last executing test programs: 6m40.444928102s ago: executing program 2 (id=927): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000c40)=@delchain={0x134, 0x65, 0x2, 0x70bd27, 0x25dfdbf8, {0x0, 0x0, 0x0, 0x0, {0x2, 0x7}, {0x0, 0x6}, {0x0, 0xb}}, [@TCA_CHAIN={0x8, 0xb, 0xffffffff}, @filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_CLASSID={0x8, 0x3, {0x9, 0xfff1}}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x5}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}]}}, @filter_kind_options=@f_bpf={{0x8}, {0xd8, 0x2, [@TCA_BPF_ACT={0xb0, 0x1, [@m_connmark={0xac, 0xa, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xfffffffe, 0x9, 0x3, 0x3, 0x21}}}]}, {0x5d, 0x6, "7d1c2f218ab42f594fe5adbe85eea4a07891f03c95b96ccd9c2cc99a15b78828602efb5bbcd8f18605fd1d4ac132fc6229edf409184213ba5ea94bda4ee4adfe495b418382819811503deec2cd166133b7f5ce1aede8154721"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1}}}}]}, @TCA_BPF_OPS={{0x6, 0x4, 0x3}, {0x1c, 0x5, [{0x6, 0x9, 0x6, 0x6}, {0x2, 0x8, 0x6, 0x5}, {0xfffe, 0x76, 0x9, 0x8}]}}]}}]}, 0x134}, 0x1, 0x0, 0x0, 0x81}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f, 0x600}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 6m40.337320556s ago: executing program 2 (id=928): r0 = userfaultfd(0x80801) ioctl$UFFDIO_API(r0, 0xc018aa3f, 0x0) r1 = gettid() r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000980)=ANY=[@ANYBLOB="12010000b1bd2f087d0403508c2f010203010902120001000000000904"], 0x0) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r2, &(0x7f00000000c0)={0x14, &(0x7f0000000000)=ANY=[@ANYBLOB="0000f5000000", @ANYRES32=r1, @ANYRESDEC=r0], 0x0}, 0x0) syz_usb_control_io$uac1(r2, 0x0, 0x0) 6m38.556956676s ago: executing program 2 (id=936): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x21800, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000180)='nv', 0x2) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x102, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0xe) writev(r2, &(0x7f0000000240)=[{&(0x7f0000000340)="46a1dfa2b8d8e4c3c277f9caea2551856b29554bb62fbb9202ba7d3df1fbf7d650b5279fa93f6782dbe458b0e1c758ca363053f8564efb1dc6247608dcf9b0db1f306e2100000000000000", 0x4b}, {&(0x7f0000000400)="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", 0x1000}, {&(0x7f0000001480)}, {&(0x7f0000001500)="3a6ed4d1799bf0031d8882625d0a087ce74d504c3bf7b42d2691248980f584ed07f99a070f957ff2b297ee4297c3f6e91730a6f58190d33b67ff158f07169158f38c1712b0be85f0f623f78344e96db308b3644339acd13546c677bab90ea918140b931ef24821cc51d012fbd977a4bab8dcd293e7601eca17b435a5519bed1b0cee743910d3c0bf", 0x88}], 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) sendmsg$nl_route(r2, 0x0, 0x20044014) socket(0x1d, 0x2, 0x6) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r6) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4c000000100003041b00"/20, @ANYRES32=0x0, @ANYBLOB="46060900000000001c00128009000100766c616e000000000c000280060001000400000008000500", @ANYRES32=r11, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r9], 0x4c}, 0x1, 0x0, 0x0, 0x600}, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, &(0x7f0000000100)) syz_open_dev$sndpcmp(&(0x7f0000000200), 0x1, 0xa2c65) sched_setattr(0x0, 0x0, 0x0) 6m36.528623555s ago: executing program 2 (id=940): fsopen(&(0x7f00000000c0)='devpts\x00', 0x1) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(r0, 0x114, 0x7, &(0x7f0000000480)={@rxrpc=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e20, @broadcast}}, {&(0x7f0000000200)=""/92, 0x5c}, &(0x7f00000000c0), 0x23}, 0xa0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000080)={0x50, 0x0, r4, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x9}}, 0x50) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x18) syz_fuse_handle_req(r3, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r3, &(0x7f00000063c0)="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", 0x2000, &(0x7f0000001240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)={0xb0, 0x0, 0xfffffffffffffff9, [{{0x3, 0x1, 0xb6cc, 0x7, 0x3b, 0x3, {0x1, 0xfffffffffffffc32, 0x0, 0x3, 0x7fff, 0x100, 0x5, 0x1, 0x7, 0xc000, 0x0, 0x0, r5, 0x8001, 0xdbb80000}}, {0x2, 0x9, 0x1, 0x4, '*'}}]}, 0x0, 0x0, 0x0}) getdents64(r6, &(0x7f0000000100)=""/134, 0x86) syz_fuse_handle_req(r3, &(0x7f00000083c0)="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", 0x2000, &(0x7f0000001e00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) syz_open_dev$vim2m(&(0x7f00000003c0), 0x6, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r7, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r8 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r8, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f00000000c0)='./file0/../file0/../file0/../file0\x00', &(0x7f00000001c0)='./file0/../file0/../file0/../file0\x00') 6m35.038407059s ago: executing program 2 (id=946): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x203, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}]}], {0x14}}, 0x68}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000940)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a01080000000000000000020000010900020073797a30000000000900010073797a30000000002c0003800800024000000000080001400000000018000380140001000000000000000000000000000000000014000000110001"], 0x80}}, 0x4000000) close(r0) 6m34.604885855s ago: executing program 2 (id=947): syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x9e, 0x17, 0x36, 0x10, 0x17ef, 0x721e, 0xde06, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6}}]}}]}}, 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x10000000000, 0x2002) socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0) openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x64040, 0xc3) openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x200}, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x60240) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r2, 0xc0a85320, &(0x7f0000000180)={{0x80}, 'port0\x00', 0x7e, 0xa1c07, 0x6, 0x0, 0x100000}) epoll_create(0x101) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x18557f, 0x0) r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) r4 = socket$unix(0x1, 0x1, 0x0) bind$unix(r4, &(0x7f0000000000)=@abs={0x1, 0x0, 0x4e23}, 0x6e) listen(r4, 0x0) sendmsg$TCPDIAG_GETSOCK(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x4c, 0x14, 0x101, 0x70bd2d, 0x25dfdbfd, {0x1, 0x1f, 0x88, 0x10, {0x4e24, 0x4e22, [0x0, 0xffffffff, 0xf, 0xc3], [0x6, 0x0, 0x5, 0x7], 0x0, [0x1, 0x7fffffff]}, 0xfffffffe, 0xa}}, 0x4c}, 0x1, 0x0, 0x0, 0x404004c}, 0x40000) socket$inet(0x2, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001240)=ANY=[@ANYBLOB="3c0000001000390400"/20, @ANYRES32=r6, @ANYBLOB="000000000096f00f840012800b00010062726964676500000c00028005002c0086000000"], 0x3c}}, 0x0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002280)=ANY=[@ANYBLOB="400000001200050100000000fedbdf2505001900ff00000028001a00ffffffff0000000000000000000000aed0000a0101020000000000000000000000000a00eea49620d95fcc12595c0a440a21e91c65195cbac9a8c246b3fc0f750dc94ec8852d6b0a68c7ac9d80334c8404b1a6dca6ee6a97c5693839e68198a77a0de32da621274db5b8ca1687aebcfedad7d161761bfcd6c6f6fdd0ac4f214aeefb1ef52bd105620576746491a152085bc6aab2ac62a4c445c10a5b5a11785bc281107c587191979536312d7e71267fe7d7cdf60c41f60f87653281151c2a7ffdf0dc24c22c8cbfac3e8bf42a9c2fb01a42f8ec3e830aa4d4c9b633f9dc7b44e49e14a90a03dec6cdc347d358e007b7bb3cbea33a001feac87a91035275165af57556190a"], 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x20040810) socket$inet6(0xa, 0x805, 0x0) 6m34.196913448s ago: executing program 32 (id=947): syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x9e, 0x17, 0x36, 0x10, 0x17ef, 0x721e, 0xde06, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6}}]}}]}}, 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x10000000000, 0x2002) socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0) openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x64040, 0xc3) openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x200}, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x60240) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r2, 0xc0a85320, &(0x7f0000000180)={{0x80}, 'port0\x00', 0x7e, 0xa1c07, 0x6, 0x0, 0x100000}) epoll_create(0x101) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x18557f, 0x0) r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) r4 = socket$unix(0x1, 0x1, 0x0) bind$unix(r4, &(0x7f0000000000)=@abs={0x1, 0x0, 0x4e23}, 0x6e) listen(r4, 0x0) sendmsg$TCPDIAG_GETSOCK(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x4c, 0x14, 0x101, 0x70bd2d, 0x25dfdbfd, {0x1, 0x1f, 0x88, 0x10, {0x4e24, 0x4e22, [0x0, 0xffffffff, 0xf, 0xc3], [0x6, 0x0, 0x5, 0x7], 0x0, [0x1, 0x7fffffff]}, 0xfffffffe, 0xa}}, 0x4c}, 0x1, 0x0, 0x0, 0x404004c}, 0x40000) socket$inet(0x2, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001240)=ANY=[@ANYBLOB="3c0000001000390400"/20, @ANYRES32=r6, @ANYBLOB="000000000096f00f840012800b00010062726964676500000c00028005002c0086000000"], 0x3c}}, 0x0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002280)=ANY=[@ANYBLOB="400000001200050100000000fedbdf2505001900ff00000028001a00ffffffff0000000000000000000000aed0000a0101020000000000000000000000000a00eea49620d95fcc12595c0a440a21e91c65195cbac9a8c246b3fc0f750dc94ec8852d6b0a68c7ac9d80334c8404b1a6dca6ee6a97c5693839e68198a77a0de32da621274db5b8ca1687aebcfedad7d161761bfcd6c6f6fdd0ac4f214aeefb1ef52bd105620576746491a152085bc6aab2ac62a4c445c10a5b5a11785bc281107c587191979536312d7e71267fe7d7cdf60c41f60f87653281151c2a7ffdf0dc24c22c8cbfac3e8bf42a9c2fb01a42f8ec3e830aa4d4c9b633f9dc7b44e49e14a90a03dec6cdc347d358e007b7bb3cbea33a001feac87a91035275165af57556190a"], 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x20040810) socket$inet6(0xa, 0x805, 0x0) 6.292980423s ago: executing program 4 (id=3432): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x19, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) pipe2$9p(0x0, 0x80800) vmsplice(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000000)="e3", 0x1}], 0x1, 0x1) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x176) vmsplice(0xffffffffffffffff, &(0x7f0000000480)=[{&(0x7f00000000c0)='{', 0x1}], 0x1, 0xd) vmsplice(0xffffffffffffffff, &(0x7f0000002a80)=[{&(0x7f0000000340)="b9", 0x1}], 0x1, 0x8) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000140)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e23, 0x6, @empty, 0x203}}}, 0x38) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x1, &(0x7f0000000140)=[{0x6, 0x5, 0x3, 0x7fff0000}]}) r2 = socket$kcm(0x11, 0x7, 0x0) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000000), 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) 6.177849018s ago: executing program 4 (id=3433): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000090000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40000000010800034000000014480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c0003801800008008000340000000020c0004260000000000000c7f14000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, 0x0, 0x40) 6.074006292s ago: executing program 4 (id=3434): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000100000000000a20000000000a01010000000000000000010000000900010073797a300000000068000000090a010400000000000000000100000008000a4000000000200011800e000100636f6e6e6c696d69740000000c00028008000140000000000900010073797a30000000000900020073797a3200000000080005400000001f0c000980080001400037"], 0xb0}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x20, 0x7, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) 4.695503698s ago: executing program 4 (id=3442): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x4f, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$unix(0x1, 0x5, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000000)='yeah', 0x4) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x23) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="9ce5ef92c8000400000004000f00b64216d2604b0fbc70b581bfb96e3f505f41928c22e180e0fbad2e28032831936803b2c33e59"], 0x1c}}, 0x0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe3}]}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r2, &(0x7f00000014c0)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)="f0", 0x1}], 0x1}}], 0x1, 0x40) sendmmsg$inet(r2, &(0x7f0000001340)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000001580)="e7fd379780c24b198c9ebd2cbb2b697c63dcb2ad9924f068956ae9bff5b6d902955f083d7b63744819e97a58eda43c74e9d230bc284b81001b09ce5be3d9c808be0e4a06f04cd3b92717af30809bcb8660e838655d1f593b3d2d6ce2116da270d9f579336fae578558549f2b72b6eee49171b323c4b04f482877197be535fddd8c7710c5df4ff18be68856f2cdc2c9150a734c9e873ddb095f7c8d8520dab8b358b59a2c2dc5baf56eb7b8892847da1da3352bd078a54b58c147e25793a3318dd3b60e0b1f4de4bf6cf33d916ca1fdd2091c257cdac954320967fa95515b89ba1dcf4bdbcdce9129390d4f5484c1d29932547c71fd647e4439968c50f5fd216670412ede7666a114329f8dfb39309bc0931964ec5a28ac77925a80758f69989180241615e3ac5a02e46128e507691fcaadeeb5d2e277417e2a326acfea772bcbde319b563731a69e0db4e17c3ce7dbcf33ad70290f33c2f99842fc45988102c53e7442a82c91c73de101a328c6f1c20b849fe4b1cf8a8dc36f703bf1774d3bbea1c99f0963d6811649a60b8eff49ea31e23b1b91016d027a10a7304658291a3bc17bc4b56626852331d4077ac11b9ef7edcd4cbfb77d8fb9665ba44be5aa24f706e7cbc7fcaa3b8a234f4361ba9789fb71f69d0a3eda497d7573e8404d5272cd822a2529c62c64eebad406d2ecbac4d0a1ad1c27e42d0c5737066654ea18a2a7ca66eb3b96732db01d1c569549f75804eb8776218ed282f884924a21cbc565687b33bf6d4f243fcbe500c910cf9e75183584c336b23c3c7bbacf7cda462eed4e1d9c75d39f3814369537d5f1a2804058f9afb402f7b2e57b48437b558be97dc3cd6a45f1ec5b4c4f97566fb77101fe66a1f122dccc1cf95ca7cac098dea0f4576b8ddd601443d3a7adeac82995b3c12490d285c854e4d79d201702ee68c852a8402d420bded5262a91bfd8b0e123b07a24fae022d5c061c3519db619e8648c77ed6600bb6d0f03e70e05861602d48fb668ba0a90774cf364013dcb2997b875157281bc7c592f652f06cc66b60317687c41cec9ad66a136c46b485a26ada56e1c863cda4aec9f227a0eef8f8e9cc43546ddf53663e1e1cceef8ff73ea387a842bbbf992956e7391eeecc124b7c2c8986e84a0b09936a4574832df951a6c595892e7815f9005446675880a24019b18c820a29a0e72371e7d4dcd2188cbeec3e7b099288d2a6899c6171ad53fb58526a911dc31579f1a98d2dfaa18ccfe210a927e8ab8060588271fddbdcfafc801fe6ba1462060c0d856c2fdd917bab2a1c07f9f562c29bcf9fa83e45201933fd643988555b056513ea0cebf6d8e057032e3e8eeef67a20db39cfd42c4f4c57d0aab701117d218d046fbd372584af6fd633e92317f08c36e66f8623c0a0dcbcb7382e958518e12beea5caa75d73612bee01e5229f706842fd3ecc5679973c31b424c9d5bead2fb92c77c5988d6b33b7439c1bc3c2da8bc330e1c6cf03d3b612e82c275f5225803d16fb7f10661d502720a35961a99aac976c59b93121d38b282d5302afa4004a843bd119c9d7bef5f0e193ec093868ed6a5e665ce9b6a23b7d1c247c8d2380f491cfceb914baa65f60a7bea8f25449c9ea7c45963b7e073289c9c9722c8024defb942c4a2daad3aaaf6f7ef4c893ebcf4fff9ec8d5735af085c32e118794f0a2f206fde76cb28cd571f28540765f09aa243ad8bef6516dc46767230498ae011436f29adf8a40d858ca41efe03db9ef4332d1419a2805d20738cb12562230305d118523d9682540cfc3393c52b29859399f19311863c35b0e7f3e190997723d82859ef35af16044f8cab80cfc48bc2ea8e69a1cb64678e5cc93d49c87824f63838337f02806e2d0964f9e7f8d7e876dfd55d00d5e7f7d3c78b068972b1d8e962573018fb5ffe5b775f6028434db0361b4f94e3df8caa8d0a7dfbd34e859e88bcf2b787b353c69add0df04b477383cccaa4b78f8dd97d0cce1cb9d2135913c5f436d54b1ca29697768e94f5f52a0a4962def4fda83a2be4d23b450fbf0fef234d2f2c1e773a5a78bd7af6201a92b1a1dc3498b936f6", 0x5c7}], 0x1}}], 0x1, 0xc4) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r4 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) ioctl$BTRFS_IOC_SET_FEATURES(0xffffffffffffffff, 0x40309439, &(0x7f0000000040)={0x2, 0x2, 0x11}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, 0x0, &(0x7f0000000080)) r5 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000700)='source', &(0x7f0000000780)='c:::/\x83\xc1\xcfD\xc4AO\x06)\xb03\xfcI\x95w\x96\x9b\xe9\xa6\x1a\x96\xael\x11\xa6\x06\xe3G\xb1\x1d$\xc2;\x8f\xf3\x13\xebB\x93\x94\x01\x8b\x88\xeb\xa3\x01\rx\x86bK&\x13a~\x04/\x18\x14ZM\xcb\xad\x92>\xe5\x01V\xdc\x05#\x13\xe9F\xa0\x1b\xf8\xe12\xe9\x80\x988\xd8?\x86\xe9i\x7f\xa8\xe0c\x94\xc1\xae\x9c\xba\x1c\xfa\xbc\xa8\xbf\xff\xfe\xfe!\x7f2\xf1\xc7P\x80A\x1c2k\xf6}P\x19\xee:i|0\x1c\x13u\xb0I\xaa\xe3\x14\x9a\x1f\x9f(\xd1$\x06\xa8&t&A0\xa7\xef\x9cL\x8e1K', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) socket(0x400000000010, 0x3, 0x0) 3.348670042s ago: executing program 4 (id=3455): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000080000000c"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f00000002c0)='rxrpc_peer\x00', r1}, 0x18) r2 = socket$kcm(0x21, 0x2, 0xa) socket$can_bcm(0x1d, 0x2, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x9031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) rt_sigqueueinfo(0x0, 0x9, &(0x7f000000df80)={0x0, 0x0, 0xffffffc0}) recvmmsg(r4, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000ed074479000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r6}, 0x18) r7 = syz_open_dev$usbfs(&(0x7f0000000180), 0x9, 0xa0400) ioctl$USBDEVFS_SUBMITURB(r7, 0x8038550a, &(0x7f0000000280)=@urb_type_bulk={0x3, {0x6, 0x1}, 0x7fffffff, 0xc2, 0x0, 0x0, 0x2, 0xff, 0x8, 0x8a, 0x3, 0x0}) pipe2$watch_queue(0x0, 0x80) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[], 0x0, 0x26}, 0x28) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x4001, 0x3, 0x368, 0x0, 0x0, 0x148, 0x0, 0x148, 0x350, 0x240, 0x240, 0x350, 0x240, 0x7fffffe, 0x0, {[{{@ip={@private=0xa010102, @local, 0x0, 0x0, 'ip6gretap0\x00', 'nicvf0\x00', {}, {}, 0x88, 0x3, 0x10}, 0x0, 0xa0, 0x100, 0x0, {}, [@common=@unspec=@connmark={{0x30}, {0xfffffff9, 0x8}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0x85d, 0xf, [0x10, 0x32, 0x1e, 0x32, 0x2b, 0x25, 0x3f, 0x17, 0x19, 0x22, 0x2c, 0x3d, 0x7, 0x3f, 0x1e, 0x31], 0x0, 0x2, 0x2}}}, {{@ip={@rand_addr=0x64010101, @local, 0xff, 0x0, 'wg0\x00', 'lo\x00', {0xff}, {}, 0x2e, 0x3, 0x4}, 0x0, 0x168, 0x1d0, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x8, 0x9, 0x1, 0x1, 'syz1\x00', 0x2}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0xfff, 0x7e, 0x1c, 'netbios-ns\x00', 'syz0\x00', {0x3}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c8) syz_emit_ethernet(0x36, &(0x7f0000000400)={@local, @random="144bf80383fc", @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x3, 0x28, 0x64, 0x0, 0x3, 0x6, 0x0, @remote, @remote}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10, 0x6071, 0x0, 0xe7}}}}}}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) sendmsg$kcm(r2, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0xfffc, 0x2, 0x1c, {0xa, 0xfffc, 0x4, @dev, 0xf5}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=[{0x18, 0x110, 0x1, "dc"}], 0x18}, 0xfc00) 3.028424502s ago: executing program 5 (id=3457): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) io_uring_setup(0x7eec, &(0x7f00000000c0)={0x0, 0x3d26, 0x2800, 0x3, 0x2a8}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3.027118288s ago: executing program 3 (id=3458): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x18, 0x3f, 0x1, 0x70bd2c, 0x0, {0x3, 0x7c}, [@nested={0x4, 0x142}]}, 0x18}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 2.8562505s ago: executing program 3 (id=3460): writev(0xffffffffffffffff, &(0x7f0000000680)=[{&(0x7f0000000040)="03000000000300", 0x7}, {&(0x7f0000000600)="17dbe679", 0x4}], 0x2) 2.787944034s ago: executing program 5 (id=3461): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) socket(0x11, 0x800000003, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000002940)={0x2c, r2, 0x1, 0x70bd2c, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0xcb}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106(gcm(aes))\x00'}, 0x58) accept4(r1, 0x0, 0x0, 0x800) sendmsg$IPVS_CMD_SET_CONFIG(r0, 0x0, 0x0) 2.692944799s ago: executing program 3 (id=3462): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000008c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000001c00015b29bd7000fadbdf2507000000", @ANYRES32=r1, @ANYBLOB], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x4040000) 2.545183229s ago: executing program 5 (id=3463): getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x22, 0x0, 0x0) fanotify_mark(0xffffffffffffffff, 0x80, 0x28000018, 0xffffffffffffffff, 0x0) syz_emit_vhci(&(0x7f0000000340)=ANY=[@ANYBLOB="040e05003e20"], 0x8) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) 2.367578049s ago: executing program 3 (id=3465): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000001c0)) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x7) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x14, 0x5, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 2.260886909s ago: executing program 5 (id=3466): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @reject={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x2}]}}}]}]}], {0x14}}, 0xbc}}, 0x0) 2.140881701s ago: executing program 0 (id=3468): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) socketpair$unix(0x1, 0x5, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000180)={0x0, 0xa6, 0x10}, 0xc) sendmsg$inet6(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) r2 = dup(r0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x8003, 0xbffc, 0xe652, 0x2, 0x4, 0x8, 0xff}, 0x9c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0x2d}}, 0x7, 0x1, 0xf06, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSETATTR(r4, &(0x7f0000000000)={0x7, 0x1b, 0x2}, 0xffffff9a) splice(r3, 0x0, r0, 0x0, 0xfff, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0xeffffff2, @empty, 0x5}}, 0x10001fc, 0x6, 0xffff1896, 0x3, 0x26, 0xffffffb9, 0x1a}, 0x9c) 2.028999726s ago: executing program 3 (id=3469): r0 = syz_usb_connect(0x2, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000751c0110e60f00989ad1010203010902240001000000000904290202b48cbb0009050402100000fa000905820240"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000380)={0x2c, &(0x7f0000000180)={0x20, 0x11, 0x6, "75e9d40c58e5"}, 0x0, 0x0, 0x0, 0x0}) futex(0x0, 0x5, 0x401, 0x0, 0x0, 0x21000000) 2.028851757s ago: executing program 1 (id=3470): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x18, 0x3f, 0x1, 0x70bd2c, 0x0, {0x3, 0x7c}, [@nested={0x4, 0x142}]}, 0x18}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 2.028749855s ago: executing program 5 (id=3471): r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x6e, 0x40, 0xb7, 0x40, 0x9e1, 0x5121, 0x40c1, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3c, 0xac, 0x24}}]}}]}}, 0x0) syz_usb_control_io(r0, &(0x7f0000000480)={0x2c, 0x0, &(0x7f0000000380)={0x0, 0x3, 0xa, @string={0xa, 0x3, "5cb65816fe0a2dec"}}, 0x0, 0x0, 0x0}, 0x0) 1.939882764s ago: executing program 1 (id=3472): r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) r1 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r1, &(0x7f0000000040)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) r2 = syz_io_uring_setup(0x497, &(0x7f0000000380)={0x0, 0x4661, 0x800, 0x3, 0x2a8}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r1, 0x0, 0x0}) io_uring_enter(r2, 0x40f9, 0x217, 0xa5, 0x0, 0x0) close_range(r0, r1, 0x0) socket$inet6(0xa, 0x3, 0xff) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) socket$inet(0x2, 0x3, 0x2) r5 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDDISABIO(r5, 0x4b37) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, 0x0, 0x20000) 1.427803705s ago: executing program 1 (id=3473): setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x50, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x50}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) 1.336257957s ago: executing program 1 (id=3474): r0 = socket$inet(0xa, 0x801, 0x84) getsockopt$sock_int(r0, 0x1, 0xf, 0x0, &(0x7f0000000240)) 1.216996257s ago: executing program 1 (id=3475): socket(0x2, 0x3, 0xff) syz_emit_ethernet(0x22, &(0x7f00000001c0)={@broadcast, @local, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x3, 0xc, 0x14, 0x64, 0x0, 0x3, 0xff, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0xc}}}}}}, 0x0) 1.127086527s ago: executing program 1 (id=3476): futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x5, 0x401, 0x0, &(0x7f0000048000), 0x21000000) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1038, 0x1410, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f}, 0x94) syz_emit_ethernet(0x4e, &(0x7f0000000000)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x18, 0x3a, 0x0, @loopback, @loopback, {[], @mld={0x83, 0x0, 0x0, 0x9, 0xc036, @remote}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x6}, 0x90) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8b2b, &(0x7f0000000040)={'wlan1\x00', @random="010000000002"}) 1.033868739s ago: executing program 0 (id=3477): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet_mptcp(0x2, 0x1, 0x106) syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={0x0, 0x28}, 0x1, 0x0, 0x0, 0x20044811}, 0x2000c094) 943.256836ms ago: executing program 0 (id=3478): r0 = socket$packet(0x11, 0x2, 0x300) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)) sendmmsg(r0, &(0x7f0000005d40)=[{{&(0x7f0000000180)=@can, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1}}, {{&(0x7f00000022c0)=@can, 0x80, &(0x7f0000003340)=[{&(0x7f0000002340)='v', 0x5cc}], 0x1}}], 0x2, 0x0) 833.035674ms ago: executing program 0 (id=3479): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c0002800500210001040008"], 0x4c}}, 0x0) 677.222979ms ago: executing program 0 (id=3480): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000001100)={&(0x7f00000012c0)=ANY=[@ANYBLOB="60010000100001000000004000000000fe880000000000000000000000000101ff02000000000000000000000000000100000000000000000a00000064000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0a0101000000000000000000000000000000000032000000ac141438000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003b080000000000000000000000000000fdffff07000000000002000000000000fcffffff000000000200000000000000000000000a0004004500000000000000480002006362632861657329"], 0x160}}, 0x0) 428.982171ms ago: executing program 5 (id=3481): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) socket$kcm(0x10, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000004882, 0x0) io_setup(0x1, &(0x7f00000004c0)=0x0) io_submit(r4, 0xf3, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0x7, 0x1, 0x0, r3, &(0x7f0000000000)="98", 0x3e8000072a, 0x1000000, 0x0, 0x10}]) 104.870641ms ago: executing program 4 (id=3482): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000000700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000015c0)=ANY=[@ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20) sendmsg$inet(r0, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000800)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000002c0)='mm_khugepaged_scan_pmd\x00', r4, 0x0, 0x800}, 0x18) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) 69.252296ms ago: executing program 0 (id=3483): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x7, 0x6576, 0x3}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r0, 0x100000000) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$BLKPG(r1, 0x1269, &(0x7f0000001080)={0x3, 0x0, 0x0, 0x0}) 0s ago: executing program 3 (id=3484): setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x50, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x50}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f00000500070084000000060005"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) kernel console output (not intermixed with test programs): scriptor?? [ 656.096244][T13240] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 656.182094][ T30] audit: type=1326 audit(1760706839.048:2800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13242 comm="syz.1.1890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc3d478efc9 code=0x7ffc0000 [ 656.247652][ T30] audit: type=1326 audit(1760706839.048:2801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13242 comm="syz.1.1890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3d478efc9 code=0x7ffc0000 [ 656.262590][ T9] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 656.318037][ T9] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 656.354195][ T9] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 656.372531][ T9] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 656.406079][ T9] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 656.435660][ T9] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 656.467583][ T9] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 656.480066][T13281] random: crng reseeded on system resumption [ 656.507589][ T9] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 656.525246][ T9] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 656.555898][ T117] kone 0003:1E7D:2CED.0016: unknown main item tag 0x0 [ 656.579481][ T9] hid-generic 0000:0000:0000.0015: hidraw0: HID v8.00 Device [syz0] on syz0 [ 656.590111][ T117] kone 0003:1E7D:2CED.0016: item fetching failed at offset 3/5 [ 656.615860][ T117] kone 0003:1E7D:2CED.0016: parse failed [ 656.637778][ T117] kone 0003:1E7D:2CED.0016: probe with driver kone failed with error -22 [ 656.767355][ T117] usb 4-1: USB disconnect, device number 125 [ 656.795290][T13287] fido_id[13287]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 656.810837][T13294] netlink: 'syz.0.1906': attribute type 10 has an invalid length. [ 656.878715][T13294] team0: Port device dummy0 added [ 656.901403][T13300] xt_CT: You must specify a L4 protocol and not use inversions on it [ 657.486094][T13329] xt_hashlimit: max too large, truncated to 1048576 [ 657.534594][T13329] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 657.585347][T13332] : renamed from vlan1 (while UP) [ 658.430562][T13357] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1928'. [ 658.596067][T13365] xt_hashlimit: max too large, truncated to 1048576 [ 658.839760][T13373] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1921'. [ 658.889170][T13374] atomic_op ffff8880262b1998 conn xmit_atomic 0000000000000000 [ 658.920335][T13373] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1921'. [ 658.986169][T13373] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1921'. [ 659.095521][T13378] netlink: 'syz.3.1932': attribute type 1 has an invalid length. [ 659.229440][T13378] 8021q: adding VLAN 0 to HW filter on device bond2 [ 659.293541][T13381] 8021q: adding VLAN 0 to HW filter on device bond2 [ 659.312345][T13381] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 659.336318][T13381] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 659.607207][T13378] ip6erspan0: entered promiscuous mode [ 659.653677][T13378] bond2: (slave ip6erspan0): making interface the new active one [ 659.716417][T13378] bond2: (slave ip6erspan0): Enslaving as an active interface with an up link [ 659.790450][T13384] macvlan2: entered promiscuous mode [ 659.817920][T13384] bond2: entered promiscuous mode [ 659.834238][T13384] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 659.879287][T13384] bond2: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of ip6erspan0 [ 659.935301][T13384] bond2: left promiscuous mode [ 659.977955][T13401] xt_nat: multiple ranges no longer supported [ 660.131569][T13407] veth0_to_team: entered promiscuous mode [ 660.517210][T13422] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1946'. [ 660.533281][T13420] vlan0: entered promiscuous mode [ 660.635521][ T30] kauditd_printk_skb: 87 callbacks suppressed [ 660.635539][ T30] audit: type=1326 audit(1760706844.108:2889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13425 comm="syz.3.1948" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f948e38efc9 code=0x7ffc0000 [ 660.688076][ T30] audit: type=1326 audit(1760706844.148:2890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13425 comm="syz.3.1948" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f948e38efc9 code=0x7ffc0000 [ 660.717747][ T30] audit: type=1326 audit(1760706844.148:2891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13425 comm="syz.3.1948" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f948e38efc9 code=0x7ffc0000 [ 660.752406][ T30] audit: type=1326 audit(1760706844.148:2892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13425 comm="syz.3.1948" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f948e38efc9 code=0x7ffc0000 [ 660.776088][ T30] audit: type=1326 audit(1760706844.148:2893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13425 comm="syz.3.1948" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f948e38efc9 code=0x7ffc0000 [ 660.888385][ T30] audit: type=1326 audit(1760706844.148:2894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13425 comm="syz.3.1948" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f948e38efc9 code=0x7ffc0000 [ 660.911925][ T30] audit: type=1326 audit(1760706844.148:2895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13425 comm="syz.3.1948" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f948e38efc9 code=0x7ffc0000 [ 660.972894][ T30] audit: type=1326 audit(1760706844.148:2896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13425 comm="syz.3.1948" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f948e38efc9 code=0x7ffc0000 [ 661.007556][ T30] audit: type=1326 audit(1760706844.148:2897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13425 comm="syz.3.1948" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f948e38efc9 code=0x7ffc0000 [ 661.063646][ T30] audit: type=1326 audit(1760706844.148:2898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13425 comm="syz.3.1948" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f948e38efc9 code=0x7ffc0000 [ 661.987769][ T117] usb 5-1: new high-speed USB device number 120 using dummy_hcd [ 662.317846][ T117] usb 5-1: Using ep0 maxpacket: 32 [ 662.368735][ T117] usb 5-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 662.378304][ T117] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 662.392960][ T117] usb 5-1: config 0 descriptor?? [ 662.695892][T13485] syzkaller0: entered promiscuous mode [ 662.701637][T13485] syzkaller0: entered allmulticast mode [ 662.755551][T13485] tipc: Enabled bearer , priority 0 [ 662.773296][T13484] tipc: Resetting bearer [ 662.811647][ T117] hid_parser_main: 34 callbacks suppressed [ 662.811670][ T117] logitech 0003:046D:C29C.0017: unknown main item tag 0x0 [ 662.837082][ T117] logitech 0003:046D:C29C.0017: hidraw0: USB HID vb4.34 Device [HID 046d:c29c] on usb-dummy_hcd.4-1/input0 [ 662.870746][T13484] tipc: Disabling bearer [ 662.958100][T13493] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1978'. [ 663.006426][ T117] logitech 0003:046D:C29C.0017: no inputs found [ 663.051666][ T117] usb 5-1: USB disconnect, device number 120 [ 663.136415][T13501] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1981'. [ 663.675321][T13525] xt_nat: multiple ranges no longer supported [ 663.915450][T13531] random: crng reseeded on system resumption [ 664.207428][ T89] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 664.240608][ T89] hid-generic 0000:0000:0000.0018: hidraw0: HID v0.00 Device [syz1] on syz0 [ 664.863822][T13563] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 665.111378][T13570] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2011'. [ 665.120541][T13570] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 665.183392][T13570] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 665.575040][T13588] veth0_to_team: entered promiscuous mode [ 665.598450][T13590] netlink: 'syz.0.2019': attribute type 1 has an invalid length. [ 665.645013][ T30] kauditd_printk_skb: 140 callbacks suppressed [ 665.645030][ T30] audit: type=1326 audit(1760706849.118:3039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13580 comm="syz.4.2015" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fa7d5b85e67 code=0x7ffc0000 [ 665.681677][ T30] audit: type=1326 audit(1760706849.148:3040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13580 comm="syz.4.2015" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa7d5b2b099 code=0x7ffc0000 [ 665.690676][T13596] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2019'. [ 665.709811][ T30] audit: type=1326 audit(1760706849.148:3041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13580 comm="syz.4.2015" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fa7d5b85e67 code=0x7ffc0000 [ 665.732797][T13595] atomic_op ffff88807d029198 conn xmit_atomic 0000000000000000 [ 665.736780][ T30] audit: type=1326 audit(1760706849.148:3042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13580 comm="syz.4.2015" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa7d5b2b099 code=0x7ffc0000 [ 665.767091][ T30] audit: type=1326 audit(1760706849.148:3043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13580 comm="syz.4.2015" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7fa7d5b8efc9 code=0x7ffc0000 [ 665.794232][T13590] 8021q: adding VLAN 0 to HW filter on device bond2 [ 665.804570][ T30] audit: type=1326 audit(1760706849.188:3044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13580 comm="syz.4.2015" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fa7d5b85e67 code=0x7ffc0000 [ 665.833502][ T30] audit: type=1326 audit(1760706849.188:3045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13580 comm="syz.4.2015" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa7d5b2b099 code=0x7ffc0000 [ 665.859723][ T30] audit: type=1326 audit(1760706849.188:3046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13580 comm="syz.4.2015" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7fa7d5b8efc9 code=0x7ffc0000 [ 665.913457][ T30] audit: type=1326 audit(1760706849.208:3047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13580 comm="syz.4.2015" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fa7d5b85e67 code=0x7ffc0000 [ 665.988466][ T30] audit: type=1326 audit(1760706849.208:3048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13580 comm="syz.4.2015" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa7d5b2b099 code=0x7ffc0000 [ 666.171620][T13606] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 666.208443][T13596] bond2 (unregistering): Released all slaves [ 666.277113][T13600] netem: incorrect ge model size [ 666.283081][T13600] netem: change failed [ 667.035676][T13645] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2042'. [ 667.191028][T13645] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2042'. [ 668.149600][T13679] netlink: 96 bytes leftover after parsing attributes in process `syz.3.2058'. [ 670.986816][ T30] kauditd_printk_skb: 173 callbacks suppressed [ 670.986833][ T30] audit: type=1326 audit(1760706854.458:3222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13750 comm="syz.4.2089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7d5b8efc9 code=0x7ffc0000 [ 671.069680][ T30] audit: type=1326 audit(1760706854.498:3223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13750 comm="syz.4.2089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa7d5b8efc9 code=0x7ffc0000 [ 671.098420][ T30] audit: type=1326 audit(1760706854.498:3224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13750 comm="syz.4.2089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7d5b8efc9 code=0x7ffc0000 [ 671.175417][ T30] audit: type=1326 audit(1760706854.498:3225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13750 comm="syz.4.2089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7d5b8efc9 code=0x7ffc0000 [ 671.203886][ T30] audit: type=1326 audit(1760706854.498:3226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13750 comm="syz.4.2089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa7d5b8efc9 code=0x7ffc0000 [ 671.230070][ T30] audit: type=1326 audit(1760706854.498:3227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13750 comm="syz.4.2089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7d5b8efc9 code=0x7ffc0000 [ 671.339374][ T30] audit: type=1326 audit(1760706854.498:3228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13750 comm="syz.4.2089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7d5b8efc9 code=0x7ffc0000 [ 671.400222][ T30] audit: type=1326 audit(1760706854.498:3229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13750 comm="syz.4.2089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa7d5b8efc9 code=0x7ffc0000 [ 671.451352][ T30] audit: type=1326 audit(1760706854.498:3230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13750 comm="syz.4.2089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7d5b8efc9 code=0x7ffc0000 [ 671.540410][ T30] audit: type=1326 audit(1760706854.498:3231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13750 comm="syz.4.2089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7d5b8efc9 code=0x7ffc0000 [ 671.849766][T13785] netem: incorrect ge model size [ 671.871554][T13785] netem: change failed [ 671.897746][T13789] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2105'. [ 671.928725][T13789] bridge_slave_1: left allmulticast mode [ 671.934420][T13789] bridge_slave_1: left promiscuous mode [ 671.944149][T13789] bridge0: port 2(bridge_slave_1) entered disabled state [ 671.958877][T13789] bridge_slave_0: left allmulticast mode [ 671.964872][T13789] bridge_slave_0: left promiscuous mode [ 671.976766][T13789] bridge0: port 1(bridge_slave_0) entered disabled state [ 672.025006][T13789] bridge0 (unregistering): left promiscuous mode [ 672.348369][T13810] netlink: 'syz.4.2115': attribute type 1 has an invalid length. [ 672.362682][T13810] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2115'. [ 672.470775][T13813] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2116'. [ 672.603531][T13813] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2116'. [ 673.081136][T13838] batman_adv: batadv0: Adding interface: dummy0 [ 673.093239][T13838] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 673.201830][T13838] batman_adv: batadv0: Interface activated: dummy0 [ 673.258599][T13839] batadv0: mtu less than device minimum [ 673.273941][T13839] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 673.286231][T13839] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 673.298218][T13839] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 673.309420][T13839] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 673.320579][T13839] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 673.331882][T13839] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 673.343072][T13839] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 673.354978][T13839] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 673.366994][T13839] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 673.788513][T13858] tipc: New replicast peer: 255.255.255.255 [ 673.797961][T13858] tipc: Enabled bearer , priority 10 [ 674.087798][T10509] usb 6-1: new high-speed USB device number 67 using dummy_hcd [ 674.291931][T10509] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 674.307747][T10509] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 674.338064][T10509] usb 6-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 674.347145][T10509] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 674.435814][T10509] usb 6-1: config 0 descriptor?? [ 674.462751][T13899] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 674.916229][T13913] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2158'. [ 674.943265][T10509] usbhid 6-1:0.0: can't add hid device: -71 [ 674.972957][T13913] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2158'. [ 674.987362][T10509] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 675.019547][T10509] usb 6-1: USB disconnect, device number 67 [ 675.040878][T13913] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2158'. [ 675.084040][T13913] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2158'. [ 675.765568][T13942] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2172'. [ 676.348984][T13968] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2184'. [ 676.378534][T13968] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2184'. [ 677.240723][T13987] netlink: 12 bytes leftover after parsing attributes in process `gtp'. [ 677.283935][T13987] netlink: 36 bytes leftover after parsing attributes in process `gtp'. [ 677.331733][T13987] bridge0: port 3(vlan2) entered blocking state [ 677.341455][ T30] kauditd_printk_skb: 110 callbacks suppressed [ 677.341471][ T30] audit: type=1326 audit(1760706860.818:3342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13990 comm="syz.4.2195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7d5b8efc9 code=0x7ffc0000 [ 677.378808][T13987] bridge0: port 3(vlan2) entered disabled state [ 677.395578][T13987] vlan2: entered allmulticast mode [ 677.418242][T13987] bridge0: entered allmulticast mode [ 677.442250][ T30] audit: type=1326 audit(1760706860.818:3343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13990 comm="syz.4.2195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7d5b8efc9 code=0x7ffc0000 [ 677.478894][T13987] vlan2: left allmulticast mode [ 677.486976][T13987] bridge0: left allmulticast mode [ 677.537319][ T30] audit: type=1326 audit(1760706860.818:3344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13990 comm="syz.4.2195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7d5b8efc9 code=0x7ffc0000 [ 677.542432][T13996] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2197'. [ 677.592512][ T30] audit: type=1326 audit(1760706860.818:3345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13990 comm="syz.4.2195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7d5b8efc9 code=0x7ffc0000 [ 677.717022][ T30] audit: type=1326 audit(1760706860.858:3346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13990 comm="syz.4.2195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa7d5b8efc9 code=0x7ffc0000 [ 677.765507][ T30] audit: type=1326 audit(1760706860.858:3347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13990 comm="syz.4.2195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7d5b8efc9 code=0x7ffc0000 [ 677.802956][T14000] lo: Caught tx_queue_len zero misconfig [ 677.820700][ T30] audit: type=1326 audit(1760706860.858:3348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13990 comm="syz.4.2195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7d5b8efc9 code=0x7ffc0000 [ 677.846720][ T30] audit: type=1326 audit(1760706860.858:3349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13990 comm="syz.4.2195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7d5b8efc9 code=0x7ffc0000 [ 677.884660][ T30] audit: type=1326 audit(1760706860.858:3350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13990 comm="syz.4.2195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7d5b8efc9 code=0x7ffc0000 [ 677.954562][ T30] audit: type=1326 audit(1760706860.858:3351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13990 comm="syz.4.2195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa7d5b8efc9 code=0x7ffc0000 [ 678.588747][T14028] xt_time: unknown flags 0xf4 [ 680.538552][T14093] __nla_validate_parse: 4 callbacks suppressed [ 680.538574][T14093] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2237'. [ 680.845739][T14102] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2242'. [ 681.435763][T14124] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2252'. [ 681.612607][T14124] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2252'. [ 682.443356][T14139] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2258'. [ 683.497631][T14167] program syz.5.2271 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 683.844301][T14184] netlink: 'syz.4.2279': attribute type 5 has an invalid length. [ 683.943601][ T30] kauditd_printk_skb: 48 callbacks suppressed [ 683.943620][ T30] audit: type=1326 audit(1760706867.418:3400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14187 comm="syz.0.2282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf12b8efc9 code=0x7ffc0000 [ 684.027648][ T30] audit: type=1326 audit(1760706867.418:3401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14187 comm="syz.0.2282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf12b8efc9 code=0x7ffc0000 [ 684.077991][ T30] audit: type=1326 audit(1760706867.418:3402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14187 comm="syz.0.2282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=79 compat=0 ip=0x7faf12b8efc9 code=0x7ffc0000 [ 684.142405][ T30] audit: type=1326 audit(1760706867.418:3403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14187 comm="syz.0.2282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf12b8efc9 code=0x7ffc0000 [ 684.165811][ T30] audit: type=1326 audit(1760706867.608:3404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14197 comm="syz.5.2286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f035c58efc9 code=0x7ffc0000 [ 684.236074][ T30] audit: type=1326 audit(1760706867.608:3405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14197 comm="syz.5.2286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f035c58efc9 code=0x7ffc0000 [ 684.271791][ T30] audit: type=1326 audit(1760706867.608:3406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14197 comm="syz.5.2286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f035c58efc9 code=0x7ffc0000 [ 684.365345][ T30] audit: type=1326 audit(1760706867.608:3407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14197 comm="syz.5.2286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f035c58efc9 code=0x7ffc0000 [ 684.405699][ T30] audit: type=1326 audit(1760706867.608:3408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14197 comm="syz.5.2286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f035c58efc9 code=0x7ffc0000 [ 684.442149][ T30] audit: type=1326 audit(1760706867.608:3409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14197 comm="syz.5.2286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f035c58efc9 code=0x7ffc0000 [ 684.645085][T14215] xt_hashlimit: max too large, truncated to 1048576 [ 684.670866][ T117] usb 4-1: new high-speed USB device number 126 using dummy_hcd [ 684.829713][ T117] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 684.862131][ T117] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 684.897058][ T117] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 684.936937][ T117] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 684.964484][ T117] usb 4-1: config 0 descriptor?? [ 685.515827][ T117] usbhid 4-1:0.0: can't add hid device: -71 [ 685.527018][ T117] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 685.549687][ T117] usb 4-1: USB disconnect, device number 126 [ 685.640348][T14246] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2298'. [ 685.651963][T14246] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2298'. [ 685.662956][T14246] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2298'. [ 685.672578][T14246] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2298'. [ 685.863198][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.869691][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.324417][T14260] dummy0: entered allmulticast mode [ 686.338066][T14260] dummy0: left allmulticast mode [ 686.606808][T14262] bridge0: port 2(bridge_slave_1) entered disabled state [ 686.614339][T14262] bridge0: port 1(bridge_slave_0) entered disabled state [ 686.859537][T14262] bridge_slave_0: left allmulticast mode [ 686.873196][T14262] bridge_slave_0: left promiscuous mode [ 686.900213][T14262] bridge0: port 1(bridge_slave_0) entered disabled state [ 686.961498][T14262] bridge_slave_1: left allmulticast mode [ 686.981839][T14262] bridge_slave_1: left promiscuous mode [ 687.002617][T14262] bridge0: port 2(bridge_slave_1) entered disabled state [ 687.055966][T14262] bond0: (slave bond_slave_0): Releasing backup interface [ 687.085077][T14262] bond0: (slave bond_slave_1): Releasing backup interface [ 687.145920][T14262] veth0_to_team: left promiscuous mode [ 687.171475][T14262] team0: Port device team_slave_0 removed [ 687.210189][T14262] team0: Port device team_slave_1 removed [ 687.240459][T14262] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 687.289660][T14262] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 687.326240][T14262] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 687.356493][T14262] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 687.405804][T14262] net_ratelimit: 10 callbacks suppressed [ 687.405833][T14262] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 687.564842][T14303] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2318'. [ 687.579470][T14303] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2318'. [ 687.617889][T14303] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2318'. [ 687.648537][T14303] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2318'. [ 687.771545][T14312] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2323'. [ 687.841046][T14312] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2323'. [ 689.042265][ T30] kauditd_printk_skb: 339 callbacks suppressed [ 689.042283][ T30] audit: type=1326 audit(1760706872.518:3749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14371 comm="syz.4.2351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7d5b8efc9 code=0x7ffc0000 [ 689.160567][ T30] audit: type=1326 audit(1760706872.518:3750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14371 comm="syz.4.2351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7d5b8efc9 code=0x7ffc0000 [ 689.205052][ T30] audit: type=1326 audit(1760706872.518:3751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14371 comm="syz.4.2351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7d5b8efc9 code=0x7ffc0000 [ 689.250432][ T30] audit: type=1326 audit(1760706872.518:3752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14371 comm="syz.4.2351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa7d5b8efc9 code=0x7ffc0000 [ 689.284167][ T30] audit: type=1326 audit(1760706872.518:3753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14371 comm="syz.4.2351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7d5b8efc9 code=0x7ffc0000 [ 689.284425][T14392] sch_tbf: peakrate 7 is lower than or equals to rate 19 ! [ 689.326959][ T30] audit: type=1326 audit(1760706872.518:3754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14371 comm="syz.4.2351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7d5b8efc9 code=0x7ffc0000 [ 689.360773][ T30] audit: type=1326 audit(1760706872.518:3755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14371 comm="syz.4.2351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7d5b8efc9 code=0x7ffc0000 [ 689.443696][ T30] audit: type=1326 audit(1760706872.518:3756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14371 comm="syz.4.2351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa7d5b8efc9 code=0x7ffc0000 [ 689.515677][ T30] audit: type=1326 audit(1760706872.518:3757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14371 comm="syz.4.2351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7d5b8efc9 code=0x7ffc0000 [ 689.558489][T14406] random: crng reseeded on system resumption [ 689.568669][ T30] audit: type=1326 audit(1760706872.518:3758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14371 comm="syz.4.2351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7d5b8efc9 code=0x7ffc0000 [ 689.635857][T14395] netlink: 'syz.1.2358': attribute type 30 has an invalid length. [ 690.247804][T14445] io-wq is not configured for unbound workers [ 691.876337][T14492] __nla_validate_parse: 9 callbacks suppressed [ 691.876357][T14492] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2394'. [ 691.899007][T14494] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2395'. [ 691.967653][T14492] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2394'. [ 692.382110][T14512] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2403'. [ 692.415562][T14512] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2403'. [ 693.338397][T14546] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2417'. [ 693.377271][T14546] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2417'. [ 693.517314][T14552] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2419'. [ 693.517340][T14552] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2419'. [ 693.517357][T14552] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2419'. [ 694.368388][ T30] kauditd_printk_skb: 210 callbacks suppressed [ 694.368405][ T30] audit: type=1326 audit(1760706877.848:3969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14588 comm="syz.4.2434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7d5b8efc9 code=0x7ffc0000 [ 694.400423][ T30] audit: type=1326 audit(1760706877.878:3970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14588 comm="syz.4.2434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7d5b8efc9 code=0x7ffc0000 [ 694.425260][ T30] audit: type=1326 audit(1760706877.898:3971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14588 comm="syz.4.2434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fa7d5b8efc9 code=0x7ffc0000 [ 694.449362][ T30] audit: type=1326 audit(1760706877.898:3972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14588 comm="syz.4.2434" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa7d5b8efc9 code=0x0 [ 695.819566][ T30] audit: type=1326 audit(1760706879.298:3973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14639 comm="syz.1.2453" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3d478efc9 code=0x7ffc0000 [ 695.885067][ T30] audit: type=1326 audit(1760706879.328:3974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14639 comm="syz.1.2453" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc3d478efc9 code=0x7ffc0000 [ 695.967615][ T30] audit: type=1326 audit(1760706879.328:3975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14639 comm="syz.1.2453" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3d478efc9 code=0x7ffc0000 [ 696.013882][ T30] audit: type=1326 audit(1760706879.328:3976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14639 comm="syz.1.2453" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3d478efc9 code=0x7ffc0000 [ 696.071816][ T30] audit: type=1326 audit(1760706879.328:3977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14639 comm="syz.1.2453" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc3d478efc9 code=0x7ffc0000 [ 696.142025][ T30] audit: type=1326 audit(1760706879.328:3978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14639 comm="syz.1.2453" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3d478efc9 code=0x7ffc0000 [ 696.242884][T14658] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 696.249434][T14658] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 696.258250][T14658] vhci_hcd vhci_hcd.0: Device attached [ 696.538930][ T43] usb 34-1: SetAddress Request (54) to port 0 [ 696.545969][ T43] usb 34-1: new SuperSpeed USB device number 54 using vhci_hcd [ 697.016820][T14671] lo: Caught tx_queue_len zero misconfig [ 697.067687][ T5922] usb 1-1: new high-speed USB device number 125 using dummy_hcd [ 697.247597][ T5922] usb 1-1: Using ep0 maxpacket: 8 [ 697.322204][ T5922] usb 1-1: unable to get BOS descriptor or descriptor too short [ 697.348113][ T5922] usb 1-1: config 9 has an invalid interface number: 5 but max is 0 [ 697.393483][ T5922] usb 1-1: config 9 has no interface number 0 [ 697.520947][ T5922] usb 1-1: config 9 interface 5 altsetting 9 endpoint 0x9 has an invalid bInterval 181, changing to 7 [ 697.587606][ T5922] usb 1-1: config 9 interface 5 has no altsetting 0 [ 698.022858][ T5922] usb 1-1: New USB device found, idVendor=06f8, idProduct=b000, bcdDevice=5d.a8 [ 698.038869][ T5922] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 698.107502][ T5922] usb 1-1: Manufacturer: 寖佛훆㩎쫨攳빶⫃๎ᅿ㝙칛Ỻꨏ쨌迀䂖雎⨔鐛⤐䣦伷❋䙃鱋쓎·寲玒咣㣉怰လ슝ꍸ㰓柱뗓邗쐳䰯ﴵ쮒퓫Ꜹ㥍Ⲯ汫酺㡟枀ᗲ騬쒋勳ꯩ౒䢳㗛씹鮤雪㬏嬺 [ 698.924683][T14694] veth0_to_bridge: entered promiscuous mode [ 699.090942][T14693] veth0_to_bridge: left promiscuous mode [ 699.393074][ T30] kauditd_printk_skb: 159 callbacks suppressed [ 699.393092][ T30] audit: type=1326 audit(1760706882.868:4138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14710 comm="syz.4.2481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7d5b8efc9 code=0x7ffc0000 [ 699.462224][ T30] audit: type=1326 audit(1760706882.898:4139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14710 comm="syz.4.2481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7d5b8efc9 code=0x7ffc0000 [ 699.518637][ T30] audit: type=1326 audit(1760706882.898:4140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14710 comm="syz.4.2481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa7d5b8efc9 code=0x7ffc0000 [ 699.546337][ T30] audit: type=1326 audit(1760706882.898:4141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14710 comm="syz.4.2481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7d5b8efc9 code=0x7ffc0000 [ 699.583651][ T30] audit: type=1326 audit(1760706882.898:4142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14710 comm="syz.4.2481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7d5b8efc9 code=0x7ffc0000 [ 699.627588][ T30] audit: type=1326 audit(1760706882.898:4143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14710 comm="syz.4.2481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa7d5b8efc9 code=0x7ffc0000 [ 699.654985][ T30] audit: type=1326 audit(1760706882.898:4144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14710 comm="syz.4.2481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7d5b8efc9 code=0x7ffc0000 [ 699.678480][ T30] audit: type=1326 audit(1760706882.908:4145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14710 comm="syz.4.2481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7d5b8efc9 code=0x7ffc0000 [ 699.713202][T14720] sctp: [Deprecated]: syz.3.2484 (pid 14720) Use of int in maxseg socket option. [ 699.713202][T14720] Use struct sctp_assoc_value instead [ 699.728624][ T30] audit: type=1326 audit(1760706882.908:4146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14710 comm="syz.4.2481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa7d5b8efc9 code=0x7ffc0000 [ 699.772598][ T30] audit: type=1326 audit(1760706882.908:4147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14710 comm="syz.4.2481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7d5b8efc9 code=0x7ffc0000 [ 700.493695][T14659] vhci_hcd: connection reset by peer [ 700.583220][T10276] vhci_hcd: stop threads [ 700.599181][ T5922] usb 1-1: USB disconnect, device number 125 [ 700.606274][T10276] vhci_hcd: release socket [ 700.631323][T10276] vhci_hcd: disconnect device [ 700.712709][T14740] netlink: 'syz.5.2493': attribute type 4 has an invalid length. [ 701.259355][T14769] __nla_validate_parse: 4 callbacks suppressed [ 701.259374][T14769] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2506'. [ 701.393956][T14776] netlink: 'syz.0.2509': attribute type 4 has an invalid length. [ 701.435994][T14769] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2506'. [ 701.617859][ T43] usb 34-1: device descriptor read/8, error -110 [ 702.009721][ T43] usb usb34-port1: attempt power cycle [ 702.050754][T14803] netlink: 'syz.5.2518': attribute type 29 has an invalid length. [ 702.212813][T14812] netlink: 'syz.4.2522': attribute type 4 has an invalid length. [ 702.502100][T14824] netlink: 64 bytes leftover after parsing attributes in process `syz.5.2527'. [ 702.527770][T14825] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2528'. [ 702.592002][T14827] vlan3: entered allmulticast mode [ 702.597168][T14827] dummy0: entered allmulticast mode [ 702.606211][ T43] usb usb34-port1: unable to enumerate USB device [ 703.113843][T14850] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2536'. [ 703.853159][T14884] netlink: 'syz.4.2552': attribute type 1 has an invalid length. [ 704.433464][ T30] kauditd_printk_skb: 144 callbacks suppressed [ 704.433481][ T30] audit: type=1326 audit(1760706887.908:4292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14905 comm="syz.5.2557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f035c58efc9 code=0x7ffc0000 [ 704.474999][ T30] audit: type=1326 audit(1760706887.938:4293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14905 comm="syz.5.2557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f035c58efc9 code=0x7ffc0000 [ 704.498885][ T30] audit: type=1326 audit(1760706887.938:4294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14905 comm="syz.5.2557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f035c58efc9 code=0x7ffc0000 [ 704.531720][ T30] audit: type=1326 audit(1760706887.938:4295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14905 comm="syz.5.2557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f035c58efc9 code=0x7ffc0000 [ 704.569609][ T30] audit: type=1326 audit(1760706887.938:4296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14905 comm="syz.5.2557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f035c58efc9 code=0x7ffc0000 [ 704.598028][ T30] audit: type=1326 audit(1760706887.938:4297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14905 comm="syz.5.2557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f035c58efc9 code=0x7ffc0000 [ 704.633091][ T30] audit: type=1326 audit(1760706887.938:4298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14905 comm="syz.5.2557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f035c58efc9 code=0x7ffc0000 [ 704.770966][ T30] audit: type=1326 audit(1760706887.938:4299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14905 comm="syz.5.2557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f035c58efc9 code=0x7ffc0000 [ 704.803240][ T30] audit: type=1326 audit(1760706887.938:4300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14905 comm="syz.5.2557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f035c58efc9 code=0x7ffc0000 [ 704.830507][T14914] atomic_op ffff888079a02998 conn xmit_atomic 0000000000000000 [ 704.919113][ T30] audit: type=1326 audit(1760706887.948:4301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14905 comm="syz.5.2557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f035c58efc9 code=0x7ffc0000 [ 705.395035][T14936] SET target dimension over the limit! [ 706.093004][T14958] ALSA: seq fatal error: cannot create timer (-22) [ 706.100569][T14928] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 706.117301][T14928] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 706.187387][T14928] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 706.195927][T14928] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 706.235846][T14928] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 706.247665][T14928] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 706.281224][T14928] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 706.293124][T14928] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 706.300409][T14928] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 706.314564][T14928] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 706.324371][T14963] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2582'. [ 706.334020][T14928] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 706.388229][T14962] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2582'. [ 706.916251][T14988] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2594'. [ 706.925689][T14988] hsr_slave_0: left promiscuous mode [ 706.941572][T14988] hsr_slave_1: left promiscuous mode [ 706.951934][T14990] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2593'. [ 706.961975][T14990] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2593'. [ 706.971139][T14990] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2593'. [ 706.981801][T14990] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2593'. [ 707.080692][T14947] syz.1.2575: vmalloc error: size 2101248, failed to allocated page array size 4104, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=syz1,mems_allowed=0-1 [ 707.115523][T14947] CPU: 0 UID: 0 PID: 14947 Comm: syz.1.2575 Not tainted syzkaller #0 PREEMPT(full) [ 707.115550][T14947] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 707.115562][T14947] Call Trace: [ 707.115571][T14947] [ 707.115580][T14947] dump_stack_lvl+0x189/0x250 [ 707.115609][T14947] ? __pfx_dump_stack_lvl+0x10/0x10 [ 707.115639][T14947] ? __pfx__printk+0x10/0x10 [ 707.115659][T14947] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 707.115680][T14947] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 707.115703][T14947] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 707.115726][T14947] warn_alloc+0x214/0x310 [ 707.115755][T14947] ? __pfx_warn_alloc+0x10/0x10 [ 707.115786][T14947] ? __get_vm_area_node+0x28f/0x300 [ 707.115808][T14947] ? hash_netiface_create+0x358/0xfe0 [ 707.115835][T14947] __vmalloc_node_range_noprof+0x690/0x12d0 [ 707.115858][T14947] ? alloc_vmap_area+0xda0/0x14c0 [ 707.115902][T14947] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 707.115923][T14947] ? hash_netiface_create+0x358/0xfe0 [ 707.115947][T14947] ? __get_vm_area_node+0x28f/0x300 [ 707.115968][T14947] ? hash_netiface_create+0x358/0xfe0 [ 707.115992][T14947] __vmalloc_node_range_noprof+0x578/0x12d0 [ 707.116013][T14947] ? hash_netiface_create+0x358/0xfe0 [ 707.116036][T14947] ? __alloc_frozen_pages_noprof+0x9f/0x370 [ 707.116086][T14947] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 707.116108][T14947] ? hash_netiface_create+0x358/0xfe0 [ 707.116133][T14947] ? rcu_is_watching+0x15/0xb0 [ 707.116161][T14947] ? hash_netiface_create+0x358/0xfe0 [ 707.116184][T14947] __kvmalloc_node_noprof+0x674/0x910 [ 707.116208][T14947] ? hash_netiface_create+0x358/0xfe0 [ 707.116229][T14947] ? __kmalloc_cache_noprof+0x3d5/0x6f0 [ 707.116249][T14947] ? hash_netiface_create+0x2fe/0xfe0 [ 707.116277][T14947] hash_netiface_create+0x358/0xfe0 [ 707.116309][T14947] ? __nla_parse+0x40/0x60 [ 707.116331][T14947] ? __pfx_hash_netiface_create+0x10/0x10 [ 707.116356][T14947] ip_set_create+0xa97/0x1940 [ 707.116381][T14947] ? ip_set_create+0x4a2/0x1940 [ 707.116415][T14947] ? __pfx_ip_set_create+0x10/0x10 [ 707.116474][T14947] nfnetlink_rcv_msg+0xb4d/0x1130 [ 707.116501][T14947] ? nfnetlink_rcv_msg+0x20d/0x1130 [ 707.116544][T14947] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 707.116565][T14947] ? kasan_save_track+0x4f/0x80 [ 707.116641][T14947] netlink_rcv_skb+0x208/0x470 [ 707.116666][T14947] ? lockdep_hardirqs_on+0x9c/0x150 [ 707.116687][T14947] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 707.116712][T14947] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 707.116750][T14947] ? bpf_lsm_capable+0x9/0x20 [ 707.116767][T14947] ? security_capable+0x7e/0x2e0 [ 707.116795][T14947] nfnetlink_rcv+0x282/0x2590 [ 707.116821][T14947] ? __dev_queue_xmit+0x27b/0x3b50 [ 707.116843][T14947] ? __dev_queue_xmit+0x1d79/0x3b50 [ 707.116862][T14947] ? kasan_save_track+0x3e/0x80 [ 707.116880][T14947] ? __kasan_slab_alloc+0x6c/0x80 [ 707.116909][T14947] ? __dev_queue_xmit+0x27b/0x3b50 [ 707.116942][T14947] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 707.116965][T14947] ? __pfx___dev_queue_xmit+0x10/0x10 [ 707.117000][T14947] ? ref_tracker_free+0x63a/0x7d0 [ 707.117020][T14947] ? __asan_memcpy+0x40/0x70 [ 707.117039][T14947] ? __pfx_ref_tracker_free+0x10/0x10 [ 707.117075][T14947] ? skb_clone+0x246/0x3a0 [ 707.117098][T14947] ? __netlink_deliver_tap+0x807/0x850 [ 707.117123][T14947] ? netlink_deliver_tap+0x2e/0x1b0 [ 707.117155][T14947] ? netlink_deliver_tap+0x2e/0x1b0 [ 707.117189][T14947] netlink_unicast+0x82f/0x9e0 [ 707.117222][T14947] ? __pfx_netlink_unicast+0x10/0x10 [ 707.117248][T14947] ? netlink_sendmsg+0x642/0xb30 [ 707.117272][T14947] ? skb_put+0x11b/0x210 [ 707.117301][T14947] netlink_sendmsg+0x805/0xb30 [ 707.117337][T14947] ? __pfx_netlink_sendmsg+0x10/0x10 [ 707.117367][T14947] ? aa_sock_msg_perm+0xf1/0x1d0 [ 707.117391][T14947] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 707.117414][T14947] ? __pfx_netlink_sendmsg+0x10/0x10 [ 707.117444][T14947] __sock_sendmsg+0x21c/0x270 [ 707.117466][T14947] ____sys_sendmsg+0x505/0x830 [ 707.117488][T14947] ? __pfx_____sys_sendmsg+0x10/0x10 [ 707.117523][T14947] ? import_iovec+0x74/0xa0 [ 707.117549][T14947] ___sys_sendmsg+0x21f/0x2a0 [ 707.117568][T14947] ? __pfx____sys_sendmsg+0x10/0x10 [ 707.117617][T14947] ? __fget_files+0x2a/0x420 [ 707.117645][T14947] ? __fget_files+0x3a0/0x420 [ 707.117678][T14947] __x64_sys_sendmsg+0x19b/0x260 [ 707.117700][T14947] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 707.117736][T14947] ? do_syscall_64+0xbe/0xfa0 [ 707.117759][T14947] do_syscall_64+0xfa/0xfa0 [ 707.117776][T14947] ? lockdep_hardirqs_on+0x9c/0x150 [ 707.117795][T14947] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 707.117815][T14947] ? clear_bhb_loop+0x60/0xb0 [ 707.117838][T14947] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 707.117857][T14947] RIP: 0033:0x7fc3d478efc9 [ 707.117875][T14947] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 707.117891][T14947] RSP: 002b:00007fc3d5582038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 707.117911][T14947] RAX: ffffffffffffffda RBX: 00007fc3d49e6090 RCX: 00007fc3d478efc9 [ 707.117927][T14947] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000006 [ 707.117939][T14947] RBP: 00007fc3d4811f91 R08: 0000000000000000 R09: 0000000000000000 [ 707.117951][T14947] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 707.117963][T14947] R13: 00007fc3d49e6128 R14: 00007fc3d49e6090 R15: 00007fc3d4b0fa28 [ 707.117996][T14947] [ 707.328140][T12082] Bluetooth: hci1: command 0x0c1a tx timeout [ 707.346256][T14947] Mem-Info: [ 707.660636][T14947] active_anon:6688 inactive_anon:0 isolated_anon:0 [ 707.660636][T14947] active_file:17349 inactive_file:40154 isolated_file:0 [ 707.660636][T14947] unevictable:768 dirty:100 writeback:0 [ 707.660636][T14947] slab_reclaimable:11976 slab_unreclaimable:125703 [ 707.660636][T14947] mapped:30951 shmem:1385 pagetables:1629 [ 707.660636][T14947] sec_pagetables:0 bounce:0 [ 707.660636][T14947] kernel_misc_reclaimable:0 [ 707.660636][T14947] free:1236374 free_pcp:17363 free_cma:0 [ 707.708587][T14947] Node 0 active_anon:26752kB inactive_anon:0kB active_file:69256kB inactive_file:160416kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:123728kB dirty:400kB writeback:0kB shmem:4004kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12768kB pagetables:6352kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 707.740786][T14947] Node 1 active_anon:0kB inactive_anon:0kB active_file:140kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:76kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:164kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 707.775208][T14947] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 707.829178][T14947] lowmem_reserve[]: 0 2501 2503 2503 2503 [ 707.853115][T14947] Node 0 DMA32 free:1025968kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:26652kB inactive_anon:0kB active_file:69256kB inactive_file:160416kB unevictable:1536kB writepending:400kB zspages:0kB present:3129332kB managed:2561596kB mlocked:0kB bounce:0kB free_pcp:67340kB local_pcp:36056kB free_cma:0kB [ 707.910011][T14947] lowmem_reserve[]: 0 0 1 1 1 [ 707.914779][T14947] Node 0 Normal free:0kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 707.966155][T14947] lowmem_reserve[]: 0 0 0 0 0 [ 707.971023][T14947] Node 1 Normal free:3904296kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:140kB inactive_file:200kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:2048kB local_pcp:2048kB free_cma:0kB [ 708.004171][T14947] lowmem_reserve[]: 0 0 0 0 0 [ 708.009119][T14947] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 708.023251][T14947] Node 0 DMA32: 3*4kB (ME) 17*8kB (ME) 15*16kB (UE) 90*32kB (ME) 93*64kB (UME) 71*128kB (UME) 26*256kB (UME) 7*512kB (UME) 4*1024kB (UME) 3*2048kB (UME) 241*4096kB (M) = 1025924kB [ 708.041282][T14947] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 708.052909][T14947] Node 1 Normal: 236*4kB (UME) 51*8kB (UME) 50*16kB (UME) 264*32kB (UME) 101*64kB (UE) 35*128kB (UE) 11*256kB (UME) 4*512kB (ME) 5*1024kB (UME) 1*2048kB (U) 945*4096kB (UM) = 3904296kB [ 708.071344][T14947] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 708.081088][T14947] Node 0 hugepages_total=3 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 708.091243][T14947] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 708.100988][T14947] Node 1 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 708.110504][T14947] 58862 total pagecache pages [ 708.115189][T14947] 0 pages in swap cache [ 708.119378][T14947] Free swap = 124996kB [ 708.123531][T14947] Total swap = 124996kB [ 708.127854][T14947] 2097051 pages RAM [ 708.131758][T14947] 0 pages HighMem/MovableOnly [ 708.136419][T14947] 424562 pages reserved [ 708.140733][T14947] 0 pages cma reserved [ 708.257845][T12082] Bluetooth: hci3: command 0x0c1a tx timeout [ 708.257856][ T5827] Bluetooth: hci2: command 0x0c1a tx timeout [ 708.337647][T12082] Bluetooth: hci0: command 0x0406 tx timeout [ 708.337697][ T5827] Bluetooth: hci4: command 0x0c1a tx timeout [ 709.206207][T15015] netlink: 5 bytes leftover after parsing attributes in process `syz.5.2606'. [ 709.218245][T15015] 0XD: renamed from gretap0 (while UP) [ 709.226779][T15015] 0XD: entered allmulticast mode [ 709.235608][T15015] A link change request failed with some changes committed already. Interface 30XD may have been left with an inconsistent configuration, please check. [ 709.377752][ T5827] Bluetooth: hci1: command 0x0c1a tx timeout [ 709.678666][T15027] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2612'. [ 709.701090][T15027] unsupported nlmsg_type 40 [ 709.739315][T15030] netlink: 'syz.5.2613': attribute type 10 has an invalid length. [ 709.781062][T15030] team0: Port device dummy0 added [ 709.808302][T15030] netlink: 'syz.5.2613': attribute type 10 has an invalid length. [ 709.870590][T15030] team0: Port device dummy0 removed [ 709.909228][T15030] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 709.927899][ T12] bond0: (slave dummy0): interface is now down [ 709.948071][ T12] bond0: (slave dummy0): interface is now down [ 710.006586][ T12] bond0: now running without any active interface! [ 710.032908][ T30] kauditd_printk_skb: 64 callbacks suppressed [ 710.032925][ T30] audit: type=1326 audit(1760706893.508:4366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15041 comm="syz.1.2619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3d478efc9 code=0x50000 [ 710.137548][ T30] audit: type=1326 audit(1760706893.508:4367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15041 comm="syz.1.2619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3d478efc9 code=0x50000 [ 710.231486][ T30] audit: type=1326 audit(1760706893.508:4368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15041 comm="syz.1.2619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3d478efc9 code=0x50000 [ 710.304900][ T30] audit: type=1326 audit(1760706893.508:4369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15041 comm="syz.1.2619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3d478efc9 code=0x50000 [ 710.337635][ T5827] Bluetooth: hci3: command 0x0c1a tx timeout [ 710.349786][ T5827] Bluetooth: hci2: command 0x0c1a tx timeout [ 710.419339][ T5827] Bluetooth: hci0: command 0x0406 tx timeout [ 710.420109][T12082] Bluetooth: hci4: command 0x0c1a tx timeout [ 710.450066][T15057] netlink: 'syz.4.2625': attribute type 1 has an invalid length. [ 710.458018][ T30] audit: type=1326 audit(1760706893.538:4370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15041 comm="syz.1.2619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3d478efc9 code=0x50000 [ 710.501662][T15061] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2625'. [ 710.548414][ T30] audit: type=1326 audit(1760706893.538:4371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15041 comm="syz.1.2619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3d478efc9 code=0x50000 [ 710.639817][ T30] audit: type=1326 audit(1760706893.538:4372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15041 comm="syz.1.2619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3d478efc9 code=0x50000 [ 710.664078][ T30] audit: type=1326 audit(1760706893.538:4373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15041 comm="syz.1.2619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3d478efc9 code=0x50000 [ 710.675425][T15057] 8021q: adding VLAN 0 to HW filter on device bond3 [ 710.694844][ T30] audit: type=1326 audit(1760706893.538:4374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15041 comm="syz.1.2619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3d478efc9 code=0x50000 [ 710.758298][ T30] audit: type=1326 audit(1760706893.538:4375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15041 comm="syz.1.2619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3d478efc9 code=0x50000 [ 710.970013][T15075] netlink: 'syz.1.2632': attribute type 21 has an invalid length. [ 711.139646][T15061] bond3 (unregistering): Released all slaves [ 711.903722][T15112] __nla_validate_parse: 4 callbacks suppressed [ 711.903736][T15112] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2646'. [ 711.957120][T15113] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2646'. [ 711.958944][T15100] bridge0: port 1(gretap0) entered blocking state [ 711.979235][T15100] bridge0: port 1(gretap0) entered disabled state [ 711.986158][T15100] gretap0: entered allmulticast mode [ 711.993937][T15100] gretap0: entered promiscuous mode [ 712.005248][T15115] gretap0: left allmulticast mode [ 712.011289][T15115] gretap0: left promiscuous mode [ 712.018237][T15115] bridge0: port 1(gretap0) entered disabled state [ 712.418264][T12082] Bluetooth: hci3: command 0x0c1a tx timeout [ 712.573093][T15138] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2657'. [ 712.648622][T15138] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2657'. [ 712.818406][T15150] netlink: 'syz.3.2662': attribute type 2 has an invalid length. [ 712.840572][T15150] netlink: 'syz.3.2662': attribute type 8 has an invalid length. [ 712.862268][T15150] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2662'. [ 712.991741][T15160] Invalid logical block size (2052) [ 713.146939][T15173] netlink: 96 bytes leftover after parsing attributes in process `syz.3.2673'. [ 713.266193][T15179] atomic_op ffff88807393d998 conn xmit_atomic 0000000000000000 [ 713.348849][T15185] sch_tbf: peakrate 7 is lower than or equals to rate 19 ! [ 713.379872][T15188] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2677'. [ 713.393952][T15191] sctp: [Deprecated]: syz.0.2678 (pid 15191) Use of int in max_burst socket option deprecated. [ 713.393952][T15191] Use struct sctp_assoc_value instead [ 713.418378][T15187] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2680'. [ 713.418731][T15188] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2677'. [ 713.480684][T15188] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2677'. [ 713.586954][T15202] --map-set only usable from mangle table [ 716.545440][ T30] kauditd_printk_skb: 103 callbacks suppressed [ 716.545458][ T30] audit: type=1326 audit(1760706900.018:4479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15333 comm="syz.3.2739" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f948e38efc9 code=0x7ffc0000 [ 716.647004][ T30] audit: type=1326 audit(1760706900.048:4480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15333 comm="syz.3.2739" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f948e38efc9 code=0x7ffc0000 [ 716.718254][ T30] audit: type=1326 audit(1760706900.048:4481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15333 comm="syz.3.2739" exe="/root/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7f948e38efc9 code=0x7ffc0000 [ 716.746282][ T30] audit: type=1326 audit(1760706900.048:4482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15333 comm="syz.3.2739" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f948e38efc9 code=0x7ffc0000 [ 716.795067][ T30] audit: type=1326 audit(1760706900.048:4483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15333 comm="syz.3.2739" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f948e38efc9 code=0x7ffc0000 [ 716.859702][T15347] x_tables: duplicate underflow at hook 2 [ 716.880546][ T30] audit: type=1326 audit(1760706900.048:4484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15333 comm="syz.3.2739" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f948e38efc9 code=0x7ffc0000 [ 716.951143][T15355] __nla_validate_parse: 9 callbacks suppressed [ 716.951161][T15355] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2747'. [ 716.957524][ T30] audit: type=1326 audit(1760706900.058:4485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15333 comm="syz.3.2739" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f948e38efc9 code=0x7ffc0000 [ 717.031202][ T30] audit: type=1326 audit(1760706900.058:4486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15333 comm="syz.3.2739" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f948e38efc9 code=0x7ffc0000 [ 717.031250][ T30] audit: type=1326 audit(1760706900.058:4487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15333 comm="syz.3.2739" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f948e38efc9 code=0x7ffc0000 [ 717.441224][ T30] audit: type=1326 audit(1760706900.918:4488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15376 comm="syz.4.2756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7d5b8efc9 code=0x7ffc0000 [ 717.521202][T15380] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2758'. [ 718.864879][T15439] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2785'. [ 719.143750][T15448] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2788'. [ 719.154065][T15448] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2788'. [ 719.167259][T15448] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2788'. [ 719.178833][T15448] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2788'. [ 719.222552][T15452] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2790'. [ 719.233980][T15452] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2790'. [ 719.700561][T15469] bond2: Unable to set peer notification delay as MII monitoring is disabled [ 719.714247][T15469] bond2 (unregistering): Released all slaves [ 719.722618][T15472] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2799'. [ 719.767205][T15472] ip6gretap0 (unregistering): left promiscuous mode [ 720.269892][T15488] 8021q: adding VLAN 0 to HW filter on device bond2 [ 720.532265][ T5908] hid-generic 0000:3000000:0000.0019: unknown main item tag 0x4 [ 720.545163][ T5908] hid-generic 0000:3000000:0000.0019: unknown main item tag 0x2 [ 720.561005][ T5908] hid-generic 0000:3000000:0000.0019: unknown main item tag 0x3 [ 720.596284][ T5908] hid-generic 0000:3000000:0000.0019: hidraw0: HID v0.00 Device [sy] on syz0 [ 720.756438][T15516] fido_id[15516]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 721.772106][ T30] kauditd_printk_skb: 97 callbacks suppressed [ 721.772123][ T30] audit: type=1326 audit(1760706905.248:4586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15568 comm="syz.4.2841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7d5b8efc9 code=0x7ffc0000 [ 721.863410][ T30] audit: type=1326 audit(1760706905.278:4587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15568 comm="syz.4.2841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7d5b8efc9 code=0x7ffc0000 [ 721.922941][ T30] audit: type=1326 audit(1760706905.288:4588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15568 comm="syz.4.2841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa7d5b8efc9 code=0x7ffc0000 [ 721.958595][T15580] loop5: detected capacity change from 0 to 7 [ 722.057974][ T30] audit: type=1326 audit(1760706905.288:4589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15568 comm="syz.4.2841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7d5b8efc9 code=0x7ffc0000 [ 722.115792][ T30] audit: type=1326 audit(1760706905.288:4590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15568 comm="syz.4.2841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa7d5b8efc9 code=0x7ffc0000 [ 722.197881][ T30] audit: type=1326 audit(1760706905.288:4591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15568 comm="syz.4.2841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7d5b8efc9 code=0x7ffc0000 [ 722.307981][ T30] audit: type=1326 audit(1760706905.288:4592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15568 comm="syz.4.2841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=59 compat=0 ip=0x7fa7d5b8efc9 code=0x7ffc0000 [ 722.331098][ T30] audit: type=1326 audit(1760706905.288:4593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15568 comm="syz.4.2841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7d5b8efc9 code=0x7ffc0000 [ 722.449920][ T30] audit: type=1326 audit(1760706905.428:4594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15578 comm="syz.1.2846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3d478efc9 code=0x7ffc0000 [ 722.505057][ T30] audit: type=1326 audit(1760706905.428:4595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15578 comm="syz.1.2846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3d478efc9 code=0x7ffc0000 [ 722.584289][T15580] Dev loop5: unable to read RDB block 7 [ 722.597580][T15581] support for cryptoloop has been removed. Use dm-crypt instead. [ 722.643662][T15580] loop5: unable to read partition table [ 722.659914][T15580] loop5: partition table beyond EOD, truncated [ 722.669962][T15580] loop_reread_partitions: partition scan of loop5 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 722.951405][T15604] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(4) [ 722.957957][T15604] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 722.984799][T15604] vhci_hcd vhci_hcd.0: Device attached [ 723.022697][T15606] vhci_hcd: connection closed [ 723.028783][ T13] vhci_hcd: stop threads [ 723.063778][ T13] vhci_hcd: release socket [ 723.087904][ T13] vhci_hcd: disconnect device [ 723.273157][T15618] __nla_validate_parse: 10 callbacks suppressed [ 723.273178][T15618] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2863'. [ 723.342757][T15624] netlink: 'syz.1.2865': attribute type 10 has an invalid length. [ 723.374222][T15624] macvlan1: entered allmulticast mode [ 723.381114][T15624] veth1_vlan: entered allmulticast mode [ 723.420586][T15624] team0: Device macvlan1 is up. Set it down before adding it as a team port [ 723.606037][T15636] macvtap0: entered promiscuous mode [ 723.613071][T15636] macvtap0: left promiscuous mode [ 723.889640][T15650] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2877'. [ 724.215645][T15660] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2880'. [ 724.224898][T15660] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2880'. [ 724.234017][T15660] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2880'. [ 724.257614][T15660] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2880'. [ 725.739756][T15698] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2897'. [ 725.917848][T15705] xt_recent: hitcount (4294901760) is larger than allowed maximum (65535) [ 726.131940][T15719] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2907'. [ 726.844947][T15757] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2923'. [ 727.016395][ T30] kauditd_printk_skb: 139 callbacks suppressed [ 727.016413][ T30] audit: type=1326 audit(1760706910.488:4735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15764 comm="syz.1.2928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3d478efc9 code=0x7ffc0000 [ 727.061592][T15767] netlink: 'wޣ': attribute type 39 has an invalid length. [ 727.077708][ T30] audit: type=1326 audit(1760706910.528:4736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15764 comm="syz.1.2928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7fc3d478efc9 code=0x7ffc0000 [ 727.100637][ T30] audit: type=1326 audit(1760706910.528:4737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15764 comm="syz.1.2928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3d478efc9 code=0x7ffc0000 [ 727.124555][ T30] audit: type=1326 audit(1760706910.528:4738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15764 comm="syz.1.2928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc3d478efc9 code=0x7ffc0000 [ 727.148955][ T30] audit: type=1326 audit(1760706910.528:4739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15764 comm="syz.1.2928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3d478efc9 code=0x7ffc0000 [ 727.215189][ T30] audit: type=1326 audit(1760706910.538:4740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15764 comm="syz.1.2928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc3d478efc9 code=0x7ffc0000 [ 727.245846][ T30] audit: type=1326 audit(1760706910.538:4741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15764 comm="syz.1.2928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3d478efc9 code=0x7ffc0000 [ 727.273721][ T30] audit: type=1326 audit(1760706910.538:4742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15764 comm="syz.1.2928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc3d478efc9 code=0x7ffc0000 [ 727.303021][ T30] audit: type=1326 audit(1760706910.538:4743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15764 comm="syz.1.2928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3d478efc9 code=0x7ffc0000 [ 727.330955][ T30] audit: type=1326 audit(1760706910.538:4744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15764 comm="syz.1.2928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc3d478efc9 code=0x7ffc0000 [ 727.561551][T15785] pimreg: entered allmulticast mode [ 727.580756][T15785] pimreg: left allmulticast mode [ 727.857197][ T5922] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 727.880065][ T5922] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 727.902555][ T5922] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 727.920354][ T5922] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 727.935048][ T5922] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 727.944401][ T5922] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 727.952259][ T5922] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 727.960368][ T5922] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 727.968269][ T5922] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 727.984804][ T5922] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 728.000214][ T5922] hid-generic 0000:0000:0000.001A: hidraw0: HID v0.00 Device [sy] on syz0 [ 728.170373][T15808] fido_id[15808]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 728.853430][T15836] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2960'. [ 729.031502][T15840] netlink: 444 bytes leftover after parsing attributes in process `syz.5.2962'. [ 729.041304][T15838] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2961'. [ 729.094817][T15840] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2962'. [ 729.312943][ T5827] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 729.328626][ T5827] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 729.338477][ T5827] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 729.346508][ T5827] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 729.357298][ T5827] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 729.370733][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 729.451060][T15849] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 729.705936][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 729.901619][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 730.558069][T15856] chnl_net:caif_netlink_parms(): no params data found [ 730.970039][T15900] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2981'. [ 730.981538][ T12] bridge_slave_1: left allmulticast mode [ 730.987213][ T12] bridge_slave_1: left promiscuous mode [ 731.043297][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 731.136342][ T12] bridge_slave_0: left allmulticast mode [ 731.172888][ T12] bridge_slave_0: left promiscuous mode [ 731.215899][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 731.458089][T12082] Bluetooth: hci4: command tx timeout [ 731.774705][T15932] netlink: 492 bytes leftover after parsing attributes in process `syz.3.2992'. [ 731.912986][T15940] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2996'. [ 731.926567][T15940] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2996'. [ 732.086981][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 732.098415][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 732.108564][ T12] bond0 (unregistering): Released all slaves [ 732.226851][ T12] bond1 (unregistering): Released all slaves [ 732.335422][ T12] bond2 (unregistering): Released all slaves [ 732.462383][T15952] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3000'. [ 732.490405][T15952] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3000'. [ 732.576215][T15856] bridge0: port 1(bridge_slave_0) entered blocking state [ 732.599226][T15856] bridge0: port 1(bridge_slave_0) entered disabled state [ 732.606472][T15856] bridge_slave_0: entered allmulticast mode [ 732.630390][T15856] bridge_slave_0: entered promiscuous mode [ 732.679837][T15856] bridge0: port 2(bridge_slave_1) entered blocking state [ 732.703997][T15856] bridge0: port 2(bridge_slave_1) entered disabled state [ 732.737744][T15856] bridge_slave_1: entered allmulticast mode [ 732.745524][T15856] bridge_slave_1: entered promiscuous mode [ 732.977211][ T30] kauditd_printk_skb: 142 callbacks suppressed [ 732.977228][ T30] audit: type=1326 audit(1760706916.448:4887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15969 comm="syz.5.3009" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f035c58efc9 code=0x7ffc0000 [ 733.034246][ T30] audit: type=1326 audit(1760706916.448:4888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15969 comm="syz.5.3009" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f035c58efc9 code=0x7ffc0000 [ 733.057414][ T30] audit: type=1326 audit(1760706916.458:4889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15969 comm="syz.5.3009" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f035c58efc9 code=0x7ffc0000 [ 733.069281][T15856] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 733.114490][ T30] audit: type=1326 audit(1760706916.458:4890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15969 comm="syz.5.3009" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f035c58efc9 code=0x7ffc0000 [ 733.137594][ T30] audit: type=1326 audit(1760706916.458:4891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15969 comm="syz.5.3009" exe="/root/syz-executor" sig=0 arch=c000003e syscall=52 compat=0 ip=0x7f035c58efc9 code=0x7ffc0000 [ 733.152384][T15856] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 733.163098][ T30] audit: type=1326 audit(1760706916.458:4892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15969 comm="syz.5.3009" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f035c58efc9 code=0x7ffc0000 [ 733.226654][ T30] audit: type=1326 audit(1760706916.458:4893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15969 comm="syz.5.3009" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f035c58efc9 code=0x7ffc0000 [ 733.312249][ T30] audit: type=1326 audit(1760706916.458:4894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15969 comm="syz.5.3009" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f035c58efc9 code=0x7ffc0000 [ 733.338170][ T30] audit: type=1326 audit(1760706916.458:4895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15969 comm="syz.5.3009" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f035c58efc9 code=0x7ffc0000 [ 733.361077][ T30] audit: type=1326 audit(1760706916.458:4896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15969 comm="syz.5.3009" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f035c58efc9 code=0x7ffc0000 [ 733.542760][T12082] Bluetooth: hci4: command tx timeout [ 733.554851][T15856] team0: Port device team_slave_0 added [ 733.577226][T15856] team0: Port device team_slave_1 added [ 733.786996][T15856] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 733.833224][T15856] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 733.894533][T15856] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 733.988367][T15856] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 734.006409][T15856] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 734.035694][T16008] __nla_validate_parse: 3 callbacks suppressed [ 734.035710][T16008] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3019'. [ 734.061116][T15856] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 734.085352][T16008] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 734.095261][T16008] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 734.107394][T16008] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 734.127882][T16008] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 734.635280][T15856] hsr_slave_0: entered promiscuous mode [ 734.686951][T15856] hsr_slave_1: entered promiscuous mode [ 734.710173][T15856] debugfs: 'hsr0' already exists in 'hsr' [ 734.738376][T15856] Cannot create hsr debugfs directory [ 735.258563][T16039] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3030'. [ 735.341159][T16039] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3030'. [ 735.619362][T12082] Bluetooth: hci4: command tx timeout [ 735.669927][T16054] netlink: 'syz.4.3035': attribute type 6 has an invalid length. [ 735.805942][T16061] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3037'. [ 735.832373][T16061] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3037'. [ 736.114581][T16072] netlink: 'wޣ': attribute type 4 has an invalid length. [ 736.161056][T16072] netlink: 152 bytes leftover after parsing attributes in process `wޣ'. [ 736.206145][ T12] hsr_slave_0: left promiscuous mode [ 736.216993][ T12] hsr_slave_1: left promiscuous mode [ 736.227660][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 736.246588][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 736.281786][ T12] veth1_vlan: left promiscuous mode [ 736.777030][ T12] team0 (unregistering): Port device team_slave_1 removed [ 736.825680][ T12] team0 (unregistering): Port device team_slave_0 removed [ 737.132067][ T12] team0 (unregistering): Port device dummy0 removed [ 737.327379][T16072] .`: renamed from bond0 (while UP) [ 737.697809][T12082] Bluetooth: hci4: command tx timeout [ 737.921710][T15856] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 737.950336][T15856] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 738.004642][T15856] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 738.033613][T15856] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 738.071642][ T12] IPVS: stop unused estimator thread 0... [ 738.316340][T15856] 8021q: adding VLAN 0 to HW filter on device bond0 [ 738.341738][T15856] 8021q: adding VLAN 0 to HW filter on device team0 [ 738.355675][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 738.362963][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 738.422591][ T1158] bridge0: port 2(bridge_slave_1) entered blocking state [ 738.429814][ T1158] bridge0: port 2(bridge_slave_1) entered forwarding state [ 738.621232][T16136] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3060'. [ 738.667238][T15856] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 738.690997][T16136] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3060'. [ 738.819422][T15856] veth0_vlan: entered promiscuous mode [ 738.853288][T15856] veth1_vlan: entered promiscuous mode [ 738.983740][T15856] veth0_macvtap: entered promiscuous mode [ 739.031561][T15856] veth1_macvtap: entered promiscuous mode [ 739.283680][T15856] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 739.320795][T15856] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 739.340521][T10276] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 739.369003][T10276] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 739.403217][T10276] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 739.433157][T10276] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 739.626116][T16168] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3069'. [ 739.655674][ T1158] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 739.659503][T16168] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3069'. [ 739.678445][ T1158] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 739.818676][T10276] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 739.837240][T10276] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 740.083924][T16189] netlink: 104 bytes leftover after parsing attributes in process `syz.5.3075'. [ 740.271672][T16193] loop7: detected capacity change from 0 to 16384 [ 740.348563][T16195] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3078'. [ 740.475954][ C0] blk_print_req_error: 30 callbacks suppressed [ 740.475975][ C0] I/O error, dev loop7, sector 16128 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 740.482326][T16199] loop7: detected capacity change from 16384 to 0 [ 740.492198][ C0] I/O error, dev loop7, sector 10496 op 0x0:(READ) flags 0x80700 phys_seg 2 prio class 2 [ 740.492316][ C0] I/O error, dev loop7, sector 10752 op 0x0:(READ) flags 0x80700 phys_seg 2 prio class 2 [ 740.847766][T16209] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3084'. [ 740.928362][T16212] tipc: Enabled bearer , priority 10 [ 741.309484][T16226] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3090'. [ 741.596291][ T5827] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 741.609022][ T5827] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 741.622799][ T5827] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 741.632206][ T5827] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 741.640245][ T5827] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 741.818772][T16247] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3098'. [ 741.829101][T16247] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3098'. [ 741.854615][T16247] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3098'. [ 741.892555][T16247] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3098'. [ 742.372337][T16242] chnl_net:caif_netlink_parms(): no params data found [ 742.544328][T16242] bridge0: port 1(bridge_slave_0) entered blocking state [ 742.552519][T16242] bridge0: port 1(bridge_slave_0) entered disabled state [ 742.559897][T16242] bridge_slave_0: entered allmulticast mode [ 742.568900][T16242] bridge_slave_0: entered promiscuous mode [ 742.579991][T16242] bridge0: port 2(bridge_slave_1) entered blocking state [ 742.587232][T16242] bridge0: port 2(bridge_slave_1) entered disabled state [ 742.595134][T16242] bridge_slave_1: entered allmulticast mode [ 742.609327][T16242] bridge_slave_1: entered promiscuous mode [ 742.684847][T16242] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 742.725444][T16242] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 742.808525][T16242] team0: Port device team_slave_0 added [ 742.824026][T16242] team0: Port device team_slave_1 added [ 742.882490][T16242] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 742.889781][T16242] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 742.917909][T16242] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 742.932161][T16242] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 742.939242][T16242] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 742.966403][T16242] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 742.977544][ T30] kauditd_printk_skb: 81 callbacks suppressed [ 742.977562][ T30] audit: type=1326 audit(1760706926.448:4978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16289 comm="syz.3.3115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f948e38efc9 code=0x7ffc0000 [ 743.021295][ T30] audit: type=1326 audit(1760706926.448:4979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16289 comm="syz.3.3115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f948e38efc9 code=0x7ffc0000 [ 743.057968][ T30] audit: type=1326 audit(1760706926.448:4980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16289 comm="syz.3.3115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f948e38efc9 code=0x7ffc0000 [ 743.096272][ T30] audit: type=1326 audit(1760706926.448:4981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16289 comm="syz.3.3115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f948e38efc9 code=0x7ffc0000 [ 743.129051][T16242] hsr_slave_0: entered promiscuous mode [ 743.135972][T16242] hsr_slave_1: entered promiscuous mode [ 743.141777][ T30] audit: type=1326 audit(1760706926.448:4982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16289 comm="syz.3.3115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f948e38efc9 code=0x7ffc0000 [ 743.182775][ T30] audit: type=1326 audit(1760706926.448:4983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16289 comm="syz.3.3115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f948e38efc9 code=0x7ffc0000 [ 743.206899][ T30] audit: type=1326 audit(1760706926.448:4984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16289 comm="syz.3.3115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f948e38efc9 code=0x7ffc0000 [ 743.233678][ T30] audit: type=1326 audit(1760706926.448:4985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16289 comm="syz.3.3115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f948e38efc9 code=0x7ffc0000 [ 743.260783][ T30] audit: type=1326 audit(1760706926.448:4986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16289 comm="syz.3.3115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f948e38efc9 code=0x7ffc0000 [ 743.284581][ T30] audit: type=1326 audit(1760706926.448:4987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16289 comm="syz.3.3115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f948e38efc9 code=0x7ffc0000 [ 743.700695][ T5827] Bluetooth: hci3: command tx timeout [ 743.712732][T16242] bond0: (slave netdevsim0): Releasing backup interface [ 743.942517][T16320] tipc: Enabled bearer , priority 0 [ 743.952309][T16320] syzkaller0: entered promiscuous mode [ 743.959410][T16320] syzkaller0: entered allmulticast mode [ 743.966404][T16322] syzkaller1: entered promiscuous mode [ 743.973838][T16322] syzkaller1: entered allmulticast mode [ 744.027351][T16242] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 744.040942][T16242] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 744.058037][T16320] tipc: Resetting bearer [ 744.067759][T16242] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 744.085877][T16242] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 744.102058][T16319] tipc: Resetting bearer [ 744.124268][T16319] tipc: Disabling bearer [ 744.262986][T16242] 8021q: adding VLAN 0 to HW filter on device bond0 [ 744.314380][T16242] 8021q: adding VLAN 0 to HW filter on device team0 [ 744.360063][ T1168] bridge0: port 1(bridge_slave_0) entered blocking state [ 744.367233][ T1168] bridge0: port 1(bridge_slave_0) entered forwarding state [ 744.403635][ T2971] bridge0: port 2(bridge_slave_1) entered blocking state [ 744.410856][ T2971] bridge0: port 2(bridge_slave_1) entered forwarding state [ 744.518313][T16242] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 744.572453][T16242] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 744.616055][T16242] veth0_vlan: entered promiscuous mode [ 744.635177][T16242] veth1_vlan: entered promiscuous mode [ 744.714754][T16242] veth0_macvtap: entered promiscuous mode [ 744.733407][T16242] veth1_macvtap: entered promiscuous mode [ 744.788823][T16242] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 744.807927][T16242] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 744.835198][ T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 744.863944][ T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 744.891349][ T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 744.912393][ T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 745.037369][T16366] __nla_validate_parse: 6 callbacks suppressed [ 745.037388][T16366] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3146'. [ 745.076892][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 745.099013][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 745.182536][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 745.205697][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 745.213609][T16372] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3150'. [ 745.234146][T16372] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3150'. [ 745.778642][ T5827] Bluetooth: hci3: command tx timeout [ 745.986023][T12082] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 745.995961][T12082] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 746.006709][T12082] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 746.007678][T16395] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3159'. [ 746.048105][T12082] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 746.057739][T12082] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 746.104445][T16395] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3159'. [ 746.858262][T16399] chnl_net:caif_netlink_parms(): no params data found [ 747.107059][T16399] bridge0: port 1(bridge_slave_0) entered blocking state [ 747.117146][T16399] bridge0: port 1(bridge_slave_0) entered disabled state [ 747.125472][T16399] bridge_slave_0: entered allmulticast mode [ 747.149116][T16399] bridge_slave_0: entered promiscuous mode [ 747.163723][T16443] netlink: 'syz.4.3177': attribute type 10 has an invalid length. [ 747.181648][T16443] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 747.192264][T16443] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 747.220990][T16399] bridge0: port 2(bridge_slave_1) entered blocking state [ 747.222370][T16445] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3178'. [ 747.229263][T16399] bridge0: port 2(bridge_slave_1) entered disabled state [ 747.245275][T16399] bridge_slave_1: entered allmulticast mode [ 747.276494][T16399] bridge_slave_1: entered promiscuous mode [ 747.303054][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.310119][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.434335][T16399] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 747.453764][T16449] tipc: Started in network mode [ 747.459101][T16449] tipc: Node identity 4ac3343a7f44, cluster identity 4711 [ 747.466375][T16449] tipc: Enabled bearer , priority 0 [ 747.497152][T16449] syzkaller0: entered promiscuous mode [ 747.504086][T16449] syzkaller0: entered allmulticast mode [ 747.521188][T16399] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 747.638829][T16449] tipc: Resetting bearer [ 747.648877][T16399] team0: Port device team_slave_0 added [ 747.674539][T16446] tipc: Resetting bearer [ 747.717175][T16459] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3185'. [ 747.734935][T16459] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3185'. [ 747.745159][T16459] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3185'. [ 747.776576][T16446] tipc: Disabling bearer [ 747.795275][T16399] team0: Port device team_slave_1 added [ 747.858411][T12082] Bluetooth: hci3: command tx timeout [ 747.873987][T16399] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 747.886618][T16399] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 747.915533][T16399] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 747.932576][T16399] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 747.948557][T16399] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 747.975687][T16468] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3189'. [ 747.987529][T16399] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 748.028345][ T30] kauditd_printk_skb: 50 callbacks suppressed [ 748.028362][ T30] audit: type=1326 audit(1760706931.498:5038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16471 comm="syz.5.3190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f035c58efc9 code=0x7ffc0000 [ 748.094823][ T30] audit: type=1326 audit(1760706931.498:5039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16471 comm="syz.5.3190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f035c58efc9 code=0x7ffc0000 [ 748.126971][T12082] Bluetooth: hci5: command tx timeout [ 748.146623][ T30] audit: type=1326 audit(1760706931.498:5040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16471 comm="syz.5.3190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f035c58efc9 code=0x7ffc0000 [ 748.171986][ T30] audit: type=1326 audit(1760706931.498:5041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16471 comm="syz.5.3190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f035c58efc9 code=0x7ffc0000 [ 748.195159][ T30] audit: type=1326 audit(1760706931.498:5042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16471 comm="syz.5.3190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f035c58efc9 code=0x7ffc0000 [ 748.218151][ T30] audit: type=1326 audit(1760706931.498:5043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16471 comm="syz.5.3190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f035c58efc9 code=0x7ffc0000 [ 748.242735][ T30] audit: type=1326 audit(1760706931.508:5044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16471 comm="syz.5.3190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f035c58efc9 code=0x7ffc0000 [ 748.265672][ T30] audit: type=1326 audit(1760706931.508:5045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16471 comm="syz.5.3190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f035c58efc9 code=0x7ffc0000 [ 748.337368][ T30] audit: type=1326 audit(1760706931.508:5046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16471 comm="syz.5.3190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f035c58efc9 code=0x7ffc0000 [ 748.361509][ T30] audit: type=1326 audit(1760706931.508:5047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16471 comm="syz.5.3190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f035c58efc9 code=0x7ffc0000 [ 748.397151][T16399] hsr_slave_0: entered promiscuous mode [ 748.429976][T16399] hsr_slave_1: entered promiscuous mode [ 748.443813][T16399] debugfs: 'hsr0' already exists in 'hsr' [ 748.450906][T16399] Cannot create hsr debugfs directory [ 748.860995][T16496] syzkaller1: entered promiscuous mode [ 748.866508][T16496] syzkaller1: entered allmulticast mode [ 749.082697][T16399] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 749.107628][T16399] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 749.274983][T16500] team0: Port device team_slave_1 removed [ 749.391118][T16399] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 749.403619][T16399] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 749.581536][T16399] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 749.607889][T16399] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 749.751380][T16399] bond0: (slave netdevsim0): Releasing backup interface [ 749.782390][T16399] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 749.795719][T16399] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 749.937931][T12082] Bluetooth: hci3: command tx timeout [ 749.939729][T16544] syzkaller0: entered promiscuous mode [ 749.949158][T16544] syzkaller0: entered allmulticast mode [ 750.182085][T12082] Bluetooth: hci5: command tx timeout [ 750.325585][T16399] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 750.381141][T16399] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 750.430015][T16399] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 750.493940][T16399] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 750.653824][T16586] __nla_validate_parse: 10 callbacks suppressed [ 750.653843][T16586] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3240'. [ 750.692538][T16399] 8021q: adding VLAN 0 to HW filter on device bond0 [ 750.744093][T16586] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3240'. [ 750.996750][T16594] lo: entered allmulticast mode [ 751.002675][T16594] tunl0: entered allmulticast mode [ 751.008310][T16594] gre0: entered allmulticast mode [ 751.013513][T16594] gretap0: entered allmulticast mode [ 751.020034][T16594] erspan0: entered allmulticast mode [ 751.025554][T16594] ip_vti0: entered allmulticast mode [ 751.037159][T16594] ip6_vti0: entered allmulticast mode [ 751.043082][T16594] sit0: entered allmulticast mode [ 751.048516][T16594] ip6tnl0: entered allmulticast mode [ 751.053934][T16594] ip6gre0: entered allmulticast mode [ 751.059771][T16594] ip6gretap0: entered allmulticast mode [ 751.065448][T16594] bridge0: entered allmulticast mode [ 751.071086][T16594] vcan0: entered allmulticast mode [ 751.076370][T16594] bond0: entered allmulticast mode [ 751.082141][T16594] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 751.089889][T16594] team0: entered allmulticast mode [ 751.095512][T16594] dummy0: entered allmulticast mode [ 751.101147][T16594] nlmon0: entered allmulticast mode [ 751.106513][T16594] caif0: entered allmulticast mode [ 751.112028][T16594] batadv0: entered allmulticast mode [ 751.117489][T16594] vxcan0: entered allmulticast mode [ 751.122807][T16594] vxcan1: entered allmulticast mode [ 751.128429][T16594] veth0: entered allmulticast mode [ 751.133755][T16594] veth1: entered allmulticast mode [ 751.139729][T16594] wg0: entered allmulticast mode [ 751.145246][T16594] wg1: entered allmulticast mode [ 751.150544][T16594] wg2: entered allmulticast mode [ 751.155752][T16594] veth0_to_bridge: entered allmulticast mode [ 751.162052][T16594] bridge_slave_0: entered allmulticast mode [ 751.168253][T16594] veth1_to_bridge: entered allmulticast mode [ 751.174386][T16594] bridge_slave_1: entered allmulticast mode [ 751.180512][T16594] veth0_to_bond: entered allmulticast mode [ 751.186498][T16594] bond_slave_0: entered allmulticast mode [ 751.192769][T16594] veth1_to_bond: entered allmulticast mode [ 751.199174][T16594] bond_slave_1: entered allmulticast mode [ 751.205048][T16594] veth0_to_team: entered allmulticast mode [ 751.211444][T16594] team_slave_0: entered allmulticast mode [ 751.217305][T16594] veth1_to_team: entered allmulticast mode [ 751.223722][T16594] team_slave_1: entered allmulticast mode [ 751.229841][T16594] veth0_to_batadv: entered allmulticast mode [ 751.236012][T16594] batadv_slave_0: entered allmulticast mode [ 751.242205][T16594] veth1_to_batadv: entered allmulticast mode [ 751.249371][T16594] batadv_slave_1: entered allmulticast mode [ 751.255412][T16594] xfrm0: entered allmulticast mode [ 751.260791][T16594] veth0_to_hsr: entered allmulticast mode [ 751.266688][T16594] hsr_slave_0: entered allmulticast mode [ 751.273162][T16594] veth1_to_hsr: entered allmulticast mode [ 751.288393][T16594] hsr_slave_1: entered allmulticast mode [ 751.295732][T16594] hsr0: entered allmulticast mode [ 751.319088][T16594] veth1_virt_wifi: entered allmulticast mode [ 751.336064][T16594] veth0_virt_wifi: entered allmulticast mode [ 751.356420][T16594] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 751.368243][T16594] veth1_vlan: entered allmulticast mode [ 751.381847][T16594] veth0_vlan: entered allmulticast mode [ 751.417784][T16594] vlan0: entered allmulticast mode [ 751.424210][T16594] : entered allmulticast mode [ 751.431997][T16594] macvlan0: entered allmulticast mode [ 751.448625][T16594] macvlan1: entered allmulticast mode [ 751.462075][T16594] ipvlan0: entered allmulticast mode [ 751.470542][T16594] ipvlan1: entered allmulticast mode [ 751.477129][T16594] veth1_macvtap: entered allmulticast mode [ 751.485717][T16594] veth0_macvtap: entered allmulticast mode [ 751.499106][T16594] macvtap0: entered allmulticast mode [ 751.518831][T16594] macsec0: entered allmulticast mode [ 751.539165][T16594] geneve0: entered allmulticast mode [ 751.558144][T16594] geneve1: entered allmulticast mode [ 751.572328][T16594] netdevsim netdevsim3 netdevsim1: entered allmulticast mode [ 751.598231][T16594] netdevsim netdevsim3 netdevsim2: entered allmulticast mode [ 751.615387][T16594] netdevsim netdevsim3 netdevsim3: entered allmulticast mode [ 751.633554][T16594] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode [ 751.647673][T16594] syztnl2: entered allmulticast mode [ 751.653108][T16594] mac80211_hwsim hwsim7 syzkaler0: entered allmulticast mode [ 751.661948][T16594] bridge1: entered allmulticast mode [ 751.667411][T16594] mac80211_hwsim hwsim18 wlan2: entered allmulticast mode [ 751.674901][T16594] mac80211_hwsim hwsim19 wlan3: entered allmulticast mode [ 751.683840][T16594] mac80211_hwsim hwsim29 wlan4: entered allmulticast mode [ 751.692977][T16594] bond1: entered allmulticast mode [ 751.701224][T16594] gre1: entered allmulticast mode [ 751.706545][T16594] mac80211_hwsim hwsim31 wlan5: entered allmulticast mode [ 751.714452][T16594] mac80211_hwsim hwsim6 veth1_to_bod: entered allmulticast mode [ 751.723150][T16594] bond2: entered allmulticast mode [ 751.728342][T16594] ip6erspan0: entered allmulticast mode [ 751.734623][T16594] ip6erspan0: left promiscuous mode [ 751.741860][T16594] bond3: entered allmulticast mode [ 751.747258][T16594] bond4: entered allmulticast mode [ 751.791750][ T1158] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 751.808898][T16399] 8021q: adding VLAN 0 to HW filter on device team0 [ 751.820185][ T1158] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 751.867843][ T1158] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 751.904626][ T1158] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 751.921786][ T2988] bridge0: port 1(bridge_slave_0) entered blocking state [ 751.928999][ T2988] bridge0: port 1(bridge_slave_0) entered forwarding state [ 751.962310][ T2988] bridge0: port 2(bridge_slave_1) entered blocking state [ 751.969519][ T2988] bridge0: port 2(bridge_slave_1) entered forwarding state [ 752.042917][T16610] tipc: Started in network mode [ 752.057939][T16610] tipc: Node identity c279cbd371b8, cluster identity 4711 [ 752.088411][T16610] tipc: Enabled bearer , priority 0 [ 752.096050][T16610] syzkaller0: entered promiscuous mode [ 752.121974][T16610] syzkaller0: entered allmulticast mode [ 752.257694][T12082] Bluetooth: hci5: command tx timeout [ 752.279028][T16615] tipc: Resetting bearer [ 752.316721][T16609] tipc: Resetting bearer [ 752.416243][T16609] tipc: Disabling bearer [ 752.531145][T16399] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 752.649527][T16399] veth0_vlan: entered promiscuous mode [ 752.672255][T16399] veth1_vlan: entered promiscuous mode [ 752.691856][T16638] netlink: 48 bytes leftover after parsing attributes in process `syz.5.3264'. [ 752.743930][T16399] veth0_macvtap: entered promiscuous mode [ 752.763383][T16399] veth1_macvtap: entered promiscuous mode [ 752.811600][T16399] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 752.853201][T16644] netlink: 'syz.5.3267': attribute type 153 has an invalid length. [ 752.854042][T16399] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 752.906451][ T2971] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 752.952049][ T2971] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 752.986800][ T2971] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 753.010092][ T2971] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 753.121768][ T2988] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 753.155756][ T2988] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 753.239947][ T2971] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 753.283059][ T2971] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 753.294583][ T30] kauditd_printk_skb: 161 callbacks suppressed [ 753.294600][ T30] audit: type=1326 audit(1760706936.768:5209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16659 comm="syz.4.3275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae6758efc9 code=0x7ffc0000 [ 753.409766][ T30] audit: type=1326 audit(1760706936.828:5210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16659 comm="syz.4.3275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fae6758efc9 code=0x7ffc0000 [ 753.491272][ T30] audit: type=1326 audit(1760706936.828:5211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16659 comm="syz.4.3275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae6758efc9 code=0x7ffc0000 [ 753.579486][ T30] audit: type=1326 audit(1760706936.828:5212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16659 comm="syz.4.3275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae6758efc9 code=0x7ffc0000 [ 753.690491][ T30] audit: type=1326 audit(1760706936.828:5213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16659 comm="syz.4.3275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fae6758efc9 code=0x7ffc0000 [ 753.737033][ T30] audit: type=1326 audit(1760706936.828:5214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16659 comm="syz.4.3275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae6758efc9 code=0x7ffc0000 [ 753.781710][ T30] audit: type=1326 audit(1760706936.828:5215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16659 comm="syz.4.3275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae6758efc9 code=0x7ffc0000 [ 753.866375][ T30] audit: type=1326 audit(1760706936.828:5216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16659 comm="syz.4.3275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7fae6758efc9 code=0x7ffc0000 [ 753.936368][ T30] audit: type=1326 audit(1760706936.828:5217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16659 comm="syz.4.3275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae6758efc9 code=0x7ffc0000 [ 753.963748][ T30] audit: type=1326 audit(1760706936.828:5218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16659 comm="syz.4.3275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae6758efc9 code=0x7ffc0000 [ 754.126899][T16698] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3290'. [ 754.152958][T16698] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3290'. [ 754.189151][T16701] tipc: Started in network mode [ 754.207326][T16701] tipc: Node identity ea1063251e79, cluster identity 4711 [ 754.241640][T16701] tipc: Enabled bearer , priority 0 [ 754.257215][T16703] syzkaller0: entered promiscuous mode [ 754.273260][T16703] syzkaller0: entered allmulticast mode [ 754.302507][T16701] tipc: Resetting bearer [ 754.336307][T16699] tipc: Resetting bearer [ 754.342636][T12082] Bluetooth: hci5: command tx timeout [ 754.488196][T16699] tipc: Disabling bearer [ 754.649290][ T5827] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 754.661160][ T5827] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 754.671428][ T5827] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 754.685431][ T5827] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 754.694054][ T5827] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 755.128553][T16726] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3302'. [ 755.185238][T16726] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3302'. [ 755.303575][T16715] chnl_net:caif_netlink_parms(): no params data found [ 755.321929][T16732] openvswitch: netlink: IP tunnel dst address not specified [ 755.648557][T16715] bridge0: port 1(bridge_slave_0) entered blocking state [ 755.655880][T16715] bridge0: port 1(bridge_slave_0) entered disabled state [ 755.663441][T16715] bridge_slave_0: entered allmulticast mode [ 755.695058][T16715] bridge_slave_0: entered promiscuous mode [ 755.724549][T16715] bridge0: port 2(bridge_slave_1) entered blocking state [ 755.732828][T16715] bridge0: port 2(bridge_slave_1) entered disabled state [ 755.740408][T16715] bridge_slave_1: entered allmulticast mode [ 755.750348][T16715] bridge_slave_1: entered promiscuous mode [ 755.818786][T16715] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 755.834147][T16715] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 755.927291][T16715] team0: Port device team_slave_0 added [ 755.936820][T16715] team0: Port device team_slave_1 added [ 755.996917][T16715] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 756.014818][T16715] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 756.054060][T16715] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 756.072830][T16715] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 756.080601][T16715] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 756.108713][T16715] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 756.209379][T16715] hsr_slave_0: entered promiscuous mode [ 756.221108][T16775] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3322'. [ 756.231413][T16715] hsr_slave_1: entered promiscuous mode [ 756.248241][T16715] debugfs: 'hsr0' already exists in 'hsr' [ 756.263130][T16715] Cannot create hsr debugfs directory [ 756.690857][T16794] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3332'. [ 756.711035][T16794] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3332'. [ 756.738532][ T5827] Bluetooth: hci1: command tx timeout [ 756.839222][T16803] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3333'. [ 756.853543][T16803] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3333'. [ 757.434288][T16715] bond0: (slave netdevsim0): Releasing backup interface [ 757.517288][T16827] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3343'. [ 757.549919][T16827] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3343'. [ 757.569835][T16827] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3343'. [ 757.611822][T16827] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3343'. [ 757.828887][T16715] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 757.879565][T16715] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 757.905495][T16715] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 757.938182][T16715] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 758.094798][T16845] syzkaller1: entered promiscuous mode [ 758.107898][T16845] syzkaller1: entered allmulticast mode [ 758.404670][T16853] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3354'. [ 758.414815][T16715] 8021q: adding VLAN 0 to HW filter on device bond0 [ 758.427399][T16856] netlink: 'syz.5.3356': attribute type 10 has an invalid length. [ 758.482851][T16715] 8021q: adding VLAN 0 to HW filter on device team0 [ 758.539121][ T1168] bridge0: port 1(bridge_slave_0) entered blocking state [ 758.546333][ T1168] bridge0: port 1(bridge_slave_0) entered forwarding state [ 758.597341][ T1168] bridge0: port 2(bridge_slave_1) entered blocking state [ 758.604603][ T1168] bridge0: port 2(bridge_slave_1) entered forwarding state [ 758.815609][T16715] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 758.829901][ T5827] Bluetooth: hci1: command tx timeout [ 758.892739][T16715] veth0_vlan: entered promiscuous mode [ 758.928551][T16715] veth1_vlan: entered promiscuous mode [ 758.975492][T16715] veth0_macvtap: entered promiscuous mode [ 758.996735][T16715] veth1_macvtap: entered promiscuous mode [ 759.088592][T16715] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 759.129143][T16715] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 759.215239][ T1168] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 759.233132][ T1168] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 759.281789][ T1168] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 759.298433][ T1168] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 759.319240][T16878] syzkaller1: entered promiscuous mode [ 759.324736][T16878] syzkaller1: entered allmulticast mode [ 759.671285][ T2971] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 759.700588][ T2971] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 759.771163][ T1168] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 759.792633][ T1168] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 760.898204][ T5827] Bluetooth: hci1: command tx timeout [ 762.977982][ T5827] Bluetooth: hci1: command tx timeout [ 765.452634][T17023] bridge0: entered promiscuous mode [ 765.677777][T17023] macsec1: entered promiscuous mode [ 765.813650][T17023] bridge0: port 3(macsec1) entered blocking state [ 765.897382][T17023] bridge0: port 3(macsec1) entered disabled state [ 765.971211][T17023] macsec1: entered allmulticast mode [ 765.976670][T17023] bridge0: entered allmulticast mode [ 766.127122][T17023] macsec1: left allmulticast mode [ 766.137639][T17023] bridge0: left allmulticast mode [ 766.218452][T17023] bridge0: left promiscuous mode [ 767.022987][T17050] bridge0: port 3(vlan2) entered blocking state [ 767.187668][T17050] bridge0: port 3(vlan2) entered disabled state [ 767.216158][T17050] vlan2: entered allmulticast mode [ 767.230501][T17050] bridge0: entered allmulticast mode [ 767.249260][T17055] __nla_validate_parse: 4 callbacks suppressed [ 767.249279][T17055] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3426'. [ 767.279675][T17050] vlan2: left allmulticast mode [ 767.284569][T17050] bridge0: left allmulticast mode [ 768.434986][T17079] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3436'. [ 769.120230][T17089] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3440'. [ 770.165689][T17118] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3451'. [ 770.412568][T17123] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3453'. [ 770.560477][T17123] bond1: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 770.579837][T17123] bond1 (unregistering): Released all slaves [ 771.004898][T17134] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 771.385240][T17147] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3462'. [ 771.520061][ T5827] Bluetooth: hci0: unexpected cc 0x203e length: 2 > 1 [ 771.536458][ T5827] Bluetooth: hci0: unexpected event for opcode 0x203e [ 771.979821][T17163] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 772.182106][ T5922] usb 4-1: new full-speed USB device number 127 using dummy_hcd [ 772.237592][T14272] usb 6-1: new full-speed USB device number 68 using dummy_hcd [ 772.374589][ T5922] usb 4-1: config 0 has an invalid interface number: 41 but max is 0 [ 772.382932][ T5922] usb 4-1: config 0 has no interface number 0 [ 772.407657][ T5922] usb 4-1: config 0 interface 41 has no altsetting 0 [ 772.418876][ T5922] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 772.424452][T14272] usb 6-1: New USB device found, idVendor=09e1, idProduct=5121, bcdDevice=40.c1 [ 772.444125][ T5922] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 772.447592][T14272] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 772.467545][T14272] usb 6-1: Product: syz [ 772.477682][T14272] usb 6-1: Manufacturer: syz [ 772.478065][ T5922] usb 4-1: Product: syz [ 772.486476][ T5922] usb 4-1: Manufacturer: syz [ 772.487495][T14272] usb 6-1: SerialNumber: syz [ 772.525146][ T5922] usb 4-1: SerialNumber: syz [ 772.528111][T14272] usb 6-1: config 0 descriptor?? [ 772.545149][ T5922] usb 4-1: config 0 descriptor?? [ 772.773397][T14272] int51x1 6-1:0.0: probe with driver int51x1 failed with error -22 [ 772.980664][T14272] usb 6-1: USB disconnect, device number 68 [ 773.127345][T17185] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3479'. [ 773.163954][T17185] bond1: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 773.174631][ T43] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 773.186340][T17185] bond1 (unregistering): Released all slaves [ 773.329409][ T43] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 773.341690][T17188] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3480'. [ 773.351369][ T43] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 773.362795][ T43] usb 2-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 773.372673][ T43] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 773.394338][ T43] usb 2-1: config 0 descriptor?? [ 773.399596][ T5922] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffb9 [ 773.435628][ T5922] CoreChips 4-1:0.41: probe with driver CoreChips failed with error -71 [ 773.458821][ T5922] usb 4-1: USB disconnect, device number 127 [ 773.832298][T17178] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 773.864142][T17178] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 773.914172][ T43] usbhid 2-1:0.0: can't add hid device: -71 [ 773.927386][ T43] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 773.953277][ T43] usb 2-1: USB disconnect, device number 28 [ 774.020144][T17202] ================================================================== [ 774.028269][T17202] BUG: KASAN: slab-out-of-bounds in change_page_attr_set_clr+0x625/0xfc0 [ 774.036720][T17202] Read of size 8 at addr ffff888041519588 by task syz.0.3483/17202 [ 774.044628][T17202] [ 774.046966][T17202] CPU: 0 UID: 0 PID: 17202 Comm: syz.0.3483 Not tainted syzkaller #0 PREEMPT(full) [ 774.046987][T17202] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 774.046997][T17202] Call Trace: [ 774.047004][T17202] [ 774.047012][T17202] dump_stack_lvl+0x189/0x250 [ 774.047034][T17202] ? __kasan_check_byte+0x12/0x40 [ 774.047053][T17202] ? __pfx_dump_stack_lvl+0x10/0x10 [ 774.047068][T17202] ? lock_release+0x4b/0x3e0 [ 774.047089][T17202] ? __virt_addr_valid+0x4a5/0x5c0 [ 774.047105][T17202] print_report+0xca/0x240 [ 774.047122][T17202] ? change_page_attr_set_clr+0x625/0xfc0 [ 774.047140][T17202] kasan_report+0x118/0x150 [ 774.047157][T17202] ? change_page_attr_set_clr+0x625/0xfc0 [ 774.047178][T17202] change_page_attr_set_clr+0x625/0xfc0 [ 774.047198][T17202] ? __pfx_change_page_attr_set_clr+0x10/0x10 [ 774.047215][T17202] ? __pfx_pagerange_is_ram_callback+0x10/0x10 [ 774.047231][T17202] ? memtype_reserve+0x874/0xb30 [ 774.047249][T17202] ? __pfx___ww_mutex_lock+0x10/0x10 [ 774.047267][T17202] _set_pages_array+0x145/0x270 [ 774.047293][T17202] drm_gem_shmem_get_pages_locked+0x2d0/0x440 [ 774.047318][T17202] ? __pfx_drm_gem_shmem_get_pages_locked+0x10/0x10 [ 774.047341][T17202] ? ww_mutex_lock+0x3f/0x1c0 [ 774.047356][T17202] drm_gem_shmem_mmap+0x193/0x460 [ 774.047371][T17202] drm_gem_mmap_obj+0x18a/0x4e0 [ 774.047389][T17202] drm_gem_mmap+0x384/0x640 [ 774.047407][T17202] ? __pfx_drm_gem_mmap+0x10/0x10 [ 774.047425][T17202] ? __mas_set_range+0x12f/0x3c0 [ 774.047449][T17202] mmap_region+0x18b4/0x2110 [ 774.047478][T17202] ? __pfx_mmap_region+0x10/0x10 [ 774.047524][T17202] ? __pfx_arch_get_unmapped_area_topdown+0x10/0x10 [ 774.047554][T17202] ? bpf_lsm_mmap_addr+0x9/0x20 [ 774.047575][T17202] ? security_mmap_addr+0x71/0x270 [ 774.047597][T17202] ? shmem_mapping+0xd/0x50 [ 774.047615][T17202] ? memfd_check_seals_mmap+0xc5/0x200 [ 774.047636][T17202] do_mmap+0xc45/0x10d0 [ 774.047653][T17202] ? __pfx_do_mmap+0x10/0x10 [ 774.047665][T17202] ? down_write_killable+0x178/0x230 [ 774.047682][T17202] ? __pfx_down_write_killable+0x10/0x10 [ 774.047698][T17202] ? common_file_perm+0x1b5/0x230 [ 774.047715][T17202] vm_mmap_pgoff+0x2a6/0x4d0 [ 774.047749][T17202] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 774.047769][T17202] ? __fget_files+0x2a/0x420 [ 774.047787][T17202] ? __fget_files+0x2a/0x420 [ 774.047804][T17202] ? __fget_files+0x2a/0x420 [ 774.047822][T17202] ksys_mmap_pgoff+0x51f/0x760 [ 774.047838][T17202] do_syscall_64+0xfa/0xfa0 [ 774.047853][T17202] ? lockdep_hardirqs_on+0x9c/0x150 [ 774.047866][T17202] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 774.047881][T17202] ? clear_bhb_loop+0x60/0xb0 [ 774.047896][T17202] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 774.047910][T17202] RIP: 0033:0x7f9e0438efc9 [ 774.047925][T17202] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 774.047937][T17202] RSP: 002b:00007f9e0519c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 774.047953][T17202] RAX: ffffffffffffffda RBX: 00007f9e045e5fa0 RCX: 00007f9e0438efc9 [ 774.047965][T17202] RDX: 0000000000000004 RSI: 0000000000004000 RDI: 0000200000001000 [ 774.047974][T17202] RBP: 00007f9e04411f91 R08: 0000000000000003 R09: 0000000100000000 [ 774.047985][T17202] R10: 0000000000000011 R11: 0000000000000246 R12: 0000000000000000 [ 774.047995][T17202] R13: 00007f9e045e6038 R14: 00007f9e045e5fa0 R15: 00007f9e0470fa28 [ 774.048011][T17202] [ 774.048018][T17202] [ 774.385178][T17202] Allocated by task 17202: [ 774.389599][T17202] kasan_save_track+0x3e/0x80 [ 774.394278][T17202] __kasan_kmalloc+0x93/0xb0 [ 774.398860][T17202] __kvmalloc_node_noprof+0x5cd/0x910 [ 774.404247][T17202] drm_gem_get_pages+0x166/0xa20 [ 774.409192][T17202] drm_gem_shmem_get_pages_locked+0x201/0x440 [ 774.415270][T17202] drm_gem_shmem_mmap+0x193/0x460 [ 774.420296][T17202] drm_gem_mmap_obj+0x18a/0x4e0 [ 774.425145][T17202] drm_gem_mmap+0x384/0x640 [ 774.429647][T17202] mmap_region+0x18b4/0x2110 [ 774.434237][T17202] do_mmap+0xc45/0x10d0 [ 774.438384][T17202] vm_mmap_pgoff+0x2a6/0x4d0 [ 774.442970][T17202] ksys_mmap_pgoff+0x51f/0x760 [ 774.447738][T17202] do_syscall_64+0xfa/0xfa0 [ 774.452254][T17202] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 774.458136][T17202] [ 774.460500][T17202] The buggy address belongs to the object at ffff888041519500 [ 774.460500][T17202] which belongs to the cache kmalloc-192 of size 192 [ 774.474561][T17202] The buggy address is located 0 bytes to the right of [ 774.474561][T17202] allocated 136-byte region [ffff888041519500, ffff888041519588) [ 774.489054][T17202] [ 774.491369][T17202] The buggy address belongs to the physical page: [ 774.497771][T17202] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x41519 [ 774.506524][T17202] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 774.513613][T17202] page_type: f5(slab) [ 774.517577][T17202] raw: 00fff00000000000 ffff88813ffa63c0 ffffea0001056880 dead000000000004 [ 774.526141][T17202] raw: 0000000000000000 0000000080100010 00000000f5000000 0000000000000000 [ 774.534712][T17202] page dumped because: kasan: bad access detected [ 774.541119][T17202] page_owner tracks the page as allocated [ 774.546832][T17202] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x152820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_HARDWALL), pid 14602, tgid 14601 (syz.0.2436), ts 695389986690, free_ts 692547760439 [ 774.567656][T17202] post_alloc_hook+0x240/0x2a0 [ 774.572416][T17202] get_page_from_freelist+0x2365/0x2440 [ 774.577952][T17202] __alloc_frozen_pages_noprof+0x181/0x370 [ 774.583756][T17202] alloc_pages_mpol+0x232/0x4a0 [ 774.588593][T17202] allocate_slab+0x96/0x3a0 [ 774.593085][T17202] ___slab_alloc+0xe94/0x18a0 [ 774.597748][T17202] __slab_alloc+0x65/0x100 [ 774.602183][T17202] __kmalloc_noprof+0x471/0x7f0 [ 774.607034][T17202] hash_ipportnet6_resize+0xe82/0x1e80 [ 774.612537][T17202] call_ad+0x44e/0xb00 [ 774.616610][T17202] ip_set_ad+0x791/0x930 [ 774.620845][T17202] nfnetlink_rcv_msg+0xb4d/0x1130 [ 774.625875][T17202] netlink_rcv_skb+0x208/0x470 [ 774.630635][T17202] nfnetlink_rcv+0x282/0x2590 [ 774.635307][T17202] netlink_unicast+0x82f/0x9e0 [ 774.640164][T17202] netlink_sendmsg+0x805/0xb30 [ 774.644920][T17202] page last free pid 14478 tgid 14477 stack trace: [ 774.651402][T17202] __free_frozen_pages+0xbc4/0xd30 [ 774.656770][T17202] vfree+0x25a/0x400 [ 774.660661][T17202] __vmalloc_node_range_noprof+0xfe4/0x12d0 [ 774.666542][T17202] vmalloc_user_noprof+0xad/0xf0 [ 774.671475][T17202] xskq_create+0xbf/0x170 [ 774.675806][T17202] xsk_init_queue+0xb0/0x110 [ 774.680415][T17202] xsk_setsockopt+0x4dc/0x8d0 [ 774.685211][T17202] do_sock_setsockopt+0x17c/0x1b0 [ 774.690248][T17202] __x64_sys_setsockopt+0x13f/0x1b0 [ 774.695537][T17202] do_syscall_64+0xfa/0xfa0 [ 774.700028][T17202] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 774.705913][T17202] [ 774.708228][T17202] Memory state around the buggy address: [ 774.714017][T17202] ffff888041519480: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 774.722065][T17202] ffff888041519500: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 774.730109][T17202] >ffff888041519580: 00 fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 774.738154][T17202] ^ [ 774.742462][T17202] ffff888041519600: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 774.750593][T17202] ffff888041519680: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 774.758633][T17202] ================================================================== [ 774.770553][T17202] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 774.777770][T17202] CPU: 1 UID: 0 PID: 17202 Comm: syz.0.3483 Not tainted syzkaller #0 PREEMPT(full) [ 774.787219][T17202] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 774.797266][T17202] Call Trace: [ 774.800547][T17202] [ 774.803486][T17202] dump_stack_lvl+0x99/0x250 [ 774.808088][T17202] ? __asan_memcpy+0x40/0x70 [ 774.812694][T17202] ? __pfx_dump_stack_lvl+0x10/0x10 [ 774.817902][T17202] ? __pfx__printk+0x10/0x10 [ 774.822500][T17202] vpanic+0x237/0x6d0 [ 774.826484][T17202] ? __pfx_vpanic+0x10/0x10 [ 774.830983][T17202] ? preempt_schedule+0xae/0xc0 [ 774.835830][T17202] ? __pfx_preempt_schedule+0x10/0x10 [ 774.841549][T17202] panic+0xb9/0xc0 [ 774.845267][T17202] ? __pfx_panic+0x10/0x10 [ 774.849678][T17202] ? _raw_spin_unlock_irqrestore+0xfd/0x110 [ 774.855578][T17202] ? change_page_attr_set_clr+0x625/0xfc0 [ 774.861296][T17202] check_panic_on_warn+0x89/0xb0 [ 774.866447][T17202] ? change_page_attr_set_clr+0x625/0xfc0 [ 774.872263][T17202] end_report+0x78/0x160 [ 774.876502][T17202] kasan_report+0x129/0x150 [ 774.881003][T17202] ? change_page_attr_set_clr+0x625/0xfc0 [ 774.886720][T17202] change_page_attr_set_clr+0x625/0xfc0 [ 774.892263][T17202] ? __pfx_change_page_attr_set_clr+0x10/0x10 [ 774.898320][T17202] ? __pfx_pagerange_is_ram_callback+0x10/0x10 [ 774.904460][T17202] ? memtype_reserve+0x874/0xb30 [ 774.909478][T17202] ? __pfx___ww_mutex_lock+0x10/0x10 [ 774.914779][T17202] _set_pages_array+0x145/0x270 [ 774.919634][T17202] drm_gem_shmem_get_pages_locked+0x2d0/0x440 [ 774.925727][T17202] ? __pfx_drm_gem_shmem_get_pages_locked+0x10/0x10 [ 774.932333][T17202] ? ww_mutex_lock+0x3f/0x1c0 [ 774.937032][T17202] drm_gem_shmem_mmap+0x193/0x460 [ 774.942078][T17202] drm_gem_mmap_obj+0x18a/0x4e0 [ 774.946947][T17202] drm_gem_mmap+0x384/0x640 [ 774.951445][T17202] ? __pfx_drm_gem_mmap+0x10/0x10 [ 774.956462][T17202] ? __mas_set_range+0x12f/0x3c0 [ 774.961397][T17202] mmap_region+0x18b4/0x2110 [ 774.965990][T17202] ? __pfx_mmap_region+0x10/0x10 [ 774.970949][T17202] ? __pfx_arch_get_unmapped_area_topdown+0x10/0x10 [ 774.977544][T17202] ? bpf_lsm_mmap_addr+0x9/0x20 [ 774.982400][T17202] ? security_mmap_addr+0x71/0x270 [ 774.987614][T17202] ? shmem_mapping+0xd/0x50 [ 774.992126][T17202] ? memfd_check_seals_mmap+0xc5/0x200 [ 774.997621][T17202] do_mmap+0xc45/0x10d0 [ 775.001775][T17202] ? __pfx_do_mmap+0x10/0x10 [ 775.006351][T17202] ? down_write_killable+0x178/0x230 [ 775.011626][T17202] ? __pfx_down_write_killable+0x10/0x10 [ 775.017251][T17202] ? common_file_perm+0x1b5/0x230 [ 775.022266][T17202] vm_mmap_pgoff+0x2a6/0x4d0 [ 775.026852][T17202] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 775.031955][T17202] ? __fget_files+0x2a/0x420 [ 775.036537][T17202] ? __fget_files+0x2a/0x420 [ 775.041122][T17202] ? __fget_files+0x2a/0x420 [ 775.045705][T17202] ksys_mmap_pgoff+0x51f/0x760 [ 775.050457][T17202] do_syscall_64+0xfa/0xfa0 [ 775.055031][T17202] ? lockdep_hardirqs_on+0x9c/0x150 [ 775.060219][T17202] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 775.066274][T17202] ? clear_bhb_loop+0x60/0xb0 [ 775.070938][T17202] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 775.076822][T17202] RIP: 0033:0x7f9e0438efc9 [ 775.081224][T17202] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 775.100824][T17202] RSP: 002b:00007f9e0519c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 775.109225][T17202] RAX: ffffffffffffffda RBX: 00007f9e045e5fa0 RCX: 00007f9e0438efc9 [ 775.117188][T17202] RDX: 0000000000000004 RSI: 0000000000004000 RDI: 0000200000001000 [ 775.125147][T17202] RBP: 00007f9e04411f91 R08: 0000000000000003 R09: 0000000100000000 [ 775.133105][T17202] R10: 0000000000000011 R11: 0000000000000246 R12: 0000000000000000 [ 775.141064][T17202] R13: 00007f9e045e6038 R14: 00007f9e045e5fa0 R15: 00007f9e0470fa28 [ 775.149026][T17202] [ 775.152166][T17202] Kernel Offset: disabled [ 775.156474][T17202] Rebooting in 86400 seconds..