last executing test programs: 14.121850677s ago: executing program 0 (id=2938): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x0, 0x0, 0x0}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20f42, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'nr0\x00', 0x6132}) write$cgroup_subtree(r0, 0x0, 0xfe3a) gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x200005, 0x0, @thr={&(0x7f00000006c0)="6ca68867f5194ee243811b55189e78fbb409a42997c387301b85f6bc8fb4ad42272a6deed40a8f436db55641870ab541f6a14bab800818267c916275c63ff3850ad4febe4ee610884352c882b2d25e1a7b04c90bf1508bf78be99254a0297e785d6a144ea328c52ca60e1e3684c0522d48c5f5bceb125945802440f59c698bb4261e2b7b4b23d0242180db", &(0x7f00000005c0)="74373fec06fd3a38a613ff12af999abc9f0c7574283910"}}, &(0x7f0000bbdffc)) read$snddsp(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x3, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x7}}}]}, {0x4}, {0xc}, {0xffffffffffffff60}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000140), 0xffffffffffffffff) sync() timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r5 = dup(r4) bind$bt_l2cap(r5, &(0x7f00000021c0)={0x1f, 0x4, @none}, 0xe) listen(r4, 0x9) accept4$vsock_stream(r5, 0x0, 0x0, 0x80000) socket$inet_smc(0x2b, 0x1, 0x0) 11.868128411s ago: executing program 2 (id=2941): pipe(0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0xfffffffd, {}, [{0x90, 0x1, [@m_ct={0x44, 0x5, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x0, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\'\x00\x00\x00\a'], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='2', 0x1, 0x4fed0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r3, &(0x7f0000000000), 0xd) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0}, 0x50) syz_emit_ethernet(0x1e, &(0x7f0000000380)={@broadcast, @local, @void, {@can={0xc, {{0x3, 0x0, 0x0, 0x1}, 0x1, 0x0, 0x0, 0x0, "2f4f5fcab68ab52b"}}}}, 0x0) bpf$BPF_LINK_CREATE(0xa, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff, 0x24, 0x7, @val=@uprobe_multi={&(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x8, 0x0, 0x1}}, 0x40) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000300)='source', &(0x7f00000000c0)='%(,:', 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000180)='wi', 0x2}], 0x1, 0x1) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) 11.23828566s ago: executing program 4 (id=2943): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r2, 0xc01c64ae, &(0x7f0000000080)={0x0, 0x20000201, 0x1, 0x0, 0x1}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r4, &(0x7f0000847fff)='X', 0x1, 0x14000180, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sched_setattr(0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, 0x0) r5 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x0) fchdir(r6) r7 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) ftruncate(r7, 0x2007ffb) close(r7) openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0xc8a02, 0x0) 11.057759763s ago: executing program 0 (id=2945): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000280)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000100)={0x1d, r1, 0x8, {0x2}, 0x1}, 0x18) getpeername$packet(r0, 0x0, &(0x7f00000000c0)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$usbfs(&(0x7f0000000100), 0x85c, 0x22882) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/stat\x00', 0x0, 0x0) io_uring_setup(0x22d1, 0x0) close(r2) ioctl$TCSETSW2(r3, 0x5425, 0x0) socket$caif_seqpacket(0x25, 0x5, 0x0) unshare(0x68040200) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r4, 0x0, 0x400000000}, 0xf) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r4, 0xf501, 0x0) r5 = socket(0x2b, 0x80801, 0x1) setsockopt$EBT_SO_SET_COUNTERS(r5, 0x0, 0x81, &(0x7f0000000240)={'nat\x00', 0x0, 0x0, 0x0, [0x3, 0x6, 0x101, 0x8, 0x7, 0x1ff], 0x1, 0x0, 0x0, [{}]}, 0x60) 10.857599566s ago: executing program 1 (id=2946): r0 = socket$packet(0x11, 0x3, 0x300) r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8102) r2 = fcntl$dupfd(r1, 0x406, r0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000400)={0x53, 0xfffffffffffffffb, 0x6, 0x1, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000280)='\x00\x00\x00\x00\x00\x00', 0x0, 0x0, 0x0, 0x2, 0x0}) write$tun(r2, &(0x7f0000000400)=ANY=[], 0xa2) 9.203134381s ago: executing program 1 (id=2947): r0 = openat$rtc(0xffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$RTC_ALM_READ(r0, 0x80247008, &(0x7f0000000200)) 9.169064022s ago: executing program 1 (id=2948): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680)) socket(0x28, 0x80000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x14, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x8031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x18c) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x19}) socket$nl_route(0x10, 0x3, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f00007c8000/0x5000)=nil, 0x5000, 0xb) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000100)={{&(0x7f0000010000/0x1000)=nil, 0x1000}, 0x5}) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) close(r1) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080), 0x4) 9.108275493s ago: executing program 0 (id=2949): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000780)="2e00000010008188040f80f8", 0xc}], 0x1}, 0x0) request_key(0x0, &(0x7f0000001ffb)={'syz', 0x3}, &(0x7f0000001fee)='R\x10rust\xe3cusg\x91\xdeeH\xe5+\xf0', 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x14, 0xd4}, [@ldst={0x6, 0x0, 0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x48) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x8080}, 0x40020) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'sit0\x00', &(0x7f0000000140)={'syztnl0\x00', 0x0, 0x8, 0x1, 0xffffffff, 0x7fff, {{0x30, 0x4, 0x0, 0x26, 0xc0, 0x64, 0x0, 0x9, 0x2f, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@ssrr={0x89, 0x7, 0xbe, [@local]}, @noop, @timestamp={0x44, 0x18, 0x34, 0x0, 0x8, [0x8, 0x4127f54c, 0x1, 0x7, 0xc]}, @lsrr={0x83, 0x27, 0x1e, [@broadcast, @multicast2, @dev={0xac, 0x14, 0x14, 0x1b}, @loopback, @broadcast, @remote, @multicast1, @broadcast, @private=0xa010100]}, @timestamp_addr={0x44, 0x3c, 0xad, 0x1, 0x7, [{@empty, 0x4a}, {@local, 0x6}, {@rand_addr=0x64010101, 0x4}, {@local, 0x2}, {@broadcast, 0x2}, {@loopback, 0x101}, {@empty, 0x1}]}, @timestamp={0x44, 0x24, 0x7, 0x0, 0x1, [0xa, 0x40, 0x9, 0x8, 0x9, 0x780ce2d5, 0x10001, 0x401]}, @end, @ra={0x94, 0x4}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000280)={'wg2\x00', 0x0}) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00', 0x0}) close(r8) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x503, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20208}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4010}, 0x0) sendmsg$nl_route(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@dellink={0x20, 0x11, 0x1, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, r9, 0x8500, 0x4003}}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000400)={'syztnl0\x00', &(0x7f0000000380)={'ip6gre0\x00', 0x0, 0x29, 0x0, 0x79, 0x4, 0x8, @local, @remote, 0x8, 0x10, 0x7, 0x7}}) socket$can_raw(0x1d, 0x3, 0x1) socket$inet6_sctp(0xa, 0x1, 0x84) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f00000003c0)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000480)='./file0\x00') sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000600)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000005c0)={&(0x7f0000000440)={0x174, r2, 0x200, 0x70bd28, 0x25dfdbfc, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x84, 0x2, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}, {0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}]}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_STRSET_HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @ETHTOOL_A_STRSET_HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_STRSET_HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}, @ETHTOOL_A_STRSET_HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x174}}, 0x40004) 7.530326027s ago: executing program 4 (id=2952): r0 = socket(0x11, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000004c0)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x1000000, {0x0, 0x0, 0x12, r1, {0x0, 0x300}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x7a00}, 0x4000000) 7.376838719s ago: executing program 0 (id=2953): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000280), 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x4, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES64=r0, @ANYRES16=r0, @ANYRES32, @ANYBLOB, @ANYRESDEC=r0, @ANYRESHEX=r0], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2, 0x8f}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socket$igmp6(0xa, 0x3, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r4, 0xc0045006, &(0x7f00000001c0)=0x2) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000007640)=ANY=[], 0x3aa0}}, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000002b80)={0x0, 0x0, &(0x7f0000002ac0)=[{&(0x7f0000000980)=""/4096, 0x1000}], 0x1}, 0x0) 7.29098384s ago: executing program 4 (id=2954): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_io_uring_setup(0x3b, 0x0, &(0x7f0000000240), &(0x7f0000000100)=0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x3, &(0x7f0000000480)=ANY=[@ANYRES8, @ANYRESHEX=r0, @ANYRES16=r1], &(0x7f0000000200)='GPL\x00', 0x0, 0x64, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x3, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x4040001) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000840), 0x2, 0x0) ioctl$UI_DEV_SETUP(r4, 0x405c5503, &(0x7f0000000280)={{0x5}, 'syz1\x00', 0x10}) ioctl$UI_DEV_CREATE(r4, 0x5501) ioctl$UI_DEV_DESTROY(r4, 0x5502) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) 6.952466815s ago: executing program 2 (id=2955): modify_ldt$write2(0x11, &(0x7f0000000000)={0x80, 0x0, 0x2003, 0x1}, 0x10) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0xa0001000, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0) 6.869736766s ago: executing program 1 (id=2956): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x0, 0x0, 0x0}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20f42, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'nr0\x00', 0x6132}) write$cgroup_subtree(r0, &(0x7f0000000280)=ANY=[], 0xfe3a) gettid() timer_create(0x0, 0x0, &(0x7f0000bbdffc)) read$snddsp(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x3, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x7}}}]}, {0x4}, {0xc}, {0xffffffffffffff60}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000140), 0xffffffffffffffff) sync() timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r5 = dup(r4) bind$bt_l2cap(r5, &(0x7f00000021c0)={0x1f, 0x4, @none}, 0xe) listen(r4, 0x9) accept4$vsock_stream(r5, 0x0, 0x0, 0x80000) socket$inet_smc(0x2b, 0x1, 0x0) 6.59517426s ago: executing program 2 (id=2957): mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',gr', @ANYRESDEC=0x0]) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x6, 0x2}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x5}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r2, &(0x7f0000000180)={0x1a, 0x0, 0xf9, 0x8, 0xff, 0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}}, 0x10) sendmmsg(r2, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) 5.486585927s ago: executing program 3 (id=2958): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @loopback}, 0x10) setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f0000000040), 0x4) sendmmsg$inet(r0, &(0x7f0000000b80)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000004c0)="3912c1d03d9f66103940872256d8995b00c720af0cfa51b2b3b1448411fe107e64af467c85a200ebafdbee2c35b8ad1677fe7bb27ca22acbe83c449484972354b3baa1809633e690474a9154f95bd6874f20a0b290c590d44a9f5cd01414544ad719b82a550f2a7215e33e2dfdc1ce61a75637323b8828c5e5ef1f77b3d93114d46ceddb9d976eea7e20bb95e24e1e8b9974397bb8d73856a38618eac0ab333267fc833503b4df7838f5e522192252f4fd72ae45d21b55414a82ec84ff620a1ee2fe4691573a8afc79adaac5f0618cb457b14013f9e048cdec329a9e3343140213a41330b43e3290ef836c8839b303f0639a7561361247db2646977014051dcf3dc1246225f9aae3ca02943571bb39ecfdfa5b9ebc30a0476103c6133c7da631", 0x120}], 0x1}}, {{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000001c40)="03", 0x1}], 0x1}}], 0x2, 0x8010) readv(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)=""/4096, 0x1000}], 0x1) 5.29359905s ago: executing program 3 (id=2959): syz_emit_ethernet(0x34e, &(0x7f0000000780)={@local, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "00cd04", 0x318, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x5a, 0x1, 0x5, 0x0, [{0x0, 0xa, "a78c000005dc8080a2030003004003493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34060600000000000000dac15084dbaf736b41e5af0502"}, {0x0, 0x1, "000005000000000026000400"}, {0x0, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf3915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x0, 0xb, "17dcea468000000000054740a5d4901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2bce9ac946a3f0e2bc4000091394c02bcfbbb7d71138537d68e2d2c6393a9f3cc271a9ff09a48b5b303f4f0"}, {0xe, 0x7, "b8a3e10000a3e1100000006f00ffc0ffff00000000600000ff0bc0fe000000000000000000000000d9a0274400"/55}, {0x0, 0xc, "5e14ccb44d2d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d260600aa89c8f267d76ece1c9f6ae2e1eb3d8bf9c6ab2642c4808298e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c"}]}}}}}}, 0x0) 5.266932161s ago: executing program 0 (id=2960): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={0x0}}, 0x4810) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = fsopen(&(0x7f0000000080)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) mkdir(0x0, 0x0) rmdir(0x0) openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20004015}, 0x2404c8c0) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000180)=@generic={&(0x7f00000000c0)='./bus\x00'}, 0x18) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0xd, 0x20000000000000bb, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb714000008"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x41000, 0x39, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x2, 0x200008, 0x5, 0x20000}, 0xffffffdd}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a600000000000000500000014000500200100000000000000000300000000001c00090008000000", @ANYRES32=r3], 0x4c}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) socket$alg(0x26, 0x5, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="2800000010000108000000000000000002000000", @ANYRES32=0x0, @ANYBLOB="b40200000000000008001b"], 0x28}}, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8}]}}}]}]}], {0x14}}, 0xd4}}, 0x0) 5.091276923s ago: executing program 3 (id=2961): mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',gr', @ANYRESDEC=0x0]) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x6, 0x2}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x5}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) connect$unix(0xffffffffffffffff, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r0, &(0x7f0000000180)={0x1a, 0x0, 0xf9, 0x8, 0xff, 0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}}, 0x10) sendmmsg(r0, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) 4.163673917s ago: executing program 3 (id=2962): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x800448d2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x8200, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @pix_mp={0x0, 0x0, 0x34324152, 0x0, 0xb, [{}, {}, {0x3}, {}, {}, {}, {}, {0x0, 0xfffffffe}]}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYRES64], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)=ANY=[@ANYBLOB="38000000031404002ab1000f4938c29ebda883bd7000ffdbdf250900020073797a32000000000800410073697700140033007465616d5f73"], 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x4000) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) setresuid(0x0, 0xee00, 0x0) syz_open_dev$usbfs(&(0x7f0000000480), 0xd, 0x141341) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r6 = socket(0x10, 0x80002, 0x0) connect$inet6(r6, 0x0, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r5, @ANYBLOB="00000000000000001c001a800800028008000200080000003e120000080002001040e5"], 0x44}}, 0x0) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$binfmt_aout(r7, &(0x7f0000000340)=ANY=[], 0xff2e) ioctl$TCXONC(r7, 0x540a, 0x2) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000100)) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0x9}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000000) 3.824448682s ago: executing program 2 (id=2963): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r2, 0xc01c64ae, &(0x7f0000000080)={0x0, 0x20000201, 0x1, 0x0, 0x1}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r4, &(0x7f0000847fff)='X', 0x1, 0x14000180, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x3, 0x9, 0x8, 0x6, 0x3}, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, 0x0) r5 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x0) fchdir(r6) r7 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) ftruncate(r7, 0x2007ffb) close(r7) openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0xc8a02, 0x0) 3.780202763s ago: executing program 4 (id=2964): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) syz_emit_ethernet(0x6a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa424e1aa2e0d408004500005c00000001"], 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x6, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 3.066048964s ago: executing program 1 (id=2965): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000440)={@val={0x70}, @void, @eth={@broadcast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x452c, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x0, 0x88be, 0x18, 0x0, @wg=@data={0x4, 0x0, 0xffffa888}}}}}}}, 0xfdef) 2.577198721s ago: executing program 4 (id=2966): pipe(0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0xfffffffd, {}, [{0x90, 0x1, [@m_ct={0x44, 0x5, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x0, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\'\x00\x00\x00\a'], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='2', 0x1, 0x4fed0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r3, &(0x7f0000000000), 0xd) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0}, 0x50) syz_emit_ethernet(0x1e, &(0x7f0000000380)={@broadcast, @local, @void, {@can={0xc, {{0x3, 0x0, 0x0, 0x1}, 0x1, 0x0, 0x0, 0x0, "2f4f5fcab68ab52b"}}}}, 0x0) bpf$BPF_LINK_CREATE(0xa, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff, 0x24, 0x7, @val=@uprobe_multi={&(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x8, 0x0, 0x1}}, 0x40) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000180)='wi', 0x2}], 0x1, 0x1) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) 1.859081642s ago: executing program 2 (id=2967): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000100000000000000000000088500000087000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000080)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000400)="e097566f5bec64466cf0925782dd", 0x0, 0x8c9, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 1.679065135s ago: executing program 2 (id=2968): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_io_uring_setup(0x3b, 0x0, &(0x7f0000000240), &(0x7f0000000100)=0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x3, &(0x7f0000000480)=ANY=[@ANYRES8, @ANYRESHEX=r0, @ANYRES16=r1], &(0x7f0000000200)='GPL\x00', 0x0, 0x64, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x3, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x4040001) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) writev(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000000080)="aefdda9d240300005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d76641cb010052f436dd2a", 0x2a}, {&(0x7f0000000040)="aa1d484ea0a00000f7fc08fcd111fbdf23ea32db0e8f21d5bc27bd49eb067a0689fff2a41cfbf0e9d85e44", 0x2b}], 0x2) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000840), 0x2, 0x0) ioctl$UI_DEV_SETUP(r5, 0x405c5503, &(0x7f0000000280)={{0x5}, 'syz1\x00', 0x10}) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="00f7ffffff1e00ff130012800b00010062617461647600000400028008000a00", @ANYRES32=r0], 0x3c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000440)={&(0x7f0000000640)="008ba4026138c95a77702660e19b133bfedf8a271b4ad23f2eb8947da7ee3404ea6ade7b0f1b3f46fa52a8f3472b5796b7f7905b9138aec4bd45b74f59804a11a53c3cab209986c2a7d6656827383da29c2dd36b89e35cb527068e0e5955fd6ce4fc6a3100bb3e069cc786edc9ee9defaecac60d683fbd0266487c201b41dd71598d474cd2603d4c8902c2e3da0d16864520815ef855f5e199c154ac130a84fc9f31ce794e632cb7cb735c656e53c56369b8080b8624e72120a67262b2028d33cfbcc26ba8fd7884bf849bfb7fbc202e8a1172743eb7ea299099ea769cecd5c65f850c727c3f10f4", &(0x7f00000004c0)=""/72, &(0x7f0000000740)="effc933fe97c092030ca0851ca0cc117e36a7e03595e3af0c20ebb7e88059987afe046f064cfa53bb46c81b7863201e3f94db67db895893f0f", &(0x7f00000007c0)="df74c55f844757ee72779411b6043dd1c270b9048ad1f690a1dd3174496dc63d4f16ba8ef113afbf4139d33458e94867b75fd01544123aeb56aa0f50817c7bb7eef34c440e32c12df88697d1ffa6fe1a918b750f3768ac90aaa83e573281748a56722a4805f9", 0x1, 0xffffffffffffffff, 0x4}, 0x38) 553.928392ms ago: executing program 0 (id=2969): socketpair$unix(0x1, 0x5, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x60, 0x30, 0x1, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x24000805}, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_DEL_MIF(r0, 0x29, 0xc8, 0x0, 0xc000000) syz_emit_ethernet(0x6a, &(0x7f00000003c0)={@link_local, @dev, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f57a14", 0x30, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x4, 0x1, 0x0, 0x0, {0x0, 0x6, "508359", 0x0, 0x0, 0x0, @private1, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}}}}}}}, 0x0) sendmsg$NFNL_MSG_ACCT_GET(0xffffffffffffffff, 0x0, 0x20004000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$midi(0x0, 0x7, 0x1c0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000540)={'syz1\x00', {0xf9d, 0x1ff, 0xec00, 0x6cc7}, 0x42, [0x80000001, 0x7fff, 0x7ff, 0x0, 0x4, 0x3, 0x2, 0xffffffff, 0x5, 0x2, 0x9, 0x9, 0x6, 0x80000000, 0x8, 0x7fff, 0x9, 0x8, 0x7, 0x0, 0xb, 0x7a47, 0x7ff, 0x9, 0xd4, 0x8, 0x4, 0x2, 0xfffffffd, 0x5, 0x5, 0x4, 0x100, 0x1, 0x5, 0x9, 0xffff, 0x51b1, 0x2, 0x2, 0x9, 0x0, 0x7fffffff, 0x1, 0xee, 0x0, 0x800, 0xfffffffb, 0x10000, 0x5, 0x2, 0x6, 0x7, 0x8000, 0xc0, 0x6, 0x6, 0x8, 0x4, 0x1, 0x10001, 0xff1, 0xf, 0x5], [0x8, 0x3, 0x6, 0x101, 0x2, 0x7ff, 0x7, 0x0, 0x2, 0x7, 0x8, 0x4, 0x3ff, 0x6310, 0x6, 0x1e1, 0xfffffffe, 0x10000, 0x0, 0xffff, 0xe, 0x9, 0x8384, 0x9, 0x8c, 0x688, 0x8, 0xfffffff9, 0x2, 0x8, 0x4, 0xf, 0xffff0000, 0x9, 0x7ff, 0xeeb, 0x7ff, 0xfff, 0x0, 0x9, 0x8a27, 0x8, 0x3, 0x8, 0x0, 0x6, 0x3, 0x3, 0x27173dc7, 0x5, 0xb0e, 0x7, 0x8, 0x4, 0x7, 0x219c000, 0x4, 0xfffffffe, 0x7ff, 0x10001, 0x6, 0x7, 0x8, 0x8], [0xc18, 0x5, 0xa, 0x6448, 0xc, 0x7, 0x8, 0x401, 0x7f, 0x9f, 0x0, 0x0, 0x3, 0x40, 0x36, 0x591, 0x7b2c, 0x4, 0xb, 0x0, 0x800, 0x6, 0x4, 0x2, 0x9, 0xb, 0x800, 0x5, 0x3, 0x20, 0x0, 0x0, 0x8, 0x400, 0x3, 0x6, 0xc8, 0x17f, 0x8654, 0xfc1b, 0x0, 0x89c, 0x8, 0x3, 0x2c0c, 0x8, 0xff, 0x7, 0x1, 0x3, 0x7, 0x80000000, 0x7, 0x7ff, 0x2c0d, 0xfffffffc, 0x7aa, 0x9, 0x4, 0x1, 0x2, 0x2, 0x6, 0xfffff753], [0xfffffffb, 0x5, 0x7fff, 0x0, 0x9, 0x0, 0x2, 0x9, 0x3, 0x9, 0x2, 0x9, 0xfffffad0, 0xe4, 0xe, 0x3, 0x10, 0x81, 0x468, 0x9, 0x4, 0x2, 0x3, 0x7fffffff, 0x4, 0x4, 0x101, 0x9, 0xa, 0x1, 0x81, 0x7, 0x7fff, 0x2, 0xcdb, 0x200, 0x2, 0x3, 0x7f, 0x5, 0x7, 0x7, 0x3, 0xf, 0xfffffff7, 0x2, 0x0, 0x6, 0x3ff, 0xffc00000, 0x6d5, 0x100, 0x10000, 0x8, 0x6, 0x9, 0xd, 0x1, 0x1, 0x5, 0x4, 0x1, 0x5, 0x7]}, 0x2fe) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 360.830355ms ago: executing program 4 (id=2970): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000280), 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x4, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES64=r0, @ANYRES16=r0, @ANYRES32, @ANYBLOB, @ANYRESDEC=r0, @ANYRESHEX=r0], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2, 0x8f}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socket$igmp6(0xa, 0x3, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r4, 0xc0045006, &(0x7f00000001c0)=0x2) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000007640)=ANY=[], 0x3aa0}}, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000002b80)={0x0, 0x0, &(0x7f0000002ac0)=[{&(0x7f0000000980)=""/4096, 0x1000}], 0x1}, 0x0) 167.226438ms ago: executing program 1 (id=2971): r0 = syz_usbip_server_init(0x3) write$usbip_server(r0, &(0x7f0000000380)=ANY=[], 0xfffffffffffffd8e) r1 = syz_io_uring_setup(0x497, &(0x7f0000000200)={0x0, 0x7278, 0x0, 0x1, 0x18e}, 0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000240)={0x2, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x2, 0x18, 0x0, 0x6, 0xa, 0x0, 0x0, 0x25dfdbfd, [@sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x4e22, 0xf5, @private0, 0x92}}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x1, @broadcast}}]}, 0x50}}, 0x0) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r5 = socket(0x1d, 0x2, 0x6) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) ptrace$setsig(0x4203, 0x0, 0x10, 0x0) bpf$MAP_CREATE(0x1101000000000000, &(0x7f0000000500)=ANY=[@ANYBLOB], 0x48) ioctl$FAT_IOCTL_GET_VOLUME_ID(r4, 0x80047213, 0x0) io_uring_enter(r1, 0x26c8, 0x0, 0x1, 0x0, 0x10) mmap$IORING_OFF_CQ_RING(&(0x7f0000c74000/0x2000)=nil, 0x2000, 0x1000008, 0x13, r1, 0x8000000) socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) setsockopt$packet_drop_memb(r5, 0x107, 0x2, &(0x7f00000000c0)={0x0, 0x1, 0x6, @local}, 0x10) r6 = socket(0x200000000000011, 0x2, 0x0) bind$packet(r6, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2800001, 0xc3072, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) 152.259528ms ago: executing program 3 (id=2972): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x88) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, 0x0) r0 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r0, &(0x7f0000001600)='./file1\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./bus\x00') link(&(0x7f0000000100)='./file1\x00', &(0x7f0000000180)='./file0\x00') creat(&(0x7f0000000880)='./file0\x00', 0x0) 0s ago: executing program 3 (id=2973): mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',gr', @ANYRESDEC=0x0]) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x6, 0x2}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x5}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) connect$unix(0xffffffffffffffff, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r0, &(0x7f0000000180)={0x1a, 0x0, 0xf9, 0x8, 0xff, 0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}}, 0x10) sendmmsg(r0, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) kernel console output (not intermixed with test programs): ink: 'syz.1.2234': attribute type 10 has an invalid length. [ 896.393347][ T27] kauditd_printk_skb: 67 callbacks suppressed [ 896.394325][ T27] audit: type=1326 audit(1751482887.640:2917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13121 comm="syz.4.2235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f916a98e929 code=0x7ffc0000 [ 896.442144][ T27] audit: type=1326 audit(1751482887.640:2918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13121 comm="syz.4.2235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f916a98e929 code=0x7ffc0000 [ 897.180743][ T27] audit: type=1326 audit(1751482887.640:2919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13121 comm="syz.4.2235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f916a98e929 code=0x7ffc0000 [ 897.411321][ T27] audit: type=1326 audit(1751482887.640:2920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13121 comm="syz.4.2235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f916a98e929 code=0x7ffc0000 [ 897.511791][ T27] audit: type=1326 audit(1751482887.640:2921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13121 comm="syz.4.2235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f916a98e929 code=0x7ffc0000 [ 897.538517][ T27] audit: type=1326 audit(1751482887.640:2922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13121 comm="syz.4.2235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f916a98e929 code=0x7ffc0000 [ 897.569842][ T27] audit: type=1326 audit(1751482887.640:2923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13121 comm="syz.4.2235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f916a98e929 code=0x7ffc0000 [ 898.779376][ T27] audit: type=1326 audit(1751482887.640:2924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13121 comm="syz.4.2235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f916a98e929 code=0x7ffc0000 [ 898.802666][ T27] audit: type=1326 audit(1751482887.640:2925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13121 comm="syz.4.2235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f916a98e929 code=0x7ffc0000 [ 898.825642][ T27] audit: type=1326 audit(1751482887.650:2926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13121 comm="syz.4.2235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f916a98e929 code=0x7ffc0000 [ 899.525819][T13150] 9pnet_fd: Insufficient options for proto=fd [ 901.059861][T13169] sg_write: data in/out 41084/1 bytes for SCSI command 0x1c-- guessing data in; [ 901.059861][T13169] program syz.3.2248 not setting count and/or reply_len properly [ 901.591711][ T4294] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 901.781376][ T4294] usb 1-1: Using ep0 maxpacket: 32 [ 901.793085][ T4294] usb 1-1: config index 0 descriptor too short (expected 156, got 27) [ 901.815307][ T4294] usb 1-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 901.830162][ T4294] usb 1-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 901.872710][ T4294] usb 1-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid wMaxPacketSize 0 [ 901.925906][ T4294] usb 1-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 901.970033][ T4294] usb 1-1: config 0 interface 0 has no altsetting 0 [ 901.995298][ T4294] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 902.043954][ T4294] usb 1-1: New USB device strings: Mfr=85, Product=120, SerialNumber=6 [ 902.073972][ T4294] usb 1-1: Product: syz [ 902.085404][ T4294] usb 1-1: Manufacturer: syz [ 902.108445][ T4294] usb 1-1: SerialNumber: syz [ 902.127976][ T4294] usb 1-1: config 0 descriptor?? [ 902.138047][ T4294] ldusb 1-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 902.164788][ T4294] ldusb 1-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 903.432255][ T4294] usb 1-1: USB disconnect, device number 15 [ 903.439992][T13161] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 903.464073][T13176] ldusb 1-1:0.0: Couldn't submit interrupt_in_urb -19 [ 903.476343][ T4302] libceph: connect (1)[c::]:6789 error -101 [ 903.482300][ T4294] ldusb 1-1:0.0: LD USB Device #0 now disconnected [ 903.499851][ T4302] libceph: mon0 (1)[c::]:6789 connect error [ 903.524203][T13161] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 903.553315][T13183] ceph: No mds server is up or the cluster is laggy [ 903.816999][T13191] fuse: Bad value for 'fd' [ 904.009698][T13161] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 904.018827][T13161] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 904.027769][T13161] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 904.036648][T13161] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 904.160969][T13165] netlink: 'syz.2.2247': attribute type 10 has an invalid length. [ 904.252479][T13177] netlink: 3 bytes leftover after parsing attributes in process `syz.3.2248'. [ 907.012119][T13227] fuse: Unknown parameter '0x0000000000000004' [ 907.097388][ T4257] Bluetooth: hci4: unexpected event for opcode 0x0c25 [ 907.161766][T13234] netlink: 'syz.2.2267': attribute type 10 has an invalid length. [ 908.413376][T12444] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 908.741458][T12444] usb 5-1: Using ep0 maxpacket: 32 [ 908.753009][T13253] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 909.715114][T12444] usb 5-1: config index 0 descriptor too short (expected 156, got 27) [ 909.739883][T12444] usb 5-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 909.756324][T12444] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 909.768504][T12444] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid wMaxPacketSize 0 [ 909.780291][T12444] usb 5-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 909.796797][T12444] usb 5-1: config 0 interface 0 has no altsetting 0 [ 909.834566][T12444] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 909.844016][T12444] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=6 [ 909.858006][T12444] usb 5-1: Product: syz [ 909.862512][T12444] usb 5-1: Manufacturer: syz [ 909.868931][T12444] usb 5-1: SerialNumber: syz [ 909.918971][T12444] usb 5-1: config 0 descriptor?? [ 909.974912][T12444] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 910.010462][T12444] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 910.156921][ T4294] usb 5-1: USB disconnect, device number 11 [ 910.181934][ T4294] ldusb 5-1:0.0: LD USB Device #0 now disconnected [ 910.248074][T13269] fuse: Unknown parameter '0x0000000000000004' [ 910.701414][ T5701] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 910.758738][T13288] IPVS: Error connecting to the multicast addr [ 910.767084][T13279] 9pnet: Unknown protocol version 9p20\++} [ 910.901318][ T5701] usb 3-1: Using ep0 maxpacket: 16 [ 910.961731][ T5701] usb 3-1: config index 0 descriptor too short (expected 1828, got 36) [ 911.001363][ T5701] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 911.028220][ T5701] usb 3-1: config 0 has no interfaces? [ 911.083450][ T5701] usb 3-1: New USB device found, idVendor=06cd, idProduct=0115, bcdDevice=1a.1e [ 911.383097][ T5701] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 911.649194][ T5701] usb 3-1: Product: syz [ 911.653663][ T5701] usb 3-1: Manufacturer: syz [ 911.658260][ T5701] usb 3-1: SerialNumber: syz [ 911.671934][ T5701] usb 3-1: config 0 descriptor?? [ 911.922900][ T27] kauditd_printk_skb: 58 callbacks suppressed [ 911.922923][ T27] audit: type=1326 audit(1751482903.210:2985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13294 comm="syz.1.2282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20e7f8e929 code=0x7ffc0000 [ 912.685603][ T27] audit: type=1326 audit(1751482903.240:2986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13294 comm="syz.1.2282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f20e7f8e929 code=0x7ffc0000 [ 912.782468][ T27] audit: type=1326 audit(1751482903.240:2987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13294 comm="syz.1.2282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20e7f8e929 code=0x7ffc0000 [ 913.121361][ T27] audit: type=1326 audit(1751482903.240:2988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13294 comm="syz.1.2282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f20e7f8e929 code=0x7ffc0000 [ 913.125021][ T5701] usb 3-1: USB disconnect, device number 10 [ 913.171290][ T27] audit: type=1326 audit(1751482903.240:2989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13294 comm="syz.1.2282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20e7f8e929 code=0x7ffc0000 [ 913.251675][ T27] audit: type=1326 audit(1751482903.240:2990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13294 comm="syz.1.2282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7f20e7f8e929 code=0x7ffc0000 [ 913.454051][ T27] audit: type=1326 audit(1751482903.240:2991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13294 comm="syz.1.2282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20e7f8e929 code=0x7ffc0000 [ 914.595617][ T27] audit: type=1326 audit(1751482903.240:2992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13294 comm="syz.1.2282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f20e7f8e929 code=0x7ffc0000 [ 915.191291][ T27] audit: type=1326 audit(1751482903.240:2993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13294 comm="syz.1.2282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20e7f8e929 code=0x7ffc0000 [ 915.214286][ T27] audit: type=1326 audit(1751482903.250:2994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13294 comm="syz.1.2282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f20e7f8e929 code=0x7ffc0000 [ 915.265269][T13326] fuse: Unknown parameter '0x0000000000000004' [ 915.351337][T12444] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 915.420070][T13330] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2292'. [ 915.561696][T12444] usb 5-1: Using ep0 maxpacket: 32 [ 915.569521][T12444] usb 5-1: config index 0 descriptor too short (expected 156, got 27) [ 915.629301][T12444] usb 5-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 915.671544][T12444] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 915.683216][T12444] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid wMaxPacketSize 0 [ 915.693561][T12444] usb 5-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 915.707203][T12444] usb 5-1: config 0 interface 0 has no altsetting 0 [ 915.728988][T12444] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 915.748038][T12444] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=6 [ 915.762047][T12444] usb 5-1: Product: syz [ 915.766484][T12444] usb 5-1: Manufacturer: syz [ 915.791379][T12444] usb 5-1: SerialNumber: syz [ 915.816516][T12444] usb 5-1: config 0 descriptor?? [ 915.837179][T12444] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 915.849759][T12444] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 915.885679][T13339] Process accounting resumed [ 916.047823][T12444] usb 5-1: USB disconnect, device number 12 [ 916.059442][T13322] ldusb 5-1:0.0: Couldn't submit interrupt_in_urb -19 [ 916.068646][T12444] ldusb 5-1:0.0: LD USB Device #0 now disconnected [ 918.157259][T13365] fuse: Unknown parameter '0x0000000000000004' [ 918.871967][ T4257] Bluetooth: hci0: unexpected event for opcode 0x0c25 [ 919.221536][T13385] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 919.509225][T13404] fuse: Unknown parameter '0x0000000000000004' [ 920.836482][T12444] libceph: connect (1)[c::]:6789 error -101 [ 920.847879][T12444] libceph: mon0 (1)[c::]:6789 connect error [ 920.860878][T13410] ceph: No mds server is up or the cluster is laggy [ 922.280790][T13449] fuse: Unknown parameter '0x0000000000000004' [ 922.678705][ T27] kauditd_printk_skb: 59 callbacks suppressed [ 922.678786][ T27] audit: type=1326 audit(1751482913.960:3054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13450 comm="syz.0.2329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f6118e929 code=0x7ffc0000 [ 924.260609][ T27] audit: type=1326 audit(1751482913.960:3055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13450 comm="syz.0.2329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f6118e929 code=0x7ffc0000 [ 924.480560][ T27] audit: type=1326 audit(1751482913.990:3056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13450 comm="syz.0.2329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f0f6118e929 code=0x7ffc0000 [ 925.605179][ T27] audit: type=1326 audit(1751482913.990:3057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13450 comm="syz.0.2329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f6118e929 code=0x7ffc0000 [ 925.640670][ T27] audit: type=1326 audit(1751482913.990:3058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13450 comm="syz.0.2329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f0f6118e929 code=0x7ffc0000 [ 925.687242][ T27] audit: type=1326 audit(1751482914.000:3059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13450 comm="syz.0.2329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f6118e929 code=0x7ffc0000 [ 925.849987][ T27] audit: type=1326 audit(1751482914.000:3060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13450 comm="syz.0.2329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7f0f6118e929 code=0x7ffc0000 [ 925.905139][ T27] audit: type=1326 audit(1751482914.000:3061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13450 comm="syz.0.2329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f6118e929 code=0x7ffc0000 [ 925.930670][ T27] audit: type=1326 audit(1751482914.000:3062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13450 comm="syz.0.2329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f0f6118e929 code=0x7ffc0000 [ 925.965052][T13474] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 925.987084][ T27] audit: type=1326 audit(1751482914.000:3063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13450 comm="syz.0.2329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f6118e929 code=0x7ffc0000 [ 927.035225][T13492] fuse: Unknown parameter 'fd0x0000000000000004' [ 928.557106][ T27] kauditd_printk_skb: 57 callbacks suppressed [ 928.557120][ T27] audit: type=1326 audit(1751482919.840:3121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13509 comm="syz.3.2348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5c9d8e929 code=0x7ffc0000 [ 929.055918][ T27] audit: type=1326 audit(1751482919.870:3122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13509 comm="syz.3.2348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa5c9d8e929 code=0x7ffc0000 [ 930.348685][ T27] audit: type=1326 audit(1751482919.870:3123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13509 comm="syz.3.2348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5c9d8e929 code=0x7ffc0000 [ 930.528996][ T27] audit: type=1326 audit(1751482919.870:3124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13509 comm="syz.3.2348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7fa5c9d8e929 code=0x7ffc0000 [ 931.373120][ T1273] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.379519][ T1273] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.485525][ T27] audit: type=1326 audit(1751482919.870:3125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13509 comm="syz.3.2348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5c9d8e929 code=0x7ffc0000 [ 931.509465][ T27] audit: type=1326 audit(1751482919.880:3126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13509 comm="syz.3.2348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7fa5c9d8e929 code=0x7ffc0000 [ 931.532221][ T27] audit: type=1326 audit(1751482919.880:3127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13509 comm="syz.3.2348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5c9d8e929 code=0x7ffc0000 [ 931.556502][ T27] audit: type=1326 audit(1751482919.880:3128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13509 comm="syz.3.2348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fa5c9d8e929 code=0x7ffc0000 [ 931.603009][T13532] 9pnet_fd: Insufficient options for proto=fd [ 931.698166][T13534] sg_write: data in/out 41084/1 bytes for SCSI command 0x1c-- guessing data in; [ 931.698166][T13534] program syz.2.2353 not setting count and/or reply_len properly [ 931.851395][ T27] audit: type=1326 audit(1751482919.880:3129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13509 comm="syz.3.2348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5c9d8e929 code=0x7ffc0000 [ 931.877235][ T27] audit: type=1326 audit(1751482919.880:3130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13509 comm="syz.3.2348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa5c9d8e929 code=0x7ffc0000 [ 933.253332][T13540] input: syz1 as /devices/virtual/input/input32 [ 933.410838][T13555] fuse: Unknown parameter 'fd0x0000000000000004' [ 934.612566][T13545] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 934.621679][T13545] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 934.630532][T13545] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 934.639531][T13545] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 934.814567][T13545] device wireguard0 left promiscuous mode [ 937.635889][T12444] libceph: connect (1)[c::]:6789 error -101 [ 937.643054][T12444] libceph: mon0 (1)[c::]:6789 connect error [ 937.693722][T13578] ceph: No mds server is up or the cluster is laggy [ 938.699272][ T27] kauditd_printk_skb: 58 callbacks suppressed [ 938.699286][ T27] audit: type=1326 audit(1751482929.980:3189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13588 comm="syz.1.2366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20e7f8e929 code=0x7ffc0000 [ 939.117654][ T27] audit: type=1326 audit(1751482930.020:3190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13588 comm="syz.1.2366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f20e7f8e929 code=0x7ffc0000 [ 939.172302][ T27] audit: type=1326 audit(1751482930.020:3191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13588 comm="syz.1.2366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20e7f8e929 code=0x7ffc0000 [ 939.258110][ T27] audit: type=1326 audit(1751482930.020:3192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13588 comm="syz.1.2366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f20e7f8e929 code=0x7ffc0000 [ 939.289050][ T27] audit: type=1326 audit(1751482930.020:3193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13588 comm="syz.1.2366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20e7f8e929 code=0x7ffc0000 [ 939.316415][ T27] audit: type=1326 audit(1751482930.020:3194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13588 comm="syz.1.2366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7f20e7f8e929 code=0x7ffc0000 [ 939.351910][ T27] audit: type=1326 audit(1751482930.020:3195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13588 comm="syz.1.2366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20e7f8e929 code=0x7ffc0000 [ 939.435221][ T27] audit: type=1326 audit(1751482930.020:3196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13588 comm="syz.1.2366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f20e7f8e929 code=0x7ffc0000 [ 939.478576][T13598] fuse: Unknown parameter 'fd0x0000000000000004' [ 939.500426][ T27] audit: type=1326 audit(1751482930.020:3197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13588 comm="syz.1.2366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20e7f8e929 code=0x7ffc0000 [ 939.524248][ T27] audit: type=1326 audit(1751482930.020:3198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13588 comm="syz.1.2366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f20e7f8e929 code=0x7ffc0000 [ 942.232685][T13619] 9pnet_fd: Insufficient options for proto=fd [ 943.439441][T13635] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 943.798249][ T27] kauditd_printk_skb: 58 callbacks suppressed [ 943.798293][ T27] audit: type=1326 audit(1751482935.080:3257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13642 comm="syz.1.2381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20e7f8e929 code=0x7ffc0000 [ 944.620266][ T27] audit: type=1326 audit(1751482935.110:3258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13642 comm="syz.1.2381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f20e7f8e929 code=0x7ffc0000 [ 944.642766][ T27] audit: type=1326 audit(1751482935.110:3259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13642 comm="syz.1.2381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20e7f8e929 code=0x7ffc0000 [ 944.665289][ T27] audit: type=1326 audit(1751482935.120:3260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13642 comm="syz.1.2381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f20e7f8e929 code=0x7ffc0000 [ 944.687736][ T27] audit: type=1326 audit(1751482935.120:3261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13642 comm="syz.1.2381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20e7f8e929 code=0x7ffc0000 [ 944.719887][ T27] audit: type=1326 audit(1751482935.120:3262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13642 comm="syz.1.2381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7f20e7f8e929 code=0x7ffc0000 [ 944.781761][ T27] audit: type=1326 audit(1751482935.120:3263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13642 comm="syz.1.2381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20e7f8e929 code=0x7ffc0000 [ 944.981395][ T27] audit: type=1326 audit(1751482935.120:3264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13642 comm="syz.1.2381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f20e7f8e929 code=0x7ffc0000 [ 945.074635][ T27] audit: type=1326 audit(1751482935.120:3265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13642 comm="syz.1.2381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20e7f8e929 code=0x7ffc0000 [ 945.101552][ T27] audit: type=1326 audit(1751482935.120:3266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13642 comm="syz.1.2381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f20e7f8e929 code=0x7ffc0000 [ 947.259828][ T4310] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 949.370447][ T4310] usb 1-1: Using ep0 maxpacket: 8 [ 949.449276][T13673] netlink: 108 bytes leftover after parsing attributes in process `syz.4.2389'. [ 949.458770][T13673] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2389'. [ 949.472554][T13673] Device name cannot be null; rc = [-22] [ 949.677865][ T4310] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 949.691417][ T4310] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 949.701198][ T4310] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 949.711292][ T4310] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 949.724572][ T4310] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 949.733834][ T4310] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 951.374212][T12444] libceph: connect (1)[c::]:6789 error -101 [ 951.380680][T12444] libceph: mon0 (1)[c::]:6789 connect error [ 951.410026][T13681] ceph: No mds server is up or the cluster is laggy [ 951.489045][ T4310] usb 1-1: usb_control_msg returned -71 [ 951.494765][ T4310] usbtmc 1-1:16.0: can't read capabilities [ 951.593595][ T4310] usb 1-1: USB disconnect, device number 16 [ 951.848928][ T27] kauditd_printk_skb: 58 callbacks suppressed [ 951.848945][ T27] audit: type=1326 audit(1751482943.130:3325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13689 comm="syz.3.2394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5c9d8e929 code=0x7ffc0000 [ 952.951076][ T27] audit: type=1326 audit(1751482943.170:3326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13689 comm="syz.3.2394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa5c9d8e929 code=0x7ffc0000 [ 953.018368][T13702] 9pnet_fd: Insufficient options for proto=fd [ 953.032757][ T27] audit: type=1326 audit(1751482943.170:3327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13689 comm="syz.3.2394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5c9d8e929 code=0x7ffc0000 [ 953.126090][T13709] netlink: 'syz.1.2397': attribute type 3 has an invalid length. [ 953.138927][ T27] audit: type=1326 audit(1751482943.170:3328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13689 comm="syz.3.2394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7fa5c9d8e929 code=0x7ffc0000 [ 953.175279][ T27] audit: type=1326 audit(1751482943.170:3329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13689 comm="syz.3.2394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5c9d8e929 code=0x7ffc0000 [ 953.214731][ T27] audit: type=1326 audit(1751482943.170:3330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13689 comm="syz.3.2394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7fa5c9d8e929 code=0x7ffc0000 [ 953.298069][ T27] audit: type=1326 audit(1751482943.170:3331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13689 comm="syz.3.2394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5c9d8e929 code=0x7ffc0000 [ 953.398731][ T27] audit: type=1326 audit(1751482943.170:3332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13689 comm="syz.3.2394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fa5c9d8e929 code=0x7ffc0000 [ 953.486542][ T27] audit: type=1326 audit(1751482943.170:3333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13689 comm="syz.3.2394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5c9d8e929 code=0x7ffc0000 [ 953.589908][ T27] audit: type=1326 audit(1751482943.170:3334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13689 comm="syz.3.2394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa5c9d8e929 code=0x7ffc0000 [ 954.050227][T13723] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 954.970797][T10854] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 955.043245][ T4309] libceph: connect (1)[c::]:6789 error -101 [ 955.093891][ T4309] libceph: mon0 (1)[c::]:6789 connect error [ 955.197747][T13734] ceph: No mds server is up or the cluster is laggy [ 955.491417][T10854] usb 4-1: Using ep0 maxpacket: 8 [ 955.504182][T10854] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 956.407112][T10854] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 956.492771][T10854] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 956.875230][T10854] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 956.993272][T10854] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 957.064762][T10854] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 957.383044][T10854] usb 4-1: GET_CAPABILITIES returned 0 [ 957.388595][T10854] usbtmc 4-1:16.0: can't read capabilities [ 958.288912][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 958.299013][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 958.308110][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 958.317163][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 958.326231][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 958.335314][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 958.344385][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 958.353451][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 958.362499][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 958.371533][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 958.380568][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 958.389604][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 958.398641][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 958.407679][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 958.416715][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -2 [ 958.425744][ C1] vkms_vblank_simulate: vblank timer overrun [ 958.437384][ T5701] usb 4-1: USB disconnect, device number 14 [ 958.521126][ T27] kauditd_printk_skb: 58 callbacks suppressed [ 958.521166][ T27] audit: type=1326 audit(1751482949.800:3393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13749 comm="syz.1.2411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20e7f8e929 code=0x7ffc0000 [ 959.160229][ T27] audit: type=1326 audit(1751482949.840:3394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13749 comm="syz.1.2411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20e7f8e929 code=0x7ffc0000 [ 959.197918][ T27] audit: type=1326 audit(1751482949.840:3395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13749 comm="syz.1.2411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f20e7f8e929 code=0x7ffc0000 [ 959.273177][T13755] sg_write: data in/out 41084/1 bytes for SCSI command 0x1c-- guessing data in; [ 959.273177][T13755] program syz.4.2413 not setting count and/or reply_len properly [ 959.382034][ T27] audit: type=1326 audit(1751482949.840:3396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13749 comm="syz.1.2411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20e7f8e929 code=0x7ffc0000 [ 959.427110][T13755] netlink: 3 bytes leftover after parsing attributes in process `syz.4.2413'. [ 959.457000][ T27] audit: type=1326 audit(1751482949.840:3397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13749 comm="syz.1.2411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f20e7f8e929 code=0x7ffc0000 [ 959.600537][ T27] audit: type=1326 audit(1751482949.840:3398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13749 comm="syz.1.2411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20e7f8e929 code=0x7ffc0000 [ 959.629625][ T27] audit: type=1326 audit(1751482949.840:3399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13749 comm="syz.1.2411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20e7f8e929 code=0x7ffc0000 [ 959.662348][ T27] audit: type=1326 audit(1751482949.840:3400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13749 comm="syz.1.2411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7f20e7f8e929 code=0x7ffc0000 [ 959.761504][ T27] audit: type=1326 audit(1751482949.840:3401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13749 comm="syz.1.2411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20e7f8e929 code=0x7ffc0000 [ 959.789070][ T27] audit: type=1326 audit(1751482949.840:3402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13749 comm="syz.1.2411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f20e7f8e929 code=0x7ffc0000 [ 959.847693][T13768] 9pnet_fd: Insufficient options for proto=fd [ 962.796193][T10854] libceph: connect (1)[c::]:6789 error -101 [ 962.815857][T10854] libceph: mon0 (1)[c::]:6789 connect error [ 962.842585][T13787] ceph: No mds server is up or the cluster is laggy [ 966.501375][ T5701] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 967.841408][ T5701] usb 2-1: Using ep0 maxpacket: 8 [ 967.849097][ T5701] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 967.937261][ T5701] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 968.008953][ T5701] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 968.069611][ T5701] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 968.105383][ T5701] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 968.151152][ T5701] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 969.556627][ T4257] Bluetooth: hci0: unexpected event for opcode 0x0c22 [ 969.567850][ T4310] libceph: connect (1)[c::]:6789 error -101 [ 969.576125][ T4310] libceph: mon0 (1)[c::]:6789 connect error [ 969.645855][ T5701] usb 2-1: usb_control_msg returned -71 [ 969.651522][ T5701] usbtmc 2-1:16.0: can't read capabilities [ 969.660273][T13833] ceph: No mds server is up or the cluster is laggy [ 970.024144][ T5701] usb 2-1: USB disconnect, device number 14 [ 970.444687][ T4310] libceph: connect (1)[c::]:6789 error -101 [ 970.461503][ T4310] libceph: mon0 (1)[c::]:6789 connect error [ 970.732654][T10854] libceph: connect (1)[c::]:6789 error -101 [ 970.747394][T10854] libceph: mon0 (1)[c::]:6789 connect error [ 970.821421][ T4310] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 970.903100][T13852] ceph: No mds server is up or the cluster is laggy [ 971.041313][ T4310] usb 4-1: Using ep0 maxpacket: 16 [ 971.049328][ T4310] usb 4-1: config index 0 descriptor too short (expected 1828, got 36) [ 971.064579][ T4310] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 971.082924][ T4310] usb 4-1: config 0 has no interfaces? [ 971.097887][ T4310] usb 4-1: New USB device found, idVendor=06cd, idProduct=0115, bcdDevice=1a.1e [ 971.141517][ T4310] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 971.168880][ T4310] usb 4-1: Product: syz [ 971.189853][ T4310] usb 4-1: Manufacturer: syz [ 971.199717][ T4310] usb 4-1: SerialNumber: syz [ 971.211120][ T4310] usb 4-1: config 0 descriptor?? [ 972.847657][ T4309] usb 4-1: USB disconnect, device number 15 [ 973.186994][T13874] netlink: 108 bytes leftover after parsing attributes in process `syz.2.2442'. [ 973.196840][T13874] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2442'. [ 973.210773][T13874] Device name cannot be null; rc = [-22] [ 973.905659][T13875] 9pnet_fd: Insufficient options for proto=fd [ 977.312173][ T4373] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 977.386556][T13919] netlink: 108 bytes leftover after parsing attributes in process `syz.3.2456'. [ 977.396408][T13919] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2456'. [ 978.311344][ T4373] usb 2-1: Using ep0 maxpacket: 16 [ 979.398690][ T4373] usb 2-1: config index 0 descriptor too short (expected 1828, got 36) [ 979.431396][ T4373] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 979.459799][ T4309] libceph: connect (1)[c::]:6789 error -101 [ 979.468305][ T4309] libceph: mon0 (1)[c::]:6789 connect error [ 979.677918][T13922] ceph: No mds server is up or the cluster is laggy [ 979.732532][ T4373] usb 2-1: config 0 has no interfaces? [ 979.759149][ T4373] usb 2-1: New USB device found, idVendor=06cd, idProduct=0115, bcdDevice=1a.1e [ 979.769558][ T4373] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 979.879968][ T4373] usb 2-1: Product: syz [ 979.924391][ T4373] usb 2-1: Manufacturer: syz [ 979.929002][ T4373] usb 2-1: SerialNumber: syz [ 979.947892][T13937] netlink: 'syz.4.2460': attribute type 10 has an invalid length. [ 979.964996][ T4373] usb 2-1: config 0 descriptor?? [ 980.162636][ T4373] usb 2-1: can't set config #0, error -71 [ 980.180744][ T4373] usb 2-1: USB disconnect, device number 15 [ 983.111318][ T4309] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 983.216335][T13977] netlink: 108 bytes leftover after parsing attributes in process `syz.2.2470'. [ 983.226411][T13977] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2470'. [ 983.301375][ T4309] usb 2-1: Using ep0 maxpacket: 32 [ 983.983896][ T4309] usb 2-1: config index 0 descriptor too short (expected 156, got 27) [ 984.023645][ T4309] usb 2-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 984.166818][ T4309] usb 2-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 984.238292][ T4309] usb 2-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 984.268815][ T4309] usb 2-1: config 0 interface 0 has no altsetting 0 [ 984.283500][ T4309] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 984.294052][ T4309] usb 2-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 984.303107][ T4309] usb 2-1: Product: syz [ 984.307300][ T4309] usb 2-1: Manufacturer: syz [ 984.319646][ T4309] usb 2-1: SerialNumber: syz [ 984.348659][ T4309] usb 2-1: config 0 descriptor?? [ 984.363835][ T4309] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 984.376744][ T4309] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 984.580992][T13987] netlink: 'syz.3.2474': attribute type 10 has an invalid length. [ 984.626563][ T4389] usb 2-1: USB disconnect, device number 16 [ 984.632621][ C0] ldusb 2-1:0.0: usb_submit_urb failed (-19) [ 984.740942][ T4389] ldusb 2-1:0.0: LD USB Device #0 now disconnected [ 984.747777][ T4373] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 984.931845][ T4373] usb 3-1: Using ep0 maxpacket: 16 [ 984.938453][ T4373] usb 3-1: config index 0 descriptor too short (expected 1828, got 36) [ 984.956363][ T4373] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 984.986525][ T4373] usb 3-1: config 0 has no interfaces? [ 985.015108][ T4373] usb 3-1: New USB device found, idVendor=06cd, idProduct=0115, bcdDevice=1a.1e [ 985.057706][ T4373] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 985.090275][ T4373] usb 3-1: Product: syz [ 985.205078][ T4373] usb 3-1: Manufacturer: syz [ 985.209704][ T4373] usb 3-1: SerialNumber: syz [ 985.238856][ T4373] usb 3-1: config 0 descriptor?? [ 986.393449][ T4310] libceph: connect (1)[c::]:6789 error -101 [ 986.400913][ T4310] libceph: mon0 (1)[c::]:6789 connect error [ 986.455918][T14004] ceph: No mds server is up or the cluster is laggy [ 986.564144][ T4373] usb 3-1: USB disconnect, device number 11 [ 987.834193][T14022] sg_write: data in/out 41084/1 bytes for SCSI command 0x1c-- guessing data in; [ 987.834193][T14022] program syz.2.2481 not setting count and/or reply_len properly [ 988.105815][T14028] netlink: 3 bytes leftover after parsing attributes in process `syz.2.2481'. [ 989.153106][T14039] netlink: 108 bytes leftover after parsing attributes in process `syz.4.2484'. [ 989.163284][T14039] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2484'. [ 991.895969][ T4309] libceph: connect (1)[c::]:6789 error -101 [ 992.022480][T14061] ceph: No mds server is up or the cluster is laggy [ 992.041441][ T4309] libceph: mon0 (1)[c::]:6789 connect error [ 992.406060][ T4309] libceph: connect (1)[c::]:6789 error -101 [ 992.412761][ T4309] libceph: mon0 (1)[c::]:6789 connect error [ 992.812687][ T1273] ieee802154 phy0 wpan0: encryption failed: -22 [ 992.819201][ T1273] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.541185][T14089] netlink: 108 bytes leftover after parsing attributes in process `syz.2.2497'. [ 993.553121][T14089] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2497'. [ 993.581307][ T4294] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 994.461433][ T4294] usb 5-1: Using ep0 maxpacket: 16 [ 994.468149][ T4294] usb 5-1: config index 0 descriptor too short (expected 1828, got 36) [ 994.505120][ T4294] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 994.545793][ T4294] usb 5-1: config 0 has no interfaces? [ 994.585305][ T4294] usb 5-1: New USB device found, idVendor=06cd, idProduct=0115, bcdDevice=1a.1e [ 994.639547][ T4294] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 994.690266][ T4294] usb 5-1: Product: syz [ 994.715449][ T4294] usb 5-1: Manufacturer: syz [ 994.758654][ T4294] usb 5-1: SerialNumber: syz [ 994.798122][ T4294] usb 5-1: config 0 descriptor?? [ 995.034541][ T4294] usb 5-1: USB disconnect, device number 13 [ 995.128624][T14112] netlink: 5364 bytes leftover after parsing attributes in process `syz.2.2504'. [ 998.206920][T14136] sg_write: data in/out 41084/1 bytes for SCSI command 0x1c-- guessing data in; [ 998.206920][T14136] program syz.4.2508 not setting count and/or reply_len properly [ 998.563887][T14146] netlink: 3 bytes leftover after parsing attributes in process `syz.4.2508'. [ 998.868255][ T27] kauditd_printk_skb: 58 callbacks suppressed [ 998.868294][ T27] audit: type=1326 audit(1751482990.150:3461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14150 comm="syz.3.2512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5c9d8e929 code=0x7ffc0000 [ 999.568412][T11653] batman_adv: batadv1: adding TT local entry 33:33:00:00:00:01 to non-existent VLAN -1 [ 999.787262][ T27] audit: type=1326 audit(1751482990.190:3462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14150 comm="syz.3.2512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa5c9d8e929 code=0x7ffc0000 [ 999.950175][ T27] audit: type=1326 audit(1751482990.190:3463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14150 comm="syz.3.2512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5c9d8e929 code=0x7ffc0000 [ 999.982994][ T27] audit: type=1326 audit(1751482990.190:3464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14150 comm="syz.3.2512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7fa5c9d8e929 code=0x7ffc0000 [ 1000.139422][ T27] audit: type=1326 audit(1751482990.190:3465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14150 comm="syz.3.2512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5c9d8e929 code=0x7ffc0000 [ 1000.248613][ T27] audit: type=1326 audit(1751482990.190:3466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14150 comm="syz.3.2512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7fa5c9d8e929 code=0x7ffc0000 [ 1000.271721][ T27] audit: type=1326 audit(1751482990.190:3467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14150 comm="syz.3.2512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5c9d8e929 code=0x7ffc0000 [ 1000.294655][ T27] audit: type=1326 audit(1751482990.190:3468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14150 comm="syz.3.2512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fa5c9d8e929 code=0x7ffc0000 [ 1000.322903][ T27] audit: type=1326 audit(1751482990.190:3469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14150 comm="syz.3.2512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5c9d8e929 code=0x7ffc0000 [ 1001.430693][ T27] audit: type=1326 audit(1751482990.190:3470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14150 comm="syz.3.2512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa5c9d8e929 code=0x7ffc0000 [ 1001.526843][T12444] libceph: connect (1)[c::]:6789 error -101 [ 1001.537236][T12444] libceph: mon0 (1)[c::]:6789 connect error [ 1001.611431][T14177] ceph: No mds server is up or the cluster is laggy [ 1002.081339][T12444] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 1002.921386][T14192] 9pnet: Unknown protocol version 9p20\++} [ 1003.031405][T12444] usb 5-1: Using ep0 maxpacket: 16 [ 1004.526663][T12444] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 1005.330566][T12444] usb 5-1: can't read configurations, error -71 [ 1006.028078][T14218] sg_write: data in/out 41084/1 bytes for SCSI command 0x1c-- guessing data in; [ 1006.028078][T14218] program syz.0.2529 not setting count and/or reply_len properly [ 1006.047871][T14228] JFS: discard option not supported on device [ 1006.211093][ T27] kauditd_printk_skb: 57 callbacks suppressed [ 1006.211134][ T27] audit: type=1326 audit(1751482997.490:3528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14219 comm="syz.2.2530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6bdb8e929 code=0x7ffc0000 [ 1006.860055][T14220] netlink: 3 bytes leftover after parsing attributes in process `syz.0.2529'. [ 1007.043074][T14228] Mount JFS Failure: -22 [ 1007.050339][T14228] jfs_mount failed w/return code = -22 [ 1007.056980][T14233] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2528'. [ 1007.241639][ T27] audit: type=1326 audit(1751482997.530:3529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14219 comm="syz.2.2530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe6bdb8e929 code=0x7ffc0000 [ 1007.274582][T12444] libceph: connect (1)[c::]:6789 error -101 [ 1007.283711][T12444] libceph: mon0 (1)[c::]:6789 connect error [ 1007.324497][ T27] audit: type=1326 audit(1751482997.530:3530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14219 comm="syz.2.2530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6bdb8e929 code=0x7ffc0000 [ 1007.401833][T14227] ceph: No mds server is up or the cluster is laggy [ 1007.521477][ T27] audit: type=1326 audit(1751482997.530:3531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14219 comm="syz.2.2530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7fe6bdb8e929 code=0x7ffc0000 [ 1007.587361][ T27] audit: type=1326 audit(1751482997.530:3532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14219 comm="syz.2.2530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6bdb8e929 code=0x7ffc0000 [ 1007.644795][T14241] sg_write: data in/out 41084/1 bytes for SCSI command 0x1c-- guessing data in; [ 1007.644795][T14241] program syz.1.2535 not setting count and/or reply_len properly [ 1007.788745][ T27] audit: type=1326 audit(1751482997.530:3533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14219 comm="syz.2.2530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7fe6bdb8e929 code=0x7ffc0000 [ 1007.835987][T14241] input: syz1 as /devices/virtual/input/input37 [ 1007.885447][ T27] audit: type=1326 audit(1751482997.530:3534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14219 comm="syz.2.2530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6bdb8e929 code=0x7ffc0000 [ 1008.746317][ T27] audit: type=1326 audit(1751482997.530:3535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14219 comm="syz.2.2530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fe6bdb8e929 code=0x7ffc0000 [ 1008.769096][ T27] audit: type=1326 audit(1751482997.530:3536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14219 comm="syz.2.2530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6bdb8e929 code=0x7ffc0000 [ 1008.791952][ T27] audit: type=1326 audit(1751482997.530:3537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14219 comm="syz.2.2530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe6bdb8e929 code=0x7ffc0000 [ 1009.553750][T10854] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 1010.582382][T10854] usb 2-1: Using ep0 maxpacket: 16 [ 1011.412741][T10854] usb 2-1: config index 0 descriptor too short (expected 1828, got 36) [ 1011.438607][T10854] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1011.480929][T10854] usb 2-1: config 0 has no interfaces? [ 1011.774705][T10854] usb 2-1: New USB device found, idVendor=06cd, idProduct=0115, bcdDevice=1a.1e [ 1011.858268][ T27] kauditd_printk_skb: 57 callbacks suppressed [ 1011.858311][ T27] audit: type=1326 audit(1751483003.140:3595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14293 comm="syz.0.2549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f6118e929 code=0x7ffc0000 [ 1012.522612][T10854] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1012.541279][T10854] usb 2-1: Product: syz [ 1012.545489][T10854] usb 2-1: Manufacturer: syz [ 1012.550100][T10854] usb 2-1: SerialNumber: syz [ 1012.562113][T10854] usb 2-1: config 0 descriptor?? [ 1012.619982][T10854] usb 2-1: can't set config #0, error -71 [ 1012.641279][T10854] usb 2-1: USB disconnect, device number 17 [ 1012.655295][ T27] audit: type=1326 audit(1751483003.180:3596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14293 comm="syz.0.2549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f0f6118e929 code=0x7ffc0000 [ 1013.480073][ T27] audit: type=1326 audit(1751483003.180:3597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14293 comm="syz.0.2549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f6118e929 code=0x7ffc0000 [ 1013.580986][ T27] audit: type=1326 audit(1751483003.180:3598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14293 comm="syz.0.2549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f0f6118e929 code=0x7ffc0000 [ 1013.605654][ T27] audit: type=1326 audit(1751483003.180:3599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14293 comm="syz.0.2549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f6118e929 code=0x7ffc0000 [ 1013.629080][ T27] audit: type=1326 audit(1751483003.180:3600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14293 comm="syz.0.2549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7f0f6118e929 code=0x7ffc0000 [ 1013.652576][ T27] audit: type=1326 audit(1751483003.180:3601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14293 comm="syz.0.2549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f6118e929 code=0x7ffc0000 [ 1013.675209][ T27] audit: type=1326 audit(1751483003.180:3602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14293 comm="syz.0.2549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f0f6118e929 code=0x7ffc0000 [ 1013.698122][ T27] audit: type=1326 audit(1751483003.180:3603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14293 comm="syz.0.2549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f6118e929 code=0x7ffc0000 [ 1013.741353][ T27] audit: type=1326 audit(1751483003.180:3604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14293 comm="syz.0.2549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0f6118e929 code=0x7ffc0000 [ 1013.899178][T14304] sg_write: data in/out 41084/1 bytes for SCSI command 0x1c-- guessing data in; [ 1013.899178][T14304] program syz.0.2551 not setting count and/or reply_len properly [ 1014.139339][T14304] input: syz1 as /devices/virtual/input/input38 [ 1015.780850][T12444] libceph: connect (1)[c::]:6789 error -101 [ 1015.788114][T12444] libceph: mon0 (1)[c::]:6789 connect error [ 1015.859086][T14327] ceph: No mds server is up or the cluster is laggy [ 1016.871672][ T27] kauditd_printk_skb: 153 callbacks suppressed [ 1016.871689][ T27] audit: type=1326 audit(1751483008.090:3758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14334 comm="syz.2.2561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6bdb8e929 code=0x7ffc0000 [ 1017.157510][ T27] audit: type=1326 audit(1751483008.100:3759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14334 comm="syz.2.2561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fe6bdb858e7 code=0x7ffc0000 [ 1017.313623][ T27] audit: type=1326 audit(1751483008.100:3760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14334 comm="syz.2.2561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fe6bdb2ab19 code=0x7ffc0000 [ 1017.364558][ T27] audit: type=1326 audit(1751483008.100:3761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14334 comm="syz.2.2561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6bdb8e929 code=0x7ffc0000 [ 1017.387349][ T27] audit: type=1326 audit(1751483008.110:3762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14334 comm="syz.2.2561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fe6bdb858e7 code=0x7ffc0000 [ 1017.410143][T12444] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 1017.427160][ T27] audit: type=1326 audit(1751483008.110:3763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14334 comm="syz.2.2561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fe6bdb2ab19 code=0x7ffc0000 [ 1017.622556][ T27] audit: type=1326 audit(1751483008.110:3764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14334 comm="syz.2.2561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6bdb8e929 code=0x7ffc0000 [ 1017.647803][ T27] audit: type=1326 audit(1751483008.120:3765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14334 comm="syz.2.2561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fe6bdb858e7 code=0x7ffc0000 [ 1017.701746][T12444] usb 1-1: Using ep0 maxpacket: 16 [ 1017.712133][T12444] usb 1-1: config index 0 descriptor too short (expected 1828, got 36) [ 1017.740859][T12444] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1017.803294][T12444] usb 1-1: config 0 has no interfaces? [ 1017.835951][T12444] usb 1-1: New USB device found, idVendor=06cd, idProduct=0115, bcdDevice=1a.1e [ 1017.873601][T12444] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1017.923644][T12444] usb 1-1: Product: syz [ 1017.950219][T12444] usb 1-1: Manufacturer: syz [ 1017.973548][T12444] usb 1-1: SerialNumber: syz [ 1018.849570][T12444] usb 1-1: config 0 descriptor?? [ 1019.181090][T14362] sg_write: data in/out 41084/1 bytes for SCSI command 0x1c-- guessing data in; [ 1019.181090][T14362] program syz.1.2568 not setting count and/or reply_len properly [ 1019.205410][T14362] input: syz1 as /devices/virtual/input/input39 [ 1020.736537][T12444] usb 1-1: USB disconnect, device number 17 [ 1026.161124][T14413] sg_write: data in/out 41084/1 bytes for SCSI command 0x1c-- guessing data in; [ 1026.161124][T14413] program syz.2.2580 not setting count and/or reply_len properly [ 1026.183459][T14413] input: syz1 as /devices/virtual/input/input40 [ 1028.221324][ T4389] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 1029.511429][ T4389] usb 3-1: Using ep0 maxpacket: 16 [ 1029.526841][ T4389] usb 3-1: config index 0 descriptor too short (expected 1828, got 36) [ 1029.545495][ T4389] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1029.713870][ T4389] usb 3-1: config 0 has no interfaces? [ 1029.763616][ T4389] usb 3-1: New USB device found, idVendor=06cd, idProduct=0115, bcdDevice=1a.1e [ 1029.802013][ T4389] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1029.866541][ T4389] usb 3-1: Product: syz [ 1029.898871][ T4389] usb 3-1: Manufacturer: syz [ 1029.959560][ T4389] usb 3-1: SerialNumber: syz [ 1030.039086][ T4389] usb 3-1: config 0 descriptor?? [ 1030.051034][T14461] sg_write: data in/out 41084/1 bytes for SCSI command 0x1c-- guessing data in; [ 1030.051034][T14461] program syz.1.2592 not setting count and/or reply_len properly [ 1030.072149][T14456] ceph: No mds server is up or the cluster is laggy [ 1030.092697][T14461] input: syz1 as /devices/virtual/input/input41 [ 1030.121568][ T4373] libceph: connect (1)[c::]:6789 error -101 [ 1030.141119][ T4373] libceph: mon0 (1)[c::]:6789 connect error [ 1031.256222][ T5701] usb 3-1: USB disconnect, device number 12 [ 1034.113665][T12444] libceph: connect (1)[c::]:6789 error -101 [ 1034.122125][T12444] libceph: mon0 (1)[c::]:6789 connect error [ 1034.167850][T14497] ceph: No mds server is up or the cluster is laggy [ 1034.456071][T14506] sg_write: data in/out 41084/1 bytes for SCSI command 0x1c-- guessing data in; [ 1034.456071][T14506] program syz.0.2605 not setting count and/or reply_len properly [ 1035.880018][T14515] input: syz1 as /devices/virtual/input/input42 [ 1036.371300][ T5701] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 1036.561364][ T5701] usb 3-1: Using ep0 maxpacket: 16 [ 1036.570946][ T5701] usb 3-1: config index 0 descriptor too short (expected 1828, got 36) [ 1036.631684][ T5701] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1036.651427][ T5701] usb 3-1: config 0 has no interfaces? [ 1036.676222][ T5701] usb 3-1: New USB device found, idVendor=06cd, idProduct=0115, bcdDevice=1a.1e [ 1036.746523][ T5701] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1036.799203][ T5701] usb 3-1: Product: syz [ 1036.824870][ T5701] usb 3-1: Manufacturer: syz [ 1036.850795][ T5701] usb 3-1: SerialNumber: syz [ 1036.877725][ T5701] usb 3-1: config 0 descriptor?? [ 1036.893469][ T27] audit: type=1800 audit(1751483028.180:3766): pid=14526 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2608" name="/" dev="fuse" ino=1 res=0 errno=0 [ 1037.133392][ T4310] usb 3-1: USB disconnect, device number 13 [ 1040.652660][T10854] libceph: connect (1)[c::]:6789 error -101 [ 1040.659234][T10854] libceph: mon0 (1)[c::]:6789 connect error [ 1040.921471][T10854] libceph: connect (1)[c::]:6789 error -101 [ 1040.928102][T10854] libceph: mon0 (1)[c::]:6789 connect error [ 1041.133953][T14561] ceph: No mds server is up or the cluster is laggy [ 1042.159097][ T27] audit: type=1800 audit(1751483033.440:3767): pid=14588 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2621" name="/" dev="fuse" ino=1 res=0 errno=0 [ 1042.181648][ T4389] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 1042.371329][ T4389] usb 1-1: Using ep0 maxpacket: 16 [ 1042.468839][ T4389] usb 1-1: config index 0 descriptor too short (expected 1828, got 36) [ 1042.525374][ T4389] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1042.550732][ T4389] usb 1-1: config 0 has no interfaces? [ 1043.637936][ T4389] usb 1-1: New USB device found, idVendor=06cd, idProduct=0115, bcdDevice=1a.1e [ 1043.677543][ T4389] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1043.684356][ T4310] libceph: connect (1)[c::]:6789 error -101 [ 1043.691726][ T4310] libceph: mon0 (1)[c::]:6789 connect error [ 1043.774329][T14604] ceph: No mds server is up or the cluster is laggy [ 1043.792229][ T4389] usb 1-1: Product: syz [ 1043.806713][ T4389] usb 1-1: Manufacturer: syz [ 1043.835040][ T4389] usb 1-1: SerialNumber: syz [ 1043.883468][ T4389] usb 1-1: config 0 descriptor?? [ 1044.122336][T14617] 9pnet: Unknown protocol version 9p20\++} [ 1045.040514][ T5701] usb 1-1: USB disconnect, device number 18 [ 1045.083340][T14634] overlayfs: failed to resolve './file1': -2 [ 1046.242696][ T4257] Bluetooth: hci0: unexpected event for opcode 0x6522 [ 1048.816663][ T27] audit: type=1800 audit(1751483040.100:3768): pid=14662 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.2637" name="bus" dev="ramfs" ino=67934 res=0 errno=0 [ 1050.565446][T12444] libceph: connect (1)[c::]:6789 error -101 [ 1050.592957][T12444] libceph: mon0 (1)[c::]:6789 connect error [ 1050.606399][T14688] ceph: No mds server is up or the cluster is laggy [ 1050.847730][T14696] overlayfs: failed to resolve './file1': -2 [ 1051.229601][ T4257] Bluetooth: hci1: unexpected event for opcode 0x6522 [ 1053.812439][ T4302] libceph: connect (1)[c::]:6789 error -101 [ 1053.819600][ T4302] libceph: mon0 (1)[c::]:6789 connect error [ 1053.847193][T14725] ceph: No mds server is up or the cluster is laggy [ 1053.940400][T14739] overlayfs: failed to resolve './file1': -2 [ 1054.106129][T14744] overlayfs: failed to resolve './file1': -2 [ 1054.822783][ T1273] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.829174][ T1273] ieee802154 phy1 wpan1: encryption failed: -22 [ 1055.001610][T14760] ======================================================= [ 1055.001610][T14760] WARNING: The mand mount option has been deprecated and [ 1055.001610][T14760] and is ignored by this kernel. Remove the mand [ 1055.001610][T14760] option from the mount to silence this warning. [ 1055.001610][T14760] ======================================================= [ 1055.107836][ T4257] Bluetooth: hci4: unexpected event for opcode 0x6522 [ 1055.125159][T14760] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1055.826095][T14770] 9pnet: Could not find request transport: fd0x0000000000000006 [ 1056.583584][ T27] audit: type=1800 audit(1751483047.870:3769): pid=14761 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2663" name="bus" dev="ramfs" ino=68202 res=0 errno=0 [ 1056.728173][T14784] overlayfs: failed to resolve './file1': -2 [ 1058.410135][ T4310] libceph: connect (1)[c::]:6789 error -101 [ 1058.418353][ T4310] libceph: mon0 (1)[c::]:6789 connect error [ 1058.577805][T14799] ceph: No mds server is up or the cluster is laggy [ 1060.818296][T14829] 9pnet: Could not find request transport: fd0x0000000000000006 [ 1061.402575][T14845] device ip6gre1 entered promiscuous mode [ 1061.547243][T14849] overlayfs: failed to resolve './file1': -2 [ 1063.530792][T10854] libceph: connect (1)[c::]:6789 error -101 [ 1063.540112][T10854] libceph: mon0 (1)[c::]:6789 connect error [ 1063.666751][T14863] ceph: No mds server is up or the cluster is laggy [ 1066.166249][T14906] sg_write: data in/out 41084/1 bytes for SCSI command 0x1c-- guessing data in; [ 1066.166249][T14906] program syz.4.2700 not setting count and/or reply_len properly [ 1066.186777][T14906] netlink: 3 bytes leftover after parsing attributes in process `syz.4.2700'. [ 1066.708240][T14911] 9pnet: Could not find request transport: fd0x0000000000000006 [ 1066.771916][ T27] audit: type=1800 audit(1751483058.060:3770): pid=14894 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2695" name="bus" dev="ramfs" ino=68825 res=0 errno=0 [ 1070.735681][T14959] sg_write: data in/out 41084/1 bytes for SCSI command 0x1c-- guessing data in; [ 1070.735681][T14959] program syz.2.2713 not setting count and/or reply_len properly [ 1070.795358][T14959] netlink: 3 bytes leftover after parsing attributes in process `syz.2.2713'. [ 1070.945283][T14961] user requested TSC rate below hardware speed [ 1072.613614][T10854] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 1072.801294][T10854] usb 5-1: Using ep0 maxpacket: 32 [ 1072.808593][T10854] usb 5-1: config index 0 descriptor too short (expected 156, got 27) [ 1072.833631][T10854] usb 5-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 1072.852904][T10854] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 1072.864153][T10854] usb 5-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 1072.877666][T10854] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1072.893010][T14985] sg_write: data in/out 41084/1 bytes for SCSI command 0x1c-- guessing data in; [ 1072.893010][T14985] program syz.3.2722 not setting count and/or reply_len properly [ 1073.007131][T10854] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 1073.016389][T10854] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 1073.048034][T10854] usb 5-1: Product: syz [ 1073.052340][T10854] usb 5-1: Manufacturer: syz [ 1073.068469][T10854] usb 5-1: SerialNumber: syz [ 1073.095180][T10854] usb 5-1: config 0 descriptor?? [ 1073.118931][T10854] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 1073.159309][T10854] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 1073.218497][T14988] input: syz1 as /devices/virtual/input/input45 [ 1073.392169][ T5701] usb 5-1: USB disconnect, device number 16 [ 1073.485855][ T5701] ldusb 5-1:0.0: LD USB Device #0 now disconnected [ 1074.487578][T15006] sg_write: data in/out 41084/1 bytes for SCSI command 0x1c-- guessing data in; [ 1074.487578][T15006] program syz.0.2728 not setting count and/or reply_len properly [ 1074.511933][T15006] netlink: 3 bytes leftover after parsing attributes in process `syz.0.2728'. [ 1074.982883][T15018] overlayfs: failed to resolve './file0': -2 [ 1076.031315][T10854] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 1076.222136][T10854] usb 4-1: Using ep0 maxpacket: 32 [ 1076.233653][T10854] usb 4-1: config index 0 descriptor too short (expected 156, got 27) [ 1076.259903][T10854] usb 4-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 1076.278496][T15046] input: syz1 as /devices/virtual/input/input47 [ 1076.285011][T10854] usb 4-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 1076.354204][T10854] usb 4-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 1076.367435][T10854] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1076.408783][T10854] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 1076.522281][T10854] usb 4-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 1076.538759][T10854] usb 4-1: Product: syz [ 1076.546547][T10854] usb 4-1: Manufacturer: syz [ 1076.557154][T15052] sg_write: data in/out 41084/1 bytes for SCSI command 0x1c-- guessing data in; [ 1076.557154][T15052] program syz.2.2742 not setting count and/or reply_len properly [ 1077.426437][T10854] usb 4-1: SerialNumber: syz [ 1077.674468][T10854] usb 4-1: config 0 descriptor?? [ 1077.768118][T10854] ldusb 4-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 1077.797315][T10854] ldusb 4-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 1078.024818][ T5701] usb 4-1: USB disconnect, device number 16 [ 1078.024948][ C1] ldusb 4-1:0.0: usb_submit_urb failed (-19) [ 1078.038389][T15057] netlink: 3 bytes leftover after parsing attributes in process `syz.2.2742'. [ 1078.070570][ T5701] ldusb 4-1:0.0: LD USB Device #0 now disconnected [ 1078.747065][T15064] overlayfs: failed to resolve './file0': -2 [ 1078.979421][ T4257] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201' [ 1078.989539][ T4257] CPU: 0 PID: 4257 Comm: kworker/u5:3 Not tainted 6.1.142-syzkaller #0 [ 1078.997804][ T4257] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1079.007875][ T4257] Workqueue: hci0 hci_rx_work [ 1079.012605][ T4257] Call Trace: [ 1079.015894][ T4257] [ 1079.018812][ T4257] dump_stack_lvl+0x168/0x22e [ 1079.023495][ T4257] ? show_regs_print_info+0x12/0x12 [ 1079.028707][ T4257] ? load_image+0x3b0/0x3b0 [ 1079.033214][ T4257] sysfs_create_dir_ns+0x252/0x280 [ 1079.038314][ T4257] ? hci_rx_work+0x3eb/0xd40 [ 1079.042903][ T4257] ? sysfs_warn_dup+0xa0/0xa0 [ 1079.047605][ T4257] ? do_raw_spin_unlock+0x11d/0x230 [ 1079.052817][ T4257] kobject_add_internal+0x6b8/0xc80 [ 1079.058005][ T4257] kobject_add+0x152/0x210 [ 1079.062407][ T4257] ? kobject_init+0x1d0/0x1d0 [ 1079.067071][ T4257] ? klist_children_get+0x50/0x50 [ 1079.072082][ T4257] ? get_device_parent+0x121/0x3f0 [ 1079.077181][ T4257] device_add+0x483/0xfb0 [ 1079.081495][ T4257] ? kmem_cache_free+0xf7/0x290 [ 1079.086335][ T4257] hci_conn_add_sysfs+0xd1/0x1e0 [ 1079.091269][ T4257] le_conn_complete_evt+0xd1d/0x1320 [ 1079.096564][ T4257] ? hci_le_big_info_adv_report_evt+0x310/0x310 [ 1079.102794][ T4257] ? __mutex_unlock_slowpath+0x19e/0x6a0 [ 1079.108415][ T4257] ? skb_pull_data+0xf7/0x200 [ 1079.113077][ T4257] hci_le_conn_complete_evt+0x183/0x440 [ 1079.118621][ T4257] ? hci_remote_host_features_evt+0x270/0x270 [ 1079.124686][ T4257] hci_event_packet+0x791/0x1210 [ 1079.129618][ T4257] ? bis_list+0x280/0x280 [ 1079.133931][ T4257] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 1079.139819][ T4257] ? kcov_remote_start+0x4c7/0x7e0 [ 1079.144916][ T4257] ? nf_ct_l4proto_log_invalid+0x34/0x206 [ 1079.150625][ T4257] ? hci_send_to_monitor+0x9c/0x4a0 [ 1079.155811][ T4257] hci_rx_work+0x3eb/0xd40 [ 1079.160214][ T4257] ? _raw_spin_unlock+0x40/0x40 [ 1079.165058][ T4257] ? process_one_work+0x7a1/0x1160 [ 1079.170156][ T4257] process_one_work+0x898/0x1160 [ 1079.175086][ T4257] ? worker_detach_from_pool+0x240/0x240 [ 1079.180710][ T4257] ? _raw_spin_lock_irq+0xab/0xe0 [ 1079.185726][ T4257] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 1079.191085][ T4257] ? kthread_data+0x4b/0xc0 [ 1079.195577][ T4257] worker_thread+0xaa2/0x1250 [ 1079.200249][ T4257] kthread+0x29d/0x330 [ 1079.204300][ T4257] ? worker_clr_flags+0x1a0/0x1a0 [ 1079.209302][ T4257] ? kthread_blkcg+0xd0/0xd0 [ 1079.213875][ T4257] ret_from_fork+0x1f/0x30 [ 1079.218283][ T4257] [ 1079.226357][ T4257] kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 1079.239818][ T4257] Bluetooth: hci0: failed to register connection device [ 1079.475455][T15084] overlayfs: failed to resolve './file0': -2 [ 1080.266794][T10854] hid-generic 0000:0004:0000.0004: unknown main item tag 0x0 [ 1080.276528][T10854] hid-generic 0000:0004:0000.0004: unknown main item tag 0x0 [ 1080.285267][T10854] hid-generic 0000:0004:0000.0004: unknown main item tag 0x0 [ 1080.300466][T10854] hid-generic 0000:0004:0000.0004: hidraw0: HID v0.00 Device [syz0] on syz0 [ 1080.717170][T15101] fido_id[15101]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1080.753593][ T5701] libceph: connect (1)[c::]:6789 error -101 [ 1080.759553][ T5701] libceph: mon0 (1)[c::]:6789 connect error [ 1080.872986][T15104] ceph: No mds server is up or the cluster is laggy [ 1081.077401][T15112] input: syz1 as /devices/virtual/input/input49 [ 1082.147100][T15116] overlayfs: failed to resolve './file0': -2 [ 1082.501408][T15080] Bluetooth: hci0: Opcode 0x1407 failed: -110 [ 1082.508431][T15080] Bluetooth: hci0: command 0x1407 tx timeout [ 1082.772585][ T27] audit: type=1326 audit(1751483074.060:3771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15122 comm="syz.1.2761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20e7f8e929 code=0x7ffc0000 [ 1082.805728][T12444] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 1083.609040][ T27] audit: type=1326 audit(1751483074.080:3772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15122 comm="syz.1.2761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f20e7f8e929 code=0x7ffc0000 [ 1083.635136][ T27] audit: type=1326 audit(1751483074.080:3773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15122 comm="syz.1.2761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20e7f8e929 code=0x7ffc0000 [ 1083.657820][ T27] audit: type=1326 audit(1751483074.080:3774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15122 comm="syz.1.2761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f20e7f8e929 code=0x7ffc0000 [ 1083.680607][ T27] audit: type=1326 audit(1751483074.080:3775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15122 comm="syz.1.2761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20e7f8e929 code=0x7ffc0000 [ 1083.713188][ T27] audit: type=1326 audit(1751483074.080:3776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15122 comm="syz.1.2761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7f20e7f8e929 code=0x7ffc0000 [ 1083.731426][T12444] usb 5-1: Using ep0 maxpacket: 32 [ 1083.736062][ T27] audit: type=1326 audit(1751483074.080:3777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15122 comm="syz.1.2761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20e7f8e929 code=0x7ffc0000 [ 1083.780379][T12444] usb 5-1: config index 0 descriptor too short (expected 156, got 27) [ 1083.806897][T12444] usb 5-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 1083.861457][ T27] audit: type=1326 audit(1751483074.080:3778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15122 comm="syz.1.2761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f20e7f8e929 code=0x7ffc0000 [ 1083.888533][T12444] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 1083.900489][T12444] usb 5-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 1083.965212][T15134] overlayfs: failed to resolve './file0': -2 [ 1083.971464][ T27] audit: type=1326 audit(1751483074.080:3779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15122 comm="syz.1.2761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20e7f8e929 code=0x7ffc0000 [ 1083.995167][T12444] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1083.996947][ T27] audit: type=1326 audit(1751483074.080:3780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15122 comm="syz.1.2761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f20e7f8e929 code=0x7ffc0000 [ 1084.035993][T15135] sg_write: data in/out 41084/1 bytes for SCSI command 0x1c-- guessing data in; [ 1084.035993][T15135] program syz.2.2765 not setting count and/or reply_len properly [ 1084.173426][T12444] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 1084.201332][T12444] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 1084.224943][T12444] usb 5-1: Product: syz [ 1084.229197][T12444] usb 5-1: Manufacturer: syz [ 1084.244253][T12444] usb 5-1: SerialNumber: syz [ 1084.254458][T12444] usb 5-1: config 0 descriptor?? [ 1084.278254][T15138] netlink: 3 bytes leftover after parsing attributes in process `syz.2.2765'. [ 1084.291321][T12444] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 1084.328926][T12444] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 1085.554501][T15154] overlayfs: failed to resolve './file0': -2 [ 1085.666351][T12444] usb 5-1: USB disconnect, device number 17 [ 1085.682731][T12444] ldusb 5-1:0.0: LD USB Device #0 now disconnected [ 1087.392376][T15157] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2768'. [ 1087.402561][T15157] device syz_tun left promiscuous mode [ 1087.413721][T15157] bridge0: port 3(syz_tun) entered disabled state [ 1087.608915][T15157] device bridge_slave_1 left promiscuous mode [ 1087.618489][T15157] bridge0: port 2(bridge_slave_1) entered disabled state [ 1087.765933][T15157] device bridge_slave_0 left promiscuous mode [ 1087.776263][T15157] bridge0: port 1(bridge_slave_0) entered disabled state [ 1088.042079][T15176] netlink: 'syz.4.2774': attribute type 3 has an invalid length. [ 1088.485038][ T27] kauditd_printk_skb: 57 callbacks suppressed [ 1088.485076][ T27] audit: type=1326 audit(1751483079.770:3838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15178 comm="syz.2.2775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6bdb8e929 code=0x7ffc0000 [ 1089.306426][ T27] audit: type=1326 audit(1751483079.800:3839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15178 comm="syz.2.2775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe6bdb8e929 code=0x7ffc0000 [ 1089.539533][ T27] audit: type=1326 audit(1751483079.800:3840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15178 comm="syz.2.2775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6bdb8e929 code=0x7ffc0000 [ 1089.652239][T15186] overlayfs: failed to resolve './file0': -2 [ 1089.658350][ T27] audit: type=1326 audit(1751483079.810:3841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15178 comm="syz.2.2775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7fe6bdb8e929 code=0x7ffc0000 [ 1089.755976][ T27] audit: type=1326 audit(1751483079.810:3842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15178 comm="syz.2.2775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6bdb8e929 code=0x7ffc0000 [ 1089.865997][ T27] audit: type=1326 audit(1751483079.810:3843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15178 comm="syz.2.2775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7fe6bdb8e929 code=0x7ffc0000 [ 1090.387369][T15197] 9pnet: Unknown protocol version 9p20\++} [ 1090.755673][ T27] audit: type=1326 audit(1751483079.810:3844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15178 comm="syz.2.2775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6bdb8e929 code=0x7ffc0000 [ 1091.074026][T15209] overlayfs: failed to resolve './file0': -2 [ 1091.130235][ T27] audit: type=1326 audit(1751483079.810:3845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15178 comm="syz.2.2775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fe6bdb8e929 code=0x7ffc0000 [ 1091.347064][ T4389] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 1091.630411][ T27] audit: type=1326 audit(1751483079.810:3846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15178 comm="syz.2.2775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6bdb8e929 code=0x7ffc0000 [ 1091.711413][ T27] audit: type=1326 audit(1751483079.810:3847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15178 comm="syz.2.2775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe6bdb8e929 code=0x7ffc0000 [ 1091.771355][ T4389] usb 3-1: Using ep0 maxpacket: 16 [ 1091.781761][ T4389] usb 3-1: config index 0 descriptor too short (expected 1828, got 36) [ 1091.809952][ T4389] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1091.925648][ T4389] usb 3-1: config 0 has no interfaces? [ 1092.137823][ T4389] usb 3-1: New USB device found, idVendor=06cd, idProduct=0115, bcdDevice=1a.1e [ 1092.197195][ T4389] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1092.205572][ T4389] usb 3-1: Product: syz [ 1092.209853][ T4389] usb 3-1: Manufacturer: syz [ 1092.214758][ T4389] usb 3-1: SerialNumber: syz [ 1092.228825][ T4389] usb 3-1: config 0 descriptor?? [ 1092.253149][T15216] device ip6gre1 entered promiscuous mode [ 1093.572825][ T5701] usb 3-1: USB disconnect, device number 14 [ 1094.443066][T15236] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2790'. [ 1094.452611][T15236] device syz_tun left promiscuous mode [ 1094.459070][T15236] bridge0: port 3(syz_tun) entered disabled state [ 1094.472217][T15236] device bridge_slave_1 left promiscuous mode [ 1094.478790][T15236] bridge0: port 2(bridge_slave_1) entered disabled state [ 1094.496928][T15236] device bridge_slave_0 left promiscuous mode [ 1094.503883][T15236] bridge0: port 1(bridge_slave_0) entered disabled state [ 1098.123992][ T4302] libceph: connect (1)[c::]:6789 error -101 [ 1098.146608][ T4302] libceph: mon0 (1)[c::]:6789 connect error [ 1098.223957][T15258] ceph: No mds server is up or the cluster is laggy [ 1098.299356][T15265] overlayfs: failed to resolve './file0': -2 [ 1098.711758][T15276] 9pnet: Unknown protocol version 9p20\++} [ 1104.869109][ T27] kauditd_printk_skb: 57 callbacks suppressed [ 1104.869123][ T27] audit: type=1326 audit(1751483096.150:3905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15315 comm="syz.4.2808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f916a98e929 code=0x7ffc0000 [ 1105.773262][ T27] audit: type=1326 audit(1751483096.180:3906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15315 comm="syz.4.2808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f916a98e929 code=0x7ffc0000 [ 1105.889285][ T27] audit: type=1326 audit(1751483096.180:3907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15315 comm="syz.4.2808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f916a98e929 code=0x7ffc0000 [ 1105.916180][ T27] audit: type=1326 audit(1751483096.180:3908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15315 comm="syz.4.2808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f916a98e929 code=0x7ffc0000 [ 1105.988444][ T27] audit: type=1326 audit(1751483096.190:3909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15315 comm="syz.4.2808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f916a98e929 code=0x7ffc0000 [ 1106.037326][ T27] audit: type=1326 audit(1751483096.190:3910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15315 comm="syz.4.2808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7f916a98e929 code=0x7ffc0000 [ 1106.067907][ T27] audit: type=1326 audit(1751483096.190:3911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15315 comm="syz.4.2808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f916a98e929 code=0x7ffc0000 [ 1106.091360][ T4302] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 1106.094770][ T27] audit: type=1326 audit(1751483096.190:3912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15315 comm="syz.4.2808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f916a98e929 code=0x7ffc0000 [ 1106.166165][ T27] audit: type=1326 audit(1751483096.190:3913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15315 comm="syz.4.2808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f916a98e929 code=0x7ffc0000 [ 1106.215479][ T27] audit: type=1326 audit(1751483096.190:3914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15315 comm="syz.4.2808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f916a98e929 code=0x7ffc0000 [ 1106.321317][ T4302] usb 1-1: Using ep0 maxpacket: 32 [ 1106.328270][ T4302] usb 1-1: config index 0 descriptor too short (expected 156, got 27) [ 1106.411922][ T4302] usb 1-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 1106.497922][ T4302] usb 1-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 1106.604561][ T4302] usb 1-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 1106.659318][ T4302] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1106.716156][ T4259] bridge0: port 3(syz_tun) entered disabled state [ 1106.762063][ T4302] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 1106.781336][ T4389] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 1106.800188][ T4302] usb 1-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 1106.840737][ T4302] usb 1-1: Product: syz [ 1106.854250][ T4302] usb 1-1: Manufacturer: syz [ 1106.858847][ T4302] usb 1-1: SerialNumber: syz [ 1106.892167][ T4302] usb 1-1: config 0 descriptor?? [ 1106.906794][ T4259] device syz_tun left promiscuous mode [ 1106.919310][ T4302] ldusb 1-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 1106.931538][ T4259] bridge0: port 3(syz_tun) entered disabled state [ 1106.954527][ T4302] ldusb 1-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 1107.021350][ T4389] usb 5-1: Using ep0 maxpacket: 16 [ 1107.034478][ T4389] usb 5-1: config index 0 descriptor too short (expected 1828, got 36) [ 1107.055907][ T4389] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1107.108326][ T4267] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1107.116780][ T4267] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1107.130510][ T4267] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1107.139100][ T4267] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1107.151171][ T4267] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1107.161303][ T4267] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1107.184888][T12444] usb 1-1: USB disconnect, device number 19 [ 1107.190833][ C1] ldusb 1-1:0.0: usb_submit_urb failed (-19) [ 1107.205169][T12444] ldusb 1-1:0.0: LD USB Device #0 now disconnected [ 1107.292819][ T4389] usb 5-1: config 0 has no interfaces? [ 1107.469102][T15345] 9pnet: Unknown protocol version 9p20\++} [ 1107.583010][ T4389] usb 5-1: New USB device found, idVendor=06cd, idProduct=0115, bcdDevice=1a.1e [ 1107.613162][ T4389] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1107.642202][ T4389] usb 5-1: Product: syz [ 1107.649420][T15339] chnl_net:caif_netlink_parms(): no params data found [ 1107.691804][ T4389] usb 5-1: Manufacturer: syz [ 1107.736007][ T4389] usb 5-1: SerialNumber: syz [ 1107.794409][ T4389] usb 5-1: config 0 descriptor?? [ 1107.898290][T15339] bridge0: port 1(bridge_slave_0) entered blocking state [ 1107.958859][T15339] bridge0: port 1(bridge_slave_0) entered disabled state [ 1108.036735][T15339] device bridge_slave_0 entered promiscuous mode [ 1108.067784][T15339] bridge0: port 2(bridge_slave_1) entered blocking state [ 1108.102971][T15339] bridge0: port 2(bridge_slave_1) entered disabled state [ 1108.150795][T15339] device bridge_slave_1 entered promiscuous mode [ 1108.226762][ T4302] usb 5-1: USB disconnect, device number 18 [ 1108.266200][T15339] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1108.309184][T15339] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1109.492422][ T4267] Bluetooth: hci3: command 0x0409 tx timeout [ 1109.544924][T15339] team0: Port device team_slave_0 added [ 1109.633273][T15339] team0: Port device team_slave_1 added [ 1109.707693][T15339] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1109.728037][T15339] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1109.991015][T15369] sg_write: data in/out 41084/1 bytes for SCSI command 0x1c-- guessing data in; [ 1109.991015][T15369] program syz.0.2822 not setting count and/or reply_len properly [ 1110.111445][T15339] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1110.312443][T15339] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1110.326694][T15339] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1110.425888][T15339] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1110.459366][T15375] netlink: 3 bytes leftover after parsing attributes in process `syz.0.2822'. [ 1110.618814][T15339] device hsr_slave_0 entered promiscuous mode [ 1110.636022][T15339] device hsr_slave_1 entered promiscuous mode [ 1110.651998][T15339] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1110.668294][T15339] Cannot create hsr debugfs directory [ 1111.200671][T15388] overlayfs: failed to resolve './file1': -2 [ 1111.377240][T15339] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1111.541378][T15080] Bluetooth: hci3: command 0x041b tx timeout [ 1111.609939][T15339] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1111.845822][T15339] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1112.099427][T15409] 9p: Unknown Cache mode fscach [ 1112.134065][T15339] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1112.395968][T15339] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1112.405890][T15339] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1112.411391][ T5701] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 1112.423535][T15339] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1112.442949][T15339] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1112.631460][ T5701] usb 4-1: Using ep0 maxpacket: 16 [ 1112.639033][ T5701] usb 4-1: config index 0 descriptor too short (expected 1828, got 36) [ 1112.775777][T15339] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1112.790018][T15339] 8021q: adding VLAN 0 to HW filter on device team0 [ 1112.809765][ T4597] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1112.828057][ T4597] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1112.867006][ T4597] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1112.900520][ T4597] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1112.920504][ T5701] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1112.932870][ T4597] bridge0: port 1(bridge_slave_0) entered blocking state [ 1112.939954][ T4597] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1113.064356][ T4597] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1113.106164][ T4597] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1113.142820][ T4309] libceph: connect (1)[c::]:6789 error -101 [ 1113.149980][ T4309] libceph: mon0 (1)[c::]:6789 connect error [ 1113.156042][ T5701] usb 4-1: config 0 has no interfaces? [ 1113.177577][ T5701] usb 4-1: New USB device found, idVendor=06cd, idProduct=0115, bcdDevice=1a.1e [ 1113.186797][ T5701] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1113.213105][ T5701] usb 4-1: Product: syz [ 1113.214580][ T4597] bridge0: port 2(bridge_slave_1) entered blocking state [ 1113.217278][ T5701] usb 4-1: Manufacturer: syz [ 1113.217294][ T5701] usb 4-1: SerialNumber: syz [ 1113.233550][ T4597] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1113.241593][ T4597] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1113.250678][ T4597] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1113.261426][ T4597] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1113.294997][ T5701] usb 4-1: config 0 descriptor?? [ 1113.309888][ T4597] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1113.606108][ T4309] libceph: connect (1)[c::]:6789 error -101 [ 1113.612388][ T4309] libceph: mon0 (1)[c::]:6789 connect error [ 1113.621504][T15080] Bluetooth: hci3: command 0x040f tx timeout [ 1113.656453][ T4597] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1113.709445][ T4597] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1113.738657][T15419] ceph: No mds server is up or the cluster is laggy [ 1113.778179][ T4597] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1113.825154][ T4597] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1113.951427][ T4597] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1113.982121][ T4597] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1114.010287][ T4597] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1114.029923][ T4597] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1114.115955][T15432] 9pnet: Unknown protocol version 9p20\++} [ 1115.692499][ T1273] ieee802154 phy0 wpan0: encryption failed: -22 [ 1115.693432][T15080] Bluetooth: hci3: command 0x0419 tx timeout [ 1115.788038][T15446] sg_write: data in/out 41084/1 bytes for SCSI command 0x1c-- guessing data in; [ 1115.788038][T15446] program syz.0.2837 not setting count and/or reply_len properly [ 1115.910595][ T4302] usb 4-1: USB disconnect, device number 17 [ 1116.045538][T15452] netlink: 3 bytes leftover after parsing attributes in process `syz.0.2837'. [ 1116.350995][ T4597] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1116.368148][ T4597] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1116.430905][T15339] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1116.507480][ T4601] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1116.525389][ T4601] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1116.579015][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1116.598938][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1116.687866][T15339] device veth0_vlan entered promiscuous mode [ 1116.723542][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1116.759763][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1116.798152][T15339] device veth1_vlan entered promiscuous mode [ 1116.887486][ T4597] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1116.910874][ T4597] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1116.926816][ T4597] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1116.958027][ T4597] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1116.984028][T15339] device veth0_macvtap entered promiscuous mode [ 1116.995047][T15339] device veth1_macvtap entered promiscuous mode [ 1117.015127][T15339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1117.030940][T15339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1117.071465][T15339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1117.133108][T15339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1117.209216][T15339] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1117.234259][ T27] kauditd_printk_skb: 57 callbacks suppressed [ 1117.234318][ T27] audit: type=1326 audit(1751483108.520:3972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15461 comm="syz.3.2840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5c9d8e929 code=0x7ffc0000 [ 1117.298128][ T4414] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1117.327758][ T4414] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1117.388834][ T4414] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1117.426920][ T27] audit: type=1326 audit(1751483108.550:3973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15461 comm="syz.3.2840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa5c9d8e929 code=0x7ffc0000 [ 1117.474383][ T4414] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1117.560778][T15339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1117.614764][ T27] audit: type=1326 audit(1751483108.550:3974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15461 comm="syz.3.2840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5c9d8e929 code=0x7ffc0000 [ 1117.640184][T15339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1117.719298][T15339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1117.800379][T15339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1117.818490][ T27] audit: type=1326 audit(1751483108.550:3975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15461 comm="syz.3.2840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7fa5c9d8e929 code=0x7ffc0000 [ 1117.904653][T15339] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1117.947687][ T4414] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1117.992684][ T4414] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1118.004246][ T27] audit: type=1326 audit(1751483108.550:3976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15461 comm="syz.3.2840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5c9d8e929 code=0x7ffc0000 [ 1118.045442][T15339] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1118.148985][T15339] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1118.170988][T15339] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1118.190180][ T27] audit: type=1326 audit(1751483108.550:3977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15461 comm="syz.3.2840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7fa5c9d8e929 code=0x7ffc0000 [ 1118.221321][T15339] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1118.310448][ T27] audit: type=1326 audit(1751483108.550:3978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15461 comm="syz.3.2840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5c9d8e929 code=0x7ffc0000 [ 1118.489763][ T5709] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1118.507630][ T5709] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1118.533965][ T27] audit: type=1326 audit(1751483108.550:3979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15461 comm="syz.3.2840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fa5c9d8e929 code=0x7ffc0000 [ 1118.624302][ T4601] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1118.634275][ T4414] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1118.646196][ T4414] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1118.718774][ T5709] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1118.783656][ T27] audit: type=1326 audit(1751483108.550:3980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15461 comm="syz.3.2840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5c9d8e929 code=0x7ffc0000 [ 1118.875134][ T27] audit: type=1326 audit(1751483108.550:3981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15461 comm="syz.3.2840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa5c9d8e929 code=0x7ffc0000 [ 1120.381467][T12444] libceph: connect (1)[c::]:6789 error -101 [ 1120.411506][T12444] libceph: mon0 (1)[c::]:6789 connect error [ 1120.522128][T15484] ceph: No mds server is up or the cluster is laggy [ 1122.891709][T15080] Bluetooth: hci0: command 0x1407 tx timeout [ 1122.891726][ T4267] Bluetooth: hci0: Opcode 0x1407 failed: -110 [ 1123.598776][T15505] 9pnet: Unknown protocol version 9p20\++} [ 1124.583375][T15517] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1124.591005][T15517] IPv6: NLM_F_CREATE should be set when creating new route [ 1126.564973][T15517] bridge0: port 2(bridge_slave_1) entered disabled state [ 1126.572409][T15517] bridge0: port 1(bridge_slave_0) entered disabled state [ 1129.100044][T12444] libceph: connect (1)[c::]:6789 error -101 [ 1129.106188][T12444] libceph: mon0 (1)[c::]:6789 connect error [ 1129.212121][T15552] ceph: No mds server is up or the cluster is laggy [ 1129.391692][ T22] libceph: connect (1)[c::]:6789 error -101 [ 1129.407230][ T22] libceph: mon0 (1)[c::]:6789 connect error [ 1130.057036][T15517] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1130.210503][T15517] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1131.019392][T15517] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1131.031282][T15517] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1131.050340][T15517] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1131.080694][T15517] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1132.894430][T15597] netlink: 3 bytes leftover after parsing attributes in process `syz.0.2869'. [ 1133.881325][ T4302] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 1134.081381][ T4302] usb 4-1: Using ep0 maxpacket: 32 [ 1134.089283][ T4302] usb 4-1: config index 0 descriptor too short (expected 156, got 27) [ 1134.111279][ T4302] usb 4-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 1134.136553][ T4302] usb 4-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 1134.162294][ T4302] usb 4-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 1134.178702][ T4302] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1134.188712][ T4302] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 1134.198128][ T4302] usb 4-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 1134.206877][ T4302] usb 4-1: Product: syz [ 1134.211153][ T4302] usb 4-1: Manufacturer: syz [ 1134.216596][ T4302] usb 4-1: SerialNumber: syz [ 1134.223275][ T4302] usb 4-1: config 0 descriptor?? [ 1134.230272][ T4302] ldusb 4-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 1134.250141][ T4302] ldusb 4-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 1134.442145][T10854] usb 4-1: USB disconnect, device number 18 [ 1134.448102][ C1] ldusb 4-1:0.0: usb_submit_urb failed (-19) [ 1134.490875][T10854] ldusb 4-1:0.0: LD USB Device #0 now disconnected [ 1139.091327][ T5701] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 1139.155077][T15658] block device autoloading is deprecated and will be removed. [ 1139.163898][T15080] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1139.189503][ T4257] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1139.197644][ T4257] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1139.206598][ T4257] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1139.219080][ T4257] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 1139.228084][ T4257] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1139.361453][ T5701] usb 1-1: Using ep0 maxpacket: 8 [ 1139.372662][ T5701] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1139.501301][T15427] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 1140.242912][ T5701] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1140.280592][ T5701] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1140.320381][ T5701] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1140.447836][ T5701] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1140.451345][T15427] usb 5-1: Using ep0 maxpacket: 32 [ 1140.462470][ T5701] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1140.473141][T15427] usb 5-1: config index 0 descriptor too short (expected 156, got 27) [ 1140.481516][T15427] usb 5-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 1140.499249][T15427] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 1140.516102][T15427] usb 5-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 1140.537627][T15427] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1140.547307][T15427] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 1140.556786][T15427] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 1140.565518][T15427] usb 5-1: Product: syz [ 1140.570061][T15427] usb 5-1: Manufacturer: syz [ 1140.575128][T15427] usb 5-1: SerialNumber: syz [ 1140.608233][T15427] usb 5-1: config 0 descriptor?? [ 1140.613323][T15670] netlink: 3 bytes leftover after parsing attributes in process `syz.1.2894'. [ 1140.624327][T15674] 9p: Unknown Cache mode fscach [ 1140.646016][T15427] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 1140.683796][T15427] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 1140.704783][ T5701] usb 1-1: GET_CAPABILITIES returned 0 [ 1140.716199][ T5701] usbtmc 1-1:16.0: can't read capabilities [ 1140.849714][T15427] usb 5-1: USB disconnect, device number 19 [ 1140.855708][ C1] ldusb 5-1:0.0: usb_submit_urb failed (-19) [ 1140.873420][T15427] ldusb 5-1:0.0: LD USB Device #0 now disconnected [ 1141.175866][ T5701] usb 1-1: USB disconnect, device number 20 [ 1141.253099][T15659] chnl_net:caif_netlink_parms(): no params data found [ 1141.302496][T15080] Bluetooth: hci5: command 0x0409 tx timeout [ 1141.561470][T15659] bridge0: port 1(bridge_slave_0) entered blocking state [ 1141.604216][T15659] bridge0: port 1(bridge_slave_0) entered disabled state [ 1141.626663][T15659] device bridge_slave_0 entered promiscuous mode [ 1142.506082][T15659] bridge0: port 2(bridge_slave_1) entered blocking state [ 1142.542462][T15659] bridge0: port 2(bridge_slave_1) entered disabled state [ 1142.550587][T15659] device bridge_slave_1 entered promiscuous mode [ 1142.845340][T15659] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1143.005713][T15659] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1143.301696][T15659] team0: Port device team_slave_0 added [ 1143.371434][T15080] Bluetooth: hci5: command 0x041b tx timeout [ 1143.488639][T15659] team0: Port device team_slave_1 added [ 1143.666841][T15659] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1143.686536][T15659] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1143.891381][T15659] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1144.044825][T15659] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1144.095528][T15659] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1144.255325][T15659] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1144.611360][T15659] device hsr_slave_0 entered promiscuous mode [ 1144.638015][T15659] device hsr_slave_1 entered promiscuous mode [ 1144.671065][T15659] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1144.698579][T15659] Cannot create hsr debugfs directory [ 1145.451637][ T4267] Bluetooth: hci5: command 0x040f tx timeout [ 1145.511335][ T4428] device hsr_slave_0 left promiscuous mode [ 1145.571083][ T4428] device hsr_slave_1 left promiscuous mode [ 1145.901390][T15080] Bluetooth: hci0: Opcode 0x1407 failed: -110 [ 1145.907584][ T4267] Bluetooth: hci0: command 0x1407 tx timeout [ 1147.251656][T15427] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 1147.461487][T15427] usb 2-1: Using ep0 maxpacket: 32 [ 1147.473745][T15427] usb 2-1: config index 0 descriptor too short (expected 156, got 27) [ 1147.531482][T15080] Bluetooth: hci5: command 0x0419 tx timeout [ 1147.556411][T15427] usb 2-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 1147.658809][T15427] usb 2-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 1147.760273][T15427] usb 2-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 1147.891298][T15427] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1147.920182][T15427] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 1147.930675][T15427] usb 2-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 1147.946633][T15427] usb 2-1: Product: syz [ 1147.950813][T15427] usb 2-1: Manufacturer: syz [ 1147.957235][T15427] usb 2-1: SerialNumber: syz [ 1147.969177][T15427] usb 2-1: config 0 descriptor?? [ 1148.000880][T15427] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 1148.041456][T15427] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 1148.209265][T15427] usb 2-1: USB disconnect, device number 18 [ 1148.215373][ C1] ldusb 2-1:0.0: usb_submit_urb failed (-19) [ 1148.247195][T15427] ldusb 2-1:0.0: LD USB Device #0 now disconnected [ 1148.297955][ T4428] team0 (unregistering): Port device team_slave_1 removed [ 1148.359357][ T4428] team0 (unregistering): Port device team_slave_0 removed [ 1148.427939][ T4428] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1148.570249][ T4428] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1149.338820][ T4428] bond0 (unregistering): Released all slaves [ 1149.458214][T15756] netlink: 3 bytes leftover after parsing attributes in process `syz.0.2909'. [ 1149.665810][ T27] kauditd_printk_skb: 57 callbacks suppressed [ 1149.665849][ T27] audit: type=1326 audit(1751483140.950:4039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15764 comm="syz.2.2912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37cd98e929 code=0x7ffc0000 [ 1150.507564][ T27] audit: type=1326 audit(1751483140.990:4040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15764 comm="syz.2.2912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37cd98e929 code=0x7ffc0000 [ 1150.708163][ T27] audit: type=1326 audit(1751483140.990:4041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15764 comm="syz.2.2912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f37cd98e929 code=0x7ffc0000 [ 1150.869074][ T27] audit: type=1326 audit(1751483140.990:4042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15764 comm="syz.2.2912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37cd98e929 code=0x7ffc0000 [ 1150.941796][ T27] audit: type=1326 audit(1751483140.990:4043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15764 comm="syz.2.2912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f37cd98e929 code=0x7ffc0000 [ 1151.053776][ T27] audit: type=1326 audit(1751483140.990:4044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15764 comm="syz.2.2912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37cd98e929 code=0x7ffc0000 [ 1151.187140][ T27] audit: type=1326 audit(1751483140.990:4045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15764 comm="syz.2.2912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37cd98e929 code=0x7ffc0000 [ 1151.217637][ T27] audit: type=1326 audit(1751483140.990:4046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15764 comm="syz.2.2912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7f37cd98e929 code=0x7ffc0000 [ 1151.337002][ T27] audit: type=1326 audit(1751483140.990:4047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15764 comm="syz.2.2912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37cd98e929 code=0x7ffc0000 [ 1151.576709][ T27] audit: type=1326 audit(1751483140.990:4048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15764 comm="syz.2.2912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f37cd98e929 code=0x7ffc0000 [ 1151.884411][T15659] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1151.980961][T15659] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1152.006839][T15659] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1152.095011][T15659] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1152.575688][T15659] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1152.657199][T15659] 8021q: adding VLAN 0 to HW filter on device team0 [ 1152.673230][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1152.701847][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1152.772926][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1152.793572][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1152.832011][ T4387] bridge0: port 1(bridge_slave_0) entered blocking state [ 1152.839164][ T4387] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1152.941679][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1152.970261][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1153.010128][ T4387] bridge0: port 2(bridge_slave_1) entered blocking state [ 1153.017308][ T4387] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1154.416395][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1154.450464][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1154.498719][T15659] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1154.591377][T15659] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1154.672139][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1154.714899][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1154.751304][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1154.780068][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1154.821057][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1154.851199][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1154.860708][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1154.884377][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1155.734415][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1155.742993][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1155.750845][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1157.431570][ T4389] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 1158.293466][ T27] kauditd_printk_skb: 57 callbacks suppressed [ 1158.293480][ T27] audit: type=1326 audit(1751483149.580:4106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15831 comm="syz.0.2924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f6118e929 code=0x7ffc0000 [ 1158.301322][ T4389] usb 3-1: Using ep0 maxpacket: 32 [ 1159.170463][ T27] audit: type=1326 audit(1751483149.610:4107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15831 comm="syz.0.2924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f0f6118e929 code=0x7ffc0000 [ 1159.186577][ T4389] usb 3-1: config index 0 descriptor too short (expected 156, got 27) [ 1159.193749][ T27] audit: type=1326 audit(1751483149.610:4108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15831 comm="syz.0.2924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f6118e929 code=0x7ffc0000 [ 1159.223904][ T27] audit: type=1326 audit(1751483149.610:4109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15831 comm="syz.0.2924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f0f6118e929 code=0x7ffc0000 [ 1159.246541][ T27] audit: type=1326 audit(1751483149.610:4110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15831 comm="syz.0.2924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f6118e929 code=0x7ffc0000 [ 1159.289416][ T27] audit: type=1326 audit(1751483149.620:4111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15831 comm="syz.0.2924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7f0f6118e929 code=0x7ffc0000 [ 1159.291275][ T4389] usb 3-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 1159.401660][ T27] audit: type=1326 audit(1751483149.620:4112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15831 comm="syz.0.2924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f6118e929 code=0x7ffc0000 [ 1159.427312][ T4389] usb 3-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 1159.565160][ T4389] usb 3-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 1159.605082][ T5316] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1159.706333][ T5316] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1159.715312][ T27] audit: type=1326 audit(1751483149.620:4113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15831 comm="syz.0.2924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f0f6118e929 code=0x7ffc0000 [ 1159.744612][ T4389] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1159.763640][T15659] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1159.804683][ T4389] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 1159.891138][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1159.943895][ T4389] usb 3-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 1160.042127][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1160.050744][ T27] audit: type=1326 audit(1751483149.620:4114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15831 comm="syz.0.2924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f6118e929 code=0x7ffc0000 [ 1160.081783][ T4389] usb 3-1: Product: syz [ 1160.094697][ T4389] usb 3-1: Manufacturer: syz [ 1160.108671][T15659] device veth0_vlan entered promiscuous mode [ 1160.122758][ T4389] usb 3-1: SerialNumber: syz [ 1160.138206][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1160.180557][ T27] audit: type=1326 audit(1751483149.620:4115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15831 comm="syz.0.2924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0f6118e929 code=0x7ffc0000 [ 1160.181473][ T4389] usb 3-1: config 0 descriptor?? [ 1160.222333][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1160.279324][T15659] device veth1_vlan entered promiscuous mode [ 1160.299358][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1160.365945][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1160.395305][ T4389] usb 3-1: can't set config #0, error -71 [ 1160.404102][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1160.460589][ T4389] usb 3-1: USB disconnect, device number 15 [ 1160.503995][T15659] device veth0_macvtap entered promiscuous mode [ 1160.527252][T15659] device veth1_macvtap entered promiscuous mode [ 1160.666092][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1160.686957][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1160.768727][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1160.807318][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1160.857564][T15659] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1160.894356][T15659] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1160.923908][T15659] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1160.948095][T15659] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1161.027094][T15659] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1161.060667][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1161.093933][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1161.179551][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1161.271112][T15659] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1161.311361][T15659] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1161.371400][T15659] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1161.545775][T15659] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1161.677453][T15659] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1161.734724][ T4428] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1161.762118][ T4428] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1161.822778][T15659] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1161.859227][T15659] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1161.991283][T15659] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1162.906042][T15659] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1163.977323][ T5316] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1164.006282][ T5316] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1164.032209][T11653] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1164.074012][T11653] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1165.642753][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1165.805288][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1166.952742][T15947] input: syz1 as /devices/virtual/input/input58 [ 1170.651471][ T4267] Bluetooth: hci0: command 0x1407 tx timeout [ 1170.658562][T15080] Bluetooth: hci0: Opcode 0x1407 failed: -110 [ 1171.241736][ T27] kauditd_printk_skb: 58 callbacks suppressed [ 1171.241745][ T27] audit: type=1800 audit(1751483162.530:4174): pid=15975 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.2943" name="bus" dev="ramfs" ino=73188 res=0 errno=0 [ 1173.997727][T16038] input: syz1 as /devices/virtual/input/input59 [ 1175.072246][T16047] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1175.079504][T16047] IPv6: NLM_F_CREATE should be set when creating new route [ 1177.133551][ T1273] ieee802154 phy0 wpan0: encryption failed: -22 [ 1178.450666][T16047] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1178.644875][T16047] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1179.309329][T16047] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1179.329713][T16047] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1179.339916][T16047] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1179.360131][T16047] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1179.579902][T16054] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2962'. [ 1179.612446][T16054] device bridge_slave_1 left promiscuous mode [ 1179.619634][T16054] bridge0: port 2(bridge_slave_1) entered disabled state [ 1179.663783][T16054] device bridge_slave_0 left promiscuous mode [ 1179.692731][T16054] bridge0: port 1(bridge_slave_0) entered disabled state [ 1179.852032][T16079] netlink: 3 bytes leftover after parsing attributes in process `syz.2.2968'. [ 1179.931350][ T4267] Bluetooth: hci0: command 0x1407 tx timeout [ 1179.937492][T15080] Bluetooth: hci0: Opcode 0x1407 failed: -110 [ 1179.998776][T16087] overlayfs: missing 'lowerdir' [ 1180.031507][T16089] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 1180.038057][T16089] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1180.052179][T16089] vhci_hcd vhci_hcd.0: Device attached [ 1180.195641][T16092] ------------[ cut here ]------------ [ 1180.201182][T16092] WARNING: CPU: 1 PID: 16092 at include/linux/fs.h:503 hugetlb_split+0x234/0x2a0 [ 1180.210450][T16092] Modules linked in: [ 1180.214471][T16092] CPU: 1 PID: 16092 Comm: syz.1.2971 Not tainted 6.1.142-syzkaller #0 [ 1180.222720][T16092] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1180.232903][T16092] RIP: 0010:hugetlb_split+0x234/0x2a0 [ 1180.238564][T16092] Code: b4 ff 4c 89 f7 48 89 de 4c 89 fa 31 c9 5b 41 5c 41 5d 41 5e 41 5f 5d eb 7d e8 f8 04 b4 ff 0f 0b e9 65 fe ff ff e8 ec 04 b4 ff <0f> 0b e9 2d ff ff ff 48 c7 c1 e4 c1 fe 8d 80 e1 07 80 c1 03 38 c1 [ 1180.258366][T16092] RSP: 0018:ffffc9000477f6a8 EFLAGS: 00010287 [ 1180.264496][T16092] RAX: ffffffff81ccd294 RBX: 0000200000000000 RCX: 0000000000080000 [ 1180.272528][T16092] RDX: ffffc9000e408000 RSI: 0000000000005134 RDI: 0000000000005135 [ 1180.280511][T16092] RBP: 0000000000000000 R08: dffffc0000000000 R09: ffffed100fc3f88e [ 1180.288551][T16092] R10: ffffed100fc3f88e R11: 1ffff1100fc3f88d R12: ffff88823bca8070 [ 1180.296583][T16092] R13: dffffc0000000000 R14: ffff88823bca8000 R15: ffff88807cf6d338 [ 1180.304621][T16092] FS: 00007f20e8dd56c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 1180.313599][T16092] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1180.320227][T16092] CR2: 000000110c3b32d8 CR3: 00000000563da000 CR4: 00000000003506e0 [ 1180.321371][T15673] usb 35-1: new high-speed USB device number 2 using vhci_hcd [ 1180.328229][T16092] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1180.343816][T16092] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1180.351838][T16092] Call Trace: [ 1180.355159][T16092] [ 1180.358102][T16092] __vma_adjust+0x46b/0x1c50 [ 1180.362756][T16092] ? validate_mm+0x2b0/0x2b0 [ 1180.367359][T16092] ? __lock_acquire+0x7c50/0x7c50 [ 1180.372450][T16092] ? up_write+0x1bb/0x420 [ 1180.376802][T16092] ? hugetlb_vm_op_open+0x23c/0x540 [ 1180.382038][T16092] __split_vma+0x3a7/0x500 [ 1180.386479][T16092] do_mas_align_munmap+0x351/0x1220 [ 1180.391752][T16092] ? do_mas_align_munmap+0x6ee/0x1220 [ 1180.397138][T16092] ? do_mas_munmap+0x2b0/0x2b0 [ 1180.401956][T16092] ? mtree_range_walk+0x672/0x7b0 [ 1180.407029][T16092] ? mas_walk+0x15f/0x180 [ 1180.411397][T16092] ? mas_find+0x1e8/0x230 [ 1180.415742][T16092] do_mas_munmap+0x240/0x2b0 [ 1180.420382][T16092] do_munmap+0xd2/0x120 [ 1180.424611][T16092] ? mtree_load+0xeb/0xa40 [ 1180.429055][T16092] ? do_mas_align_munmap+0x1220/0x1220 [ 1180.434582][T16092] ? mtree_load+0x90a/0xa40 [ 1180.439256][T16092] ? mas_alloc_nodes+0x890/0x890 [ 1180.444261][T16092] ? rwsem_write_trylock+0x12f/0x1b0 [ 1180.449574][T16092] mremap_to+0x377/0x5d0 [ 1180.453883][T16092] __se_sys_mremap+0x603/0x10f0 [ 1180.458759][T16092] ? __x64_sys_mremap+0xc0/0xc0 [ 1180.463654][T16092] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 1180.469655][T16092] ? lock_chain_count+0x20/0x20 [ 1180.474573][T16092] ? lockdep_hardirqs_on+0x94/0x140 [ 1180.479780][T16092] ? __x64_sys_mremap+0x1c/0xc0 [ 1180.484674][T16092] do_syscall_64+0x4c/0xa0 [ 1180.489140][T16092] ? clear_bhb_loop+0x60/0xb0 [ 1180.493858][T16092] ? clear_bhb_loop+0x60/0xb0 [ 1180.498544][T16092] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1180.504497][T16092] RIP: 0033:0x7f20e7f8e929 [ 1180.508930][T16092] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1180.528584][T16092] RSP: 002b:00007f20e8dd5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 1180.537065][T16092] RAX: ffffffffffffffda RBX: 00007f20e81b6080 RCX: 00007f20e7f8e929 [ 1180.545090][T16092] RDX: 0000000000200000 RSI: 0000000000600600 RDI: 0000200000000000 [ 1180.553101][T16092] RBP: 00007f20e8010b39 R08: 0000200000a00000 R09: 0000000000000000 [ 1180.561110][T16092] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 [ 1180.569128][T16092] R13: 0000000000000000 R14: 00007f20e81b6080 R15: 00007ffcd6a9cf08 [ 1180.577174][T16092] [ 1180.580210][T16092] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1180.587485][T16092] CPU: 1 PID: 16092 Comm: syz.1.2971 Not tainted 6.1.142-syzkaller #0 [ 1180.595635][T16092] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1180.605687][T16092] Call Trace: [ 1180.608965][T16092] [ 1180.611895][T16092] dump_stack_lvl+0x168/0x22e [ 1180.616585][T16092] ? memcpy+0x3c/0x60 [ 1180.620569][T16092] ? show_regs_print_info+0x12/0x12 [ 1180.625774][T16092] ? load_image+0x3b0/0x3b0 [ 1180.630292][T16092] panic+0x2c9/0x710 [ 1180.634199][T16092] ? bpf_jit_dump+0xd0/0xd0 [ 1180.638720][T16092] __warn+0x2f8/0x4f0 [ 1180.642702][T16092] ? hugetlb_split+0x234/0x2a0 [ 1180.647473][T16092] ? hugetlb_split+0x234/0x2a0 [ 1180.652247][T16092] report_bug+0x2ba/0x4f0 [ 1180.656585][T16092] ? hugetlb_split+0x234/0x2a0 [ 1180.661360][T16092] handle_bug+0x3a/0x70 [ 1180.665526][T16092] exc_invalid_op+0x16/0x40 [ 1180.670036][T16092] asm_exc_invalid_op+0x16/0x20 [ 1180.674888][T16092] RIP: 0010:hugetlb_split+0x234/0x2a0 [ 1180.680269][T16092] Code: b4 ff 4c 89 f7 48 89 de 4c 89 fa 31 c9 5b 41 5c 41 5d 41 5e 41 5f 5d eb 7d e8 f8 04 b4 ff 0f 0b e9 65 fe ff ff e8 ec 04 b4 ff <0f> 0b e9 2d ff ff ff 48 c7 c1 e4 c1 fe 8d 80 e1 07 80 c1 03 38 c1 [ 1180.699881][T16092] RSP: 0018:ffffc9000477f6a8 EFLAGS: 00010287 [ 1180.705961][T16092] RAX: ffffffff81ccd294 RBX: 0000200000000000 RCX: 0000000000080000 [ 1180.713939][T16092] RDX: ffffc9000e408000 RSI: 0000000000005134 RDI: 0000000000005135 [ 1180.721911][T16092] RBP: 0000000000000000 R08: dffffc0000000000 R09: ffffed100fc3f88e [ 1180.729888][T16092] R10: ffffed100fc3f88e R11: 1ffff1100fc3f88d R12: ffff88823bca8070 [ 1180.737868][T16092] R13: dffffc0000000000 R14: ffff88823bca8000 R15: ffff88807cf6d338 [ 1180.745860][T16092] ? hugetlb_split+0x234/0x2a0 [ 1180.750641][T16092] ? hugetlb_split+0x234/0x2a0 [ 1180.755419][T16092] __vma_adjust+0x46b/0x1c50 [ 1180.760033][T16092] ? validate_mm+0x2b0/0x2b0 [ 1180.764634][T16092] ? __lock_acquire+0x7c50/0x7c50 [ 1180.769664][T16092] ? up_write+0x1bb/0x420 [ 1180.774017][T16092] ? hugetlb_vm_op_open+0x23c/0x540 [ 1180.779224][T16092] __split_vma+0x3a7/0x500 [ 1180.783664][T16092] do_mas_align_munmap+0x351/0x1220 [ 1180.788885][T16092] ? do_mas_align_munmap+0x6ee/0x1220 [ 1180.794265][T16092] ? do_mas_munmap+0x2b0/0x2b0 [ 1180.799040][T16092] ? mtree_range_walk+0x672/0x7b0 [ 1180.804083][T16092] ? mas_walk+0x15f/0x180 [ 1180.808425][T16092] ? mas_find+0x1e8/0x230 [ 1180.812772][T16092] do_mas_munmap+0x240/0x2b0 [ 1180.817561][T16092] do_munmap+0xd2/0x120 [ 1180.821731][T16092] ? mtree_load+0xeb/0xa40 [ 1180.826161][T16092] ? do_mas_align_munmap+0x1220/0x1220 [ 1180.831637][T16092] ? mtree_load+0x90a/0xa40 [ 1180.836159][T16092] ? mas_alloc_nodes+0x890/0x890 [ 1180.841103][T16092] ? rwsem_write_trylock+0x12f/0x1b0 [ 1180.846402][T16092] mremap_to+0x377/0x5d0 [ 1180.850660][T16092] __se_sys_mremap+0x603/0x10f0 [ 1180.855533][T16092] ? __x64_sys_mremap+0xc0/0xc0 [ 1180.860391][T16092] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 1180.866385][T16092] ? lock_chain_count+0x20/0x20 [ 1180.871251][T16092] ? lockdep_hardirqs_on+0x94/0x140 [ 1180.876450][T16092] ? __x64_sys_mremap+0x1c/0xc0 [ 1180.881314][T16092] do_syscall_64+0x4c/0xa0 [ 1180.885742][T16092] ? clear_bhb_loop+0x60/0xb0 [ 1180.890419][T16092] ? clear_bhb_loop+0x60/0xb0 [ 1180.895113][T16092] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1180.901020][T16092] RIP: 0033:0x7f20e7f8e929 [ 1180.905440][T16092] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1180.925049][T16092] RSP: 002b:00007f20e8dd5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 1180.933477][T16092] RAX: ffffffffffffffda RBX: 00007f20e81b6080 RCX: 00007f20e7f8e929 [ 1180.941461][T16092] RDX: 0000000000200000 RSI: 0000000000600600 RDI: 0000200000000000 [ 1180.949435][T16092] RBP: 00007f20e8010b39 R08: 0000200000a00000 R09: 0000000000000000 [ 1180.957407][T16092] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 [ 1180.965378][T16092] R13: 0000000000000000 R14: 00007f20e81b6080 R15: 00007ffcd6a9cf08 [ 1180.973367][T16092] [ 1180.976616][T16092] Kernel Offset: disabled [ 1180.981078][T16092] Rebooting in 86400 seconds..