last executing test programs: 17m42.993742867s ago: executing program 0 (id=3072): close(0x3) 17m42.870405363s ago: executing program 0 (id=3073): r0 = creat(&(0x7f0000000000)='./file0\x00', 0x60) close(r0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ppoll(&(0x7f0000000740)=[{r1, 0x104}], 0x1, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x8002, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) 17m42.794106427s ago: executing program 0 (id=3074): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r0}, 0x9) io_destroy(0x0) 17m42.741912421s ago: executing program 0 (id=3075): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r2 = syz_io_uring_setup(0x2f90, &(0x7f00000002c0)={0x0, 0x4dd8, 0x3850, 0x2, 0x200004}, &(0x7f0000000100), &(0x7f0000000140)) r3 = epoll_create(0xaf2) epoll_pwait2(r3, &(0x7f0000000280)=[{}], 0x1, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000080)={0xe000200f}) 17m42.469816524s ago: executing program 0 (id=3078): r0 = inotify_init1(0x80000) inotify_add_watch(r0, &(0x7f0000000200)='.\x00', 0x400000a0) r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000001c0)=0x10) 17m42.294994052s ago: executing program 0 (id=3079): socket$inet(0xa, 0x801, 0x84) socket(0x1f, 0x4, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[], 0x50) symlinkat(0x0, 0xffffffffffffffff, 0x0) 17m29.241915615s ago: executing program 3 (id=3166): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0x2}, 0x18) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="4c00000002060101000000000000000000000000050005000a000000050001000700000005000400030000000900020073797a310000000011000300686173683a6e65742c6e65740000"], 0x4c}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) sendmsg$IPSET_CMD_TEST(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="640000000906010800000000000000000600000505000100070000003c0007801800148014000240fc0000000000000000000000000000011800018014000240ff01000000000000000000000000000105000300070000000900020073797a31"], 0x64}}, 0x4800) sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)=ANY=[@ANYBLOB="1c0000000306010200000000000000000700000a0500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40814) 17m29.076777683s ago: executing program 3 (id=3168): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019f00000000000000000a000000000000000800010001000000040004"], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) 17m28.885939172s ago: executing program 3 (id=3170): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000580)="6700000011008188040f56ecdb4cb9cca7480ef434000000e3bd6efb440009000e000a0010000000ba80010000005a8c3774fa0af3dc59a933c1e7a6d3361d83b20000319cdf5656826edaaa11032701c61ec666d482078ccebcb9a4f187f7a4e98f09cdc2649f", 0x67}], 0x1}, 0x0) 17m28.469810371s ago: executing program 3 (id=3173): r0 = syz_open_dev$usbfs(&(0x7f00000007c0), 0x1ff, 0x2401) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x8008551d, &(0x7f00000000c0)=ANY=[@ANYBLOB]) 17m28.304711692s ago: executing program 3 (id=3177): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1/file3\x00', 0x11e) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kmem_cache_free\x00', r1, 0x0, 0x2}, 0x18) renameat2(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) 17m28.010144369s ago: executing program 3 (id=3180): r0 = syz_open_dev$usbmon(&(0x7f0000000300), 0x7, 0x0) read$usbmon(r0, 0x0, 0x0) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x40) 17m27.15782664s ago: executing program 32 (id=3079): socket$inet(0xa, 0x801, 0x84) socket(0x1f, 0x4, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[], 0x50) symlinkat(0x0, 0xffffffffffffffff, 0x0) 17m12.880742187s ago: executing program 33 (id=3180): r0 = syz_open_dev$usbmon(&(0x7f0000000300), 0x7, 0x0) read$usbmon(r0, 0x0, 0x0) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x40) 11m32.564090687s ago: executing program 5 (id=6114): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x13, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000006b8a00fe00000000c7080000010000007b8af0ff00000000bda100000000000007000000f8ffffffbfa400000000000007040000f0ffffffb7020000080000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000001a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 11m32.447096047s ago: executing program 5 (id=6116): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x20, 0x80000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3, 0x3}, {0xa, 0xffe0}, {0x0, 0x10}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_BETA={0x8, 0x6, 0xc}]}}]}, 0x3c}}, 0x20004055) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 11m32.293990295s ago: executing program 5 (id=6118): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24000000) prctl$PR_SET_NAME(0xf, &(0x7f0000000480)='gtp\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, 0x0}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002800500"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xfff2}, {0xffff, 0xffff}, {0x5, 0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 11m32.076764039s ago: executing program 5 (id=6124): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) r0 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000b28000)=0x3) fcntl$setsig(r1, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r2}], 0x2c, 0xffffffffffbffff8) dup2(r1, r2) fcntl$setown(r1, 0x8, r0) tkill(r0, 0x13) 11m31.857253688s ago: executing program 5 (id=6125): bpf$PROG_LOAD(0x5, 0x0, 0x0) 11m31.758424286s ago: executing program 5 (id=6126): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xf, 0xf}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_SPLIT_GSO={0x8}]}}]}, 0x3c}}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) close(r6) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r9, {0x0, 0x9}, {}, {0x8, 0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) sendmsg$kcm(r5, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r7, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="27030200000214000e00032fb96dffff1144ee163cddcb00"/38, 0x26}, {&(0x7f00000004c0)="f058fe7dad777f8f", 0x300}], 0x2}, 0x5) 11m16.540480897s ago: executing program 34 (id=6126): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xf, 0xf}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_SPLIT_GSO={0x8}]}}]}, 0x3c}}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) close(r6) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r9, {0x0, 0x9}, {}, {0x8, 0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) sendmsg$kcm(r5, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r7, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="27030200000214000e00032fb96dffff1144ee163cddcb00"/38, 0x26}, {&(0x7f00000004c0)="f058fe7dad777f8f", 0x300}], 0x2}, 0x5) 10m11.960472415s ago: executing program 7 (id=6574): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendmmsg(0xffffffffffffffff, &(0x7f00000092c0), 0x4ff, 0xff00) bind$inet6(r0, 0x0, 0x0) listen(r0, 0xfffffffc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x100, 0x80e1}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r2, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) 10m11.473055035s ago: executing program 7 (id=6578): r0 = socket$inet6_udp(0xa, 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x56ab, &(0x7f0000000040)={0x0, 0x36d, 0xc000, 0xc, 0x77}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0xfffffffffffffda2, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x24, &(0x7f0000000000)=0xa, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xbf}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8001}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r2, &(0x7f0000000300)="80", 0x1, 0x4048016, &(0x7f00000003c0)={0xa, 0x4e21, 0xc, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x2}, 0x1c) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000540)=0x140, 0x4) setsockopt$inet6_int(r0, 0x29, 0x8, &(0x7f0000000040)=0x3de8e7ea, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x20000080, &(0x7f0000006080)={0xa, 0x4e23, 0x4, @loopback, 0x4}, 0x1c) 10m10.937010849s ago: executing program 1 (id=6586): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r1, @ANYBLOB="00000000000000001c0012800b00010067656e6576650000"], 0x44}, 0x1, 0x2}, 0x40000) 10m10.836907538s ago: executing program 1 (id=6588): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendmmsg(0xffffffffffffffff, &(0x7f00000092c0), 0x4ff, 0xff00) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r0, 0xfffffffc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x100, 0x80e1}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r2, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) 10m10.534777591s ago: executing program 7 (id=6593): sendmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000140)="5500000018007f5f00fe01b2a4a280", 0xf}], 0x1, 0x0, 0x0, 0x7a000000}, 0x0) 10m10.448819407s ago: executing program 7 (id=6594): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x1) 10m10.375391177s ago: executing program 7 (id=6596): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24008004}, 0x40044) 10m9.937322025s ago: executing program 1 (id=6605): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x94) prctl$PR_MCE_KILL(0x4e, 0x1, 0x2) 10m9.822748695s ago: executing program 1 (id=6607): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x1) 10m9.777064891s ago: executing program 1 (id=6608): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r1, @ANYBLOB="00000000000000001c0012800b00010067656e6576650000"], 0x44}, 0x1, 0x2}, 0x40000) 10m6.537930676s ago: executing program 1 (id=6615): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) 10m6.537814506s ago: executing program 7 (id=6616): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) prctl$PR_MCE_KILL(0x4e, 0x1, 0x2) 10m6.03635625s ago: executing program 35 (id=6615): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) 10m5.993036691s ago: executing program 36 (id=6616): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) prctl$PR_MCE_KILL(0x4e, 0x1, 0x2) 11.740759214s ago: executing program 8 (id=10926): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) mkdir(&(0x7f00000002c0)='./file0\x00', 0x8) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESOCT=r1, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f000000e280)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000380)={0x50, 0x0, r2, {0x7, 0x27, 0x0, 0x1001a}}, 0x50) syz_fuse_handle_req(r1, &(0x7f0000008280)="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", 0x2000, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x90, 0x0, 0xfffffffb, {0x3, 0x8000000000000, 0x0, 0x0, 0x440000, 0x8, {0x1, 0x5, 0x9, 0x80, 0x100000000, 0xffffffff80000001, 0xfffffffe, 0xffffffff, 0x4, 0x1000, 0x0, 0x0, 0x0, 0x9}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) rename(&(0x7f0000000100)='./file0/../file0/file0\x00', &(0x7f0000000140)='./file0/../file0/file0\x00') syz_fuse_handle_req(r1, &(0x7f0000006280)="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", 0x2000, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001200)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, {0x0, 0x8, 0xb, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x3}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) close_range(r0, 0xffffffffffffffff, 0x0) 11.614759166s ago: executing program 8 (id=10927): getdents64(0xffffffffffffffff, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x32600) socket(0x1e, 0x805, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) shmget(0x1, 0x4000, 0xa20, &(0x7f0000ffb000/0x4000)=nil) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r3, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) listen(r3, 0x3) accept4$bt_l2cap(r3, &(0x7f0000000200), 0x0, 0x800) syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="043e1301", @ANYBLOB=' '], 0x16) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x800, 0x0) ioctl$TIOCSETD(r4, 0x5423, 0x0) 11.30604064s ago: executing program 8 (id=10929): connect$pppoe(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000010c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x141301) execve(&(0x7f0000000180)='./file1\x00', 0x0, &(0x7f00000002c0)={[&(0x7f0000000940)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01']}) connect$pppoe(0xffffffffffffffff, &(0x7f0000000080)={0x18, 0x0, {0x15, @empty, 'macvlan1\x00'}}, 0x1e) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) connect$pppoe(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0x0, {0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}, 'macvlan0\x00'}}, 0x1e) 11.012727036s ago: executing program 8 (id=10934): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) socket$nl_route(0x10, 0x3, 0x0) setresuid(0x0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000040)={0x0, 0x9, 0x7a8, 0x6}, 0x14) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "db57cda808852139", "252432e72844858a068b92a5a810f4dc", "11802ff5", "5aee41448c84afb7"}, 0x28) syz_clone(0xaa001000, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) 10.898101708s ago: executing program 8 (id=10935): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) r3 = socket(0x10, 0x803, 0x0) r4 = socket(0x10, 0x803, 0x2) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r6, @ANYRES16=r5], 0x3c}, 0x1, 0x0, 0x0, 0x40020c1}, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r7, 0x8916, &(0x7f0000000100)={@ipv4={'\x00', '\xff\xff', @multicast2}, 0x56, r2}) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_inet6_SIOCSIFADDR(r8, 0x8916, &(0x7f0000000180)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x2d, r6}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1006}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x440b0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) 10.748236868s ago: executing program 8 (id=10937): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000300)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000340)='kmem_cache_free\x00'}, 0x18) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket(0x2, 0x80805, 0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) sendmmsg$inet(r3, &(0x7f0000000900)=[{{&(0x7f0000000080)={0x2, 0x4, @private=0xa010100}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)='Q', 0x1}], 0x1}, 0x20000000}, {{&(0x7f0000000000)={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000ac0)="6cb76def2c36dab0f366cf47ad785ed2fb5e1fa5fb56d566acdc377060c4ba50a58104620df72c3004bfbc77173110e163f7d8ad60c34cdb064852353438fea809e390e392afbf35311690cd8286a6c49668aee29b7537078dba77963d15c085d7343c1012135d361ac15c082b7ac8db87cc10fe3ffc374c8be18fc53437100a11dddb9981072ec036d513870a5bbf62ce9e39f790f61ef997af390b9f5fc8a699e001c59077c459eb40ee80a3ffeb35737da668ef974592faf129325cd9ad0dc5663950a329804c9f5d261f71165b05dac212cc2afc40f980ddef8773f1045e75de4ec606aef87052e9ac784bb0f5a43f9cac5e44ae1a6dd575ce17a4749dc7cd4d7f76a40676e792e5b31a25703b1f35b48a89ed84582ef8f4ac046695f402c25da1fa6bc732a7016edf093b4c31193130b3bc143702e2b1d23743ca797b24495dc4979b81413701c0597dcd5e3bcc9c2050c18cfe03814d358e0f795e990dc44d2c1b9890514bd5ea94a3f3a1e25a8cdc67133e9176d76dc54c31274cff0101d8a42c103bad1b8b57362446f2c2ed8a69daf3d7306ef3fa2015e4ee1ef3392120b82671d73b07f3082ea69ffa0ebc7b53c78862a3e1ece518c1f0abbe4053b4dfafe815c1fe4b0d079446e80d13af972e00644a0188605d7309812e24cd1158677f94a16a5eb0c5d48b60329fc522026efa596ac913540f2a9b0345f279329bfba29a7dfc8894e6a08eeee3dd974c3de9e0602cfd1e3e584b10dd26cd13f7fb432e72ea85fd1d3a872061bc967d7a67a3a7f09f34cc825db5d9ef3ce0ff9873f8eff342eb30fa970007e2f591f07dc9bc5141a9679a2f7c69aa50894353a7830a0f7cf766aff6e81d7c3b88d730946ce3f327716ef6fd270d5bf467aef288db903f740b6ac27b962a3c6462372e63f8da8505f05d17b364dd8c6b5d449accd01b4c6da297669f098bee986b95e389a2d003539ca9dec8c26b9f6bbb5f7fe6f0b764d99bc0dafcad4121ed6a749ac71fc5deeee54d0e8a2d9dccc87df818258d73c8816b78c1be3670fb14dded879caf925e0f8abf63f55ffee02bbffb465f0303338bd12e22fe94fdaa3f033127ecaf41649232c38e83850fd3ebc890ea5db2763a8389ac49bd9b7f6b81f381d3eeb90d0f596e2b7f7dfa2a0e9453c1f5f359b56aae9e97a51f6c092d25a031843e351f5733a25c5905706618ab569359bdca4932f6471f4f2d152f84cfc0c563885b0d93fd015095a8eb9422e3d17ddaf3f20dde5eeea415f76c0617964198c824b98f4d53ab0d4d734dcd6d07dddd5b77c1bd71208632941973bd5b5aca981137ec21dcd86ba518b3d4979b68f704a2a7d7cfeb9be3edf4b4b3560e930d9dba0bc358cba36a129748c1fa73483a69759ba0c4f2ee2a936899e163c213bb3fe5a28e68669fb2da6bbcdf4c55e933d127a8bc68b8d0e6c6c757fe8ea47f26ceb7c1b3ca8b962eb31a081756ed56fe4385dccc5e2a7a53300e9c8a1a55bcf8db3f828cb3db8485110da631a50199a5c1932b5538a2b1c3cddb4451868a413418e3f761530fd477b2ebb449070c73171964203ad7bad4302af13fa6fe55fb88ede096a7aba95ef3665da778250daa9dd4bd5ecb8a807d83fe6dcf2f0cf5de7a4ef742979afd7d93bb2672ad45f6537640313b1ca8838f3fdc08e57455af6398ce5b253312fe1a88206210831e0de59d1e3f9442fb9dd43f1b9c00d151d3234028990f8bcaf65c0ad9ea1bc20e4b7641ff26969b02ccd60d2d8d2d72fe5fd58068cd6d7525c9e24c4246cd776ecf1f57550bb6bddad5093618797547cde5c07e165bc979bfbb5479c58e89c29efa5fdfa5b4a87917a4275609afc849384458ca980ba5a2aa4d10c761bb3b3a57e3d3b41001cdf6", 0x541}], 0x1}}], 0x2, 0x0) sync() shutdown(r0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, 0x0, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000000)) close_range(r1, r2, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) sync() io_setup(0x8, 0x0) ioctl$TCSETSF(r4, 0x5404, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000c80)='kmem_cache_free\x00', r5}, 0x10) 10.735210044s ago: executing program 9 (id=10247): bpf$TOKEN_CREATE(0x24, &(0x7f00000004c0), 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000580)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000c80)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$igmp(0x2, 0x3, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00'}, 0x10) setsockopt$MRT_ADD_MFC(r1, 0x0, 0x5, &(0x7f0000000240)={@multicast2, @dev={0xac, 0x14, 0x14, 0x3b}, 0xfffb, "66c5aff8a7eb3af1f6cec2e7420000008c84aea31700", 0x96bd, 0x1000000, 0x78, 0x6b}, 0x3c) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000000080)=0x300, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) r3 = socket(0x10, 0x3, 0x9) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x5}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x4004084, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$DEVLINK_CMD_RATE_GET(r3, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000380)={&(0x7f00000003c0)={0x14, 0x0, 0x2, 0x70bd26, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x40080}, 0x44020) write$nci(r2, 0x0, 0xfffffeea) 10.504717708s ago: executing program 9 (id=10941): 10.414678088s ago: executing program 9 (id=10942): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/igmp\x00') pread64(r0, &(0x7f0000000280)=""/201, 0xc9, 0x1) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$tipc(0x1e, 0x5, 0x0) r4 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r4, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) r5 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) bind$can_j1939(r5, &(0x7f0000000280)={0x1d, r6}, 0x18) sendmsg$can_j1939(r5, 0x0, 0x0) add_key(&(0x7f0000000040)='ceph\x00', 0x0, &(0x7f00000000c0)="010001000000000000001000015b097ead85847817353d2dbad05d", 0x1b, 0xfffffffffffffffd) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x100, 0x0, 0x0, 0x40e00, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r7 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r7, &(0x7f0000000200)='asymmetric\x00', &(0x7f00000002c0)=@chain) add_key$keyring(&(0x7f0000000040), &(0x7f00000003c0)={'syz', 0x2}, 0x0, 0x0, r7) r8 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3800000003140100c68f7bec9aff068609000200737962320000000008004100736977001400330062726964676530"], 0x38}, 0x1, 0x0, 0x0, 0x44805}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x26, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000240)='sched_switch\x00', r9}, 0x18) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) 9.181116941s ago: executing program 4 (id=10945): bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x0}, 0x20) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100006325a640402000207265970000010902240001000000000904000002214c6a0009050702000000da00090589"], 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r1, &(0x7f0000000200)={0x1f, 0x0, @none, 0x3, 0x1}, 0xe) ioctl$USBDEVFS_GET_SPEED(r0, 0x551f) landlock_create_ruleset(&(0x7f0000000040)={0x4010, 0x3}, 0x18, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, &(0x7f0000000280)={@local}) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r3, 0x7ab, &(0x7f00000001c0)={0x0, 0x0, 0x1}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f0000000180)={{0x1, 0x1, 0x18, r2, {0xee00, 0xffffffffffffffff}}, './file1\x00'}) mount$cgroup(0x0, &(0x7f0000000040)='./file1\x00', 0x0, 0x400, &(0x7f00000002c0)={[], [{@permit_directio}, {@uid_lt={'uid<', 0xee01}}, {@context={'context', 0x3d, 'staff_u'}}]}) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x9, 0xd, 0x2, 0xffffffff, 0x42, 0xffffffffffffffff, 0x4}, 0x50) writev(r4, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r4, 0xc0a85320, &(0x7f0000000340)={{0x80, 0xfc}, 'port1\x00', 0x0, 0x60004, 0x0, 0xffffffff, 0x6, 0x0, 0x0, 0x0, 0x1}) syz_open_dev$hidraw(0x0, 0x0, 0x418000) r5 = syz_usb_connect$cdc_ncm(0x2, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a0904000001020900000524060001053408fa6e0d240f0100000000000d000a0006471a010000190581"], 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0xc0580, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r5) syz_usb_connect$cdc_ecm(0x2, 0x4d, &(0x7f0000000240)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x40, 0x4, [{{0x9, 0x4, 0x0, 0x1, 0x3, 0x2, 0x6, 0x0, 0x1, {{0x5}, {0x5, 0x24, 0x0, 0x1fc}, {0xd, 0x24, 0xf, 0x1, 0xfffffffe, 0x80, 0x4c3, 0x5}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x200, 0x30, 0x7, 0x5}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x5, 0x40, 0xf7}}}}}]}}]}}, 0x0) 7.398162621s ago: executing program 2 (id=10947): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c000000100085060000", @ANYRES32=r2, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) r3 = socket(0x10, 0x803, 0x0) r4 = socket(0x10, 0x803, 0x2) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r6, @ANYRES16=r5], 0x3c}, 0x1, 0x0, 0x0, 0x40020c1}, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r7, 0x8916, &(0x7f0000000100)={@ipv4={'\x00', '\xff\xff', @multicast2}, 0x56, r2}) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_inet6_SIOCSIFADDR(r8, 0x8916, &(0x7f0000000180)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x2d, r6}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1006}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x440b0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) 6.993739341s ago: executing program 9 (id=10948): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x99089e6a87f181e9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='rpc_buf_alloc\x00', r0, 0x0, 0x5}, 0x18) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000200180000000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x4}, 0x94) socket$inet_tcp(0x2, 0x1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085000000c3000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r3, 0x0, 0x80000}, 0x18) syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x45) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000002400000024000000060000000000000000000002030000000000000000000009000000000400000000000012"], 0x0, 0x42, 0x0, 0x1, 0xe988}, 0x28) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x13) socket$nl_route(0x10, 0x3, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_audit(0x10, 0x3, 0x9) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00140002800800010008000000060018000100000008000500", @ANYRES32=r5, @ANYBLOB='\b\x00\n\x00', @ANYRES16], 0x54}}, 0x0) 6.763894471s ago: executing program 2 (id=10949): ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) timerfd_create(0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) 6.583632261s ago: executing program 2 (id=10950): bpf$TOKEN_CREATE(0x24, &(0x7f00000004c0), 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000580)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000c80)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$igmp(0x2, 0x3, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00'}, 0x10) setsockopt$MRT_ADD_MFC(r1, 0x0, 0x5, &(0x7f0000000240)={@multicast2, @dev={0xac, 0x14, 0x14, 0x3b}, 0xfffb, "66c5aff8a7eb3af1f6cec2e7420000008c84aea31700", 0x96bd, 0x1000000, 0x78, 0x6b}, 0x3c) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000000080)=0x300, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) r3 = socket(0x10, 0x3, 0x9) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x5}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r4}, 0x18) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x4004084, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$DEVLINK_CMD_RATE_GET(r3, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000380)={&(0x7f00000003c0)={0x14, 0x0, 0x2, 0x70bd26, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x40080}, 0x44020) write$nci(r2, 0x0, 0xfffffeea) 6.498648249s ago: executing program 9 (id=10951): getdents64(0xffffffffffffffff, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x32600) socket(0x1e, 0x805, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) shmget(0x1, 0x4000, 0xa20, &(0x7f0000ffb000/0x4000)=nil) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r3, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) listen(r3, 0x3) syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="043e130100c900", @ANYBLOB=' '], 0x16) 6.391002629s ago: executing program 4 (id=10952): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, 0x0, &(0x7f0000000140)) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={0x0, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) 6.246356078s ago: executing program 2 (id=10953): connect$pppoe(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000010c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x141301) execve(&(0x7f0000000180)='./file1\x00', 0x0, &(0x7f00000002c0)={[&(0x7f0000000940)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01']}) connect$pppoe(0xffffffffffffffff, &(0x7f0000000080)={0x18, 0x0, {0x15, @empty, 'macvlan1\x00'}}, 0x1e) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) connect$pppoe(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0x0, {0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}, 'macvlan0\x00'}}, 0x1e) 5.420813832s ago: executing program 4 (id=10954): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000300)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) getsockopt$inet_int(r0, 0x0, 0x21, &(0x7f0000000100), &(0x7f0000000140)=0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x50) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000003c0)={0x1, &(0x7f0000000380)=[{0x1, 0xd7, 0x10, 0xffffffff}]}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020641700000000002020007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000340)='kmem_cache_free\x00', r1}, 0x18) poll(0x0, 0x0, 0x9) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket(0x2, 0x80805, 0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) sendmmsg$inet(r3, &(0x7f0000000900)=[{{&(0x7f0000000080)={0x2, 0x4, @private=0xa010100}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)='Q', 0x1}], 0x1}, 0x20000000}, {{&(0x7f0000000000)={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000ac0)="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", 0x541}], 0x1}}], 0x2, 0x0) 5.067374929s ago: executing program 9 (id=10955): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) io_setup(0x2, &(0x7f0000002400)) socket$inet6(0xa, 0x80002, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x3, 0x8, 0x8001, 0x0, 0xb, 0x8000000000000000, 0x6, 0xfa11, 0xffffffff}, 0x0) r2 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r2, 0xc0045627, &(0x7f0000000100)=0x3) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r2, 0xc0845657, &(0x7f0000000040)={0x0, @bt={0xa00, 0x640, 0x1, 0x2800, 0xd59f83, 0x19f2, 0x42, 0x4, 0x3, 0x3, 0x2800, 0x2800, 0x2, 0xba2, 0xd, 0x23, {0x8, 0xffffffff}, 0xd0, 0x9}}) 4.176380244s ago: executing program 4 (id=10956): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_io_uring_setup(0x315b, 0x0, &(0x7f0000000100), &(0x7f0000000040)) socket(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) munlock(&(0x7f0000ffc000/0x1000)=nil, 0x1000) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000080), 0x62}, {&(0x7f0000000100)="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", 0x682c}, {&(0x7f0000001480)="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", 0x1001}], 0x1) socket(0x10, 0x3, 0x0) 3.967376348s ago: executing program 2 (id=10957): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/igmp\x00') pread64(r0, &(0x7f0000000280)=""/201, 0xc9, 0x1) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$tipc(0x1e, 0x5, 0x0) r4 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r4, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) r5 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) bind$can_j1939(r5, &(0x7f0000000280)={0x1d, r6}, 0x18) sendmsg$can_j1939(r5, 0x0, 0x0) add_key(&(0x7f0000000040)='ceph\x00', 0x0, &(0x7f00000000c0)="010001000000000000001000015b097ead85847817353d2dbad05d", 0x1b, 0xfffffffffffffffd) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x100, 0x0, 0x0, 0x40e00, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r7 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r7, &(0x7f0000000200)='asymmetric\x00', &(0x7f00000002c0)=@chain) add_key$keyring(&(0x7f0000000040), &(0x7f00000003c0)={'syz', 0x2}, 0x0, 0x0, r7) r8 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3800000003140100c68f7bec9aff068609000200737962320000000008004100736977001400330062726964676530"], 0x38}, 0x1, 0x0, 0x0, 0x44805}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x26, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000240)='sched_switch\x00', r9}, 0x18) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) 2.762098414s ago: executing program 6 (id=10958): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x14, 0x38, 0x107, 0x70bd2b, 0x25dfdbfe, {0x8, 0x7c}}, 0x14}, 0x1, 0x0, 0x0, 0x24008811}, 0x48014) 2.606514057s ago: executing program 2 (id=10959): socket$nl_route(0x10, 0x3, 0x0) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = getpgid(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='ntfs3\x00', 0x1000080, 0x0) bind$inet6(r0, 0x0, 0x0) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x12, 0x4, 0x8, 0x8002}, 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r4, 0x0, 0x0}, 0x20) bind$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20) connect$l2tp6(r0, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20) sendmmsg$inet6(r0, &(0x7f0000000ac0)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @empty}, 0x1b, 0x0}}], 0x17fd147c801ae9af, 0xff00) 2.458110347s ago: executing program 6 (id=10960): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x99089e6a87f181e9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='rpc_buf_alloc\x00', r0, 0x0, 0x5}, 0x18) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000200180000000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x4}, 0x94) socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r2, 0x0, 0x80000}, 0x18) syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x45) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000002400000024000000060000000000000000000002030000000000000000000009000000000400000000000012"], 0x0, 0x42, 0x0, 0x1, 0xe988}, 0x28) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x13) socket$nl_route(0x10, 0x3, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_audit(0x10, 0x3, 0x9) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00140002800800010008000000060018000100000008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES16], 0x54}}, 0x0) 1.8123304s ago: executing program 6 (id=10961): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = socket(0x22, 0x2, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000100), 0x0) 711.910831ms ago: executing program 6 (id=10962): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4048aecb, &(0x7f0000000480)={0x6, 0x0, [{0x7, 0xffffffff, 0x1, 0xffffff89, 0x6, 0x6, 0x2}, {0x1, 0x4, 0x6, 0x8003, 0x27, 0x7, 0x5}, {0xb, 0x8, 0x0, 0x3ff, 0x7ffffdff, 0x8005, 0xffff}, {0x80000019, 0xe5f, 0x1, 0x7, 0xdf1, 0x6, 0x80000001}, {0x80000000, 0x2bb, 0x1, 0xd, 0x3, 0x7ff, 0x404}, {0x80000001, 0x2, 0x3, 0xfffffff7, 0xfffffff9, 0xff, 0x6}]}) 710.132558ms ago: executing program 4 (id=10963): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, 0x0, &(0x7f0000000140)) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={0x0, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) 237.773854ms ago: executing program 4 (id=10964): getdents64(0xffffffffffffffff, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x32600) socket(0x1e, 0x805, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) shmget(0x1, 0x4000, 0xa20, &(0x7f0000ffb000/0x4000)=nil) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r3, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) listen(r3, 0x3) syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="043e130100c900", @ANYBLOB=' '], 0x16) 237.443411ms ago: executing program 6 (id=10965): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x44, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {0xa}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_NETMASK={0x5, 0x14, 0xa9}]}]}, 0x44}}, 0x2) 0s ago: executing program 6 (id=10966): connect$pppoe(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000010c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x141301) execve(&(0x7f0000000180)='./file1\x00', 0x0, &(0x7f00000002c0)={[&(0x7f0000000940)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01']}) connect$pppoe(0xffffffffffffffff, &(0x7f0000000080)={0x18, 0x0, {0x15, @empty, 'macvlan1\x00'}}, 0x1e) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) connect$pppoe(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0x0, {0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}, 'macvlan0\x00'}}, 0x1e) kernel console output (not intermixed with test programs): ping master sync thread 30310 ... [ 1269.195048][T25010] libceph: connect (1)[c::]:6789 error -101 [ 1269.195170][T25010] libceph: mon0 (1)[c::]:6789 connect error [ 1269.210476][T25010] libceph: connect (1)[c::]:6789 error -101 [ 1269.210656][T25010] libceph: mon0 (1)[c::]:6789 connect error [ 1269.257473][T30312] ceph: No mds server is up or the cluster is laggy [ 1269.916280][T30336] bridge: RTM_NEWNEIGH with invalid ether address [ 1272.516756][ T37] kauditd_printk_skb: 52 callbacks suppressed [ 1272.516775][ T37] audit: type=1326 audit(1272.320:5735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=30378 comm="syz.4.9228" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f07eb07f749 code=0x0 [ 1272.876182][T30344] lo speed is unknown, defaulting to 1000 [ 1272.932338][T30384] syzkaller0: entered promiscuous mode [ 1272.932367][T30384] syzkaller0: entered allmulticast mode [ 1273.063824][T30393] siw: device registration error -23 [ 1273.692409][T30402] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9236'. [ 1273.692465][T30402] netem: change failed [ 1275.122916][T30425] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9244'. [ 1275.142022][T30425] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9244'. [ 1276.917202][T30453] tipc: Can't bind to reserved service type 0 [ 1277.657049][T30425] team0 (unregistering): Port device team_slave_0 removed [ 1277.694284][T30425] team0 (unregistering): Port device team_slave_1 removed [ 1277.754694][T30425] team0 (unregistering): Port device bridge1 removed [ 1277.993952][T30464] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9258'. [ 1278.926502][T30484] syzkaller0: entered promiscuous mode [ 1278.926528][T30484] syzkaller0: entered allmulticast mode [ 1278.965295][T30486] netlink: 28 bytes leftover after parsing attributes in process `syz.8.9266'. [ 1279.240371][T30491] netlink: 8 bytes leftover after parsing attributes in process `syz.8.9267'. [ 1279.350167][T30494] netlink: 'syz.8.9267': attribute type 10 has an invalid length. [ 1279.423502][T30496] netlink: 4 bytes leftover after parsing attributes in process `syz.8.9267'. [ 1279.753468][T10815] libceph: connect (1)[c::]:6789 error -101 [ 1279.753658][T10815] libceph: mon0 (1)[c::]:6789 connect error [ 1279.754425][T10815] libceph: connect (1)[c::]:6789 error -101 [ 1279.754599][T10815] libceph: mon0 (1)[c::]:6789 connect error [ 1280.496578][T10815] libceph: connect (1)[c::]:6789 error -101 [ 1280.496775][T10815] libceph: mon0 (1)[c::]:6789 connect error [ 1280.666866][T30500] ceph: No mds server is up or the cluster is laggy [ 1281.829589][T30519] lo speed is unknown, defaulting to 1000 [ 1282.019873][T30528] netlink: 28 bytes leftover after parsing attributes in process `syz.8.9277'. [ 1282.146626][T30532] ntfs3(nullb0): Primary boot signature is not NTFS. [ 1282.146820][T30532] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 1282.373611][T30536] syzkaller0: entered promiscuous mode [ 1282.373636][T30536] syzkaller0: entered allmulticast mode [ 1283.577272][T30556] syzkaller0: entered promiscuous mode [ 1283.577297][T30556] syzkaller0: entered allmulticast mode [ 1283.900586][T30563] netlink: 28 bytes leftover after parsing attributes in process `syz.8.9291'. [ 1284.497159][T30577] syzkaller0: entered promiscuous mode [ 1284.497185][T30577] syzkaller0: entered allmulticast mode [ 1285.924716][T23132] libceph: connect (1)[c::]:6789 error -101 [ 1285.924908][T23132] libceph: mon0 (1)[c::]:6789 connect error [ 1285.970010][T30587] ceph: No mds server is up or the cluster is laggy [ 1286.260404][T23132] libceph: connect (1)[c::]:6789 error -101 [ 1286.260564][T23132] libceph: mon0 (1)[c::]:6789 connect error [ 1286.450166][T30590] lo speed is unknown, defaulting to 1000 [ 1286.708912][T30603] syzkaller0: entered promiscuous mode [ 1286.708938][T30603] syzkaller0: entered allmulticast mode [ 1287.296927][T30609] netlink: 28 bytes leftover after parsing attributes in process `syz.6.9304'. [ 1287.296983][T30609] netem: change failed [ 1287.344336][ T37] audit: type=1326 audit(1287.160:5736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=30612 comm="syz.8.9306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd74956f749 code=0x7ffc0000 [ 1287.379082][ T37] audit: type=1326 audit(1287.170:5737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=30612 comm="syz.8.9306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd74956f749 code=0x7ffc0000 [ 1287.379139][ T37] audit: type=1326 audit(1287.170:5738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=30612 comm="syz.8.9306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7fd74956f749 code=0x7ffc0000 [ 1287.379186][ T37] audit: type=1326 audit(1287.170:5739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=30612 comm="syz.8.9306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd74956f749 code=0x7ffc0000 [ 1287.379228][ T37] audit: type=1326 audit(1287.170:5740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=30612 comm="syz.8.9306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd74956f749 code=0x7ffc0000 [ 1287.379271][ T37] audit: type=1326 audit(1287.170:5741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=30612 comm="syz.8.9306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd74956f749 code=0x7ffc0000 [ 1287.379310][ T37] audit: type=1326 audit(1287.170:5742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=30612 comm="syz.8.9306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd74956f749 code=0x7ffc0000 [ 1287.379349][ T37] audit: type=1326 audit(1287.170:5743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=30612 comm="syz.8.9306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd74956f749 code=0x7ffc0000 [ 1287.379388][ T37] audit: type=1326 audit(1287.170:5744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=30612 comm="syz.8.9306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fd74956f749 code=0x7ffc0000 [ 1287.379426][ T37] audit: type=1326 audit(1287.170:5745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=30612 comm="syz.8.9306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd74956f749 code=0x7ffc0000 [ 1288.135840][T30635] syzkaller0: entered promiscuous mode [ 1288.135868][T30635] syzkaller0: entered allmulticast mode [ 1288.194410][ T6120] libceph: connect (1)[c::]:6789 error -101 [ 1288.194597][ T6120] libceph: mon0 (1)[c::]:6789 connect error [ 1288.195607][ T6120] libceph: connect (1)[c::]:6789 error -101 [ 1288.195779][ T6120] libceph: mon0 (1)[c::]:6789 connect error [ 1288.408269][T30642] ceph: No mds server is up or the cluster is laggy [ 1288.457214][T23132] libceph: connect (1)[c::]:6789 error -101 [ 1288.457382][T23132] libceph: mon0 (1)[c::]:6789 connect error [ 1288.975895][T10815] libceph: connect (1)[c::]:6789 error -101 [ 1288.976093][T10815] libceph: mon0 (1)[c::]:6789 connect error [ 1290.522140][T30670] bridge: RTM_NEWNEIGH with invalid ether address [ 1291.728259][T30671] lo speed is unknown, defaulting to 1000 [ 1292.566037][T30684] syzkaller0: entered promiscuous mode [ 1292.566061][T30684] syzkaller0: entered allmulticast mode [ 1293.107806][ T37] kauditd_printk_skb: 150 callbacks suppressed [ 1293.107824][ T37] audit: type=1326 audit(1292.920:5896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=30694 comm="syz.6.9334" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6f8019f749 code=0x0 [ 1293.990449][T30715] netlink: 28 bytes leftover after parsing attributes in process `syz.2.9342'. [ 1293.990482][T30715] netem: change failed [ 1294.600114][T25010] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 1294.760858][T25010] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 1294.760891][T25010] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 1294.768291][T25010] usb 10-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 1294.768321][T25010] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1294.768341][T25010] usb 10-1: Product: syz [ 1294.768356][T25010] usb 10-1: Manufacturer: syz [ 1294.768370][T25010] usb 10-1: SerialNumber: syz [ 1294.810305][T25010] usb 10-1: config 0 descriptor?? [ 1294.811312][T30732] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1294.811500][T30732] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1295.065016][T30732] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1295.065223][T30732] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1295.253635][ T37] audit: type=1326 audit(1295.070:5897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=30747 comm="syz.8.9353" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd74956f749 code=0x0 [ 1295.468104][T25010] dm9601: No valid MAC address in EEPROM, using 00:00:00:00:00:00 [ 1296.080993][T25010] dm9601 10-1:0.0 (unnamed net_device) (uninitialized): Error reading MODE_CTRL [ 1296.103832][T25010] usb 10-1: USB disconnect, device number 2 [ 1296.224041][T30760] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 1296.224277][T30759] IPVS: stopping master sync thread 30760 ... [ 1296.744566][ T37] audit: type=1326 audit(1296.560:5898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=30780 comm="syz.9.9367" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa13829f749 code=0x0 [ 1297.854268][T30794] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 1297.854475][T30793] IPVS: stopping master sync thread 30794 ... [ 1297.972000][T30797] bridge: RTM_NEWNEIGH with invalid ether address [ 1299.233592][ T37] audit: type=1326 audit(1299.050:5899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=30819 comm="syz.6.9382" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6f8019f749 code=0x0 [ 1300.175046][T30831] lo speed is unknown, defaulting to 1000 [ 1300.260626][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 1301.828850][T30844] bridge: RTM_NEWNEIGH with invalid ether address [ 1302.877024][T30877] netlink: 8 bytes leftover after parsing attributes in process `syz.8.9401'. [ 1302.880461][T30877] netlink: 'syz.8.9401': attribute type 10 has an invalid length. [ 1302.880807][T30877] netlink: 4 bytes leftover after parsing attributes in process `syz.8.9401'. [ 1303.348356][ T37] audit: type=1326 audit(1303.160:5900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=30884 comm="syz.6.9404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f8019f749 code=0x7ffc0000 [ 1303.348739][ T37] audit: type=1326 audit(1303.160:5901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=30884 comm="syz.6.9404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f6f8019f749 code=0x7ffc0000 [ 1303.349534][ T37] audit: type=1326 audit(1303.160:5902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=30884 comm="syz.6.9404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f8019f749 code=0x7ffc0000 [ 1304.308076][ T37] audit: type=1326 audit(1304.120:5903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=30884 comm="syz.6.9404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6f8019f749 code=0x7ffc0000 [ 1304.350638][ T37] audit: type=1326 audit(1304.170:5904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=30884 comm="syz.6.9404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f8019f749 code=0x7ffc0000 [ 1304.350926][ T37] audit: type=1326 audit(1304.170:5905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=30884 comm="syz.6.9404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f8019f749 code=0x7ffc0000 [ 1304.456968][T30886] lo speed is unknown, defaulting to 1000 [ 1304.630861][T21101] Bluetooth: min 6 > max 0 [ 1304.741715][ T6120] libceph: connect (1)[c::]:6789 error -101 [ 1304.741901][ T6120] libceph: mon0 (1)[c::]:6789 connect error [ 1304.742358][ T6120] libceph: connect (1)[c::]:6789 error -101 [ 1304.742523][ T6120] libceph: mon0 (1)[c::]:6789 connect error [ 1304.960585][T30896] ceph: No mds server is up or the cluster is laggy [ 1305.110041][ T6120] libceph: connect (1)[c::]:6789 error -101 [ 1305.110223][ T6120] libceph: mon0 (1)[c::]:6789 connect error [ 1306.219084][T30924] infiniband syb2: RDMA CMA: cma_listen_on_dev, error -98 [ 1306.720347][T30925] lo speed is unknown, defaulting to 1000 [ 1306.799423][T21101] Bluetooth: hci3: command tx timeout [ 1308.618530][T30965] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9428'. [ 1308.691820][T30967] netlink: 4 bytes leftover after parsing attributes in process `syz.8.9430'. [ 1310.975619][T31009] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9444'. [ 1311.200416][T31018] netlink: 'syz.9.9448': attribute type 1 has an invalid length. [ 1311.206093][T31018] netlink: 28 bytes leftover after parsing attributes in process `syz.9.9448'. [ 1311.550291][T31025] IPVS: stopping master sync thread 31026 ... [ 1311.825309][ T37] audit: type=1326 audit(1311.640:5906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31043 comm="syz.6.9457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f8019f749 code=0x7ffc0000 [ 1311.825910][ T37] audit: type=1326 audit(1311.640:5907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31043 comm="syz.6.9457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f8019f749 code=0x7ffc0000 [ 1311.826274][ T37] audit: type=1326 audit(1311.640:5908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31043 comm="syz.6.9457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f6f8019f749 code=0x7ffc0000 [ 1311.826836][ T37] audit: type=1326 audit(1311.640:5909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31043 comm="syz.6.9457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f8019f749 code=0x7ffc0000 [ 1311.827057][ T37] audit: type=1326 audit(1311.640:5910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31043 comm="syz.6.9457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6f8019f749 code=0x7ffc0000 [ 1311.827205][ T37] audit: type=1326 audit(1311.640:5911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31043 comm="syz.6.9457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f8019f749 code=0x7ffc0000 [ 1311.828028][ T37] audit: type=1326 audit(1311.640:5912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31043 comm="syz.6.9457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f6f8019f749 code=0x7ffc0000 [ 1311.829129][ T37] audit: type=1326 audit(1311.640:5913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31043 comm="syz.6.9457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f8019f749 code=0x7ffc0000 [ 1311.829368][ T37] audit: type=1326 audit(1311.640:5914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31043 comm="syz.6.9457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6f8019f749 code=0x7ffc0000 [ 1311.874373][ T37] audit: type=1326 audit(1311.650:5915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31043 comm="syz.6.9457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f8019f749 code=0x7ffc0000 [ 1312.129201][T31048] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9458'. [ 1312.913989][T31061] netlink: 'syz.8.9463': attribute type 1 has an invalid length. [ 1312.916407][T31061] netlink: 28 bytes leftover after parsing attributes in process `syz.8.9463'. [ 1314.277957][T31085] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9471'. [ 1314.553392][T31097] netlink: 4 bytes leftover after parsing attributes in process `syz.8.9476'. [ 1315.767515][T31123] bridge: RTM_NEWNEIGH with invalid ether address [ 1316.017476][T31137] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9490'. [ 1316.053134][T31138] tipc: Enabled bearer , priority 0 [ 1316.182687][T31138] tipc: Disabling bearer [ 1316.205235][T31146] netlink: 4 bytes leftover after parsing attributes in process `syz.9.9494'. [ 1317.440090][T23132] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 1317.594681][T23132] usb 3-1: config 1 has an invalid interface number: 140 but max is 0 [ 1317.594709][T23132] usb 3-1: config 1 has no interface number 0 [ 1317.594753][T23132] usb 3-1: New USB device found, idVendor=0dba, idProduct=5000, bcdDevice=3d.88 [ 1317.594775][T23132] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1317.665664][T31168] pimreg: entered allmulticast mode [ 1317.667638][T31170] pimreg: left allmulticast mode [ 1317.691828][T23132] usb 3-1: MBOX3: Invalid descriptor size=18. [ 1318.626006][T31180] netlink: 4 bytes leftover after parsing attributes in process `syz.8.9506'. [ 1318.807021][T31184] syzkaller0: entered promiscuous mode [ 1318.807047][T31184] syzkaller0: entered allmulticast mode [ 1319.170117][ T6120] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 1319.308741][T31205] netlink: 12 bytes leftover after parsing attributes in process `syz.9.9514'. [ 1319.322312][ T6120] usb 9-1: Using ep0 maxpacket: 32 [ 1319.327635][ T6120] usb 9-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 1319.327664][ T6120] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1319.353330][ T6120] usb 9-1: config 0 descriptor?? [ 1319.365523][ T6120] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 1319.616945][T31214] pimreg: entered allmulticast mode [ 1319.625632][T31214] pimreg: left allmulticast mode [ 1320.009625][T31227] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9524'. [ 1320.009680][T31227] netem: change failed [ 1320.158590][T31231] netlink: 52 bytes leftover after parsing attributes in process `syz.4.9526'. [ 1320.207012][T23132] usb 3-1: USB disconnect, device number 55 [ 1320.384987][ T6120] gspca_vc032x: reg_w err -71 [ 1320.385080][ T6120] gspca_vc032x: I2c Bus Busy Wait 00 [ 1320.385093][ T6120] gspca_vc032x: I2c Bus Busy Wait 00 [ 1320.385102][ T6120] gspca_vc032x: I2c Bus Busy Wait 00 [ 1320.385110][ T6120] gspca_vc032x: I2c Bus Busy Wait 00 [ 1320.385119][ T6120] gspca_vc032x: I2c Bus Busy Wait 00 [ 1320.385128][ T6120] gspca_vc032x: I2c Bus Busy Wait 00 [ 1320.385137][ T6120] gspca_vc032x: I2c Bus Busy Wait 00 [ 1320.385146][ T6120] gspca_vc032x: I2c Bus Busy Wait 00 [ 1320.385155][ T6120] gspca_vc032x: I2c Bus Busy Wait 00 [ 1320.385166][ T6120] gspca_vc032x: I2c Bus Busy Wait 00 [ 1320.385176][ T6120] gspca_vc032x: I2c Bus Busy Wait 00 [ 1320.385184][ T6120] gspca_vc032x: I2c Bus Busy Wait 00 [ 1320.385192][ T6120] gspca_vc032x: I2c Bus Busy Wait 00 [ 1320.385200][ T6120] gspca_vc032x: I2c Bus Busy Wait 00 [ 1320.385208][ T6120] gspca_vc032x: I2c Bus Busy Wait 00 [ 1320.385216][ T6120] gspca_vc032x: I2c Bus Busy Wait 00 [ 1320.385223][ T6120] gspca_vc032x: I2c Bus Busy Wait 00 [ 1320.385231][ T6120] gspca_vc032x: I2c Bus Busy Wait 00 [ 1320.385239][ T6120] gspca_vc032x: Unknown sensor... [ 1320.385331][ T6120] vc032x 9-1:0.0: probe with driver vc032x failed with error -22 [ 1320.509597][ T6120] usb 9-1: USB disconnect, device number 3 [ 1320.511069][ T931] libceph: connect (1)[c::]:6789 error -101 [ 1320.511626][ T931] libceph: mon0 (1)[c::]:6789 connect error [ 1320.567324][T31242] ceph: No mds server is up or the cluster is laggy [ 1320.965378][T10815] libceph: connect (1)[c::]:6789 error -101 [ 1320.965509][T10815] libceph: mon0 (1)[c::]:6789 connect error [ 1321.074772][T31249] pimreg: entered allmulticast mode [ 1321.074937][T31251] pimreg: left allmulticast mode [ 1321.255832][T31260] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9536'. [ 1321.255886][T31260] netem: change failed [ 1321.481471][T31273] netlink: 12 bytes leftover after parsing attributes in process `syz.6.9537'. [ 1321.562363][T31278] netlink: 40 bytes leftover after parsing attributes in process `syz.9.9541'. [ 1321.570562][T31272] netlink: 28 bytes leftover after parsing attributes in process `syz.8.9539'. [ 1323.139232][T31282] lo speed is unknown, defaulting to 1000 [ 1324.951006][T31308] netlink: 12 bytes leftover after parsing attributes in process `syz.9.9549'. [ 1324.951032][T31308] netlink: 12 bytes leftover after parsing attributes in process `syz.9.9549'. [ 1325.332596][T31318] netlink: 28 bytes leftover after parsing attributes in process `syz.8.9554'. [ 1325.761922][ T6119] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 1326.390232][ T37] kauditd_printk_skb: 38 callbacks suppressed [ 1326.390253][ T37] audit: type=1326 audit(1326.180:5954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31327 comm="syz.8.9560" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd74956f749 code=0x0 [ 1326.556040][ T6119] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 1326.556075][ T6119] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 1326.565721][ T6119] usb 3-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 1326.565750][ T6119] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1326.565770][ T6119] usb 3-1: Product: syz [ 1326.565784][ T6119] usb 3-1: Manufacturer: syz [ 1326.565797][ T6119] usb 3-1: SerialNumber: syz [ 1326.581124][ T6119] usb 3-1: config 0 descriptor?? [ 1326.588057][T31322] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1326.588234][T31322] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1326.805002][T31322] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1326.805291][T31322] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1327.985144][ T6119] dm9601: No valid MAC address in EEPROM, using 00:00:00:00:00:00 [ 1329.337080][ T6119] dm9601 3-1:0.0 (unnamed net_device) (uninitialized): MDIO read error: -71 [ 1329.372831][T31353] ceph: No mds server is up or the cluster is laggy [ 1329.373457][T25650] libceph: connect (1)[c::]:6789 error -101 [ 1329.373646][T25650] libceph: mon0 (1)[c::]:6789 connect error [ 1329.428263][ T6119] dm9601 3-1:0.0 eth21: register 'dm9601' at usb-dummy_hcd.2-1, Davicom DM96xx USB 10/100 Ethernet, 8e:33:f9:fa:b8:2d [ 1329.466014][ T6119] usb 3-1: USB disconnect, device number 56 [ 1329.467894][ T6119] dm9601 3-1:0.0 eth21: unregister 'dm9601' usb-dummy_hcd.2-1, Davicom DM96xx USB 10/100 Ethernet [ 1329.631966][T25650] libceph: connect (1)[c::]:6789 error -101 [ 1329.632191][T25650] libceph: mon0 (1)[c::]:6789 connect error [ 1329.702091][T31363] netlink: 28 bytes leftover after parsing attributes in process `syz.9.9570'. [ 1332.084012][T31389] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 1332.200373][T31388] IPVS: stopping master sync thread 31389 ... [ 1332.253414][T31384] lo speed is unknown, defaulting to 1000 [ 1332.514114][ T37] audit: type=1326 audit(1332.340:5955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31395 comm="syz.8.9582" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd74956f749 code=0x0 [ 1332.606532][ T6119] usb 7-1: new full-speed USB device number 5 using dummy_hcd [ 1332.818496][ T6119] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1332.818515][ T6119] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1332.818574][ T6119] usb 7-1: Product: syz [ 1332.818584][ T6119] usb 7-1: Manufacturer: syz [ 1332.818592][ T6119] usb 7-1: SerialNumber: syz [ 1332.859814][ T6119] usb 7-1: config 0 descriptor?? [ 1333.122486][ T6119] usb 7-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1333.890925][T31412] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9586'. [ 1334.720634][ T6119] dvb_usb_rtl28xxu 7-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1334.726948][ T6119] usb 7-1: USB disconnect, device number 5 [ 1334.760586][ T37] audit: type=1326 audit(1334.580:5956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31416 comm="syz.8.9588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd74956f749 code=0x7ffc0000 [ 1334.760976][ T37] audit: type=1326 audit(1334.580:5957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31416 comm="syz.8.9588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7fd74956f749 code=0x7ffc0000 [ 1334.761246][ T37] audit: type=1326 audit(1334.580:5958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31416 comm="syz.8.9588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd74956f749 code=0x7ffc0000 [ 1334.761568][ T37] audit: type=1326 audit(1334.580:5959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31416 comm="syz.8.9588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd74956f749 code=0x7ffc0000 [ 1334.761823][ T37] audit: type=1326 audit(1334.580:5960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31416 comm="syz.8.9588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd74956f749 code=0x7ffc0000 [ 1334.762142][ T37] audit: type=1326 audit(1334.580:5961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31416 comm="syz.8.9588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fd74956f749 code=0x7ffc0000 [ 1334.762833][ T37] audit: type=1326 audit(1334.580:5962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31416 comm="syz.8.9588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd74956f749 code=0x7ffc0000 [ 1334.763188][ T37] audit: type=1326 audit(1334.580:5963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31416 comm="syz.8.9588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd74956f749 code=0x7ffc0000 [ 1334.765633][ T37] audit: type=1326 audit(1334.580:5964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31416 comm="syz.8.9588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd74956f749 code=0x7ffc0000 [ 1337.221327][T31454] netlink: 4 bytes leftover after parsing attributes in process `syz.9.9601'. [ 1337.402263][T31419] erspan0: left allmulticast mode [ 1337.592590][T18610] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1337.603720][T18610] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1337.603767][T18610] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1337.603802][T18610] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1337.719620][T31432] lo speed is unknown, defaulting to 1000 [ 1337.738526][ T37] kauditd_printk_skb: 17 callbacks suppressed [ 1337.738543][ T37] audit: type=1326 audit(1337.550:5982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31457 comm="syz.8.9604" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd74956f749 code=0x7ffc0000 [ 1337.739443][ T37] audit: type=1326 audit(1337.550:5983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31457 comm="syz.8.9604" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7fd74956f749 code=0x7ffc0000 [ 1337.739772][ T37] audit: type=1326 audit(1337.550:5984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31457 comm="syz.8.9604" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd74956f749 code=0x7ffc0000 [ 1337.785211][ T37] audit: type=1326 audit(1337.590:5985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31457 comm="syz.8.9604" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd74956f749 code=0x7ffc0000 [ 1337.840703][ T37] audit: type=1326 audit(1337.640:5986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31457 comm="syz.8.9604" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd74956f749 code=0x7ffc0000 [ 1337.840960][ T37] audit: type=1326 audit(1337.660:5987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31457 comm="syz.8.9604" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd74956f749 code=0x7ffc0000 [ 1337.841341][ T37] audit: type=1326 audit(1337.660:5988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31457 comm="syz.8.9604" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fd74956f749 code=0x7ffc0000 [ 1337.848646][ T37] audit: type=1326 audit(1337.660:5989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31457 comm="syz.8.9604" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd74956f749 code=0x7ffc0000 [ 1337.849414][ T37] audit: type=1326 audit(1337.660:5990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31457 comm="syz.8.9604" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd74956f749 code=0x7ffc0000 [ 1337.883182][ T37] audit: type=1326 audit(1337.700:5991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31457 comm="syz.8.9604" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd74956f749 code=0x7ffc0000 [ 1338.220157][ T6119] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 1338.370433][ T6119] usb 3-1: Using ep0 maxpacket: 8 [ 1338.480641][T14948] Bluetooth: hci3: command 0x0406 tx timeout [ 1338.497611][ T6119] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1338.497670][ T6119] usb 3-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 1338.497695][ T6119] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1338.534887][ T6119] usb 3-1: config 0 descriptor?? [ 1338.548038][ T6119] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 1339.160694][T31485] netlink: 12 bytes leftover after parsing attributes in process `syz.9.9612'. [ 1340.045937][T25010] libceph: connect (1)[c::]:6789 error -101 [ 1340.046130][T25010] libceph: mon0 (1)[c::]:6789 connect error [ 1340.067942][T25010] libceph: connect (1)[c::]:6789 error -101 [ 1340.068144][T25010] libceph: mon0 (1)[c::]:6789 connect error [ 1340.083127][T25010] usb 3-1: USB disconnect, device number 57 [ 1341.109758][T25650] libceph: connect (1)[c::]:6789 error -101 [ 1341.112163][T25650] libceph: mon0 (1)[c::]:6789 connect error [ 1341.328251][T31522] lo speed is unknown, defaulting to 1000 [ 1341.408152][T31508] ceph: No mds server is up or the cluster is laggy [ 1341.767458][T25650] libceph: connect (1)[c::]:6789 error -101 [ 1341.767648][T25650] libceph: mon0 (1)[c::]:6789 connect error [ 1343.876665][T31550] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9633'. [ 1344.182076][ T37] kauditd_printk_skb: 84 callbacks suppressed [ 1344.182094][ T37] audit: type=1326 audit(1344.000:6076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31556 comm="syz.6.9636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f8019f749 code=0x7ffc0000 [ 1344.182475][ T37] audit: type=1326 audit(1344.000:6077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31556 comm="syz.6.9636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f8019f749 code=0x7ffc0000 [ 1344.182742][ T37] audit: type=1326 audit(1344.000:6078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31556 comm="syz.6.9636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f8019f749 code=0x7ffc0000 [ 1344.183001][ T37] audit: type=1326 audit(1344.000:6079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31556 comm="syz.6.9636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6f8019f749 code=0x7ffc0000 [ 1344.183243][ T37] audit: type=1326 audit(1344.000:6080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31556 comm="syz.6.9636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f8019f749 code=0x7ffc0000 [ 1344.184135][ T37] audit: type=1326 audit(1344.000:6081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31556 comm="syz.6.9636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f8019f749 code=0x7ffc0000 [ 1344.184578][ T37] audit: type=1326 audit(1344.000:6082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31556 comm="syz.6.9636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f8019f749 code=0x7ffc0000 [ 1344.184618][ T37] audit: type=1326 audit(1344.000:6083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31556 comm="syz.6.9636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6f8019f749 code=0x7ffc0000 [ 1344.184886][ T37] audit: type=1326 audit(1344.000:6084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31556 comm="syz.6.9636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f8019f749 code=0x7ffc0000 [ 1344.185734][ T37] audit: type=1326 audit(1344.000:6086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31556 comm="syz.6.9636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6f8019f749 code=0x7ffc0000 [ 1345.201749][T31563] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9634'. [ 1345.313725][T31555] netlink: 28 bytes leftover after parsing attributes in process `syz.8.9635'. [ 1346.943431][ T6209] libceph: connect (1)[c::]:6789 error -101 [ 1346.943616][ T6209] libceph: mon0 (1)[c::]:6789 connect error [ 1347.072310][T31570] ceph: No mds server is up or the cluster is laggy [ 1347.218525][T25010] libceph: connect (1)[c::]:6789 error -101 [ 1347.228688][T25010] libceph: mon0 (1)[c::]:6789 connect error [ 1348.845276][T31601] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9647'. [ 1349.041450][T31597] lo speed is unknown, defaulting to 1000 [ 1349.325008][T31614] netlink: 16 bytes leftover after parsing attributes in process `syz.2.9651'. [ 1349.518628][T31618] netlink: 28 bytes leftover after parsing attributes in process `syz.8.9652'. [ 1349.765702][ T37] kauditd_printk_skb: 125 callbacks suppressed [ 1349.765718][ T37] audit: type=1326 audit(1349.580:6212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31624 comm="syz.8.9655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd74956f749 code=0x7ffc0000 [ 1349.766024][ T37] audit: type=1326 audit(1349.580:6213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31624 comm="syz.8.9655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd74956f749 code=0x7ffc0000 [ 1349.766263][ T37] audit: type=1326 audit(1349.580:6214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31624 comm="syz.8.9655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd74956f749 code=0x7ffc0000 [ 1349.766457][ T37] audit: type=1326 audit(1349.580:6211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31624 comm="syz.8.9655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd74956f749 code=0x7ffc0000 [ 1349.766920][ T37] audit: type=1326 audit(1349.580:6215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31624 comm="syz.8.9655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd74956f749 code=0x7ffc0000 [ 1349.766962][ T37] audit: type=1326 audit(1349.580:6216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31624 comm="syz.8.9655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd74956f749 code=0x7ffc0000 [ 1349.767328][ T37] audit: type=1326 audit(1349.580:6217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31624 comm="syz.8.9655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd74956f749 code=0x7ffc0000 [ 1349.767848][ T37] audit: type=1326 audit(1349.580:6218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31624 comm="syz.8.9655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd74956f749 code=0x7ffc0000 [ 1349.767890][ T37] audit: type=1326 audit(1349.580:6219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31624 comm="syz.8.9655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd74956f749 code=0x7ffc0000 [ 1349.768275][ T37] audit: type=1326 audit(1349.580:6220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31624 comm="syz.8.9655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd74956f749 code=0x7ffc0000 [ 1350.471372][T31633] siw: device registration error -23 [ 1351.408544][T31633] lo speed is unknown, defaulting to 1000 [ 1351.740489][T31641] ntfs3(nullb0): Primary boot signature is not NTFS. [ 1351.740577][T31641] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 1351.825115][T31647] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9661'. [ 1352.292539][T31647] bond2: (slave bridge0): Releasing backup interface [ 1352.292840][T31647] bridge0 (unregistering): left promiscuous mode [ 1352.292866][T31647] bridge0 (unregistering): left allmulticast mode [ 1352.543061][T31656] netlink: 28 bytes leftover after parsing attributes in process `syz.6.9665'. [ 1353.783729][T25650] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 1353.932300][T25650] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1353.932358][T25650] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1353.932382][T25650] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1353.967824][T25650] usb 3-1: config 0 descriptor?? [ 1353.985347][T25650] pwc: Askey VC010 type 2 USB webcam detected. [ 1354.160565][T31686] tipc: Enabled bearer , priority 0 [ 1354.272513][T31686] tipc: Disabling bearer [ 1354.621848][T21101] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 1354.627538][T25650] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1354.649293][T25650] pwc: recv_control_msg error -32 req 02 val 2700 [ 1354.657136][T25650] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1354.657829][T25650] pwc: recv_control_msg error -32 req 04 val 1000 [ 1354.659090][T25650] pwc: recv_control_msg error -32 req 04 val 1300 [ 1354.659760][T25650] pwc: recv_control_msg error -32 req 04 val 1400 [ 1354.687179][T25650] pwc: recv_control_msg error -32 req 02 val 2000 [ 1354.687897][T25650] pwc: recv_control_msg error -32 req 02 val 2100 [ 1354.689024][T25650] pwc: recv_control_msg error -32 req 04 val 1500 [ 1354.689873][T25650] pwc: recv_control_msg error -32 req 02 val 2500 [ 1354.919868][T25650] pwc: recv_control_msg error -71 req 02 val 2600 [ 1354.927228][T25650] pwc: recv_control_msg error -71 req 02 val 2900 [ 1354.927762][T25650] pwc: recv_control_msg error -71 req 02 val 2800 [ 1354.928554][T25650] pwc: recv_control_msg error -71 req 04 val 1100 [ 1354.929041][T25650] pwc: recv_control_msg error -71 req 04 val 1200 [ 1355.046958][T25650] pwc: Registered as video103. [ 1355.055379][T25650] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input24 [ 1355.080370][T25650] usb 3-1: USB disconnect, device number 58 [ 1355.144834][ T37] kauditd_printk_skb: 141 callbacks suppressed [ 1355.144853][ T37] audit: type=1326 audit(1354.960:6362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31697 comm="syz.4.9680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07eb07f749 code=0x7ffc0000 [ 1355.145185][ T37] audit: type=1326 audit(1354.960:6363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31697 comm="syz.4.9680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f07eb07f749 code=0x7ffc0000 [ 1355.145450][ T37] audit: type=1326 audit(1354.960:6364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31697 comm="syz.4.9680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07eb07f749 code=0x7ffc0000 [ 1355.145777][ T37] audit: type=1326 audit(1354.960:6365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31697 comm="syz.4.9680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f07eb07f749 code=0x7ffc0000 [ 1355.146023][ T37] audit: type=1326 audit(1354.960:6366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31697 comm="syz.4.9680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07eb07f749 code=0x7ffc0000 [ 1355.146336][ T37] audit: type=1326 audit(1354.960:6367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31697 comm="syz.4.9680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f07eb07f749 code=0x7ffc0000 [ 1355.146620][ T37] audit: type=1326 audit(1354.960:6368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31697 comm="syz.4.9680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07eb07f749 code=0x7ffc0000 [ 1355.146928][ T37] audit: type=1326 audit(1354.960:6369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31697 comm="syz.4.9680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f07eb07f749 code=0x7ffc0000 [ 1356.031658][ T37] audit: type=1326 audit(1355.810:6370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31697 comm="syz.4.9680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07eb07f749 code=0x7ffc0000 [ 1356.031994][ T37] audit: type=1326 audit(1355.850:6371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31697 comm="syz.4.9680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f07eb07f749 code=0x7ffc0000 [ 1356.642735][T31727] netlink: 12 bytes leftover after parsing attributes in process `syz.9.9691'. [ 1358.219335][T31752] netlink: 12 bytes leftover after parsing attributes in process `syz.8.9700'. [ 1360.030432][T31788] bridge: RTM_NEWNEIGH with invalid ether address [ 1360.100925][T31787] netlink: 28 bytes leftover after parsing attributes in process `syz.9.9711'. [ 1360.872825][T31797] lo speed is unknown, defaulting to 1000 [ 1361.659640][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 1362.409453][T31829] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9725'. [ 1362.410783][T31829] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9725'. [ 1362.750113][T25650] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 1362.850525][T31834] netlink: 28 bytes leftover after parsing attributes in process `syz.2.9727'. [ 1362.910336][T25650] usb 5-1: Using ep0 maxpacket: 32 [ 1362.912359][T25650] usb 5-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 1362.912385][T25650] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1362.917201][T25650] usb 5-1: config 0 descriptor?? [ 1362.956346][T31833] bridge: RTM_NEWNEIGH with invalid ether address [ 1362.980678][T25650] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 1363.138815][T31841] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9730'. [ 1364.366383][T25650] gspca_vc032x: reg_w err -110 [ 1364.366400][T25650] gspca_vc032x: I2c Bus Busy Wait 00 [ 1364.366411][T25650] gspca_vc032x: I2c Bus Busy Wait 00 [ 1364.366421][T25650] gspca_vc032x: I2c Bus Busy Wait 00 [ 1364.366430][T25650] gspca_vc032x: I2c Bus Busy Wait 00 [ 1364.366439][T25650] gspca_vc032x: I2c Bus Busy Wait 00 [ 1364.366448][T25650] gspca_vc032x: I2c Bus Busy Wait 00 [ 1364.366458][T25650] gspca_vc032x: I2c Bus Busy Wait 00 [ 1364.366467][T25650] gspca_vc032x: I2c Bus Busy Wait 00 [ 1364.366477][T25650] gspca_vc032x: I2c Bus Busy Wait 00 [ 1364.366486][T25650] gspca_vc032x: I2c Bus Busy Wait 00 [ 1364.366495][T25650] gspca_vc032x: I2c Bus Busy Wait 00 [ 1364.366504][T25650] gspca_vc032x: I2c Bus Busy Wait 00 [ 1364.366513][T25650] gspca_vc032x: I2c Bus Busy Wait 00 [ 1364.366522][T25650] gspca_vc032x: I2c Bus Busy Wait 00 [ 1364.366532][T25650] gspca_vc032x: I2c Bus Busy Wait 00 [ 1364.366540][T25650] gspca_vc032x: I2c Bus Busy Wait 00 [ 1364.366549][T25650] gspca_vc032x: I2c Bus Busy Wait 00 [ 1364.366558][T25650] gspca_vc032x: I2c Bus Busy Wait 00 [ 1364.366566][T25650] gspca_vc032x: Unknown sensor... [ 1364.366649][T25650] vc032x 5-1:0.0: probe with driver vc032x failed with error -22 [ 1364.502105][T25650] usb 5-1: USB disconnect, device number 27 [ 1364.802346][T31841] hsr_slave_1 (unregistering): left promiscuous mode [ 1365.587707][T31852] lo speed is unknown, defaulting to 1000 [ 1365.743333][T31866] netlink: 'syz.2.9737': attribute type 1 has an invalid length. [ 1365.814657][T31867] netlink: 28 bytes leftover after parsing attributes in process `syz.2.9737'. [ 1365.895855][ T37] kauditd_printk_skb: 13 callbacks suppressed [ 1365.895872][ T37] audit: type=1326 audit(1365.710:6385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31871 comm="syz.9.9740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa13829f749 code=0x7ffc0000 [ 1365.896313][ T37] audit: type=1326 audit(1365.710:6386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31871 comm="syz.9.9740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7fa13829f749 code=0x7ffc0000 [ 1365.896571][ T37] audit: type=1326 audit(1365.710:6387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31871 comm="syz.9.9740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa13829f749 code=0x7ffc0000 [ 1365.896892][ T37] audit: type=1326 audit(1365.710:6388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31871 comm="syz.9.9740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa13829f749 code=0x7ffc0000 [ 1365.897135][ T37] audit: type=1326 audit(1365.710:6389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31871 comm="syz.9.9740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa13829f749 code=0x7ffc0000 [ 1365.897456][ T37] audit: type=1326 audit(1365.710:6390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31871 comm="syz.9.9740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fa13829f749 code=0x7ffc0000 [ 1365.897710][ T37] audit: type=1326 audit(1365.710:6391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31871 comm="syz.9.9740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa13829f749 code=0x7ffc0000 [ 1365.898019][ T37] audit: type=1326 audit(1365.710:6392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31871 comm="syz.9.9740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa13829f749 code=0x7ffc0000 [ 1366.018617][T31866] bond3: entered promiscuous mode [ 1366.028158][T31866] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1366.780184][ T37] audit: type=1326 audit(1366.380:6393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31871 comm="syz.9.9740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa13829f749 code=0x7ffc0000 [ 1366.780243][ T37] audit: type=1326 audit(1366.380:6394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31871 comm="syz.9.9740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa13829f749 code=0x7ffc0000 [ 1366.884887][T31882] netlink: 28 bytes leftover after parsing attributes in process `syz.6.9739'. [ 1367.260353][T31884] bridge: RTM_NEWNEIGH with invalid ether address [ 1367.535044][T31905] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9750'. [ 1367.847653][T31912] netlink: 12 bytes leftover after parsing attributes in process `syz.6.9753'. [ 1368.010494][T31913] netlink: 28 bytes leftover after parsing attributes in process `syz.6.9753'. [ 1369.893493][T31940] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR [ 1369.980021][T31944] No control pipe specified [ 1370.344658][T31961] netlink: 4 bytes leftover after parsing attributes in process `syz.8.9766'. [ 1371.821115][T31965] lo speed is unknown, defaulting to 1000 [ 1372.935320][T21101] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1372.957566][T21101] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1372.959233][T21101] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1373.042838][T21101] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1373.044957][T21101] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1375.687878][T14948] Bluetooth: hci0: command tx timeout [ 1375.734358][T32009] lo speed is unknown, defaulting to 1000 [ 1376.377020][T31997] lo speed is unknown, defaulting to 1000 [ 1377.750506][T14948] Bluetooth: hci0: command tx timeout [ 1377.869456][T32046] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9798'. [ 1378.194619][T32054] random: crng reseeded on system resumption [ 1379.935005][T14948] Bluetooth: hci0: command tx timeout [ 1380.068432][T32075] evm: overlay not supported [ 1380.088213][T31997] chnl_net:caif_netlink_parms(): no params data found [ 1380.198020][T32083] overlay: filesystem on ./file0 not supported as upperdir [ 1380.213105][ T37] kauditd_printk_skb: 41 callbacks suppressed [ 1380.213124][ T37] audit: type=1326 audit(1380.020:6436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=32080 comm="syz.6.9809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f8019f749 code=0x7ffc0000 [ 1380.213171][ T37] audit: type=1326 audit(1380.020:6437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=32080 comm="syz.6.9809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f8019f749 code=0x7ffc0000 [ 1380.213209][ T37] audit: type=1326 audit(1380.020:6438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=32080 comm="syz.6.9809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f6f8019f749 code=0x7ffc0000 [ 1380.213249][ T37] audit: type=1326 audit(1380.020:6439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=32080 comm="syz.6.9809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f8019f749 code=0x7ffc0000 [ 1380.315350][ T37] audit: type=1326 audit(1380.130:6440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=32080 comm="syz.6.9809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6f8019f749 code=0x7ffc0000 [ 1380.315616][ T37] audit: type=1326 audit(1380.130:6441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=32080 comm="syz.6.9809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f8019f749 code=0x7ffc0000 [ 1380.315983][ T37] audit: type=1326 audit(1380.130:6442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=32080 comm="syz.6.9809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f6f8019f749 code=0x7ffc0000 [ 1380.316333][ T37] audit: type=1326 audit(1380.130:6443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=32080 comm="syz.6.9809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f8019f749 code=0x7ffc0000 [ 1380.317390][ T37] audit: type=1326 audit(1380.130:6444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=32080 comm="syz.6.9809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6f8019f749 code=0x7ffc0000 [ 1380.501379][ T37] audit: type=1326 audit(1380.320:6445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=32080 comm="syz.6.9809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f8019f749 code=0x7ffc0000 [ 1381.221111][ T6119] libceph: connect (1)[c::]:6789 error -101 [ 1381.221325][ T6119] libceph: mon0 (1)[c::]:6789 connect error [ 1381.225231][ T6119] libceph: connect (1)[c::]:6789 error -101 [ 1381.225423][ T6119] libceph: mon0 (1)[c::]:6789 connect error [ 1381.266119][T32099] netlink: 4 bytes leftover after parsing attributes in process `syz.9.9812'. [ 1381.923080][ T6119] libceph: connect (1)[c::]:6789 error -101 [ 1382.013154][T14948] Bluetooth: hci0: command tx timeout [ 1382.465387][ T6119] libceph: mon0 (1)[c::]:6789 connect error [ 1382.585614][T32089] ceph: No mds server is up or the cluster is laggy [ 1384.058404][T32127] netlink: 4 bytes leftover after parsing attributes in process `syz.9.9819'. [ 1384.068611][T32113] lo speed is unknown, defaulting to 1000 [ 1384.287214][T31997] bridge0: port 1(bridge_slave_0) entered blocking state [ 1384.287330][T31997] bridge0: port 1(bridge_slave_0) entered disabled state [ 1384.287450][T31997] bridge_slave_0: entered allmulticast mode [ 1384.289124][T31997] bridge_slave_0: entered promiscuous mode [ 1384.294864][T32129] bridge: RTM_NEWNEIGH with invalid ether address [ 1384.296310][T31997] bridge0: port 2(bridge_slave_1) entered blocking state [ 1384.296516][T31997] bridge0: port 2(bridge_slave_1) entered disabled state [ 1384.296691][T31997] bridge_slave_1: entered allmulticast mode [ 1384.299453][T31997] bridge_slave_1: entered promiscuous mode [ 1385.751367][T31997] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1385.921145][T32149] netlink: 'syz.9.9826': attribute type 1 has an invalid length. [ 1386.037161][T32150] netlink: 28 bytes leftover after parsing attributes in process `syz.9.9826'. [ 1386.071626][T31997] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1387.179933][T32168] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9832'. [ 1387.270547][T32166] bridge: RTM_NEWNEIGH with invalid ether address [ 1387.380905][T32168] bond1: (slave bridge0): Releasing backup interface [ 1387.380935][T32168] bridge0 (unregistering): left promiscuous mode [ 1387.380958][T32168] bridge0 (unregistering): left allmulticast mode [ 1387.615266][T31997] team0: Port device team_slave_0 added [ 1387.637133][T31997] team0: Port device team_slave_1 added [ 1389.028406][T31997] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1389.028425][T31997] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1389.028450][T31997] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1389.073648][T31997] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1389.073666][T31997] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1389.073692][T31997] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1389.896395][T32196] netlink: 'syz.9.9840': attribute type 1 has an invalid length. [ 1389.964632][T32196] netlink: 28 bytes leftover after parsing attributes in process `syz.9.9840'. [ 1390.095845][T31997] hsr_slave_0: entered promiscuous mode [ 1390.097228][T31997] hsr_slave_1: entered promiscuous mode [ 1390.098243][T31997] debugfs: 'hsr0' already exists in 'hsr' [ 1390.098266][T31997] Cannot create hsr debugfs directory [ 1391.230147][ T37] kauditd_printk_skb: 118 callbacks suppressed [ 1391.230165][ T37] audit: type=1326 audit(1390.300:6564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=32211 comm="syz.9.9847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa13829f749 code=0x7ffc0000 [ 1391.230207][ T37] audit: type=1326 audit(1390.300:6565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=32211 comm="syz.9.9847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa13829f749 code=0x7ffc0000 [ 1391.230245][ T37] audit: type=1326 audit(1390.320:6566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=32211 comm="syz.9.9847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa13829f749 code=0x7ffc0000 [ 1391.230283][ T37] audit: type=1326 audit(1390.330:6568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=32211 comm="syz.9.9847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa13829f749 code=0x7ffc0000 [ 1391.230319][ T37] audit: type=1326 audit(1390.320:6567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=32211 comm="syz.9.9847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa13829f749 code=0x7ffc0000 [ 1391.230356][ T37] audit: type=1326 audit(1390.350:6569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=32211 comm="syz.9.9847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa13829f749 code=0x7ffc0000 [ 1391.230395][ T37] audit: type=1326 audit(1390.360:6570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=32211 comm="syz.9.9847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa13829f749 code=0x7ffc0000 [ 1391.230433][ T37] audit: type=1326 audit(1390.360:6571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=32211 comm="syz.9.9847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa13829f749 code=0x7ffc0000 [ 1391.230470][ T37] audit: type=1326 audit(1390.360:6572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=32211 comm="syz.9.9847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fa13829f749 code=0x7ffc0000 [ 1391.230508][ T37] audit: type=1326 audit(1390.380:6573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=32211 comm="syz.9.9847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa13829f749 code=0x7ffc0000 [ 1391.396250][T32206] syzkaller0: entered promiscuous mode [ 1391.396278][T32206] syzkaller0: entered allmulticast mode [ 1393.105375][T32230] lo speed is unknown, defaulting to 1000 [ 1393.704428][T32228] dummy0: entered promiscuous mode [ 1393.707743][T32228] dummy0: left promiscuous mode [ 1394.750865][T32258] syzkaller0: entered promiscuous mode [ 1394.750892][T32258] syzkaller0: entered allmulticast mode [ 1395.266631][T31997] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1397.915353][T31997] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1399.219315][T32330] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9879'. [ 1399.477579][T31997] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1400.255981][T32347] ntfs3(nullb0): Primary boot signature is not NTFS. [ 1400.256136][T32347] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 1400.491836][T31997] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1402.858582][T32382] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9894'. [ 1402.992402][T32385] netlink: 'syz.4.9894': attribute type 10 has an invalid length. [ 1402.992685][T32385] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9894'. [ 1403.414882][T31997] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1403.554264][T31997] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1403.684358][T31997] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1403.808196][T31997] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1404.390229][ T931] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 1404.472249][T31997] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1404.543266][ T931] usb 3-1: config 1 has an invalid interface number: 140 but max is 0 [ 1404.543297][ T931] usb 3-1: config 1 has no interface number 0 [ 1404.543351][ T931] usb 3-1: New USB device found, idVendor=0dba, idProduct=5000, bcdDevice=3d.88 [ 1404.543374][ T931] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1404.604552][ T931] usb 3-1: MBOX3: Invalid descriptor size=18. [ 1404.624530][T31997] 8021q: adding VLAN 0 to HW filter on device team0 [ 1404.665639][T22549] bridge0: port 1(bridge_slave_0) entered blocking state [ 1404.670635][T22549] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1404.709160][T23467] bridge0: port 2(bridge_slave_1) entered blocking state [ 1404.709384][T23467] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1405.238020][T10815] libceph: connect (1)[c::]:6789 error -101 [ 1405.238220][T10815] libceph: mon0 (1)[c::]:6789 connect error [ 1405.491135][T10815] libceph: connect (1)[c::]:6789 error -101 [ 1405.491328][T10815] libceph: mon0 (1)[c::]:6789 connect error [ 1405.579334][ T5860] libceph: connect (1)[c::]:6789 error -101 [ 1405.579526][ T5860] libceph: mon0 (1)[c::]:6789 connect error [ 1405.579842][ T5860] libceph: connect (1)[c::]:6789 error -101 [ 1405.580243][ T5860] libceph: mon0 (1)[c::]:6789 connect error [ 1406.080002][T10815] libceph: connect (1)[c::]:6789 error -101 [ 1406.080171][T10815] libceph: mon0 (1)[c::]:6789 connect error [ 1406.088552][T32444] ceph: No mds server is up or the cluster is laggy [ 1406.088708][T32429] ceph: No mds server is up or the cluster is laggy [ 1406.117466][T25650] libceph: connect (1)[c::]:6789 error -101 [ 1406.117582][T25650] libceph: mon0 (1)[c::]:6789 connect error [ 1407.466172][T23133] usb 3-1: USB disconnect, device number 59 [ 1407.475241][T31997] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1408.977007][T32474] lo speed is unknown, defaulting to 1000 [ 1409.047574][ T5860] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 1409.284581][ T5860] usb 5-1: config 1 has an invalid interface number: 140 but max is 0 [ 1409.284610][ T5860] usb 5-1: config 1 has no interface number 0 [ 1409.284673][ T5860] usb 5-1: New USB device found, idVendor=0dba, idProduct=5000, bcdDevice=3d.88 [ 1409.284698][ T5860] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1409.305952][ T5860] usb 5-1: MBOX3: Invalid descriptor size=18. [ 1409.472293][T31997] veth0_vlan: entered promiscuous mode [ 1409.473660][ T37] kauditd_printk_skb: 149 callbacks suppressed [ 1409.473672][ T37] audit: type=1326 audit(1409.290:6723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=32488 comm="syz.9.9916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa13829f749 code=0x7ffc0000 [ 1409.473705][ T37] audit: type=1326 audit(1409.290:6724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=32488 comm="syz.9.9916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa13829f749 code=0x7ffc0000 [ 1409.473734][ T37] audit: type=1326 audit(1409.290:6725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=32488 comm="syz.9.9916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa13829f749 code=0x7ffc0000 [ 1409.473766][ T37] audit: type=1326 audit(1409.290:6726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=32488 comm="syz.9.9916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa13829f749 code=0x7ffc0000 [ 1409.475034][ T37] audit: type=1326 audit(1409.290:6727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=32488 comm="syz.9.9916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa13829f749 code=0x7ffc0000 [ 1409.475078][ T37] audit: type=1326 audit(1409.290:6728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=32488 comm="syz.9.9916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa13829f749 code=0x7ffc0000 [ 1409.475117][ T37] audit: type=1326 audit(1409.290:6729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=32488 comm="syz.9.9916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa13829f749 code=0x7ffc0000 [ 1409.475155][ T37] audit: type=1326 audit(1409.290:6730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=32488 comm="syz.9.9916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa13829f749 code=0x7ffc0000 [ 1409.477110][ T37] audit: type=1326 audit(1409.290:6731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=32488 comm="syz.9.9916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa13829f749 code=0x7ffc0000 [ 1409.479783][ T37] audit: type=1326 audit(1409.290:6732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=32488 comm="syz.9.9916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa13829f749 code=0x7ffc0000 [ 1410.057528][T31997] veth1_vlan: entered promiscuous mode [ 1410.292652][T31997] veth0_macvtap: entered promiscuous mode [ 1410.317747][T31997] veth1_macvtap: entered promiscuous mode [ 1410.404535][T31997] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1410.673275][T31997] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1410.728582][T22548] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1410.780116][T22548] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1410.783879][T22548] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1410.783922][T22548] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1410.910161][ T5860] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 1411.133402][ T5860] usb 10-1: config 1 has an invalid interface number: 140 but max is 0 [ 1411.133429][ T5860] usb 10-1: config 1 has no interface number 0 [ 1411.133479][ T5860] usb 10-1: New USB device found, idVendor=0dba, idProduct=5000, bcdDevice=3d.88 [ 1411.133502][ T5860] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1411.202363][ T6209] usb 5-1: USB disconnect, device number 28 [ 1411.266248][ T5860] usb 10-1: MBOX3: Invalid descriptor size=18. [ 1411.778753][ T5860] libceph: connect (1)[c::]:6789 error -101 [ 1411.778945][ T5860] libceph: mon0 (1)[c::]:6789 connect error [ 1411.780926][ T5860] libceph: connect (1)[c::]:6789 error -101 [ 1411.781108][ T5860] libceph: mon0 (1)[c::]:6789 connect error [ 1411.941738][T32506] ceph: No mds server is up or the cluster is laggy [ 1411.947714][ T1017] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1411.947728][ T1017] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1412.040408][ T5860] libceph: connect (1)[c::]:6789 error -101 [ 1412.040533][ T5860] libceph: mon0 (1)[c::]:6789 connect error [ 1412.198802][T18610] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1412.198823][T18610] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1413.168594][T32538] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1413.202775][T32538] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1413.204345][T32538] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1413.207715][T32538] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1413.216923][T32538] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1413.712724][T25010] usb 10-1: USB disconnect, device number 3 [ 1413.900057][T10815] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 1414.865584][T10815] usb 9-1: config 1 has an invalid interface number: 140 but max is 0 [ 1414.865613][T10815] usb 9-1: config 1 has no interface number 0 [ 1414.865659][T10815] usb 9-1: New USB device found, idVendor=0dba, idProduct=5000, bcdDevice=3d.88 [ 1414.865681][T10815] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1414.938511][T10815] usb 9-1: MBOX3: Invalid descriptor size=18. [ 1415.184280][T23133] usb 9-1: USB disconnect, device number 4 [ 1415.350396][T14948] Bluetooth: hci4: command tx timeout [ 1415.494282][T32563] bridge: RTM_NEWNEIGH with invalid ether address [ 1416.002530][T32537] lo speed is unknown, defaulting to 1000 [ 1417.788229][T14948] Bluetooth: hci4: command tx timeout [ 1417.881702][T32596] netlink: 28 bytes leftover after parsing attributes in process `syz.6.9950'. [ 1418.210840][T32593] lo speed is unknown, defaulting to 1000 [ 1418.579298][ T37] kauditd_printk_skb: 122 callbacks suppressed [ 1418.579316][ T37] audit: type=1326 audit(1418.390:6855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=32604 comm="syz.9.9953" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa13829f749 code=0x7ffc0000 [ 1418.579742][ T37] audit: type=1326 audit(1418.390:6856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=32604 comm="syz.9.9953" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7fa13829f749 code=0x7ffc0000 [ 1418.580268][ T37] audit: type=1326 audit(1418.390:6857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=32604 comm="syz.9.9953" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa13829f749 code=0x7ffc0000 [ 1418.580597][ T37] audit: type=1326 audit(1418.400:6858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=32604 comm="syz.9.9953" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa13829f749 code=0x7ffc0000 [ 1418.580860][ T37] audit: type=1326 audit(1418.400:6859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=32604 comm="syz.9.9953" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa13829f749 code=0x7ffc0000 [ 1418.581168][ T37] audit: type=1326 audit(1418.400:6860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=32604 comm="syz.9.9953" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fa13829f749 code=0x7ffc0000 [ 1418.581780][ T37] audit: type=1326 audit(1418.400:6861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=32604 comm="syz.9.9953" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa13829f749 code=0x7ffc0000 [ 1418.582088][ T37] audit: type=1326 audit(1418.400:6862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=32604 comm="syz.9.9953" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa13829f749 code=0x7ffc0000 [ 1418.582999][ T37] audit: type=1326 audit(1418.400:6863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=32604 comm="syz.9.9953" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa13829f749 code=0x7ffc0000 [ 1418.583322][ T37] audit: type=1326 audit(1418.400:6864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=32604 comm="syz.9.9953" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa13829f749 code=0x7ffc0000 [ 1419.832246][T14948] Bluetooth: hci4: command tx timeout [ 1420.707745][T32537] chnl_net:caif_netlink_parms(): no params data found [ 1421.260459][T32642] netlink: 4 bytes leftover after parsing attributes in process `syz.8.9962'. [ 1421.328707][T32640] bridge: RTM_NEWNEIGH with invalid ether address [ 1421.517510][T32650] netlink: 'syz.6.9965': attribute type 1 has an invalid length. [ 1421.517532][T32650] netlink: 224 bytes leftover after parsing attributes in process `syz.6.9965'. [ 1422.040326][T14948] Bluetooth: hci4: command tx timeout [ 1423.448497][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 1423.794507][ T6209] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 1423.984602][ T6209] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1423.984651][ T6209] usb 10-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1423.984675][ T6209] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1423.987642][ T6209] usb 10-1: config 0 descriptor?? [ 1424.419037][ T6209] keytouch 0003:0926:3333.001D: fixing up Keytouch IEC report descriptor [ 1424.435022][ T6209] input: HID 0926:3333 as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/0003:0926:3333.001D/input/input25 [ 1424.681482][ T1017] dvmrp9 (unregistering): left allmulticast mode [ 1424.917465][ T6209] keytouch 0003:0926:3333.001D: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.9-1/input0 [ 1424.934253][ T6209] usb 10-1: USB disconnect, device number 4 [ 1427.306890][ T1017] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1427.370747][ T1017] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1427.411814][ T1017] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 1427.441326][ T1017] bond0 (unregistering): Released all slaves [ 1428.128718][T32714] netlink: 16 bytes leftover after parsing attributes in process `syz.9.9986'. [ 1428.462154][ T1017] bond1 (unregistering): Released all slaves [ 1428.471655][ T1017] bond2 (unregistering): Released all slaves [ 1428.481106][ T1017] bond3 (unregistering): Released all slaves [ 1428.601093][T32723] netlink: 8 bytes leftover after parsing attributes in process `syz.9.9990'. [ 1428.601134][T32723] netlink: 20 bytes leftover after parsing attributes in process `syz.9.9990'. [ 1428.931407][T32679] bridge: RTM_NEWNEIGH with invalid ether address [ 1428.940761][ T1017] tipc: Left network mode [ 1429.174307][T32537] bridge0: port 1(bridge_slave_0) entered blocking state [ 1429.174510][T32537] bridge0: port 1(bridge_slave_0) entered disabled state [ 1429.174760][T32537] bridge_slave_0: entered allmulticast mode [ 1429.336083][T32537] bridge_slave_0: entered promiscuous mode [ 1430.375670][T32537] bridge0: port 2(bridge_slave_1) entered blocking state [ 1430.379503][T32537] bridge0: port 2(bridge_slave_1) entered disabled state [ 1430.544134][T32537] bridge_slave_1: entered allmulticast mode [ 1430.648380][T32537] bridge_slave_1: entered promiscuous mode [ 1430.909481][T32744] netlink: 16 bytes leftover after parsing attributes in process `syz.6.9996'. [ 1431.502688][T32748] netlink: 28 bytes leftover after parsing attributes in process `syz.9.9997'. [ 1431.502744][T32748] netem: change failed [ 1431.918518][ T6119] libceph: connect (1)[c::]:6789 error -101 [ 1431.918709][ T6119] libceph: mon0 (1)[c::]:6789 connect error [ 1431.919167][ T6119] libceph: connect (1)[c::]:6789 error -101 [ 1431.919336][ T6119] libceph: mon0 (1)[c::]:6789 connect error [ 1431.961946][T32767] ceph: No mds server is up or the cluster is laggy [ 1431.988318][T32537] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1432.040068][T25650] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 1432.113999][T32537] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1432.180117][T25650] usb 10-1: device descriptor read/64, error -71 [ 1432.571114][T25650] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 1432.870416][T25650] usb 10-1: device descriptor read/64, error -71 [ 1432.950114][ T6119] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 1432.990704][T25650] usb usb10-port1: attempt power cycle [ 1433.018828][ T321] netlink: 28 bytes leftover after parsing attributes in process `syz.2.10010'. [ 1433.018879][ T321] netem: change failed [ 1433.068606][T32537] team0: Port device team_slave_0 added [ 1433.217825][T32537] team0: Port device team_slave_1 added [ 1433.225441][ T6119] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 1433.225472][ T6119] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 1433.225496][ T6119] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 1433.230933][ T6119] usb 7-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 1433.230961][ T6119] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1433.230980][ T6119] usb 7-1: Product: syz [ 1433.231226][ T6119] usb 7-1: Manufacturer: syz [ 1433.231241][ T6119] usb 7-1: SerialNumber: syz [ 1433.292971][ T6119] usb 7-1: config 0 descriptor?? [ 1433.296180][ T313] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 1433.296305][ T313] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 1433.301130][ T6119] usb 7-1: ucan: probing device on interface #0 [ 1433.340067][T25650] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 1433.369585][T25650] usb 10-1: device descriptor read/8, error -71 [ 1433.422197][ T1017] hsr_slave_0: left promiscuous mode [ 1433.640115][T25650] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 1433.691716][T25650] usb 10-1: device descriptor read/8, error -71 [ 1433.800638][T25650] usb usb10-port1: unable to enumerate USB device [ 1434.740141][T32740] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 1434.902484][T32740] usb 3-1: config 1 has an invalid interface number: 140 but max is 0 [ 1434.902514][T32740] usb 3-1: config 1 has no interface number 0 [ 1434.902566][T32740] usb 3-1: New USB device found, idVendor=0dba, idProduct=5000, bcdDevice=3d.88 [ 1434.902590][T32740] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1434.913640][T32740] usb 3-1: MBOX3: Invalid descriptor size=18. [ 1438.049057][ T5955] usb 3-1: USB disconnect, device number 60 [ 1440.061815][ T6119] ucan 7-1:0.0 can0: registered device [ 1440.074492][ T6119] ucan 7-1:0.0 can0: firmware string: unknown [ 1440.092183][ T6119] usb 7-1: USB disconnect, device number 6 [ 1440.238080][ T488] tipc: Started in network mode [ 1440.238108][ T488] tipc: Node identity 96c4b8dae6fd, cluster identity 4711 [ 1440.238293][ T488] tipc: Enabled bearer , priority 0 [ 1440.503001][ T485] tipc: Disabling bearer [ 1440.760317][ T561] netlink: 28 bytes leftover after parsing attributes in process `syz.2.10125'. [ 1440.760380][ T561] netem: change failed [ 1440.812413][T32537] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1440.812430][T32537] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1440.812453][T32537] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1440.828435][T32537] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1440.828452][T32537] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1440.828478][T32537] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1441.228731][ T37] kauditd_printk_skb: 16 callbacks suppressed [ 1441.228748][ T37] audit: type=1326 audit(1441.040:6881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=594 comm="syz.2.10143" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe234bff749 code=0x0 [ 1441.394604][T32537] hsr_slave_0: entered promiscuous mode [ 1441.396315][T32537] hsr_slave_1: entered promiscuous mode [ 1441.400176][T32537] debugfs: 'hsr0' already exists in 'hsr' [ 1441.400202][T32537] Cannot create hsr debugfs directory [ 1442.604202][ T631] netlink: 28 bytes leftover after parsing attributes in process `syz.9.10156'. [ 1442.620619][ T631] netlink: 28 bytes leftover after parsing attributes in process `syz.9.10156'. [ 1444.188312][ T37] audit: type=1326 audit(1444.000:6882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=659 comm="syz.2.10169" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe234bff749 code=0x0 [ 1445.400093][T32537] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1445.578484][T32537] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1445.804347][T32537] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1447.042549][T32537] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1447.857393][ T756] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 1447.857514][ T747] IPVS: stopping master sync thread 756 ... [ 1448.085265][T32537] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1448.128361][T32537] 8021q: adding VLAN 0 to HW filter on device team0 [ 1448.146364][T23467] bridge0: port 1(bridge_slave_0) entered blocking state [ 1448.146571][T23467] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1448.172538][T23467] bridge0: port 2(bridge_slave_1) entered blocking state [ 1448.172760][T23467] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1449.070910][T32537] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1449.850072][ T6209] usb 7-1: new full-speed USB device number 7 using dummy_hcd [ 1450.017072][T32537] veth0_vlan: entered promiscuous mode [ 1450.041718][T32537] veth1_vlan: entered promiscuous mode [ 1450.091146][ T6209] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1450.091178][ T6209] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1450.091198][ T6209] usb 7-1: Product: syz [ 1450.091212][ T6209] usb 7-1: Manufacturer: syz [ 1450.091228][ T6209] usb 7-1: SerialNumber: syz [ 1450.138047][ T6209] usb 7-1: config 0 descriptor?? [ 1450.159214][T32537] veth0_macvtap: entered promiscuous mode [ 1450.185659][T32537] veth1_macvtap: entered promiscuous mode [ 1450.215015][T32537] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1450.227441][T32537] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1450.292968][T22527] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1450.295611][T22527] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1450.295656][T22527] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1450.295691][T22527] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1450.365905][ T6209] usb 7-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1451.101003][T23467] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1451.101230][T23467] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1451.488609][T23467] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1451.488630][T23467] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1451.792618][ T37] audit: type=1326 audit(1451.610:6883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=876 comm="syz.9.10246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa13829f749 code=0x7ffc0000 [ 1451.805836][ T37] audit: type=1326 audit(1451.610:6884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=876 comm="syz.9.10246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7fa13829f749 code=0x7ffc0000 [ 1451.805882][ T37] audit: type=1326 audit(1451.620:6885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=876 comm="syz.9.10246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa13829f749 code=0x7ffc0000 [ 1451.805920][ T37] audit: type=1326 audit(1451.620:6886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=876 comm="syz.9.10246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa13829f749 code=0x7ffc0000 [ 1451.805955][ T37] audit: type=1326 audit(1451.620:6887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=876 comm="syz.9.10246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa13829f749 code=0x7ffc0000 [ 1451.805992][ T37] audit: type=1326 audit(1451.620:6888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=876 comm="syz.9.10246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa13829f749 code=0x7ffc0000 [ 1451.806030][ T37] audit: type=1326 audit(1451.620:6889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=876 comm="syz.9.10246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fa13829f749 code=0x7ffc0000 [ 1451.806066][ T37] audit: type=1326 audit(1451.620:6890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=876 comm="syz.9.10246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa13829f749 code=0x7ffc0000 [ 1451.806102][ T37] audit: type=1326 audit(1451.620:6891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=876 comm="syz.9.10246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa13829f749 code=0x7ffc0000 [ 1451.806140][ T37] audit: type=1326 audit(1451.620:6892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=876 comm="syz.9.10246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa13829f749 code=0x7ffc0000 [ 1452.297578][ T6209] dvb_usb_rtl28xxu 7-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1452.323857][ T6209] usb 7-1: USB disconnect, device number 7 [ 1452.446422][T32538] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1452.485259][T32538] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1452.487068][T32538] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1452.506885][T32538] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1452.507768][T32538] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1453.151906][T25650] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 1453.302051][ T890] lo speed is unknown, defaulting to 1000 [ 1453.341874][T25650] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1453.341932][T25650] usb 7-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1453.341955][T25650] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1453.346899][T25650] usb 7-1: config 0 descriptor?? [ 1453.368243][T25650] pwc: Askey VC010 type 2 USB webcam detected. [ 1453.781088][T25650] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1453.781785][T25650] pwc: recv_control_msg error -32 req 02 val 2700 [ 1453.782358][T25650] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1453.784949][T25650] pwc: recv_control_msg error -32 req 04 val 1000 [ 1453.786069][T25650] pwc: recv_control_msg error -32 req 04 val 1300 [ 1453.786742][T25650] pwc: recv_control_msg error -32 req 04 val 1400 [ 1453.787408][T25650] pwc: recv_control_msg error -32 req 02 val 2000 [ 1453.787963][T25650] pwc: recv_control_msg error -32 req 02 val 2100 [ 1453.788530][T25650] pwc: recv_control_msg error -32 req 04 val 1500 [ 1453.995047][T25650] pwc: recv_control_msg error -71 req 02 val 2400 [ 1453.995535][T25650] pwc: recv_control_msg error -71 req 02 val 2600 [ 1453.996001][T25650] pwc: recv_control_msg error -71 req 02 val 2900 [ 1453.996462][T25650] pwc: recv_control_msg error -71 req 02 val 2800 [ 1453.997095][T25650] pwc: recv_control_msg error -71 req 04 val 1100 [ 1454.000459][T25650] pwc: recv_control_msg error -71 req 04 val 1200 [ 1454.002711][T25650] pwc: Registered as video103. [ 1454.005535][T25650] input: PWC snapshot button as /devices/platform/dummy_hcd.6/usb7/7-1/input/input26 [ 1454.041275][T25650] usb 7-1: USB disconnect, device number 8 [ 1454.693404][T14948] Bluetooth: hci5: command tx timeout [ 1456.712868][T14948] Bluetooth: hci5: command tx timeout [ 1457.025500][ T12] erspan0 (unregistering): left allmulticast mode [ 1457.025535][ T12] erspan0 (unregistering): left promiscuous mode [ 1458.805816][T14948] Bluetooth: hci5: command tx timeout [ 1460.820922][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1460.860729][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1460.870198][T14948] Bluetooth: hci5: command tx timeout [ 1460.897801][ T12] bond0 (unregistering): Released all slaves [ 1460.913893][ T12] bond1 (unregistering): Released all slaves [ 1461.307207][ T12] tipc: Left network mode [ 1461.687017][ T1134] bond2: entered promiscuous mode [ 1461.687552][ T1134] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1461.979155][ T1136] bridge2: entered promiscuous mode [ 1461.987545][ T1136] bond2: (slave bridge2): Enslaving as an active interface with an up link [ 1462.065755][ T37] kauditd_printk_skb: 37 callbacks suppressed [ 1462.065773][ T37] audit: type=1326 audit(1461.880:6930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=1151 comm="syz.4.10348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e9c7ef749 code=0x7ffc0000 [ 1462.066223][ T37] audit: type=1326 audit(1461.880:6931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=1151 comm="syz.4.10348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6e9c7ef749 code=0x7ffc0000 [ 1462.066359][ T37] audit: type=1326 audit(1461.880:6932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=1151 comm="syz.4.10348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e9c7ef749 code=0x7ffc0000 [ 1462.105041][ T37] audit: type=1326 audit(1461.880:6933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=1151 comm="syz.4.10348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6e9c7ef749 code=0x7ffc0000 [ 1462.105086][ T37] audit: type=1326 audit(1461.880:6934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=1151 comm="syz.4.10348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e9c7ef749 code=0x7ffc0000 [ 1462.105115][ T37] audit: type=1326 audit(1461.880:6935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=1151 comm="syz.4.10348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6e9c7ef749 code=0x7ffc0000 [ 1462.105145][ T37] audit: type=1326 audit(1461.880:6936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=1151 comm="syz.4.10348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e9c7ef749 code=0x7ffc0000 [ 1462.105173][ T37] audit: type=1326 audit(1461.880:6937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=1151 comm="syz.4.10348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6e9c7ef749 code=0x7ffc0000 [ 1462.105201][ T37] audit: type=1326 audit(1461.880:6938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=1151 comm="syz.4.10348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e9c7ef749 code=0x7ffc0000 [ 1462.105232][ T37] audit: type=1326 audit(1461.880:6939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=1151 comm="syz.4.10348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6e9c7ef749 code=0x7ffc0000 [ 1462.110430][ T890] chnl_net:caif_netlink_parms(): no params data found [ 1463.190165][T32740] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 1463.362225][T32740] usb 7-1: config 1 has an invalid interface number: 140 but max is 0 [ 1463.362252][T32740] usb 7-1: config 1 has no interface number 0 [ 1463.362300][T32740] usb 7-1: New USB device found, idVendor=0dba, idProduct=5000, bcdDevice=3d.88 [ 1463.362324][T32740] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1463.405337][ T890] bridge0: port 1(bridge_slave_0) entered blocking state [ 1463.407238][ T890] bridge0: port 1(bridge_slave_0) entered disabled state [ 1463.407482][ T890] bridge_slave_0: entered allmulticast mode [ 1463.450246][ T890] bridge_slave_0: entered promiscuous mode [ 1463.462787][ T890] bridge0: port 2(bridge_slave_1) entered blocking state [ 1463.465485][ T890] bridge0: port 2(bridge_slave_1) entered disabled state [ 1463.465700][ T890] bridge_slave_1: entered allmulticast mode [ 1463.495515][T32740] usb 7-1: MBOX3: Invalid descriptor size=18. [ 1463.503089][ T890] bridge_slave_1: entered promiscuous mode [ 1464.075480][ T12] hsr_slave_0: left promiscuous mode [ 1464.076675][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1464.103258][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1466.097178][ T6119] usb 7-1: USB disconnect, device number 9 [ 1467.490811][ T12] team0 (unregistering): Port device team_slave_1 removed [ 1468.088650][T23464] smc: removing ib device syz0 [ 1470.724040][ T890] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1470.732922][ T1217] tipc: Started in network mode [ 1470.732954][ T1217] tipc: Node identity 4a00a9bd3168, cluster identity 4711 [ 1470.733163][ T1217] tipc: Enabled bearer , priority 0 [ 1470.785456][ T890] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1470.892468][ T1214] tipc: Disabling bearer [ 1471.021734][ T1448] netlink: 4 bytes leftover after parsing attributes in process `syz.6.10479'. [ 1471.202239][ T1448] bridge_slave_1: left allmulticast mode [ 1471.202267][ T1448] bridge_slave_1: left promiscuous mode [ 1471.202498][ T1448] bridge0: port 2(bridge_slave_1) entered disabled state [ 1471.529825][ T1448] bridge_slave_0: left allmulticast mode [ 1471.529854][ T1448] bridge_slave_0: left promiscuous mode [ 1471.548747][ T1448] bridge0: port 1(bridge_slave_0) entered disabled state [ 1472.434071][T32740] libceph: connect (1)[c::]:6789 error -101 [ 1472.434262][T32740] libceph: mon0 (1)[c::]:6789 connect error [ 1472.600678][ T1473] ceph: No mds server is up or the cluster is laggy [ 1472.690390][T32740] libceph: connect (1)[c::]:6789 error -101 [ 1472.690510][T32740] libceph: mon0 (1)[c::]:6789 connect error [ 1473.230295][ T1115] infiniband syb2: ib_query_port failed (-19) [ 1473.254572][ T890] team0: Port device team_slave_0 added [ 1473.325384][ T1496] netlink: 16 bytes leftover after parsing attributes in process `syz.2.10500'. [ 1473.500246][ T1502] netlink: 4 bytes leftover after parsing attributes in process `syz.6.10502'. [ 1473.586978][ T890] team0: Port device team_slave_1 added [ 1473.818705][T23132] libceph: connect (1)[c::]:6789 error -101 [ 1473.818908][T23132] libceph: mon0 (1)[c::]:6789 connect error [ 1473.983566][ T1505] ceph: No mds server is up or the cluster is laggy [ 1474.072104][T23132] libceph: connect (1)[c::]:6789 error -101 [ 1474.072818][T23132] libceph: mon0 (1)[c::]:6789 connect error [ 1474.580600][T23132] libceph: connect (1)[c::]:6789 error -101 [ 1474.580796][T23132] libceph: mon0 (1)[c::]:6789 connect error [ 1475.092019][T14948] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 1475.092078][T14948] CPU: 1 UID: 0 PID: 14948 Comm: kworker/u9:1 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1475.092111][T14948] Tainted: [L]=SOFTLOCKUP [ 1475.092120][T14948] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1475.092135][T14948] Workqueue: hci3 hci_rx_work [ 1475.092162][T14948] Call Trace: [ 1475.092172][T14948] [ 1475.092182][T14948] dump_stack_lvl+0xe8/0x150 [ 1475.092215][T14948] sysfs_create_dir_ns+0x259/0x280 [ 1475.092244][T14948] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1475.092274][T14948] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 1475.092307][T14948] ? rt_spin_unlock+0x161/0x200 [ 1475.092338][T14948] kobject_add_internal+0x6b1/0xcd0 [ 1475.092372][T14948] kobject_add+0x155/0x220 [ 1475.092413][T14948] ? rcu_is_watching+0x15/0xb0 [ 1475.092444][T14948] ? __pfx_kobject_add+0x10/0x10 [ 1475.092484][T14948] device_add+0x408/0xb80 [ 1475.092597][T14948] hci_conn_add_sysfs+0xd5/0x210 [ 1475.092633][T14948] le_conn_complete_evt+0xf1d/0x1420 [ 1475.092671][T14948] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 1475.092696][T14948] ? irqentry_exit+0x5e8/0x670 [ 1475.092716][T14948] ? rcu_is_watching+0x15/0xb0 [ 1475.092740][T14948] ? skb_pull_data+0xfb/0x200 [ 1475.092826][T14948] hci_le_conn_complete_evt+0x187/0x480 [ 1475.092859][T14948] hci_event_packet+0x78f/0x1260 [ 1475.092884][T14948] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 1475.092912][T14948] ? __pfx_hci_event_packet+0x10/0x10 [ 1475.092933][T14948] ? preempt_schedule_common+0x83/0xd0 [ 1475.092954][T14948] ? preempt_schedule_thunk+0x16/0x30 [ 1475.092982][T14948] ? hci_send_to_monitor+0xe2/0x590 [ 1475.093016][T14948] hci_rx_work+0x3ee/0x1060 [ 1475.093040][T14948] ? preempt_schedule_thunk+0x16/0x30 [ 1475.093064][T14948] ? process_scheduled_works+0x9ef/0x1770 [ 1475.093090][T14948] process_scheduled_works+0xad1/0x1770 [ 1475.093144][T14948] ? __pfx_process_scheduled_works+0x10/0x10 [ 1475.093166][T14948] ? do_raw_spin_lock+0x121/0x290 [ 1475.093207][T14948] worker_thread+0x8a0/0xda0 [ 1475.093244][T14948] ? __kthread_parkme+0x7b/0x200 [ 1475.093279][T14948] kthread+0x711/0x8a0 [ 1475.093310][T14948] ? __pfx_worker_thread+0x10/0x10 [ 1475.093334][T14948] ? __pfx_kthread+0x10/0x10 [ 1475.093358][T14948] ? rt_spin_unlock+0x150/0x200 [ 1475.093391][T14948] ? rt_spin_unlock+0x161/0x200 [ 1475.093416][T14948] ? __pfx_kthread+0x10/0x10 [ 1475.093451][T14948] ret_from_fork+0x510/0xa50 [ 1475.093476][T14948] ? __pfx_ret_from_fork+0x10/0x10 [ 1475.093497][T14948] ? __switch_to+0xc9e/0x1480 [ 1475.093532][T14948] ? __pfx_kthread+0x10/0x10 [ 1475.093562][T14948] ret_from_fork_asm+0x1a/0x30 [ 1475.093611][T14948] [ 1475.093925][T14948] kobject: kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 1475.094213][T14948] Bluetooth: hci3: failed to register connection device [ 1475.665828][ T1536] netlink: 4 bytes leftover after parsing attributes in process `syz.6.10511'. [ 1475.757732][ T1537] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10510'. [ 1475.790241][ T890] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1475.790259][ T890] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1475.790285][ T890] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1475.862697][ T890] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1475.862714][ T890] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1475.862740][ T890] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1475.873108][ T1542] netlink: 28 bytes leftover after parsing attributes in process `syz.2.10510'. [ 1476.627625][ T1562] netlink: 16 bytes leftover after parsing attributes in process `syz.2.10523'. [ 1476.735613][ T890] hsr_slave_0: entered promiscuous mode [ 1476.736471][ T890] hsr_slave_1: entered promiscuous mode [ 1479.951187][ T1630] rdma_op ffff888062924270 conn xmit_rdma 0000000000000000 [ 1480.371215][ T1631] lo speed is unknown, defaulting to 1000 [ 1480.913072][ T12] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1481.193977][ T12] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1481.676648][T14948] Bluetooth: hci3: command 0x0406 tx timeout [ 1481.744846][ T12] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1482.063256][ T1690] tipc: Enabled bearer , priority 0 [ 1482.853290][ T1690] tipc: Disabling bearer [ 1484.250225][ T49] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 1484.430104][ T49] usb 3-1: Using ep0 maxpacket: 32 [ 1484.434224][ T49] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1484.434248][ T49] usb 3-1: config 0 has no interfaces? [ 1484.434275][ T49] usb 3-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 1484.434297][ T49] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1484.443569][ T12] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1484.491919][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 1484.514720][ T49] usb 3-1: config 0 descriptor?? [ 1487.030907][ T6120] usb 3-1: USB disconnect, device number 61 [ 1487.051762][ T1783] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10616'. [ 1487.125222][ T1787] netlink: 'syz.4.10616': attribute type 10 has an invalid length. [ 1487.177574][ T1793] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10616'. [ 1487.301055][ T37] kauditd_printk_skb: 20 callbacks suppressed [ 1487.301073][ T37] audit: type=1326 audit(1487.120:6960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=1794 comm="syz.2.10621" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe234bff749 code=0x7ffc0000 [ 1487.302905][ T37] audit: type=1326 audit(1487.120:6961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=1794 comm="syz.2.10621" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe234bff749 code=0x7ffc0000 [ 1487.311511][ T37] audit: type=1326 audit(1487.130:6962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=1794 comm="syz.2.10621" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe234bff749 code=0x7ffc0000 [ 1487.311674][ T37] audit: type=1326 audit(1487.130:6963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=1794 comm="syz.2.10621" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe234bff749 code=0x7ffc0000 [ 1487.311813][ T37] audit: type=1326 audit(1487.130:6964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=1794 comm="syz.2.10621" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe234bff749 code=0x7ffc0000 [ 1487.311955][ T37] audit: type=1326 audit(1487.130:6965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=1794 comm="syz.2.10621" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe234bff749 code=0x7ffc0000 [ 1487.312103][ T37] audit: type=1326 audit(1487.130:6966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=1794 comm="syz.2.10621" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe234bff749 code=0x7ffc0000 [ 1487.312277][ T37] audit: type=1326 audit(1487.130:6967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=1794 comm="syz.2.10621" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe234bff749 code=0x7ffc0000 [ 1487.312435][ T37] audit: type=1326 audit(1487.130:6968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=1794 comm="syz.2.10621" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe234bff749 code=0x7ffc0000 [ 1487.312590][ T37] audit: type=1326 audit(1487.130:6969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=1794 comm="syz.2.10621" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe234bff749 code=0x7ffc0000 [ 1490.860707][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1490.940875][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1491.020825][ T12] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 1491.073616][ T12] bond0 (unregistering): Released all slaves [ 1491.089363][ T12] bond1 (unregistering): Released all slaves [ 1491.118384][ T12] bond2 (unregistering): Released all slaves [ 1491.180978][ T12] bond3 (unregistering): Released all slaves [ 1491.257355][ T1787] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1491.259081][ T1787] team0: Port device bond0 added [ 1492.636884][ T1793] team0 (unregistering): Port device team_slave_0 removed [ 1492.690410][ T1793] team0 (unregistering): Port device team_slave_1 removed [ 1492.733942][ T1793] team0 (unregistering): Port device bond0 removed [ 1494.223805][ T37] kauditd_printk_skb: 124 callbacks suppressed [ 1494.223823][ T37] audit: type=1326 audit(1494.050:7094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=2050 comm="syz.2.10741" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe234bff749 code=0x0 [ 1494.576914][ T2066] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10747'. [ 1494.692458][ T2076] netlink: 'syz.4.10747': attribute type 10 has an invalid length. [ 1494.767067][ T2078] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10747'. [ 1495.360113][ T12] hsr_slave_0: left promiscuous mode [ 1495.380088][T32740] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 1495.455718][ T12] veth1_macvtap: left promiscuous mode [ 1495.455829][ T12] veth0_macvtap: left promiscuous mode [ 1495.456184][ T12] veth1_vlan: left promiscuous mode [ 1495.456376][ T12] veth0_vlan: left promiscuous mode [ 1495.480145][ T5874] usb 5-1: new full-speed USB device number 29 using dummy_hcd [ 1495.533450][T32740] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1495.533497][T32740] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1495.533530][T32740] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1495.538297][T32740] usb 3-1: config 0 descriptor?? [ 1495.652408][ T5874] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1495.652438][ T5874] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1495.652457][ T5874] usb 5-1: Product: syz [ 1495.652472][ T5874] usb 5-1: Manufacturer: syz [ 1495.652487][ T5874] usb 5-1: SerialNumber: syz [ 1495.694319][ T5874] usb 5-1: config 0 descriptor?? [ 1495.953870][T32740] keytouch 0003:0926:3333.001E: fixing up Keytouch IEC report descriptor [ 1495.974956][T32740] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.001E/input/input27 [ 1496.001761][ T5874] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1496.361968][T32740] keytouch 0003:0926:3333.001E: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 1496.370559][T32740] usb 3-1: USB disconnect, device number 62 [ 1496.621217][ T2129] netlink: 4 bytes leftover after parsing attributes in process `syz.6.10772'. [ 1496.791729][T21101] Bluetooth: hci0: command 0x0406 tx timeout [ 1497.569699][ T5874] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1497.608750][ T5874] usb 5-1: USB disconnect, device number 29 [ 1499.303847][ T2194] fuse: Unknown parameter 'group_i00000000000000000000' [ 1503.589394][ T5860] lo speed is unknown, defaulting to 1000 [ 1503.589421][ T5860] infiniband syz2: ib_query_port failed (-19) [ 1503.604840][ T2328] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 1504.477262][ T890] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1504.894498][ T2360] netlink: 8 bytes leftover after parsing attributes in process `syz.8.10879'. [ 1505.004232][ T890] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1505.048220][ T890] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1505.100137][ T2364] fuse: Unknown parameter 'group_id00000000000000000000' [ 1505.171193][ T890] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1505.460262][ T5860] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 1505.617944][ T5860] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1505.618002][ T5860] usb 7-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1505.618027][ T5860] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1505.622982][ T5860] usb 7-1: config 0 descriptor?? [ 1505.628481][ T5860] pwc: Askey VC010 type 2 USB webcam detected. [ 1505.794295][ T890] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1505.865092][ T890] 8021q: adding VLAN 0 to HW filter on device team0 [ 1505.926160][T23464] bridge0: port 1(bridge_slave_0) entered blocking state [ 1505.927569][T23464] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1505.978030][T22556] bridge0: port 2(bridge_slave_1) entered blocking state [ 1505.978211][T22556] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1506.053176][ T5860] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1506.080057][ T5860] pwc: recv_control_msg error -32 req 02 val 2700 [ 1506.081761][ T5860] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1506.091148][ T5860] pwc: recv_control_msg error -32 req 04 val 1000 [ 1506.091824][ T5860] pwc: recv_control_msg error -32 req 04 val 1300 [ 1506.092468][ T5860] pwc: recv_control_msg error -32 req 04 val 1400 [ 1506.093114][ T5860] pwc: recv_control_msg error -32 req 02 val 2000 [ 1506.093767][ T5860] pwc: recv_control_msg error -32 req 02 val 2100 [ 1506.094398][ T5860] pwc: recv_control_msg error -32 req 04 val 1500 [ 1506.314482][ T5860] pwc: recv_control_msg error -71 req 02 val 2400 [ 1506.314961][ T5860] pwc: recv_control_msg error -71 req 02 val 2600 [ 1506.315443][ T5860] pwc: recv_control_msg error -71 req 02 val 2900 [ 1506.315924][ T5860] pwc: recv_control_msg error -71 req 02 val 2800 [ 1506.316608][ T5860] pwc: recv_control_msg error -71 req 04 val 1100 [ 1506.317093][ T5860] pwc: recv_control_msg error -71 req 04 val 1200 [ 1506.336632][ T5860] pwc: Registered as video103. [ 1506.339455][ T5860] input: PWC snapshot button as /devices/platform/dummy_hcd.6/usb7/7-1/input/input28 [ 1506.420526][ T5860] usb 7-1: USB disconnect, device number 10 [ 1506.875701][ T37] audit: type=1326 audit(1506.690:7095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=2414 comm="syz.4.10899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e9c7ef749 code=0x7ffc0000 [ 1506.875976][ T37] audit: type=1326 audit(1506.690:7096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=2414 comm="syz.4.10899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e9c7ef749 code=0x7ffc0000 [ 1506.876515][ T37] audit: type=1326 audit(1506.690:7097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=2414 comm="syz.4.10899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6e9c7ef749 code=0x7ffc0000 [ 1506.876817][ T37] audit: type=1326 audit(1506.690:7098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=2414 comm="syz.4.10899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e9c7ef749 code=0x7ffc0000 [ 1506.877114][ T37] audit: type=1326 audit(1506.690:7099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=2414 comm="syz.4.10899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6e9c7ef749 code=0x7ffc0000 [ 1506.877350][ T37] audit: type=1326 audit(1506.690:7100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=2414 comm="syz.4.10899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e9c7ef749 code=0x7ffc0000 [ 1506.877673][ T37] audit: type=1326 audit(1506.690:7101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=2414 comm="syz.4.10899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6e9c7ef749 code=0x7ffc0000 [ 1506.879249][ T37] audit: type=1326 audit(1506.690:7102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=2414 comm="syz.4.10899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e9c7ef749 code=0x7ffc0000 [ 1506.879647][ T37] audit: type=1326 audit(1506.690:7103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=2414 comm="syz.4.10899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6e9c7ef749 code=0x7ffc0000 [ 1506.879907][ T37] audit: type=1326 audit(1506.690:7104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=2414 comm="syz.4.10899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e9c7ef749 code=0x7ffc0000 [ 1507.326766][ T2421] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10901'. [ 1507.404567][ T890] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1507.462926][ T2435] netlink: 'syz.2.10901': attribute type 10 has an invalid length. [ 1507.531433][ T2430] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10901'. [ 1507.617839][ T2442] syzkaller0: entered promiscuous mode [ 1507.617865][ T2442] syzkaller0: entered allmulticast mode [ 1508.352846][ T2469] fuse: Bad value for 'user_id' [ 1508.352866][ T2469] fuse: Bad value for 'user_id' [ 1508.528477][ T2479] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10917'. [ 1508.597542][ T2484] netlink: 'syz.4.10917': attribute type 10 has an invalid length. [ 1508.597914][ T2484] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10917'. [ 1508.640074][T32740] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 1508.802045][T32740] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1508.802092][T32740] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1508.802117][T32740] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1508.806328][ T890] veth0_vlan: entered promiscuous mode [ 1508.852702][T32740] usb 3-1: config 0 descriptor?? [ 1508.899717][ T890] veth1_vlan: entered promiscuous mode [ 1508.992435][ T890] veth0_macvtap: entered promiscuous mode [ 1509.023346][ T890] veth1_macvtap: entered promiscuous mode [ 1509.075949][ T890] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1509.111289][ T890] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1509.158816][T22548] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1509.159727][T22548] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1509.179485][T22548] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1509.194005][T22548] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1510.016907][ T2499] infiniband syb2: RDMA CMA: cma_listen_on_dev, error -98 [ 1511.173664][T22527] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1511.173685][T22527] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1511.313665][ T1150] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1511.313684][ T1150] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1511.428464][ T2530] tipc: Enabled bearer , priority 0 [ 1511.475314][T32740] usbhid 3-1:0.0: can't add hid device: -71 [ 1511.475384][T32740] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1511.483709][T32740] usb 3-1: USB disconnect, device number 63 [ 1511.553354][ T2530] tipc: Disabling bearer [ 1511.588575][ T2545] netlink: 'syz.4.10938': attribute type 1 has an invalid length. [ 1511.588598][ T2545] netlink: 224 bytes leftover after parsing attributes in process `syz.4.10938'. [ 1511.880128][ T37] kauditd_printk_skb: 65 callbacks suppressed [ 1511.880145][ T37] audit: type=1326 audit(1511.690:7170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=2554 comm="syz.4.10940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e9c7ef749 code=0x7ffc0000 [ 1511.880750][ T37] audit: type=1326 audit(1511.700:7171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=2554 comm="syz.4.10940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f6e9c7ef749 code=0x7ffc0000 [ 1511.881003][ T37] audit: type=1326 audit(1511.700:7172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=2554 comm="syz.4.10940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e9c7ef749 code=0x7ffc0000 [ 1511.881387][ T37] audit: type=1326 audit(1511.700:7173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=2554 comm="syz.4.10940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6e9c7ef749 code=0x7ffc0000 [ 1511.881618][ T37] audit: type=1326 audit(1511.700:7174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=2554 comm="syz.4.10940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e9c7ef749 code=0x7ffc0000 [ 1511.881940][ T37] audit: type=1326 audit(1511.700:7175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=2554 comm="syz.4.10940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f6e9c7ef749 code=0x7ffc0000 [ 1511.882745][ T37] audit: type=1326 audit(1511.700:7176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=2554 comm="syz.4.10940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e9c7ef749 code=0x7ffc0000 [ 1511.883015][ T37] audit: type=1326 audit(1511.700:7177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=2554 comm="syz.4.10940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6e9c7ef749 code=0x7ffc0000 [ 1512.210635][ T37] audit: type=1326 audit(1511.700:7178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=2554 comm="syz.4.10940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e9c7ef749 code=0x7ffc0000 [ 1512.210689][ T37] audit: type=1326 audit(1511.890:7179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=2554 comm="syz.4.10940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6e9c7ef749 code=0x7ffc0000 [ 1513.348869][ T2565] siw: device registration error -23 [ 1514.097595][T21101] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1514.119911][T21101] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1514.134074][T21101] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1514.180298][T21101] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1514.190927][T21101] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1514.398611][T32740] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 1514.586548][T32740] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1514.586578][T32740] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 1514.586603][T32740] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 1514.587851][T32740] usb 5-1: New USB device found, idVendor=2040, idProduct=2000, bcdDevice=65.72 [ 1514.587873][T32740] usb 5-1: New USB device strings: Mfr=151, Product=0, SerialNumber=0 [ 1514.587884][T32740] usb 5-1: Manufacturer: syz [ 1514.603801][T32740] usb 5-1: config 0 descriptor?? [ 1514.626985][T32740] smsusb:smsusb_probe: board id=9, interface number 0 [ 1514.650795][T32740] smsusb:smsusb_probe: Device initialized with return code -19 [ 1514.690161][ T49] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 1514.861666][ T49] usb 7-1: Using ep0 maxpacket: 8 [ 1514.863352][ T49] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1514.863403][ T49] usb 7-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 1514.863417][ T49] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1514.866217][ T49] usb 7-1: config 0 descriptor?? [ 1514.887393][ T49] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 1514.925685][ T2589] netlink: 28 bytes leftover after parsing attributes in process `syz.2.10947'. [ 1514.980520][ T2590] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1514.981159][ T2590] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1514.986971][ T2591] netlink: 28 bytes leftover after parsing attributes in process `syz.2.10947'. [ 1515.274262][ T2573] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1515.274669][ T2573] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1515.329033][ T1115] usb 5-1: USB disconnect, device number 30 [ 1516.286495][T32538] Bluetooth: hci1: command tx timeout [ 1516.840697][T32538] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci5/hci5:201' [ 1516.840728][T32538] CPU: 1 UID: 0 PID: 32538 Comm: kworker/u9:0 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1516.840759][T32538] Tainted: [L]=SOFTLOCKUP [ 1516.840768][T32538] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1516.840782][T32538] Workqueue: hci5 hci_rx_work [ 1516.840808][T32538] Call Trace: [ 1516.840818][T32538] [ 1516.840827][T32538] dump_stack_lvl+0xe8/0x150 [ 1516.840860][T32538] sysfs_create_dir_ns+0x259/0x280 [ 1516.840890][T32538] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1516.840920][T32538] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 1516.840953][T32538] ? rt_spin_unlock+0x161/0x200 [ 1516.840984][T32538] kobject_add_internal+0x6b1/0xcd0 [ 1516.841019][T32538] kobject_add+0x155/0x220 [ 1516.841047][T32538] ? __pfx_kobject_add+0x10/0x10 [ 1516.841079][T32538] ? get_device_parent+0x370/0x3a0 [ 1516.841107][T32538] device_add+0x408/0xb80 [ 1516.841135][T32538] hci_conn_add_sysfs+0xd5/0x210 [ 1516.841169][T32538] le_conn_complete_evt+0xf1d/0x1420 [ 1516.841206][T32538] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 1516.841233][T32538] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1516.841256][T32538] ? lockdep_hardirqs_on+0x7b/0x110 [ 1516.841280][T32538] ? skb_pull_data+0xfb/0x200 [ 1516.841316][T32538] hci_le_conn_complete_evt+0x187/0x480 [ 1516.841349][T32538] hci_event_packet+0x78f/0x1260 [ 1516.841374][T32538] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 1516.841401][T32538] ? __pfx_hci_event_packet+0x10/0x10 [ 1516.841420][T32538] ? rt_spin_unlock+0x150/0x200 [ 1516.841457][T32538] ? hci_send_to_monitor+0xe2/0x590 [ 1516.841493][T32538] hci_rx_work+0x3ee/0x1060 [ 1516.841522][T32538] ? process_scheduled_works+0x9ef/0x1770 [ 1516.841548][T32538] process_scheduled_works+0xad1/0x1770 [ 1516.841601][T32538] ? __pfx_process_scheduled_works+0x10/0x10 [ 1516.841622][T32538] ? do_raw_spin_lock+0x121/0x290 [ 1516.841663][T32538] worker_thread+0x8a0/0xda0 [ 1516.841701][T32538] ? __kthread_parkme+0x7b/0x200 [ 1516.841736][T32538] kthread+0x711/0x8a0 [ 1516.841767][T32538] ? __pfx_worker_thread+0x10/0x10 [ 1516.841789][T32538] ? __pfx_kthread+0x10/0x10 [ 1516.841814][T32538] ? rt_spin_unlock+0x150/0x200 [ 1516.841847][T32538] ? rt_spin_unlock+0x161/0x200 [ 1516.841872][T32538] ? __pfx_kthread+0x10/0x10 [ 1516.841900][T32538] ret_from_fork+0x510/0xa50 [ 1516.841925][T32538] ? __pfx_ret_from_fork+0x10/0x10 [ 1516.841946][T32538] ? __switch_to+0xc9e/0x1480 [ 1516.841980][T32538] ? __pfx_kthread+0x10/0x10 [ 1516.842009][T32538] ret_from_fork_asm+0x1a/0x30 [ 1516.842056][T32538] [ 1516.842085][T32538] kobject: kobject_add_internal failed for hci5:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 1516.842125][T32538] Bluetooth: hci5: failed to register connection device [ 1517.370113][ T37] kauditd_printk_skb: 16 callbacks suppressed [ 1517.370134][ T37] audit: type=1326 audit(1517.110:7196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=2614 comm="syz.4.10954" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e9c7ef749 code=0x7ffc0000 [ 1517.370186][ T37] audit: type=1326 audit(1517.110:7197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=2614 comm="syz.4.10954" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e9c7ef749 code=0x7ffc0000 [ 1517.370280][ T37] audit: type=1326 audit(1517.110:7198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=2614 comm="syz.4.10954" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f6e9c7ef749 code=0x7ffc0000 [ 1517.370321][ T37] audit: type=1326 audit(1517.110:7199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=2614 comm="syz.4.10954" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e9c7ef749 code=0x7ffc0000 [ 1517.370360][ T37] audit: type=1326 audit(1517.110:7200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=2614 comm="syz.4.10954" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e9c7ef749 code=0x7ffc0000 [ 1517.370447][ T37] audit: type=1326 audit(1517.110:7201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=2614 comm="syz.4.10954" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6e9c7ef749 code=0x7ffc0000 [ 1517.370490][ T37] audit: type=1326 audit(1517.110:7202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=2614 comm="syz.4.10954" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e9c7ef749 code=0x7ffc0000 [ 1517.370531][ T37] audit: type=1326 audit(1517.110:7203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=2614 comm="syz.4.10954" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f6e9c7ef749 code=0x7ffc0000 [ 1517.370625][ T37] audit: type=1326 audit(1517.110:7204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=2614 comm="syz.4.10954" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e9c7ef749 code=0x7ffc0000 [ 1517.370674][ T37] audit: type=1326 audit(1517.110:7205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=2614 comm="syz.4.10954" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e9c7ef749 code=0x7ffc0000 [ 1517.815292][ T49] gspca_vc032x: reg_w err -71 [ 1517.819383][ T49] vc032x 7-1:0.0: probe with driver vc032x failed with error -71 [ 1517.906258][ T49] usb 7-1: USB disconnect, device number 11 [ 1518.331644][T21101] Bluetooth: hci1: command tx timeout [ 1518.367057][ T43] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1518.698727][ T2639] siw: device registration error -23 [ 1519.680343][ T2570] chnl_net:caif_netlink_parms(): no params data found [ 1519.765184][ T2644] ntfs3(nullb0): Primary boot signature is not NTFS. [ 1519.765379][ T2644] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 1520.199722][ T43] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1520.390105][T21101] Bluetooth: hci1: command tx timeout [ 1522.086055][ T43] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1522.511628][T32538] Bluetooth: hci1: command tx timeout [ 1522.855694][T21101] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:201' [ 1522.855783][T21101] CPU: 1 UID: 0 PID: 21101 Comm: kworker/u9:2 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1522.855816][T21101] Tainted: [L]=SOFTLOCKUP [ 1522.855824][T21101] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1522.855840][T21101] Workqueue: hci4 hci_rx_work [ 1522.855865][T21101] Call Trace: [ 1522.855874][T21101] [ 1522.855884][T21101] dump_stack_lvl+0xe8/0x150 [ 1522.855915][T21101] sysfs_create_dir_ns+0x259/0x280 [ 1522.855945][T21101] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1522.855976][T21101] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 1522.856004][T21101] ? __rcu_read_unlock+0x84/0xe0 [ 1522.856032][T21101] ? rt_spin_unlock+0x161/0x200 [ 1522.856063][T[ 1522.856063][T21101] kobject_add_internal+0x6b1/0xcd0 [ 1522.856096][T21101] kobject_add+0x155/0x220 [ 1522.856119][T21101] ? rcu_is_watching+0x15/0xb0 [ 1522.856142][T21101] ? __pfx_kobject_add+0x10/0x10 [ 1522.856187][T21101] device_add+0x408/0xb80 [ 1522.856216][T21101] hci_conn_add_sysfs+0xd5/0x210 [ 1522.856251][T21101] le_conn_complete_evt+0xf1d/0x1420 [ 1522.856278][T21101] ? irqentry_exit+0x5e8/0x670 [ 1522.856307][T21101] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 1522.856340][T21101] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 1522.856365][T21101] ? hci_le_meta_evt+0x36d/0x590 [ 1522.856393][T21101] hci_le_conn_complete_evt+0x187/0x480 [ 1522.856426][T21101] hci_event_packet+0x78f/0x1260 [ 1522.856451][T21101] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 1522.856478][T21101] ? __pfx_hci_event_packet+0x10/0x10 [ 1522.856499][T21101] ? preempt_schedule_common+0x83/0xd0 [ 1522.856520][T21101] ? preempt_schedule_thunk+0x16/0x30 [ 1522.856548][T21101] ? hci_send_to_monitor+0xe2/0x590 [ 1522.856580][T21101] hci_rx_work+0x3ee/0x1060 [ 1522.856602][T21101] ? preempt_schedule_thunk+0x16/0x30 [ 1522.856627][T21101] ? process_scheduled_works+0x9ef/0x1770 [ 1522.856653][T21101] process_scheduled_works+0xad1/0x1770 [ 1522.856707][T21101] ? __pfx_process_scheduled_works+0x10/0x10 [ 1522.856728][T21101] ? do_raw_spin_lock+0x121/0x290 [ 1522.856770][T21101] worker_thread+0x8a0/0xda0 [ 1522.856821][T21101] kthread+0x711/0x8a0 [ 1522.856852][T21101] ? __pfx_worker_thread+0x10/0x10 [ 1522.856875][T21101] ? __pfx_kthread+0x10/0x10 [ 1522.856900][T21101] ? rt_spin_unlock+0x150/0x200 [ 1522.856932][T21101] ? rt_spin_unlock+0x161/0x200 [ 1522.856957][T21101] ? __pfx_kthread+0x10/0x10 [ 1522.856987][T21101] ret_from_fork+0x510/0xa50 [ 1522.857021][T21101] ? __pfx_ret_from_fork+0x10/0x10 [ 1522.857041][T21101] ? __switch_to+0xc9e/0x1480 [ 1522.857077][T21101] ? __pfx_kthread+0x10/0x10 [ 1522.857107][T21101] ret_from_fork_asm+0x1a/0x30 [ 1522.857159][T21101] [ 1522.857585][T21101] kobject: kobject_add_internal failed for hci4:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 1522.858089][T21101] Bluetooth: hci4: failed to register connection device [ 1523.018077][T21101] ================================================================== [ 1523.018095][T21101] BUG: KASAN: slab-use-after-free in l2cap_sock_new_connection_cb+0x1f9/0x2e0 [ 1523.018132][T21101] Read of size 8 at addr ffff8880a61c07b0 by task kworker/u9:2/21101 [ 1523.018155][T21101] [ 1523.018169][T21101] CPU: 1 UID: 0 PID: 21101 Comm: kworker/u9:2 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1523.018196][T21101] Tainted: [L]=SOFTLOCKUP [ 1523.018203][T21101] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1523.018217][T21101] Workqueue: hci4 hci_rx_work [ 1523.018236][T21101] Call Trace: [ 1523.018244][T21101] [ 1523.018254][T21101] dump_stack_lvl+0xe8/0x150 [ 1523.018279][T21101] print_report+0xca/0x240 [ 1523.018300][T21101] ? l2cap_sock_new_connection_cb+0x1f9/0x2e0 [ 1523.018326][T21101] kasan_report+0x118/0x150 [ 1523.018353][T21101] ? l2cap_sock_new_connection_cb+0x1f9/0x2e0 [ 1523.018383][T21101] l2cap_sock_new_connection_cb+0x1f9/0x2e0 [ 1523.018411][T21101] l2cap_connect_cfm+0x367/0x10e0 [ 1523.018438][T21101] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 1523.018462][T21101] ? _raw_spin_unlock_irqrestore+0x74/0x80 [ 1523.018480][T21101] ? mutex_lock_nested+0x154/0x1d0 [ 1523.018503][T21101] ? hci_connect_cfm+0x2c/0x140 [ 1523.018523][T21101] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 1523.018546][T21101] hci_connect_cfm+0x95/0x140 [ 1523.018567][T21101] le_conn_complete_evt+0xf65/0x1420 [ 1523.018588][T21101] ? irqentry_exit+0x5e8/0x670 [ 1523.018609][T21101] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 1523.018632][T21101] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 1523.018653][T21101] ? hci_le_meta_evt+0x36d/0x590 [ 1523.018674][T21101] hci_le_conn_complete_evt+0x187/0x480 [ 1523.018696][T21101] hci_event_packet+0x78f/0x1260 [ 1523.018714][T21101] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 1523.018734][T21101] ? __pfx_hci_event_packet+0x10/0x10 [ 1523.018750][T21101] ? preempt_schedule_common+0x83/0xd0 [ 1523.018767][T21101] ? preempt_schedule_thunk+0x16/0x30 [ 1523.018792][T21101] ? hci_send_to_monitor+0xe2/0x590 [ 1523.018815][T21101] hci_rx_work+0x3ee/0x1060 [ 1523.018833][T21101] ? preempt_schedule_thunk+0x16/0x30 [ 1523.018852][T21101] ? process_scheduled_works+0x9ef/0x1770 [ 1523.018873][T21101] process_scheduled_works+0xad1/0x1770 [ 1523.018909][T21101] ? __pfx_process_scheduled_works+0x10/0x10 [ 1523.018927][T21101] ? do_raw_spin_lock+0x121/0x290 [ 1523.018953][T21101] worker_thread+0x8a0/0xda0 [ 1523.018984][T21101] kthread+0x711/0x8a0 [ 1523.019008][T21101] ? __pfx_worker_thread+0x10/0x10 [ 1523.019028][T21101] ? __pfx_kthread+0x10/0x10 [ 1523.019049][T21101] ? rt_spin_unlock+0x150/0x200 [ 1523.019074][T21101] ? rt_spin_unlock+0x161/0x200 [ 1523.019096][T21101] ? __pfx_kthread+0x10/0x10 [ 1523.019118][T21101] ret_from_fork+0x510/0xa50 [ 1523.019138][T21101] ? __pfx_ret_from_fork+0x10/0x10 [ 1523.019155][T21101] ? __switch_to+0xc9e/0x1480 [ 1523.019181][T21101] ? __pfx_kthread+0x10/0x10 [ 1523.019204][T21101] ret_from_fork_asm+0x1a/0x30 [ 1523.019235][T21101] [ 1523.019242][T21101] [ 1523.019247][T21101] Allocated by task 21101: [ 1523.019256][T21101] kasan_save_track+0x3e/0x80 [ 1523.019277][T21101] __kasan_kmalloc+0x93/0xb0 [ 1523.019299][T21101] __kmalloc_noprof+0x23e/0x7e0 [ 1523.019321][T21101] sk_prot_alloc+0xe7/0x220 [ 1523.019416][T21101] sk_alloc+0x3a/0x390 [ 1523.019434][T21101] bt_sock_alloc+0x3b/0x310 [ 1523.019451][T21101] l2cap_sock_new_connection_cb+0xe2/0x2e0 [ 1523.019476][T21101] l2cap_connect_cfm+0x367/0x10e0 [ 1523.019498][T21101] hci_connect_cfm+0x95/0x140 [ 1523.019515][T21101] le_conn_complete_evt+0xf65/0x1420 [ 1523.019536][T21101] hci_le_conn_complete_evt+0x187/0x480 [ 1523.019555][T21101] hci_event_packet+0x78f/0x1260 [ 1523.019568][T21101] hci_rx_work+0x3ee/0x1060 [ 1523.019583][T21101] process_scheduled_works+0xad1/0x1770 [ 1523.019600][T21101] worker_thread+0x8a0/0xda0 [ 1523.019617][T21101] kthread+0x711/0x8a0 [ 1523.019637][T21101] ret_from_fork+0x510/0xa50 [ 1523.019652][T21101] ret_from_fork_asm+0x1a/0x30 [ 1523.019675][T21101] [ 1523.019680][T21101] Freed by task 2670: [ 1523.019688][T21101] kasan_save_track+0x3e/0x80 [ 1523.019709][T21101] kasan_save_free_info+0x46/0x50 [ 1523.019726][T21101] __kasan_slab_free+0x5c/0x80 [ 1523.019748][T21101] kfree+0x1bd/0x900 [ 1523.019766][T21101] __sk_destruct+0x626/0x880 [ 1523.019785][T21101] l2cap_sock_cleanup_listen+0xe0/0x450 [ 1523.019808][T21101] l2cap_sock_release+0x6e/0x270 [ 1523.019829][T21101] sock_close+0xc3/0x240 [ 1523.019887][T21101] __fput+0x45b/0xa80 [ 1523.019904][T21101] task_work_run+0x1d4/0x260 [ 1523.019927][T21101] exit_to_user_mode_loop+0xef/0x4e0 [ 1523.019952][T21101] do_syscall_64+0x2c1/0xf80 [ 1523.019969][T21101] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1523.019987][T21101] [ 1523.019992][T21101] The buggy address belongs to the object at ffff8880a61c0000 [ 1523.019992][T21101] which belongs to the cache kmalloc-2k of size 2048 [ 1523.020008][T21101] The buggy address is located 1968 bytes inside of [ 1523.020008][T21101] freed 2048-byte region [ffff8880a61c0000, ffff8880a61c0800) [ 1523.020028][T21101] [ 1523.020032][T21101] The buggy address belongs to the physical page: [ 1523.020050][T21101] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0xa61c0 [ 1523.020068][T21101] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 1523.020084][T21101] flags: 0x80000000000040(head|node=0|zone=1) [ 1523.020103][T21101] page_type: f5(slab) [ 1523.020119][T21101] raw: 0080000000000040 ffff88813ff27000 dead000000000122 0000000000000000 [ 1523.020141][T21101] raw: 0000000000000000 0000000080080008 00000000f5000000 0000000000000000 [ 1523.020158][T21101] head: 0080000000000040 ffff88813ff27000 dead000000000122 0000000000000000 [ 1523.020173][T21101] head: 0000000000000000 0000000080080008 00000000f5000000 0000000000000000 [ 1523.020190][T21101] head: 0080000000000003 ffffea0002987001 00000000ffffffff 00000000ffffffff [ 1523.020205][T21101] head: ffff888000000000 0000000000000000 00000000ffffffff 0000000000000008 [ 1523.020215][T21101] page dumped because: kasan: bad access detected [ 1523.020228][T21101] page_owner tracks the page as allocated [ 1523.020235][T21101] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 21101, tgid 21101 (kworker/u9:2), ts 1523006430872, free_ts 1522261859911 [ 1523.020264][T21101] post_alloc_hook+0x234/0x290 [ 1523.020286][T21101] get_page_from_freelist+0x28c0/0x2960 [ 1523.020302][T21101] __alloc_frozen_pages_noprof+0x181/0x370 [ 1523.020318][T21101] alloc_pages_mpol+0xd1/0x380 [ 1523.020331][T21101] allocate_slab+0x86/0x3b0 [ 1523.020349][T21101] ___slab_alloc+0xb10/0x13e0 [ 1523.020364][T21101] __slab_alloc+0xc6/0x1f0 [ 1523.020378][T21101] __kmalloc_noprof+0x15f/0x7e0 [ 1523.020399][T21101] sk_prot_alloc+0xe7/0x220 [ 1523.020418][T21101] sk_alloc+0x3a/0x390 [ 1523.020435][T21101] bt_sock_alloc+0x3b/0x310 [ 1523.020450][T21101] l2cap_sock_new_connection_cb+0xe2/0x2e0 [ 1523.020474][T21101] l2cap_connect_cfm+0x367/0x10e0 [ 1523.020495][T21101] hci_connect_cfm+0x95/0x140 [ 1523.020512][T21101] le_conn_complete_evt+0xf65/0x1420 [ 1523.020530][T21101] hci_le_conn_complete_evt+0x187/0x480 [ 1523.020548][T21101] page last free pid 29221 tgid 29221 stack trace: [ 1523.020558][T21101] __free_frozen_pages+0xfe1/0x1170 [ 1523.020580][T21101] __put_partials+0x149/0x170 [ 1523.020596][T21101] __slab_free+0x2af/0x330 [ 1523.020613][T21101] qlist_free_all+0x97/0x100 [ 1523.020633][T21101] kasan_quarantine_reduce+0x148/0x160 [ 1523.020654][T21101] __kasan_slab_alloc+0x22/0x80 [ 1523.020676][T21101] kmem_cache_alloc_noprof+0x18d/0x6c0 [ 1523.020696][T21101] getname_flags+0xb8/0x540 [ 1523.020711][T21101] __x64_sys_unlink+0x3a/0x50 [ 1523.020733][T21101] do_syscall_64+0xec/0xf80 [ 1523.020748][T21101] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1523.020763][T21101] [ 1523.020767][T21101] Memory state around the buggy address: [ 1523.020777][T21101] ffff8880a61c0680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1523.020788][T21101] ffff8880a61c0700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1523.020800][T21101] >ffff8880a61c0780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1523.020809][T21101] ^ [ 1523.020819][T21101] ffff8880a61c0800: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1523.020831][T21101] ffff8880a61c0880: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1523.020840][T21101] ================================================================== [ 1523.020886][T21101] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1523.020906][T21101] CPU: 1 UID: 0 PID: 21101 Comm: kworker/u9:2 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1523.020932][T21101] Tainted: [L]=SOFTLOCKUP [ 1523.020939][T21101] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1523.020950][T21101] Workqueue: hci4 hci_rx_work [ 1523.020967][T21101] Call Trace: [ 1523.020974][T21101] [ 1523.020982][T21101] vpanic+0x1e0/0x670 [ 1523.021008][T21101] panic+0xb9/0xc0 [ 1523.021030][T21101] ? __pfx_panic+0x10/0x10 [ 1523.021055][T21101] ? l2cap_sock_new_connection_cb+0x1f9/0x2e0 [ 1523.021087][T21101] ? l2cap_sock_new_connection_cb+0x1f9/0x2e0 [ 1523.021113][T21101] check_panic_on_warn+0x89/0xb0 [ 1523.021140][T21101] ? l2cap_sock_new_connection_cb+0x1f9/0x2e0 [ 1523.021166][T21101] end_report+0x6f/0x140 [ 1523.021190][T21101] kasan_report+0x129/0x150 [ 1523.021223][T21101] ? l2cap_sock_new_connection_cb+0x1f9/0x2e0 [ 1523.021254][T21101] l2cap_sock_new_connection_cb+0x1f9/0x2e0 [ 1523.021282][T21101] l2cap_connect_cfm+0x367/0x10e0 [ 1523.021309][T21101] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 1523.021333][T21101] ? _raw_spin_unlock_irqrestore+0x74/0x80 [ 1523.021352][T21101] ? mutex_lock_nested+0x154/0x1d0 [ 1523.021374][T21101] ? hci_connect_cfm+0x2c/0x140 [ 1523.021395][T21101] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 1523.021418][T21101] hci_connect_cfm+0x95/0x140 [ 1523.021438][T21101] le_conn_complete_evt+0xf65/0x1420 [ 1523.021460][T21101] ? irqentry_exit+0x5e8/0x670 [ 1523.021480][T21101] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 1523.021503][T21101] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 1523.021523][T21101] ? hci_le_meta_evt+0x36d/0x590 [ 1523.021544][T21101] hci_le_conn_complete_evt+0x187/0x480 [ 1523.021567][T21101] hci_event_packet+0x78f/0x1260 [ 1523.021585][T21101] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 1523.021605][T21101] ? __pfx_hci_event_packet+0x10/0x10 [ 1523.021621][T21101] ? preempt_schedule_common+0x83/0xd0 [ 1523.021638][T21101] ? preempt_schedule_thunk+0x16/0x30 [ 1523.021658][T21101] ? hci_send_to_monitor+0xe2/0x590 [ 1523.021682][T21101] hci_rx_work+0x3ee/0x1060 [ 1523.021699][T21101] ? preempt_schedule_thunk+0x16/0x30 [ 1523.021718][T21101] ? process_scheduled_works+0x9ef/0x1770 [ 1523.021738][T21101] process_scheduled_works+0xad1/0x1770 [ 1523.021767][T21101] ? __pfx_process_scheduled_works+0x10/0x10 [ 1523.021785][T21101] ? do_raw_spin_lock+0x121/0x290 [ 1523.021810][T21101] worker_thread+0x8a0/0xda0 [ 1523.021839][T21101] kthread+0x711/0x8a0 [ 1523.021863][T21101] ? __pfx_worker_thread+0x10/0x10 [ 1523.021887][T21101] ? __pfx_kthread+0x10/0x10 [ 1523.021908][T21101] ? rt_spin_unlock+0x150/0x200 [ 1523.021988][T21101] ? rt_spin_unlock+0x161/0x200 [ 1523.022050][T21101] ? __pfx_kthread+0x10/0x10 [ 1523.022121][T21101] ret_from_fork+0x510/0xa50 [ 1523.022168][T21101] ? __pfx_ret_from_fork+0x10/0x10 [ 1523.022212][T21101] ? __switch_to+0xc9e/0x1480 [ 1523.022280][T21101] ? __pfx_kthread+0x10/0x10 [ 1523.022342][T21101] ret_from_fork_asm+0x1a/0x30 [ 1523.022414][T21101] [ 1523.022748][T21101] Kernel Offset: disabled