last executing test programs: 11m36.317580405s ago: executing program 4 (id=973): pread64(0xffffffffffffffff, 0x0, 0x0, 0x2000000000000000) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0xa, 0x300) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2688ca4c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 11m30.683897703s ago: executing program 4 (id=980): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000100)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$PPPIOCATTCHAN(r1, 0x40047438, 0x0) close(0x3) 11m30.130496685s ago: executing program 1 (id=983): sched_setscheduler(0x0, 0x2, 0x0) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) read$msr(0xffffffffffffffff, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffd71, 0xffffffffffffffff}, 0x78) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) writev(r1, &(0x7f00000003c0)=[{0x0}, {&(0x7f00000002c0)="d7f24ad912cf826214b392", 0xb}], 0x2) 11m29.773452867s ago: executing program 4 (id=985): mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000100), 0x4) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000240)={0x0, 0x8, 0x8, 0xfffffffe, @vifc_lcl_addr=@initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f00000000c0)={0x8, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) setsockopt$inet_mreq(r1, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x4e, &(0x7f0000000040)={@local, @multicast, @void, {@ipv4={0x800, @icmp={{0x9, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x80, 0x2, 0x0, @empty, @multicast1=0xe0000300, {[@generic={0x88, 0x10, "49fb60283e8f99968b22ef990e21"}]}}, @dest_unreach={0x3, 0x4, 0x0, 0x0, 0x3, 0xc58, {0x5, 0x4, 0x0, 0x7, 0x0, 0x65, 0xe, 0x4e, 0x24, 0xc, @empty, @dev={0xac, 0x14, 0x14, 0x44}}}}}}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x7, 0x3, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}}, &(0x7f00000005c0)='syzkaller\x00', 0x6}, 0x94) setsockopt$MRT_ADD_MFC_PROXY(r2, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe0000300, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xfffffff7, 0x4, 0x40000006}, 0x3c) 11m29.378837891s ago: executing program 1 (id=987): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000040000100fffe0900010073797a300000000040000000030a01020000000000000000010000000900030073797a310000000014000480080002400000000008000140000000040900010073797a300000000064000000060a010400000000000000000100000008000b40000000000900010073797a30000000003c00048010000180080001"], 0xec}, 0x1, 0x0, 0x0, 0x20004c80}, 0x0) 11m28.971017387s ago: executing program 4 (id=989): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, &(0x7f0000000a00)=0x2, 0x4) 11m28.130483239s ago: executing program 4 (id=991): openat(0xffffffffffffff9c, 0x0, 0x800, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) rt_sigqueueinfo(0x0, 0x21, &(0x7f0000000100)={0x1f}) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') r3 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r3, 0xc1105517, &(0x7f0000000080)={{0x1009, 0x0, 0x0, 0x80, 'syz0\x00'}, 0x5, 0x0, 0x1, 0x0, 0x0, 0x8, 'syz1\x00', 0x0}) 11m27.814316543s ago: executing program 1 (id=993): r0 = socket$alg(0x26, 0x5, 0x0) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x50241, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000040)={0x3, &(0x7f0000000180)=[{0x1d, 0x5, 0xa, 0x5}, {0xd, 0x85, 0xd, 0x403}, {0x8, 0x0, 0x6, 0x1}]}) bind$bt_hci(r3, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r3, &(0x7f0000000040)=ANY=[], 0x6) socket$nl_generic(0x10, 0x3, 0x10) bpf$TOKEN_CREATE(0x24, &(0x7f0000000300)={0x0, r1}, 0x8) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1f, 0xc, &(0x7f0000000640)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x13, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x73, 0x11, 0x6d}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0xc4}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x6}, 0x94) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x4, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x80}, [@call={0x85, 0x0, 0x0, 0xa8}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0xfffffffd}, 0x39) bind$alg(r0, &(0x7f0000000180)={0x26, 'aead\x00', 0x0, 0x0, 'authencesn(wp512-generic,cbc-camellia-aesni-avx2)\x00'}, 0x58) r6 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_udp_int(r6, 0x11, 0xb, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$ARPT_SO_SET_REPLACE(r7, 0x0, 0x60, &(0x7f0000000780)={'filter\x00', 0xb001, 0x4, 0x3f0, 0x0, 0xe8, 0x0, 0x308, 0x308, 0x308, 0x7fffffe, 0x0, {[{{@arp={@multicast2, @loopback, 0xffffffff, 0xffffffff, 0x7, 0x9, {@mac=@random="3b4c52fb5365", {[0xff, 0x0, 0xff, 0x0, 0xff]}}, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, {[0x0, 0x0, 0x0, 0x0, 0xff]}}, 0x50, 0x1, 0xe, 0x9cd4, 0x0, 0xffff, 'veth0_to_team\x00', 'ip_vti0\x00', {}, {0xff}, 0x0, 0x202}, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0x1f8}}, {{@uncond, 0xc0, 0x110, 0x0, {0x0, 0x1e03}}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x3b}, @empty, @local, @multicast2, 0x2}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x3f}, 0x8, 0xffffffff}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r5, &(0x7f00000002c0)={0x2004}) 11m21.271790424s ago: executing program 4 (id=996): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r3) r4 = socket$unix(0x1, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0x7, 0x6361, 0x5, 0xffffffff, 0x6}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x7ff, 0x100000000, 0x6eb, 0x5, 0x7, 0x2c0b}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x240080c1}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x80000, {0x0, 0x0, 0x0, r6, {0x0, 0x6}, {0x2, 0xb}, {0xffe0, 0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0x8, 0x94, 0x10001, 0x3, 0xe, 0x4, 0x6, 0x10}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x2404c0f1}, 0x4000800) ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 11m20.771816442s ago: executing program 1 (id=1000): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="12000000050000"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r3, 0x2000300, 0xe, 0xfffffd83, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 11m19.580421838s ago: executing program 1 (id=1006): openat(0xffffffffffffff9c, 0x0, 0x800, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) rt_sigqueueinfo(0x0, 0x21, &(0x7f0000000100)={0x1f}) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') r3 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r3, 0xc1105517, &(0x7f0000000080)={{0x1009, 0x0, 0x0, 0x80, 'syz0\x00'}, 0x5, 0x0, 0x1, 0x0, 0x0, 0x8, 'syz1\x00', 0x0}) 11m9.145716487s ago: executing program 1 (id=1014): r0 = socket(0x1e, 0x1, 0x0) connect$tipc(r0, &(0x7f0000000040)=@id, 0x10) recvmsg$unix(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)}, 0x40) shutdown(r0, 0x2) 11m4.250605522s ago: executing program 32 (id=996): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r3) r4 = socket$unix(0x1, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0x7, 0x6361, 0x5, 0xffffffff, 0x6}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x7ff, 0x100000000, 0x6eb, 0x5, 0x7, 0x2c0b}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x240080c1}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x80000, {0x0, 0x0, 0x0, r6, {0x0, 0x6}, {0x2, 0xb}, {0xffe0, 0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0x8, 0x94, 0x10001, 0x3, 0xe, 0x4, 0x6, 0x10}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x2404c0f1}, 0x4000800) ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 10m53.82794522s ago: executing program 33 (id=1014): r0 = socket(0x1e, 0x1, 0x0) connect$tipc(r0, &(0x7f0000000040)=@id, 0x10) recvmsg$unix(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)}, 0x40) shutdown(r0, 0x2) 10m41.030019682s ago: executing program 3 (id=1065): r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000100)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) 10m37.149725231s ago: executing program 3 (id=1067): sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000000)="8724", 0x2}], 0x1) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r0, 0x4010744d, &(0x7f0000000180)) 10m34.915957102s ago: executing program 0 (id=1071): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000000), 0x10) readv(r0, &(0x7f0000000180)=[{0x0}], 0x1) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f00000000c0)=0x74acdc45, 0x4) sendmsg$can_bcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="05000000030800"/16, @ANYRES64=0x0, @ANYRES64=0x2710], 0x80}}, 0x0) 10m33.813251936s ago: executing program 0 (id=1072): openat(0xffffffffffffff9c, 0x0, 0x800, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) rt_sigqueueinfo(0x0, 0x21, &(0x7f0000000100)={0x1f}) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') r2 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r2, 0xc1105517, &(0x7f0000000080)={{0x1009, 0x0, 0x0, 0x80, 'syz0\x00'}, 0x5, 0x0, 0x1, 0x0, 0x0, 0x8, 'syz1\x00', 0x0}) 10m30.003980486s ago: executing program 0 (id=1074): r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) r1 = syz_io_uring_setup(0x110, &(0x7f0000000200)={0x0, 0xfec9, 0x8, 0x5, 0x3d4}, &(0x7f0000000040)=0x0, &(0x7f0000000140)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_enter(r1, 0xdb4, 0x0, 0x0, 0x0, 0x0) write$vga_arbiter(r0, &(0x7f0000000280)=ANY=[@ANYBLOB='lock io'], 0xc) write$vga_arbiter(r0, &(0x7f0000000000)=@other={'unlock', ' ', 'mem'}, 0xb) 10m29.681758784s ago: executing program 3 (id=1075): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000002c0)='bbr', 0x37) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="540000001200b5a339f2d30afddbdf4d200f070700000000000025862f00000001ffffffc3000000060000000087c32be695bfd3ead0084f93e374ef9c", @ANYRES32=0x0, @ANYBLOB="de00fbff"], 0x54}, 0x1, 0x0, 0x0, 0x4008000}, 0x40000) 10m26.341009566s ago: executing program 3 (id=1078): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, 0x0) r0 = gettid() timer_create(0xb, &(0x7f00000000c0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) r1 = epoll_create1(0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000000)={0xa0002002}) 10m26.223815279s ago: executing program 0 (id=1079): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r0) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000040000001400050003030000000a0000005dc00006000000080002000500000014000600ff01"], 0x4c}, 0x1, 0x0, 0x0, 0x8004}, 0x4040000) 10m25.262857518s ago: executing program 3 (id=1082): openat(0xffffffffffffff9c, 0x0, 0x800, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) rt_sigqueueinfo(0x0, 0x21, &(0x7f0000000100)={0x1f}) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') r2 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r2, 0xc1105517, &(0x7f0000000080)={{0x1009, 0x0, 0x0, 0x80, 'syz0\x00'}, 0x5, 0x0, 0x1, 0x0, 0x0, 0x8, 'syz1\x00', 0x0}) 10m18.334133407s ago: executing program 0 (id=1083): r0 = syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000040)={0x40, 0x0, 0x5, {0x5, 0x11, "a7ea31"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 10m16.859310543s ago: executing program 3 (id=1085): syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) socket(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) socket$caif_stream(0x25, 0x1, 0x3) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x38}}, 0x10) 10m14.036002168s ago: executing program 0 (id=1088): r0 = socket(0x3, 0x3, 0x180000) getsockname$packet(r0, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb45, 0x100000000009, 0xa, 0x0, 0x3}, 0x0) r3 = shmat(0x0, &(0x7f0000ff1000/0x3000)=nil, 0x400c) mremap(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffb000/0x2000)=nil) shmdt(r3) 10m1.288118661s ago: executing program 34 (id=1085): syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) socket(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) socket$caif_stream(0x25, 0x1, 0x3) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x38}}, 0x10) 9m58.54681471s ago: executing program 35 (id=1088): r0 = socket(0x3, 0x3, 0x180000) getsockname$packet(r0, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb45, 0x100000000009, 0xa, 0x0, 0x3}, 0x0) r3 = shmat(0x0, &(0x7f0000ff1000/0x3000)=nil, 0x400c) mremap(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffb000/0x2000)=nil) shmdt(r3) 8m30.360840185s ago: executing program 2 (id=1215): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb4e02000) r0 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SET_SECCOMP(0x4e, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000380)=@newlink={0x54, 0x10, 0x503, 0x0, 0xfffff7fd, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0xfffffffffffffe08}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x48482}}}}}}, @IFLA_ADDRESS={0x7, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x37}}]}, 0x54}}, 0x8080) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x6, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xe, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x20000000) io_pgetevents(0x0, 0x1, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x116, &(0x7f0000000340)={0x0, 0x0, 0x2, 0x4}, 0x0, 0x0) 8m21.989757036s ago: executing program 2 (id=1225): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r1, 0x0, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=@delchain={0x24, 0x66, 0x221, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff2}, {}, {0xb, 0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x8848}, 0x24004800) 8m20.262172331s ago: executing program 2 (id=1231): prctl$PR_SET_MM_MAP(0x45, 0xe, 0x0, 0x0) 8m19.429492691s ago: executing program 2 (id=1235): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb4e02000) r0 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SET_SECCOMP(0x4e, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000380)=@newlink={0x54, 0x10, 0x503, 0x0, 0xfffff7fd, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0xfffffffffffffe08}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x48482}}}}}}, @IFLA_ADDRESS={0x7, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x37}}]}, 0x54}}, 0x8080) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x6, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xe, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x20000000) io_pgetevents(0x0, 0x1, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x116, &(0x7f0000000340)={0x0, 0x0, 0x2, 0x4}, 0x0, 0x0) 8m11.579266026s ago: executing program 2 (id=1240): socket$vsock_stream(0x28, 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'ip6gretap0\x00', 0x0}) r2 = gettid() r3 = socket(0x10, 0x803, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB="049c01000750050008001300", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x4802}, 0x0) 8m8.92167545s ago: executing program 2 (id=1248): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_pidfd_open(r0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@xino_auto}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000002180)='./file0\x00', 0x80480, 0xcd) getdents64(r4, &(0x7f0000000580)=""/174, 0xae) 7m51.723211457s ago: executing program 36 (id=1248): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_pidfd_open(r0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@xino_auto}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000002180)='./file0\x00', 0x80480, 0xcd) getdents64(r4, &(0x7f0000000580)=""/174, 0xae) 3m55.522538218s ago: executing program 8 (id=1964): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x40, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x5, 0x7, 0xb3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000884) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x78, 0x28, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffbddc, {0x0, 0x0, 0x0, r4, {0x10}, {}, {0xc, 0x1}}, [@qdisc_kind_options=@q_cbq={{0x8}, {0x4c, 0x2, [@TCA_CBS_PARMS={0x18, 0x1, {0x1, '\x00', 0x8c2b, 0x0, 0x3ff, 0x9d}}, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0xd5, 0x2, 0x6, 0xc}}, @TCA_CBS_PARMS={0x18, 0x1, {0x7, '\x00', 0x6c84, 0x800, 0xdc7, 0x6}}]}}]}, 0x78}, 0x1, 0x0, 0x0, 0x4040098}, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r5, &(0x7f0000000880)="bad330fbc9b5544972e7a5ea0756", 0xe, 0x40, &(0x7f0000000000)={0x11, 0x1a, r4, 0x1, 0xd8, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x14) 3m54.376834824s ago: executing program 8 (id=1970): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000240)={0x2, 0x5, 0x40003}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f00000001c0)={0x7, 0x1, 0x7}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x49, 0x7fff, 0x4}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000380)={0xff, 0x3, 0xd83f}) close_range(r0, 0xffffffffffffffff, 0x0) 3m52.844796757s ago: executing program 8 (id=1977): r0 = syz_open_dev$dri(&(0x7f0000000240), 0x1, 0x101040) ioctl$DRM_IOCTL_MODE_GETFB(r0, 0xc01c64ad, &(0x7f0000000140)) 3m52.119886234s ago: executing program 8 (id=1981): r0 = socket(0x10, 0x3, 0x0) getsockopt$sock_buf(r0, 0x1, 0x1f, 0x0, &(0x7f0000000100)) 3m50.811769188s ago: executing program 8 (id=1983): bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) syz_emit_vhci(0x0, 0x0) msgctl$MSG_INFO(0x0, 0xc, &(0x7f0000000100)=""/99) 3m44.213684036s ago: executing program 8 (id=1987): r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000040)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008004000000ffe809000000fff5dd0000000800030006010000418e01400004fcff", 0x58}], 0x1) 3m27.970255002s ago: executing program 37 (id=1987): r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000040)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008004000000ffe809000000fff5dd0000000800030006010000418e01400004fcff", 0x58}], 0x1) 1m13.360945176s ago: executing program 6 (id=2258): pipe2(&(0x7f0000001380)={0xffffffffffffffff}, 0x84880) read$FUSE(r0, &(0x7f00000013c0)={0x2020}, 0x2020) 1m11.708955848s ago: executing program 6 (id=2261): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x9, 0x4, 0x7ffc0002}]}) r0 = mq_open(&(0x7f0000000040)='\xeb\xac\xa5\x03\x00\x00\x00\x00', 0x842, 0x0, 0x0) mq_timedreceive(r0, 0x0, 0xffffffffffffffea, 0x9, 0x0) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000b00)=[{0x0}, {&(0x7f0000000380)="e4836d513bcab6b90efd3ebcdfc597b9a7e727a3ece8daadf4b24a69b21dfd745934e8870086d4dcd91c1c9a69f5d303d175b4bcc0da016fb4be47336b3557b59b09b0bce1", 0x45}], 0x2, 0x0, 0x0, 0x54}, 0x4040884) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x2, 0x0) read(r2, &(0x7f0000000080)=""/1, 0x1) r3 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r3, 0x6, 0x0, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = fsmount(r3, 0x1, 0x0) r5 = openat$cgroup_subtree(r4, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 1m7.694850974s ago: executing program 6 (id=2267): ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}}, 0x0, 0x0, 0x1a, 0x0, "f1f7882eade7f9ed59dd754ed3fa9513bc8d9662eaae6a87ea17d19cced73fca9d00b370eaefb2ecab4c20fb0d62c726cc3cb83d211da63fb4007c81ad7a2edac7859b8988028702e2027b84c554f86f"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x4c, 0x0, "01deaba05ccc4fa00711be66bd584ecd190428efc9e569f4b222158b227692cebc00924f2deea371bafa061b8f2959b4b696b22e4881f40a0d8f4c2fdea78893bc2c160df3e41db4153cfd9221d01c79"}, 0xd8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080), &(0x7f00000000c0)=0x5) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) 1m6.034684512s ago: executing program 7 (id=2269): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)={0x48, r1, 0x1, 0x70bd28, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x2c, 0x33, @reassoc_resp={{{0x0, 0x0, 0x8}, {}, @broadcast}, 0x0, 0x30, @default, @val, @void, [{0xdd, 0x6, "c31b43702fa9"}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) 1m5.791415332s ago: executing program 6 (id=2270): openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_usb_connect$cdc_ncm(0x2, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000009000008250200000000000000010902"], 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r0, 0xffffffffffffffff, 0x200000000000000) 1m4.157671289s ago: executing program 7 (id=2271): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$kcm(0x2, 0xa, 0x2) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) ioctl$sock_inet_SIOCSIFBRDADDR(0xffffffffffffffff, 0x891a, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bond0\x00'}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=ANY=[], 0x90}, 0x1, 0xba01}, 0x810) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) bind$tipc(0xffffffffffffffff, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x5}}, 0x10) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'bond0\x00', &(0x7f0000000040)=@ethtool_sfeatures={0x3b, 0x2, [{0x1200}, {0xfffffffe, 0x80003}]}}) 1m1.084790727s ago: executing program 6 (id=2275): r0 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000b40)={0xa, 0x8b}, 0x0) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x5, &(0x7f0000000100)=@framed={{0x18, 0x8}, [@exit, @alu={0x5, 0x1, 0xc, 0xa, 0xa}]}, &(0x7f0000000000)='GPL\x00', 0x4}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x21) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0xd, 0x10, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000010000b7080000000000007b8af8ff00000000b7080000000000107b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYBLOB="0000000002000000b705000008000000850000005d00000095"], &(0x7f00000001c0)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) futex(0x0, 0x5, 0x2, 0x0, 0x0, 0x616e9570) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000080), 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) chdir(0x0) add_key$keyring(0x0, &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x132, &(0x7f0000000940)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94) 53.238622854s ago: executing program 6 (id=2277): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$sock_int(r0, 0x1, 0x35, &(0x7f0000000240)=0x1, 0x4) 51.837763205s ago: executing program 7 (id=2279): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000740)={'wlan1\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)={0x24, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x5, 0x5b, "16"}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000780)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000005000000003a00000008000300", @ANYRES32=r3, @ANYBLOB="05005b"], 0x24}}, 0x0) close(r0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)) ioctl$SIOCSIFHWADDR(r0, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) 43.444914131s ago: executing program 7 (id=2285): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) getsockopt$rose(r0, 0x104, 0x4, 0x0, 0x0) 42.068768808s ago: executing program 7 (id=2288): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$kcm(0x2, 0xa, 0x2) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) ioctl$sock_inet_SIOCSIFBRDADDR(0xffffffffffffffff, 0x891a, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bond0\x00'}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=ANY=[], 0x90}, 0x1, 0xba01}, 0x810) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) bind$tipc(0xffffffffffffffff, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x5}}, 0x10) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'bond0\x00', &(0x7f0000000040)=@ethtool_sfeatures={0x3b, 0x2, [{0x1200}, {0xfffffffe, 0x80003}]}}) 39.649179852s ago: executing program 7 (id=2289): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000006000/0x2000)=nil, &(0x7f000000d000/0x4000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ff6000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r2 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc8a2, 0xc000, 0x1, 0xf3}) socket$nl_generic(0x10, 0x3, 0x10) socket$l2tp(0x2, 0x2, 0x73) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@deltfilter={0xe, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x3}, {0x0, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x8010}, 0x0) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0xc, &(0x7f0000000100)=[{0x1, 0x36, 0x5, 0x537}, {0x27, 0x8, 0x9}, {0xe49, 0x2, 0xfa, 0x4}, {0x5b6, 0x8, 0x1, 0x2}, {0x2, 0xe, 0x80, 0x1000003}, {0x1ff, 0x5, 0x10, 0xf}, {0x2, 0x0, 0x1, 0x9}]}) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, 0x0) 37.452347315s ago: executing program 38 (id=2277): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$sock_int(r0, 0x1, 0x35, &(0x7f0000000240)=0x1, 0x4) 23.220472165s ago: executing program 39 (id=2289): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000006000/0x2000)=nil, &(0x7f000000d000/0x4000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ff6000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r2 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc8a2, 0xc000, 0x1, 0xf3}) socket$nl_generic(0x10, 0x3, 0x10) socket$l2tp(0x2, 0x2, 0x73) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@deltfilter={0xe, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x3}, {0x0, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x8010}, 0x0) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0xc, &(0x7f0000000100)=[{0x1, 0x36, 0x5, 0x537}, {0x27, 0x8, 0x9}, {0xe49, 0x2, 0xfa, 0x4}, {0x5b6, 0x8, 0x1, 0x2}, {0x2, 0xe, 0x80, 0x1000003}, {0x1ff, 0x5, 0x10, 0xf}, {0x2, 0x0, 0x1, 0x9}]}) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, 0x0) 17.64901777s ago: executing program 5 (id=2310): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, 0x0, 0x24040084) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r8, {0xffff}, {0xffff, 0xffff}, {0x2, 0xa}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newqdisc={0x30, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r11, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)=@newqdisc={0x40, 0x28, 0x4ee4e6a52ff56541, 0x5001, 0xfffffdfb, {0x0, 0x0, 0x0, r4, {0x4}, {0xffff, 0xffff}, {0xe, 0x1}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x7, 0x1}}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r12, {0x0, 0xfff2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) 12.666421413s ago: executing program 9 (id=2311): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000080), r0) sendmsg$NFC_CMD_FW_DOWNLOAD(r0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8080}, 0x4000010) 11.839902927s ago: executing program 5 (id=2312): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)={0x4c, r1, 0x1, 0x70bd28, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x2f, 0x33, @reassoc_resp={{{0x0, 0x0, 0x8}, {}, @broadcast}, 0x0, 0x30, @default, @val={0x1, 0x3, [{0x2, 0x1}, {0x4}, {0x4}]}, @void, [{0xdd, 0x6, "c31b43702fa9"}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) 11.3810234s ago: executing program 9 (id=2313): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x4) fchdir(r1) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) execve(&(0x7f00000190c0)='./file0\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) 10.331184032s ago: executing program 9 (id=2314): sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$can_j1939(0xffffffffffffffff, &(0x7f00000000c0)={0x1d, r0, 0xffffffffffffffff}, 0x18) sendmsg$sock(0xffffffffffffffff, &(0x7f0000001480)={&(0x7f0000000200)=@can={0x1d, r0}, 0x80, 0x0}, 0x811) 10.116272125s ago: executing program 5 (id=2315): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x40, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x5, 0x7, 0xb3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000884) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x4040098}, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r5, &(0x7f0000000880)="bad330fbc9b5544972e7a5ea0756", 0xe, 0x40, &(0x7f0000000000)={0x11, 0x1a, r4, 0x1, 0xd8, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x14) 9.405842077s ago: executing program 9 (id=2316): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$kcm(0x2, 0xa, 0x2) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) ioctl$sock_inet_SIOCSIFBRDADDR(0xffffffffffffffff, 0x891a, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=ANY=[@ANYBLOB="90000000100003040400"/20, @ANYRES32=0x0, @ANYBLOB="010102000000000008000500", @ANYRES32=r3], 0x90}, 0x1, 0xba01}, 0x810) r4 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r4, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) bind$tipc(0xffffffffffffffff, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x5}}, 0x10) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'bond0\x00', &(0x7f0000000040)=@ethtool_sfeatures={0x3b, 0x2, [{0x1200}, {0xfffffffe, 0x80003}]}}) 4.800291032s ago: executing program 9 (id=2317): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000008c0)={0x38, r1, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@ETHTOOL_A_FEATURES_WANTED={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4001019}, 0x20000004) 4.176722699s ago: executing program 5 (id=2318): r0 = socket$qrtr(0x2a, 0x2, 0x0) getpeername$qrtr(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) setrlimit(0x6, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmmsg(0xffffffffffffffff, &(0x7f0000000000), 0x4000000000001f2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) modify_ldt$write2(0x11, &(0x7f0000000040), 0x10) 3.829697074s ago: executing program 9 (id=2319): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x24040084) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r8, {0xffff}, {0xffff, 0xffff}, {0x2, 0xa}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newqdisc={0x30, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r11, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)=@newqdisc={0x40, 0x28, 0x4ee4e6a52ff56541, 0x5001, 0xfffffdfb, {0x0, 0x0, 0x0, r4, {0x4}, {0xffff, 0xffff}, {0xe, 0x1}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x7, 0x1}}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r12, {0x0, 0xfff2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) 1.272279373s ago: executing program 5 (id=2320): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) msgrcv(0x0, 0x0, 0x0, 0x0, 0xa1e3a9fe3eb9c551) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) read$dsp(0xffffffffffffffff, &(0x7f00000002c0)=""/4096, 0x1000) r1 = openat$ttyS3(0xffffff9c, &(0x7f00000001c0), 0x800, 0x0) ioctl$TIOCSWINSZ(r1, 0x5414, &(0x7f0000001300)={0x1, 0x5, 0x6, 0x2}) 0s ago: executing program 5 (id=2321): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r1, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, r2, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x334e8b}) ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f0000000240)={0x18, r1}) kernel console output (not intermixed with test programs): rtc_cmos 00:00: Alarms can be up to one day in the future [ 680.725197][ T5845] rtc rtc0: __rtc_set_alarm: err=-22 [ 681.268508][ T8882] usb 6-1: GET_CAPABILITIES returned f8 [ 681.274854][ T8882] usbtmc 6-1:16.0: can't read capabilities [ 681.478210][ T8882] usb 6-1: USB disconnect, device number 2 [ 681.543100][ T9724] syz_tun: entered allmulticast mode [ 682.260181][ T9732] tipc: Enabling of bearer rejected, failed to enable media [ 682.447066][ T5845] kernel write not supported for file /input/mice (pid: 5845 comm: kworker/1:4) [ 683.545574][ T9750] loop8: detected capacity change from 0 to 4096 [ 685.908152][ T9750] ntfs3(loop8): Failed to read $AttrDef (-4). [ 687.813829][ T9760] netlink: 'syz.8.1185': attribute type 1 has an invalid length. [ 692.622033][ T8882] kernel write not supported for file /input/mice (pid: 8882 comm: kworker/0:3) [ 693.820909][ T9806] netlink: 'syz.6.1199': attribute type 1 has an invalid length. [ 696.156455][ T9812] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1200'. [ 696.166371][ T9812] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1200'. [ 701.572991][ T5845] kernel write not supported for file /input/mice (pid: 5845 comm: kworker/1:4) [ 702.405504][ T9865] loop5: detected capacity change from 0 to 4096 [ 705.490699][ T9865] ntfs3(loop5): ino=18, mi_enum_attr [ 705.496616][ T9865] ntfs3(loop5): Mark volume as dirty due to NTFS errors [ 707.613245][ T9884] ======================================================= [ 707.613245][ T9884] WARNING: The mand mount option has been deprecated and [ 707.613245][ T9884] and is ignored by this kernel. Remove the mand [ 707.613245][ T9884] option from the mount to silence this warning. [ 707.613245][ T9884] ======================================================= [ 707.674419][ T9884] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 711.513784][ T8882] kernel write not supported for file /input/mice (pid: 8882 comm: kworker/0:3) [ 712.594593][ T9925] loop7: detected capacity change from 0 to 4096 [ 714.095415][ T9927] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 714.364193][ T9925] ntfs3(loop7): Failed to read $UpCase (-4). [ 716.191965][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 716.848246][ T9940] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1235'. [ 716.858150][ T9940] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1235'. [ 722.695978][ T8882] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 722.894111][ T8882] usb 7-1: Using ep0 maxpacket: 32 [ 722.956463][ T8882] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 722.968090][ T8882] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 722.978740][ T8882] usb 7-1: New USB device found, idVendor=10c4, idProduct=8acf, bcdDevice= 0.00 [ 722.988226][ T8882] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 723.141981][ T8882] usb 7-1: config 0 descriptor?? [ 723.154142][ T5845] kernel write not supported for file /input/mice (pid: 5845 comm: kworker/1:4) [ 724.397853][ T9988] loop7: detected capacity change from 0 to 4096 [ 725.885019][ T8882] usbhid 7-1:0.0: can't add hid device: -71 [ 725.901464][ T8882] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 726.064746][ T9988] ntfs3(loop7): Failed to read $AttrDef (-4). [ 726.655688][ T8882] usb 7-1: USB disconnect, device number 2 [ 726.873328][ T9993] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 728.329761][ T9999] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1250'. [ 728.339469][ T9999] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1250'. [ 730.410582][T10032] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1258'. [ 731.587109][ T5846] kernel write not supported for file /input/mice (pid: 5846 comm: kworker/0:4) [ 732.505769][T10047] loop7: detected capacity change from 0 to 4096 [ 733.492698][ T9131] Bluetooth: hci4: command 0x0406 tx timeout [ 734.235209][T10047] ntfs3(loop7): ino=18, mi_enum_attr [ 734.240921][T10047] ntfs3(loop7): Mark volume as dirty due to NTFS errors [ 735.422256][ T5845] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 735.671652][ T5845] usb 6-1: Using ep0 maxpacket: 32 [ 735.695850][ T5845] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 735.707126][ T5845] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 735.717451][ T5845] usb 6-1: New USB device found, idVendor=10c4, idProduct=8acf, bcdDevice= 0.00 [ 735.730723][ T5845] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 735.952455][ T5845] usb 6-1: config 0 descriptor?? [ 737.097182][T10065] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1267'. [ 737.106809][T10065] netlink: 36 bytes leftover after parsing attributes in process `syz.8.1267'. [ 737.983917][ T50] Bluetooth: hci3: command 0x0405 tx timeout [ 740.051930][ T5798] Bluetooth: hci6: command 0x0406 tx timeout [ 740.058277][ T9131] Bluetooth: hci5: command 0x0406 tx timeout [ 740.782734][ T5845] usbhid 6-1:0.0: can't add hid device: -71 [ 740.789403][ T5845] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 740.937618][ T5845] usb 6-1: USB disconnect, device number 3 [ 741.766975][T10087] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1272'. [ 742.033286][ T5798] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 742.073404][ T5798] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 742.083541][ T5798] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 742.131450][ T5798] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 742.166170][ T5798] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 743.160265][ T5845] kernel write not supported for file /input/mice (pid: 5845 comm: kworker/1:4) [ 744.058943][T10105] loop6: detected capacity change from 0 to 4096 [ 744.212255][ T9131] Bluetooth: hci0: command tx timeout [ 746.189077][T10105] ntfs3(loop6): Failed to read $AttrDef (-4). [ 746.313023][ T9131] Bluetooth: hci0: command tx timeout [ 748.066573][T10127] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1281'. [ 748.126474][T10123] bond1: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 748.202693][T10123] bond1 (unregistering): Released all slaves [ 748.401339][ T5798] Bluetooth: hci0: command tx timeout [ 748.858615][ T5798] Bluetooth: hci3: command 0x0405 tx timeout [ 748.882519][T10090] chnl_net:caif_netlink_parms(): no params data found [ 749.131832][ T5845] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 749.353941][ T5845] usb 9-1: Using ep0 maxpacket: 32 [ 749.414160][ T5845] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 749.425641][ T5845] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 749.436172][ T5845] usb 9-1: New USB device found, idVendor=10c4, idProduct=8acf, bcdDevice= 0.00 [ 749.448950][ T5845] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 749.644418][ T5845] usb 9-1: config 0 descriptor?? [ 750.066425][T10151] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1286'. [ 750.442848][ T5845] usbhid 9-1:0.0: can't add hid device: -71 [ 750.449292][ T5845] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 750.460667][ T9131] Bluetooth: hci0: command tx timeout [ 750.489591][ T5845] usb 9-1: USB disconnect, device number 2 [ 751.263592][ T798] kernel write not supported for file /input/mice (pid: 798 comm: kworker/0:2) [ 752.151659][T10167] loop6: detected capacity change from 0 to 4096 [ 753.240258][T10167] ntfs3(loop6): ino=18, mi_enum_attr [ 753.246023][T10167] ntfs3(loop6): Mark volume as dirty due to NTFS errors [ 753.561189][T10090] bridge0: port 1(bridge_slave_0) entered blocking state [ 753.577767][T10090] bridge0: port 1(bridge_slave_0) entered disabled state [ 753.945468][T10090] bridge_slave_0: entered allmulticast mode [ 754.258465][T10090] bridge_slave_0: entered promiscuous mode [ 754.374177][T10090] bridge0: port 2(bridge_slave_1) entered blocking state [ 754.382079][T10090] bridge0: port 2(bridge_slave_1) entered disabled state [ 754.437690][T10090] bridge_slave_1: entered allmulticast mode [ 754.518369][T10090] bridge_slave_1: entered promiscuous mode [ 754.913850][T10179] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1293'. [ 755.116083][T10090] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 755.234331][T10090] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 755.853569][T10090] team0: Port device team_slave_0 added [ 755.985879][T10090] team0: Port device team_slave_1 added [ 756.521430][T10199] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1298'. [ 756.692462][T10090] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 756.699683][T10090] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 756.733232][T10090] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 756.859952][T10204] netlink: 156 bytes leftover after parsing attributes in process `syz.7.1299'. [ 756.902361][T10090] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 756.909613][T10090] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 756.940388][T10090] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 757.520460][ T13] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 757.910004][ T13] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 758.297526][ T13] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 758.517960][T10090] hsr_slave_0: entered promiscuous mode [ 758.635863][T10090] hsr_slave_1: entered promiscuous mode [ 758.727922][ T13] bridge0: port 3(netdevsim0) entered disabled state [ 758.835397][ T13] netdevsim netdevsim2 netdevsim0 (unregistering): left allmulticast mode [ 758.907763][ T13] netdevsim netdevsim2 netdevsim0 (unregistering): left promiscuous mode [ 758.916793][ T13] bridge0: port 3(netdevsim0) entered disabled state [ 759.206151][ T13] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 761.653706][ T13] vlan2: left allmulticast mode [ 761.676798][ T13] dummy0: left allmulticast mode [ 761.682214][ T13] vlan2: left promiscuous mode [ 761.709744][ T13] dummy0: left promiscuous mode [ 761.716494][ T13] bridge0: port 4(vlan2) entered disabled state [ 761.805223][ T13] bridge_slave_1: left allmulticast mode [ 761.811063][ T13] bridge_slave_1: left promiscuous mode [ 761.818608][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 761.928121][ T13] bridge_slave_0: left allmulticast mode [ 761.940365][ T13] bridge_slave_0: left promiscuous mode [ 761.947181][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 762.121199][T10244] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1311'. [ 763.944238][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 763.997210][ T13] bond_slave_0: left promiscuous mode [ 764.021216][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 764.033996][ T13] bond_slave_1: left promiscuous mode [ 764.053753][ T13] bond0 (unregistering): Released all slaves [ 764.094710][ T13] bond1 (unregistering): Released all slaves [ 764.387069][ T13] tipc: Left network mode [ 764.578695][T10258] netlink: 'syz.6.1317': attribute type 3 has an invalid length. [ 764.587045][T10258] netlink: 'syz.6.1317': attribute type 1 has an invalid length. [ 764.595169][T10258] netlink: 60387 bytes leftover after parsing attributes in process `syz.6.1317'. [ 765.169714][ T13] hsr_slave_0: left promiscuous mode [ 765.193984][ T13] hsr_slave_1: left promiscuous mode [ 765.196271][T10265] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1319'. [ 765.226923][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 765.234975][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 765.304447][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 765.316381][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 765.510316][ T13] veth1_macvtap: left promiscuous mode [ 765.516907][ T13] veth0_macvtap: left promiscuous mode [ 765.531174][ T13] veth1_vlan: left promiscuous mode [ 765.555906][ T13] veth0_vlan: left promiscuous mode [ 768.175723][ T13] team0 (unregistering): Port device team_slave_1 removed [ 768.288142][ T13] team0 (unregistering): Port device team_slave_0 removed [ 768.925275][T10289] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1328'. [ 769.324411][T10090] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 769.463147][T10090] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 769.612263][T10090] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 769.743504][T10090] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 769.888902][ T13] IPVS: stop unused estimator thread 0... [ 771.858437][T10090] 8021q: adding VLAN 0 to HW filter on device bond0 [ 772.156621][T10090] 8021q: adding VLAN 0 to HW filter on device team0 [ 772.358326][ T54] bridge0: port 1(bridge_slave_0) entered blocking state [ 772.366050][ T54] bridge0: port 1(bridge_slave_0) entered forwarding state [ 772.629040][ T54] bridge0: port 2(bridge_slave_1) entered blocking state [ 772.636577][ T54] bridge0: port 2(bridge_slave_1) entered forwarding state [ 773.461434][T10326] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1340'. [ 773.974151][T10327] netlink: 'syz.5.1339': attribute type 3 has an invalid length. [ 773.982612][T10327] netlink: 'syz.5.1339': attribute type 1 has an invalid length. [ 773.990586][T10327] netlink: 60387 bytes leftover after parsing attributes in process `syz.5.1339'. [ 775.611200][T10090] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 777.518635][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 778.235821][T10384] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1353'. [ 779.629161][T10397] netlink: 'syz.7.1356': attribute type 3 has an invalid length. [ 779.637395][T10397] netlink: 'syz.7.1356': attribute type 1 has an invalid length. [ 779.648416][T10397] netlink: 60387 bytes leftover after parsing attributes in process `syz.7.1356'. [ 779.836992][T10090] veth0_vlan: entered promiscuous mode [ 780.038084][T10090] veth1_vlan: entered promiscuous mode [ 780.600872][T10090] veth0_macvtap: entered promiscuous mode [ 780.798919][T10090] veth1_macvtap: entered promiscuous mode [ 781.116580][T10090] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 781.264946][T10090] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 781.498451][ T3475] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 781.552842][ T54] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 781.682474][ T54] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 781.698813][ T135] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 782.139467][T10425] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1364'. [ 782.907358][T10436] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1366'. [ 782.916547][T10436] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1366'. [ 783.960129][T10451] syzkaller0: entered promiscuous mode [ 783.970003][T10451] syzkaller0: entered allmulticast mode [ 786.734029][ T5840] kernel write not supported for file /input/mice (pid: 5840 comm: kworker/1:3) [ 787.646980][T10484] loop7: detected capacity change from 0 to 4096 [ 789.628624][T10484] ntfs3(loop7): Failed to read $AttrDef (-4). [ 790.468121][T10491] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1378'. [ 791.403277][T10509] netlink: 76 bytes leftover after parsing attributes in process `syz.7.1381'. [ 794.653117][T10543] syz_tun: entered allmulticast mode [ 794.687268][ T5955] kernel write not supported for file /input/mice (pid: 5955 comm: kworker/1:5) [ 795.236785][ T9989] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 795.245577][ T9989] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 795.575584][T10548] loop7: detected capacity change from 0 to 4096 [ 797.384941][T10548] ntfs3(loop7): Failed to read $UpCase (-4). [ 798.222433][ T3475] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 798.230902][ T3475] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 798.466955][T10557] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1390'. [ 799.858277][T10584] netlink: 76 bytes leftover after parsing attributes in process `syz.8.1394'. [ 802.222067][ T5959] kernel write not supported for file /input/mice (pid: 5959 comm: kworker/0:5) [ 803.157899][T10621] loop6: detected capacity change from 0 to 4096 [ 804.958400][T10621] ntfs3(loop6): Failed to read $UpCase (-4). [ 806.152933][T10628] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1402'. [ 808.545285][T10668] netlink: 76 bytes leftover after parsing attributes in process `syz.7.1410'. [ 808.829034][ T9131] Bluetooth: hci0: link tx timeout [ 808.839327][ T9131] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 809.458308][ T5955] kernel write not supported for file /input/mice (pid: 5955 comm: kworker/1:5) [ 810.328760][T10685] loop6: detected capacity change from 0 to 4096 [ 810.852298][ T9131] Bluetooth: hci0: command 0x0406 tx timeout [ 812.003896][T10685] ntfs3(loop6): Failed to read $UpCase (-4). [ 816.774311][ T5959] kernel write not supported for file /input/mice (pid: 5959 comm: kworker/0:5) [ 817.669218][T10743] loop8: detected capacity change from 0 to 4096 [ 819.880400][T10743] ntfs3(loop8): Failed to read $AttrDef (-4). [ 820.415454][T10750] netlink: 76 bytes leftover after parsing attributes in process `syz.7.1426'. [ 822.131052][T10776] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1432'. [ 823.695386][ T5959] kernel write not supported for file /input/mice (pid: 5959 comm: kworker/0:5) [ 824.565517][T10804] loop7: detected capacity change from 0 to 4096 [ 826.486412][T10804] ntfs3(loop7): Failed to read $UpCase (-4). [ 827.819179][T10820] syz_tun: entered allmulticast mode [ 827.901954][ T8701] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 828.101968][ T8701] usb 9-1: Using ep0 maxpacket: 32 [ 828.206261][ T8701] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 828.217614][ T8701] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 828.228147][ T8701] usb 9-1: New USB device found, idVendor=10c4, idProduct=8acf, bcdDevice= 0.00 [ 828.237548][ T8701] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 828.477358][ T8701] usb 9-1: config 0 descriptor?? [ 828.826249][T10829] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1446'. [ 829.198851][ T8701] usbhid 9-1:0.0: can't add hid device: -71 [ 829.205695][ T8701] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 829.320065][ T8701] usb 9-1: USB disconnect, device number 3 [ 830.362055][ T5955] kernel write not supported for file /input/mice (pid: 5955 comm: kworker/1:5) [ 831.257615][T10854] loop9: detected capacity change from 0 to 4096 [ 833.385046][T10854] ntfs3(loop9): Failed to read $AttrDef (-4). [ 835.328835][T10879] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1459'. [ 836.453866][T10899] netlink: 28 bytes leftover after parsing attributes in process `syz.9.1466'. [ 836.473407][ T798] kernel write not supported for file /input/mice (pid: 798 comm: kworker/0:2) [ 837.498859][T10907] loop7: detected capacity change from 0 to 4096 [ 838.014108][T10907] ntfs3(loop7): ino=18, mi_enum_attr [ 838.023153][T10907] ntfs3(loop7): Mark volume as dirty due to NTFS errors [ 838.807724][T10910] Bluetooth: MGMT ver 1.23 [ 838.960884][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 840.253029][T10929] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1473'. [ 840.583200][ T798] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 840.818924][ T798] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 840.830297][ T798] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 840.841107][ T798] usb 7-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 840.850707][ T798] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 840.934856][ T798] usb 7-1: config 0 descriptor?? [ 841.488352][ T30] audit: type=1326 audit(1769112730.684:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10946 comm="syz.9.1479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1dcf19acb9 code=0x7ffc0000 [ 841.518453][ T30] audit: type=1326 audit(1769112730.704:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10946 comm="syz.9.1479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1dcf19acb9 code=0x7ffc0000 [ 841.639931][ T798] usb 7-1: language id specifier not provided by device, defaulting to English [ 841.701462][ T30] audit: type=1326 audit(1769112730.794:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10946 comm="syz.9.1479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7f1dcf19acb9 code=0x7ffc0000 [ 841.730148][ T30] audit: type=1326 audit(1769112730.794:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10946 comm="syz.9.1479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1dcf19acb9 code=0x7ffc0000 [ 841.754999][ T30] audit: type=1326 audit(1769112730.794:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10946 comm="syz.9.1479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1dcf19acb9 code=0x7ffc0000 [ 841.777988][ T30] audit: type=1326 audit(1769112730.794:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10946 comm="syz.9.1479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=243 compat=0 ip=0x7f1dcf19acb9 code=0x7ffc0000 [ 841.800864][ T30] audit: type=1326 audit(1769112730.794:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10946 comm="syz.9.1479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1dcf19acb9 code=0x7ffc0000 [ 841.829803][ T30] audit: type=1326 audit(1769112730.794:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10946 comm="syz.9.1479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1dcf19acb9 code=0x7ffc0000 [ 841.854483][ T30] audit: type=1326 audit(1769112730.794:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10946 comm="syz.9.1479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f1dcf19acb9 code=0x7ffc0000 [ 841.877474][ T30] audit: type=1326 audit(1769112730.854:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10946 comm="syz.9.1479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1dcf19acb9 code=0x7ffc0000 [ 841.919913][T10951] 9p: Bad value for 'rfdno' [ 842.201388][ T798] uclogic 0003:256C:006D.0001: interface is invalid, ignoring [ 842.395073][ T798] usb 7-1: USB disconnect, device number 3 [ 842.874246][T10962] loop5: detected capacity change from 0 to 4096 [ 843.076604][T10962] ntfs3(loop5): ino=18, mi_enum_attr [ 843.082250][T10962] ntfs3(loop5): Mark volume as dirty due to NTFS errors [ 843.954191][T10976] tipc: Enabling of bearer rejected, failed to enable media [ 844.752765][T10991] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1488'. [ 846.748724][ T5840] kernel write not supported for file /input/mice (pid: 5840 comm: kworker/1:3) [ 847.714881][T11051] tipc: Enabling of bearer rejected, failed to enable media [ 847.750437][T11053] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1503'. [ 849.222212][ T30] kauditd_printk_skb: 53 callbacks suppressed [ 849.222286][ T30] audit: type=1326 audit(1769112738.424:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11079 comm="syz.7.1509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feed599acb9 code=0x7ffc0000 [ 849.251862][ T30] audit: type=1326 audit(1769112738.434:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11079 comm="syz.7.1509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7feed599acb9 code=0x7ffc0000 [ 849.279197][ T30] audit: type=1326 audit(1769112738.434:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11079 comm="syz.7.1509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feed599acb9 code=0x7ffc0000 [ 849.304055][ T30] audit: type=1326 audit(1769112738.434:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11079 comm="syz.7.1509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feed599acb9 code=0x7ffc0000 [ 849.328327][ T30] audit: type=1326 audit(1769112738.434:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11079 comm="syz.7.1509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=243 compat=0 ip=0x7feed599acb9 code=0x7ffc0000 [ 849.351186][ T30] audit: type=1326 audit(1769112738.434:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11079 comm="syz.7.1509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feed599acb9 code=0x7ffc0000 [ 849.468900][ T30] audit: type=1326 audit(1769112738.444:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11079 comm="syz.7.1509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7feed599acb9 code=0x7ffc0000 [ 849.494799][ T30] audit: type=1326 audit(1769112738.444:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11079 comm="syz.7.1509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feed599acb9 code=0x7ffc0000 [ 849.518710][ T30] audit: type=1326 audit(1769112738.444:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11079 comm="syz.7.1509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7feed599acb9 code=0x7ffc0000 [ 849.541471][ T30] audit: type=1326 audit(1769112738.444:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11079 comm="syz.7.1509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feed599acb9 code=0x7ffc0000 [ 852.127149][T11132] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1516'. [ 852.443929][T11136] tipc: Enabling of bearer rejected, failed to enable media [ 855.487550][T11191] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1530'. [ 855.513130][ T5959] kernel write not supported for file /input/mice (pid: 5959 comm: kworker/0:5) [ 856.872815][T11218] tipc: Enabling of bearer rejected, failed to enable media [ 857.281832][ T30] kauditd_printk_skb: 62 callbacks suppressed [ 857.281909][ T30] audit: type=1326 audit(1769112746.484:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11226 comm="syz.8.1538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f297059acb9 code=0x7ffc0000 [ 857.506415][ T30] audit: type=1326 audit(1769112746.504:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11226 comm="syz.8.1538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f297059acb9 code=0x7ffc0000 [ 857.530409][ T30] audit: type=1326 audit(1769112746.574:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11226 comm="syz.8.1538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7f297059acb9 code=0x7ffc0000 [ 857.553844][ T30] audit: type=1326 audit(1769112746.584:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11226 comm="syz.8.1538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f297059acb9 code=0x7ffc0000 [ 857.586568][ T30] audit: type=1326 audit(1769112746.584:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11226 comm="syz.8.1538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f297059acb9 code=0x7ffc0000 [ 857.612106][ T30] audit: type=1326 audit(1769112746.614:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11226 comm="syz.8.1538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=243 compat=0 ip=0x7f297059acb9 code=0x7ffc0000 [ 857.635235][ T30] audit: type=1326 audit(1769112746.614:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11226 comm="syz.8.1538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f297059acb9 code=0x7ffc0000 [ 857.658145][ T30] audit: type=1326 audit(1769112746.614:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11226 comm="syz.8.1538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f297059acb9 code=0x7ffc0000 [ 857.681036][ T30] audit: type=1326 audit(1769112746.634:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11226 comm="syz.8.1538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f297059acb9 code=0x7ffc0000 [ 857.705590][ T30] audit: type=1326 audit(1769112746.634:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11226 comm="syz.8.1538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f297059acb9 code=0x7ffc0000 [ 859.089497][T11250] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1544'. [ 861.089070][T11292] tipc: Enabling of bearer rejected, failed to enable media [ 862.247633][T11310] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1557'. [ 862.780854][ T5955] kernel write not supported for file /input/mice (pid: 5955 comm: kworker/1:5) [ 863.788209][ T30] kauditd_printk_skb: 67 callbacks suppressed [ 863.788288][ T30] audit: type=1326 audit(1769112752.984:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11339 comm="syz.7.1564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feed599acb9 code=0x7ffc0000 [ 863.817753][ T30] audit: type=1326 audit(1769112752.994:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11339 comm="syz.7.1564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feed599acb9 code=0x7ffc0000 [ 863.941886][ T30] audit: type=1326 audit(1769112753.014:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11339 comm="syz.7.1564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7feed599acb9 code=0x7ffc0000 [ 863.964967][ T30] audit: type=1326 audit(1769112753.014:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11339 comm="syz.7.1564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feed599acb9 code=0x7ffc0000 [ 863.993141][ T30] audit: type=1326 audit(1769112753.044:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11339 comm="syz.7.1564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=243 compat=0 ip=0x7feed599acb9 code=0x7ffc0000 [ 864.016030][ T30] audit: type=1326 audit(1769112753.044:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11339 comm="syz.7.1564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feed599acb9 code=0x7ffc0000 [ 864.040946][ T30] audit: type=1326 audit(1769112753.044:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11339 comm="syz.7.1564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7feed599acb9 code=0x7ffc0000 [ 864.064535][ T30] audit: type=1326 audit(1769112753.044:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11339 comm="syz.7.1564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feed599acb9 code=0x7ffc0000 [ 864.089943][ T30] audit: type=1326 audit(1769112753.044:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11339 comm="syz.7.1564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7feed599acb9 code=0x7ffc0000 [ 864.114761][ T30] audit: type=1326 audit(1769112753.044:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11339 comm="syz.7.1564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feed599acb9 code=0x7ffc0000 [ 864.364625][T11349] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1565'. [ 865.743510][T11371] tipc: Started in network mode [ 865.748651][T11371] tipc: Node identity 823efff6c988, cluster identity 4711 [ 865.756977][T11371] tipc: Enabled bearer , priority 0 [ 865.847820][T11372] tipc: Resetting bearer [ 865.945805][T11370] tipc: Disabling bearer [ 866.006255][T11374] netlink: 'syz.7.1570': attribute type 3 has an invalid length. [ 866.014528][T11374] netlink: 'syz.7.1570': attribute type 1 has an invalid length. [ 866.022638][T11374] netlink: 60387 bytes leftover after parsing attributes in process `syz.7.1570'. [ 866.072276][T11376] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1572'. [ 868.038900][T11414] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1579'. [ 869.060839][T11428] tipc: Enabled bearer , priority 0 [ 869.108022][T11429] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1584'. [ 869.163459][T11426] tipc: Resetting bearer [ 869.275764][T11425] tipc: Disabling bearer [ 869.566749][ T8701] kernel write not supported for file /input/mice (pid: 8701 comm: kworker/0:0) [ 869.664826][T11436] netlink: 'syz.7.1587': attribute type 3 has an invalid length. [ 869.673164][T11436] netlink: 'syz.7.1587': attribute type 1 has an invalid length. [ 869.681044][T11436] netlink: 60387 bytes leftover after parsing attributes in process `syz.7.1587'. [ 870.847673][T11444] loop8: detected capacity change from 0 to 4096 [ 871.792449][T11444] ntfs3(loop8): ino=18, mi_enum_attr [ 871.798283][T11444] ntfs3(loop8): Mark volume as dirty due to NTFS errors [ 873.204026][ T30] kauditd_printk_skb: 62 callbacks suppressed [ 873.204099][ T30] audit: type=1326 audit(1769112762.424:289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11456 comm="syz.6.1592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7dbd9acb9 code=0x7ffc0000 [ 873.235279][ T30] audit: type=1326 audit(1769112762.424:290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11456 comm="syz.6.1592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7dbd9acb9 code=0x7ffc0000 [ 873.489050][T11469] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1595'. [ 873.529922][ T30] audit: type=1326 audit(1769112762.464:291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11456 comm="syz.6.1592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7fd7dbd9acb9 code=0x7ffc0000 [ 873.557766][ T30] audit: type=1326 audit(1769112762.464:292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11456 comm="syz.6.1592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7dbd9acb9 code=0x7ffc0000 [ 873.582177][ T30] audit: type=1326 audit(1769112762.464:293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11456 comm="syz.6.1592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7dbd9acb9 code=0x7ffc0000 [ 873.606755][ T30] audit: type=1326 audit(1769112762.484:294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11456 comm="syz.6.1592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=243 compat=0 ip=0x7fd7dbd9acb9 code=0x7ffc0000 [ 873.629736][ T30] audit: type=1326 audit(1769112762.484:295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11456 comm="syz.6.1592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7dbd9acb9 code=0x7ffc0000 [ 873.657455][ T30] audit: type=1326 audit(1769112762.484:296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11456 comm="syz.6.1592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7dbd9acb9 code=0x7ffc0000 [ 873.681925][ T30] audit: type=1326 audit(1769112762.504:297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11456 comm="syz.6.1592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fd7dbd9acb9 code=0x7ffc0000 [ 873.704690][ T30] audit: type=1326 audit(1769112762.504:298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11456 comm="syz.6.1592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7dbd9acb9 code=0x7ffc0000 [ 875.409085][T11501] tipc: Enabled bearer , priority 0 [ 875.577351][T11494] tipc: Disabling bearer [ 875.859664][ T8701] kernel write not supported for file /input/mice (pid: 8701 comm: kworker/0:0) [ 875.903937][T11505] netlink: 'syz.9.1604': attribute type 3 has an invalid length. [ 875.915476][T11505] netlink: 'syz.9.1604': attribute type 1 has an invalid length. [ 875.924402][T11505] netlink: 60387 bytes leftover after parsing attributes in process `syz.9.1604'. [ 876.945212][T11521] loop6: detected capacity change from 0 to 4096 [ 878.419938][T11521] ntfs3(loop6): ino=18, mi_enum_attr [ 878.425676][T11521] ntfs3(loop6): Mark volume as dirty due to NTFS errors [ 879.544035][T11533] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1609'. [ 881.535743][T11568] netlink: 'syz.8.1618': attribute type 3 has an invalid length. [ 881.546947][T11568] netlink: 'syz.8.1618': attribute type 1 has an invalid length. [ 881.555932][T11568] netlink: 60387 bytes leftover after parsing attributes in process `syz.8.1618'. [ 881.903668][ T8701] kernel write not supported for file /input/mice (pid: 8701 comm: kworker/0:0) [ 883.012585][T11587] loop5: detected capacity change from 0 to 4096 [ 884.460708][T11587] ntfs3(loop5): ino=18, mi_enum_attr [ 884.466572][T11587] ntfs3(loop5): Mark volume as dirty due to NTFS errors [ 885.407098][ T30] kauditd_printk_skb: 50 callbacks suppressed [ 885.407168][ T30] audit: type=1326 audit(1769112774.624:349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11592 comm="syz.8.1623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f297059acb9 code=0x7ffc0000 [ 885.443218][ T30] audit: type=1326 audit(1769112774.624:350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11592 comm="syz.8.1623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f297059acb9 code=0x7ffc0000 [ 885.824666][ T30] audit: type=1326 audit(1769112774.714:351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11592 comm="syz.8.1623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7f297059acb9 code=0x7ffc0000 [ 885.852880][ T30] audit: type=1326 audit(1769112774.714:352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11592 comm="syz.8.1623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f297059acb9 code=0x7ffc0000 [ 885.878346][ T30] audit: type=1326 audit(1769112774.714:353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11592 comm="syz.8.1623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f297059acb9 code=0x7ffc0000 [ 885.901796][ T30] audit: type=1326 audit(1769112774.744:354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11592 comm="syz.8.1623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=243 compat=0 ip=0x7f297059acb9 code=0x7ffc0000 [ 885.925163][ T30] audit: type=1326 audit(1769112774.744:355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11592 comm="syz.8.1623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f297059acb9 code=0x7ffc0000 [ 885.953117][ T30] audit: type=1326 audit(1769112774.744:356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11592 comm="syz.8.1623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f297059acb9 code=0x7ffc0000 [ 885.977828][ T30] audit: type=1326 audit(1769112774.744:357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11592 comm="syz.8.1623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f297059acb9 code=0x7ffc0000 [ 886.000780][ T30] audit: type=1326 audit(1769112774.744:358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11592 comm="syz.8.1623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f297059acb9 code=0x7ffc0000 [ 886.200969][T11609] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1626'. [ 887.531796][T11634] netlink: 'syz.7.1633': attribute type 3 has an invalid length. [ 887.539721][T11634] netlink: 'syz.7.1633': attribute type 1 has an invalid length. [ 887.550828][T11634] netlink: 60387 bytes leftover after parsing attributes in process `syz.7.1633'. [ 887.697671][T11628] af_packet: tpacket_rcv: packet too big, clamped from 3956 to 3952. macoff=96 [ 888.466346][ T5955] kernel write not supported for file /input/mice (pid: 5955 comm: kworker/1:5) [ 889.333147][T11660] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1638'. [ 889.402089][T11660] netlink: 20 bytes leftover after parsing attributes in process `syz.9.1638'. [ 890.553067][T11676] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1643'. [ 891.428522][T11686] netlink: 'syz.9.1647': attribute type 3 has an invalid length. [ 891.436661][T11686] netlink: 'syz.9.1647': attribute type 1 has an invalid length. [ 891.444900][T11686] netlink: 60387 bytes leftover after parsing attributes in process `syz.9.1647'. [ 892.895038][ T30] kauditd_printk_skb: 65 callbacks suppressed [ 892.895113][ T30] audit: type=1326 audit(1769112782.114:424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11708 comm="syz.9.1653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1dcf19acb9 code=0x7ffc0000 [ 892.993726][T11710] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1652'. [ 893.059774][T11710] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1652'. [ 893.143834][ T30] audit: type=1326 audit(1769112782.114:425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11708 comm="syz.9.1653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1dcf19acb9 code=0x7ffc0000 [ 893.167586][ T30] audit: type=1326 audit(1769112782.134:426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11708 comm="syz.9.1653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7f1dcf19acb9 code=0x7ffc0000 [ 893.190645][ T30] audit: type=1326 audit(1769112782.134:427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11708 comm="syz.9.1653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1dcf19acb9 code=0x7ffc0000 [ 893.218516][ T30] audit: type=1326 audit(1769112782.134:428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11708 comm="syz.9.1653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1dcf19acb9 code=0x7ffc0000 [ 893.243183][ T30] audit: type=1326 audit(1769112782.144:429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11708 comm="syz.9.1653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f1dcf19acb9 code=0x7ffc0000 [ 893.265975][ T30] audit: type=1326 audit(1769112782.144:430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11708 comm="syz.9.1653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1dcf19acb9 code=0x7ffc0000 [ 893.289010][ T30] audit: type=1326 audit(1769112782.144:431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11708 comm="syz.9.1653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f1dcf19acb9 code=0x7ffc0000 [ 893.311840][ T30] audit: type=1326 audit(1769112782.144:432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11708 comm="syz.9.1653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1dcf19acb9 code=0x7ffc0000 [ 893.339554][ T30] audit: type=1326 audit(1769112782.144:433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11708 comm="syz.9.1653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1dcf19acb9 code=0x7ffc0000 [ 894.185004][T11731] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1659'. [ 894.758523][T11741] netlink: 'syz.6.1663': attribute type 3 has an invalid length. [ 894.767025][T11741] netlink: 'syz.6.1663': attribute type 1 has an invalid length. [ 894.767104][T11741] netlink: 60387 bytes leftover after parsing attributes in process `syz.6.1663'. [ 894.970940][ T5955] kernel write not supported for file /input/mice (pid: 5955 comm: kworker/1:5) [ 897.146487][T11770] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1669'. [ 897.191848][T11770] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1669'. [ 898.177143][T11783] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1674'. [ 899.070510][T11791] netlink: 'syz.9.1677': attribute type 3 has an invalid length. [ 899.078822][T11791] netlink: 'syz.9.1677': attribute type 1 has an invalid length. [ 899.086849][T11791] netlink: 60387 bytes leftover after parsing attributes in process `syz.9.1677'. [ 900.421615][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 900.597385][ T30] kauditd_printk_skb: 62 callbacks suppressed [ 900.597461][ T30] audit: type=1326 audit(1769112789.814:496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11808 comm="syz.9.1681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1dcf19acb9 code=0x7ffc0000 [ 900.628932][ T30] audit: type=1326 audit(1769112789.814:497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11808 comm="syz.9.1681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1dcf19acb9 code=0x7ffc0000 [ 900.871341][ T30] audit: type=1326 audit(1769112789.854:498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11808 comm="syz.9.1681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7f1dcf19acb9 code=0x7ffc0000 [ 900.898030][ T30] audit: type=1326 audit(1769112789.854:499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11808 comm="syz.9.1681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1dcf19acb9 code=0x7ffc0000 [ 900.922690][ T30] audit: type=1326 audit(1769112789.854:500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11808 comm="syz.9.1681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1dcf19acb9 code=0x7ffc0000 [ 900.945906][ T30] audit: type=1326 audit(1769112789.904:501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11808 comm="syz.9.1681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f1dcf19acb9 code=0x7ffc0000 [ 900.971752][ T30] audit: type=1326 audit(1769112789.904:502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11808 comm="syz.9.1681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1dcf19acb9 code=0x7ffc0000 [ 900.997681][ T30] audit: type=1326 audit(1769112789.904:503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11808 comm="syz.9.1681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f1dcf19acb9 code=0x7ffc0000 [ 901.021260][ T30] audit: type=1326 audit(1769112789.924:504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11808 comm="syz.9.1681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1dcf19acb9 code=0x7ffc0000 [ 901.044331][ T30] audit: type=1326 audit(1769112789.944:505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11808 comm="syz.9.1681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f1dcf19acb9 code=0x7ffc0000 [ 901.108282][T11819] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1684'. [ 901.118398][T11819] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1684'. [ 901.764659][T11821] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1685'. [ 901.936559][T11821] vlan2: entered promiscuous mode [ 901.942611][T11821] bond0: entered promiscuous mode [ 901.947943][T11821] bond_slave_0: entered promiscuous mode [ 901.955400][T11821] bond_slave_1: entered promiscuous mode [ 903.548424][T11859] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1694'. [ 904.099098][T11864] netlink: 'syz.9.1696': attribute type 3 has an invalid length. [ 904.107581][T11864] netlink: 'syz.9.1696': attribute type 1 has an invalid length. [ 904.115956][T11864] netlink: 60387 bytes leftover after parsing attributes in process `syz.9.1696'. [ 907.167818][T11901] syzkaller0: entered promiscuous mode [ 907.173924][T11901] syzkaller0: entered allmulticast mode [ 907.512525][ T30] kauditd_printk_skb: 63 callbacks suppressed [ 907.512605][ T30] audit: type=1326 audit(1769112796.724:569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11920 comm="syz.8.1710" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f297059acb9 code=0x7ffc0000 [ 907.660702][T11923] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1711'. [ 907.775462][ T30] audit: type=1326 audit(1769112796.774:570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11920 comm="syz.8.1710" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f297059acb9 code=0x7ffc0000 [ 907.798766][ T30] audit: type=1326 audit(1769112796.794:571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11920 comm="syz.8.1710" exe="/root/syz-executor" sig=0 arch=c000003e syscall=243 compat=0 ip=0x7f297059acb9 code=0x7ffc0000 [ 907.823956][ T30] audit: type=1326 audit(1769112796.794:572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11920 comm="syz.8.1710" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f297059acb9 code=0x7ffc0000 [ 907.848309][ T30] audit: type=1326 audit(1769112796.794:573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11920 comm="syz.8.1710" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f297059acb9 code=0x7ffc0000 [ 907.871358][ T30] audit: type=1326 audit(1769112796.794:574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11920 comm="syz.8.1710" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f297059acb9 code=0x7ffc0000 [ 907.901703][ T30] audit: type=1326 audit(1769112796.794:575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11920 comm="syz.8.1710" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f297059acb9 code=0x7ffc0000 [ 907.924728][ T30] audit: type=1326 audit(1769112796.794:576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11920 comm="syz.8.1710" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f297059acb9 code=0x7ffc0000 [ 907.947594][ T30] audit: type=1326 audit(1769112796.794:577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11920 comm="syz.8.1710" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f297059acb9 code=0x7ffc0000 [ 907.975414][ T30] audit: type=1326 audit(1769112796.794:578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11920 comm="syz.8.1710" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f297059acb9 code=0x7ffc0000 [ 908.483866][T11926] syzkaller0: entered promiscuous mode [ 908.489531][T11926] syzkaller0: entered allmulticast mode [ 911.146975][T11965] syzkaller0: entered promiscuous mode [ 911.153318][T11965] syzkaller0: entered allmulticast mode [ 912.028161][T11985] syzkaller0: entered promiscuous mode [ 912.034164][T11985] syzkaller0: entered allmulticast mode [ 912.118895][T11990] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1728'. [ 915.511425][T12033] syzkaller0: entered promiscuous mode [ 915.518002][T12033] syzkaller0: entered allmulticast mode [ 917.213340][T12072] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1747'. [ 919.343954][T12100] netlink: 316 bytes leftover after parsing attributes in process `syz.5.1757'. [ 919.839559][T12109] syzkaller0: entered promiscuous mode [ 919.845547][T12109] syzkaller0: entered allmulticast mode [ 921.160355][T12141] netlink: 'syz.9.1768': attribute type 1 has an invalid length. [ 921.207535][T12142] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1767'. [ 921.811253][T12141] 8021q: adding VLAN 0 to HW filter on device bond1 [ 924.373779][T12183] netlink: 'syz.9.1781': attribute type 1 has an invalid length. [ 924.847806][T12183] 8021q: adding VLAN 0 to HW filter on device bond2 [ 924.940782][T12187] bond2: entered allmulticast mode [ 925.488844][T12204] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1784'. [ 925.909295][ T30] kauditd_printk_skb: 61 callbacks suppressed [ 925.909368][ T30] audit: type=1326 audit(1769112815.124:640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12211 comm="syz.9.1786" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1dcf19acb9 code=0x7ffc0000 [ 925.913497][T12209] netlink: 'syz.8.1785': attribute type 3 has an invalid length. [ 925.946959][T12209] netlink: 'syz.8.1785': attribute type 1 has an invalid length. [ 925.950522][ T30] audit: type=1326 audit(1769112815.134:641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12211 comm="syz.9.1786" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1dcf19acb9 code=0x7ffc0000 [ 925.955115][T12209] netlink: 60387 bytes leftover after parsing attributes in process `syz.8.1785'. [ 926.357393][ T30] audit: type=1326 audit(1769112815.204:642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12211 comm="syz.9.1786" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7f1dcf19acb9 code=0x7ffc0000 [ 926.381032][ T30] audit: type=1326 audit(1769112815.204:643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12211 comm="syz.9.1786" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1dcf19acb9 code=0x7ffc0000 [ 926.409649][ T30] audit: type=1326 audit(1769112815.204:644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12211 comm="syz.9.1786" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1dcf19acb9 code=0x7ffc0000 [ 926.437738][ T30] audit: type=1326 audit(1769112815.304:645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12211 comm="syz.9.1786" exe="/root/syz-executor" sig=0 arch=c000003e syscall=243 compat=0 ip=0x7f1dcf19acb9 code=0x7ffc0000 [ 926.461717][ T30] audit: type=1326 audit(1769112815.304:646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12211 comm="syz.9.1786" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1dcf19acb9 code=0x7ffc0000 [ 926.486923][ T30] audit: type=1326 audit(1769112815.304:647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12211 comm="syz.9.1786" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1dcf19acb9 code=0x7ffc0000 [ 926.512092][ T30] audit: type=1326 audit(1769112815.324:648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12211 comm="syz.9.1786" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f1dcf19acb9 code=0x7ffc0000 [ 926.541805][ T30] audit: type=1326 audit(1769112815.364:649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12211 comm="syz.9.1786" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1dcf19acb9 code=0x7ffc0000 [ 928.412432][T12249] netlink: 'syz.5.1796': attribute type 1 has an invalid length. [ 928.722569][T12249] 8021q: adding VLAN 0 to HW filter on device bond1 [ 928.799464][T12255] bond1: entered allmulticast mode [ 928.872759][T12261] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1798'. [ 928.915672][T12261] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1798'. [ 929.684353][T12268] netlink: 'syz.9.1800': attribute type 3 has an invalid length. [ 929.692469][T12268] netlink: 'syz.9.1800': attribute type 1 has an invalid length. [ 929.700452][T12268] netlink: 60387 bytes leftover after parsing attributes in process `syz.9.1800'. [ 930.048210][T12278] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1803'. [ 931.796593][T12297] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1810'. [ 931.863982][T12297] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1810'. [ 932.063020][T12307] netlink: 'syz.9.1812': attribute type 1 has an invalid length. [ 932.506435][T12307] 8021q: adding VLAN 0 to HW filter on device bond3 [ 932.573482][T12309] bond3: entered allmulticast mode [ 934.324053][T12335] netlink: 'syz.6.1818': attribute type 3 has an invalid length. [ 934.332652][T12335] netlink: 'syz.6.1818': attribute type 1 has an invalid length. [ 934.340580][T12335] netlink: 60387 bytes leftover after parsing attributes in process `syz.6.1818'. [ 936.034571][T12350] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1821'. [ 936.826999][T12355] syzkaller0: entered promiscuous mode [ 936.843759][T12355] syzkaller0: entered allmulticast mode [ 937.866714][T12368] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1826'. [ 937.905473][T12369] netlink: 'syz.8.1827': attribute type 1 has an invalid length. [ 937.922192][T12368] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1826'. [ 938.297024][ T9131] Bluetooth: hci0: command 0x0406 tx timeout [ 938.440042][T12369] 8021q: adding VLAN 0 to HW filter on device bond1 [ 938.531077][T12371] bond1: entered allmulticast mode [ 938.755973][T12374] tipc: Started in network mode [ 938.761295][T12374] tipc: Node identity 5e440f3a0578, cluster identity 4711 [ 938.773626][T12374] tipc: Enabled bearer , priority 0 [ 939.005674][T12373] tipc: Disabling bearer [ 939.604324][T12401] netlink: 'syz.8.1832': attribute type 3 has an invalid length. [ 939.612605][T12401] netlink: 'syz.8.1832': attribute type 1 has an invalid length. [ 939.620498][T12401] netlink: 60387 bytes leftover after parsing attributes in process `syz.8.1832'. [ 941.063761][T12427] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1837'. [ 941.879460][T12436] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1841'. [ 942.922912][T12452] syzkaller0: entered promiscuous mode [ 942.928586][T12452] syzkaller0: entered allmulticast mode [ 943.100008][T12452] tipc: Started in network mode [ 943.105493][T12452] tipc: Node identity 5a439e17ab29, cluster identity 4711 [ 943.117419][T12452] tipc: Enabled bearer , priority 0 [ 943.283180][T12449] tipc: Resetting bearer [ 943.365700][T12449] tipc: Disabling bearer [ 943.661997][T12462] netlink: 'syz.5.1847': attribute type 1 has an invalid length. [ 944.299895][T12472] netlink: 'syz.6.1850': attribute type 3 has an invalid length. [ 944.316052][T12472] netlink: 'syz.6.1850': attribute type 1 has an invalid length. [ 944.326512][T12472] netlink: 60387 bytes leftover after parsing attributes in process `syz.6.1850'. [ 944.340776][ T5798] Bluetooth: hci0: command 0x0406 tx timeout [ 945.612348][T12493] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1854'. [ 945.722197][T12487] syzkaller0: entered promiscuous mode [ 945.728259][T12487] syzkaller0: entered allmulticast mode [ 946.004035][T12497] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1855'. [ 947.287853][T12512] netlink: 'syz.7.1861': attribute type 1 has an invalid length. [ 947.431045][T12516] tipc: Enabled bearer , priority 0 [ 947.946124][T12514] tipc: Disabling bearer [ 948.295443][T12531] netlink: 'syz.7.1864': attribute type 3 has an invalid length. [ 948.309371][T12531] netlink: 'syz.7.1864': attribute type 1 has an invalid length. [ 948.318966][T12531] netlink: 60387 bytes leftover after parsing attributes in process `syz.7.1864'. [ 949.482698][T12554] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1868'. [ 950.631867][T12563] syzkaller0: entered promiscuous mode [ 950.637669][T12563] syzkaller0: entered allmulticast mode [ 950.829390][T12568] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1872'. [ 951.268112][T12578] netlink: 'syz.7.1874': attribute type 1 has an invalid length. [ 952.188620][T12589] syzkaller0: entered promiscuous mode [ 952.202338][T12589] syzkaller0: entered allmulticast mode [ 952.309926][T12589] tipc: Started in network mode [ 952.315887][T12589] tipc: Node identity fe1b3b28ec78, cluster identity 4711 [ 952.323883][T12589] tipc: Enabled bearer , priority 0 [ 952.443332][T12588] tipc: Resetting bearer [ 952.524708][T12588] tipc: Disabling bearer [ 952.564319][T12595] netlink: 'syz.8.1879': attribute type 3 has an invalid length. [ 952.572555][T12595] netlink: 61211 bytes leftover after parsing attributes in process `syz.8.1879'. [ 953.461370][ T798] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 953.659455][ T798] usb 10-1: too many configurations: 9, using maximum allowed: 8 [ 953.713309][ T798] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 953.758176][ T798] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 953.769834][ T798] usb 10-1: config 0 interface 0 has no altsetting 0 [ 953.827278][ T798] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 953.861184][ T798] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 953.872823][ T798] usb 10-1: config 0 interface 0 has no altsetting 0 [ 953.950054][ T798] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 953.985656][ T798] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 953.997376][ T798] usb 10-1: config 0 interface 0 has no altsetting 0 [ 954.085443][ T798] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 954.175699][ T798] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 954.187862][ T798] usb 10-1: config 0 interface 0 has no altsetting 0 [ 954.327786][ T798] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 954.371136][ T798] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 954.382888][ T798] usb 10-1: config 0 interface 0 has no altsetting 0 [ 954.440206][ T798] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 954.488188][ T798] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 954.500534][ T798] usb 10-1: config 0 interface 0 has no altsetting 0 [ 954.608288][ T798] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 954.648790][ T798] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 954.665394][ T798] usb 10-1: config 0 interface 0 has no altsetting 0 [ 954.745374][ T798] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 954.806084][ T798] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 954.819050][ T798] usb 10-1: config 0 interface 0 has no altsetting 0 [ 954.935812][ T798] usb 10-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 954.946338][ T798] usb 10-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 954.955654][ T798] usb 10-1: Product: syz [ 954.965901][ T798] usb 10-1: Manufacturer: syz [ 954.970783][ T798] usb 10-1: SerialNumber: syz [ 954.985552][T12632] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1889'. [ 955.089786][ T798] usb 10-1: config 0 descriptor?? [ 955.226183][ T798] yurex 10-1:0.0: USB YUREX device now attached to Yurex #0 [ 955.425092][T12604] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 955.510103][T12604] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 955.620110][T12628] syzkaller0: entered promiscuous mode [ 955.626262][T12628] syzkaller0: entered allmulticast mode [ 955.657126][ T798] usb 10-1: USB disconnect, device number 2 [ 955.717002][ T798] yurex 10-1:0.0: USB YUREX #0 now disconnected [ 956.933701][T12657] syzkaller0: entered promiscuous mode [ 956.939381][T12657] syzkaller0: entered allmulticast mode [ 957.086205][T12657] tipc: Enabled bearer , priority 0 [ 957.168247][T12656] tipc: Resetting bearer [ 957.177919][T12660] netlink: 'syz.6.1895': attribute type 3 has an invalid length. [ 957.186223][T12660] netlink: 61211 bytes leftover after parsing attributes in process `syz.6.1895'. [ 957.246955][T12656] tipc: Disabling bearer [ 957.472589][T12669] netlink: 'syz.5.1897': attribute type 10 has an invalid length. [ 957.533155][T12669] bridge0: port 3(netdevsim0) entered blocking state [ 957.540292][T12669] bridge0: port 3(netdevsim0) entered disabled state [ 957.602168][T12669] netdevsim netdevsim5 netdevsim0: entered allmulticast mode [ 957.730845][T12669] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 957.771650][T12669] bridge0: port 3(netdevsim0) entered blocking state [ 957.778908][T12669] bridge0: port 3(netdevsim0) entered forwarding state [ 958.122211][ T30] kauditd_printk_skb: 15 callbacks suppressed [ 958.122285][ T30] audit: type=1326 audit(1769112847.334:665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12676 comm="syz.8.1900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f297059acb9 code=0x7ffc0000 [ 958.306706][ T30] audit: type=1326 audit(1769112847.344:666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12676 comm="syz.8.1900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f297059acb9 code=0x7ffc0000 [ 958.330937][ T30] audit: type=1326 audit(1769112847.414:667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12676 comm="syz.8.1900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7f297059acb9 code=0x7ffc0000 [ 958.354185][ T30] audit: type=1326 audit(1769112847.414:668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12676 comm="syz.8.1900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f297059acb9 code=0x7ffc0000 [ 958.382711][ T30] audit: type=1326 audit(1769112847.414:669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12676 comm="syz.8.1900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f297059acb9 code=0x7ffc0000 [ 958.408250][ T30] audit: type=1326 audit(1769112847.444:670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12676 comm="syz.8.1900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=243 compat=0 ip=0x7f297059acb9 code=0x7ffc0000 [ 958.431200][ T30] audit: type=1326 audit(1769112847.444:671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12676 comm="syz.8.1900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f297059acb9 code=0x7ffc0000 [ 958.458803][ T30] audit: type=1326 audit(1769112847.444:672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12676 comm="syz.8.1900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f297059acb9 code=0x7ffc0000 [ 958.483154][ T30] audit: type=1326 audit(1769112847.444:673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12676 comm="syz.8.1900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f297059acb9 code=0x7ffc0000 [ 958.506800][ T30] audit: type=1326 audit(1769112847.454:674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12676 comm="syz.8.1900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f297059acb9 code=0x7ffc0000 [ 959.167396][T12695] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1904'. [ 960.234200][T12700] syzkaller0: entered promiscuous mode [ 960.240025][T12700] syzkaller0: entered allmulticast mode [ 961.676376][T12736] netlink: 'syz.8.1912': attribute type 3 has an invalid length. [ 961.684701][T12736] netlink: 61211 bytes leftover after parsing attributes in process `syz.8.1912'. [ 961.850478][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 963.139850][T12754] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 963.146268][T12754] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 963.310291][T12754] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 963.318653][T12754] Bluetooth: hci6: Error when powering off device on rfkill (-4) [ 963.397363][T12754] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 963.403856][T12754] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 963.515658][T12754] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 963.522256][T12754] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 963.578862][T12772] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1922'. [ 963.709917][T12754] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 963.716557][T12754] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 964.938204][T12778] syzkaller0: entered promiscuous mode [ 964.944550][T12778] syzkaller0: entered allmulticast mode [ 965.354726][ T30] kauditd_printk_skb: 52 callbacks suppressed [ 965.354801][ T30] audit: type=1326 audit(1769112854.564:727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12787 comm="syz.7.1928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feed599acb9 code=0x7ffc0000 [ 965.544315][ T30] audit: type=1326 audit(1769112854.574:728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12787 comm="syz.7.1928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7feed599acb9 code=0x7ffc0000 [ 965.567705][ T30] audit: type=1326 audit(1769112854.574:729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12787 comm="syz.7.1928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feed599acb9 code=0x7ffc0000 [ 965.591071][ T30] audit: type=1326 audit(1769112854.584:730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12787 comm="syz.7.1928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=243 compat=0 ip=0x7feed599acb9 code=0x7ffc0000 [ 965.618808][ T30] audit: type=1326 audit(1769112854.584:731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12787 comm="syz.7.1928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feed599acb9 code=0x7ffc0000 [ 965.643367][ T30] audit: type=1326 audit(1769112854.584:732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12787 comm="syz.7.1928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7feed599acb9 code=0x7ffc0000 [ 965.665040][T12792] netlink: 'syz.8.1929': attribute type 3 has an invalid length. [ 965.666812][ T30] audit: type=1326 audit(1769112854.584:733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12787 comm="syz.7.1928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feed599acb9 code=0x7ffc0000 [ 965.674536][T12792] netlink: 61211 bytes leftover after parsing attributes in process `syz.8.1929'. [ 965.706693][ T30] audit: type=1326 audit(1769112854.604:734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12787 comm="syz.7.1928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7feed599acb9 code=0x7ffc0000 [ 965.734494][ T30] audit: type=1326 audit(1769112854.604:735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12787 comm="syz.7.1928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feed599acb9 code=0x7ffc0000 [ 965.759384][ T30] audit: type=1326 audit(1769112854.604:736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12787 comm="syz.7.1928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7feed599acb9 code=0x7ffc0000 [ 967.980219][T12829] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1940'. [ 970.785798][ T30] kauditd_printk_skb: 26 callbacks suppressed [ 970.785872][ T30] audit: type=1326 audit(1769112860.004:763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12845 comm="syz.6.1943" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7dbd9acb9 code=0x7ffc0000 [ 970.819233][ T30] audit: type=1326 audit(1769112860.004:764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12845 comm="syz.6.1943" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7dbd9acb9 code=0x7ffc0000 [ 971.090220][T12851] rtc_cmos 00:00: Alarms can be up to one day in the future [ 971.118015][T12842] syzkaller0: entered promiscuous mode [ 971.123960][T12842] syzkaller0: entered allmulticast mode [ 971.215811][ T30] audit: type=1326 audit(1769112860.164:765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12845 comm="syz.6.1943" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7fd7dbd9acb9 code=0x7ffc0000 [ 971.242094][ T30] audit: type=1326 audit(1769112860.164:766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12845 comm="syz.6.1943" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7dbd9acb9 code=0x7ffc0000 [ 971.270799][ T30] audit: type=1326 audit(1769112860.184:767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12845 comm="syz.6.1943" exe="/root/syz-executor" sig=0 arch=c000003e syscall=243 compat=0 ip=0x7fd7dbd9acb9 code=0x7ffc0000 [ 971.296243][ T30] audit: type=1326 audit(1769112860.184:768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12845 comm="syz.6.1943" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7dbd9acb9 code=0x7ffc0000 [ 971.319110][ T30] audit: type=1326 audit(1769112860.184:769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12845 comm="syz.6.1943" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fd7dbd9acb9 code=0x7ffc0000 [ 971.347907][ T30] audit: type=1326 audit(1769112860.184:770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12845 comm="syz.6.1943" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7dbd9acb9 code=0x7ffc0000 [ 971.372848][ T30] audit: type=1326 audit(1769112860.194:771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12845 comm="syz.6.1943" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd7dbd9acb9 code=0x7ffc0000 [ 971.395821][ T30] audit: type=1326 audit(1769112860.194:772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12845 comm="syz.6.1943" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7dbd9acb9 code=0x7ffc0000 [ 971.675637][ T5840] rtc_cmos 00:00: Alarms can be up to one day in the future [ 971.683620][ T5840] rtc_cmos 00:00: Alarms can be up to one day in the future [ 971.691325][ T5840] rtc_cmos 00:00: Alarms can be up to one day in the future [ 971.699220][ T5840] rtc_cmos 00:00: Alarms can be up to one day in the future [ 971.709560][ T5840] rtc rtc0: __rtc_set_alarm: err=-22 [ 972.212146][ T5840] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 972.496461][ T5840] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 972.507877][ T5840] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 972.518060][ T5840] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 972.682607][ T5840] usb 9-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 972.692870][ T5840] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 972.701148][ T5840] usb 9-1: Product: syz [ 972.706448][ T5840] usb 9-1: Manufacturer: syz [ 972.711233][ T5840] usb 9-1: SerialNumber: syz [ 972.895189][ T5840] usb 9-1: config 0 descriptor?? [ 973.157831][ T5840] adutux 9-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 973.394803][ T5840] usb 9-1: USB disconnect, device number 4 [ 974.719498][T12894] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1957'. [ 974.959037][T12895] rtc_cmos 00:00: Alarms can be up to one day in the future [ 975.659810][ T5840] rtc_cmos 00:00: Alarms can be up to one day in the future [ 975.667882][ T5840] rtc_cmos 00:00: Alarms can be up to one day in the future [ 975.676049][ T5840] rtc_cmos 00:00: Alarms can be up to one day in the future [ 975.684435][ T5840] rtc_cmos 00:00: Alarms can be up to one day in the future [ 975.692041][ T5840] rtc rtc0: __rtc_set_alarm: err=-22 [ 977.482709][T12932] faux_driver vkms: [drm] Unknown color mode 11; guessing buffer size. [ 977.810989][ T30] kauditd_printk_skb: 62 callbacks suppressed [ 977.811061][ T30] audit: type=1326 audit(1769112867.024:835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12937 comm="syz.9.1972" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1dcf19acb9 code=0x7ffc0000 [ 978.062152][ T30] audit: type=1326 audit(1769112867.034:836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12937 comm="syz.9.1972" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1dcf19acb9 code=0x7ffc0000 [ 978.085078][ T30] audit: type=1326 audit(1769112867.054:837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12937 comm="syz.9.1972" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7f1dcf19acb9 code=0x7ffc0000 [ 978.113120][ T30] audit: type=1326 audit(1769112867.054:838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12937 comm="syz.9.1972" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1dcf19acb9 code=0x7ffc0000 [ 978.137692][ T30] audit: type=1326 audit(1769112867.054:839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12937 comm="syz.9.1972" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1dcf19acb9 code=0x7ffc0000 [ 978.160638][ T30] audit: type=1326 audit(1769112867.054:840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12937 comm="syz.9.1972" exe="/root/syz-executor" sig=0 arch=c000003e syscall=243 compat=0 ip=0x7f1dcf19acb9 code=0x7ffc0000 [ 978.183478][ T30] audit: type=1326 audit(1769112867.064:841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12937 comm="syz.9.1972" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1dcf19acb9 code=0x7ffc0000 [ 978.211070][ T30] audit: type=1326 audit(1769112867.064:842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12937 comm="syz.9.1972" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1dcf19acb9 code=0x7ffc0000 [ 978.235580][ T30] audit: type=1326 audit(1769112867.074:843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12937 comm="syz.9.1972" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f1dcf19acb9 code=0x7ffc0000 [ 978.258448][ T30] audit: type=1326 audit(1769112867.074:844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12937 comm="syz.9.1972" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1dcf19acb9 code=0x7ffc0000 [ 978.708733][T12946] netlink: 156 bytes leftover after parsing attributes in process `syz.6.1974'. [ 978.992112][T12953] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1976'. [ 980.977151][ T8882] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 983.022002][ T8882] usb 7-1: Using ep0 maxpacket: 16 [ 984.016544][ T8882] usb 7-1: New USB device found, idVendor=10b9, idProduct=8000, bcdDevice=c0.fa [ 984.025841][ T8882] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 984.033990][ T8882] usb 7-1: Product: syz [ 984.038232][ T8882] usb 7-1: Manufacturer: syz [ 984.053598][ T8882] usb 7-1: SerialNumber: syz [ 985.176940][ T8882] usb 7-1: config 0 descriptor?? [ 987.426693][ T8882] usb 7-1: can't set config #0, error -71 [ 987.501203][ T30] kauditd_printk_skb: 28 callbacks suppressed [ 987.501278][ T30] audit: type=1326 audit(1769112876.714:873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12980 comm="syz.7.1986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feed599acb9 code=0x7ffc0000 [ 987.509844][ T8882] usb 7-1: USB disconnect, device number 4 [ 987.532787][ T30] audit: type=1326 audit(1769112876.714:874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12980 comm="syz.7.1986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feed599acb9 code=0x7ffc0000 [ 987.695594][ T30] audit: type=1326 audit(1769112876.804:875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12980 comm="syz.7.1986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7feed599acb9 code=0x7ffc0000 [ 987.721167][ T30] audit: type=1326 audit(1769112876.804:876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12980 comm="syz.7.1986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feed599acb9 code=0x7ffc0000 [ 987.746696][ T30] audit: type=1326 audit(1769112876.804:877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12980 comm="syz.7.1986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=243 compat=0 ip=0x7feed599acb9 code=0x7ffc0000 [ 987.770143][ T30] audit: type=1326 audit(1769112876.804:878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12980 comm="syz.7.1986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feed599acb9 code=0x7ffc0000 [ 987.793042][ T30] audit: type=1326 audit(1769112876.814:879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12980 comm="syz.7.1986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7feed599acb9 code=0x7ffc0000 [ 987.815846][ T30] audit: type=1326 audit(1769112876.814:880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12980 comm="syz.7.1986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feed599acb9 code=0x7ffc0000 [ 987.841223][ T30] audit: type=1326 audit(1769112876.814:881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12980 comm="syz.7.1986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7feed599acb9 code=0x7ffc0000 [ 987.864678][ T30] audit: type=1326 audit(1769112876.834:882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12980 comm="syz.7.1986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feed599acb9 code=0x7ffc0000 [ 988.654770][T12995] netlink: 44 bytes leftover after parsing attributes in process `syz.7.1990'. [ 988.836536][T12995] vlan2: entered promiscuous mode [ 988.842002][T12995] bond0: entered promiscuous mode [ 988.847226][T12995] bond_slave_0: entered promiscuous mode [ 988.863481][T12995] bond_slave_1: entered promiscuous mode [ 989.816023][T13014] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1994'. [ 993.147291][T13046] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2004'. [ 1003.081391][T13062] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2009'. [ 1004.364518][ T30] kauditd_printk_skb: 67 callbacks suppressed [ 1004.364592][ T30] audit: type=1326 audit(1769112893.584:950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13077 comm="syz.7.2013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feed599acb9 code=0x7ffc0000 [ 1004.576241][ T30] audit: type=1326 audit(1769112893.634:951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13077 comm="syz.7.2013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7feed599acb9 code=0x7ffc0000 [ 1004.599462][ T30] audit: type=1326 audit(1769112893.634:952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13077 comm="syz.7.2013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feed599acb9 code=0x7ffc0000 [ 1004.627626][ T30] audit: type=1326 audit(1769112893.654:953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13077 comm="syz.7.2013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feed599acb9 code=0x7ffc0000 [ 1004.652260][ T30] audit: type=1326 audit(1769112893.664:954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13077 comm="syz.7.2013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=243 compat=0 ip=0x7feed599acb9 code=0x7ffc0000 [ 1004.675360][ T30] audit: type=1326 audit(1769112893.674:955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13077 comm="syz.7.2013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feed599acb9 code=0x7ffc0000 [ 1004.699643][ T30] audit: type=1326 audit(1769112893.674:956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13077 comm="syz.7.2013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7feed599acb9 code=0x7ffc0000 [ 1004.723079][ T30] audit: type=1326 audit(1769112893.674:957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13077 comm="syz.7.2013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feed599acb9 code=0x7ffc0000 [ 1004.750767][ T30] audit: type=1326 audit(1769112893.674:958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13077 comm="syz.7.2013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7feed599acb9 code=0x7ffc0000 [ 1004.775547][ T30] audit: type=1326 audit(1769112893.674:959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13077 comm="syz.7.2013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feed599acb9 code=0x7ffc0000 [ 1005.314322][T13091] netlink: 44 bytes leftover after parsing attributes in process `syz.7.2017'. [ 1005.779312][ T5798] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1005.833922][ T5798] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1005.844265][ T5798] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1005.865524][ T5798] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1005.884060][ T5798] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1006.045402][ T9131] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1006.057851][ T9131] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1006.068193][ T9131] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1006.108221][ T9131] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1006.136207][ T9131] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1007.007027][T13112] syzkaller0: entered promiscuous mode [ 1007.012858][T13112] syzkaller0: entered allmulticast mode [ 1007.214485][T13112] tipc: Enabled bearer , priority 0 [ 1007.272802][T13110] tipc: Resetting bearer [ 1007.376444][T13110] tipc: Disabling bearer [ 1008.222236][ T9131] Bluetooth: hci1: command tx timeout [ 1008.753733][T13128] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2025'. [ 1009.064745][ T9173] syz_tun (unregistering): left allmulticast mode [ 1009.358792][ T9697] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1009.671275][ T9697] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1009.698756][T13139] netlink: 44 bytes leftover after parsing attributes in process `syz.9.2028'. [ 1009.905554][T13139] vlan2: entered promiscuous mode [ 1009.911156][T13139] bond0: entered promiscuous mode [ 1009.916691][T13139] bond_slave_0: entered promiscuous mode [ 1009.923811][T13139] bond_slave_1: entered promiscuous mode [ 1010.205368][T13100] chnl_net:caif_netlink_parms(): no params data found [ 1010.302046][ T9131] Bluetooth: hci1: command 0x041b tx timeout [ 1010.497510][T13151] usb usb1: usbfs: interface 0 claimed by hub while 'syz.5.2031' sets config #-1 [ 1010.550057][ T9697] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1011.143729][ T9697] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1011.364567][T13162] syzkaller0: entered promiscuous mode [ 1011.370419][T13162] syzkaller0: entered allmulticast mode [ 1011.544272][T13160] tipc: Enabled bearer , priority 0 [ 1011.658288][T13156] tipc: Resetting bearer [ 1011.759108][T13156] tipc: Disabling bearer [ 1012.371841][ T9131] Bluetooth: hci1: command 0x041b tx timeout [ 1012.502225][ T9697] bridge_slave_1: left allmulticast mode [ 1012.512088][ T9697] bridge_slave_1: left promiscuous mode [ 1012.518680][ T9697] bridge0: port 2(bridge_slave_1) entered disabled state [ 1012.624962][T13179] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2038'. [ 1012.682362][ T9697] bridge_slave_0: left allmulticast mode [ 1012.688202][ T9697] bridge_slave_0: left promiscuous mode [ 1012.695039][ T9697] bridge0: port 1(bridge_slave_0) entered disabled state [ 1013.618360][T13191] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2040'. [ 1014.089024][T13194] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2042'. [ 1014.315527][ T9697] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1014.403577][ T9697] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1014.459784][ T9131] Bluetooth: hci1: command 0x041b tx timeout [ 1014.461268][ T9697] bond0 (unregistering): Released all slaves [ 1014.542865][ T9697] bond1 (unregistering): Released all slaves [ 1014.670669][T13179] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 1014.936865][ T9697] tipc: Left network mode [ 1015.293787][T13100] bridge0: port 1(bridge_slave_0) entered blocking state [ 1015.301263][T13100] bridge0: port 1(bridge_slave_0) entered disabled state [ 1015.427642][T13100] bridge_slave_0: entered allmulticast mode [ 1015.468203][T13100] bridge_slave_0: entered promiscuous mode [ 1015.623657][T13100] bridge0: port 2(bridge_slave_1) entered blocking state [ 1015.631113][T13100] bridge0: port 2(bridge_slave_1) entered disabled state [ 1015.708989][T13100] bridge_slave_1: entered allmulticast mode [ 1015.728133][T13100] bridge_slave_1: entered promiscuous mode [ 1016.497183][ T9697] hsr_slave_0: left promiscuous mode [ 1016.532110][ T9131] Bluetooth: hci1: command 0x041b tx timeout [ 1016.549448][ T9697] hsr_slave_1: left promiscuous mode [ 1016.634708][ T9697] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1016.642443][ T9697] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1016.730315][ T9697] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1016.738266][ T9697] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1016.961883][ T9697] veth1_macvtap: left promiscuous mode [ 1017.029282][ T9697] veth0_macvtap: left promiscuous mode [ 1017.072144][ T9697] veth1_vlan: left promiscuous mode [ 1017.101915][ T9697] veth0_vlan: left promiscuous mode [ 1019.755960][T13246] netlink: 44 bytes leftover after parsing attributes in process `syz.9.2053'. [ 1020.160476][T13251] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2054'. [ 1021.775645][ T9697] team0 (unregistering): Port device team_slave_1 removed [ 1021.864116][ T9697] team0 (unregistering): Port device team_slave_0 removed [ 1022.310238][T13100] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1022.383504][T13228] tipc: Enabled bearer , priority 0 [ 1022.392584][T13215] syzkaller0: entered promiscuous mode [ 1022.398232][T13215] syzkaller0: entered allmulticast mode [ 1022.482115][T13212] tipc: Resetting bearer [ 1022.567594][T13212] tipc: Disabling bearer [ 1022.656685][T13100] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1023.128299][T13100] team0: Port device team_slave_0 added [ 1023.294148][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 1023.325797][T13100] team0: Port device team_slave_1 added [ 1023.981164][T13100] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1023.988474][T13100] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1024.015058][T13100] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1024.272980][T13100] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1024.280143][T13100] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1024.311747][T13100] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1025.490660][T13100] hsr_slave_0: entered promiscuous mode [ 1025.545829][T13100] hsr_slave_1: entered promiscuous mode [ 1025.611149][T13100] debugfs: 'hsr0' already exists in 'hsr' [ 1025.619748][T13100] Cannot create hsr debugfs directory [ 1026.401163][T13309] netlink: 44 bytes leftover after parsing attributes in process `syz.7.2067'. [ 1027.103528][T13318] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2068'. [ 1027.499765][T13321] syzkaller0: entered promiscuous mode [ 1027.505766][T13321] syzkaller0: entered allmulticast mode [ 1027.762676][T13319] tipc: Enabled bearer , priority 0 [ 1028.198849][T13100] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1028.318257][T13317] tipc: Resetting bearer [ 1028.437475][T13317] tipc: Disabling bearer [ 1028.665042][T13100] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1028.946779][T13100] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1029.277854][T13100] bridge0: port 3(netdevsim0) entered disabled state [ 1029.355950][T13100] netdevsim netdevsim4 netdevsim0 (unregistering): left allmulticast mode [ 1029.471990][T13100] netdevsim netdevsim4 netdevsim0 (unregistering): left promiscuous mode [ 1029.481015][T13100] bridge0: port 3(netdevsim0) entered disabled state [ 1029.626428][T13100] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1029.852123][ T5959] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 1030.074212][ T5959] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 1030.085438][ T5959] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1030.095706][ T5959] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 1030.350975][ T5959] usb 7-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 1030.360775][ T5959] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1030.369462][ T5959] usb 7-1: Product: syz [ 1030.374315][ T5959] usb 7-1: Manufacturer: syz [ 1030.379086][ T5959] usb 7-1: SerialNumber: syz [ 1030.549051][ T5959] usb 7-1: config 0 descriptor?? [ 1030.609916][ T5959] adutux 7-1:0.0: interrupt endpoints not found [ 1030.756677][T13100] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1030.800074][T13352] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2078'. [ 1030.857321][T13100] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1030.906781][ T5959] usb 7-1: USB disconnect, device number 5 [ 1030.909857][T13100] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1031.096438][T13100] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1031.479001][T13367] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2081'. [ 1033.485728][T13391] netlink: 44 bytes leftover after parsing attributes in process `syz.6.2090'. [ 1033.621386][T13391] vlan2: entered promiscuous mode [ 1033.627019][T13391] bond0: entered promiscuous mode [ 1033.632416][T13391] bond_slave_0: entered promiscuous mode [ 1033.639189][T13391] bond_slave_1: entered promiscuous mode [ 1034.490316][T13404] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2093'. [ 1036.023081][ T5959] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 1036.218273][ T5959] usb 6-1: Using ep0 maxpacket: 16 [ 1036.277968][ T5959] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1036.290257][ T5959] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1036.424482][ T5959] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1036.434313][ T5959] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1036.443168][ T5959] usb 6-1: Product: syz [ 1036.447507][ T5959] usb 6-1: Manufacturer: syz [ 1036.452713][ T5959] usb 6-1: SerialNumber: syz [ 1036.558479][ T5959] usb 6-1: config 0 descriptor?? [ 1036.600463][ T5959] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1036.611186][ T5959] em28xx 6-1:0.0: Audio interface 0 found (Vendor Class) [ 1036.688751][T13426] netlink: 44 bytes leftover after parsing attributes in process `syz.7.2101'. [ 1037.282945][ T5959] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 1037.307712][T13100] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1037.323662][ T5959] em28xx 6-1:0.0: Config register raw data: 0xfffffffb [ 1037.575870][ T5959] em28xx 6-1:0.0: AC97 chip type couldn't be determined [ 1037.583917][ T5959] em28xx 6-1:0.0: No AC97 audio processor [ 1037.693587][ T5959] usb 6-1: USB disconnect, device number 4 [ 1037.793475][ T5959] em28xx 6-1:0.0: Disconnecting em28xx [ 1037.874095][ T5959] em28xx 6-1:0.0: Freeing device [ 1037.970674][T13100] 8021q: adding VLAN 0 to HW filter on device team0 [ 1038.189376][ T135] bridge0: port 1(bridge_slave_0) entered blocking state [ 1038.197037][ T135] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1038.914248][ T135] bridge0: port 2(bridge_slave_1) entered blocking state [ 1038.921893][ T135] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1045.412438][T13483] netlink: 44 bytes leftover after parsing attributes in process `syz.7.2113'. [ 1048.743548][T13100] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1050.587637][T13535] netlink: 44 bytes leftover after parsing attributes in process `syz.7.2125'. [ 1053.608768][T13100] veth0_vlan: entered promiscuous mode [ 1053.872849][T13100] veth1_vlan: entered promiscuous mode [ 1056.593794][T13100] veth0_macvtap: entered promiscuous mode [ 1056.762976][T13100] veth1_macvtap: entered promiscuous mode [ 1060.271889][T13100] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1061.167936][T13100] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1062.639456][ T9949] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1062.699298][ T3475] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1062.762105][ T54] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1062.771427][ T54] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1066.616330][ T9131] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1066.633784][ T9131] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1066.653053][ T9131] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1066.687566][ T9131] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1066.700802][ T9131] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1068.774192][ T9131] Bluetooth: hci2: command tx timeout [ 1070.864219][ T9131] Bluetooth: hci2: command tx timeout [ 1071.176217][T13687] netlink: 64 bytes leftover after parsing attributes in process `syz.5.2163'. [ 1072.934974][ T9131] Bluetooth: hci2: command tx timeout [ 1072.966968][ T2125] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1073.227553][ T2125] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1073.371047][T13656] chnl_net:caif_netlink_parms(): no params data found [ 1073.944448][ T2125] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1074.322478][T13714] ip6gre1: entered promiscuous mode [ 1074.327994][T13714] ip6gre1: entered allmulticast mode [ 1075.033549][ T9131] Bluetooth: hci2: command tx timeout [ 1076.709220][ T54] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1076.722748][ T54] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1076.732360][T13424] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1076.800270][ T2125] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1077.142379][T13424] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1077.253076][T13424] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1079.794357][ T2125] bridge_slave_1: left allmulticast mode [ 1079.800356][ T2125] bridge_slave_1: left promiscuous mode [ 1079.807138][ T2125] bridge0: port 2(bridge_slave_1) entered disabled state [ 1079.994010][ T2125] bridge_slave_0: left allmulticast mode [ 1079.999944][ T2125] bridge_slave_0: left promiscuous mode [ 1080.008960][ T2125] bridge0: port 1(bridge_slave_0) entered disabled state [ 1080.542134][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1082.520017][ T2125] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1082.676236][ T2125] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1082.787754][ T2125] bond0 (unregistering): Released all slaves [ 1084.719138][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 1085.080010][ T2125] hsr_slave_0: left promiscuous mode [ 1085.410598][ T2125] hsr_slave_1: left promiscuous mode [ 1085.543685][ T2125] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1085.551374][ T2125] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1085.655982][ T2125] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1085.663738][ T2125] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1085.932626][ T2125] veth1_macvtap: left promiscuous mode [ 1085.938724][ T2125] veth0_macvtap: left promiscuous mode [ 1085.983958][ T2125] veth1_vlan: left promiscuous mode [ 1086.049587][ T2125] veth0_vlan: left promiscuous mode [ 1086.124379][T13788] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1086.946878][T13794] 9p: Bad value for 'rfdno' [ 1087.761374][T13799] loop7: detected capacity change from 0 to 4096 [ 1088.532160][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1090.057491][T13799] ntfs3(loop7): Failed to read $AttrDef (-4). [ 1091.322757][T13810] netlink: 'syz.9.2197': attribute type 10 has an invalid length. [ 1092.643041][ T2125] team0 (unregistering): Port device team_slave_1 removed [ 1092.776626][ T2125] team0 (unregistering): Port device team_slave_0 removed [ 1094.156191][T13656] bridge0: port 1(bridge_slave_0) entered blocking state [ 1094.163784][T13656] bridge0: port 1(bridge_slave_0) entered disabled state [ 1094.228476][T13656] bridge_slave_0: entered allmulticast mode [ 1094.290381][T13656] bridge_slave_0: entered promiscuous mode [ 1094.386739][T13656] bridge0: port 2(bridge_slave_1) entered blocking state [ 1094.394492][T13656] bridge0: port 2(bridge_slave_1) entered disabled state [ 1095.163374][T13656] bridge_slave_1: entered allmulticast mode [ 1095.182390][T13656] bridge_slave_1: entered promiscuous mode [ 1095.277825][T13656] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1096.182630][T13840] loop7: detected capacity change from 0 to 4096 [ 1096.876812][T13656] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1097.837006][T13840] ntfs3(loop7): Failed to read $AttrDef (-4). [ 1099.153419][T13656] team0: Port device team_slave_0 added [ 1099.625338][T13656] team0: Port device team_slave_1 added [ 1102.743021][T13656] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1102.750183][T13656] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1102.777033][T13656] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1103.171442][T13656] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1103.179705][T13656] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1103.206187][T13656] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1103.312534][ C1] hrtimer: interrupt took 52649 ns [ 1105.172630][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1105.292576][T13656] hsr_slave_0: entered promiscuous mode [ 1105.707716][T13878] loop9: detected capacity change from 0 to 4096 [ 1107.310610][T13656] hsr_slave_1: entered promiscuous mode [ 1107.754018][T13656] debugfs: 'hsr0' already exists in 'hsr' [ 1107.760237][T13656] Cannot create hsr debugfs directory [ 1107.840547][T13878] ntfs3(loop9): Failed to read $AttrDef (-4). [ 1109.034338][T13883] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1109.908304][T13891] netlink: 'syz.7.2218': attribute type 3 has an invalid length. [ 1109.917023][T13891] netlink: 61203 bytes leftover after parsing attributes in process `syz.7.2218'. [ 1113.819871][T13923] loop9: detected capacity change from 0 to 4096 [ 1116.872276][T13923] ntfs3(loop9): Failed to read $AttrDef (-4). [ 1117.518067][T13912] syz.6.2223 (13912): drop_caches: 2 [ 1118.479097][T13656] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1118.912075][T13656] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1118.957813][T13935] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1119.303361][T13656] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1119.658890][T13656] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1120.323305][T13941] netlink: 'syz.7.2231': attribute type 3 has an invalid length. [ 1120.331225][T13941] netlink: 61203 bytes leftover after parsing attributes in process `syz.7.2231'. [ 1123.402938][T13965] syzkaller0: entered promiscuous mode [ 1123.412691][T13965] syzkaller0: entered allmulticast mode [ 1124.388276][T13973] loop5: detected capacity change from 0 to 4096 [ 1127.621774][T13973] ntfs3(loop5): Failed to read $AttrDef (-4). [ 1129.204174][T13985] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1129.253810][T13988] binder: 13987:13988 ioctl c0306201 200000000540 returned -22 [ 1131.663129][ T5798] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1131.769759][ T5798] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1131.793982][ T5798] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1131.809890][ T5798] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1131.833525][ T5798] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1133.183839][T14017] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2247'. [ 1133.193439][T14017] netlink: 36 bytes leftover after parsing attributes in process `syz.7.2247'. [ 1134.012336][ T5798] Bluetooth: hci1: command tx timeout [ 1136.052239][ T5798] Bluetooth: hci1: command tx timeout [ 1137.111380][T14037] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1138.132183][ T5798] Bluetooth: hci1: command tx timeout [ 1139.092240][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1140.428254][ T5798] Bluetooth: hci1: command tx timeout [ 1141.150803][ T30] kauditd_printk_skb: 62 callbacks suppressed [ 1141.150855][ T30] audit: type=1326 audit(1769113286.363:1022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14067 comm="syz.6.2261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7dbd9acb9 code=0x7ffc0000 [ 1141.465568][T14062] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2260'. [ 1141.474725][T14062] netlink: 36 bytes leftover after parsing attributes in process `syz.9.2260'. [ 1141.733158][ T30] audit: type=1326 audit(1769113286.433:1023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14067 comm="syz.6.2261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7fd7dbd9acb9 code=0x7ffc0000 [ 1141.759219][ T30] audit: type=1326 audit(1769113286.433:1024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14067 comm="syz.6.2261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7dbd9acb9 code=0x7ffc0000 [ 1141.783377][ T30] audit: type=1326 audit(1769113286.433:1025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14067 comm="syz.6.2261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=243 compat=0 ip=0x7fd7dbd9acb9 code=0x7ffc0000 [ 1141.808326][ T30] audit: type=1326 audit(1769113286.433:1026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14067 comm="syz.6.2261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7dbd9acb9 code=0x7ffc0000 [ 1141.831225][ T30] audit: type=1326 audit(1769113286.473:1027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14067 comm="syz.6.2261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7dbd9acb9 code=0x7ffc0000 [ 1141.855919][ T30] audit: type=1326 audit(1769113286.493:1028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14067 comm="syz.6.2261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fd7dbd9acb9 code=0x7ffc0000 [ 1141.879101][ T30] audit: type=1326 audit(1769113286.493:1029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14067 comm="syz.6.2261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7dbd9acb9 code=0x7ffc0000 [ 1141.901930][ T30] audit: type=1326 audit(1769113286.513:1030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14067 comm="syz.6.2261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd7dbd9acb9 code=0x7ffc0000 [ 1141.924769][ T30] audit: type=1326 audit(1769113286.513:1031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14067 comm="syz.6.2261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7dbd9acb9 code=0x7ffc0000 [ 1143.204874][T14005] chnl_net:caif_netlink_parms(): no params data found [ 1145.351116][T14084] syzkaller0: entered promiscuous mode [ 1145.356933][T14084] syzkaller0: entered allmulticast mode [ 1146.214216][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 1147.052278][T13424] usb 7-1: new full-speed USB device number 6 using dummy_hcd [ 1147.239546][ T12] bridge_slave_1: left allmulticast mode [ 1147.245505][ T12] bridge_slave_1: left promiscuous mode [ 1147.252056][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 1147.534816][ T12] bridge_slave_0: left allmulticast mode [ 1147.540675][ T12] bridge_slave_0: left promiscuous mode [ 1147.547565][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 1147.551769][T13424] usb 7-1: config 0 has no interfaces? [ 1147.560433][T13424] usb 7-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1147.570338][T13424] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1147.968624][T13424] usb 7-1: config 0 descriptor?? [ 1148.850010][ T5955] usb 7-1: USB disconnect, device number 6 [ 1149.628896][T14100] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2272'. [ 1149.638240][T14100] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2272'. [ 1150.979140][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1151.180815][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1158.360349][ T12] bond0 (unregistering): Released all slaves [ 1159.673231][ T30] kauditd_printk_skb: 17 callbacks suppressed [ 1159.673303][ T30] audit: type=1326 audit(1769113304.843:1049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14114 comm="syz.9.2276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1dcf19acb9 code=0x7ffc0000 [ 1159.841962][ T12] hsr_slave_0: left promiscuous mode [ 1159.952636][ T12] hsr_slave_1: left promiscuous mode [ 1160.036126][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1160.063592][ T30] audit: type=1326 audit(1769113304.933:1050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14114 comm="syz.9.2276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7f1dcf19acb9 code=0x7ffc0000 [ 1160.088440][ T30] audit: type=1326 audit(1769113304.933:1051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14114 comm="syz.9.2276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1dcf19acb9 code=0x7ffc0000 [ 1160.111838][ T30] audit: type=1326 audit(1769113304.933:1052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14114 comm="syz.9.2276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1dcf19acb9 code=0x7ffc0000 [ 1160.135079][ T30] audit: type=1326 audit(1769113305.033:1053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14114 comm="syz.9.2276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f1dcf19acb9 code=0x7ffc0000 [ 1160.158088][ T30] audit: type=1326 audit(1769113305.063:1054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14114 comm="syz.9.2276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1dcf19acb9 code=0x7ffc0000 [ 1160.183123][ T30] audit: type=1326 audit(1769113305.063:1055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14114 comm="syz.9.2276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f1dcf19acb9 code=0x7ffc0000 [ 1160.206585][ T30] audit: type=1326 audit(1769113305.063:1056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14114 comm="syz.9.2276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1dcf19acb9 code=0x7ffc0000 [ 1160.230232][ T30] audit: type=1326 audit(1769113305.063:1057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14114 comm="syz.9.2276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1dcf19acb9 code=0x7ffc0000 [ 1160.253203][ T30] audit: type=1326 audit(1769113305.103:1058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14114 comm="syz.9.2276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f1dcf19acb9 code=0x7ffc0000 [ 1160.305610][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1164.903379][ T12] team0 (unregistering): Port device team_slave_1 removed [ 1165.174116][ T12] team0 (unregistering): Port device team_slave_0 removed [ 1167.027195][ T9275] usb 10-1: new full-speed USB device number 3 using dummy_hcd [ 1167.316281][ T9275] usb 10-1: config 0 has no interfaces? [ 1167.322289][ T9275] usb 10-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1167.331857][ T9275] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1167.702786][ T9275] usb 10-1: config 0 descriptor?? [ 1168.009483][T13424] usb 10-1: USB disconnect, device number 3 [ 1168.153424][T14005] bridge0: port 1(bridge_slave_0) entered blocking state [ 1168.165801][T14005] bridge0: port 1(bridge_slave_0) entered disabled state [ 1168.422700][T14005] bridge_slave_0: entered allmulticast mode [ 1168.486037][T14005] bridge_slave_0: entered promiscuous mode [ 1168.824939][T14005] bridge0: port 2(bridge_slave_1) entered blocking state [ 1168.832860][T14005] bridge0: port 2(bridge_slave_1) entered disabled state [ 1168.929021][T14005] bridge_slave_1: entered allmulticast mode [ 1169.065282][T14005] bridge_slave_1: entered promiscuous mode [ 1170.707872][T14005] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1171.100262][T14005] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1172.217835][T14005] team0: Port device team_slave_0 added [ 1172.329143][T14005] team0: Port device team_slave_1 added [ 1173.248895][T14005] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1173.256348][T14005] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1173.285140][T14005] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1174.164836][T14005] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1174.172149][T14005] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1174.201429][T14005] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1178.531917][T14005] hsr_slave_0: entered promiscuous mode [ 1178.609150][T14005] hsr_slave_1: entered promiscuous mode [ 1179.027131][T14005] debugfs: 'hsr0' already exists in 'hsr' [ 1179.033331][T14005] Cannot create hsr debugfs directory [ 1180.103244][ T9131] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1180.121071][ T9131] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1180.133782][ T9131] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1180.225956][ T9131] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1180.244846][ T9131] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1180.271840][ T798] usb 6-1: new full-speed USB device number 5 using dummy_hcd [ 1180.519200][ T798] usb 6-1: config 0 has no interfaces? [ 1180.525203][ T798] usb 6-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1180.534682][ T798] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1180.823436][ T798] usb 6-1: config 0 descriptor?? [ 1181.003968][T14194] syzkaller0: entered promiscuous mode [ 1181.009683][T14194] syzkaller0: entered allmulticast mode [ 1181.299957][ T9275] usb 6-1: USB disconnect, device number 5 [ 1182.301769][ T9131] Bluetooth: hci2: command tx timeout [ 1182.762970][T14200] netlink: 104 bytes leftover after parsing attributes in process `syz.9.2298'. [ 1184.403630][ T9131] Bluetooth: hci2: command tx timeout [ 1186.453822][ T9131] Bluetooth: hci2: command tx timeout [ 1186.694597][ T9205] syz_tun (unregistering): left allmulticast mode [ 1187.555647][T14229] pim6reg: entered allmulticast mode [ 1187.840522][ T135] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1188.340303][ T135] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1188.612669][ T9131] Bluetooth: hci2: command tx timeout [ 1189.437401][ T135] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1190.165464][ T135] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1190.905727][ T9275] usb 6-1: new full-speed USB device number 6 using dummy_hcd [ 1191.219244][ T9275] usb 6-1: device descriptor read/64, error -71 [ 1191.323195][ T5798] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1191.403325][ T5798] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1191.442336][ T5798] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1191.455750][ T5798] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1191.466410][ T5798] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1191.612078][ T9275] usb 6-1: new full-speed USB device number 7 using dummy_hcd [ 1191.941900][ T9275] usb 6-1: device descriptor read/64, error -71 [ 1192.085433][ T9275] usb usb6-port1: attempt power cycle [ 1192.304397][ T9131] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1192.327780][T14249] netlink: 104 bytes leftover after parsing attributes in process `syz.9.2308'. [ 1192.338132][ T9131] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1192.375157][ T9131] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1192.402106][ T9131] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1192.432229][ T9131] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1192.446441][T14192] chnl_net:caif_netlink_parms(): no params data found [ 1192.621830][ T9275] usb 6-1: new full-speed USB device number 8 using dummy_hcd [ 1192.752101][ T9275] usb 6-1: device descriptor read/8, error -71 [ 1192.867363][ T135] bridge_slave_1: left allmulticast mode [ 1192.873567][ T135] bridge_slave_1: left promiscuous mode [ 1192.880063][ T135] bridge0: port 2(bridge_slave_1) entered disabled state [ 1193.018748][ T135] bridge_slave_0: left allmulticast mode [ 1193.024764][ T135] bridge_slave_0: left promiscuous mode [ 1193.031008][ T135] bridge0: port 1(bridge_slave_0) entered disabled state [ 1193.152189][ T9275] usb 6-1: new full-speed USB device number 9 using dummy_hcd [ 1193.675147][ T9275] usb 6-1: device descriptor read/8, error -71 [ 1193.702665][ T5798] Bluetooth: hci3: command tx timeout [ 1193.823561][ T9275] usb usb6-port1: unable to enumerate USB device [ 1194.221864][T13424] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 1194.531922][ T5798] Bluetooth: hci5: command tx timeout [ 1194.571201][T13424] usb 10-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1194.582783][T13424] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1194.591114][T13424] usb 10-1: Product: syz [ 1194.596818][T13424] usb 10-1: Manufacturer: syz [ 1194.601821][T13424] usb 10-1: SerialNumber: syz [ 1195.466611][T13424] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1195.479014][T13424] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 1195.741849][ T5798] Bluetooth: hci3: command tx timeout [ 1196.612920][ T5798] Bluetooth: hci5: command tx timeout [ 1196.666584][ T135] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1196.801280][ T135] bond_slave_0: left promiscuous mode [ 1196.996439][ T135] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1197.105186][ T135] bond_slave_1: left promiscuous mode [ 1197.214478][ T135] bond0 (unregistering): Released all slaves [ 1197.665945][T13424] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000080. ret = -EPIPE [ 1197.678423][T13424] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1197.812015][ T5798] Bluetooth: hci3: command tx timeout [ 1197.942572][T13424] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1198.077509][T13424] lan78xx 10-1:1.0: probe with driver lan78xx failed with error -32 [ 1198.253077][T13424] usb 10-1: USB disconnect, device number 4 [ 1198.311956][ T135] tipc: Left network mode [ 1198.693579][ T5798] Bluetooth: hci5: command tx timeout [ 1199.892983][ T5798] Bluetooth: hci3: command tx timeout [ 1200.608094][T14280] process 'syz.9.2313' launched './file0' with NULL argv: empty string added [ 1200.772018][ T5798] Bluetooth: hci5: command tx timeout [ 1201.475901][ T135] hsr_slave_0: left promiscuous mode [ 1201.582107][ T135] hsr_slave_1: left promiscuous mode [ 1201.589901][ T135] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1201.597752][ T135] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1201.797423][ T135] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1201.805464][ T135] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1202.122174][ T135] veth1_macvtap: left promiscuous mode [ 1202.127849][ T135] veth0_macvtap: left promiscuous mode [ 1202.215267][ T135] veth1_vlan: left promiscuous mode [ 1202.274481][ T135] veth0_vlan: left promiscuous mode [ 1202.617890][T14293] netlink: 104 bytes leftover after parsing attributes in process `syz.9.2316'. [ 1205.127724][ T135] team0 (unregistering): Port device team_slave_1 removed [ 1205.220928][ T135] team0 (unregistering): Port device team_slave_0 removed [ 1206.264639][T14170] syz_tun (unregistering): left allmulticast mode [ 1206.495064][T14288] syzkaller0: entered promiscuous mode [ 1206.500736][T14288] syzkaller0: entered allmulticast mode [ 1207.384423][T14192] bridge0: port 1(bridge_slave_0) entered blocking state [ 1207.393532][T14192] bridge0: port 1(bridge_slave_0) entered disabled state [ 1207.433418][T14192] bridge_slave_0: entered allmulticast mode [ 1207.455370][T14192] bridge_slave_0: entered promiscuous mode [ 1207.565684][T14192] bridge0: port 2(bridge_slave_1) entered blocking state [ 1207.595272][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 1207.599860][T14192] bridge0: port 2(bridge_slave_1) entered disabled state [ 1207.678238][T14192] bridge_slave_1: entered allmulticast mode [ 1208.372126][T14192] bridge_slave_1: entered promiscuous mode [ 1211.051998][T14192] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1211.222585][ T135] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1211.495720][T14192] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1211.910135][ T135] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1211.972300][T14327] ===================================================== [ 1211.979600][T14327] BUG: KMSAN: uninit-value in iopt_pages_unfill_xarray+0xfe3/0x1660 [ 1211.989366][T14327] iopt_pages_unfill_xarray+0xfe3/0x1660 [ 1211.995626][T14327] iopt_area_remove_access+0x508/0x650 [ 1212.001201][T14327] iommufd_access_unpin_pages+0x637/0xa50 [ 1212.007172][T14327] iommufd_test_access_unmap+0x423/0x6b0 [ 1212.013047][T14327] iommufd_access_notify_unmap+0x549/0x920 [ 1212.018958][T14327] iopt_unmap_iova_range+0x9d7/0xbc0 [ 1212.024458][T14327] iopt_unmap_all+0x3f/0x50 [ 1212.029405][T14327] iommufd_ioas_unmap+0x4cf/0x980 [ 1212.034823][T14327] iommufd_fops_ioctl+0x82a/0x9e0 [ 1212.039941][T14327] __se_sys_ioctl+0x23c/0x400 [ 1212.044891][T14327] __x64_sys_ioctl+0x97/0xe0 [ 1212.049596][T14327] x64_sys_call+0x18a7/0x3e70 [ 1212.054561][T14327] do_syscall_64+0xc9/0xf80 [ 1212.059270][T14327] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1212.065371][T14327] [ 1212.067725][T14327] Local variable batch created at: SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1212.074005][T14327] iopt_pages_unfill_xarray+0x86/0x1660 [ 1212.079714][T14327] iopt_area_remove_access+0x508/0x650 [ 1212.086903][T14327] [ 1212.089324][T14327] CPU: 1 UID: 0 PID: 14327 Comm: syz.5.2321 Not tainted syzkaller #0 PREEMPT(voluntary) [ 1212.099696][T14327] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 1212.109976][T14327] ===================================================== [ 1212.117305][T14327] Disabling lock debugging due to kernel taint [ 1212.123636][T14327] Kernel panic - not syncing: kmsan.panic set ... [ 1212.130191][T14327] CPU: 1 UID: 0 PID: 14327 Comm: syz.5.2321 Tainted: G B syzkaller #0 PREEMPT(voluntary) [ 1212.141754][T14327] Tainted: [B]=BAD_PAGE [ 1212.146004][T14327] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 1212.156193][T14327] Call Trace: [ 1212.159608][T14327] [ 1212.162623][T14327] __dump_stack+0x26/0x30 [ 1212.167137][T14327] dump_stack_lvl+0x50/0x1c0 [ 1212.171909][T14327] ? dump_stack+0x12/0x25 [ 1212.176421][T14327] dump_stack+0x1e/0x25 [ 1212.180743][T14327] vpanic+0x435/0xd40 [ 1212.184924][T14327] panic+0x15d/0x160 [ 1212.189021][T14327] kmsan_report+0x31a/0x320 [ 1212.193755][T14327] ? __msan_warning+0x1b/0x30 [ 1212.198604][T14327] ? iopt_pages_unfill_xarray+0xfe3/0x1660 [ 1212.204602][T14327] ? iopt_area_remove_access+0x508/0x650 [ 1212.210411][T14327] ? iommufd_access_unpin_pages+0x637/0xa50 [ 1212.216477][T14327] ? iommufd_test_access_unmap+0x423/0x6b0 [ 1212.222461][T14327] ? iommufd_access_notify_unmap+0x549/0x920 [ 1212.228616][T14327] ? iopt_unmap_iova_range+0x9d7/0xbc0 [ 1212.234208][T14327] ? iopt_unmap_all+0x3f/0x50 [ 1212.239013][T14327] ? iommufd_ioas_unmap+0x4cf/0x980 [ 1212.244358][T14327] ? iommufd_fops_ioctl+0x82a/0x9e0 [ 1212.249715][T14327] ? __se_sys_ioctl+0x23c/0x400 [ 1212.254714][T14327] ? __x64_sys_ioctl+0x97/0xe0 [ 1212.259631][T14327] ? x64_sys_call+0x18a7/0x3e70 [ 1212.264649][T14327] ? do_syscall_64+0xc9/0xf80 [ 1212.269490][T14327] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1212.275706][T14327] ? kmsan_get_metadata+0xf1/0x160 [ 1212.281000][T14327] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1212.287001][T14327] ? xas_load+0xcec/0xd70 [ 1212.291539][T14327] ? __xas_next+0x142/0x7a0 [ 1212.296651][T14327] ? kmsan_get_metadata+0xf1/0x160 [ 1212.302058][T14327] __msan_warning+0x1b/0x30 [ 1212.306731][T14327] iopt_pages_unfill_xarray+0xfe3/0x1660 [ 1212.312630][T14327] ? kmsan_get_metadata+0xf1/0x160 [ 1212.317925][T14327] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1212.323924][T14327] ? interval_tree_remove+0x158e/0x1730 [ 1212.329758][T14327] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1212.335785][T14327] iopt_area_remove_access+0x508/0x650 [ 1212.341448][T14327] iommufd_access_unpin_pages+0x637/0xa50 [ 1212.347403][T14327] iommufd_test_access_unmap+0x423/0x6b0 [ 1212.353297][T14327] ? __pfx_iommufd_test_access_unmap+0x10/0x10 [ 1212.359596][T14327] iommufd_access_notify_unmap+0x549/0x920 [ 1212.365628][T14327] iopt_unmap_iova_range+0x9d7/0xbc0 [ 1212.371216][T14327] iopt_unmap_all+0x3f/0x50 [ 1212.375856][T14327] iommufd_ioas_unmap+0x4cf/0x980 [ 1212.381046][T14327] ? __pfx_iommufd_ioas_unmap+0x10/0x10 [ 1212.386825][T14327] iommufd_fops_ioctl+0x82a/0x9e0 [ 1212.392061][T14327] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 1212.397875][T14327] __se_sys_ioctl+0x23c/0x400 [ 1212.402751][T14327] __x64_sys_ioctl+0x97/0xe0 [ 1212.407529][T14327] x64_sys_call+0x18a7/0x3e70 [ 1212.412376][T14327] do_syscall_64+0xc9/0xf80 [ 1212.417045][T14327] ? clear_bhb_loop+0x40/0x90 [ 1212.421901][T14327] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1212.427945][T14327] RIP: 0033:0x7f12e1b9acb9 [ 1212.432524][T14327] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1212.452621][T14327] RSP: 002b:00007f12e29e5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1212.461261][T14327] RAX: ffffffffffffffda RBX: 00007f12e1e16090 RCX: 00007f12e1b9acb9 [ 1212.469342][T14327] RDX: 0000200000000240 RSI: 0000000000003b86 RDI: 0000000000000003 [ 1212.477679][T14327] RBP: 00007f12e1c08bf7 R08: 0000000000000000 R09: 0000000000000000 [ 1212.485753][T14327] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1212.493836][T14327] R13: 00007f12e1e16128 R14: 00007f12e1e16090 R15: 00007ffe20803838 [ 1212.501973][T14327] [ 1212.505495][T14327] Kernel Offset: disabled [ 1212.509864][T14327] Rebooting in 86400 seconds..