last executing test programs: 20m3.732201601s ago: executing program 3 (id=4431): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SET_TSC(0x1a, 0x1) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x19, &(0x7f0000000000)=0x84, 0xfde1) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x200cc0c5, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x80000, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') preadv(r3, &(0x7f00000000c0)=[{&(0x7f0000000640)=""/4112, 0x1010}], 0x1, 0x4000, 0x0) setgroups(0x0, 0x0) 20m2.018448295s ago: executing program 3 (id=4435): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@can_newroute={0x1c, 0x18, 0x1, 0x0, 0x25dfdbfe, {0x1d, 0x1, 0x6}, [@CGW_SRC_IF={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 20m0.924682843s ago: executing program 3 (id=4438): r0 = add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x3}, 0x0, 0x0, r0) r2 = add_key$keyring(&(0x7f0000000440), &(0x7f0000000480)={'syz', 0x3}, 0x0, 0x0, r1) keyctl$invalidate(0x15, r2) keyctl$KEYCTL_MOVE(0x1e, r1, r1, r0, 0x0) 19m58.988183572s ago: executing program 1 (id=4444): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) sendmmsg(r0, &(0x7f0000004080)=[{{0x0, 0x0, &(0x7f0000001800)=[{&(0x7f0000000400)="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", 0xfe}, {&(0x7f0000000500)="780b43e03fcd29dc7293c275f7fe008dfa54ecc2b64177f0d5fbe8f1c76f6ad11ffbffdb6527d575ab", 0x29}, {&(0x7f0000000540)="08fb123f29718d2af0ab62b664d1666da4a8b6925f166a7ad85bd531ba805c8ef891601d7a060acd2753b5d23adca186de7080818e9be2d413c074b49950d51c0dd9516c3650db3b0342b569888f1e462ec8875bb803db95967058a1306c0baf2a01976a1865b8d2ef2103", 0x6b}, {&(0x7f00000005c0)="6beff747c5b2e5d22f078c18704b850a76dc25395893401e982e0778e5c12e483fd46acc666eb11d844e100b9b817207b4a4aceb9987b2ee29a350e6dc173adc1c3d2233021c0951cf32c54086d365cbd977085dd0d140bccfe35ff1109665b41fb3b7d440f63e4119c5b8863a39a79bead61bb13d2ab217a7b242aba7dbf4fd9b168ed585c26c150df1eb414f399c69f96ec3f81a00e06d", 0x98}, {&(0x7f0000000680)="9bc70c70a428b733fec4a2328a6c7b2f092ebc5c98816a24c6a2e290b15703b6071724be75e0a921f6fa8121e53b1e88edf21d7fdff91bc6192e5a0a7e20364649bb3b9c7b4b2c4d90bde9deec84ff968cc60d06558257fcaa0f2d9704c0ed78f08b51cdea436edb74f3a6b0eba0d65aef40f26f4a80675b76ab113a9d3cb5c646acfb763a2838502fd49ec600bc5a9d4fc0f1a08ffae35ca96af14bf1d004492ed39cca2da28c603c1802f0e73c92746c52dd5a8965826d6bcefab14dd0fbb86d612dd23bd2edde6cf36393391739a49fc027a1441a1b8836f5837c98fdbf779e41b3a8e9b18aad4b2898a785a1", 0xee}, {&(0x7f0000000780)="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", 0x442}], 0x6}}], 0x1, 0x20000) 19m58.956498345s ago: executing program 3 (id=4445): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e22, @broadcast}, 0x10) r1 = socket$inet6(0xa, 0x1, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) statx(0xffffffffffffff9c, 0x0, 0x100, 0x7ff, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) getpgrp(r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) tkill(0x0, 0xb) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, &(0x7f0000001900)={0x2, {0xc, 0x117, 0x5, 0x101, 0x200}}) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) lstat(&(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)) write$UHID_INPUT(r5, &(0x7f0000001600)={0x9, {"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", 0x1000}}, 0x1006) setsockopt$inet6_int(r1, 0x29, 0x4e, &(0x7f0000000000)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0xfffffffd, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8000}, 0x1c) 19m58.685533382s ago: executing program 1 (id=4447): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e22, @broadcast}, 0x10) r1 = socket$inet6(0xa, 0x1, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) statx(0xffffffffffffff9c, 0x0, 0x100, 0x7ff, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) getpgrp(r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) tkill(0x0, 0xb) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, &(0x7f0000001900)={0x2, {0xc, 0x117, 0x5, 0x101, 0x200}}) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) lstat(&(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)) write$UHID_INPUT(r5, &(0x7f0000001600)={0x9, {"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", 0x1000}}, 0x1006) ioctl$KDFONTOP_GET(r5, 0x4b72, &(0x7f0000000400)={0x1, 0x0, 0xb, 0x5, 0x19a}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_int(r1, 0x29, 0x4e, &(0x7f0000000000)=0x1, 0x4) 19m56.434097454s ago: executing program 2 (id=4449): socket$inet6(0xa, 0x80001, 0x0) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000b00)=[{0x0}, {0x0}], 0x2, 0x0, 0x0, 0x54}, 0x400c010) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x3cee, &(0x7f0000000040)={0x0, 0x9c3d, 0xc000, 0x3, 0x2c3}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 19m55.696468056s ago: executing program 1 (id=4450): bind$netlink(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) 19m55.432137312s ago: executing program 2 (id=4453): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000100), 0x4) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f00000000c0)={0x8, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) setsockopt$inet_mreq(r1, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) setsockopt$MRT_ADD_MFC_PROXY(r2, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe0000300, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xffffeff7, 0x40, 0x40000006}, 0x3c) 19m55.332517347s ago: executing program 3 (id=4456): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000100), 0x4) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f00000000c0)={0x8, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) setsockopt$inet_mreq(r1, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x42, &(0x7f0000000140)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x6, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x80, 0x2, 0x0, @empty, @multicast1=0xe0000300, {[@timestamp={0x44, 0x4, 0x98, 0x0, 0x4}]}}, @dest_unreach={0x3, 0x4, 0x0, 0x0, 0x3, 0xc58, {0x5, 0x4, 0x0, 0x7, 0x1, 0x65, 0xe, 0x4e, 0x24, 0xc, @private=0xa010100, @dev={0xac, 0x14, 0x14, 0x44}}}}}}}, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r2, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe0000300, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xffffeff7, 0x40, 0x40000006}, 0x3c) 19m55.118134699s ago: executing program 3 (id=4457): r0 = socket$unix(0x1, 0x1, 0x0) socket$unix(0x1, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x2}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000180)=@newtfilter={0x94, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, 0x0, {0xffff, 0x5}, {}, {0x7, 0x3}}, [@filter_kind_options=@f_matchall={{0xd}, {0x60, 0x2, [@TCA_MATCHALL_ACT={0x5c, 0x2, [@m_ife={0x58, 0x1, 0x0, 0x0, {{0x8}, {0x30, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x8, 0x8, 0x4, 0xa, 0x3}, 0x1}}, @TCA_IFE_METALST={0x10, 0x6, [@IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_TCINDEX={0x6, 0x5, @val=0x56}]}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x94}}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r4 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r5, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000140)='\r', 0x1}], 0x1}, 0x4) 19m53.669358257s ago: executing program 2 (id=4458): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000001680)=ANY=[@ANYBLOB], &(0x7f00000000c0)='GPL\x00', 0xffff789c, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x94) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/cgroup.procs\x00', 0x2, 0x0) sendfile(r5, r4, 0x0, 0x6) read$watch_queue(r5, &(0x7f0000000540)=""/4096, 0x1000) r6 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x3}, 0x0, 0x0, r3) add_key$keyring(&(0x7f0000000440), &(0x7f0000000480)={'syz', 0x3}, 0x0, 0x0, r6) keyctl$KEYCTL_MOVE(0x1e, r6, r6, r3, 0x0) 19m53.214313657s ago: executing program 1 (id=4460): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) recvmmsg(r0, &(0x7f0000002000)=[{{&(0x7f00000000c0)=@nl=@unspec, 0x80, &(0x7f0000000040)=[{&(0x7f00000001c0)=""/130, 0x82}, {&(0x7f0000000280)=""/111, 0x6f}], 0x2, &(0x7f0000000300)=""/87, 0x57}, 0x7}, {{0x0, 0x0, &(0x7f0000001700)=[{&(0x7f0000002300)=""/5, 0x5}, {&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000002400)=""/247, 0xf7}, {&(0x7f0000001480)=""/237, 0xed}, {&(0x7f0000001580)=""/7, 0x7}, {&(0x7f00000015c0)=""/215, 0xd7}, {&(0x7f00000016c0)=""/19, 0x13}], 0x7, &(0x7f0000001740)=""/27, 0x1b}, 0x807}, {{&(0x7f0000001780)=@vsock={0x28, 0x0, 0x0, @local}, 0x80, &(0x7f0000001980)=[{&(0x7f0000001800)=""/220, 0xdc}, {&(0x7f0000001900)=""/20, 0x14}, {&(0x7f0000001940)=""/62, 0x3e}], 0x3, &(0x7f0000001380)=""/21, 0x15}, 0x3}, {{&(0x7f0000001a00)=@phonet, 0x80, &(0x7f0000001f00)=[{&(0x7f0000001a80)=""/230, 0xe6}, {&(0x7f0000001b80)=""/90, 0x5a}, {&(0x7f0000001c00)=""/62, 0x3e}, {&(0x7f0000001c40)=""/2, 0x2}, {&(0x7f0000001c80)=""/83, 0x53}, {&(0x7f0000001d00)=""/151, 0x97}, {&(0x7f0000001dc0)=""/132, 0x84}, {&(0x7f0000001e80)=""/112, 0x70}], 0x8, &(0x7f0000001f40)=""/140, 0x8c}, 0x886}], 0x4, 0x20, 0x0) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 19m52.053510026s ago: executing program 2 (id=4461): io_uring_setup(0x650b, &(0x7f0000000180)={0x0, 0x2c3f, 0x0, 0x21, 0xab}) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) r1 = socket(0x28, 0x5, 0x0) r2 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r2, 0x4) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f00000004000000040000001200"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r3}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r4 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0x1f400, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) io_uring_enter(r4, 0x2219, 0x7721, 0x16, 0x0, 0x0) 19m51.871617029s ago: executing program 2 (id=4462): socket(0x10, 0x3, 0x0) r0 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000140)=0x0) sendmsg$AUDIT_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x3c, 0x3e9, 0x1, 0x70bd26, 0x25dfdbdb, {0x0, 0x1, 0x2, r1, 0xd, 0x80, 0x2, 0x7ffffffe, 0x0, 0x7, 0x9}}, 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x20040044) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) madvise(&(0x7f00002e5000/0x400000)=nil, 0x400000, 0xf) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) capset(0x0, 0x0) ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x560b, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) sendmmsg$inet(r5, 0x0, 0x0, 0x850) pipe(&(0x7f0000000380)={0xffffffffffffffff}) getsockname$packet(r6, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000400)=0x14) r7 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) ioctl$USBDEVFS_IOCTL(r7, 0xc0105512, &(0x7f0000000200)) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x7, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000fdffffff18000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000003800000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$USBDEVFS_IOCTL(r7, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) 19m49.677523551s ago: executing program 2 (id=4465): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x7, 0x8, 0xc}, 0x50) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x1, r0}, 0x38) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)={0x1c, 0x40, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x4, 0x1}]}, 0x1c}}, 0xc000) sendmsg(r1, &(0x7f0000000740)={&(0x7f0000000540)=@pptp={0x18, 0x2, {0x2, @private=0xa010102}}, 0x80, &(0x7f0000000300)=[{0x0}, {&(0x7f0000001400)}], 0x2, &(0x7f0000002400)=[{0x800, 0x1, 0x8, "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"}, {0x38, 0x108, 0x2, "d1cb82e1ba3f7b288450fd50da072eb1dd2d3d71fdbd35d588ac369a778a8af9ac"}, {0x100, 0x19c, 0x3, "14de4e11cc1b7b9c87cb283c35ed2161798d1ff02f43f9040dbd96a4a31979463a557b963633819542a4dbff22946796f56173f2dcfa3a07ab17cf12afccbad562e51b8730a884d42aec71e6a411d62fd76b05b7baf008f6b781fa2c381c42907a2298b01b9341a64fcba61b45edd16e32a049db6f7531740ee2cc5bdd533d3aae7f3c911dba00a82d4dc36159c1ea023056cb6ec7379e6c33461a2422a3e1639c833116b5480f74d4cf5b59450ec4f14c278f029e60700638a59e224a42760a4deac19e6f5ed15c79802ab0c7202996abfa04d7f13e7160dfeaae2f58574d96cf8a405acc4b885829"}], 0x938}, 0x40000) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443", 0x67}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 19m48.682907496s ago: executing program 1 (id=4466): r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000040), 0x10) listen(r0, 0x0) r1 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r1, &(0x7f0000000080), 0x10) setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f0000000180)={0x1, 0x5}, 0x8) sendmmsg(r1, 0x0, 0x0, 0x24008094) r2 = accept4$unix(r0, 0x0, 0x0, 0x0) recvfrom$unix(r2, &(0x7f0000000140)=""/263, 0x107, 0x0, 0x0, 0x0) close(0x4) 19m48.412575326s ago: executing program 1 (id=4468): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), r0) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)={0x20, r1, 0x1, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x0, 0xc9f5f15d61ca33d8}, 0x8000) 19m39.668471429s ago: executing program 32 (id=4457): r0 = socket$unix(0x1, 0x1, 0x0) socket$unix(0x1, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x2}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000180)=@newtfilter={0x94, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, 0x0, {0xffff, 0x5}, {}, {0x7, 0x3}}, [@filter_kind_options=@f_matchall={{0xd}, {0x60, 0x2, [@TCA_MATCHALL_ACT={0x5c, 0x2, [@m_ife={0x58, 0x1, 0x0, 0x0, {{0x8}, {0x30, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x8, 0x8, 0x4, 0xa, 0x3}, 0x1}}, @TCA_IFE_METALST={0x10, 0x6, [@IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_TCINDEX={0x6, 0x5, @val=0x56}]}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x94}}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r4 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r5, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000140)='\r', 0x1}], 0x1}, 0x4) 19m34.148905465s ago: executing program 33 (id=4465): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x7, 0x8, 0xc}, 0x50) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x1, r0}, 0x38) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)={0x1c, 0x40, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x4, 0x1}]}, 0x1c}}, 0xc000) sendmsg(r1, &(0x7f0000000740)={&(0x7f0000000540)=@pptp={0x18, 0x2, {0x2, @private=0xa010102}}, 0x80, &(0x7f0000000300)=[{0x0}, {&(0x7f0000001400)}], 0x2, &(0x7f0000002400)=[{0x800, 0x1, 0x8, "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"}, {0x38, 0x108, 0x2, "d1cb82e1ba3f7b288450fd50da072eb1dd2d3d71fdbd35d588ac369a778a8af9ac"}, {0x100, 0x19c, 0x3, "14de4e11cc1b7b9c87cb283c35ed2161798d1ff02f43f9040dbd96a4a31979463a557b963633819542a4dbff22946796f56173f2dcfa3a07ab17cf12afccbad562e51b8730a884d42aec71e6a411d62fd76b05b7baf008f6b781fa2c381c42907a2298b01b9341a64fcba61b45edd16e32a049db6f7531740ee2cc5bdd533d3aae7f3c911dba00a82d4dc36159c1ea023056cb6ec7379e6c33461a2422a3e1639c833116b5480f74d4cf5b59450ec4f14c278f029e60700638a59e224a42760a4deac19e6f5ed15c79802ab0c7202996abfa04d7f13e7160dfeaae2f58574d96cf8a405acc4b885829"}], 0x938}, 0x40000) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443", 0x67}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 19m33.121678883s ago: executing program 34 (id=4468): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), r0) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)={0x20, r1, 0x1, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x0, 0xc9f5f15d61ca33d8}, 0x8000) 5m7.756514592s ago: executing program 4 (id=7410): socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB], &(0x7f0000000bc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="19000000040000000800000002"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x1b, 0x3, 0x0, 0x0, 0x4}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{r1}, &(0x7f0000000400), &(0x7f0000000440)=r0}, 0x20) 5m7.512129332s ago: executing program 4 (id=7413): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000005c0)='fd', 0x0, r0) r2 = fsmount(r1, 0x0, 0x2) fchdir(r2) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r3, 0x0) setpgid(0x0, r3) statx(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x1000, 0x800, 0x0) 5m7.377218684s ago: executing program 4 (id=7416): r0 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r0, 0x0, &(0x7f0000000580)) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x437, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x20c89}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x1}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20008000}, 0x20000000) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24004880}, 0x0) 5m7.164973622s ago: executing program 4 (id=7418): sched_setscheduler(0x0, 0x1, 0x0) syz_emit_ethernet(0x88, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0) flock(r0, 0x2) r1 = open(&(0x7f0000000300)='.\x00', 0x100000, 0x0) flock(r1, 0x1) flock(r1, 0x1) flock(r0, 0x5) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) 5m6.863084096s ago: executing program 4 (id=7422): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(0xffffffffffffffff, 0x10, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0}, 0x20) r0 = memfd_create(&(0x7f0000000080)=',\xea\x02', 0x4) ftruncate(r0, 0x7000000) r1 = dup(r0) preadv2(r1, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/83, 0x200000}], 0x1000000000000146, 0x3700, 0x0, 0x0) 5m6.598029383s ago: executing program 4 (id=7425): syz_clone(0x42000000, 0x0, 0x0, 0x0, 0x0, 0x0) mremap(&(0x7f00003ef000/0x3000)=nil, 0x3000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) mmap(&(0x7f0000fe2000/0x2000)=nil, 0x2000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36a1000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) 4m50.746015673s ago: executing program 35 (id=7425): syz_clone(0x42000000, 0x0, 0x0, 0x0, 0x0, 0x0) mremap(&(0x7f00003ef000/0x3000)=nil, 0x3000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) mmap(&(0x7f0000fe2000/0x2000)=nil, 0x2000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36a1000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) 24.292137455s ago: executing program 5 (id=8158): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xea690000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) openat$sndseq(0xffffffffffffff9c, 0x0, 0x202) r4 = creat(&(0x7f0000000080)='./file0\x00', 0x80) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f00000000c0)={0x0, 0x80000000}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000180)={r5, 0x811}, &(0x7f00000001c0)=0x8) accept4$bt_l2cap(r3, 0x0, 0x0, 0x80800) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x6) ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, &(0x7f0000000040)={@my=0x1}) r6 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r6, &(0x7f0000000200)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10) shutdown(r6, 0x1) 23.017759311s ago: executing program 5 (id=8160): execveat(0xffffffffffffff9c, &(0x7f00000002c0)='./file2\x00', 0x0, 0x0, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x2000, 0x0) unlink(&(0x7f0000000040)='./file0\x00') mknod$loop(&(0x7f0000000200)='./file0\x00', 0x6000, 0x1) 22.04708735s ago: executing program 5 (id=8163): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$can_bcm(0x1d, 0x2, 0x2) r3 = syz_io_uring_setup(0x836, &(0x7f00000003c0)={0x0, 0xb62e, 0x400, 0xfffffffe, 0x182}, &(0x7f0000000140)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r2, 0x80, &(0x7f00000002c0)=@nl=@unspec}) io_uring_enter(r3, 0x3516, 0x0, 0x0, 0x0, 0x0) 21.739030265s ago: executing program 6 (id=8166): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) 21.547749241s ago: executing program 6 (id=8167): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, 0x0, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) ioctl$SNDCTL_DSP_GETISPACE(0xffffffffffffffff, 0x8010500d, &(0x7f0000000500)) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r8, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r9 = socket(0x1, 0x803, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r5], 0x3c}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc00000019000100000000000000000000000000000000000000000000000000fe8000000000dfffffff0000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000700000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000440005002001000000000000000000000000000000000002320000000a000000fc010000000000000000000000000000000000000400000000"], 0xfc}}, 0x0) 17.31219827s ago: executing program 7 (id=8172): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xea690000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) openat$sndseq(0xffffffffffffff9c, 0x0, 0x202) r4 = creat(&(0x7f0000000080)='./file0\x00', 0x80) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f00000000c0)={0x0, 0x80000000}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000180)={r5, 0x811}, &(0x7f00000001c0)=0x8) accept4$bt_l2cap(r3, 0x0, 0x0, 0x80800) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x6) r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r6, 0x4008af60, &(0x7f0000000040)={@my=0x1}) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000200)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10) shutdown(0xffffffffffffffff, 0x1) 15.434679202s ago: executing program 7 (id=8176): openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x60442, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(0xffffffffffffffff, 0x0, 0x2) r4 = openat$cgroup_subtree(r3, &(0x7f0000000100), 0x2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_RESET_LINK_STATS(r5, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) write$cgroup_subtree(r4, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x5, 0xb, &(0x7f00000000c0)=@framed={{0x18, 0x4, 0x0, 0x0, 0x7fff}, [@printk={@d, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xb1}}]}, &(0x7f0000000000)='GPL\x00', 0x2}, 0x94) 14.960177869s ago: executing program 0 (id=8177): syz_usb_connect(0x5, 0x79, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000c7099e40431957225181000000010902"], 0x0) syz_emit_vhci(0x0, 0xa) 14.179348492s ago: executing program 7 (id=8178): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f00000000c0)={0x4000001, 0x40071, 0x200000009}) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) pread64(r0, 0x0, 0x0, 0x78f2a36b) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f0000000300)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000380)={0x0, 0x0, r2, 0x0, 0x0, 0x1f5, 0x0, 0x0, {0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdd, 0x8, 0x0, 0x0, 0x0, 0x8001, 0xfffffffa, "b4bc323ef77d1f000071849800000000dfff00"}}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="1c0000005e"], 0xfe33) 14.034134115s ago: executing program 5 (id=8179): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) timerfd_settime(0xffffffffffffffff, 0x3, 0x0, 0x0) unshare(0x20060400) r1 = fsopen(&(0x7f0000000180)='hugetlbfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x6) bpf$PROG_LOAD(0x5, 0x0, 0x0) fchdir(r2) 13.867033722s ago: executing program 7 (id=8181): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x1001, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x30}}, 0xe) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x44000) openat$kvm(0xffffffffffffff9c, 0x0, 0x11f040, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_CREATE(0x0, 0x0, 0x48) openat$comedi(0xffffffffffffff9c, 0x0, 0x2, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0x1c, &(0x7f0000000300)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x1000}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x8}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x1, 0xb, 0x8, 0x9}, {0x4, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r4}, {}, {0x46, 0x0, 0x0, 0x76}}], {{}, {0x6, 0x0, 0x7, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000980)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 13.760367317s ago: executing program 5 (id=8182): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d, 0x0, 0x0, 0xfffffffffffffe99, 0x0, 0x0, 0x0, 0x44, 0x8, 0x0, 0x0}}, 0x10) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000000)={r2, &(0x7f0000000140)}, 0x20) 12.694196083s ago: executing program 7 (id=8184): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x4088080, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x0, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) bpf$MAP_CREATE(0x0, 0x0, 0x50) prctl$PR_SET_KEEPCAPS(0x59616d61, 0x1ffffffffffffff) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast6-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c570820fae0900cd3292ea54c7beef915d564c90c2", 0x18) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, 0x0) syz_usb_connect(0x0, 0x3f, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000d0918108ac051582588f0000000109022d00010000000009040000030b05000009058d67c0002a000009050502000000000009058b6e", @ANYRES64=r4, @ANYBLOB="4151f1ad77da31ebbc5dacef19ecb15a75914b64516a138afaf76aa8b5e76e59fd2340f84b02fbab95c66078ec3738d53dc693343086dfb109b5a7030a40ad85090040bd3a6c55da41929a13ac399ed338821d6a7017425fc54083872d34bc74a61dcbd8e95b8254e69bbaa41569f4853b59f03d4a9e282bf14e963d9bb55a8da452a6a10434cf4b85aff5e0d1202988d4ea"], 0x0) 10.535935311s ago: executing program 0 (id=8185): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x5c399000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x106) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_dev$vcsu(&(0x7f00000000c0), 0x1, 0x100) read$FUSE(r2, &(0x7f000001a240)={0x2020}, 0x2020) 8.525682681s ago: executing program 7 (id=8188): prlimit64(0x0, 0xe, 0x0, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) add_key(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040301, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x1000000000000, 0x0}}, 0xfdbc) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0xa1300) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000300), 0x20042) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r2, 0x40605346, &(0x7f0000000400)={0x0, 0x0, {0x3}, 0xb2a1}) write$sndseq(r2, &(0x7f0000000140)=[{0x1f, 0x0, 0x0, 0xfd, @tick, {}, {}, @raw32}], 0x1c) ioctl$SNDCTL_DSP_RESET(r0, 0x5000, 0x0) 8.516931808s ago: executing program 6 (id=8189): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$can_bcm(0x1d, 0x2, 0x2) r3 = syz_io_uring_setup(0x836, &(0x7f00000003c0)={0x0, 0xb62e, 0x400, 0xfffffffe, 0x182}, &(0x7f0000000140)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r2, 0x80, &(0x7f00000002c0)=@nl=@unspec}) io_uring_enter(r3, 0x3516, 0x0, 0x0, 0x0, 0x0) 6.663863457s ago: executing program 0 (id=8192): sendmsg$can_raw(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x20000000) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@sndinfo={0x20, 0x84, 0x2, {0x60b9, 0x4204, 0x8000, 0x9}}, @sndinfo={0x20, 0x84, 0x2, {0xd, 0x8204, 0xa03, 0x3}}, @sndrcv={0x30, 0x84, 0x1, {0x9a43, 0x15, 0x8000, 0x6, 0x9, 0x7, 0x8, 0x1}}], 0x70}, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1c, 0x3, &(0x7f0000000000)=@framed={{0xdb, 0xa, 0xa, 0xfe00, 0xa0, 0x71, 0x10, 0x1d}}, 0x0, 0xb, 0x0, 0x0, 0x0, 0x6f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 6.509329794s ago: executing program 8 (id=8193): setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000080)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3a0, 0x118, 0x0, 0x330, 0x298, 0x330, 0x3f0, 0x3f0, 0x3f0, 0x3f0, 0x3f0, 0x6, 0x0, {[{{@ip={@multicast1, @remote, 0x0, 0x0, 'ip6erspan0\x00', 'pimreg0\x00'}, 0x0, 0x70, 0xa8}, @common=@inet=@SET3={0x38}}, {{@ip={@multicast2, @dev, 0x0, 0x0, 'veth0_to_bond\x00', 'syzkaller1\x00'}, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0x0, 0x0, 'vlan0\x00', 'veth1_to_bridge\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x400) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001000000000000000000dc020078000000000000000000000000ff02000000000000e26ea7250000000100000000000000000a"], 0xb8}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="650100"], 0x188}}, 0x0) 6.446762124s ago: executing program 0 (id=8194): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast6-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c570820fae0900cd3292ea54c7beef915d564c90c2", 0x18) 6.289266934s ago: executing program 0 (id=8195): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpgrp(0x0) sched_setaffinity(r2, 0xfffffffffffffdc3, &(0x7f00000000c0)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) symlinkat(&(0x7f0000002740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f0000000880)='./file0\x00') r6 = syz_io_uring_setup(0x109, &(0x7f0000000140)={0x0, 0xdcb8, 0x10, 0x1, 0x89}, &(0x7f00000003c0)=0x0, &(0x7f0000000200)) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_enter(r6, 0x3518, 0xaddf, 0x2, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[], 0x0}, 0x94) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newlink={0x2c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x401}, [@IFLA_XDP={0x4}, @IFLA_GROUP={0x8}]}, 0x2c}}, 0x0) 6.287792671s ago: executing program 8 (id=8196): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) 6.228339719s ago: executing program 6 (id=8197): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xea690000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) openat$sndseq(0xffffffffffffff9c, 0x0, 0x202) r4 = creat(&(0x7f0000000080)='./file0\x00', 0x80) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f00000000c0)={0x0, 0x80000000}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000180)={r5, 0x811}, &(0x7f00000001c0)=0x8) accept4$bt_l2cap(r3, 0x0, 0x0, 0x80800) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x6) ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, &(0x7f0000000040)={@my=0x1}) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000200)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10) shutdown(0xffffffffffffffff, 0x1) 4.292439598s ago: executing program 8 (id=8198): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r1, 0xfffffffc) sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0}}, 0x24000040) 3.197583278s ago: executing program 6 (id=8199): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, 0x0) syz_usb_connect(0x0, 0x3f, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000d0918108ac051582588f0000000109022d00010000000009040000030b05000009058d67c0002a000009050502000000000009058b6e", @ANYRES64=r0, @ANYBLOB="4151f1ad77da31ebbc5dacef19ecb15a75914b64516a138afaf76aa8b5e76e59fd2340f84b02fbab95c66078ec3738d53dc693343086dfb109b5a7030a40ad85090040bd3a6c55da41929a13ac399ed338821d6a7017425fc54083872d34bc74a61dcbd8e95b8254e69bbaa41569f4853b59f03d4a9e282bf14e963d9bb55a8da452a6a10434cf4b85aff5e0d1202988d4ea"], 0x0) 3.033249741s ago: executing program 8 (id=8200): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, 0x0, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) ioctl$SNDCTL_DSP_GETISPACE(0xffffffffffffffff, 0x8010500d, &(0x7f0000000500)) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r8, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r9 = socket(0x1, 0x803, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r5], 0x3c}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc00000019000100000000000000000000000000000000000000000000000000fe8000000000dfffffff0000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000700000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000440005002001000000000000000000000000000000000002320000000a000000fc010000000000000000000000000000000000000400000000"], 0xfc}}, 0x0) 2.436586728s ago: executing program 5 (id=8201): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa08, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) mremap(&(0x7f0000aaf000/0x3000)=nil, 0x3000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mknod$loop(0x0, 0xfff, 0x1) read$FUSE(0xffffffffffffffff, 0x0, 0x0) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x80101, 0x101) syz_emit_ethernet(0xe, &(0x7f0000000140)={@broadcast, @local, @void, {@generic={0x6000}}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000000300)=""/102392, 0x18ff8) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) r3 = syz_open_dev$usbmon(&(0x7f0000000000), 0xa0000001, 0x82002) ioctl$BTRFS_IOC_TREE_SEARCH(r3, 0x9208, 0x0) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) pipe2$9p(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4880) fcntl$getownex(r2, 0x10, &(0x7f0000019300)) write$P9_RGETLOCK(r4, 0x0, 0x0) 1.142592349s ago: executing program 0 (id=8203): syz_open_dev$video4linux(0x0, 0x3, 0x981) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 375.467436ms ago: executing program 8 (id=8204): sendmsg$can_raw(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x20000000) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@sndinfo={0x20, 0x84, 0x2, {0x60b9, 0x4204, 0x8000, 0x9}}, @sndinfo={0x20, 0x84, 0x2, {0xd, 0x8204, 0xa03, 0x3}}, @sndrcv={0x30, 0x84, 0x1, {0x9a43, 0x15, 0x8000, 0x6, 0x9, 0x7, 0x8, 0x1}}], 0x70}, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1c, 0x3, &(0x7f0000000000)=@framed={{0xdb, 0xa, 0xa, 0xfe00, 0xa0, 0x71, 0x10, 0x1d}}, 0x0, 0xb, 0x0, 0x0, 0x0, 0x6f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 76.567914ms ago: executing program 6 (id=8205): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="660f388173ab0fc76fb4360fc9bb25cc00007666ba6b41b000f303c70fae6e2fc0c00f0f2367260f01ca660f38817700c4c2459d78ad", 0x36}], 0x1, 0x51, 0x0, 0x0) add_key(0x0, 0x0, &(0x7f0000000080)="0000000000000002", 0x8, 0xffffffffffffffff) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fdd000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000005700)=@vmx={0x0, 0x0, 0x2080}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 0s ago: executing program 8 (id=8206): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast6-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c570820fae0900cd3292ea54c7beef915d564c90c2", 0x18) kernel console output (not intermixed with test programs): with an up link [ 1385.526774][T21886] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1386.530852][T21904] bridge0: port 1(bridge_slave_0) entered blocking state [ 1386.530987][T21904] bridge0: port 1(bridge_slave_0) entered disabled state [ 1386.531227][T21904] bridge_slave_0: entered allmulticast mode [ 1386.533262][T21904] bridge_slave_0: entered promiscuous mode [ 1388.397407][T22014] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5119'. [ 1388.680846][T21904] bridge0: port 2(bridge_slave_1) entered blocking state [ 1388.680990][T21904] bridge0: port 2(bridge_slave_1) entered disabled state [ 1388.681313][T21904] bridge_slave_1: entered allmulticast mode [ 1388.684152][T21904] bridge_slave_1: entered promiscuous mode [ 1388.720597][T21886] team0: Port device team_slave_0 added [ 1390.007004][T21886] team0: Port device team_slave_1 added [ 1391.280847][T21904] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1391.341782][T21886] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1391.341823][T21886] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1391.344619][T21886] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1391.506324][T21904] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1391.547203][T21886] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1391.547224][T21886] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1391.547481][T21886] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1392.130757][T22040] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5127'. [ 1392.170300][T21904] team0: Port device team_slave_0 added [ 1392.192118][T21904] team0: Port device team_slave_1 added [ 1392.412213][T17485] bridge_slave_1: left allmulticast mode [ 1392.412244][T17485] bridge_slave_1: left promiscuous mode [ 1392.412507][T17485] bridge0: port 2(bridge_slave_1) entered disabled state [ 1392.690198][T17485] bridge_slave_0: left allmulticast mode [ 1392.690225][T17485] bridge_slave_0: left promiscuous mode [ 1392.690440][T17485] bridge0: port 1(bridge_slave_0) entered disabled state [ 1393.710257][T17485] bridge_slave_1: left allmulticast mode [ 1393.710293][T17485] bridge_slave_1: left promiscuous mode [ 1393.710580][T17485] bridge0: port 2(bridge_slave_1) entered disabled state [ 1393.854419][T17485] bridge_slave_0: left allmulticast mode [ 1393.854452][T17485] bridge_slave_0: left promiscuous mode [ 1393.854727][T17485] bridge0: port 1(bridge_slave_0) entered disabled state [ 1393.949065][T17485] bridge_slave_1: left allmulticast mode [ 1393.949092][T17485] bridge_slave_1: left promiscuous mode [ 1393.949370][T17485] bridge0: port 2(bridge_slave_1) entered disabled state [ 1394.019495][T17485] bridge_slave_0: left allmulticast mode [ 1394.019518][T17485] bridge_slave_0: left promiscuous mode [ 1394.019767][T17485] bridge0: port 1(bridge_slave_0) entered disabled state [ 1394.635646][T17485] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1395.038366][T17485] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1395.139799][T17485] bond0 (unregistering): Released all slaves [ 1396.619512][T17485] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1396.675599][T22065] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5135'. [ 1396.741641][T17485] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1396.805685][T22067] netlink: 128 bytes leftover after parsing attributes in process `syz.0.5136'. [ 1396.847844][T17485] bond0 (unregistering): Released all slaves [ 1397.568399][T17485] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1397.688510][T17485] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1397.750733][T17485] bond0 (unregistering): Released all slaves [ 1397.818971][T21904] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1397.818992][T21904] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1397.819024][T21904] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1397.999659][T21904] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1397.999680][T21904] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1397.999722][T21904] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1398.069081][T21886] hsr_slave_0: entered promiscuous mode [ 1398.070496][T21886] hsr_slave_1: entered promiscuous mode [ 1398.071479][T21886] debugfs: 'hsr0' already exists in 'hsr' [ 1398.071506][T21886] Cannot create hsr debugfs directory [ 1399.853255][T21904] hsr_slave_0: entered promiscuous mode [ 1399.854718][T21904] hsr_slave_1: entered promiscuous mode [ 1399.855851][T21904] debugfs: 'hsr0' already exists in 'hsr' [ 1399.855880][T21904] Cannot create hsr debugfs directory [ 1399.967993][T21820] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1400.052944][T21820] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1400.121940][T21820] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1400.303850][T21820] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1401.866796][T17485] hsr_slave_0: left promiscuous mode [ 1401.897992][T17485] hsr_slave_1: left promiscuous mode [ 1401.899129][T17485] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1401.933655][T17485] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1402.305524][T17485] hsr_slave_0: left promiscuous mode [ 1402.344815][T17485] hsr_slave_1: left promiscuous mode [ 1402.346809][T17485] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1402.408223][T17485] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1402.686423][T17485] hsr_slave_0: left promiscuous mode [ 1402.730370][T17485] hsr_slave_1: left promiscuous mode [ 1402.748633][T17485] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1402.946458][T17485] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1403.748757][T17485] team0 (unregistering): Port device team_slave_1 removed [ 1403.820190][T17485] team0 (unregistering): Port device team_slave_0 removed [ 1404.629462][T17485] team0 (unregistering): Port device team_slave_1 removed [ 1404.688614][T17485] team0 (unregistering): Port device team_slave_0 removed [ 1404.884972][T22102] netlink: 128 bytes leftover after parsing attributes in process `syz.4.5145'. [ 1405.249357][T17485] team0 (unregistering): Port device team_slave_1 removed [ 1405.298987][T17485] team0 (unregistering): Port device team_slave_0 removed [ 1406.895553][T21886] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1407.215078][T21886] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1407.257815][T21886] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1407.406995][T22120] hub 8-0:1.0: USB hub found [ 1407.408376][T22120] hub 8-0:1.0: 1 port detected [ 1407.607810][T21886] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1410.516990][T21904] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1410.848371][T21904] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1411.967943][T21904] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1412.110878][T21904] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1412.244209][T22165] netlink: 128 bytes leftover after parsing attributes in process `syz.4.5154'. [ 1412.337830][T14142] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 1412.429504][T21820] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1412.516151][T21820] 8021q: adding VLAN 0 to HW filter on device team0 [ 1412.551262][ T1129] bridge0: port 1(bridge_slave_0) entered blocking state [ 1412.551410][ T1129] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1412.617317][T19160] bridge0: port 2(bridge_slave_1) entered blocking state [ 1412.629080][T19160] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1412.791360][T14142] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1412.791424][T14142] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1412.791471][T14142] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 1412.791496][T14142] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1412.801568][T14142] usb 1-1: config 0 descriptor?? [ 1412.813092][T14142] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 1413.022848][T21886] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1413.270471][T21886] 8021q: adding VLAN 0 to HW filter on device team0 [ 1413.323856][T21904] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1413.405244][ T1129] bridge0: port 1(bridge_slave_0) entered blocking state [ 1413.405405][ T1129] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1413.455989][T19182] bridge0: port 2(bridge_slave_1) entered blocking state [ 1413.456616][T19182] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1413.529241][T22192] netlink: 68 bytes leftover after parsing attributes in process `syz.4.5158'. [ 1413.562851][T21904] 8021q: adding VLAN 0 to HW filter on device team0 [ 1413.634047][T20072] bridge0: port 1(bridge_slave_0) entered blocking state [ 1413.672268][T20072] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1413.766062][T19182] bridge0: port 2(bridge_slave_1) entered blocking state [ 1413.784815][T19182] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1414.681485][T21820] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1414.936723][T21886] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1415.124010][T22235] bridge0: port 3(syz_tun) entered blocking state [ 1415.144806][T22235] bridge0: port 3(syz_tun) entered disabled state [ 1415.180208][T22235] syz_tun: entered promiscuous mode [ 1415.351161][T19728] usb 1-1: USB disconnect, device number 9 [ 1415.414609][T21904] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1415.807824][T19728] usb 1-1: new full-speed USB device number 10 using dummy_hcd [ 1416.004193][T19728] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1416.004227][T19728] usb 1-1: config 0 has no interfaces? [ 1416.008080][T19728] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1416.008175][T19728] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1416.008234][T19728] usb 1-1: Product: syz [ 1416.008275][T19728] usb 1-1: Manufacturer: syz [ 1416.008317][T19728] usb 1-1: SerialNumber: syz [ 1416.098214][T21820] veth0_vlan: entered promiscuous mode [ 1416.144537][T19728] usb 1-1: config 0 descriptor?? [ 1416.191807][T21820] veth1_vlan: entered promiscuous mode [ 1416.363437][T14133] usb 1-1: USB disconnect, device number 10 [ 1416.397451][T21886] veth0_vlan: entered promiscuous mode [ 1416.427003][T22270] overlayfs: failed to clone upperpath [ 1416.462473][T21820] veth0_macvtap: entered promiscuous mode [ 1416.476345][T21886] veth1_vlan: entered promiscuous mode [ 1416.509514][T21820] veth1_macvtap: entered promiscuous mode [ 1416.631662][T21820] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1416.699285][T21820] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1416.765828][T21886] veth0_macvtap: entered promiscuous mode [ 1416.779038][ T1115] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1416.782269][ T1115] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1416.784497][ T1115] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1416.803733][T21904] veth0_vlan: entered promiscuous mode [ 1416.807854][ T1115] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1416.812710][T21886] veth1_macvtap: entered promiscuous mode [ 1417.041109][T21904] veth1_vlan: entered promiscuous mode [ 1417.182845][T21886] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1417.254519][T21886] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1417.293101][ T139] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1417.307152][ T139] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1417.319687][ T139] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1417.350886][ T139] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1417.379124][ T1115] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1417.379150][ T1115] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1417.484111][T21904] veth0_macvtap: entered promiscuous mode [ 1417.558380][T21904] veth1_macvtap: entered promiscuous mode [ 1417.796549][T21904] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1417.830423][ T1115] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1417.830450][ T1115] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1417.862119][T21904] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1417.942738][T17485] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1417.943285][T17485] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1417.943932][T17485] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1417.944492][T17485] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1418.079380][T19182] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1418.079406][T19182] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1418.465084][ T5808] Bluetooth: hci5: unexpected event for opcode 0x0c03 [ 1418.698961][ T5799] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1418.725993][ T5799] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1418.727506][ T5799] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1418.756551][ T5799] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1418.757432][ T5799] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1418.856074][T22294] bridge0: port 3(syz_tun) entered blocking state [ 1418.856333][T22294] bridge0: port 3(syz_tun) entered disabled state [ 1418.862930][T22294] syz_tun: entered promiscuous mode [ 1418.904690][T20072] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1418.904717][T20072] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1419.563648][T19182] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1419.642946][T22312] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1419.643159][T22312] batadv_slave_0: entered promiscuous mode [ 1419.646842][T22312] netlink: 'syz.0.5180': attribute type 1 has an invalid length. [ 1419.646859][T22312] netlink: 1 bytes leftover after parsing attributes in process `syz.0.5180'. [ 1419.701078][ T139] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1419.701104][ T139] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1420.560053][T19182] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1420.897802][ T5799] Bluetooth: hci1: command tx timeout [ 1421.467492][T19182] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1421.707326][T19182] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1422.978563][ T5799] Bluetooth: hci1: command tx timeout [ 1423.224471][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 1423.257700][ T5849] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 1423.420637][ T5849] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1423.420700][ T5849] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1423.420749][ T5849] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 1423.420775][ T5849] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1423.612153][T22298] chnl_net:caif_netlink_parms(): no params data found [ 1423.640048][ T5849] usb 1-1: config 0 descriptor?? [ 1423.668166][ T5849] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 1423.845244][T19182] bridge_slave_1: left allmulticast mode [ 1423.845282][T19182] bridge_slave_1: left promiscuous mode [ 1423.845570][T19182] bridge0: port 2(bridge_slave_1) entered disabled state [ 1423.985827][T19182] bridge_slave_0: left allmulticast mode [ 1423.985982][T19182] bridge_slave_0: left promiscuous mode [ 1423.988591][T19182] bridge0: port 1(bridge_slave_0) entered disabled state [ 1425.894763][ T5799] Bluetooth: hci1: command tx timeout [ 1426.939425][ T5849] usb 1-1: USB disconnect, device number 11 [ 1427.279263][T19182] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1427.348630][T19182] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1427.374865][T19182] bond0 (unregistering): Released all slaves [ 1427.981027][ T5799] Bluetooth: hci1: command tx timeout [ 1429.198031][T22298] bridge0: port 1(bridge_slave_0) entered blocking state [ 1429.198183][T22298] bridge0: port 1(bridge_slave_0) entered disabled state [ 1429.198492][T22298] bridge_slave_0: entered allmulticast mode [ 1429.219713][T22298] bridge_slave_0: entered promiscuous mode [ 1429.253508][T22298] bridge0: port 2(bridge_slave_1) entered blocking state [ 1429.253747][T22298] bridge0: port 2(bridge_slave_1) entered disabled state [ 1429.254042][T22298] bridge_slave_1: entered allmulticast mode [ 1429.257223][T22298] bridge_slave_1: entered promiscuous mode [ 1430.967233][T22298] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1431.159407][T22298] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1431.321065][T22446] netlink: 'syz.0.5216': attribute type 2 has an invalid length. [ 1431.321094][T22446] netlink: 'syz.0.5216': attribute type 1 has an invalid length. [ 1431.508982][T22449] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5218'. [ 1431.908433][T19182] hsr_slave_0: left promiscuous mode [ 1432.010298][T19182] hsr_slave_1: left promiscuous mode [ 1432.011492][T19182] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1432.011522][T19182] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1432.125149][T19182] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1432.125181][T19182] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1432.313199][T22481] netlink: 'syz.4.5232': attribute type 8 has an invalid length. [ 1432.355373][T19182] veth1_macvtap: left promiscuous mode [ 1432.355510][T19182] veth0_macvtap: left promiscuous mode [ 1432.355783][T19182] veth1_vlan: left promiscuous mode [ 1432.355971][T19182] veth0_vlan: left promiscuous mode [ 1433.462794][T22510] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5239'. [ 1433.798505][T19182] team0 (unregistering): Port device team_slave_1 removed [ 1433.838559][T19182] team0 (unregistering): Port device team_slave_0 removed [ 1434.054558][T22298] team0: Port device team_slave_0 added [ 1434.147052][T22298] team0: Port device team_slave_1 added [ 1434.560889][T22298] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1434.560912][T22298] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1434.560943][T22298] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1434.570195][T22298] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1434.570248][T22298] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1434.570323][T22298] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1434.901123][T22298] hsr_slave_0: entered promiscuous mode [ 1434.905398][T22298] hsr_slave_1: entered promiscuous mode [ 1436.139383][T22549] Illegal XDP return value 4294967274 on prog (id 449) dev syz_tun, expect packet loss! [ 1438.555023][T22597] netlink: 44 bytes leftover after parsing attributes in process `syz.0.5269'. [ 1439.041467][T22298] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1439.110414][T22298] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1439.180376][T22298] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1439.214007][T22298] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1439.664314][T22298] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1439.739108][T22298] 8021q: adding VLAN 0 to HW filter on device team0 [ 1439.762950][ T1115] bridge0: port 1(bridge_slave_0) entered blocking state [ 1439.788946][ T1115] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1439.828800][ T9516] bridge0: port 2(bridge_slave_1) entered blocking state [ 1439.857910][ T9516] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1440.812871][T22298] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1443.184326][T22668] infiniband syz1: set active [ 1443.184354][T22668] infiniband syz1: added syz_tun [ 1443.313998][T22687] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1443.503203][T22298] veth0_vlan: entered promiscuous mode [ 1443.593563][T22298] veth1_vlan: entered promiscuous mode [ 1443.936869][T22668] RDS/IB: syz1: added [ 1443.957826][T22668] smc: adding ib device syz1 with port count 1 [ 1443.964307][T22668] smc: ib device syz1 port 1 has no pnetid [ 1443.995717][T22687] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1444.076698][T22719] netlink: 'syz.0.5302': attribute type 8 has an invalid length. [ 1444.431475][T22687] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1444.554440][T22298] veth0_macvtap: entered promiscuous mode [ 1444.575153][T22298] veth1_macvtap: entered promiscuous mode [ 1444.816672][T22687] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1444.880830][T22730] netlink: 67 bytes leftover after parsing attributes in process `syz.0.5305'. [ 1444.880925][T22732] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5306'. [ 1444.910598][T22298] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1444.928730][T22298] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1444.999121][T19182] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1445.021678][T19182] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1445.022260][T19182] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1445.022425][T19182] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1447.027594][T20072] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1447.732028][T22746] netlink: 'syz.0.5312': attribute type 8 has an invalid length. [ 1448.347735][T19182] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1448.546460][ T1115] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1448.671146][ T1115] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1448.726140][T19931] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1448.726159][T19931] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1449.194173][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1449.194202][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1452.116983][T22777] netlink: 'syz.4.5322': attribute type 8 has an invalid length. [ 1453.003710][T22793] 9p: Bad value for 'wfdno' [ 1453.146157][ T5808] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1453.166540][ T5808] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1453.187884][ T5808] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1453.193837][ T5808] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1453.217975][ T5808] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1455.384961][ T5808] Bluetooth: hci2: command tx timeout [ 1456.356595][T22796] chnl_net:caif_netlink_parms(): no params data found [ 1456.493404][T22855] netlink: 'syz.7.5351': attribute type 8 has an invalid length. [ 1456.841910][T22256] syz_tun (unregistering): left allmulticast mode [ 1456.841944][T22256] syz_tun (unregistering): left promiscuous mode [ 1456.842069][T22256] bridge0: port 3(syz_tun) entered disabled state [ 1457.457816][ T5808] Bluetooth: hci2: command tx timeout [ 1458.220548][T22893] netlink: 'syz.7.5367': attribute type 8 has an invalid length. [ 1459.081439][T22796] bridge0: port 1(bridge_slave_0) entered blocking state [ 1459.081676][T22796] bridge0: port 1(bridge_slave_0) entered disabled state [ 1459.081980][T22796] bridge_slave_0: entered allmulticast mode [ 1459.130317][T22796] bridge_slave_0: entered promiscuous mode [ 1459.144891][T22796] bridge0: port 2(bridge_slave_1) entered blocking state [ 1459.145135][T22796] bridge0: port 2(bridge_slave_1) entered disabled state [ 1459.145419][T22796] bridge_slave_1: entered allmulticast mode [ 1459.168746][T22796] bridge_slave_1: entered promiscuous mode [ 1459.537770][ T5808] Bluetooth: hci2: command tx timeout [ 1459.698774][T22796] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1459.719331][T22796] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1460.089210][T22796] team0: Port device team_slave_0 added [ 1460.092937][T22796] team0: Port device team_slave_1 added [ 1460.625726][T22796] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1460.625750][T22796] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1460.625786][T22796] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1460.688981][T22796] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1460.689003][T22796] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1460.689037][T22796] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1460.976616][T22796] hsr_slave_0: entered promiscuous mode [ 1461.005513][T22957] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1461.028607][T22796] hsr_slave_1: entered promiscuous mode [ 1461.031003][T22796] debugfs: 'hsr0' already exists in 'hsr' [ 1461.031034][T22796] Cannot create hsr debugfs directory [ 1461.056557][T22960] bridge0: port 3(syz_tun) entered blocking state [ 1461.056667][T22960] bridge0: port 3(syz_tun) entered disabled state [ 1461.056913][T22960] syz_tun: entered allmulticast mode [ 1461.059833][T22960] syz_tun: entered promiscuous mode [ 1461.060456][T22960] bridge0: port 3(syz_tun) entered blocking state [ 1461.098164][T22960] bridge0: port 3(syz_tun) entered forwarding state [ 1461.618660][ T5808] Bluetooth: hci2: command tx timeout [ 1462.447221][T22989] bridge0: port 3(syz_tun) entered blocking state [ 1462.447440][T22989] bridge0: port 3(syz_tun) entered disabled state [ 1462.499445][T22989] syz_tun: entered allmulticast mode [ 1462.523175][T22989] syz_tun: entered promiscuous mode [ 1462.544107][T22989] bridge0: port 3(syz_tun) entered blocking state [ 1462.544252][T22989] bridge0: port 3(syz_tun) entered forwarding state [ 1462.828645][T19182] bridge_slave_1: left allmulticast mode [ 1462.828680][T19182] bridge_slave_1: left promiscuous mode [ 1462.830528][T19182] bridge0: port 2(bridge_slave_1) entered disabled state [ 1463.113942][T19182] bridge_slave_0: left allmulticast mode [ 1463.113977][T19182] bridge_slave_0: left promiscuous mode [ 1463.136743][T19182] bridge0: port 1(bridge_slave_0) entered disabled state [ 1463.952171][T23014] netlink: 'syz.5.5418': attribute type 8 has an invalid length. [ 1465.332091][T23028] netlink: 16 bytes leftover after parsing attributes in process `syz.7.5421'. [ 1466.308592][T19182] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1466.398394][T19182] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1466.438781][T19182] bond0 (unregistering): Released all slaves [ 1466.445692][T19182] bond1 (unregistering): Released all slaves [ 1466.495662][T23013] bridge0: port 3(syz_tun) entered blocking state [ 1466.495786][T23013] bridge0: port 3(syz_tun) entered disabled state [ 1466.496063][T23013] syz_tun: entered allmulticast mode [ 1466.532369][T23013] syz_tun: entered promiscuous mode [ 1466.533090][T23013] bridge0: port 3(syz_tun) entered blocking state [ 1466.533222][T23013] bridge0: port 3(syz_tun) entered forwarding state [ 1468.138244][T23077] netlink: 'syz.7.5439': attribute type 8 has an invalid length. [ 1470.754502][T23122] netlink: 'syz.7.5453': attribute type 8 has an invalid length. [ 1471.362893][T19182] hsr_slave_0: left promiscuous mode [ 1471.402064][T19182] hsr_slave_1: left promiscuous mode [ 1471.403218][T19182] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1471.764792][T23154] netlink: 'syz.5.5467': attribute type 8 has an invalid length. [ 1473.078893][T19182] team0 (unregistering): Port device team_slave_1 removed [ 1473.128469][T19182] team0 (unregistering): Port device team_slave_0 removed [ 1474.562255][T22796] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1474.665483][T22796] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1474.721857][T22796] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1474.787269][T22796] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1475.207432][T23225] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 1475.215624][T23225] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 1475.215811][T23225] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 1475.215961][T23225] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 1475.216110][T23225] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 1475.216262][T23225] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 1475.216412][T23225] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 1475.292780][T23225] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 1475.293002][T23225] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 1475.293180][T23225] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 1475.464989][T22796] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1475.507279][T22796] 8021q: adding VLAN 0 to HW filter on device team0 [ 1475.543096][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 1475.543315][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1475.575091][T20072] bridge0: port 2(bridge_slave_1) entered blocking state [ 1475.575856][T20072] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1476.077202][T22796] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1476.506657][T23260] netlink: 52 bytes leftover after parsing attributes in process `syz.7.5505'. [ 1476.632522][T22796] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1476.725596][T23265] 9p: Bad value for 'wfdno' [ 1477.402245][T22796] veth0_vlan: entered promiscuous mode [ 1477.460330][T22796] veth1_vlan: entered promiscuous mode [ 1477.697163][T22796] veth0_macvtap: entered promiscuous mode [ 1477.731417][T22796] veth1_macvtap: entered promiscuous mode [ 1477.732421][T23295] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5518'. [ 1477.843913][T22796] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1477.978635][T22796] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1478.003760][ T9516] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1478.060715][ T9516] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1478.061325][ T9516] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1478.061745][ T9516] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1478.927110][T19182] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1478.927136][T19182] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1479.141283][ T9516] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1479.141309][ T9516] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1480.262319][T23358] netlink: 6 bytes leftover after parsing attributes in process `syz.4.5543'. [ 1480.262354][T23358] netlink: 6 bytes leftover after parsing attributes in process `syz.4.5543'. [ 1484.304094][T23457] net_ratelimit: 44 callbacks suppressed [ 1484.304113][T23457] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 1484.304219][T23457] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 1484.304317][T23457] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 1484.304414][T23457] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 1484.304512][T23457] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 1484.304616][T23457] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 1484.304713][T23457] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 1484.304809][T23457] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 1484.304906][T23457] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 1484.305002][T23457] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 1484.664461][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 1484.781333][T23472] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5593'. [ 1485.609690][ T5799] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1485.624001][ T5799] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1485.634411][ T5799] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1485.639425][ T5799] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1485.640385][ T5799] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1487.553225][T22639] syz_tun (unregistering): left allmulticast mode [ 1487.553260][T22639] syz_tun (unregistering): left promiscuous mode [ 1487.553512][T22639] bridge0: port 3(syz_tun) entered disabled state [ 1487.768418][ T5808] Bluetooth: hci4: command tx timeout [ 1489.780341][ T5808] Bluetooth: hci4: command tx timeout [ 1490.036962][ T9516] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1490.398890][ T9516] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1490.482245][T23579] 9p: Bad value for 'rfdno' [ 1491.105628][ T9516] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1491.643202][ T9516] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1491.867781][T23563] Bluetooth: hci0: command 0x0406 tx timeout [ 1491.867827][T23563] Bluetooth: hci4: command tx timeout [ 1492.029851][ T5808] Bluetooth: hci6: command 0x0406 tx timeout [ 1492.125526][T23493] chnl_net:caif_netlink_parms(): no params data found [ 1493.236361][T23493] bridge0: port 1(bridge_slave_0) entered blocking state [ 1493.236597][T23493] bridge0: port 1(bridge_slave_0) entered disabled state [ 1493.236895][T23493] bridge_slave_0: entered allmulticast mode [ 1493.276940][T23493] bridge_slave_0: entered promiscuous mode [ 1493.417881][T23493] bridge0: port 2(bridge_slave_1) entered blocking state [ 1493.424401][T23493] bridge0: port 2(bridge_slave_1) entered disabled state [ 1493.441198][T23673] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5667'. [ 1493.442211][T23493] bridge_slave_1: entered allmulticast mode [ 1493.463110][T23493] bridge_slave_1: entered promiscuous mode [ 1493.937919][T13392] Bluetooth: hci4: command tx timeout [ 1494.733854][T23493] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1494.743069][T23493] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1494.842314][ T9516] bridge_slave_1: left allmulticast mode [ 1494.842340][ T9516] bridge_slave_1: left promiscuous mode [ 1494.842531][ T9516] bridge0: port 2(bridge_slave_1) entered disabled state [ 1494.949307][ T9516] bridge_slave_0: left allmulticast mode [ 1494.949341][ T9516] bridge_slave_0: left promiscuous mode [ 1494.949625][ T9516] bridge0: port 1(bridge_slave_0) entered disabled state [ 1495.368674][T23694] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5678'. [ 1496.543467][ T9516] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1496.618642][ T9516] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1496.660891][ T9516] bond0 (unregistering): Released all slaves [ 1496.670560][ T9516] bond1 (unregistering): Released all slaves [ 1496.690270][ T9516] bond2 (unregistering): Released all slaves [ 1496.765368][T23698] netlink: 'syz.4.5678': attribute type 6 has an invalid length. [ 1496.765394][T23698] netlink: 72 bytes leftover after parsing attributes in process `syz.4.5678'. [ 1496.932225][T23709] syzkaller0: entered promiscuous mode [ 1496.932257][T23709] syzkaller0: entered allmulticast mode [ 1496.953791][T23493] team0: Port device team_slave_0 added [ 1497.313991][T23493] team0: Port device team_slave_1 added [ 1498.169713][T23493] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1498.169736][T23493] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1498.169758][T23493] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1498.399739][T23493] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1498.399758][T23493] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1498.399791][T23493] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1498.468055][T23756] syzkaller0: entered promiscuous mode [ 1498.468076][T23756] syzkaller0: entered allmulticast mode [ 1498.798559][T23775] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5705'. [ 1498.914692][T23779] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5707'. [ 1499.208541][T23493] hsr_slave_0: entered promiscuous mode [ 1499.209980][T23493] hsr_slave_1: entered promiscuous mode [ 1499.210895][T23493] debugfs: 'hsr0' already exists in 'hsr' [ 1499.210923][T23493] Cannot create hsr debugfs directory [ 1501.173131][ T9516] hsr_slave_0: left promiscuous mode [ 1501.217887][ T9516] hsr_slave_1: left promiscuous mode [ 1501.219154][ T9516] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1501.268788][ T9516] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1501.268821][ T9516] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1501.470221][ T9516] veth1_macvtap: left promiscuous mode [ 1501.470336][ T9516] veth0_macvtap: left promiscuous mode [ 1501.470607][ T9516] veth1_vlan: left promiscuous mode [ 1501.474068][ T9516] veth0_vlan: left promiscuous mode [ 1501.720636][T23835] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5725'. [ 1502.008539][T23841] net_ratelimit: 44 callbacks suppressed [ 1502.008564][T23841] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 1503.452418][T23851] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5729'. [ 1503.942141][ T9516] team0 (unregistering): Port device team_slave_1 removed [ 1504.905554][ T9516] team0 (unregistering): Port device team_slave_0 removed [ 1504.949714][T23859] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5732'. [ 1505.975140][T23876] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5739'. [ 1509.443605][T23926] tipc: Failed to remove unknown binding: 66,0,0/0:3029482678/3029482679 [ 1509.448447][T23926] tipc: Failed to remove unknown binding: 66,0,0/0:3029482678/3029482679 [ 1511.634208][T23493] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1512.562874][T23493] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1512.698097][T23493] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1512.748248][T23493] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1512.910386][T23979] macsec1: entered allmulticast mode [ 1512.910414][T23979] macsec0: entered allmulticast mode [ 1512.910430][T23979] veth1_macvtap: entered allmulticast mode [ 1513.372434][T23493] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1513.411968][T23493] 8021q: adding VLAN 0 to HW filter on device team0 [ 1513.439820][ T9516] bridge0: port 1(bridge_slave_0) entered blocking state [ 1513.439970][ T9516] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1513.490971][ T1129] bridge0: port 2(bridge_slave_1) entered blocking state [ 1513.491137][ T1129] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1514.173269][T24031] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5782'. [ 1514.173321][T24031] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5782'. [ 1514.182172][T24031] ip6gretap0: entered promiscuous mode [ 1514.238956][T24031] ip6gretap0: left promiscuous mode [ 1514.539766][T23493] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1514.787034][T23493] veth0_vlan: entered promiscuous mode [ 1514.858137][T23493] veth1_vlan: entered promiscuous mode [ 1515.046155][T23493] veth0_macvtap: entered promiscuous mode [ 1515.092235][T23493] veth1_macvtap: entered promiscuous mode [ 1515.219498][T23493] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1515.319389][T23493] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1515.441900][T20072] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1515.442158][T20072] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1515.442407][T20072] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1515.442643][T20072] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1515.799291][T24065] vlan2: entered promiscuous mode [ 1515.799600][T24065] vlan2: entered allmulticast mode [ 1515.799617][T24065] hsr_slave_1: entered allmulticast mode [ 1516.044446][T24083] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5790'. [ 1516.553306][T24111] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5804'. [ 1517.841990][T20072] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1517.842016][T20072] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1518.312814][T19931] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1518.312841][T19931] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1518.340467][T24154] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5816'. [ 1518.690023][T24161] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5596'. [ 1519.411659][T24184] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5828'. [ 1519.930268][T24208] tipc: Failed to remove unknown binding: 66,0,0/0:2145090762/2145090763 [ 1520.852384][T24232] tipc: Failed to remove unknown binding: 66,0,0/0:2705776367/2705776368 [ 1521.826452][T24246] syz.0.5855 (24246) used greatest stack depth: 16624 bytes left [ 1523.241069][T24283] tipc: Started in network mode [ 1523.241108][T24283] tipc: Node identity ff010000000000000000000000000001, cluster identity 4711 [ 1523.241230][T24283] tipc: Enabling of bearer rejected, failed to enable media [ 1525.361966][T24332] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5888'. [ 1527.868949][T24382] netlink: 43 bytes leftover after parsing attributes in process `syz.4.5900'. [ 1527.877210][T24382] syzkaller0: entered promiscuous mode [ 1527.877240][T24382] syzkaller0: entered allmulticast mode [ 1528.065408][T24388] netlink: 20 bytes leftover after parsing attributes in process `syz.6.5902'. [ 1528.365055][T24388] ip6gre1: entered promiscuous mode [ 1528.365088][T24388] ip6gre1: entered allmulticast mode [ 1533.637696][T24430] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1535.911578][T24517] netlink: 20 bytes leftover after parsing attributes in process `syz.6.5943'. [ 1536.111472][T24524] bridge1: entered promiscuous mode [ 1537.738926][T24548] netlink: 'syz.0.5955': attribute type 3 has an invalid length. [ 1537.917802][T24557] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5957'. [ 1539.871621][T24587] netlink: 'syz.7.5968': attribute type 3 has an invalid length. [ 1540.757709][T24606] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5975'. [ 1542.116130][T24617] netlink: 'syz.0.5979': attribute type 3 has an invalid length. [ 1542.775863][T24627] vlan2: entered promiscuous mode [ 1542.776099][T24627] vlan2: entered allmulticast mode [ 1542.776115][T24627] hsr_slave_1: entered allmulticast mode [ 1543.057783][T23621] Bluetooth: hci1: command 0x0406 tx timeout [ 1546.133061][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 1547.331260][T24706] netlink: 20 bytes leftover after parsing attributes in process `syz.7.6012'. [ 1547.342304][T24706] ip6gre1: entered promiscuous mode [ 1547.342335][T24706] ip6gre1: entered allmulticast mode [ 1549.174683][T24737] netlink: 20 bytes leftover after parsing attributes in process `syz.5.6025'. [ 1549.204089][T24737] ip6gre1: entered promiscuous mode [ 1549.204120][T24737] ip6gre1: entered allmulticast mode [ 1551.406333][T24786] program syz.6.6045 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1552.163430][T24807] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1552.199537][T24809] netlink: 20 bytes leftover after parsing attributes in process `syz.5.6055'. [ 1555.193145][T24855] tipc: Failed to remove unknown binding: 66,0,0/0:121915373/121915374 [ 1555.193509][T24855] tipc: Failed to remove unknown binding: 66,0,0/0:121915373/121915374 [ 1557.321850][T24892] tipc: Failed to remove unknown binding: 66,0,0/0:3650518404/3650518405 [ 1557.322259][T24892] tipc: Failed to remove unknown binding: 66,0,0/0:3650518404/3650518405 [ 1557.891314][T24913] macsec1: entered allmulticast mode [ 1557.891341][T24913] macsec0: entered allmulticast mode [ 1557.891356][T24913] veth1_macvtap: entered allmulticast mode [ 1558.113397][T24925] tipc: Failed to remove unknown binding: 66,0,0/0:1687262745/1687262746 [ 1558.113922][T24925] tipc: Failed to remove unknown binding: 66,0,0/0:1687262745/1687262746 [ 1558.447871][T24937] netlink: 20 bytes leftover after parsing attributes in process `syz.7.6104'. [ 1558.871324][T24954] tipc: Failed to remove unknown binding: 66,0,0/0:3158017930/3158017931 [ 1558.871789][T24954] tipc: Failed to remove unknown binding: 66,0,0/0:3158017930/3158017931 [ 1559.114028][T24960] netlink: 'syz.7.6111': attribute type 5 has an invalid length. [ 1559.114059][T24960] netlink: 1132 bytes leftover after parsing attributes in process `syz.7.6111'. [ 1559.114078][T24960] netlink: 24 bytes leftover after parsing attributes in process `syz.7.6111'. [ 1560.448328][T24983] tipc: Failed to remove unknown binding: 66,0,0/0:647386376/647386377 [ 1560.448847][T24983] tipc: Failed to remove unknown binding: 66,0,0/0:647386376/647386377 [ 1567.069708][T25072] netlink: 'syz.6.6158': attribute type 1 has an invalid length. [ 1567.233992][ T36] kauditd_printk_skb: 10 callbacks suppressed [ 1567.234015][ T36] audit: type=1326 audit(1772727401.913:262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25077 comm="syz.0.6162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48fd85c799 code=0x7ffc0000 [ 1567.274128][ T36] audit: type=1326 audit(1772727401.953:263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25077 comm="syz.0.6162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=30 compat=0 ip=0x7f48fd85c799 code=0x7ffc0000 [ 1567.291328][ T36] audit: type=1326 audit(1772727401.953:264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25077 comm="syz.0.6162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48fd85c799 code=0x7ffc0000 [ 1567.291504][ T36] audit: type=1326 audit(1772727401.973:265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25077 comm="syz.0.6162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48fd85c799 code=0x7ffc0000 [ 1567.312469][T25072] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1567.385868][T25076] bridge2: entered promiscuous mode [ 1567.459707][T25076] bond1: (slave bridge2): making interface the new active one [ 1567.461959][T25076] bond1: (slave bridge2): Enslaving as an active interface with an up link [ 1567.672587][T25086] netlink: 52 bytes leftover after parsing attributes in process `syz.6.6165'. [ 1568.463863][ T36] audit: type=1326 audit(1772727404.141:266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25102 comm="syz.6.6173" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7d0456c799 code=0x0 [ 1568.505350][T25108] netlink: 20 bytes leftover after parsing attributes in process `syz.5.6175'. [ 1568.557866][T25110] bridge1: entered promiscuous mode [ 1568.714051][T25114] netlink: 52 bytes leftover after parsing attributes in process `syz.7.6179'. [ 1572.405936][T25155] netlink: 52 bytes leftover after parsing attributes in process `syz.7.6194'. [ 1574.522268][T25188] tipc: Failed to remove unknown binding: 66,0,0/0:1594409838/1594409839 [ 1574.522742][T25188] tipc: Failed to remove unknown binding: 66,0,0/0:1594409838/1594409839 [ 1575.291917][T25207] netlink: 20 bytes leftover after parsing attributes in process `syz.6.6215'. [ 1575.959340][T25227] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6221'. [ 1576.343224][T25232] netlink: 'syz.7.6224': attribute type 1 has an invalid length. [ 1576.549152][T25240] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6227'. [ 1576.574994][T25232] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1576.681708][T25237] bridge5: entered promiscuous mode [ 1578.585277][T25258] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6233'. [ 1578.901081][T23621] Bluetooth: hci2: command 0x0406 tx timeout [ 1579.048207][T25269] syzkaller0: entered promiscuous mode [ 1579.048240][T25269] syzkaller0: entered allmulticast mode [ 1580.157036][T25292] netlink: 60 bytes leftover after parsing attributes in process `syz.7.6245'. [ 1580.157071][T25292] netlink: 196 bytes leftover after parsing attributes in process `syz.7.6245'. [ 1580.253589][T25292] netlink: 60 bytes leftover after parsing attributes in process `syz.7.6245'. [ 1580.423652][T25298] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6247'. [ 1581.720436][T25312] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6253'. [ 1582.775094][T25341] netlink: 32 bytes leftover after parsing attributes in process `syz.7.6266'. [ 1584.493917][T25369] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6278'. [ 1585.010569][T25376] netlink: 68 bytes leftover after parsing attributes in process `syz.0.6280'. [ 1585.521427][T25390] tipc: Failed to remove unknown binding: 66,0,0/0:188105184/188105185 [ 1585.521864][T25390] tipc: Failed to remove unknown binding: 66,0,0/0:188105184/188105185 [ 1585.675062][T25396] netlink: 40 bytes leftover after parsing attributes in process `syz.5.6289'. [ 1587.204047][T25411] netlink: 68 bytes leftover after parsing attributes in process `syz.0.6295'. [ 1587.962712][T25434] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6304'. [ 1589.380234][T25460] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6317'. [ 1594.615604][T25535] netlink: 'syz.0.6342': attribute type 2 has an invalid length. [ 1594.615633][T25535] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6342'. [ 1595.564800][T25544] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6345'. [ 1595.564836][T25544] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6345'. [ 1598.136948][T25573] netlink: 52 bytes leftover after parsing attributes in process `syz.4.6355'. [ 1600.641839][T25619] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6371'. [ 1600.731031][T25619] bond_slave_0: entered promiscuous mode [ 1600.731096][T25619] bond_slave_1: entered promiscuous mode [ 1600.731765][T25619] macvtap1: entered promiscuous mode [ 1600.731784][T25619] bond0: entered promiscuous mode [ 1600.732430][T25619] macvtap1: entered allmulticast mode [ 1600.732445][T25619] bond0: entered allmulticast mode [ 1600.732459][T25619] bond_slave_0: entered allmulticast mode [ 1600.732479][T25619] bond_slave_1: entered allmulticast mode [ 1600.734795][T25619] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 1604.196740][T25685] netlink: 368 bytes leftover after parsing attributes in process `syz.7.6393'. [ 1605.193424][T25710] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6403'. [ 1605.706203][T25722] netlink: 368 bytes leftover after parsing attributes in process `syz.0.6406'. [ 1605.738874][T25719] syzkaller0: entered promiscuous mode [ 1605.738907][T25719] syzkaller0: entered allmulticast mode [ 1606.808486][T25744] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6415'. [ 1607.547614][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 1608.339930][T25767] syzkaller0: entered promiscuous mode [ 1608.339961][T25767] syzkaller0: entered allmulticast mode [ 1608.663126][T25780] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6427'. [ 1609.632413][T13392] Bluetooth: hci4: command 0x0406 tx timeout [ 1613.903639][ T5883] kernel read not supported for file bpf-prog (pid: 5883 comm: kworker/0:4) [ 1614.899521][T25870] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6457'. [ 1615.227649][T25891] 9p: Bad value for 'wfdno' [ 1616.189083][T25925] 9p: Bad value for 'wfdno' [ 1617.766989][T25961] 9p: Bad value for 'wfdno' [ 1620.698720][T26015] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6517'. [ 1620.751127][T25999] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6512'. [ 1621.962814][T26045] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6529'. [ 1622.382236][T26055] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 1622.493374][T26057] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6533'. [ 1623.601856][ T36] audit: type=1326 audit(1772727460.274:267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26065 comm="syz.7.6537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6dcabc799 code=0x7ffc0000 [ 1623.601922][ T36] audit: type=1326 audit(1772727460.284:268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26065 comm="syz.7.6537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6dcabc799 code=0x7ffc0000 [ 1623.603848][ T36] audit: type=1326 audit(1772727460.284:269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26065 comm="syz.7.6537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6dcabc799 code=0x7ffc0000 [ 1623.603901][ T36] audit: type=1326 audit(1772727460.284:270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26065 comm="syz.7.6537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=440 compat=0 ip=0x7fb6dcabc799 code=0x7ffc0000 [ 1623.603949][ T36] audit: type=1326 audit(1772727460.284:271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26065 comm="syz.7.6537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6dcabc799 code=0x7ffc0000 [ 1623.603997][ T36] audit: type=1326 audit(1772727460.284:272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26065 comm="syz.7.6537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6dcabc799 code=0x7ffc0000 [ 1623.604260][ T36] audit: type=1326 audit(1772727460.284:273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26065 comm="syz.7.6537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6dcabc799 code=0x7ffc0000 [ 1623.604718][ T36] audit: type=1326 audit(1772727460.284:274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26065 comm="syz.7.6537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fb6dcabc799 code=0x7ffc0000 [ 1623.605043][ T36] audit: type=1326 audit(1772727460.284:275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26065 comm="syz.7.6537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fb6dcabc799 code=0x7ffc0000 [ 1623.628490][ T5849] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 1623.780238][ T5849] usb 6-1: Using ep0 maxpacket: 8 [ 1623.784742][ T5849] usb 6-1: config index 0 descriptor too short (expected 8192, got 36) [ 1623.784777][ T5849] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1623.784798][ T5849] usb 6-1: config 0 has no interfaces? [ 1623.784832][ T5849] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2db4, bcdDevice= 0.00 [ 1623.784858][ T5849] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1624.030122][ T5849] usb 6-1: config 0 descriptor?? [ 1624.620217][T26085] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6544'. [ 1627.764424][T26119] syz.4.6557(26119): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 1628.254037][T26127] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6558'. [ 1629.308489][ T5849] usb 6-1: string descriptor 0 read error: -32 [ 1633.569492][ T5849] usb 6-1: USB disconnect, device number 2 [ 1633.642674][T26055] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1635.593998][T26215] syzkaller0: entered promiscuous mode [ 1635.594032][T26215] syzkaller0: entered allmulticast mode [ 1638.050434][T26253] netlink: 'syz.7.6609': attribute type 2 has an invalid length. [ 1638.050455][T26253] netlink: 28 bytes leftover after parsing attributes in process `syz.7.6609'. [ 1638.925512][T26270] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6615'. [ 1638.969169][T26271] netlink: 52 bytes leftover after parsing attributes in process `syz.6.6616'. [ 1639.071065][T26271] bridge0: port 3(syz_tun) entered disabled state [ 1639.098532][T26273] netlink: 76 bytes leftover after parsing attributes in process `syz.6.6616'. [ 1639.099019][T26271] bridge0: port 2(bridge_slave_1) entered disabled state [ 1639.106889][T26271] bridge0: port 1(bridge_slave_0) entered disabled state [ 1639.323688][T26273] bridge0: port 3(syz_tun) entered blocking state [ 1639.323879][T26273] bridge0: port 3(syz_tun) entered forwarding state [ 1639.324275][T26273] bridge0: port 2(bridge_slave_1) entered blocking state [ 1639.324424][T26273] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1639.324756][T26273] bridge0: port 1(bridge_slave_0) entered blocking state [ 1639.324908][T26273] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1639.392475][T26273] netlink: 52 bytes leftover after parsing attributes in process `syz.6.6616'. [ 1639.411282][T26273] bridge0: port 3(syz_tun) entered disabled state [ 1639.411571][T26273] bridge0: port 2(bridge_slave_1) entered disabled state [ 1639.411811][T26273] bridge0: port 1(bridge_slave_0) entered disabled state [ 1639.469805][T26279] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6619'. [ 1639.759153][T26286] netlink: 52 bytes leftover after parsing attributes in process `syz.0.6621'. [ 1639.999998][T26292] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6624'. [ 1640.720164][T26308] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6628'. [ 1641.347427][T26316] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6633'. [ 1644.093330][T26378] __nla_validate_parse: 4 callbacks suppressed [ 1644.093354][T26378] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6656'. [ 1644.430459][T26388] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6659'. [ 1646.462834][T26426] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6674'. [ 1647.608652][T26437] netlink: 'syz.5.6681': attribute type 2 has an invalid length. [ 1647.608684][T26437] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6681'. [ 1648.176749][T26464] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6689'. [ 1650.697455][T26488] netlink: 68 bytes leftover after parsing attributes in process `syz.0.6697'. [ 1652.153242][T26501] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6699'. [ 1653.761946][T26530] netlink: 68 bytes leftover after parsing attributes in process `syz.4.6710'. [ 1654.575034][T26543] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6714'. [ 1656.676154][T26567] netlink: 68 bytes leftover after parsing attributes in process `syz.5.6722'. [ 1656.731193][T26565] syzkaller0: entered promiscuous mode [ 1656.731226][T26565] syzkaller0: entered allmulticast mode [ 1658.412683][T26593] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6731'. [ 1658.549101][T26604] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6734'. [ 1658.646655][T26580] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1658.746278][T26580] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1659.389418][T26580] veth1_macvtap: left allmulticast mode [ 1660.041345][T26580] macsec0: left allmulticast mode [ 1660.287730][ T153] netdevsim netdevsim6 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1660.379724][ T153] netdevsim netdevsim6 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1660.379852][ T153] netdevsim netdevsim6 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1660.379892][ T153] netdevsim netdevsim6 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1661.222862][T26652] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6755'. [ 1661.472876][T26662] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6757'. [ 1661.824550][T26672] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6759'. [ 1664.009640][T26709] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6772'. [ 1665.238792][T26732] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 1665.260327][T26731] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1666.311355][T26755] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6789'. [ 1666.311385][T26755] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6789'. [ 1667.313218][T26786] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6800'. [ 1668.215541][T26801] netlink: 76 bytes leftover after parsing attributes in process `syz.7.6806'. [ 1668.988779][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 1670.630725][T26836] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6820'. [ 1671.534200][T26840] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6821'. [ 1672.251362][T26856] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 1672.448460][T26858] syzkaller0: entered promiscuous mode [ 1672.448493][T26858] syzkaller0: entered allmulticast mode [ 1673.730784][T26898] netlink: 68 bytes leftover after parsing attributes in process `syz.7.6842'. [ 1675.330306][T26940] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6853'. [ 1676.498813][T26967] netlink: 76 bytes leftover after parsing attributes in process `syz.0.6862'. [ 1676.751818][T26979] netlink: 'syz.5.6865': attribute type 2 has an invalid length. [ 1676.751847][T26979] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6865'. [ 1677.273892][T26994] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6874'. [ 1677.273933][T26994] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6874'. [ 1677.273953][T26994] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6874'. [ 1678.254479][T27044] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6895'. [ 1678.337189][T27041] syzkaller0: entered promiscuous mode [ 1678.337222][T27041] syzkaller0: entered allmulticast mode [ 1678.740106][T27050] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6900'. [ 1680.710785][T27105] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6921'. [ 1681.588056][T27127] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6932'. [ 1681.607702][T27125] syzkaller0: entered promiscuous mode [ 1681.607808][T27125] syzkaller0: entered allmulticast mode [ 1682.476197][T27154] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6943'. [ 1683.451016][T27164] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6949'. [ 1683.511954][T27164] team_slave_0: entered promiscuous mode [ 1683.512051][T27164] team_slave_1: entered promiscuous mode [ 1683.513866][T27164] macvtap1: entered promiscuous mode [ 1683.513888][T27164] team0: entered promiscuous mode [ 1683.514593][T27164] macvtap1: entered allmulticast mode [ 1683.514609][T27164] team0: entered allmulticast mode [ 1683.514622][T27164] team_slave_0: entered allmulticast mode [ 1683.514642][T27164] team_slave_1: entered allmulticast mode [ 1683.516857][T27164] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 1683.964601][T27188] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6955'. [ 1684.883426][T27195] netlink: 2088 bytes leftover after parsing attributes in process `syz.4.6959'. [ 1685.430594][T27212] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6966'. [ 1685.465444][T27214] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6965'. [ 1685.742742][T27212] macvtap1: entered promiscuous mode [ 1685.742775][T27212] team0: entered promiscuous mode [ 1685.742792][T27212] team_slave_0: entered promiscuous mode [ 1685.742966][T27212] team_slave_1: entered promiscuous mode [ 1685.743230][T27212] macvtap1: entered allmulticast mode [ 1685.743241][T27212] team0: entered allmulticast mode [ 1685.743253][T27212] team_slave_0: entered allmulticast mode [ 1685.743267][T27212] team_slave_1: entered allmulticast mode [ 1685.743689][T27212] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 1687.727372][T27258] batadv_slave_1: entered promiscuous mode [ 1687.736761][T27257] batadv_slave_1: left promiscuous mode [ 1687.871329][T27263] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6985'. [ 1687.872151][T27263] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6985'. [ 1689.688429][T27283] vlan2: entered promiscuous mode [ 1689.688683][T27283] vlan2: entered allmulticast mode [ 1689.688699][T27283] hsr_slave_1: entered allmulticast mode [ 1690.841750][T27336] netlink: 'syz.7.7014': attribute type 5 has an invalid length. [ 1690.841780][T27336] netlink: 1132 bytes leftover after parsing attributes in process `syz.7.7014'. [ 1690.841799][T27336] netlink: 36 bytes leftover after parsing attributes in process `syz.7.7014'. [ 1691.762568][T13905] IPVS: starting estimator thread 0... [ 1691.763814][T27355] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1691.849721][T27358] IPVS: using max 10 ests per chain, 24000 per kthread [ 1694.512009][T27419] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1694.527675][T27419] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7047'. [ 1694.698166][T27426] netlink: 'syz.7.7050': attribute type 5 has an invalid length. [ 1694.698308][T27426] netlink: 1132 bytes leftover after parsing attributes in process `syz.7.7050'. [ 1694.698330][T27426] netlink: 24 bytes leftover after parsing attributes in process `syz.7.7050'. [ 1696.801643][T27476] netlink: 36 bytes leftover after parsing attributes in process `syz.7.7068'. [ 1696.801674][T27476] netlink: 24 bytes leftover after parsing attributes in process `syz.7.7068'. [ 1700.084959][T27565] netlink: 16 bytes leftover after parsing attributes in process `syz.6.7104'. [ 1701.327641][T13905] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 1701.429564][T27593] veth1_macvtap: left promiscuous mode [ 1701.429599][T27593] macsec0: entered allmulticast mode [ 1701.519673][T13905] usb 5-1: Using ep0 maxpacket: 8 [ 1701.655599][T13905] usb 5-1: config 0 has no interfaces? [ 1701.655647][T13905] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2db4, bcdDevice= 0.00 [ 1701.655672][T13905] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1701.688459][T13905] usb 5-1: config 0 descriptor?? [ 1701.793874][T27603] netlink: 24 bytes leftover after parsing attributes in process `syz.7.7119'. [ 1702.889864][T27620] netlink: 132 bytes leftover after parsing attributes in process `syz.7.7124'. [ 1703.643933][T27629] bridge0: port 3(syz_tun) entered disabled state [ 1703.684578][T27629] bridge0: port 2(bridge_slave_1) entered disabled state [ 1703.685024][T27629] bridge0: port 1(bridge_slave_0) entered disabled state [ 1704.015229][T27629] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1704.056522][T27629] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1705.325831][T27629] bond0: left allmulticast mode [ 1705.325865][T27629] bond_slave_0: left allmulticast mode [ 1705.325887][T27629] bond_slave_1: left allmulticast mode [ 1705.325911][T27629] bond0: left promiscuous mode [ 1705.325923][T27629] bond_slave_0: left promiscuous mode [ 1705.326206][T27629] bond_slave_1: left promiscuous mode [ 1705.581210][ T9516] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1705.581537][T22174] syz1: Port: 1 Link DOWN [ 1705.621965][ T9516] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1705.666386][T19160] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1705.666454][T19160] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1706.284637][T27666] netlink: 24 bytes leftover after parsing attributes in process `syz.7.7136'. [ 1706.348573][T27670] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7138'. [ 1706.354417][T27670] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7138'. [ 1706.453998][T14133] usb 5-1: USB disconnect, device number 4 [ 1707.253928][T27694] 9p: Bad value for 'wfdno' [ 1707.895328][T27712] netlink: 24 bytes leftover after parsing attributes in process `syz.7.7155'. [ 1708.052500][T27714] 9p: Bad value for 'wfdno' [ 1708.414622][T27726] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7161'. [ 1708.415540][T27726] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7161'. [ 1709.305031][T27744] netlink: 12 bytes leftover after parsing attributes in process `syz.7.7169'. [ 1709.763960][T14135] IPVS: starting estimator thread 0... [ 1709.856886][T27760] IPVS: using max 7 ests per chain, 16800 per kthread [ 1712.012583][T27642] IPVS: starting estimator thread 0... [ 1712.157724][T27791] IPVS: using max 9 ests per chain, 21600 per kthread [ 1713.041955][T27809] netlink: 76 bytes leftover after parsing attributes in process `syz.4.7195'. [ 1713.476882][T27821] netlink: 16 bytes leftover after parsing attributes in process `syz.7.7198'. [ 1715.875699][T27857] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7211'. [ 1715.876749][T27857] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7211'. [ 1717.427015][T27891] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7223'. [ 1717.437196][T27891] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7223'. [ 1718.456870][T27903] netlink: 76 bytes leftover after parsing attributes in process `syz.7.7228'. [ 1719.634850][T27930] netlink: 76 bytes leftover after parsing attributes in process `syz.6.7242'. [ 1720.572096][T27941] tmpfs: Bad value for 'mpol' [ 1721.172336][T27950] vlan2: entered promiscuous mode [ 1721.172574][T27950] vlan2: entered allmulticast mode [ 1721.172592][T27950] hsr_slave_1: entered allmulticast mode [ 1721.587108][T27959] netlink: 16 bytes leftover after parsing attributes in process `syz.7.7253'. [ 1722.387149][T27989] netlink: 16 bytes leftover after parsing attributes in process `syz.7.7266'. [ 1725.066028][T28041] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7286'. [ 1725.067058][T28041] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7286'. [ 1725.953546][T28068] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7297'. [ 1725.954456][T28068] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7297'. [ 1726.771228][T28097] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7310'. [ 1726.771983][T28097] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7310'. [ 1726.823711][T28099] netlink: 'syz.5.7311': attribute type 2 has an invalid length. [ 1726.823740][T28099] netlink: 28 bytes leftover after parsing attributes in process `syz.5.7311'. [ 1726.957638][T28103] 9p: Bad value for 'wfdno' [ 1729.535993][T28147] overlay: Unknown parameter '//file0' [ 1729.959700][ T36] audit: type=1326 audit(1772727566.644:276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28154 comm="syz.0.7333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48fd85c799 code=0x7ffc0000 [ 1729.959762][ T36] audit: type=1326 audit(1772727566.644:277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28154 comm="syz.0.7333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48fd85c799 code=0x7ffc0000 [ 1729.961832][ T36] audit: type=1326 audit(1772727566.644:278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28154 comm="syz.0.7333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48fd85c799 code=0x7ffc0000 [ 1730.041393][ T36] audit: type=1326 audit(1772727566.724:279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28154 comm="syz.0.7333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48fd85c799 code=0x7ffc0000 [ 1730.041944][ T36] audit: type=1326 audit(1772727566.724:280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28154 comm="syz.0.7333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48fd85c799 code=0x7ffc0000 [ 1730.042002][ T36] audit: type=1326 audit(1772727566.724:281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28154 comm="syz.0.7333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f48fd85c799 code=0x7ffc0000 [ 1730.042051][ T36] audit: type=1326 audit(1772727566.724:282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28154 comm="syz.0.7333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48fd85c799 code=0x7ffc0000 [ 1730.042098][ T36] audit: type=1326 audit(1772727566.724:283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28154 comm="syz.0.7333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48fd85c799 code=0x7ffc0000 [ 1730.042149][ T36] audit: type=1326 audit(1772727566.724:284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28154 comm="syz.0.7333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f48fd85c799 code=0x7ffc0000 [ 1730.043528][ T36] audit: type=1326 audit(1772727566.724:285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28154 comm="syz.0.7333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f48fd85c799 code=0x7ffc0000 [ 1730.425618][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 1730.477818][T28166] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7338'. [ 1730.519347][T28166] macvtap2: entered promiscuous mode [ 1730.519379][T28166] bridge0: entered promiscuous mode [ 1730.519610][T28166] macvtap2: entered allmulticast mode [ 1730.519626][T28166] bridge0: entered allmulticast mode [ 1735.296900][T28253] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7372'. [ 1735.671277][T28253] macvtap2: entered promiscuous mode [ 1735.671307][T28253] bridge0: entered promiscuous mode [ 1735.671561][T28253] macvtap2: entered allmulticast mode [ 1735.671577][T28253] bridge0: entered allmulticast mode [ 1735.811806][T22174] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 1735.959393][T22174] usb 5-1: Using ep0 maxpacket: 8 [ 1735.973254][T22174] usb 5-1: config 0 has no interfaces? [ 1735.973299][T22174] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2db4, bcdDevice= 0.00 [ 1735.973326][T22174] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1736.002690][T22174] usb 5-1: config 0 descriptor?? [ 1736.299538][T28265] netlink: 40 bytes leftover after parsing attributes in process `syz.7.7374'. [ 1737.604393][T22174] usb 5-1: USB disconnect, device number 5 [ 1740.393842][T28338] 9p: Bad value for 'wfdno' [ 1741.528888][T28370] 9p: Bad value for 'wfdno' [ 1744.142444][T28402] 9p: Bad value for 'wfdno' [ 1744.828899][T25033] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1744.865708][T25033] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1744.865770][T25033] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1744.865811][T25033] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1747.551107][T28440] 9p: Bad value for 'wfdno' [ 1750.322418][T28456] netlink: 156 bytes leftover after parsing attributes in process `syz.0.7446'. [ 1753.861403][T28479] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7453'. [ 1757.356133][T28522] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7467'. [ 1758.613368][T28531] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7470'. [ 1758.641205][T28531] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7470'. [ 1758.641524][T28531] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7470'. [ 1758.699235][T28531] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7470'. [ 1758.699433][T28531] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7470'. [ 1758.878799][T13392] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1758.882297][T13392] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1758.884278][T13392] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1758.886274][T13392] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1758.887365][T13392] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1760.981051][T23621] Bluetooth: hci3: command tx timeout [ 1763.118196][T23621] Bluetooth: hci3: command tx timeout [ 1763.439358][T28587] netlink: 76 bytes leftover after parsing attributes in process `syz.6.7490'. [ 1765.137810][T23621] Bluetooth: hci3: command tx timeout [ 1766.183210][T20072] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1767.783561][T23621] Bluetooth: hci3: command tx timeout [ 1767.814611][T20072] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1768.158412][T28532] chnl_net:caif_netlink_parms(): no params data found [ 1769.851029][T20072] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1772.281346][T20072] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1772.708404][T28532] bridge0: port 1(bridge_slave_0) entered blocking state [ 1772.708626][T28532] bridge0: port 1(bridge_slave_0) entered disabled state [ 1772.708859][T28532] bridge_slave_0: entered allmulticast mode [ 1772.713889][T28532] bridge_slave_0: entered promiscuous mode [ 1772.750243][T28532] bridge0: port 2(bridge_slave_1) entered blocking state [ 1772.750476][T28532] bridge0: port 2(bridge_slave_1) entered disabled state [ 1772.750792][T28532] bridge_slave_1: entered allmulticast mode [ 1772.756483][T28532] bridge_slave_1: entered promiscuous mode [ 1772.850901][T28532] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1772.871455][T28532] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1772.949105][T28532] team0: Port device team_slave_0 added [ 1772.972835][T28532] team0: Port device team_slave_1 added [ 1773.919262][T28532] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1773.919284][T28532] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1773.919313][T28532] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1773.993910][T28532] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1773.993934][T28532] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1773.993966][T28532] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1775.999700][T28737] netlink: 28 bytes leftover after parsing attributes in process `syz.5.7539'. [ 1777.678258][T28532] hsr_slave_0: entered promiscuous mode [ 1777.679781][T28532] hsr_slave_1: entered promiscuous mode [ 1777.680789][T28532] debugfs: 'hsr0' already exists in 'hsr' [ 1777.680825][T28532] Cannot create hsr debugfs directory [ 1779.973355][T20072] bridge_slave_1: left allmulticast mode [ 1779.973390][T20072] bridge_slave_1: left promiscuous mode [ 1779.973768][T20072] bridge0: port 2(bridge_slave_1) entered disabled state [ 1780.043707][T20072] bridge_slave_0: left allmulticast mode [ 1780.043744][T20072] bridge_slave_0: left promiscuous mode [ 1780.044049][T20072] bridge0: port 1(bridge_slave_0) entered disabled state [ 1781.144403][T28788] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1782.688836][T28798] netlink: 28 bytes leftover after parsing attributes in process `syz.5.7555'. [ 1783.900726][T20072] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1783.950984][T20072] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1783.971804][T20072] bond0 (unregistering): Released all slaves [ 1786.111294][T28843] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7566'. [ 1787.917706][T27642] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 1788.091022][T27642] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1788.091134][T27642] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1788.093030][T27642] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1788.093062][T27642] usb 1-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 1788.093085][T27642] usb 1-1: Manufacturer: syz [ 1788.167334][T27642] usb 1-1: config 0 descriptor?? [ 1788.607676][T28532] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1790.406807][T27642] uclogic 0003:256C:006D.0008: failed retrieving string descriptor #200: -71 [ 1790.407673][T27642] uclogic 0003:256C:006D.0008: failed retrieving pen parameters: -71 [ 1790.407698][T27642] uclogic 0003:256C:006D.0008: failed probing pen v2 parameters: -71 [ 1790.407781][T27642] uclogic 0003:256C:006D.0008: failed probing parameters: -71 [ 1790.407895][T27642] uclogic 0003:256C:006D.0008: probe with driver uclogic failed with error -71 [ 1790.537668][T28532] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1790.599478][T27642] usb 1-1: USB disconnect, device number 12 [ 1790.668641][T28532] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1790.907705][T28532] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1792.923913][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 1794.089616][T28532] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1794.151328][T28901] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7576'. [ 1795.652788][T28921] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1795.757651][T20072] hsr_slave_0: left promiscuous mode [ 1795.858475][T20072] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1795.858508][T20072] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1795.894559][T20072] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1795.894594][T20072] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1795.964847][T20072] veth1_macvtap: left promiscuous mode [ 1795.964960][T20072] veth0_macvtap: left promiscuous mode [ 1795.965233][T20072] veth1_vlan: left promiscuous mode [ 1795.965416][T20072] veth0_vlan: left promiscuous mode [ 1795.993432][T28928] netlink: 72 bytes leftover after parsing attributes in process `syz.7.7583'. [ 1795.993470][T28928] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7583'. [ 1795.993932][T28928] netlink: 72 bytes leftover after parsing attributes in process `syz.7.7583'. [ 1795.993954][T28928] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7583'. [ 1797.769343][T28946] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7588'. [ 1798.271273][T20072] team0 (unregistering): Port device team_slave_1 removed [ 1798.351880][T20072] team0 (unregistering): Port device team_slave_0 removed [ 1799.552233][T28532] 8021q: adding VLAN 0 to HW filter on device team0 [ 1799.888848][T24459] bridge0: port 1(bridge_slave_0) entered blocking state [ 1799.888997][T24459] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1800.074366][ T68] bridge0: port 2(bridge_slave_1) entered blocking state [ 1800.074506][ T68] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1800.143288][T28971] /dev/nullb0: Can't lookup blockdev [ 1801.535209][T28981] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7599'. [ 1802.292762][T28990] netlink: 28 bytes leftover after parsing attributes in process `syz.6.7603'. [ 1804.613855][T28532] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1806.534549][T29058] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7617'. [ 1806.534586][T29058] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7617'. [ 1806.790880][T28532] veth0_vlan: entered promiscuous mode [ 1806.919478][T28532] veth1_vlan: entered promiscuous mode [ 1807.208708][T28532] veth0_macvtap: entered promiscuous mode [ 1807.281925][T28532] veth1_macvtap: entered promiscuous mode [ 1807.438495][T28532] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1807.550004][T28532] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1807.641819][ T68] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1807.642505][ T68] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1807.642736][ T68] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1807.642774][ T68] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1810.535667][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1810.535694][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1810.749833][ T139] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1810.749861][ T139] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1813.548979][T29121] netlink: 908 bytes leftover after parsing attributes in process `syz.8.7469'. [ 1814.008978][T13392] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1814.022301][T13392] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1814.038968][T13392] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1814.040375][T13392] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1814.047801][T13392] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1816.211019][T21886] syz_tun (unregistering): left allmulticast mode [ 1816.211054][T21886] syz_tun (unregistering): left promiscuous mode [ 1816.211165][T21886] bridge0: port 3(syz_tun) entered disabled state [ 1816.262515][T23621] Bluetooth: hci2: command tx timeout [ 1818.025376][ T12] smc: removing ib device syz1 [ 1818.406092][T23621] Bluetooth: hci2: command tx timeout [ 1820.424475][T23621] Bluetooth: hci2: command tx timeout [ 1821.724228][T29189] netlink: 'syz.5.7650': attribute type 1 has an invalid length. [ 1821.866868][T29197] netlink: 28 bytes leftover after parsing attributes in process `syz.5.7650'. [ 1822.002557][T29205] netlink: 28 bytes leftover after parsing attributes in process `syz.5.7650'. [ 1822.063887][T29207] netlink: 48 bytes leftover after parsing attributes in process `syz.6.7655'. [ 1822.497837][T23621] Bluetooth: hci2: command tx timeout [ 1823.768057][T14135] IPVS: starting estimator thread 0... [ 1823.879778][T29221] IPVS: using max 11 ests per chain, 26400 per kthread [ 1823.979342][T29224] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7658'. [ 1826.163238][T29209] macvlan2: entered promiscuous mode [ 1826.163285][T29209] macvlan2: entered allmulticast mode [ 1826.215717][T29209] bond1: entered promiscuous mode [ 1826.255423][T29209] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1826.441917][T29209] bond1: left promiscuous mode [ 1826.611834][T29240] vcan0: tx drop: invalid da for name 0x0000000000000015 [ 1828.769933][T29260] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7670'. [ 1829.570776][T29125] chnl_net:caif_netlink_parms(): no params data found [ 1831.275431][T29291] netlink: 48 bytes leftover after parsing attributes in process `syz.8.7677'. [ 1832.938358][T29302] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 1833.643404][T29125] bridge0: port 1(bridge_slave_0) entered blocking state [ 1833.646999][T29125] bridge0: port 1(bridge_slave_0) entered disabled state [ 1833.647329][T29125] bridge_slave_0: entered allmulticast mode [ 1833.740901][T29312] netlink: 28 bytes leftover after parsing attributes in process `syz.6.7682'. [ 1833.745756][T29125] bridge_slave_0: entered promiscuous mode [ 1833.766885][T29125] bridge0: port 2(bridge_slave_1) entered blocking state [ 1833.767159][T29125] bridge0: port 2(bridge_slave_1) entered disabled state [ 1833.782986][T29125] bridge_slave_1: entered allmulticast mode [ 1833.829309][T29125] bridge_slave_1: entered promiscuous mode [ 1834.075920][T29125] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1834.095406][T29125] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1834.236473][T29125] team0: Port device team_slave_0 added [ 1834.261541][T29125] team0: Port device team_slave_1 added [ 1834.415207][T29324] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7686'. [ 1835.594948][T23621] Bluetooth: hci6: unexpected event for opcode 0x0c5a [ 1835.738927][T29125] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1835.738947][T29125] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1835.738978][T29125] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1835.814524][T29125] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1835.814545][T29125] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1835.814578][T29125] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1836.194130][T29341] netlink: 165 bytes leftover after parsing attributes in process `syz.5.7692'. [ 1836.380561][T29349] netlink: 28 bytes leftover after parsing attributes in process `syz.5.7693'. [ 1836.486623][T29125] hsr_slave_0: entered promiscuous mode [ 1836.496019][T29125] hsr_slave_1: entered promiscuous mode [ 1836.497007][T29125] debugfs: 'hsr0' already exists in 'hsr' [ 1836.497035][T29125] Cannot create hsr debugfs directory [ 1842.704636][T29401] netlink: 28 bytes leftover after parsing attributes in process `syz.6.7706'. [ 1846.817811][T29446] can0: slcan on ttyprintk. [ 1848.170036][T25033] bridge_slave_1: left allmulticast mode [ 1848.170071][T25033] bridge_slave_1: left promiscuous mode [ 1848.170361][T25033] bridge0: port 2(bridge_slave_1) entered disabled state [ 1848.243113][T25033] bridge_slave_0: left allmulticast mode [ 1848.243150][T25033] bridge_slave_0: left promiscuous mode [ 1848.277971][T25033] bridge0: port 1(bridge_slave_0) entered disabled state [ 1851.494724][T25033] bridge0 (unregistering): left allmulticast mode [ 1851.494759][T25033] bridge0 (unregistering): left promiscuous mode [ 1853.304649][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 1853.404349][T25033] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1853.438589][T25033] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1853.462147][T25033] bond0 (unregistering): Released all slaves [ 1853.472867][T25033] bond1 (unregistering): Released all slaves [ 1853.833283][T29445] can0 (unregistered): slcan off ttyprintk. [ 1854.442395][T29517] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7737'. [ 1856.443528][T29529] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7742'. [ 1856.444256][T29529] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7742'. [ 1856.953058][T27632] IPVS: starting estimator thread 0... [ 1857.021173][T29543] netlink: 4352 bytes leftover after parsing attributes in process `syz.0.7746'. [ 1857.021209][T29543] netlink: 4352 bytes leftover after parsing attributes in process `syz.0.7746'. [ 1857.048204][T29542] IPVS: using max 6 ests per chain, 14400 per kthread [ 1861.418065][T29568] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 1861.418065][T29568] program syz.0.7756 not setting count and/or reply_len properly [ 1861.657514][T25033] hsr_slave_0: left promiscuous mode [ 1862.019148][T25033] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1862.592397][T29602] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 1862.592397][T29602] program syz.8.7762 not setting count and/or reply_len properly [ 1863.034959][T25033] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1865.079470][T29621] vcan0: tx drop: invalid da for name 0x0000000000000015 [ 1868.196928][T25033] team0 (unregistering): Port device team_slave_1 removed [ 1869.156557][T25033] team0 (unregistering): Port device team_slave_0 removed [ 1869.537948][T29637] team0: left allmulticast mode [ 1869.537979][T29637] team_slave_0: left allmulticast mode [ 1869.538001][T29637] team_slave_1: left allmulticast mode [ 1869.538025][T29637] team0: left promiscuous mode [ 1869.538039][T29637] team_slave_0: left promiscuous mode [ 1869.538331][T29637] team_slave_1: left promiscuous mode [ 1869.655650][T29637] bridge0: left allmulticast mode [ 1869.655677][T29637] bridge0: left promiscuous mode [ 1870.687360][T29667] netlink: 20 bytes leftover after parsing attributes in process `syz.5.7782'. [ 1871.315895][T29125] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1871.629181][T29680] 9pnet_virtio: no channels available for device ./bus [ 1872.148503][T29125] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1872.491104][T29125] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1872.668081][T29125] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1873.724368][T29125] kthread_run failed with err -4 [ 1875.543203][T25033] IPVS: stop unused estimator thread 0... [ 1875.686460][T13392] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1875.734118][T13392] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1875.743823][T13392] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1875.766619][T13392] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1875.783738][T13392] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1877.457150][T29735] 9pnet_virtio: no channels available for device ./bus [ 1878.247561][T23621] Bluetooth: hci0: command tx timeout [ 1879.742101][T29744] netlink: 48 bytes leftover after parsing attributes in process `syz.6.7799'. [ 1880.157612][T29752] vcan0: tx drop: invalid da for name 0x0000000000000015 [ 1880.257565][T23621] Bluetooth: hci0: command tx timeout [ 1880.787149][T29767] 9pnet_virtio: no channels available for device ./bus [ 1883.646681][T23621] Bluetooth: hci0: command tx timeout [ 1884.027826][T29785] No control pipe specified [ 1884.141712][T29776] bridge0: port 2(bridge_slave_1) entered disabled state [ 1884.142289][T29776] bridge0: port 1(bridge_slave_0) entered disabled state [ 1884.552570][T29791] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7812'. [ 1885.697639][T13392] Bluetooth: hci0: command tx timeout [ 1885.922991][T29776] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1885.928982][T29776] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1886.097572][T13392] Bluetooth: hci3: command 0x0406 tx timeout [ 1887.987890][T29710] chnl_net:caif_netlink_parms(): no params data found [ 1888.036800][ T1129] netdevsim netdevsim8 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1888.703860][ T1129] netdevsim netdevsim8 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1888.875672][ T1129] netdevsim netdevsim8 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1888.941573][ T1129] netdevsim netdevsim8 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1889.904208][T29710] bridge0: port 1(bridge_slave_0) entered blocking state [ 1889.904433][T29710] bridge0: port 1(bridge_slave_0) entered disabled state [ 1889.904719][T29710] bridge_slave_0: entered allmulticast mode [ 1889.929102][T29710] bridge_slave_0: entered promiscuous mode [ 1893.661906][T29710] bridge0: port 2(bridge_slave_1) entered blocking state [ 1893.662050][T29710] bridge0: port 2(bridge_slave_1) entered disabled state [ 1893.662342][T29710] bridge_slave_1: entered allmulticast mode [ 1893.665229][T29710] bridge_slave_1: entered promiscuous mode [ 1894.227757][T29865] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7827'. [ 1894.293251][T29710] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1894.321525][T29710] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1894.375543][T29710] team0: Port device team_slave_0 added [ 1894.385424][T29710] team0: Port device team_slave_1 added [ 1894.435286][T29710] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1894.435308][T29710] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1894.435339][T29710] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1894.483862][T29710] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1894.483882][T29710] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1894.483915][T29710] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1896.012561][T29710] hsr_slave_0: entered promiscuous mode [ 1896.014043][T29710] hsr_slave_1: entered promiscuous mode [ 1896.015017][T29710] debugfs: 'hsr0' already exists in 'hsr' [ 1896.015044][T29710] Cannot create hsr debugfs directory [ 1898.163446][ T139] bridge_slave_1: left allmulticast mode [ 1898.163482][ T139] bridge_slave_1: left promiscuous mode [ 1898.163772][ T139] bridge0: port 2(bridge_slave_1) entered disabled state [ 1898.293565][ T139] bridge_slave_0: left allmulticast mode [ 1898.293598][ T139] bridge_slave_0: left promiscuous mode [ 1898.293900][ T139] bridge0: port 1(bridge_slave_0) entered disabled state [ 1898.689913][ T139] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1898.826762][ T139] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1898.911101][ T139] bond0 (unregistering): Released all slaves [ 1899.329562][T29947] netlink: 48 bytes leftover after parsing attributes in process `syz.0.7851'. [ 1899.590789][ T139] hsr_slave_0: left promiscuous mode [ 1899.637777][ T139] hsr_slave_1: left promiscuous mode [ 1899.639051][ T139] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1899.663173][ T139] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1904.289253][ T139] team0 (unregistering): Port device team_slave_1 removed [ 1904.390958][ T139] team0 (unregistering): Port device team_slave_0 removed [ 1907.052486][T30025] netlink: 48 bytes leftover after parsing attributes in process `syz.0.7872'. [ 1909.355973][T30058] netlink: 'syz.0.7882': attribute type 1 has an invalid length. [ 1909.810224][T29710] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1909.856636][T29710] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1910.005847][T29710] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1911.213635][T29710] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1911.975185][T29710] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1912.071190][T29710] 8021q: adding VLAN 0 to HW filter on device team0 [ 1912.638343][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 1912.641705][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1912.893140][T30100] sp0: Synchronizing with TNC [ 1914.783667][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 1915.385192][ T9516] bridge0: port 2(bridge_slave_1) entered blocking state [ 1915.385347][ T9516] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1917.648733][T27642] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 1918.317670][T27642] usb 9-1: Using ep0 maxpacket: 32 [ 1918.325445][T27642] usb 9-1: config index 0 descriptor too short (expected 35577, got 27) [ 1918.325470][T27642] usb 9-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1918.325487][T27642] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1918.325503][T27642] usb 9-1: config 1 has no interface number 0 [ 1918.325548][T27642] usb 9-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1918.325570][T27642] usb 9-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 1918.325604][T27642] usb 9-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1918.325621][T27642] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1918.451616][T27642] snd_usb_pod 9-1:1.1: Line 6 Pocket POD found [ 1918.735411][T29710] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1919.950046][T27642] snd_usb_pod 9-1:1.1: Line 6 Pocket POD now attached [ 1920.644480][T27632] usb 9-1: USB disconnect, device number 2 [ 1921.609939][T27643] snd_usb_pod 9-1:1.1: line6_send_raw_message_async_part: usb_submit_urb failed (-22) [ 1921.635304][T27632] snd_usb_pod 9-1:1.1: Line 6 Pocket POD now disconnected [ 1924.584418][T29710] veth0_vlan: entered promiscuous mode [ 1924.646442][T29710] veth1_vlan: entered promiscuous mode [ 1924.711932][T30196] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 1924.711960][T30196] overlayfs: failed to set xattr on upper [ 1924.711967][T30196] overlayfs: ...falling back to redirect_dir=nofollow. [ 1924.711974][T30196] overlayfs: ...falling back to index=off. [ 1924.711980][T30196] overlayfs: ...falling back to uuid=null. [ 1924.711995][T30196] overlayfs: maximum fs stacking depth exceeded [ 1925.851619][T29710] veth0_macvtap: entered promiscuous mode [ 1925.886298][T29710] veth1_macvtap: entered promiscuous mode [ 1926.014998][T29710] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1926.101786][T29710] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1926.132133][T20072] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1926.132412][T20072] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1926.132454][T20072] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1926.132492][T20072] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1929.073269][T25033] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1929.073294][T25033] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1929.218329][T30230] netlink: 40 bytes leftover after parsing attributes in process `syz.5.7927'. [ 1929.310110][T19160] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1929.310135][T19160] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1933.245160][T30241] sp0: Synchronizing with TNC [ 1933.706927][T30266] netlink: 40 bytes leftover after parsing attributes in process `syz.7.7937'. [ 1936.669987][T27638] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 1936.987480][T27638] usb 1-1: Using ep0 maxpacket: 8 [ 1936.989874][T27638] usb 1-1: config 0 has no interfaces? [ 1936.989913][T27638] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2db4, bcdDevice= 0.00 [ 1936.989938][T27638] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1936.995576][T27638] usb 1-1: config 0 descriptor?? [ 1937.246090][T27638] usb 1-1: USB disconnect, device number 13 [ 1943.207014][T30356] netlink: 48 bytes leftover after parsing attributes in process `syz.0.7965'. [ 1943.366098][T13392] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1943.410394][T13392] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1943.416081][T13392] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1943.423486][T13392] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1943.448265][T13392] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1943.551831][T14135] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 1943.727812][T14135] usb 1-1: Using ep0 maxpacket: 8 [ 1943.730484][T14135] usb 1-1: config 0 has no interfaces? [ 1943.730525][T14135] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2db4, bcdDevice= 0.00 [ 1943.730552][T14135] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1943.778548][T14135] usb 1-1: config 0 descriptor?? [ 1944.179273][T30366] netlink: 'syz.7.7966': attribute type 1 has an invalid length. [ 1944.197144][T30366] batman_adv: batadv0: Adding interface: bridge1 [ 1944.197166][T30366] batman_adv: batadv0: The MTU of interface bridge1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1944.197201][T30366] batman_adv: batadv0: Not using interface bridge1 (retrying later): interface not active [ 1944.944987][T30368] netlink: 28 bytes leftover after parsing attributes in process `syz.7.7966'. [ 1944.958405][T30356] netlink: 48 bytes leftover after parsing attributes in process `syz.0.7965'. [ 1945.051998][T27632] usb 1-1: USB disconnect, device number 14 [ 1945.537590][T13392] Bluetooth: hci2: command tx timeout [ 1945.776631][T30358] chnl_net:caif_netlink_parms(): no params data found [ 1946.261378][T30358] bridge0: port 1(bridge_slave_0) entered blocking state [ 1946.261622][T30358] bridge0: port 1(bridge_slave_0) entered disabled state [ 1946.262209][T30358] bridge_slave_0: entered allmulticast mode [ 1946.265066][T30358] bridge_slave_0: entered promiscuous mode [ 1946.276897][T30358] bridge0: port 2(bridge_slave_1) entered blocking state [ 1946.277142][T30358] bridge0: port 2(bridge_slave_1) entered disabled state [ 1946.278934][T30358] bridge_slave_1: entered allmulticast mode [ 1946.281834][T30358] bridge_slave_1: entered promiscuous mode [ 1946.445757][T30358] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1946.536902][T30358] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1946.854682][T30358] team0: Port device team_slave_0 added [ 1946.888915][T30358] team0: Port device team_slave_1 added [ 1947.104065][T30358] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1947.104088][T30358] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1947.104119][T30358] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1947.106525][T30358] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1947.106541][T30358] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1947.106570][T30358] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1947.299421][T30358] hsr_slave_0: entered promiscuous mode [ 1947.300961][T30358] hsr_slave_1: entered promiscuous mode [ 1947.301957][T30358] debugfs: 'hsr0' already exists in 'hsr' [ 1947.301986][T30358] Cannot create hsr debugfs directory [ 1947.618947][T13392] Bluetooth: hci2: command tx timeout [ 1948.920745][T21904] syz_tun (unregistering): left allmulticast mode [ 1948.920781][T21904] syz_tun (unregistering): left promiscuous mode [ 1948.920897][T21904] bridge0: port 3(syz_tun) entered disabled state [ 1949.618510][T14133] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 1949.702343][T13392] Bluetooth: hci2: command tx timeout [ 1949.787702][T14133] usb 8-1: Using ep0 maxpacket: 8 [ 1949.792073][T14133] usb 8-1: config 0 has no interfaces? [ 1949.792104][T14133] usb 8-1: New USB device found, idVendor=1e7d, idProduct=2db4, bcdDevice= 0.00 [ 1949.792122][T14133] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1949.869093][T14133] usb 8-1: config 0 descriptor?? [ 1950.092667][T13905] usb 8-1: USB disconnect, device number 2 [ 1950.943907][ T9516] bridge_slave_1: left allmulticast mode [ 1950.943941][ T9516] bridge_slave_1: left promiscuous mode [ 1950.944211][ T9516] bridge0: port 2(bridge_slave_1) entered disabled state [ 1951.176403][ T9516] bridge_slave_0: left allmulticast mode [ 1951.176437][ T9516] bridge_slave_0: left promiscuous mode [ 1951.176835][ T9516] bridge0: port 1(bridge_slave_0) entered disabled state [ 1951.828861][T13392] Bluetooth: hci2: command tx timeout [ 1954.495699][T27632] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 1954.739676][T27632] usb 9-1: Using ep0 maxpacket: 8 [ 1954.742570][T27632] usb 9-1: config 0 has no interfaces? [ 1954.742615][T27632] usb 9-1: New USB device found, idVendor=1e7d, idProduct=2db4, bcdDevice= 0.00 [ 1954.742642][T27632] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1954.754485][T27632] usb 9-1: config 0 descriptor?? [ 1954.992669][T14135] usb 9-1: USB disconnect, device number 3 [ 1955.478259][ T9516] bond1 (unregistering): (slave bridge2): Releasing active interface [ 1955.697278][ T9516] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1955.788361][ T9516] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1955.834705][ T9516] bond0 (unregistering): Released all slaves [ 1955.861081][ T9516] bond1 (unregistering): Released all slaves [ 1956.757635][T14133] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 1956.912398][ T9516] tipc: Left network mode [ 1956.924750][T14133] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE8, changing to 0x88 [ 1956.924790][T14133] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 1956.924831][T14133] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1956.924860][T14133] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1956.924887][T14133] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1956.948757][T14133] usb 9-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 1956.948844][T14133] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1956.948869][T14133] usb 9-1: Product: syz [ 1956.948885][T14133] usb 9-1: Manufacturer: syz [ 1956.948901][T14133] usb 9-1: SerialNumber: syz [ 1957.131504][T14133] usb 9-1: config 0 descriptor?? [ 1957.253134][T14133] iguanair 9-1:0.0: probe with driver iguanair failed with error -12 [ 1957.934712][T30358] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1957.938555][T13392] Bluetooth: hci1: unexpected event for opcode 0x0000 [ 1958.014725][T30358] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1958.478665][T30491] netlink: 'syz.5.8008': attribute type 1 has an invalid length. [ 1959.055320][T30358] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1959.359516][T30358] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1960.085819][T27645] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 1960.378254][T27645] usb 8-1: Using ep0 maxpacket: 8 [ 1960.380860][T27645] usb 8-1: config 0 has no interfaces? [ 1960.380900][T27645] usb 8-1: New USB device found, idVendor=1e7d, idProduct=2db4, bcdDevice= 0.00 [ 1960.380925][T27645] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1960.453298][T27645] usb 8-1: config 0 descriptor?? [ 1961.727594][T27632] usb 8-1: USB disconnect, device number 3 [ 1961.773225][T30504] netlink: 44 bytes leftover after parsing attributes in process `syz.5.8011'. [ 1962.024123][ T42] wlan0: Trigger new scan to find an IBSS to join [ 1962.097778][ T9516] hsr_slave_0: left promiscuous mode [ 1962.118393][ T9516] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1962.152300][ T9516] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1962.668160][T27642] usb 9-1: USB disconnect, device number 4 [ 1964.293607][ T9516] team0 (unregistering): Port device team_slave_1 removed [ 1964.571799][ T9516] team0 (unregistering): Port device team_slave_0 removed [ 1964.951572][T30504] bridge0: port 3(syz_tun) entered disabled state [ 1964.951864][T30504] bridge0: port 2(bridge_slave_1) entered disabled state [ 1964.955929][T30504] bridge0: port 1(bridge_slave_0) entered disabled state [ 1965.436314][T30527] netlink: 'syz.7.8019': attribute type 1 has an invalid length. [ 1965.440238][T30358] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1965.655327][T30358] 8021q: adding VLAN 0 to HW filter on device team0 [ 1965.785197][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 1965.785352][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1965.819409][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 1965.819543][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1965.873803][T30530] netlink: 48 bytes leftover after parsing attributes in process `syz.7.8020'. [ 1966.018438][T19160] wlan0: Trigger new scan to find an IBSS to join [ 1966.404594][T30534] netlink: 40 bytes leftover after parsing attributes in process `syz.7.8021'. [ 1966.960206][T30358] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1967.189127][T25034] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1967.592892][ T9516] IPVS: stop unused estimator thread 0... [ 1968.993738][T30358] veth0_vlan: entered promiscuous mode [ 1968.994766][T13392] Bluetooth: hci1: unexpected event for opcode 0x005a [ 1969.059019][T30358] veth1_vlan: entered promiscuous mode [ 1969.210274][T30358] veth0_macvtap: entered promiscuous mode [ 1969.267922][T30358] veth1_macvtap: entered promiscuous mode [ 1969.395077][T30358] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1970.037145][T30573] input: syz1 as /devices/virtual/input/input8 [ 1970.054066][T30358] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1970.146395][ T9516] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1970.166404][ T9516] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1970.203535][ T9516] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1970.216087][ T9516] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1972.635803][T14135] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 1973.323028][T14135] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1973.323071][T14135] usb 8-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1973.323115][T14135] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1973.323151][T14135] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1973.631342][T13392] Bluetooth: hci4: unexpected event for opcode 0x005a [ 1973.656557][T14135] usb 8-1: can't set config #27, error -71 [ 1973.710528][T14135] usb 8-1: USB disconnect, device number 4 [ 1973.835929][T19182] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1973.835947][T19182] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1974.241801][ T9516] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1974.241823][ T9516] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1976.213873][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 1976.577807][T30621] sp0: Synchronizing with TNC [ 1979.252273][T30623] netlink: 20 bytes leftover after parsing attributes in process `syz.6.8049'. [ 1984.617885][T30661] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8062'. [ 1987.438245][ T36] audit: type=1326 audit(1772727824.114:286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=30682 comm="syz.7.8068" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f848fa6c799 code=0x0 [ 1994.067789][ T36] audit: type=1326 audit(1772727830.744:287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=30729 comm="syz.6.8082" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fef98a3c799 code=0x0 [ 1999.487411][T23621] Bluetooth: hci0: command 0x0406 tx timeout [ 2000.508474][T19182] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2001.522896][T30764] bridge0: port 2(bridge_slave_1) entered disabled state [ 2001.523491][T30764] bridge0: port 1(bridge_slave_0) entered disabled state [ 2003.146193][ T36] audit: type=1326 audit(1772727839.824:288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=30779 comm="syz.8.8096" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcb4dcfc799 code=0x0 [ 2003.509269][T30764] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2003.516101][T30764] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2006.437462][ T1129] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2006.440212][ T1129] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2006.440332][ T1129] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2006.440375][ T1129] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2008.366614][ T36] audit: type=1326 audit(1772727844.954:289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=30825 comm="syz.0.8109" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f48fd85c799 code=0x0 [ 2010.717899][T30849] 9p: Bad value for 'rfdno' [ 2015.630553][T13905] usb 9-1: new full-speed USB device number 5 using dummy_hcd [ 2016.364189][T13905] usb 9-1: config 0 has an invalid interface number: 113 but max is 0 [ 2016.364235][T13905] usb 9-1: config 0 has no interface number 0 [ 2016.364286][T13905] usb 9-1: config 0 interface 113 altsetting 2 has an endpoint descriptor with address 0x14, changing to 0x4 [ 2016.364317][T13905] usb 9-1: config 0 interface 113 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2016.364343][T13905] usb 9-1: config 0 interface 113 has no altsetting 0 [ 2016.432706][T13905] usb 9-1: New USB device found, idVendor=054c, idProduct=02e1, bcdDevice=e2.c8 [ 2016.432743][T13905] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2016.432765][T13905] usb 9-1: Product: syz [ 2016.432780][T13905] usb 9-1: Manufacturer: syz [ 2016.432795][T13905] usb 9-1: SerialNumber: syz [ 2016.485472][T13905] usb 9-1: config 0 descriptor?? [ 2016.513404][ C1] usb 9-1: NFC: Urb failure (status -71) [ 2016.564222][T13905] usb 9-1: NFC: Unable to get FW version [ 2016.610238][T13905] pn533_usb 9-1:0.113: probe with driver pn533_usb failed with error -90 [ 2016.775764][T19716] usb 9-1: USB disconnect, device number 5 [ 2018.996105][T30926] netlink: 'syz.8.8139': attribute type 1 has an invalid length. [ 2019.068936][T30928] netlink: 28 bytes leftover after parsing attributes in process `syz.8.8139'. [ 2019.806727][T30928] 8021q: adding VLAN 0 to HW filter on device bond1 [ 2026.310893][T30993] usb usb9: usbfs: process 30993 (syz.0.8159) did not claim interface 3 before use [ 2028.470524][T31020] netlink: 'syz.6.8167': attribute type 1 has an invalid length. [ 2028.536210][T31022] netlink: 28 bytes leftover after parsing attributes in process `syz.6.8167'. [ 2028.710926][T31022] 8021q: adding VLAN 0 to HW filter on device bond1 [ 2034.693085][T24459] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2034.967589][T22174] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 2035.052946][T31060] netlink: 173 bytes leftover after parsing attributes in process `syz.8.8180'. [ 2035.144344][T22174] usb 1-1: config 0 has no interfaces? [ 2035.144392][T22174] usb 1-1: New USB device found, idVendor=1943, idProduct=2257, bcdDevice=81.51 [ 2035.144411][T22174] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2035.178022][T22174] usb 1-1: config 0 descriptor?? [ 2035.444390][T22174] usb 1-1: USB disconnect, device number 15 [ 2038.165722][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 2038.412084][T22174] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 2038.737545][T22174] usb 8-1: Using ep0 maxpacket: 8 [ 2038.740474][T22174] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 2038.740507][T22174] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2038.740525][T22174] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 2038.740545][T22174] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 5 [ 2038.740579][T22174] usb 8-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 2038.740599][T22174] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2038.977811][T22174] usb 8-1: config 0 descriptor?? [ 2038.978791][T31074] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 2040.206840][ T36] audit: type=1326 audit(1772727876.884:290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31069 comm="syz.7.8184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f848fa6c799 code=0x7fc00000 [ 2040.427639][T13392] Bluetooth: hci5: Opcode 0x0c03 failed: -71 [ 2040.532700][T22174] usb 8-1: USB disconnect, device number 5 [ 2042.481036][T31099] netlink: 173 bytes leftover after parsing attributes in process `syz.8.8193'. [ 2045.722070][T31108] bridge0: port 2(bridge_slave_1) entered disabled state [ 2045.722378][T31108] bridge0: port 1(bridge_slave_0) entered disabled state [ 2046.109160][T31122] netlink: 'syz.8.8200': attribute type 1 has an invalid length. [ 2046.209723][T31123] netlink: 28 bytes leftover after parsing attributes in process `syz.8.8200'. [ 2046.542867][T31108] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2046.564468][T31108] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2046.764638][T31108] veth1_macvtap: left allmulticast mode [ 2047.343506][T23621] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 2047.383562][T23621] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 2047.403831][T23621] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 2047.405525][T23621] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 2047.406339][T23621] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 2047.563643][T31108] macsec0: left allmulticast mode [ 2047.578621][T31108] team0: left allmulticast mode [ 2047.578643][T31108] team_slave_0: left allmulticast mode [ 2047.578658][T31108] team_slave_1: left allmulticast mode [ 2047.578674][T31108] team0: left promiscuous mode [ 2047.578682][T31108] team_slave_0: left promiscuous mode [ 2047.578880][T31108] team_slave_1: left promiscuous mode [ 2047.736552][T31122] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 2047.769318][T24459] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2047.783355][T24459] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2047.785975][T24459] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2047.786115][T24459] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2048.555611][T31131] chnl_net:caif_netlink_parms(): no params data found [ 2048.703546][ T36] audit: type=1326 audit(1772727885.384:291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31116 comm="syz.6.8199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef98a3c799 code=0x7fc00000 [ 2049.060498][T31145] ================================================================== [ 2049.060515][T31145] BUG: KASAN: wild-memory-access in lookup_swap_cgroup_id+0x8b/0xf0 [ 2049.060676][T31145] Read of size 4 at addr 0007fffffffffffc by task syz.8.8206/31145 [ 2049.060690][T31145] [ 2049.060715][T31145] CPU: 1 UID: 0 PID: 31145 Comm: syz.8.8206 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 2049.060734][T31145] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 2049.060748][T31145] Call Trace: [ 2049.060757][T31145] [ 2049.060767][T31145] dump_stack_lvl+0xe8/0x150 [ 2049.060832][T31145] ? lookup_swap_cgroup_id+0x8b/0xf0 [ 2049.060874][T31145] kasan_report+0x117/0x150 [ 2049.060942][T31145] ? lookup_swap_cgroup_id+0x8b/0xf0 [ 2049.060965][T31145] kasan_check_range+0x264/0x2c0 [ 2049.060992][T31145] lookup_swap_cgroup_id+0x8b/0xf0 [ 2049.061013][T31145] swap_pte_batch+0x12d/0x320 [ 2049.061065][T31145] unmap_page_range+0x148c/0x4540 [ 2049.061102][T31145] ? __pfx_unmap_page_range+0x10/0x10 [ 2049.061125][T31145] ? mas_find+0xb0e/0xd30 [ 2049.061213][T31145] ? unmap_vmas+0x1c4/0x6a0 [ 2049.061233][T31145] unmap_vmas+0x48f/0x6a0 [ 2049.061255][T31145] ? __pfx_unmap_vmas+0x10/0x10 [ 2049.061284][T31145] exit_mmap+0x280/0xa10 [ 2049.061324][T31145] ? __pfx_exit_mmap+0x10/0x10 [ 2049.061354][T31145] ? do_raw_spin_lock+0x12b/0x2f0 [ 2049.061400][T31145] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 2049.061451][T31145] ? __pfx_exit_aio+0x10/0x10 [ 2049.061520][T31145] ? uprobe_clear_state+0x288/0x2a0 [ 2049.061592][T31145] __mmput+0xcb/0x3d0 [ 2049.061621][T31145] exit_mm+0x168/0x220 [ 2049.061639][T31145] do_exit+0x6a2/0x23c0 [ 2049.061658][T31145] ? __pfx_do_exit+0x10/0x10 [ 2049.061674][T31145] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 2049.061694][T31145] ? __rcu_read_unlock+0x83/0xe0 [ 2049.061718][T31145] ? rt_spin_unlock+0x160/0x200 [ 2049.061737][T31145] do_group_exit+0x21b/0x2d0 [ 2049.061755][T31145] __x64_sys_exit_group+0x3f/0x40 [ 2049.061772][T31145] x64_sys_call+0x221a/0x2240 [ 2049.061787][T31145] do_syscall_64+0x14d/0xf80 [ 2049.061841][T31145] ? trace_irq_disable+0x3b/0x150 [ 2049.061868][T31145] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2049.061895][T31145] ? clear_bhb_loop+0x40/0x90 [ 2049.061913][T31145] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2049.061930][T31145] RIP: 0033:0x7fcb4dcfc799 [ 2049.061968][T31145] Code: Unable to access opcode bytes at 0x7fcb4dcfc76f. [ 2049.061976][T31145] RSP: 002b:00007ffcde582f18 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 2049.061999][T31145] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fcb4dcfc799 [ 2049.062011][T31145] RDX: 0000000000000064 RSI: 0000000000000000 RDI: 0000000000000000 [ 2049.062021][T31145] RBP: 00007ffcde582f7c R08: 0000000000000000 R09: 00000000000927c0 [ 2049.062031][T31145] R10: 0000000000000001 R11: 0000000000000246 R12: 000000000000008a [ 2049.062041][T31145] R13: 00000000000927c0 R14: 00000000001f41b8 R15: 00007ffcde582fd0 [ 2049.062060][T31145] [ 2049.062066][T31145] ================================================================== [ 2049.082710][T31145] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 2049.082805][T31145] CPU: 1 UID: 0 PID: 31145 Comm: syz.8.8206 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 2049.082874][T31145] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 2049.082908][T31145] Call Trace: [ 2049.082937][T31145] [ 2049.082960][T31145] vpanic+0x56c/0xa60 [ 2049.083111][T31145] ? __pfx_vpanic+0x10/0x10 [ 2049.083188][T31145] ? __pfx___schedule+0x10/0x10 [ 2049.083347][T31145] panic+0xc5/0xd0 [ 2049.083422][T31145] ? __pfx_panic+0x10/0x10 [ 2049.083506][T31145] ? preempt_schedule_common+0x82/0xd0 [ 2049.083595][T31145] ? lookup_swap_cgroup_id+0x8b/0xf0 [ 2049.083685][T31145] check_panic_on_warn+0x89/0xb0 [ 2049.083720][T31145] ? lookup_swap_cgroup_id+0x8b/0xf0 [ 2049.083744][T31145] end_report+0x73/0x180 [ 2049.083777][T31145] ? lookup_swap_cgroup_id+0x8b/0xf0 [ 2049.083800][T31145] kasan_report+0x128/0x150 [ 2049.083834][T31145] ? lookup_swap_cgroup_id+0x8b/0xf0 [ 2049.083864][T31145] kasan_check_range+0x264/0x2c0 [ 2049.083897][T31145] lookup_swap_cgroup_id+0x8b/0xf0 [ 2049.083924][T31145] swap_pte_batch+0x12d/0x320 [ 2049.083960][T31145] unmap_page_range+0x148c/0x4540 [ 2049.084016][T31145] ? __pfx_unmap_page_range+0x10/0x10 [ 2049.084047][T31145] ? mas_find+0xb0e/0xd30 [ 2049.084078][T31145] ? unmap_vmas+0x1c4/0x6a0 [ 2049.084105][T31145] unmap_vmas+0x48f/0x6a0 [ 2049.084136][T31145] ? __pfx_unmap_vmas+0x10/0x10 [ 2049.084176][T31145] exit_mmap+0x280/0xa10 [ 2049.084210][T31145] ? __pfx_exit_mmap+0x10/0x10 [ 2049.084242][T31145] ? do_raw_spin_lock+0x12b/0x2f0 [ 2049.084303][T31145] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 2049.084348][T31145] ? __pfx_exit_aio+0x10/0x10 [ 2049.084384][T31145] ? uprobe_clear_state+0x288/0x2a0 [ 2049.084421][T31145] __mmput+0xcb/0x3d0 [ 2049.084451][T31145] exit_mm+0x168/0x220 [ 2049.084476][T31145] do_exit+0x6a2/0x23c0 [ 2049.084504][T31145] ? __pfx_do_exit+0x10/0x10 [ 2049.084525][T31145] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 2049.084553][T31145] ? __rcu_read_unlock+0x83/0xe0 [ 2049.084591][T31145] ? rt_spin_unlock+0x160/0x200 [ 2049.084617][T31145] do_group_exit+0x21b/0x2d0 [ 2049.084645][T31145] __x64_sys_exit_group+0x3f/0x40 [ 2049.084669][T31145] x64_sys_call+0x221a/0x2240 [ 2049.084702][T31145] do_syscall_64+0x14d/0xf80 [ 2049.084735][T31145] ? trace_irq_disable+0x3b/0x150 [ 2049.084763][T31145] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2049.084787][T31145] ? clear_bhb_loop+0x40/0x90 [ 2049.084825][T31145] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2049.084855][T31145] RIP: 0033:0x7fcb4dcfc799 [ 2049.084895][T31145] Code: Unable to access opcode bytes at 0x7fcb4dcfc76f. [ 2049.084906][T31145] RSP: 002b:00007ffcde582f18 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 2049.084931][T31145] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fcb4dcfc799 [ 2049.084947][T31145] RDX: 0000000000000064 RSI: 0000000000000000 RDI: 0000000000000000 [ 2049.084960][T31145] RBP: 00007ffcde582f7c R08: 0000000000000000 R09: 00000000000927c0 [ 2049.084974][T31145] R10: 0000000000000001 R11: 0000000000000246 R12: 000000000000008a [ 2049.084988][T31145] R13: 00000000000927c0 R14: 00000000001f41b8 R15: 00007ffcde582fd0 [ 2049.085013][T31145] [ 2049.085622][T31145] Kernel Offset: disabled