in process `syz.1.5010'. [ 792.933274][T19119] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5012'. [ 794.274216][T19134] program syz.3.5017 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 794.345201][T19138] sch_tbf: peakrate 2147483647 is lower than or equals to rate 2831599472947593698 ! [ 794.792406][T19156] netlink: 536 bytes leftover after parsing attributes in process `syz.1.5026'. [ 795.009586][T19158] kvm: pic: non byte write [ 795.397570][T19166] tipc: Enabled bearer , priority 0 [ 795.416086][T19162] tipc: Resetting bearer [ 795.481549][T19170] program syz.5.5029 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 795.630079][T19174] netlink: 12 bytes leftover after parsing attributes in process `wg1'. [ 796.539907][T19183] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5033'. [ 796.782111][T19183] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5033'. [ 799.227711][T19162] tipc: Disabling bearer [ 799.629463][T19205] netlink: 12 bytes leftover after parsing attributes in process `wg1'. [ 799.643029][T19206] program syz.1.5040 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 799.931804][T19214] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5044'. [ 799.964098][T19214] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5044'. [ 802.329025][T19239] tipc: Enabling of bearer rejected, failed to enable media [ 802.467324][T19243] netlink: 12 bytes leftover after parsing attributes in process `wg1'. [ 804.125878][T19278] tipc: Enabling of bearer rejected, failed to enable media [ 805.001241][T19287] netlink: 12 bytes leftover after parsing attributes in process `wg1'. [ 806.210774][T19307] tipc: Enabled bearer , priority 0 [ 806.223343][T19305] tipc: Resetting bearer [ 807.015738][ T3076] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 807.337190][ T3076] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 807.349432][ T3076] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 807.358756][ T3076] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 807.376169][ T3076] usb 6-1: config 0 descriptor?? [ 808.174355][ T3076] keytouch 0003:0926:3333.0021: fixing up Keytouch IEC report descriptor [ 808.209162][ T3076] input: HID 0926:3333 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0926:3333.0021/input/input6 [ 808.551438][ T3076] keytouch 0003:0926:3333.0021: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.5-1/input0 [ 808.762676][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.771672][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.103204][ T3076] usb 6-1: USB disconnect, device number 24 [ 809.304487][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 809.304506][ T30] audit: type=1326 audit(1746317797.827:1296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19340 comm="syz.2.5089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0eeb98e969 code=0x7ffc0000 [ 809.339929][ T30] audit: type=1326 audit(1746317797.827:1297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19340 comm="syz.2.5089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0eeb98e969 code=0x7ffc0000 [ 809.396795][ T30] audit: type=1326 audit(1746317797.827:1298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19340 comm="syz.2.5089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=190 compat=0 ip=0x7f0eeb98e969 code=0x7ffc0000 [ 809.430181][ T30] audit: type=1326 audit(1746317797.827:1299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19340 comm="syz.2.5089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0eeb98e969 code=0x7ffc0000 [ 809.454347][ T30] audit: type=1326 audit(1746317797.827:1300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19340 comm="syz.2.5089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0eeb98e969 code=0x7ffc0000 [ 809.487456][ T30] audit: type=1326 audit(1746317797.857:1301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19340 comm="syz.2.5089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=229 compat=0 ip=0x7f0eeb98e969 code=0x7ffc0000 [ 809.509842][ T30] audit: type=1326 audit(1746317797.857:1302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19340 comm="syz.2.5089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0eeb98e969 code=0x7ffc0000 [ 809.542011][ T30] audit: type=1326 audit(1746317797.857:1303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19340 comm="syz.2.5089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f0eeb98e969 code=0x7ffc0000 [ 809.576439][ T30] audit: type=1326 audit(1746317797.857:1304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19340 comm="syz.2.5089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0eeb98e969 code=0x7ffc0000 [ 809.608644][ T30] audit: type=1326 audit(1746317797.877:1305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19340 comm="syz.2.5089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=40 compat=0 ip=0x7f0eeb98e969 code=0x7ffc0000 [ 810.090830][T19366] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5098'. [ 810.107295][T19366] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5098'. [ 810.576976][ T5865] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 810.838761][ T5865] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 811.000389][ T5865] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 811.277466][ T5865] usb 3-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 811.291928][ T5865] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 811.304239][ T5865] usb 3-1: config 0 descriptor?? [ 811.987019][ T5865] lenovo 0003:17EF:6047.0022: hidraw0: USB HID v0.00 Device [HID 17ef:6047] on usb-dummy_hcd.2-1/input0 [ 812.353572][ T5865] lenovo 0003:17EF:6047.0022: Failed to switch F7/9/11 mode: -71 [ 812.365447][ T5865] lenovo 0003:17EF:6047.0022: Failed to switch middle button: -71 [ 812.374829][ T5865] lenovo 0003:17EF:6047.0022: Fn-lock setting failed: -71 [ 812.382699][ T5865] lenovo 0003:17EF:6047.0022: Sensitivity setting failed: -71 [ 812.437545][T19305] tipc: Disabling bearer [ 812.497370][ T5865] usb 3-1: USB disconnect, device number 28 [ 814.745062][ T30] kauditd_printk_skb: 15 callbacks suppressed [ 814.745080][ T30] audit: type=1326 audit(1746317803.267:1321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19430 comm="syz.3.5119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb02d8e969 code=0x7ffc0000 [ 814.781376][ T30] audit: type=1326 audit(1746317803.267:1322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19430 comm="syz.3.5119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb02d8e969 code=0x7ffc0000 [ 814.819972][ T30] audit: type=1326 audit(1746317803.307:1323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19430 comm="syz.3.5119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcb02d8e969 code=0x7ffc0000 [ 814.926800][ T30] audit: type=1326 audit(1746317803.307:1324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19430 comm="syz.3.5119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb02d8e969 code=0x7ffc0000 [ 814.948773][ T30] audit: type=1326 audit(1746317803.307:1325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19430 comm="syz.3.5119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb02d8e969 code=0x7ffc0000 [ 814.982316][ T30] audit: type=1326 audit(1746317803.307:1326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19430 comm="syz.3.5119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcb02d8e969 code=0x7ffc0000 [ 814.993233][T19433] ptrace attach of "./syz-executor exec"[19436] was attempted by "./syz-executor exec"[19433] [ 815.041711][ T30] audit: type=1326 audit(1746317803.307:1327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19430 comm="syz.3.5119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb02d8e969 code=0x7ffc0000 [ 815.063971][ T30] audit: type=1326 audit(1746317803.307:1328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19430 comm="syz.3.5119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb02d8e969 code=0x7ffc0000 [ 815.098371][ T30] audit: type=1326 audit(1746317803.307:1329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19430 comm="syz.3.5119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcb02d8e969 code=0x7ffc0000 [ 815.125064][ T30] audit: type=1326 audit(1746317803.307:1330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19430 comm="syz.3.5119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb02d8e969 code=0x7ffc0000 [ 816.378876][T19421] tipc: Enabling of bearer rejected, failed to enable media [ 816.390554][T19443] bridge0: port 2(bridge_slave_1) entered disabled state [ 816.398116][T19443] bridge0: port 1(bridge_slave_0) entered disabled state [ 816.408169][T19443] bridge0: entered allmulticast mode [ 816.421429][T19445] veth1_macvtap: left promiscuous mode [ 816.436892][T19445] macsec0: entered promiscuous mode [ 817.890885][T19478] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5137'. [ 817.950182][T19478] bridge_slave_1: left allmulticast mode [ 817.960259][T19478] bridge_slave_1: left promiscuous mode [ 817.967405][T19478] bridge0: port 2(bridge_slave_1) entered disabled state [ 817.983743][T19478] bridge_slave_0: left allmulticast mode [ 817.991952][T19478] bridge_slave_0: left promiscuous mode [ 818.004188][T19478] bridge0: port 1(bridge_slave_0) entered disabled state [ 818.165399][T19484] tipc: Started in network mode [ 818.175298][T19484] tipc: Node identity cee6c40cf4bb, cluster identity 4711 [ 818.207495][T19484] tipc: Enabled bearer , priority 0 [ 818.431758][T19488] tipc: Resetting bearer [ 818.482013][T19482] tipc: Resetting bearer [ 819.336319][ T24] tipc: Node number set to 979223564 [ 819.468385][T19511] netlink: 'syz.5.5147': attribute type 10 has an invalid length. [ 819.523371][T19513] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5147'. [ 820.296470][T19482] tipc: Disabling bearer [ 820.323440][T19510] bridge_slave_0: left allmulticast mode [ 820.331651][T19510] bridge_slave_0: left promiscuous mode [ 820.337717][T19510] bridge0: port 1(bridge_slave_0) entered disabled state [ 820.359867][T19510] bridge_slave_1: left allmulticast mode [ 820.367916][T19510] bridge_slave_1: left promiscuous mode [ 820.373842][T19510] bridge0: port 2(bridge_slave_1) entered disabled state [ 820.389117][T19510] bond0: (slave bond_slave_0): Releasing backup interface [ 820.414153][T19510] bond0: (slave bond_slave_1): Releasing backup interface [ 820.461235][T19525] bridge0: port 1(bridge_slave_0) entered disabled state [ 820.474284][T19525] bridge0: entered allmulticast mode [ 820.484636][T19526] bridge_slave_1: left allmulticast mode [ 820.494903][T19526] bridge_slave_1: left promiscuous mode [ 820.657012][T19526] bridge0: port 2(bridge_slave_1) entered disabled state [ 820.680891][T19526] bridge_slave_0: left allmulticast mode [ 820.687858][T19526] bridge_slave_0: left promiscuous mode [ 820.694437][T19526] bridge0: port 1(bridge_slave_0) entered disabled state [ 821.869814][T19556] tipc: Enabling of bearer rejected, failed to enable media [ 822.991801][T19571] bond0: (slave bond_slave_0): Releasing backup interface [ 823.093616][T19571] bond0: (slave bond_slave_1): Releasing backup interface [ 823.153630][T19587] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5166'. [ 823.174845][T19571] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 823.227898][T19591] netlink: 'syz.2.5166': attribute type 10 has an invalid length. [ 823.244249][T19571] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 823.282724][T19582] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5166'. [ 823.322105][T19595] tipc: Enabling of bearer rejected, failed to enable media [ 823.582322][T19609] syzkaller0: entered promiscuous mode [ 823.590862][T19609] syzkaller0: entered allmulticast mode [ 826.668100][T19642] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5190'. [ 828.005153][T19665] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5193'. [ 828.070570][T19667] netlink: 'syz.2.5193': attribute type 10 has an invalid length. [ 828.123639][T19660] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5193'. [ 829.344418][T19681] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5201'. [ 829.547814][ T30] kauditd_printk_skb: 44 callbacks suppressed [ 829.547833][ T30] audit: type=1326 audit(1746317818.067:1375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19686 comm="syz.5.5204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f923ff8e969 code=0x7ffc0000 [ 829.579195][ T30] audit: type=1326 audit(1746317818.077:1376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19686 comm="syz.5.5204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=43 compat=0 ip=0x7f923ff8e969 code=0x7ffc0000 [ 829.604154][ T30] audit: type=1326 audit(1746317818.077:1377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19686 comm="syz.5.5204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f923ff8e969 code=0x7ffc0000 [ 831.461831][T19713] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5212'. [ 833.607603][T19736] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5219'. [ 833.675898][T19737] netlink: 'syz.2.5219': attribute type 10 has an invalid length. [ 833.765959][T19740] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5219'. [ 833.797233][T18115] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 834.011069][T18115] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 834.134716][T19750] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5224'. [ 834.268677][T18115] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 834.394954][T18115] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 834.967710][T18115] bridge_slave_1: left allmulticast mode [ 834.979803][ T5821] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 834.983753][T18115] bridge_slave_1: left promiscuous mode [ 834.994620][ T5821] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 835.003072][ T5821] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 835.006115][T18115] bridge0: port 2(bridge_slave_1) entered disabled state [ 835.205696][ T5821] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 835.288456][ T5821] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 835.880036][T18115] bridge_slave_0: left allmulticast mode [ 835.895635][T18115] bridge_slave_0: left promiscuous mode [ 836.111111][T18115] bridge0: port 1(bridge_slave_0) entered disabled state [ 836.840171][T19776] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 837.084872][ T30] audit: type=1326 audit(1746317825.597:1378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19782 comm="syz.5.5233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f923ff8e969 code=0x7ffc0000 [ 837.123699][T19781] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5234'. [ 837.155722][ T30] audit: type=1326 audit(1746317825.597:1379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19782 comm="syz.5.5233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f923ff8e969 code=0x7ffc0000 [ 837.189090][ T30] audit: type=1326 audit(1746317825.607:1380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19782 comm="syz.5.5233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f923ff8e969 code=0x7ffc0000 [ 837.248094][ T30] audit: type=1326 audit(1746317825.607:1381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19782 comm="syz.5.5233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f923ff8e969 code=0x7ffc0000 [ 837.285395][ T30] audit: type=1326 audit(1746317825.607:1382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19782 comm="syz.5.5233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f923ff8e969 code=0x7ffc0000 [ 837.316702][ T30] audit: type=1326 audit(1746317825.607:1383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19782 comm="syz.5.5233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f923ff8e969 code=0x7ffc0000 [ 837.342119][ T30] audit: type=1326 audit(1746317825.607:1384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19782 comm="syz.5.5233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f923ff8e969 code=0x7ffc0000 [ 837.384706][ T30] audit: type=1326 audit(1746317825.607:1385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19782 comm="syz.5.5233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f923ff8e969 code=0x7ffc0000 [ 837.474136][ T30] audit: type=1326 audit(1746317825.607:1386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19782 comm="syz.5.5233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f923ff8e969 code=0x7ffc0000 [ 837.880841][ T30] audit: type=1326 audit(1746317825.637:1387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19782 comm="syz.5.5233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f923ff8e969 code=0x7ffc0000 [ 837.902162][ T5825] Bluetooth: hci1: command tx timeout [ 839.970207][ T5825] Bluetooth: hci1: command tx timeout [ 840.451087][T18115] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 840.464172][T18115] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 840.480841][T18115] bond0 (unregistering): Released all slaves [ 840.904354][T18115] tipc: Left network mode [ 841.793813][T19827] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5246'. [ 842.035739][ T5825] Bluetooth: hci1: command tx timeout [ 842.222934][T19759] chnl_net:caif_netlink_parms(): no params data found [ 842.286728][ T5941] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 842.403179][T18115] hsr_slave_0: left promiscuous mode [ 842.415146][T18115] hsr_slave_1: left promiscuous mode [ 842.422551][T18115] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 842.430242][T18115] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 842.465804][ T5941] usb 2-1: Using ep0 maxpacket: 16 [ 842.474446][ T5941] usb 2-1: config 0 interface 0 has no altsetting 0 [ 842.483529][ T5941] usb 2-1: New USB device found, idVendor=046d, idProduct=c24f, bcdDevice= 0.00 [ 842.502932][ T5941] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 842.525867][ T5941] usb 2-1: config 0 descriptor?? [ 842.568066][T18115] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 842.580014][T18115] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 842.633472][T18115] veth1_macvtap: left promiscuous mode [ 842.642823][T18115] veth0_macvtap: left promiscuous mode [ 842.649698][T18115] veth1_vlan: left promiscuous mode [ 842.655395][T18115] veth0_vlan: left promiscuous mode [ 843.440513][ T5941] logitech 0003:046D:C24F.0023: unknown main item tag 0x0 [ 843.464595][ T5941] logitech 0003:046D:C24F.0023: hidraw0: USB HID v0.06 Device [HID 046d:c24f] on usb-dummy_hcd.1-1/input0 [ 843.499951][ T5941] logitech 0003:046D:C24F.0023: no inputs found [ 843.713363][ T5941] usb 2-1: USB disconnect, device number 25 [ 844.165764][ T5825] Bluetooth: hci1: command tx timeout [ 844.862476][ T5941] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 845.933117][T18115] team0 (unregistering): Port device team_slave_1 removed [ 845.950054][ T5941] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 846.110778][ T5941] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 846.145748][ T5941] usb 2-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 846.154925][ T5941] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 846.199531][ T5941] usb 2-1: config 0 descriptor?? [ 846.243272][T18115] team0 (unregistering): Port device team_slave_0 removed [ 846.628571][ T5941] hid-steam 0003:28DE:1142.0024: item fetching failed at offset 3/5 [ 846.651112][ T5941] hid-steam 0003:28DE:1142.0024: steam_probe:parse of hid interface failed [ 846.659999][ T5941] hid-steam 0003:28DE:1142.0024: probe with driver hid-steam failed with error -22 [ 846.840156][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 846.840175][ T30] audit: type=1326 audit(1746317835.367:1394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19881 comm="syz.0.5265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdda3d8e969 code=0x7ffc0000 [ 846.849884][ T3076] usb 2-1: USB disconnect, device number 26 [ 846.925825][ T30] audit: type=1326 audit(1746317835.407:1395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19881 comm="syz.0.5265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdda3d8e969 code=0x7ffc0000 [ 846.953552][ T30] audit: type=1326 audit(1746317835.407:1396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19881 comm="syz.0.5265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdda3d8e969 code=0x7ffc0000 [ 847.155596][ T30] audit: type=1326 audit(1746317835.407:1397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19881 comm="syz.0.5265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdda3d8e969 code=0x7ffc0000 [ 847.215441][ T30] audit: type=1326 audit(1746317835.407:1398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19881 comm="syz.0.5265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdda3d8e969 code=0x7ffc0000 [ 847.658529][ T30] audit: type=1326 audit(1746317835.407:1399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19881 comm="syz.0.5265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdda3d8e969 code=0x7ffc0000 [ 847.681749][ T30] audit: type=1326 audit(1746317835.407:1400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19881 comm="syz.0.5265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdda3d8e969 code=0x7ffc0000 [ 848.320992][ T30] audit: type=1326 audit(1746317835.407:1401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19881 comm="syz.0.5265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdda3d8e969 code=0x7ffc0000 [ 848.327521][T19759] bridge0: port 1(bridge_slave_0) entered blocking state [ 848.360415][ T30] audit: type=1326 audit(1746317835.407:1402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19881 comm="syz.0.5265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdda3d8e969 code=0x7ffc0000 [ 848.384878][T19759] bridge0: port 1(bridge_slave_0) entered disabled state [ 848.394730][T19759] bridge_slave_0: entered allmulticast mode [ 848.407193][T19759] bridge_slave_0: entered promiscuous mode [ 848.413969][ T30] audit: type=1326 audit(1746317835.417:1403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19881 comm="syz.0.5265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdda3d8e969 code=0x7ffc0000 [ 848.438835][T19759] bridge0: port 2(bridge_slave_1) entered blocking state [ 848.447005][T19759] bridge0: port 2(bridge_slave_1) entered disabled state [ 848.454344][T19759] bridge_slave_1: entered allmulticast mode [ 848.467777][T19759] bridge_slave_1: entered promiscuous mode [ 848.730446][T19907] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 848.798500][T19759] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 848.889634][T19759] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 849.984524][T19759] team0: Port device team_slave_0 added [ 850.042422][T19759] team0: Port device team_slave_1 added [ 851.140582][ T5825] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 851.151007][T19759] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 851.284924][T19759] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 851.466245][T19759] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 851.480421][T19759] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 851.487964][T19759] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 851.534757][T19759] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 851.826486][T19936] binder: Unknown parameter 'context' [ 852.743908][T18115] IPVS: stop unused estimator thread 0... [ 852.778058][T19759] hsr_slave_0: entered promiscuous mode [ 852.865219][T19759] hsr_slave_1: entered promiscuous mode [ 853.096107][T19759] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 853.108628][T19759] Cannot create hsr debugfs directory [ 856.711742][T19973] netlink: 40 bytes leftover after parsing attributes in process `syz.5.5295'. [ 857.931582][T19759] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 857.969431][T19759] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 858.186004][T19759] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 858.209901][T19759] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 859.509517][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 859.509536][ T30] audit: type=1326 audit(1746317848.027:1408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20002 comm="syz.0.5303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdda3d8e969 code=0x7ffc0000 [ 859.517091][T20001] netlink: 'syz.1.5301': attribute type 12 has an invalid length. [ 859.553713][ T30] audit: type=1326 audit(1746317848.037:1409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20002 comm="syz.0.5303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdda3d8e969 code=0x7ffc0000 [ 859.768397][ T30] audit: type=1326 audit(1746317848.077:1410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20002 comm="syz.0.5303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdda3d8e969 code=0x7ffc0000 [ 859.791665][ T30] audit: type=1326 audit(1746317848.077:1411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20002 comm="syz.0.5303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdda3d8e969 code=0x7ffc0000 [ 859.834828][ T30] audit: type=1326 audit(1746317848.077:1412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20002 comm="syz.0.5303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdda3d8e969 code=0x7ffc0000 [ 859.999186][T20010] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5302'. [ 860.226159][ T30] audit: type=1326 audit(1746317848.097:1413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20002 comm="syz.0.5303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdda3d8e969 code=0x7ffc0000 [ 860.612398][ T30] audit: type=1326 audit(1746317848.157:1414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20002 comm="syz.0.5303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdda3d8e969 code=0x7ffc0000 [ 860.634168][ T30] audit: type=1326 audit(1746317848.157:1415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20002 comm="syz.0.5303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdda3d8e969 code=0x7ffc0000 [ 860.656786][ T30] audit: type=1326 audit(1746317848.157:1416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20002 comm="syz.0.5303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7fdda3d8e969 code=0x7ffc0000 [ 860.875406][ T30] audit: type=1326 audit(1746317848.167:1417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20002 comm="syz.0.5303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdda3d8e969 code=0x7ffc0000 [ 860.951861][T19759] 8021q: adding VLAN 0 to HW filter on device bond0 [ 861.615330][T19759] 8021q: adding VLAN 0 to HW filter on device team0 [ 861.682344][ T64] bridge0: port 1(bridge_slave_0) entered blocking state [ 861.689587][ T64] bridge0: port 1(bridge_slave_0) entered forwarding state [ 861.700212][ T64] bridge0: port 2(bridge_slave_1) entered blocking state [ 861.707481][ T64] bridge0: port 2(bridge_slave_1) entered forwarding state [ 861.743344][T19759] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 863.688069][T19759] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 864.061620][T20063] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 864.131863][T20068] tipc: New replicast peer: 255.255.255.255 [ 864.138868][T20068] tipc: Enabled bearer , priority 10 [ 864.336858][T19759] veth0_vlan: entered promiscuous mode [ 864.345821][T20073] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5323'. [ 864.370222][T20073] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5323'. [ 864.381462][T19759] veth1_vlan: entered promiscuous mode [ 864.445487][T19759] veth0_macvtap: entered promiscuous mode [ 864.478871][T19759] veth1_macvtap: entered promiscuous mode [ 864.536834][T19759] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 864.574791][T19759] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 864.617787][T19759] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 864.666863][T19759] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 864.687819][T19759] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 864.733416][T19759] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 864.769505][T19759] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 864.795548][T19759] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 864.818590][T19759] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 864.843656][T19759] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 865.538109][ T30] kauditd_printk_skb: 13 callbacks suppressed [ 865.538126][ T30] audit: type=1326 audit(1746317854.067:1431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20083 comm="syz.0.5327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdda3d8e969 code=0x7ffc0000 [ 865.735555][ T30] audit: type=1326 audit(1746317854.067:1432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20083 comm="syz.0.5327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdda3d8e969 code=0x7ffc0000 [ 865.759420][T18112] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 865.786483][T18112] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 865.809141][ T30] audit: type=1326 audit(1746317854.127:1433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20083 comm="syz.0.5327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdda3d8e969 code=0x7ffc0000 [ 866.104840][ T30] audit: type=1326 audit(1746317854.127:1434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20083 comm="syz.0.5327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdda3d8e969 code=0x7ffc0000 [ 866.125430][T18160] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 866.129999][ T30] audit: type=1326 audit(1746317854.127:1435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20083 comm="syz.0.5327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdda3d8e969 code=0x7ffc0000 [ 866.146518][T18160] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 866.183112][ T30] audit: type=1326 audit(1746317854.127:1436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20083 comm="syz.0.5327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdda3d8e969 code=0x7ffc0000 [ 866.920164][ T30] audit: type=1326 audit(1746317854.127:1437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20083 comm="syz.0.5327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdda3d8e969 code=0x7ffc0000 [ 866.972221][ T30] audit: type=1326 audit(1746317854.127:1438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20083 comm="syz.0.5327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdda3d8e969 code=0x7ffc0000 [ 867.045105][ T30] audit: type=1326 audit(1746317854.127:1439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20083 comm="syz.0.5327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=17 compat=0 ip=0x7fdda3d8e969 code=0x7ffc0000 [ 867.138527][ T30] audit: type=1326 audit(1746317854.127:1440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20083 comm="syz.0.5327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdda3d8e969 code=0x7ffc0000 [ 867.231317][T20115] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5335'. [ 867.251269][T20115] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5335'. [ 869.548862][T20157] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5350'. [ 869.579651][T20157] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5350'. [ 870.123741][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.130295][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 874.359845][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 874.359893][ T30] audit: type=1800 audit(1746317862.857:1442): pid=20202 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.6.5364" name="file0" dev="overlay" ino=72 res=0 errno=0 [ 875.871638][T20214] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 878.289146][ T30] audit: type=1326 audit(1746317866.817:1443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20252 comm="syz.6.5384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f561e78e969 code=0x7ffc0000 [ 878.625607][ T30] audit: type=1326 audit(1746317866.817:1444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20252 comm="syz.6.5384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f561e78e969 code=0x7ffc0000 [ 878.969389][ T30] audit: type=1326 audit(1746317866.817:1445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20252 comm="syz.6.5384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f561e78e969 code=0x7ffc0000 [ 878.999600][ T30] audit: type=1326 audit(1746317866.817:1446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20252 comm="syz.6.5384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f561e78e969 code=0x7ffc0000 [ 879.021974][ T30] audit: type=1326 audit(1746317866.817:1447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20252 comm="syz.6.5384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f561e78e969 code=0x7ffc0000 [ 879.043970][ T30] audit: type=1326 audit(1746317866.827:1448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20252 comm="syz.6.5384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f561e78e969 code=0x7ffc0000 [ 879.066097][ T30] audit: type=1326 audit(1746317866.827:1449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20252 comm="syz.6.5384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f561e78e969 code=0x7ffc0000 [ 879.092122][ T30] audit: type=1326 audit(1746317866.827:1450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20252 comm="syz.6.5384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f561e78e969 code=0x7ffc0000 [ 879.118401][ T30] audit: type=1326 audit(1746317867.147:1451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20252 comm="syz.6.5384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f561e78e969 code=0x7ffc0000 [ 879.823766][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 879.823786][ T30] audit: type=1326 audit(1746317868.347:1456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20273 comm="syz.0.5389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdda3d8e969 code=0x7ffc0000 [ 879.867320][ T30] audit: type=1326 audit(1746317868.347:1457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20273 comm="syz.0.5389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdda3d8e969 code=0x7ffc0000 [ 879.890152][ T30] audit: type=1326 audit(1746317868.347:1458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20273 comm="syz.0.5389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fdda3d8e969 code=0x7ffc0000 [ 879.943233][ T30] audit: type=1326 audit(1746317868.347:1459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20273 comm="syz.0.5389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdda3d8e969 code=0x7ffc0000 [ 879.997598][ T30] audit: type=1326 audit(1746317868.347:1460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20273 comm="syz.0.5389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdda3d8e969 code=0x7ffc0000 [ 880.027885][T20279] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5392'. [ 880.038225][ T30] audit: type=1326 audit(1746317868.347:1461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20273 comm="syz.0.5389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=138 compat=0 ip=0x7fdda3d8e969 code=0x7ffc0000 [ 880.061278][ T30] audit: type=1326 audit(1746317868.347:1462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20273 comm="syz.0.5389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdda3d8e969 code=0x7ffc0000 [ 880.116829][ T30] audit: type=1326 audit(1746317868.347:1463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20273 comm="syz.0.5389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdda3d8e969 code=0x7ffc0000 [ 881.800061][T20332] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5412'. [ 881.852055][T20336] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 882.702455][T20350] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5418'. [ 882.771568][T20352] pim6reg1: entered promiscuous mode [ 882.787370][T20352] pim6reg1: entered allmulticast mode [ 884.158366][ T5941] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 884.907486][ T5941] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 884.935515][ T5941] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 884.957606][ T5941] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 884.985517][ T5941] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 885.022718][ T5941] usb 3-1: config 0 descriptor?? [ 885.476872][ T5941] pyra 0003:1E7D:2CF6.0025: unknown main item tag 0x0 [ 885.496300][ T5941] pyra 0003:1E7D:2CF6.0025: unknown main item tag 0x0 [ 885.535406][ T5941] pyra 0003:1E7D:2CF6.0025: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.2-1/input0 [ 885.686310][T20410] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5441'. [ 885.742110][T20413] netlink: 20 bytes leftover after parsing attributes in process `wg1'. [ 886.069578][ T5941] pyra 0003:1E7D:2CF6.0025: couldn't init struct pyra_device [ 886.079004][ T5941] pyra 0003:1E7D:2CF6.0025: couldn't install mouse [ 886.089890][ T5941] pyra 0003:1E7D:2CF6.0025: probe with driver pyra failed with error -71 [ 886.103461][ T5941] usb 3-1: USB disconnect, device number 29 [ 888.416537][T20448] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5452'. [ 888.467738][T20448] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5452'. [ 888.769418][T20459] syzkaller0: entered promiscuous mode [ 888.775193][T20459] syzkaller0: entered allmulticast mode [ 891.223302][T20487] overlayfs: failed to clone upperpath [ 895.450355][T20530] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 896.645245][T20540] syzkaller0: entered promiscuous mode [ 897.064109][T20540] syzkaller0: entered allmulticast mode [ 902.622688][T20619] bridge_slave_0: left allmulticast mode [ 902.666324][T20619] bridge_slave_0: left promiscuous mode [ 902.679326][T20621] netlink: 'syz.6.5504': attribute type 16 has an invalid length. [ 903.387271][T20623] netlink: 'syz.6.5504': attribute type 10 has an invalid length. [ 903.421189][T20619] bridge0: port 1(bridge_slave_0) entered disabled state [ 903.508156][T20624] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5504'. [ 903.599453][T20627] netlink: 12 bytes leftover after parsing attributes in process `wg1'. [ 903.624786][T20619] bridge_slave_1: left allmulticast mode [ 903.640974][T20619] bridge_slave_1: left promiscuous mode [ 903.656377][T20619] bridge0: port 2(bridge_slave_1) entered disabled state [ 903.699933][T20619] bond0: (slave bond_slave_0): Releasing backup interface [ 903.771349][T20619] bond0: (slave bond_slave_1): Releasing backup interface [ 904.186132][T20619] team0: Port device team_slave_0 removed [ 904.816328][T20619] team0: Port device team_slave_1 removed [ 904.827333][T20619] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 904.835132][T20619] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 904.846129][T20619] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 904.853901][T20619] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 904.929010][T20623] 8021q: adding VLAN 0 to HW filter on device bond0 [ 904.939557][T20623] team0: Port device bond0 added [ 904.945932][T20621] vlan0: entered promiscuous mode [ 905.121158][T20624] team0 (unregistering): Port device bond0 removed [ 907.334434][T20677] netlink: 12 bytes leftover after parsing attributes in process `wg1'. [ 910.494618][T20717] netlink: 12 bytes leftover after parsing attributes in process `wg1'. [ 914.021605][T20754] netlink: 12 bytes leftover after parsing attributes in process `wg1'. [ 917.421351][T20800] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5555'. [ 917.470205][T20804] netlink: 12 bytes leftover after parsing attributes in process `wg1'. [ 919.633914][T20829] netlink: 664 bytes leftover after parsing attributes in process `syz.2.5562'. [ 921.254181][T20838] netlink: 12 bytes leftover after parsing attributes in process `wg1'. [ 922.378613][T20860] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5570'. [ 925.404506][T20889] netlink: 664 bytes leftover after parsing attributes in process `syz.5.5577'. [ 925.485645][T20886] netlink: 12 bytes leftover after parsing attributes in process `wg1'. [ 926.803039][T20903] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5586'. [ 929.639241][T20931] netlink: 664 bytes leftover after parsing attributes in process `syz.5.5593'. [ 929.714428][T20933] netlink: 12 bytes leftover after parsing attributes in process `wg1'. [ 931.044505][T20951] syzkaller0: entered promiscuous mode [ 931.050185][T20951] syzkaller0: entered allmulticast mode [ 931.565354][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.571801][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 933.403666][T20973] netlink: 664 bytes leftover after parsing attributes in process `syz.1.5608'. [ 935.702174][T20979] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5610'. [ 936.429583][T20990] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5611'. [ 938.527685][ T3076] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 939.657411][ T3076] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 939.673525][ T3076] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 939.683702][ T3076] usb 6-1: New USB device found, idVendor=056a, idProduct=00f0, bcdDevice= 0.00 [ 939.693024][ T3076] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 940.694565][ T3076] usb 6-1: config 0 descriptor?? [ 941.251666][ T3076] usbhid 6-1:0.0: can't add hid device: -71 [ 941.265591][ T3076] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 941.280796][ T3076] usb 6-1: USB disconnect, device number 25 [ 947.416484][T21105] netlink: 40 bytes leftover after parsing attributes in process `syz.6.5651'. [ 949.377696][ T5941] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 949.566140][ T5941] usb 2-1: Using ep0 maxpacket: 8 [ 949.613250][ T5941] usb 2-1: unable to get BOS descriptor or descriptor too short [ 949.640598][ T5941] usb 2-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 949.675502][ T5941] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 949.689549][ T5941] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 949.710382][ T5941] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 949.720352][ T5941] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 949.738630][ T5941] usb 2-1: Product: syz [ 949.754478][ T5941] usb 2-1: Manufacturer: syz [ 949.763590][ T5941] usb 2-1: SerialNumber: syz [ 950.048620][ T5941] usb 2-1: 0:2 : does not exist [ 950.101913][ T5941] usb 2-1: USB disconnect, device number 27 [ 951.812018][T21174] netlink: 536 bytes leftover after parsing attributes in process `syz.2.5675'. [ 956.409810][T21220] netlink: 'syz.2.5688': attribute type 10 has an invalid length. [ 956.497877][T21222] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5688'. [ 956.684844][T21225] netlink: 536 bytes leftover after parsing attributes in process `syz.6.5689'. [ 959.245564][ T5825] Bluetooth: hci1: command 0x0406 tx timeout [ 960.108094][ T30] audit: type=1326 audit(1746317948.637:1464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21270 comm="syz.6.5704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f561e78e969 code=0x7ffc0000 [ 960.165666][ T30] audit: type=1326 audit(1746317948.637:1465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21270 comm="syz.6.5704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f561e78e969 code=0x7ffc0000 [ 960.248113][ T30] audit: type=1326 audit(1746317948.667:1466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21270 comm="syz.6.5704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=4 compat=0 ip=0x7f561e78e969 code=0x7ffc0000 [ 960.285953][T21277] netlink: 'syz.5.5703': attribute type 10 has an invalid length. [ 960.353260][ T30] audit: type=1326 audit(1746317948.667:1467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21270 comm="syz.6.5704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f561e78e969 code=0x7ffc0000 [ 960.381841][T21280] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5703'. [ 960.480160][ T30] audit: type=1326 audit(1746317948.667:1468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21270 comm="syz.6.5704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f561e78e969 code=0x7ffc0000 [ 962.800755][ T30] audit: type=1326 audit(1746317951.327:1469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21306 comm="syz.0.5715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdda3d8e969 code=0x7ffc0000 [ 962.840752][ T30] audit: type=1326 audit(1746317951.347:1470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21306 comm="syz.0.5715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdda3d8e969 code=0x7ffc0000 [ 962.865845][ T30] audit: type=1326 audit(1746317951.347:1471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21306 comm="syz.0.5715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=273 compat=0 ip=0x7fdda3d8e969 code=0x7ffc0000 [ 962.887958][ T30] audit: type=1326 audit(1746317951.347:1472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21306 comm="syz.0.5715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdda3d8e969 code=0x7ffc0000 [ 962.914471][ T30] audit: type=1326 audit(1746317951.347:1473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21306 comm="syz.0.5715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdda3d8e969 code=0x7ffc0000 [ 963.201326][T21318] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5717'. [ 963.451190][T21330] netlink: 'syz.6.5720': attribute type 10 has an invalid length. [ 963.481209][T21323] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5720'. [ 965.567117][ T30] kauditd_printk_skb: 36 callbacks suppressed [ 965.567137][ T30] audit: type=1326 audit(1746317954.097:1510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21350 comm="syz.6.5728" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f561e78e969 code=0x0 [ 969.632816][T21395] netlink: 'syz.5.5738': attribute type 10 has an invalid length. [ 969.667659][T21395] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5738'. [ 971.162528][T21421] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5748'. [ 972.664855][ T5825] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 972.686086][ T5825] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 972.697513][ T5825] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 972.777642][ T5825] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 972.790715][ T5825] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 973.626482][T18144] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 973.833745][T18144] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 973.988752][T18144] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 974.052354][T21469] netlink: 'syz.6.5753': attribute type 280 has an invalid length. [ 974.151166][T18144] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 974.169121][T21471] netlink: 'syz.2.5756': attribute type 10 has an invalid length. [ 974.218814][T21471] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5756'. [ 974.544841][T21456] chnl_net:caif_netlink_parms(): no params data found [ 974.915772][ T5825] Bluetooth: hci0: command tx timeout [ 975.047985][T21489] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5759'. [ 975.333034][T18144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 975.354725][T18144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 975.367663][T18144] bond0 (unregistering): Released all slaves [ 976.644347][T21456] bridge0: port 1(bridge_slave_0) entered blocking state [ 976.662024][T21456] bridge0: port 1(bridge_slave_0) entered disabled state [ 976.682669][T21456] bridge_slave_0: entered allmulticast mode [ 976.706983][T21456] bridge_slave_0: entered promiscuous mode [ 976.753507][T21456] bridge0: port 2(bridge_slave_1) entered blocking state [ 976.790860][T21456] bridge0: port 2(bridge_slave_1) entered disabled state [ 976.810625][T21456] bridge_slave_1: entered allmulticast mode [ 976.834669][T21456] bridge_slave_1: entered promiscuous mode [ 976.998580][ T5825] Bluetooth: hci0: command tx timeout [ 977.115122][T21456] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 977.150962][T21456] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 977.212004][T18144] hsr_slave_0: left promiscuous mode [ 977.230116][T18144] hsr_slave_1: left promiscuous mode [ 977.247383][T18144] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 977.266552][T18144] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 977.293996][T18144] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 977.305768][T18144] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 977.339811][T18144] veth1_macvtap: left promiscuous mode [ 977.345947][T18144] veth0_macvtap: left promiscuous mode [ 977.355373][ T30] audit: type=1800 audit(1746317965.877:1511): pid=21506 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.5.5764" name="file0" dev="overlay" ino=2087 res=0 errno=0 [ 977.385561][T18144] veth1_vlan: left promiscuous mode [ 977.391558][T18144] veth0_vlan: left promiscuous mode [ 979.079093][ T5825] Bluetooth: hci0: command tx timeout [ 979.660798][T18144] team0 (unregistering): Port device team_slave_1 removed [ 979.717611][T18144] team0 (unregistering): Port device team_slave_0 removed [ 979.885897][T21522] netlink: 'syz.6.5768': attribute type 10 has an invalid length. [ 979.936623][T21525] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5768'. [ 980.288757][ T5941] infiniband syz1: ib_query_port failed (-19) [ 980.403933][T21530] netlink: 40 bytes leftover after parsing attributes in process `syz.5.5769'. [ 980.523218][T21456] team0: Port device team_slave_0 added [ 980.590056][T21456] team0: Port device team_slave_1 added [ 981.155531][ T5825] Bluetooth: hci0: command tx timeout [ 981.263719][T21456] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 981.270796][T21456] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 981.300009][T21456] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 981.322950][T21456] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 981.352461][T21456] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 981.394418][T21456] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 981.595595][T21538] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 981.740222][T21543] syzkaller0: entered promiscuous mode [ 981.748997][T21543] syzkaller0: entered allmulticast mode [ 981.782507][T21456] hsr_slave_0: entered promiscuous mode [ 981.810024][T21456] hsr_slave_1: entered promiscuous mode [ 981.828740][T21456] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 981.857750][T21456] Cannot create hsr debugfs directory [ 985.435331][T21569] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5782'. [ 986.348059][T18144] IPVS: stop unused estimator thread 0... [ 986.546555][T21577] netlink: 20 bytes leftover after parsing attributes in process `syz.6.5786'. [ 988.036348][ T5941] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 988.228991][ T5941] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 988.258671][T21456] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 988.264512][ T5941] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 988.279980][T21456] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 988.291441][ T5941] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 988.301520][ T5941] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 989.193593][ T5941] usb 3-1: config 0 descriptor?? [ 989.209375][T21456] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 989.221165][T21456] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 989.944692][ T5912] usb 3-1: USB disconnect, device number 30 [ 990.288388][T21456] 8021q: adding VLAN 0 to HW filter on device bond0 [ 990.362787][T21456] 8021q: adding VLAN 0 to HW filter on device team0 [ 990.406042][T18144] bridge0: port 1(bridge_slave_0) entered blocking state [ 990.413225][T18144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 990.431406][T21612] netlink: 40 bytes leftover after parsing attributes in process `syz.5.5795'. [ 990.449735][T18106] bridge0: port 2(bridge_slave_1) entered blocking state [ 990.456948][T18106] bridge0: port 2(bridge_slave_1) entered forwarding state [ 992.573080][T21632] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 993.014067][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.020893][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.340449][T21456] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 993.414054][T21456] veth0_vlan: entered promiscuous mode [ 993.435058][T21456] veth1_vlan: entered promiscuous mode [ 993.500197][T21456] veth0_macvtap: entered promiscuous mode [ 993.530208][T21456] veth1_macvtap: entered promiscuous mode [ 993.572568][T21456] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 993.588846][T21456] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 993.638613][T21456] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 993.667672][T21456] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 993.697929][T21456] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 993.725492][T21456] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 993.788325][T21653] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5806'. [ 993.824713][T21653] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5806'. [ 993.851519][T21650] fuse: root generation should be zero [ 993.966617][ T5929] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 994.001461][ T5929] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 994.639312][T21661] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5809'. [ 994.726879][T18113] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 994.745207][T18113] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1000.825644][T21714] netlink: 76 bytes leftover after parsing attributes in process `syz.1.5825'. [ 1001.149048][T21721] netlink: 44 bytes leftover after parsing attributes in process `syz.0.5824'. [ 1004.725127][ T30] audit: type=1326 audit(1746317993.247:1512): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=_ pid=21756 comm="syz.2.5841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0eeb98e969 code=0x7ffc0000 [ 1004.774350][ T30] audit: type=1326 audit(1746317993.247:1513): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=_ pid=21756 comm="syz.2.5841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7f0eeb98e969 code=0x7ffc0000 [ 1004.799475][ T30] audit: type=1326 audit(1746317993.247:1514): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=_ pid=21756 comm="syz.2.5841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0eeb98e969 code=0x7ffc0000 [ 1004.873591][ T30] audit: type=1326 audit(1746317993.247:1515): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=_ pid=21756 comm="syz.2.5841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0eeb98e969 code=0x7ffc0000 [ 1006.233003][T21781] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5851'. [ 1008.343397][T21809] input: syz0 as /devices/virtual/input/input7 [ 1008.636415][ T47] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 1008.975504][ T47] usb 7-1: Using ep0 maxpacket: 8 [ 1009.008846][ T47] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1009.031139][ T47] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 1009.076120][ T47] usb 7-1: can't read configurations, error -71 [ 1011.318536][T21849] tipc: Enabling of bearer rejected, failed to enable media [ 1011.440160][ T5912] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 1011.659681][ T5912] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1012.048273][ T5912] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1012.080520][ T5912] usb 1-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 1012.135920][ T5912] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1012.189214][ T5912] usb 1-1: config 0 descriptor?? [ 1014.975638][ T5912] usbhid 1-1:0.0: can't add hid device: -71 [ 1014.993466][ T5912] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1015.031917][ T5912] usb 1-1: USB disconnect, device number 46 [ 1015.090898][T21889] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 1015.131532][T21889] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 1015.870915][T21904] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 1016.317316][T13702] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 1016.525235][T13702] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1016.589122][T13702] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1016.612619][T13702] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1016.639575][T13702] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1016.672066][T13702] usb 1-1: config 0 descriptor?? [ 1016.847569][T21922] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5897'. [ 1016.867851][T21922] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5897'. [ 1017.111680][T13702] keytouch 0003:0926:3333.0026: fixing up Keytouch IEC report descriptor [ 1017.154914][T13702] input: HID 0926:3333 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0926:3333.0026/input/input8 [ 1017.293445][T13702] keytouch 0003:0926:3333.0026: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.0-1/input0 [ 1017.348730][T13702] usb 1-1: USB disconnect, device number 47 [ 1017.689887][T21935] netlink: 96 bytes leftover after parsing attributes in process `syz.6.5902'. [ 1018.530989][T21948] tipc: Enabling of bearer rejected, failed to enable media [ 1019.722250][T21956] netlink: 'syz.2.5909': attribute type 12 has an invalid length. [ 1019.763600][T21958] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5910'. [ 1019.795460][T21958] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5910'. [ 1020.236971][ T5941] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 1020.405532][ T5941] usb 1-1: Using ep0 maxpacket: 16 [ 1020.419256][ T5941] usb 1-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config [ 1020.438971][ T5941] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1020.452304][ T5941] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1020.461819][ T5941] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1020.473738][ T5941] usb 1-1: Product: syz [ 1020.478642][ T5941] usb 1-1: Manufacturer: syz [ 1020.483723][ T5941] usb 1-1: SerialNumber: syz [ 1020.709115][ T5941] usb 1-1: 0:2 : does not exist [ 1020.722102][ T5941] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 1020.754914][ T5941] usb 1-1: USB disconnect, device number 48 [ 1021.002414][ T30] audit: type=1326 audit(1746318009.527:1516): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=_ pid=21976 comm="syz.6.5918" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f561e78e969 code=0x0 [ 1021.382638][T21984] kvm: pic: non byte write [ 1021.402232][T21981] kvm: vcpu 0: requested 16512 ns lapic timer period limited to 200000 ns [ 1021.510608][T21988] x_tables: duplicate underflow at hook 1 [ 1021.985769][T21981] kvm: pic: non byte write [ 1022.205531][ T47] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 1022.339612][ T5909] hid-generic FFFC:0003:0000.0027: unknown main item tag 0x0 [ 1022.356527][ T5909] hid-generic FFFC:0003:0000.0027: unknown main item tag 0x0 [ 1022.374262][ T5909] hid-generic FFFC:0003:0000.0027: unknown main item tag 0x0 [ 1022.394595][ T5909] hid-generic FFFC:0003:0000.0027: unknown main item tag 0x0 [ 1022.410987][ T5909] hid-generic FFFC:0003:0000.0027: unknown main item tag 0x0 [ 1022.547151][ T47] usb 6-1: device descriptor read/64, error -71 [ 1022.635598][ T5909] hid-generic FFFC:0003:0000.0027: unknown main item tag 0x0 [ 1022.682701][ T5909] hid-generic FFFC:0003:0000.0027: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1022.995648][ T47] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 1023.258493][ T47] usb 6-1: device descriptor read/64, error -71 [ 1023.396773][T22027] netlink: 'syz.1.5933': attribute type 1 has an invalid length. [ 1023.411714][ T47] usb usb6-port1: attempt power cycle [ 1023.589336][T22027] bond1: entered promiscuous mode [ 1023.594812][T22027] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1024.485707][ T47] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 1024.735453][ T47] usb 6-1: device not accepting address 28, error -71 [ 1027.290189][T22079] 9pnet_virtio: no channels available for device syz [ 1029.567189][ T30] audit: type=1326 audit(1746318018.067:1517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22084 comm="syz.1.5952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fd858e969 code=0x7ffc0000 [ 1029.638494][ T30] audit: type=1326 audit(1746318018.067:1518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22084 comm="syz.1.5952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fd858e969 code=0x7ffc0000 [ 1029.730029][ T30] audit: type=1326 audit(1746318018.067:1519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22084 comm="syz.1.5952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=192 compat=0 ip=0x7f6fd858e969 code=0x7ffc0000 [ 1029.768929][ T30] audit: type=1326 audit(1746318018.067:1520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22084 comm="syz.1.5952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fd858e969 code=0x7ffc0000 [ 1029.791483][ T30] audit: type=1326 audit(1746318018.067:1521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22084 comm="syz.1.5952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fd858e969 code=0x7ffc0000 [ 1030.189229][T22101] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1031.371387][T22116] 9pnet_virtio: no channels available for device syz [ 1035.009908][T22152] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5972'. [ 1035.864015][T22152] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5972'. [ 1037.132905][T22183] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5978'. [ 1043.265835][T22237] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5995'. [ 1046.805763][T22271] XFS (nbd5): no-recovery mounts must be read-only. [ 1048.716718][T22283] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6008'. [ 1049.357840][T22293] overlayfs: failed to resolve './file0': -2 [ 1051.934951][ T5865] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 1052.328250][ T5865] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1052.571883][ T5865] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1052.586966][ T5865] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1052.596413][ T5865] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1052.620344][ T5865] usb 6-1: config 0 descriptor?? [ 1052.738964][T22320] XFS (nbd6): no-recovery mounts must be read-only. [ 1053.221686][T22322] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6020'. [ 1053.248324][T22322] ip6gretap0: entered promiscuous mode [ 1053.269966][T22322] ip6gretap0: left promiscuous mode [ 1053.474093][ T5865] keytouch 0003:0926:3333.0028: fixing up Keytouch IEC report descriptor [ 1053.509215][ T5865] input: HID 0926:3333 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0926:3333.0028/input/input9 [ 1053.685886][ T5865] keytouch 0003:0926:3333.0028: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.5-1/input0 [ 1053.713663][ T5865] usb 6-1: USB disconnect, device number 30 [ 1054.706148][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.712511][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 1057.323200][T22366] XFS (nbd2): no-recovery mounts must be read-only. [ 1058.629577][T22383] netlink: 'syz.2.6040': attribute type 11 has an invalid length. [ 1058.651484][T22383] netlink: 224 bytes leftover after parsing attributes in process `syz.2.6040'. [ 1061.503625][T22410] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6048'. [ 1063.192993][T22425] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6053'. [ 1063.746913][T22436] overlayfs: failed to resolve './file1': -2 [ 1066.244934][T22447] warning: `syz.1.6058' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 1069.424754][T22479] netlink: 'syz.6.6068': attribute type 11 has an invalid length. [ 1069.453346][T22479] netlink: 224 bytes leftover after parsing attributes in process `syz.6.6068'. [ 1069.520484][T22483] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6069'. [ 1071.575575][T22495] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1071.593725][T22495] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1071.612915][T22495] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1071.626613][T22495] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1071.647786][T22495] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1071.695215][T22499] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6072'. [ 1073.075891][ T5865] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 1073.131111][T22503] xt_hashlimit: size too large, truncated to 1048576 [ 1073.181679][T18115] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1073.245470][ T5865] usb 3-1: Using ep0 maxpacket: 16 [ 1073.254763][ T5865] usb 3-1: device descriptor read/all, error -71 [ 1073.280245][T22505] : renamed from bond0 [ 1073.469077][T18115] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1073.805677][ T5825] Bluetooth: hci2: command tx timeout [ 1073.840702][T18115] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1074.751292][T18115] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1075.434629][T22539] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6080'. [ 1075.915083][ T5825] Bluetooth: hci2: command tx timeout [ 1076.960872][T18115] bond0 (unregistering): Released all slaves [ 1077.375559][T18115] bond1 (unregistering): Released all slaves [ 1077.560007][T18115] tipc: Left network mode [ 1077.595760][T22494] chnl_net:caif_netlink_parms(): no params data found [ 1077.958990][ T5825] Bluetooth: hci2: command tx timeout [ 1078.569310][T22583] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6094'. [ 1078.840988][T18115] hsr_slave_0: left promiscuous mode [ 1078.917237][T18115] hsr_slave_1: left promiscuous mode [ 1079.155571][T18115] veth1_macvtap: left promiscuous mode [ 1079.193669][T18115] veth0_macvtap: left promiscuous mode [ 1079.227249][T18115] veth1_vlan: left promiscuous mode [ 1080.046342][ T5825] Bluetooth: hci2: command tx timeout [ 1081.992382][T22593] netlink: 'syz.0.6096': attribute type 27 has an invalid length. [ 1086.349243][T22494] bridge0: port 1(bridge_slave_0) entered blocking state [ 1086.368600][T22494] bridge0: port 1(bridge_slave_0) entered disabled state [ 1086.399118][T22494] bridge_slave_0: entered allmulticast mode [ 1086.419842][T22494] bridge_slave_0: entered promiscuous mode [ 1086.494109][T22494] bridge0: port 2(bridge_slave_1) entered blocking state [ 1086.553698][T22494] bridge0: port 2(bridge_slave_1) entered disabled state [ 1086.564860][T22494] bridge_slave_1: entered allmulticast mode [ 1086.592410][T22494] bridge_slave_1: entered promiscuous mode [ 1086.695232][T22494] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1086.729250][T22494] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1087.602068][T22494] team0: Port device team_slave_0 added [ 1087.760102][T22494] team0: Port device team_slave_1 added [ 1089.063823][T22633] overlayfs: failed to resolve './file1': -2 [ 1090.433484][T22494] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1090.572273][T22494] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1090.602514][T22494] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1090.907689][T22494] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1090.941535][T22494] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1091.003796][T22494] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1091.121645][T22648] program syz.0.6110 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1091.216341][T22494] hsr_slave_0: entered promiscuous mode [ 1091.250313][T22494] hsr_slave_1: entered promiscuous mode [ 1091.274962][T22494] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1091.305082][T22494] Cannot create hsr debugfs directory [ 1094.857841][T22494] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1094.987261][T22494] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1095.029483][T22494] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1095.049577][T22494] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1095.195706][T22686] program syz.2.6121 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1095.536401][T22494] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1096.530024][T22698] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6123'. [ 1096.539017][T22698] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6123'. [ 1096.572079][T22494] 8021q: adding VLAN 0 to HW filter on device team0 [ 1096.588206][ T64] bridge0: port 1(bridge_slave_0) entered blocking state [ 1096.595444][ T64] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1096.621959][ T64] bridge0: port 2(bridge_slave_1) entered blocking state [ 1096.629250][ T64] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1096.708649][T22703] netlink: 20 bytes leftover after parsing attributes in process `syz.6.6126'. [ 1096.724117][T22703] netlink: 20 bytes leftover after parsing attributes in process `syz.6.6126'. [ 1096.928805][T22707] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1096.936954][T22707] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 1096.945718][T22707] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1096.953535][T22707] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 1097.043679][T22709] overlayfs: failed to resolve './file1': -2 [ 1097.477818][ T5825] Bluetooth: hci0: command 0x0406 tx timeout [ 1099.753320][T22721] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6130'. [ 1099.788725][T22721] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6130'. [ 1100.378760][T22494] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1100.562140][T22494] veth0_vlan: entered promiscuous mode [ 1100.618267][T22494] veth1_vlan: entered promiscuous mode [ 1100.894261][T22494] veth0_macvtap: entered promiscuous mode [ 1100.944236][T22494] veth1_macvtap: entered promiscuous mode [ 1101.659591][T22494] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1101.672394][T22494] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1101.685123][T22494] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1101.709658][T22494] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1101.720737][T22494] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1101.736393][T22494] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1101.779750][T22494] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1101.790398][T22494] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1101.800735][T22494] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1101.810098][T22494] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1101.828384][T22745] netlink: 'syz.5.6139': attribute type 11 has an invalid length. [ 1101.865477][T22745] netlink: 224 bytes leftover after parsing attributes in process `syz.5.6139'. [ 1103.550629][T18154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1103.572494][T18154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1103.613437][T18154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1103.623557][T18154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1103.682810][T22775] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6143'. [ 1103.824555][T22769] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6143'. [ 1104.160375][T22782] x_tables: duplicate underflow at hook 1 [ 1104.948628][T22785] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6067'. [ 1109.041997][T22822] netlink: 40 bytes leftover after parsing attributes in process `syz.5.6160'. [ 1109.764228][ T5825] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1109.782484][ T5825] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1109.812546][ T5825] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1109.835462][ T5825] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1110.443799][ T5825] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1110.741883][T22834] netlink: 'syz.5.6162': attribute type 11 has an invalid length. [ 1110.792647][T22834] netlink: 224 bytes leftover after parsing attributes in process `syz.5.6162'. [ 1111.413900][T22841] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6163'. [ 1111.427340][T22845] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6164'. [ 1111.466607][T22845] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6164'. [ 1111.599115][T22841] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6163'. [ 1112.106621][T22860] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6166'. [ 1112.686206][ T5825] Bluetooth: hci5: command tx timeout [ 1112.738929][T22827] chnl_net:caif_netlink_parms(): no params data found [ 1113.405123][T22865] overlayfs: failed to resolve './file1': -2 [ 1114.777272][ T5825] Bluetooth: hci5: command tx timeout [ 1114.871363][T22872] program syz.5.6171 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1115.882982][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 1115.889498][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 1116.042811][T22900] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1116.051052][T22900] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 1116.059743][T22900] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1116.067775][T22900] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 1116.845546][T22495] Bluetooth: hci5: command tx timeout [ 1116.981640][T18154] bond0 (unregistering): Released all slaves [ 1117.364699][T18154] tipc: Left network mode [ 1117.371784][T22827] bridge0: port 1(bridge_slave_0) entered blocking state [ 1117.389093][T22827] bridge0: port 1(bridge_slave_0) entered disabled state [ 1117.431143][T22827] bridge_slave_0: entered allmulticast mode [ 1117.467243][T22827] bridge_slave_0: entered promiscuous mode [ 1117.485099][T22827] bridge0: port 2(bridge_slave_1) entered blocking state [ 1117.502032][T22827] bridge0: port 2(bridge_slave_1) entered disabled state [ 1117.514339][T22827] bridge_slave_1: entered allmulticast mode [ 1117.635779][T22827] bridge_slave_1: entered promiscuous mode [ 1118.103057][T22907] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1118.254587][T22910] pim6reg: entered allmulticast mode [ 1118.285784][T22914] program syz.5.6182 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1118.395028][T22907] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1118.438983][T22827] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1118.455523][ T3076] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 1118.518917][T18154] hsr_slave_0: left promiscuous mode [ 1118.529441][T18154] hsr_slave_1: left promiscuous mode [ 1118.638080][ T3076] usb 2-1: Using ep0 maxpacket: 16 [ 1118.658729][ T3076] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1118.670634][ T3076] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 1118.721845][ T3076] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1118.732843][ T3076] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1118.751871][ T3076] usb 2-1: config 0 descriptor?? [ 1118.770668][ T3076] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 1118.915797][T22495] Bluetooth: hci5: command tx timeout [ 1119.579737][T22827] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1119.604744][T22907] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1119.850124][T22907] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1119.882899][T22827] team0: Port device team_slave_0 added [ 1119.898783][T22827] team0: Port device team_slave_1 added [ 1120.476292][T22827] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1120.483382][T22827] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1120.525422][T22827] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1120.561311][T22827] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1120.572053][ T3076] usb 2-1: USB disconnect, device number 28 [ 1120.577775][T22827] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1120.613203][T22827] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1120.643243][T22945] program syz.1.6193 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1120.693636][T22907] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1120.694593][T22948] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6192'. [ 1120.783296][T22948] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6192'. [ 1120.804346][T22907] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1120.823393][T22827] hsr_slave_0: entered promiscuous mode [ 1120.830239][T22827] hsr_slave_1: entered promiscuous mode [ 1120.923069][T22907] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1121.050378][T22907] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1124.056980][T22990] overlayfs: failed to resolve './file0': -2 [ 1127.811276][T23022] netlink: 'syz.0.6212': attribute type 27 has an invalid length. [ 1128.370742][T22827] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1128.433903][T22827] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1128.460842][T22827] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1128.689882][T22827] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1129.013525][T22827] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1130.373292][T23035] pim6reg: entered allmulticast mode [ 1130.465594][T23039] pim6reg: left allmulticast mode [ 1130.588463][T22827] 8021q: adding VLAN 0 to HW filter on device team0 [ 1130.611477][T23047] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6219'. [ 1130.659871][T22827] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1130.820411][T22827] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1130.834885][T18158] bridge0: port 1(bridge_slave_0) entered blocking state [ 1130.842126][T18158] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1131.437455][T18158] bridge0: port 2(bridge_slave_1) entered blocking state [ 1131.444662][T18158] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1131.525396][ T3076] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 1131.751073][T23057] netlink: 20 bytes leftover after parsing attributes in process `syz.5.6222'. [ 1131.805552][ T3076] usb 7-1: Using ep0 maxpacket: 16 [ 1132.043737][T23057] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6222'. [ 1132.198292][ T3076] usb 7-1: device descriptor read/all, error -71 [ 1132.533469][T23072] vivid-000: disconnect [ 1133.512685][T23069] vivid-000: reconnect [ 1133.638852][T22827] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1134.733178][T22827] veth0_vlan: entered promiscuous mode [ 1134.897085][T22827] veth1_vlan: entered promiscuous mode [ 1135.038990][T22827] veth0_macvtap: entered promiscuous mode [ 1135.060623][T22827] veth1_macvtap: entered promiscuous mode [ 1135.126216][T22827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1135.145849][T22827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1135.161951][T22827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1135.180743][T22827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1135.356215][T23095] netlink: 'syz.0.6232': attribute type 27 has an invalid length. [ 1135.692573][T22827] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1135.769679][T22827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1135.782862][T22827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1135.794550][T22827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1135.819298][T22827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1135.857643][T22827] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1135.944440][T22827] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1135.972866][T22827] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1135.982546][T22827] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1136.045076][T22827] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1136.517423][T18160] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1136.566303][T18160] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1136.663469][T18144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1136.672512][T18144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1137.316739][T23111] netlink: 'syz.5.6238': attribute type 11 has an invalid length. [ 1137.336175][T23111] netlink: 224 bytes leftover after parsing attributes in process `syz.5.6238'. [ 1137.472883][ T30] audit: type=1326 audit(1746318125.997:1522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23116 comm="syz.2.6151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb15b98e969 code=0x7ffc0000 [ 1137.560176][ T30] audit: type=1326 audit(1746318125.997:1523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23116 comm="syz.2.6151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb15b98e969 code=0x7ffc0000 [ 1137.612707][ T30] audit: type=1326 audit(1746318125.997:1524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23116 comm="syz.2.6151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb15b98e969 code=0x7ffc0000 [ 1137.713837][ T30] audit: type=1326 audit(1746318125.997:1525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23116 comm="syz.2.6151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb15b98e969 code=0x7ffc0000 [ 1137.748328][ T30] audit: type=1326 audit(1746318126.007:1526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23116 comm="syz.2.6151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7fb15b98e969 code=0x7ffc0000 [ 1137.791037][ T30] audit: type=1326 audit(1746318126.127:1527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23116 comm="syz.2.6151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fb15b98e9a3 code=0x7ffc0000 [ 1137.833654][T23106] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6237'. [ 1137.842705][T23106] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6237'. [ 1137.889974][ T30] audit: type=1326 audit(1746318126.127:1528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23116 comm="syz.2.6151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fb15b98e9a3 code=0x7ffc0000 [ 1137.985716][T23118] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6151'. [ 1137.994994][ T30] audit: type=1326 audit(1746318126.127:1529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23116 comm="syz.2.6151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb15b98e969 code=0x7ffc0000 [ 1138.033037][T23124] netlink: 'syz.5.6240': attribute type 7 has an invalid length. [ 1138.058774][T23124] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6240'. [ 1138.071002][ T30] audit: type=1326 audit(1746318126.127:1530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23116 comm="syz.2.6151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb15b98e969 code=0x7ffc0000 [ 1138.092613][ C0] vkms_vblank_simulate: vblank timer overrun [ 1138.145860][ T30] audit: type=1326 audit(1746318126.347:1531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23116 comm="syz.2.6151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb15b98d2d0 code=0x7ffc0000 [ 1139.538229][T23146] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6247'. [ 1139.564555][T23147] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1139.746694][T23148] x_tables: duplicate underflow at hook 1 [ 1139.898923][T23147] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 1139.911383][T23147] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1139.919408][T23147] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 1140.322181][T23144] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6247'. [ 1140.693040][T23156] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6249'. [ 1142.948295][T23172] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6253'. [ 1142.975699][T23172] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6253'. [ 1144.156304][T23183] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1144.887266][T23183] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1145.386418][T23205] netlink: 'syz.1.6262': attribute type 27 has an invalid length. [ 1146.029100][T23215] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6266'. [ 1146.038328][T23215] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6266'. [ 1146.727189][T23183] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1146.844607][T23221] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6267'. [ 1146.987523][T23183] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1147.223247][T23221] bond_slave_0: entered promiscuous mode [ 1147.229167][T23221] bond_slave_1: entered promiscuous mode [ 1147.237975][T23221] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1147.308584][T23227] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1147.316747][T23227] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 1147.327547][T23227] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1147.335509][T23227] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 1148.913478][ T5909] libceph: connect (1)[c::]:6789 error -101 [ 1148.935855][ T5909] libceph: mon0 (1)[c::]:6789 connect error [ 1148.970182][T23233] ceph: No mds server is up or the cluster is laggy [ 1149.222581][T23183] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1149.330877][T23183] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1149.391942][T23183] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1149.502973][T23183] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1150.403046][T23252] pim6reg: entered allmulticast mode [ 1150.706519][T23248] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6274'. [ 1150.715605][T23248] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6274'. [ 1150.932086][T23251] pim6reg: left allmulticast mode [ 1152.497427][ T5865] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 1152.742207][T23265] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6279'. [ 1152.765289][T23265] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6279'. [ 1152.925482][ T5865] usb 6-1: Using ep0 maxpacket: 16 [ 1153.563426][T23276] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6282'. [ 1153.582073][T23276] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6282'. [ 1153.699796][ T5865] usb 6-1: unable to read config index 0 descriptor/all [ 1153.712066][ T5865] usb 6-1: can't read configurations, error -71 [ 1155.894875][T23304] gtp0: entered promiscuous mode [ 1159.903114][T23350] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6296'. [ 1160.540965][T23353] gtp0: entered promiscuous mode [ 1161.816592][T23373] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1161.824479][T23373] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 1161.833147][T23373] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1161.841062][T23373] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 1162.462946][ T30] kauditd_printk_skb: 51 callbacks suppressed [ 1162.462965][ T30] audit: type=1326 audit(1746318150.987:1583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23367 comm="syz.6.6307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f561e78e969 code=0x7ffc0000 [ 1162.493478][ T30] audit: type=1326 audit(1746318150.987:1584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23367 comm="syz.6.6307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f561e78e969 code=0x7ffc0000 [ 1162.777642][ T30] audit: type=1326 audit(1746318151.017:1585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23367 comm="syz.6.6307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f561e78d2d0 code=0x7ffc0000 [ 1162.873280][ T30] audit: type=1326 audit(1746318151.017:1586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23367 comm="syz.6.6307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f561e78e969 code=0x7ffc0000 [ 1163.089917][T23380] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6307'. [ 1163.261861][ T30] audit: type=1326 audit(1746318151.017:1587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23367 comm="syz.6.6307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f561e78e969 code=0x7ffc0000 [ 1163.283937][T23363] netlink: 'syz.5.6308': attribute type 27 has an invalid length. [ 1163.293388][ T30] audit: type=1326 audit(1746318151.017:1588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23367 comm="syz.6.6307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f561e78e969 code=0x7ffc0000 [ 1164.261943][T23383] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6311'. [ 1167.987050][T23408] pim6reg: left allmulticast mode [ 1169.181079][T13702] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 1170.667645][T13702] usb 2-1: Using ep0 maxpacket: 16 [ 1171.001958][T23441] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6326'. [ 1171.011532][T23441] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6326'. [ 1171.563583][T13702] usb 2-1: device descriptor read/all, error -71 [ 1172.596351][T23454] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6331'. [ 1172.620246][T23455] gtp1: entered promiscuous mode [ 1172.654600][T23454] team_slave_0: entered promiscuous mode [ 1172.660704][T23454] team_slave_1: entered promiscuous mode [ 1172.720681][T23454] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 1172.738169][T23454] team_slave_0: left promiscuous mode [ 1172.743723][T23454] team_slave_1: left promiscuous mode [ 1172.795052][T23457] [ 1172.797802][T23457] ============================= [ 1172.802672][T23457] WARNING: suspicious RCU usage [ 1172.807666][T23457] 6.15.0-rc4-syzkaller-00042-gb6ea1680d0ac #0 Not tainted [ 1172.814795][T23457] ----------------------------- [ 1172.819698][T23457] net/ipv6/ip6_fib.c:1351 suspicious rcu_dereference_protected() usage! [ 1172.828072][T23457] [ 1172.828072][T23457] other info that might help us debug this: [ 1172.828072][T23457] [ 1172.838381][T23457] [ 1172.838381][T23457] rcu_scheduler_active = 2, debug_locks = 1 [ 1172.846522][T23457] 3 locks held by syz.0.6334/23457: [ 1172.851742][T23457] #0: ffffffff8f2e2008 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8db/0x1c70 [ 1172.860909][T23457] #1: ffffffff8df3b860 (rcu_read_lock){....}-{1:3}, at: __fib6_clean_all+0x9b/0x380 [ 1172.870606][T23457] #2: ffff88807b4a5830 (&tb->tb6_lock){+.-.}-{3:3}, at: __fib6_clean_all+0x1ce/0x380 [ 1172.880300][T23457] [ 1172.880300][T23457] stack backtrace: [ 1172.886249][T23457] CPU: 0 UID: 0 PID: 23457 Comm: syz.0.6334 Not tainted 6.15.0-rc4-syzkaller-00042-gb6ea1680d0ac #0 PREEMPT(full) [ 1172.886295][T23457] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 1172.886308][T23457] Call Trace: [ 1172.886317][T23457] [ 1172.886327][T23457] dump_stack_lvl+0x189/0x250 [ 1172.886373][T23457] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1172.886403][T23457] ? __pfx__printk+0x10/0x10 [ 1172.886440][T23457] ? print_lock_name+0xde/0x100 [ 1172.886479][T23457] lockdep_rcu_suspicious+0x140/0x1d0 [ 1172.886514][T23457] __fib6_update_sernum_upto_root+0x223/0x230 [ 1172.886560][T23457] fib6_update_sernum_upto_root+0x125/0x190 [ 1172.886599][T23457] ? __pfx_fib6_update_sernum_upto_root+0x10/0x10 [ 1172.886639][T23457] ? do_raw_spin_unlock+0x122/0x240 [ 1172.886665][T23457] fib6_ifup+0x142/0x180 [ 1172.886688][T23457] ? __pfx_fib6_ifup+0x10/0x10 [ 1172.886709][T23457] fib6_clean_node+0x24a/0x590 [ 1172.886735][T23457] ? __pfx_fib6_clean_node+0x10/0x10 [ 1172.886765][T23457] ? __local_bh_enable_ip+0x12d/0x1c0 [ 1172.886801][T23457] fib6_walk_continue+0x678/0x910 [ 1172.886839][T23457] fib6_walk+0x149/0x290 [ 1172.886862][T23457] __fib6_clean_all+0x234/0x380 [ 1172.886882][T23457] ? __fib6_clean_all+0x9b/0x380 [ 1172.886902][T23457] ? __pfx_fib6_ifup+0x10/0x10 [ 1172.886923][T23457] ? __pfx___fib6_clean_all+0x10/0x10 [ 1172.886949][T23457] ? __pfx_fib6_clean_node+0x10/0x10 [ 1172.886969][T23457] ? __pfx_fib6_ifup+0x10/0x10 [ 1172.886991][T23457] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 1172.887030][T23457] rt6_sync_up+0x128/0x160 [ 1172.887051][T23457] ? __pfx_rt6_sync_up+0x10/0x10 [ 1172.887078][T23457] ? ipv6_mc_up+0x3da/0x580 [ 1172.887114][T23457] addrconf_notify+0xd55/0x1010 [ 1172.887143][T23457] notifier_call_chain+0x1b3/0x3e0 [ 1172.887185][T23457] netif_state_change+0x284/0x3a0 [ 1172.887223][T23457] ? __pfx_netif_state_change+0x10/0x10 [ 1172.887259][T23457] ? do_set_master+0x1f7/0x6d0 [ 1172.887279][T23457] ? validate_linkmsg+0x765/0x950 [ 1172.887314][T23457] do_setlink+0x2eb6/0x40d0 [ 1172.887354][T23457] ? __pfx_do_setlink+0x10/0x10 [ 1172.887374][T23457] ? do_raw_spin_lock+0x121/0x290 [ 1172.887410][T23457] ? lockdep_hardirqs_on+0x9c/0x150 [ 1172.887433][T23457] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 1172.887467][T23457] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1172.887506][T23457] ? rcu_is_watching+0x15/0xb0 [ 1172.887550][T23457] ? __mutex_lock+0xa6d/0xe80 [ 1172.887580][T23457] ? __mutex_lock+0x51b/0xe80 [ 1172.887608][T23457] ? rtnl_newlink+0x8db/0x1c70 [ 1172.887631][T23457] ? __pfx___mutex_lock+0x10/0x10 [ 1172.887666][T23457] ? ns_capable+0x8a/0xf0 [ 1172.887697][T23457] ? rtnl_link_get_net_capable+0x16a/0x350 [ 1172.887725][T23457] rtnl_newlink+0x149f/0x1c70 [ 1172.887743][T23457] ? kasan_save_track+0x3e/0x80 [ 1172.887783][T23457] ? __pfx_rtnl_newlink+0x10/0x10 [ 1172.887838][T23457] ? kasan_quarantine_put+0xdd/0x220 [ 1172.887864][T23457] ? lockdep_hardirqs_on+0x9c/0x150 [ 1172.887893][T23457] ? nlmon_xmit+0xb0/0x100 [ 1172.887917][T23457] ? kmem_cache_free+0x192/0x3f0 [ 1172.887954][T23457] ? __local_bh_enable_ip+0x12d/0x1c0 [ 1172.887984][T23457] ? lockdep_hardirqs_on+0x9c/0x150 [ 1172.888006][T23457] ? __local_bh_enable_ip+0x12d/0x1c0 [ 1172.888035][T23457] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 1172.888070][T23457] ? __dev_queue_xmit+0x27e/0x3a70 [ 1172.888096][T23457] ? __dev_queue_xmit+0x27e/0x3a70 [ 1172.888120][T23457] ? __dev_queue_xmit+0x27e/0x3a70 [ 1172.888151][T23457] ? __lock_acquire+0xaac/0xd20 [ 1172.888203][T23457] ? __pfx_rtnl_newlink+0x10/0x10 [ 1172.888222][T23457] rtnetlink_rcv_msg+0x7cc/0xb70 [ 1172.888246][T23457] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 1172.888264][T23457] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1172.888289][T23457] ? ref_tracker_free+0x63a/0x7d0 [ 1172.888307][T23457] ? __copy_skb_header+0xa7/0x550 [ 1172.888343][T23457] netlink_rcv_skb+0x219/0x490 [ 1172.888366][T23457] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1172.888406][T23457] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1172.888450][T23457] ? netlink_deliver_tap+0x2e/0x1b0 [ 1172.888471][T23457] ? netlink_deliver_tap+0x2e/0x1b0 [ 1172.888499][T23457] netlink_unicast+0x758/0x8d0 [ 1172.888544][T23457] netlink_sendmsg+0x805/0xb30 [ 1172.888584][T23457] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1172.888616][T23457] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1172.888639][T23457] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1172.888661][T23457] __sock_sendmsg+0x219/0x270 [ 1172.888696][T23457] ____sys_sendmsg+0x505/0x830 [ 1172.888730][T23457] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1172.888766][T23457] ? import_iovec+0x74/0xa0 [ 1172.888798][T23457] ___sys_sendmsg+0x21f/0x2a0 [ 1172.888826][T23457] ? __pfx____sys_sendmsg+0x10/0x10 [ 1172.888906][T23457] ? __fget_files+0x2a/0x420 [ 1172.888936][T23457] ? __fget_files+0x3a0/0x420 [ 1172.888979][T23457] __x64_sys_sendmsg+0x19b/0x260 [ 1172.889007][T23457] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1172.889051][T23457] ? do_syscall_64+0xba/0x210 [ 1172.889080][T23457] do_syscall_64+0xf6/0x210 [ 1172.889103][T23457] ? clear_bhb_loop+0x45/0xa0 [ 1172.889130][T23457] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1172.889149][T23457] RIP: 0033:0x7f093758e969 [ 1172.889169][T23457] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1172.889205][T23457] RSP: 002b:00007f0938453038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1172.889227][T23457] RAX: ffffffffffffffda RBX: 00007f09377b5fa0 RCX: 00007f093758e969 [ 1172.889243][T23457] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000004 [ 1172.889257][T23457] RBP: 00007f0937610ab1 R08: 0000000000000000 R09: 0000000000000000 [ 1172.889270][T23457] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1172.889283][T23457] R13: 0000000000000000 R14: 00007f09377b5fa0 R15: 00007ffeeca2ddc8 [ 1172.889317][T23457] [ 1172.889327][T23457] [ 1173.152075][T23463] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6334'. [ 1173.156792][T23457] ============================= [ 1173.156852][T23457] WARNING: suspicious RCU usage [ 1173.156861][T23457] 6.15.0-rc4-syzkaller-00042-gb6ea1680d0ac #0 Not tainted [ 1173.156872][T23457] ----------------------------- [ 1173.156879][T23457] net/ipv6/ip6_fib.c:1358 suspicious rcu_dereference_protected() usage! [ 1173.156892][T23457] [ 1173.156892][T23457] other info that might help us debug this: [ 1173.156892][T23457] [ 1173.156899][T23457] [ 1173.156899][T23457] rcu_scheduler_active = 2, debug_locks = 1 [ 1173.156911][T23457] 3 locks held by syz.0.6334/23457: [ 1173.156922][T23457] #0: ffffffff8f2e2008 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8db/0x1c70 [ 1173.156994][T23457] #1: ffffffff8df3b860 (rcu_read_lock){....}-{1:3}, at: __fib6_clean_all+0x9b/0x380 [ 1173.533215][T23457] #2: ffff88807b4a5830 (&tb->tb6_lock){+.-.}-{3:3}, at: __fib6_clean_all+0x1ce/0x380 [ 1173.542825][T23457] [ 1173.542825][T23457] stack backtrace: [ 1173.548733][T23457] CPU: 0 UID: 0 PID: 23457 Comm: syz.0.6334 Not tainted 6.15.0-rc4-syzkaller-00042-gb6ea1680d0ac #0 PREEMPT(full) [ 1173.548753][T23457] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 1173.548762][T23457] Call Trace: [ 1173.548768][T23457] [ 1173.548776][T23457] dump_stack_lvl+0x189/0x250 [ 1173.548802][T23457] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1173.548822][T23457] ? __pfx__printk+0x10/0x10 [ 1173.548849][T23457] ? print_lock_name+0xde/0x100 [ 1173.548883][T23457] lockdep_rcu_suspicious+0x140/0x1d0 [ 1173.548919][T23457] __fib6_update_sernum_upto_root+0x18e/0x230 [ 1173.548959][T23457] fib6_update_sernum_upto_root+0x125/0x190 [ 1173.548997][T23457] ? __pfx_fib6_update_sernum_upto_root+0x10/0x10 [ 1173.549026][T23457] ? do_raw_spin_unlock+0x122/0x240 [ 1173.549044][T23457] fib6_ifup+0x142/0x180 [ 1173.549059][T23457] ? __pfx_fib6_ifup+0x10/0x10 [ 1173.549074][T23457] fib6_clean_node+0x24a/0x590 [ 1173.549091][T23457] ? __pfx_fib6_clean_node+0x10/0x10 [ 1173.549111][T23457] ? __local_bh_enable_ip+0x12d/0x1c0 [ 1173.549137][T23457] fib6_walk_continue+0x678/0x910 [ 1173.549162][T23457] fib6_walk+0x149/0x290 [ 1173.549178][T23457] __fib6_clean_all+0x234/0x380 [ 1173.549191][T23457] ? __fib6_clean_all+0x9b/0x380 [ 1173.549205][T23457] ? __pfx_fib6_ifup+0x10/0x10 [ 1173.549220][T23457] ? __pfx___fib6_clean_all+0x10/0x10 [ 1173.549237][T23457] ? __pfx_fib6_clean_node+0x10/0x10 [ 1173.549251][T23457] ? __pfx_fib6_ifup+0x10/0x10 [ 1173.549267][T23457] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 1173.549293][T23457] rt6_sync_up+0x128/0x160 [ 1173.549308][T23457] ? __pfx_rt6_sync_up+0x10/0x10 [ 1173.549326][T23457] ? ipv6_mc_up+0x3da/0x580 [ 1173.549352][T23457] addrconf_notify+0xd55/0x1010 [ 1173.549372][T23457] notifier_call_chain+0x1b3/0x3e0 [ 1173.549401][T23457] netif_state_change+0x284/0x3a0 [ 1173.549428][T23457] ? __pfx_netif_state_change+0x10/0x10 [ 1173.549454][T23457] ? do_set_master+0x1f7/0x6d0 [ 1173.549468][T23457] ? validate_linkmsg+0x765/0x950 [ 1173.549493][T23457] do_setlink+0x2eb6/0x40d0 [ 1173.549521][T23457] ? __pfx_do_setlink+0x10/0x10 [ 1173.549540][T23457] ? do_raw_spin_lock+0x121/0x290 [ 1173.549565][T23457] ? lockdep_hardirqs_on+0x9c/0x150 [ 1173.549581][T23457] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 1173.549605][T23457] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1173.549632][T23457] ? rcu_is_watching+0x15/0xb0 [ 1173.549656][T23457] ? __mutex_lock+0xa6d/0xe80 [ 1173.549673][T23457] ? __mutex_lock+0x51b/0xe80 [ 1173.549693][T23457] ? rtnl_newlink+0x8db/0x1c70 [ 1173.549708][T23457] ? __pfx___mutex_lock+0x10/0x10 [ 1173.549732][T23457] ? ns_capable+0x8a/0xf0 [ 1173.549755][T23457] ? rtnl_link_get_net_capable+0x16a/0x350 [ 1173.549773][T23457] rtnl_newlink+0x149f/0x1c70 [ 1173.549786][T23457] ? kasan_save_track+0x3e/0x80 [ 1173.549815][T23457] ? __pfx_rtnl_newlink+0x10/0x10 [ 1173.549853][T23457] ? kasan_quarantine_put+0xdd/0x220 [ 1173.549872][T23457] ? lockdep_hardirqs_on+0x9c/0x150 [ 1173.549892][T23457] ? nlmon_xmit+0xb0/0x100 [ 1173.549910][T23457] ? kmem_cache_free+0x192/0x3f0 [ 1173.549937][T23457] ? __local_bh_enable_ip+0x12d/0x1c0 [ 1173.549958][T23457] ? lockdep_hardirqs_on+0x9c/0x150 [ 1173.549974][T23457] ? __local_bh_enable_ip+0x12d/0x1c0 [ 1173.550001][T23457] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 1173.550037][T23457] ? __dev_queue_xmit+0x27e/0x3a70 [ 1173.550066][T23457] ? __dev_queue_xmit+0x27e/0x3a70 [ 1173.550092][T23457] ? __dev_queue_xmit+0x27e/0x3a70 [ 1173.550123][T23457] ? __lock_acquire+0xaac/0xd20 [ 1173.550170][T23457] ? __pfx_rtnl_newlink+0x10/0x10 [ 1173.550183][T23457] rtnetlink_rcv_msg+0x7cc/0xb70 [ 1173.550198][T23457] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 1173.550211][T23457] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1173.550227][T23457] ? ref_tracker_free+0x63a/0x7d0 [ 1173.550239][T23457] ? __copy_skb_header+0xa7/0x550 [ 1173.550263][T23457] netlink_rcv_skb+0x219/0x490 [ 1173.550278][T23457] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1173.550293][T23457] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1173.550321][T23457] ? netlink_deliver_tap+0x2e/0x1b0 [ 1173.550334][T23457] ? netlink_deliver_tap+0x2e/0x1b0 [ 1173.550351][T23457] netlink_unicast+0x758/0x8d0 [ 1173.550380][T23457] netlink_sendmsg+0x805/0xb30 [ 1173.550401][T23457] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1173.550420][T23457] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1173.550435][T23457] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1173.550449][T23457] __sock_sendmsg+0x219/0x270 [ 1173.550473][T23457] ____sys_sendmsg+0x505/0x830 [ 1173.550493][T23457] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1173.550516][T23457] ? import_iovec+0x74/0xa0 [ 1173.550542][T23457] ___sys_sendmsg+0x21f/0x2a0 [ 1173.550560][T23457] ? __pfx____sys_sendmsg+0x10/0x10 [ 1173.550603][T23457] ? __fget_files+0x2a/0x420 [ 1173.550623][T23457] ? __fget_files+0x3a0/0x420 [ 1173.550651][T23457] __x64_sys_sendmsg+0x19b/0x260 [ 1173.550670][T23457] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1173.550699][T23457] ? do_syscall_64+0xba/0x210 [ 1173.550718][T23457] do_syscall_64+0xf6/0x210 [ 1173.550734][T23457] ? clear_bhb_loop+0x45/0xa0 [ 1173.550752][T23457] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1173.550765][T23457] RIP: 0033:0x7f093758e969 [ 1173.550777][T23457] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1173.550789][T23457] RSP: 002b:00007f0938453038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1173.550803][T23457] RAX: ffffffffffffffda RBX: 00007f09377b5fa0 RCX: 00007f093758e969 [ 1173.550814][T23457] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000004 [ 1173.550822][T23457] RBP: 00007f0937610ab1 R08: 0000000000000000 R09: 0000000000000000 [ 1173.550830][T23457] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1173.550838][T23457] R13: 0000000000000000 R14: 00007f09377b5fa0 R15: 00007ffeeca2ddc8 [ 1173.550859][T23457] [ 1173.568598][T23457] bridge_slave_0: left allmulticast mode [ 1174.234251][T23457] bridge_slave_0: left promiscuous mode [ 1174.240179][T23457] bridge0: port 1(bridge_slave_0) entered disabled state [ 1174.251649][T23457] bridge_slave_1: left allmulticast mode [ 1174.258617][T23457] bridge_slave_1: left promiscuous mode [ 1174.264447][T23457] bridge0: port 2(bridge_slave_1) entered disabled state [ 1174.279212][T23457] bond0: (slave bond_slave_0): Releasing backup interface [ 1174.290337][T23457] bond0: (slave bond_slave_1): Releasing backup interface [ 1174.320782][T23457] team0: Port device team_slave_0 removed [ 1174.335172][T23457] team0: Port device team_slave_1 removed [ 1174.341898][T23457] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1174.349384][T23457] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1174.358431][T23457] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1174.366389][T23457] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1174.419171][T23460] vlan0: entered promiscuous mode [ 1174.433792][T23460] team0: Port device vlan0 added [ 1174.562221][T23463] team0 (unregistering): Port device vlan0 removed [ 1177.318907][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.325315][ T1298] ieee802154 phy1 wpan1: encryption failed: -22