last executing test programs: 20m30.541841186s ago: executing program 4 (id=5): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000003d40), 0x4) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r2, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) close_range(r0, 0xffffffffffffffff, 0x0) 20m29.887886107s ago: executing program 4 (id=7): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) r1 = dup(r0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$BLKRRPART(r1, 0x125f, 0x0) 20m29.696872987s ago: executing program 4 (id=9): r0 = landlock_create_ruleset(&(0x7f0000000080)={0x8000}, 0x18, 0x0) landlock_restrict_self(r0, 0x0) r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$FS_IOC_GETFSUUID(r1, 0x80111500, &(0x7f0000000100)) 20m28.511466008s ago: executing program 4 (id=10): r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r0, &(0x7f0000000040)={0x1f, @none, 0x1}, 0xa) socket$inet_mptcp(0x2, 0x1, 0x106) unshare(0x8040600) pselect6(0x40, &(0x7f0000000100), &(0x7f0000000000)={0x1f}, 0x0, 0x0, 0x0) 20m27.149152815s ago: executing program 4 (id=13): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f00000004c0)={0x2c}, 0x8) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r2, 0x118, 0x1, &(0x7f0000000040)=0x2d8, 0x4) r3 = open$dir(&(0x7f0000000040)='./file0\x00', 0x840, 0xe2) fanotify_mark(0xffffffffffffffff, 0x0, 0x10, r3, &(0x7f0000000080)='./file0\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x81}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r4 = getpid() socket$inet(0x2, 0x2, 0x1) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = syz_open_dev$tty1(0xc, 0x4, 0x2) dup(r7) ioctl$TIOCL_SETSEL(r7, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0x3bf, 0x4, 0x14a}}) ioctl$TIOCL_PASTESEL(r7, 0x541c, &(0x7f0000000000)) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, 0x0) write$UHID_GET_REPORT_REPLY(0xffffffffffffffff, &(0x7f0000007000)={0xa, {0x2, 0x2f, 0x5}}, 0xa) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) sendmsg$nl_route(r8, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000001800093b00000000000000000a100000000000000000000008001e0001"], 0x24}}, 0x0) sendmmsg$inet6(r1, &(0x7f0000000a00)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x9, @rand_addr=' \x01\x00', 0x9}, 0x1c, &(0x7f0000000b40)=[{&(0x7f0000000340)="f2", 0x1}], 0x1}}, {{&(0x7f0000002100)={0xa, 0x4e22, 0x80000000, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x2}, 0x1c, &(0x7f0000002500)=[{&(0x7f0000002140)="cf", 0x1}], 0x1}}, {{&(0x7f0000000040)={0xa, 0x4e21, 0x2, @private2, 0x9}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000080)="b7a1", 0x2}], 0x1}}], 0x3, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, 0x0, 0x0) 20m25.469182641s ago: executing program 4 (id=17): socket$inet_udp(0x2, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000180), 0x5, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) socket$inet6(0xa, 0x3, 0x7) setitimer(0x1, 0x0, 0x0) 20m10.301056176s ago: executing program 32 (id=17): socket$inet_udp(0x2, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000180), 0x5, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) socket$inet6(0xa, 0x3, 0x7) setitimer(0x1, 0x0, 0x0) 15m10.180302545s ago: executing program 5 (id=1676): socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xd0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) getpgid(0x0) 15m7.845872919s ago: executing program 5 (id=1680): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x70, 0x0, 0xffffffffffffff7e) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15m6.335915954s ago: executing program 5 (id=1691): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=@newlink={0x50, 0x10, 0x1, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, 0x2180, 0x400c}, [@IFLA_IFNAME={0x14, 0x3, 'bridge_slave_0\x00'}, @IFLA_VFINFO_LIST={0x1c, 0x16, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x1, 0xffffffff}}]}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x8014}, 0x20000040) 15m5.997479248s ago: executing program 5 (id=1692): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f00000002c0)="f973085a6ea39ea1b25a1c6b351e11245900557d1c8e9f86bae5e5c64e50ef25afb0295d0c303850b4bff4d088bf9df67e013836e2882dad3f7698b52997f7efa9eb96f09be1c3019445927c6b2fe32d38ae2bcad2ac0d85ebd42914fb18b7d0670f8b3be16755ead6a6fb713fa618ce2cf424ea7cc84b04016b9a2afbfa", 0x7e}, {&(0x7f0000000780)}, {&(0x7f0000000900)}, {&(0x7f00000000c0)}], 0x4}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000580)="8f966bd94d16", 0x6}], 0x2, &(0x7f0000000cc0)=[@mark={{0x14, 0x1, 0x24, 0x9a9}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}, @txtime={{0x18, 0x1, 0x3d, 0x9d}}], 0x48}}], 0x2, 0x20000044) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x6f4}}, 0x0) 15m5.620567681s ago: executing program 5 (id=1694): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x2000010, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f000000c3c0)={0x2020}, 0x2020) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'batadv_slave_0\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0x3, 0x5, 0x80000000, 0x1, 0x4, 0x9, 0xa4, 0x0, 0x7, 0xb69, 0xc1, 0x4, 0xf, 0x6, 0x5, 0x3, 0x1002, 0x9, 0x1, 0x3, 0x800, 0x3, 0xe3bc, 0x6, 0x9, 0x4, 0x7, 0x5, 0x8, 0x0, 0x40, 0xd, 0xe, 0x1, 0x0, 0x4, 0x1bfe, 0xb, 0x7, 0xbed4, 0x20000008, 0x8000100, 0x7, 0x5, 0x11000, 0x8, 0x5, 0x79b, 0x2, 0x0, 0x83, 0x0, 0xa, 0x7, 0xf, 0x101, 0xd7, 0x1fa0860a, 0xaf5, 0xaa, 0x101, 0xfffffffe, 0x180001, 0xf, 0x8b, 0x5, 0x2af, 0x6, 0x5, 0x2, 0x6, 0x9, 0x4, 0x6, 0x4009, 0xfffffffe, 0x4, 0x100002, 0x4000008, 0x752, 0x0, 0x3, 0x0, 0x10001, 0xe, 0xfffffffd, 0x6, 0x6, 0x9, 0x80000000, 0xfdfffffc, 0x0, 0x2, 0x84, 0x100, 0x7, 0x252, 0x81, 0x5d102cf1, 0x5, 0x20006, 0x5, 0x1, 0xb, 0x0, 0xd9a, 0x10000d, 0x2a2, 0xfffffffd, 0x3, 0x2, 0x5, 0xffffff95, 0x4000000, 0x4, 0x2, 0x40, 0x8, 0x4, 0x6, 0x100, 0x80066cd, 0x2c, 0x8, 0x1, 0x0, 0xc5c, 0x3ff]}}) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) 15m5.385995361s ago: executing program 5 (id=1696): openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x42, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f00000018c0), 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 14m49.459268167s ago: executing program 33 (id=1696): openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x42, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f00000018c0), 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 3m58.617250284s ago: executing program 6 (id=3571): openat$sysfs(0xffffffffffffff9c, 0x0, 0x202, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffa3}, 0x48) 3m56.947083593s ago: executing program 6 (id=3573): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x1000000, 0xd, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b9", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 3m56.773200064s ago: executing program 6 (id=3575): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x50) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000f40), r4) sendmsg$IPVS_CMD_NEW_SERVICE(r4, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=r5], 0x70}, 0x1, 0x0, 0x0, 0x20004084}, 0x20008800) syz_open_procfs(0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000000, 0x5d032, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, r0, {0x0, 0x4}, {0xffff, 0xffff}, {0x7, 0xffe5}}}, 0x24}, 0x1, 0x0, 0x0, 0xc0}, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x15) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c0000002a000701fcffffffffdbdf25037c7fdb1aca0100114a381648eda6c399804898c4dc448d33feb44fa5187c519c967ccca73507a0940ab0f08ba5347332f42c2490e1f70a78c5db037db7fee35f9d", @ANYRES32=0x0, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x488c4}, 0xc000) openat$tun(0xffffffffffffff9c, 0x0, 0xc0100, 0x0) 3m55.711327041s ago: executing program 6 (id=3577): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x1}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r3, &(0x7f0000000440), 0x10) listen(r3, 0xffffbffe) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) writev(r4, &(0x7f00000003c0)=[{&(0x7f0000000880)='\x00', 0x1}], 0x1) 3m54.291713135s ago: executing program 6 (id=3579): socket$inet_udp(0x2, 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff6000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, 0x0, 0x0) r1 = io_uring_setup(0x1bc0, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x7, 0x20002fd}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000240), 0x0, 0x501, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x50) r2 = socket$inet(0x2, 0x80001, 0x84) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{0x0, 0x10}], 0x1}, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) sendmsg(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)=[{0x0}], 0x1, 0x0, 0x0, 0x2c}, 0x4020845) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 3m53.103686664s ago: executing program 6 (id=3584): fsopen(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = getpid() sendmsg$key(0xffffffffffffffff, &(0x7f00000009c0)={0x0, 0x0, 0x0}, 0x4000000) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x3000) r1 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x9, 0x3, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4007, 0x0, 0x0, 0x0, 0x7}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @cgroup_sock=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) ppoll(&(0x7f0000000080)=[{r3, 0x2000}], 0x1, 0x0, 0x0, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r4, &(0x7f0000000440), 0x10) 3m36.243354887s ago: executing program 34 (id=3584): fsopen(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = getpid() sendmsg$key(0xffffffffffffffff, &(0x7f00000009c0)={0x0, 0x0, 0x0}, 0x4000000) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x3000) r1 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x9, 0x3, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4007, 0x0, 0x0, 0x0, 0x7}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @cgroup_sock=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) ppoll(&(0x7f0000000080)=[{r3, 0x2000}], 0x1, 0x0, 0x0, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r4, &(0x7f0000000440), 0x10) 2m45.248368168s ago: executing program 3 (id=3687): fcntl$setownex(0xffffffffffffffff, 0xf, 0x0) socket$tipc(0x1e, 0x5, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) setpriority(0x0, 0x0, 0x2a14b58) syz_clone3(&(0x7f0000000440)={0x100000100, &(0x7f0000000080), 0x0, &(0x7f0000000200)=0x0, {0x11}, &(0x7f00000002c0), 0x0, &(0x7f00000003c0)=""/5, &(0x7f0000000400)}, 0x58) r1 = syz_open_procfs(r0, &(0x7f00000000c0)='net/ptype\x00') preadv(r1, 0x0, 0x0, 0xbc, 0xfffffffb) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r2, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xfc778000) mount$overlay(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000300), 0x0, 0x0) r3 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) fchdir(r4) fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0xffffff70) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000000c0)=@generic={&(0x7f0000000000)='./file0\x00'}, 0x18) socket$nl_route(0x10, 0x3, 0x0) 2m42.140282813s ago: executing program 3 (id=3690): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) fstat(r0, &(0x7f0000000400)) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000480)={{{@in6=@empty, @in=@broadcast}}, {{@in=@private}, 0x0, @in=@loopback}}, &(0x7f0000000580)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000005c0)={{{@in6=@initdev, @in6=@remote}}, {{@in6=@private2}, 0x0, @in6=@dev}}, &(0x7f00000006c0)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000700)={{{@in=@local, @in6=@private1}}, {{@in=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000800)=0xe8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000840)={{{@in, @in=@empty}}, {{@in=@private}, 0x0, @in=@broadcast}}, &(0x7f0000000940)=0xe8) read$FUSE(0xffffffffffffffff, &(0x7f0000000980)={0x2020}, 0x2020) read$FUSE(0xffffffffffffffff, &(0x7f00000029c0)={0x2020}, 0x2020) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x91c6b000) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100}) syz_open_procfs(0x0, &(0x7f0000001040)='net/nf_conntrack_expect\x00') ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000000000/0x800000)=nil, 0x800000}) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) bind$alg(0xffffffffffffffff, 0x0, 0x0) 2m39.314759677s ago: executing program 3 (id=3693): r0 = socket$vsock_stream(0x28, 0x1, 0x0) listen(r0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x6, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000002000000000000000100008018150000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r2, 0x0, 0xe, 0x0, &(0x7f00000002c0)="e02742e86c0d85ff9782762f0800", 0x0, 0x46b, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = socket$vsock_stream(0x28, 0x1, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$sock_linger(r3, 0x1, 0xd, &(0x7f0000000040)={0x2, 0xfffffffc}, 0x8) connect$vsock_stream(r3, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x4, 0x4, 0x7fff0000}]}) r5 = gettid() r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000700), 0x0) read(r6, &(0x7f0000000200)=""/202, 0xca) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r6, 0x4058534c, &(0x7f00000000c0)={0x80, 0x0, {0x3}}) tkill(r5, 0x7) close_range(r4, 0xffffffffffffffff, 0x0) 2m38.847933574s ago: executing program 3 (id=3696): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21, 0x8, 0x0, 0x0}}, 0x10) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7400}, 0x8000800) 2m38.653945219s ago: executing program 3 (id=3698): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x1}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r3, &(0x7f0000000440), 0x10) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) 2m37.47597017s ago: executing program 3 (id=3700): socket$inet(0x2, 0x2, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000000000), 0x651, 0x0) syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2) io_uring_setup(0x178e, &(0x7f00000008c0)={0x0, 0x52be, 0x100, 0xfffffffe, 0x14e}) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x80000, 0x140) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(0xffffffffffffffff, 0x1, &(0x7f0000000000)={0x1800, r3}, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) linkat(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file7\x00', 0x1000) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x8, 0x2, 0xfffffffffffffffd, 0x1}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x20, 0x4, 0x0, 0xee2, 0x8, 0x3}, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r5, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032303030"], 0x15) r6 = dup(r5) write$FUSE_BMAP(r6, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r6, &(0x7f0000000440)=ANY=[@ANYBLOB="b0000000"], 0xb0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000540), 0x2000000, &(0x7f0000000940)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r6, @ANYBLOB="2c6e6f461250f8de8399e30d55695ec83d80e74bf4b8c83cd97022ef9fe82134c46ea1ce5ba45a7a888e850bb6320ac5036b746b1b92690edc613cf24adc1e05d4cabc9df13a16dd3015f08fd281d214b3c4d72825043d2112e71f91d45f8bde721892cb9f03050bfc08063e5e000000000000c315bf74a4cb25ab930db3f59b707e9963a090eae2a4925b8185a4a19d0401386c6b9991c89656ecadda5549a8ec74ac6beeb2ccc2bbf192409b9a978a4cf5a95f5e9ceac3c86bad4f0087b96a0d1d1e31eb74ff675d2ee6020000006e9e8e54165a6ad1302ac1b3259e727a37b01afaac7205170cdfdc009eb9f49f62f963cc22fcf8ce2e3282ba938572d081934a1fa4d5bc4f92b1fab800000000000000000000f5dbd75361995fc48e0a315ed65ae737a1383424a0788e5de2f26c71d846f13d7b1be86697bd7f5f08f28f013793f4dfea36c648a6f5918db60c4cbe49ea4f858eb26074a242d4e5a8f4189e98ecd1422ae3925a11"]) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000), 0x8, &(0x7f0000000300)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) openat(0xffffffffffffff9c, &(0x7f00000008c0)='./file0\x00', 0x1800, 0x80) 2m21.278214491s ago: executing program 35 (id=3700): socket$inet(0x2, 0x2, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000000000), 0x651, 0x0) syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2) io_uring_setup(0x178e, &(0x7f00000008c0)={0x0, 0x52be, 0x100, 0xfffffffe, 0x14e}) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x80000, 0x140) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(0xffffffffffffffff, 0x1, &(0x7f0000000000)={0x1800, r3}, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) linkat(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file7\x00', 0x1000) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x8, 0x2, 0xfffffffffffffffd, 0x1}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x20, 0x4, 0x0, 0xee2, 0x8, 0x3}, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r5, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032303030"], 0x15) r6 = dup(r5) write$FUSE_BMAP(r6, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r6, &(0x7f0000000440)=ANY=[@ANYBLOB="b0000000"], 0xb0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000540), 0x2000000, &(0x7f0000000940)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r6, @ANYBLOB="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"]) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000), 0x8, &(0x7f0000000300)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) openat(0xffffffffffffff9c, &(0x7f00000008c0)='./file0\x00', 0x1800, 0x80) 22.055780082s ago: executing program 0 (id=3884): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) 18.303949314s ago: executing program 0 (id=3887): socket(0x10, 0x3, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000006c0), 0x48200, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x2) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x4) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ppoll(&(0x7f0000000340)=[{r1, 0xa701}, {r2, 0x1008}], 0x2, 0x0, 0x0, 0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x3c}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=@newtfilter={0xb0, 0x2c, 0xd2b, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0xf}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x7c, 0x2, [@TCA_U32_ACT={0x54, 0x7, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xf, 0x3}}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x6, 0x9, 0x6, 0x1, 0xd6}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}, @TCA_U32_SEL={0x24, 0x5, {0xd, 0x7, 0x1, 0x3d43, 0x0, 0xfff, 0x3, 0x58f, [{0x0, 0x20008000, 0x4, 0x11}]}}]}}, @TCA_RATE={0x6, 0x5, {0x2, 0x8e}}]}, 0xb0}}, 0x24040084) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a00", @ANYRES32, @ANYBLOB="000000000000000010"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4) r7 = socket(0x10, 0x3, 0x0) sendmmsg(r7, &(0x7f0000000000), 0x4000000000001f2, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet(0x2, 0xa, 0x7f) write$FUSE_NOTIFY_INVAL_INODE(r8, &(0x7f0000001b40)={0x28, 0x2, 0x0, {0x3, 0x8, 0x3}}, 0x28) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000000)=0x9) 17.547986602s ago: executing program 0 (id=3889): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) fstat(r0, &(0x7f0000000400)) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000480)={{{@in6=@empty, @in=@broadcast}}, {{@in=@private}, 0x0, @in=@loopback}}, &(0x7f0000000580)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000005c0)={{{@in6=@initdev, @in6=@remote}}, {{@in6=@private2}, 0x0, @in6=@dev}}, &(0x7f00000006c0)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000700)={{{@in=@local, @in6=@private1}}, {{@in=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000800)=0xe8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000840)={{{@in, @in=@empty}}, {{@in=@private}, 0x0, @in=@broadcast}}, &(0x7f0000000940)=0xe8) read$FUSE(0xffffffffffffffff, &(0x7f0000000980)={0x2020}, 0x2020) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x91c6b000) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100}) syz_open_procfs(0x0, &(0x7f0000001040)='net/nf_conntrack_expect\x00') ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000000000/0x800000)=nil, 0x800000}) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) bind$alg(0xffffffffffffffff, 0x0, 0x0) 17.464471122s ago: executing program 2 (id=3890): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x50) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000f40), r4) sendmsg$IPVS_CMD_NEW_SERVICE(r4, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYBLOB="010067bd7000fbdbdf25010000005c00018014000300fe80000000000a0000000000000000bb060001000a00000008000600777272000c0007002e000000050000000800090027000000060002001100000008000b00736970000800080009000000060004000015"], 0x70}, 0x1, 0x0, 0x0, 0x20004084}, 0x20008800) syz_open_procfs(0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000000, 0x5d032, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, r0, {0x0, 0x4}, {0xffff, 0xffff}, {0x7, 0xffe5}}}, 0x24}, 0x1, 0x0, 0x0, 0xc0}, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x15) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c0000002a000701fcffffffffdbdf25037c7fdb1aca0100114a381648eda6c399804898c4dc448d33feb44fa5187c519c967ccca73507a0940ab0f08ba5347332f42c2490e1f70a78c5db037db7fee35f9d", @ANYRES32=0x0, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x488c4}, 0xc000) openat$tun(0xffffffffffffff9c, 0x0, 0xc0100, 0x0) 16.32156963s ago: executing program 2 (id=3891): mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4000) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', 0x0, 0x2208004, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000040), 0x0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r5}, &(0x7f0000000240), &(0x7f0000000280)}, 0x20) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000002bbd0500dbdbdf25020000dd000000010c000000000000000000000000001205b6f706561083504c"], 0x24}}, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup\x00', 0x108) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) ioctl$USBDEVFS_ALLOW_SUSPEND(0xffffffffffffffff, 0x5522) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x20000, 0x0) readahead(r4, 0x9, 0x2) ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f0000000340)={'ip6gre0\x00', &(0x7f0000000f00)=@ethtool_per_queue_op={0x4b, 0xf, [0xf68f, 0x8, 0x9, 0x1ff, 0x0, 0x4, 0xe97, 0x4, 0x6, 0xecbf, 0xff, 0x101, 0x7, 0x200, 0x3d, 0x5e, 0x1000, 0xffff, 0xf557, 0x2, 0x5, 0x7c, 0xce, 0x2, 0xffffff6b, 0xe52c, 0xaa8, 0x7ffffffc, 0xd, 0xe9c4, 0xcd8, 0x6e, 0x6, 0x7, 0xd, 0x8a, 0x3, 0x6, 0x3, 0x3, 0x3, 0xfffffffc, 0xfd2, 0x6, 0x8, 0x401, 0xeffff801, 0x2b, 0xa, 0x0, 0x7, 0x8, 0x5, 0x3, 0x6, 0x8, 0x23, 0xff, 0x3, 0x10, 0x3, 0xffffffff, 0x6, 0x5fffffd, 0xd1, 0xf, 0x4, 0xa, 0x0, 0x400, 0x80000000, 0x8000, 0x3, 0x5, 0x2, 0x0, 0x2, 0x1, 0x80, 0x4, 0x2, 0x0, 0xd, 0x2000006, 0x4, 0x8, 0x0, 0x1, 0xfffffffc, 0x12, 0x7ff, 0x7, 0x2, 0xbde, 0x37, 0x3, 0x4, 0x1, 0xa, 0x6, 0x7fff, 0x1, 0x704, 0x33e4, 0x9, 0x6, 0x7fff, 0x6, 0x100, 0x3, 0xfffffffd, 0x2, 0x6, 0x8, 0x6, 0x7, 0x200, 0x9, 0xe, 0x81, 0x0, 0x4, 0x5, 0x5, 0x8, 0x3, 0x1, 0xfffffffa]}}) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) 15.163602506s ago: executing program 0 (id=3893): syz_usb_connect(0x0, 0x3d7, &(0x7f0000000040)=ANY=[@ANYBLOB="120100004cefc008e10593085bfd010203010902c50301000000000904"], 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@newqdisc={0x2c, 0x24, 0xd0f, 0x70bd2b, 0x0, {0x60, 0x0, 0x0, r1, {0x0, 0x8}, {0xffff, 0xffff}, {0xfff2, 0xc}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x3000c81c) mkdir(&(0x7f00000000c0)='./file0\x00', 0x143) renameat2(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x2) lremovexattr(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)=@known='system.posix_acl_default\x00') r2 = socket$kcm(0x10, 0x2, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000001c0)={0xffffffffffffffff}, 0x111, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r5, &(0x7f0000000180)={0x13, 0x9, 0xfa00, {0xffffffffffffffff, r6}}, 0x14) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000000)={0x50, r3, 0x801, 0x70bd2c, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY={0x28, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "4abee33908f8eef16f162471f4"}, @NL80211_KEY_IDX={0x5}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}]}]}, 0x50}}, 0x0) r8 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) ioctl$TIOCGPGRP(r8, 0x540f, 0x0) write$usbip_server(r8, &(0x7f0000001380)=@ret_submit={{0x3, 0x2, 0x0, 0x1, 0xb}, 0x1fc9ab9c, 0x46, 0x3, 0xf0, 0x400, 0x0, "cfaefd0d84d25ba032a4306f78b3b951b5f56a5647cde9af1dff67244ed4705a813cb27632adb1bdea3822d9d92ce863160d03cc0de3589510fdc1eec4959625e74e707dbced", [{0x5f1d11c4, 0x1, 0x5, 0x8000}, {0x0, 0xb7, 0x3, 0x5}, {0x3, 0xffff0000, 0x0, 0x1}, {0xb, 0x4, 0x2, 0x59}, {0x1, 0x3, 0x0, 0xf3}, {0xfffff80e, 0x6000, 0x1, 0x2674}, {0xffffb7a1, 0x401, 0x4, 0x5}, {0x3, 0x5, 0xfffffffa, 0x2}, {0x0, 0xcd2, 0x2, 0x7}, {0x6958694d, 0x3, 0x7, 0x1}, {0x1, 0x3, 0xbfc, 0x3}, {0x7, 0xca5d, 0x3, 0x1}, {0x50000000, 0x3, 0x7, 0x3}, {0x7fffffff, 0x5, 0x7, 0x94f7}, {0x4, 0xe14, 0x3, 0xe7e}, {0x9, 0x8, 0x4, 0x1}, {0xfffffff2, 0x4, 0x2, 0x4}, {0xea9, 0x9, 0x1, 0x8}, {0x2, 0x4, 0x9, 0x8}, {0x101, 0xfffffffe, 0x7ff, 0xb}, {0x80, 0xd2, 0x8, 0x7fffffff}, {0x0, 0x2, 0xffffff90, 0xe8}, {0xfffffffe, 0x3, 0x7ac, 0x1000}, {0x8, 0x3, 0x1, 0x6}, {0x3, 0x0, 0x8, 0x2}, {0x5, 0x9a, 0x9, 0x7}, {0x3, 0x2, 0x40, 0x4}, {0xffff, 0x1, 0x8}, {0xa8d, 0xd3c6, 0x7b8, 0xb}, {0xc2e, 0x7c, 0x6, 0x1000}, {0xff, 0x1, 0x0, 0x1}, {0x3, 0x8, 0x9, 0x6}, {0x2, 0x5, 0x1, 0x9}, {0x3, 0x1, 0xfffffffb, 0xffffff01}, {0x5, 0x7, 0x800, 0x4}, {0x4, 0x9, 0x2, 0x80000000}, {0x8, 0x68, 0x9, 0x4}, {0x7, 0xbd, 0x4}, {0xd4fa, 0x2, 0x3, 0x2}, {0x2ac, 0x4, 0xbea, 0x4}, {0x6, 0x2, 0x4, 0x3}, {0x5, 0xfffffffa, 0x3, 0x2}, {0x1, 0x3ff, 0x9, 0x1}, {0xfffffe01, 0x8, 0x6, 0x7fffffff}, {0x0, 0xdae, 0x4, 0xfff}, {0xffc0000, 0xfffffff7, 0x8, 0x6}, {0x7b, 0xdee, 0x8, 0x6}, {0x7, 0x101, 0x1, 0x4f}, {0x1ea, 0x1000, 0x9, 0x1}, {0xb, 0x9, 0x4, 0x1}, {0x9c9, 0x3, 0x6, 0x591f}, {0x3, 0x9, 0x4, 0x97}, {0x298, 0xc6, 0x8001, 0xffffffff}, {0x0, 0x6, 0xfffffff7, 0x5}, {0xfffff801, 0x4, 0xa97, 0x4}, {0x401, 0x5, 0x13a, 0xa96}, {0x3, 0x5, 0x401, 0xba2b}, {0x2, 0xa18, 0x8, 0x2}, {0x9, 0x5, 0x4, 0xb80}, {0x8, 0xfff, 0xa75, 0x7fffffff}, {0x2, 0xf, 0x80, 0x9}, {0x47, 0x9, 0x6, 0x7}, {0xffff4356, 0x8000, 0x3d22, 0xfffffffb}, {0x1000, 0xe, 0x5, 0x5}, {0x2, 0x5, 0x4, 0x5}, {0x1, 0x5, 0x40, 0x9}, {0x6, 0x7, 0x4}, {0x4, 0x5, 0x80000000, 0x500e9c1f}, {0xffff, 0x2, 0x17, 0x4}, {0x9, 0x7, 0x8001, 0x200}, {0x800, 0x9, 0x8, 0xac000000}, {0x1, 0x6, 0xa000, 0xf}, {0x1e, 0x8001, 0x345, 0x4}, {0x25, 0x9, 0x9, 0x5}, {0x6, 0x7b, 0x5, 0x3}, {0x5, 0x4, 0x900, 0xe05}, {0x3, 0x4c5, 0x3, 0x3}, {0x9, 0x4, 0x1, 0x66}, {0x2d, 0x1, 0x1, 0x7}, {0x2, 0x0, 0x4, 0xc9bb}, {0x3, 0x99, 0x7}, {0x7, 0x5, 0x3, 0x80}, {0xfffffffc, 0x5, 0x1, 0x4a4}, {0xd, 0x6, 0x832f, 0x100}, {0x2, 0x800, 0x6, 0x6}, {0x3, 0x3, 0x8, 0x2}, {0x5, 0x4, 0xd, 0x2}, {0x3, 0xb71, 0xff, 0x2}, {0x3d77, 0xf8f, 0x465, 0x1}, {0x0, 0x0, 0x1, 0x9}, {0xffff, 0x3, 0x2, 0x7}, {0x8, 0x800, 0x9, 0x1}, {0xf6, 0x100, 0x1}, {0xfffffeff, 0x3, 0x80000001, 0xffc}, {0x0, 0xad0, 0x1, 0x9}, {0x4, 0x401, 0x3573a7f6, 0x9}, {0x4, 0x2, 0x81, 0x472286c5}, {0x3, 0x8, 0x7ff, 0x2}, {0x2, 0x10001, 0x6, 0x5}, {0x7, 0xfe53, 0x0, 0x94f}, {0x101, 0xe, 0x44ac, 0xfff}, {0x3, 0x3, 0x3, 0x2}, {0x3, 0x1, 0x6, 0x3}, {0x1, 0x5, 0x6, 0x7}, {0x5, 0x10000, 0x0, 0x1ff}, {0x1, 0x7, 0x3, 0x9}, {0xe0000000, 0x5, 0x1, 0x81}, {0x8, 0x6, 0x0, 0xfffffffc}, {0xb, 0xca10, 0x10, 0x17e}, {0x4, 0x1, 0x1, 0xda21}, {0x7ff, 0x7ff, 0x7, 0x4}, {0x73, 0x5, 0x7f, 0x2}, {0x8000000, 0x0, 0x3, 0x101}, {0x1, 0x100, 0x3ff, 0x8001}, {0x80, 0x3, 0xc, 0x5}, {0x2, 0x2, 0xf, 0xfffffff4}, {0x5, 0x40, 0x17}, {0x6, 0x1, 0x6, 0xfff}, {0x2, 0x1b98, 0x5d}, {0x8, 0x7, 0x0, 0x6}, {0x3, 0x0, 0xfffffff9, 0x5}, {0x5, 0x6, 0x8, 0x4}, {0x5, 0x2606, 0x81}, {0x81, 0x0, 0x5, 0x7}, {0x1, 0x2549, 0x3, 0x6}, {0xffffff7a, 0x2e, 0x66a7, 0xd}, {0x5, 0x4, 0x100, 0x7}, {0x6, 0x1, 0x3, 0x7fffffff}, {0x2, 0xffffff34, 0x0, 0xbba9}, {0xa, 0x6, 0x1, 0x9}, {0x7ff, 0xb76f, 0x3, 0x8ab7}, {0xee, 0x6, 0x1578, 0x8}, {0xffff, 0x56d9e019, 0x1ff, 0x5}, {0xf, 0x5, 0x0, 0xffffffff}, {0x5, 0x7e, 0x9, 0xff}, {0x6, 0x4, 0xff, 0xa}, {0xda0, 0x9, 0x84c5, 0x7}, {0x2, 0x525d0280, 0x8001, 0x8}, {0x6, 0x8001, 0x1, 0x6}, {0xffffffad, 0x8, 0x8000, 0x3}, {0x9, 0x2, 0x0, 0x80000000}, {0xf66, 0xfffffff7, 0x6fa00000, 0x800}, {0xffff5fe4, 0x3, 0x6, 0xa}, {0x0, 0x7, 0x7, 0x7}, {0x2, 0x1, 0xd, 0x4}, {0x18000000, 0x1, 0x2, 0xc6a}, {0x7, 0x2f31, 0x1000, 0x1}, {0x7, 0x6, 0x800, 0x800}, {0x1, 0x34, 0xe6, 0x10001}, {0x7, 0x0, 0x7f, 0x6}, {0x2, 0xe, 0xa8, 0x1000}, {0x8, 0x5, 0x6, 0x4}, {0x5b8, 0x3, 0x7, 0x5}, {0x8000, 0x5, 0x9, 0xff}, {0xfffffffd, 0xe, 0xfffffffc}, {0x2, 0x80000, 0xa, 0x9}, {0x23800, 0x40000000, 0x6, 0x2}, {0x2, 0xfe, 0x9, 0xc9}, {0x5, 0x8, 0x1800000, 0x8000}, {0x8, 0xfe, 0x4, 0x5}, {0x8000, 0x5, 0x7, 0x1}, {0xa11, 0x6, 0x86f7, 0x4}, {0x6, 0x1, 0x5, 0x5}, {0x2, 0x0, 0x9, 0x6}, {0x1, 0x0, 0x6, 0x6b3}, {0x10001, 0x4, 0x1775, 0x8000}, {0x3, 0x3, 0xc, 0x4}, {0x7fff, 0xdc, 0x0, 0x4}, {0x5, 0x7, 0x1ff, 0x4}, {0x6, 0x6, 0x2f7d9603, 0xfffffffc}, {0xff, 0x6, 0x0, 0x9}, {0x2, 0xb, 0x7, 0x7fffffff}, {0x7, 0x800, 0x8, 0xc}, {0x6, 0x1, 0x2, 0x4}, {0x401, 0x4, 0xc, 0x8004}, {0x4, 0x1b57, 0x9, 0x97}, {0x5, 0x0, 0x5c36, 0x7}, {0xffffffff, 0x1, 0x63, 0x4}, {0x7fffffff, 0x9, 0x10001, 0x329}, {0x0, 0x800, 0xfffffbff, 0x3}, {0x80000001, 0xa, 0x2, 0x5}, {0x1, 0x40, 0xea7, 0x7}, {0x4, 0x2, 0x6, 0x3}, {0x401, 0x5, 0xfffffff8, 0x3}, {0x4, 0x766, 0x6, 0x7}, {0xd, 0x2, 0x9, 0x7}, {0x8, 0x9, 0x7558, 0x8}, {0x7f, 0x8, 0x2, 0x3}, {0x9, 0x3, 0xd2d, 0x7fff}, {0x80000000, 0x2, 0x6, 0x58ad}, {0x8001, 0x1000, 0x2, 0x7f}, {0x4, 0x400, 0x0, 0x4}, {0x7ff, 0x2, 0x0, 0x5}, {0x2266, 0x80000001, 0x6, 0x5}, {0x7, 0x6, 0x6, 0xfff}, {0xffff, 0x6, 0x2, 0x2}, {0x1, 0x3, 0x200}, {0x8000, 0x0, 0x5, 0x8}, {0x200, 0x2, 0xfffffffb, 0x9}, {0x0, 0x81, 0x3, 0x7}, {0x80000001, 0x3, 0x2aa7000, 0x8}, {0x9, 0xfff, 0x3, 0x42c}, {0x14e2, 0x1ff, 0x6f, 0x26}, {0x4, 0x1ff, 0x9, 0x4}, {0x40, 0x6, 0x3, 0x7}, {0x6, 0x0, 0x9}, {0x0, 0x5, 0x5, 0x2}, {0x2, 0x6, 0x7c3c, 0x6}, {0x3, 0x7, 0x2, 0x5}, {0x9, 0x9, 0xff, 0x80000000}, {0x8, 0x765475b4, 0x8, 0x9}, {0x6, 0x4, 0x9, 0x3}, {0x2, 0x3, 0x10001, 0x4}, {0x7, 0xfffffffc, 0x9fcb}, {0x8000, 0x4, 0x80000001}, {0x7fffffff, 0x5, 0x3, 0x8}, {0xa, 0x4, 0x7}, {0x9, 0x8, 0x0, 0xe00000}, {0x3, 0x3, 0x4, 0x7}, {0x7, 0x1, 0xfff, 0x78b175c1}, {0x8, 0x8, 0x101, 0x80000000}, {0x2, 0x1, 0x8, 0x3}, {0x20d, 0x8, 0x1c0abcc8, 0x8000}, {0xd1, 0x3, 0x4, 0x9}, {0x1ae, 0x7, 0x7054, 0x200}, {0xfffffffc, 0x80000001, 0x588, 0x7f}, {0x3, 0x14, 0xbbf, 0x1ff}, {0x1, 0x5, 0x1, 0xffffffff}, {0x3, 0x3, 0x7, 0x7fffffff}, {0x0, 0x2, 0x3400, 0x5}, {0x6, 0x3, 0x6, 0x2}, {0xb, 0xb, 0x5, 0xfffffffc}, {0xfffffffb, 0xfffff091, 0x1, 0xfffffffe}, {0x1, 0x5, 0x6, 0x5}, {0x200, 0x200, 0x2, 0x380000}, {0x0, 0x120000, 0x0, 0x4}, {0x3, 0x1, 0x80000001, 0xc62a}, {0x7, 0x3ff, 0x2, 0x7fff}, {0x9, 0x4, 0x7e6fe51e, 0x2}, {0x9a, 0x5, 0x2, 0x10000}]}, 0xf76) write$smackfs_ptrace(r8, &(0x7f0000000300)=0x2, 0x14) r9 = io_uring_setup(0xbfe, &(0x7f0000000000)={0x0, 0xc52a, 0x1000, 0x2, 0x207}) io_uring_register$IORING_REGISTER_FILE_ALLOC_RANGE(r9, 0x19, &(0x7f0000000080)={0xfffffffa}, 0x0) r10 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r10, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x2}}, 0x20) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r8, 0x0, 0x61, &(0x7f0000002300)={'filter\x00', 0x4}, 0x68) write$RDMA_USER_CM_CMD_RESOLVE_IP(r10, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0xe, @loopback={0x700}, 0x2}, {0xa, 0x4e23, 0x7, @remote, 0x3}, r11, 0xfeb1}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r8, &(0x7f0000000800)={0x15, 0x110, 0xfa00, {r11, 0xf, 0x0, 0x0, 0x0, @in6={0xa, 0x4e24, 0x8e94, @local, 0x3}, @ib={0x1b, 0x6, 0x9596, {"c5a57d9e908adf5c0c96ff069bacc9e5"}, 0x4, 0x4, 0x3}}}, 0x118) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00%'], 0x33fe0) ioctl$BTRFS_IOC_DEV_REPLACE(r10, 0xca289435, &(0x7f0000000940)={0x1, 0x10, @status={[0x3, 0x8, 0x4, 0x6, 0x6, 0x1]}, [0x1, 0x24, 0x3ff, 0xffffffffffffffff, 0xdd, 0xfffffffffffffffc, 0x1, 0x7ff, 0x7ff, 0x101, 0x9, 0x1, 0xd61, 0x7, 0xffff, 0x5, 0x0, 0x2, 0x8, 0x4, 0xb, 0x8, 0x3ff, 0x5, 0xff, 0x9, 0x7, 0x6, 0x0, 0x40000000000, 0x7fffffff, 0x9, 0x8, 0x6, 0x6, 0x81, 0xffffffff, 0x6, 0x6, 0x1, 0x2, 0x4, 0x4, 0x7, 0x9, 0x200000000000000, 0x5, 0x8, 0x10000, 0x9, 0x4, 0x46, 0x602c, 0x5, 0xb, 0xe73e, 0x7, 0x8000000000000001, 0x5, 0xf56, 0x9, 0x6, 0x6, 0x100]}) syz_usb_connect$uac1(0x2, 0x10e, &(0x7f00000006c0)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xfc, 0x3, 0x1, 0x7, 0x0, 0xc, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x8, 0x43}, [@mixer_unit={0x7, 0x24, 0x4, 0x4, 0x3, 'LY'}, @extension_unit={0xa, 0x24, 0x8, 0x1, 0xfffd, 0x0, "2dd87f"}, @mixer_unit={0x6, 0x24, 0x4, 0x3, 0xf9, "8d"}, @output_terminal={0x9, 0x24, 0x3, 0x2, 0x100, 0x3, 0x4, 0x5}, @input_terminal={0xc, 0x24, 0x2, 0x6, 0x100, 0x5, 0x40, 0xf, 0x8, 0x6}, @processing_unit={0xd, 0x24, 0x7, 0x6, 0x6, 0x90, "1aef5cf6467e"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x2, 0x4, 0x1, 0x1f, "9deb56", '\x00'}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x3, 0x3, 0x0, 0xd2, 0x9}, @format_type_i_continuous={0xd, 0x24, 0x2, 0x1, 0xbf, 0x2, 0xea, 0xee, "13ff", "d04d78"}, @format_type_i_discrete={0xd, 0x24, 0x2, 0x1, 0xb, 0x1, 0x81, 0xa, "ec7b12dd0d"}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x2, 0x58, 0x2, 0x2, 0xd6}]}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x4, 0x0, 0xf7, {0x7, 0x25, 0x1, 0xc, 0x1, 0x55bd}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x5, 0x5}, @format_type_i_discrete={0xf, 0x24, 0x2, 0x1, 0x2, 0x4, 0xf9, 0xff, "9968caf3a4c51b"}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x6, 0x2, 0x9, 0x0, '~', "0a9e6c"}, @format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0x1, 0x9, 0x8}]}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x8, 0x6, 0x1, {0x7, 0x25, 0x1, 0x0, 0x9, 0x4431}}}}}}}}]}}, &(0x7f0000000640)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x200, 0x7, 0x4, 0x80, 0x8, 0xdc}, 0x1b, &(0x7f0000000200)={0x5, 0xf, 0x1b, 0x2, [@ssp_cap={0xc, 0x10, 0xa, 0xf8, 0x0, 0x1ff, 0x0, 0xff85}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x8, 0x6, 0x3, 0x9}]}, 0x7, [{0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x409}}, {0x102, &(0x7f0000000280)=ANY=[@ANYBLOB="0203de28d637e3906b58fdbeea4a36f46f77137ac42e4426752bf42a003e6bb11d2d28e87c1cf811b7e0d9b8caa1ede2fdfde646ed9e92c87d4ffa00fa6c5315480f3e65143c11dd3b87e339623bbb7f83a203974419d046a8c2f2cbddee3a56cc694a231244464560c068b651771bafde53844e07bdcd95c203f7c4195ff580721fa4dbf4188746819b38fd601691f6f80f22eea3ae96aec602afc585028026cebe5c2a8b257d62782e7a53fa3aa4370da68b4ba37b50df87857b050cfcc774f7b65f4006215bb3be092873436860d1011f13e388dfcff6edae4678628d18325337c33c0759b3220675ffd77538458f73f57a83515f2114431163"]}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x42f}}, {0x58, &(0x7f0000000400)=@string={0x58, 0x3, "d714459321972d7b0f5282357f68ce70d8bac7f35bf22648d29b530962d5bb969664bed4fcc35489ac9d0d16c6b0a3427b300f42910933dd9fa62f2ef260954d1fe67184238d2feaf1e48e1886f68d320d0b40afd7bd"}}, {0xe5, &(0x7f0000000480)=@string={0xe5, 0x3, "0cf9437e2f0bceed6f41d1092a0da8f95e15b41699a70c5bddd03df71a61b8187facc8505b965fcd1501041f745ce37beb46b663578b38daf6694c9ab674c976f21259fb702113dc5c5b78db80fe308700e454ad805182e426363bfc82e1250ec69c6dfa8c013da4a9d05799d3d087078fc523c0092e9af62ed449da2b22caff1f613d931c3a845ff62110d5a76bbce85e16bf55f605857025508be8fd7ae1bec3bd61806fbe11343542aaf616e7362b8f798d9b104fb98f503e83fa5605a14dc0842c43f714933a04c336c98a2e35683a01bc84e016b5d0386ad2c1e41f8e19cbdfd2"}}, {0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x82c}}, {0x60, &(0x7f00000005c0)=@string={0x60, 0x3, "3ffe2a8dd59c307843fa5b624b6367ce8250e61644e0d769027bb7c34281f5fb9c4d08012344bc9bbdec1a982a4e26231e5fda37ce7fb8878a0a59c3172a96ac2a35677aacc2bdaeaca7dd5467195c853a1f02cf80189e120bbc7cf90090"}}]}) 13.732526605s ago: executing program 2 (id=3894): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x20000000) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) 11.559117924s ago: executing program 0 (id=3896): openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/if_inet6\x00') read$FUSE(r4, 0x0, 0x0) preadv(r4, &(0x7f0000000b00)=[{&(0x7f00000002c0)=""/30, 0xffffff98}], 0x1, 0x80000001, 0x0) syz_fuse_handle_req(r4, 0x0, 0x0, 0x0) bind$bt_sco(0xffffffffffffffff, &(0x7f0000000140), 0x8) socket$inet6_tcp(0xa, 0x1, 0x0) 9.96974958s ago: executing program 0 (id=3898): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) openat$rfkill(0xffffffffffffff9c, 0x0, 0x1, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r2, &(0x7f00000000c0)="2ae0e710", 0x4, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x4, @empty}, 0x1c) setsockopt$sock_int(r2, 0x1, 0x1d, &(0x7f0000000080)=0x53, 0x4) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/cpuinfo\x00', 0x0, 0x0) pread64(r3, &(0x7f0000002780)=""/59, 0x3b, 0xf27b) recvmmsg(r2, &(0x7f0000000d80), 0x4000000000001e9, 0x10162, 0x0) setsockopt$sock_int(r0, 0x1, 0xc, &(0x7f0000000040)=0x9, 0x4) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x35451d70031e5a08, 0x0) syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) fallocate(r4, 0x0, 0x0, 0x10fff9) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'rose0\x00', 0x1000}) ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, &(0x7f0000000000)=0x5) 8.850058222s ago: executing program 1 (id=3899): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x50) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000f40), r4) sendmsg$IPVS_CMD_NEW_SERVICE(r4, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f00000001c0)=ANY=[@ANYRES16=r5, @ANYBLOB="010067bd7000fbdbdf25010000005c00018014000300fe80000000000a0000000000000000bb060001000a00000008000600777272000c0007002e000000050000000800090027000000060002001100000008000b00736970000800080009000000060004000015"], 0x70}, 0x1, 0x0, 0x0, 0x20004084}, 0x20008800) syz_open_procfs(0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000000, 0x5d032, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, r0, {0x0, 0x4}, {0xffff, 0xffff}, {0x7, 0xffe5}}}, 0x24}, 0x1, 0x0, 0x0, 0xc0}, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x15) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c0000002a000701fcffffffffdbdf25037c7fdb1aca0100114a381648eda6c399804898c4dc448d33feb44fa5187c519c967ccca73507a0940ab0f08ba5347332f42c2490e1f70a78c5db037db7fee35f9d", @ANYRES32=0x0, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x488c4}, 0xc000) openat$tun(0xffffffffffffff9c, 0x0, 0xc0100, 0x0) 8.653373839s ago: executing program 2 (id=3900): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x141091, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r3 = syz_open_procfs(0x0, &(0x7f0000000200)='task\x00') getdents64(r3, &(0x7f00000000c0)=""/169, 0xa9) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_on}]}) chdir(&(0x7f00000001c0)='./bus\x00') rmdir(&(0x7f0000000380)='./file0/../file0\x00') r4 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r4, 0x0, 0xb, &(0x7f00000000c0)=0x1002, 0x4) sendto$inet(r4, 0x0, 0xffe5, 0xe000, &(0x7f0000000000)={0x2, 0x4e20}, 0x10) 6.087143003s ago: executing program 1 (id=3901): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) timer_create(0x0, 0x0, &(0x7f0000000040)) r4 = openat$random(0xffffffffffffff9c, 0x0, 0x40800, 0x0) ioctl$RNDADDENTROPY(r4, 0x40085203, &(0x7f000000fec0)=ANY=[@ANYBLOB]) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=@newsa={0x13c, 0x10, 0x713, 0x70bd26, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in=@dev={0xac, 0x14, 0x14, 0x13}, 0x4e22, 0x1, 0x0, 0x3, 0x2, 0x0, 0x0, 0x3a, 0x0, 0xee01}, {@in6=@local, 0x0, 0x32}, @in=@empty, {0x0, 0x0, 0x6, 0xa, 0xa, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x2, 0xfffffffffffffff8}, {0xc, 0x7, 0x2}, 0x70bd29, 0x0, 0x2, 0x1, 0x0, 0x68}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) 4.43214308s ago: executing program 1 (id=3902): mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4000) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', 0x0, 0x2208004, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000040), 0x0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r5}, &(0x7f0000000240), &(0x7f0000000280)}, 0x20) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000002bbd0500dbdbdf25020000dd000000010c000000000000000000000000001205b6f706561083504c"], 0x24}}, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup\x00', 0x108) r6 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) ioctl$USBDEVFS_ALLOW_SUSPEND(0xffffffffffffffff, 0x5522) readahead(r4, 0x9, 0x2) ioctl$USBDEVFS_DISCONNECT_CLAIM(r6, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "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"}) ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f0000000340)={'ip6gre0\x00', &(0x7f0000000f00)=@ethtool_per_queue_op={0x4b, 0xf, [0xf68f, 0x8, 0x9, 0x1ff, 0x0, 0x4, 0xe97, 0x4, 0x6, 0xecbf, 0xff, 0x101, 0x7, 0x200, 0x3d, 0x5e, 0x1000, 0xffff, 0xf557, 0x2, 0x5, 0x7c, 0xce, 0x2, 0xffffff6b, 0xe52c, 0xaa8, 0x7ffffffc, 0xd, 0xe9c4, 0xcd8, 0x6e, 0x6, 0x7, 0xd, 0x8a, 0x3, 0x6, 0x3, 0x3, 0x3, 0xfffffffc, 0xfd2, 0x6, 0x8, 0x401, 0xeffff801, 0x2b, 0xa, 0x0, 0x7, 0x8, 0x5, 0x3, 0x6, 0x8, 0x23, 0xff, 0x3, 0x10, 0x3, 0xffffffff, 0x6, 0x5fffffd, 0xd1, 0xf, 0x4, 0xa, 0x0, 0x400, 0x80000000, 0x8000, 0x3, 0x5, 0x2, 0x0, 0x2, 0x1, 0x80, 0x4, 0x2, 0x0, 0xd, 0x2000006, 0x4, 0x8, 0x0, 0x1, 0xfffffffc, 0x12, 0x7ff, 0x7, 0x2, 0xbde, 0x37, 0x3, 0x4, 0x1, 0xa, 0x6, 0x7fff, 0x1, 0x704, 0x33e4, 0x9, 0x6, 0x7fff, 0x6, 0x100, 0x3, 0xfffffffd, 0x2, 0x6, 0x8, 0x6, 0x7, 0x200, 0x9, 0xe, 0x81, 0x0, 0x4, 0x5, 0x5, 0x8, 0x3, 0x1, 0xfffffffa]}}) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) 3.203391949s ago: executing program 2 (id=3903): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0xffffffffffffff3c, &(0x7f0000000100)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000010880)=ANY=[], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000010400)={0x11, 0xc, &(0x7f0000000280)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r2, r1}, 0xc) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r5 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x2000, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000300)={'wlan1\x00'}) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$USBDEVFS_SUBMITURB(r6, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0x0, 0x0, 0x0, 0x7995}, 0xfff7, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) ioctl$USBDEVFS_REAPURB(r6, 0x4004550c, &(0x7f0000000380)) remap_file_pages(&(0x7f00006ca000/0x4000)=nil, 0x4000, 0x0, 0x3, 0x20000) 3.045378833s ago: executing program 1 (id=3904): syz_open_dev$usbfs(0x0, 0x77, 0x41341) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000010c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000100)=ANY=[@ANYRES32=r6, @ANYRES32=r5, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r6}, &(0x7f0000000000), &(0x7f0000000080)=r2}, 0x20) sendmsg$inet(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x22fe0}], 0x1}, 0x0) recvfrom(r3, &(0x7f0000004000)=""/4112, 0xfffffffffffffedc, 0x2080, 0x0, 0x0) 1.751155115s ago: executing program 1 (id=3905): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000240), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000009c0)={'wpan0\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r4, 0x0, 0x0, 0x2, 0x0) mount$cgroup(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000080)={[{@subsystem='pids'}]}) 1.118253ms ago: executing program 2 (id=3906): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x21) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'macsec0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x401, 0xfdfffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x1243, 0x108}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_PORT={0x6, 0x2, 0x1, 0x0, 0x4e22}]}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x44}, 0x1, 0x0, 0x0, 0x20045808}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="6c0100001000130702000000fcdbdf25fc020000000000000000000000000000fc0200000000000000000000000000004e2000004e2306020a0020006c000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="fe8000000000000000000000800000bb000004d532000000fe80000000000000000000000000001a000000000000000000000000000000000c00000000000000080000000000000000000000000000000000000000000000000000001900000043070000000000000400000000000000ffffffffffffff7f0000000000000000000000000000000000000000000000000000000028bd70000035000002000400000000000000000060001200726663343130362867636d28616573292900b3d9fc0eca8e81c30000000000000000000000000000000000000000000000000000000000000000000000000000a000000060000000217d66d38547aa140db8a200000000c538c7cb7a1c00"], 0x16c}, 0x1, 0x0, 0x0, 0x880}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4040aea0, &(0x7f0000000000)=@x86={0x5, 0x5, 0x17, 0x0, 0x4000003, 0xfc, 0x2, 0xc, 0xff, 0x8, 0x6, 0x1, 0x0, 0x7, 0x5, 0x4, 0x72, 0x7, 0xfa, '\x00', 0x3, 0x3}) ioctl$KVM_RUN(r5, 0xae80, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = syz_usb_connect(0x0, 0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000e2793b10d10501200010010203010902120001000000000904"], 0x0) socket(0x10, 0x3, 0x0) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_control_io$lan78xx(r6, 0x0, &(0x7f0000000500)={0x34, &(0x7f0000000180)={0x20, 0xc, 0x2, "08ba"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r6, 0x0, &(0x7f0000001040)={0x34, &(0x7f0000001380)=ANY=[@ANYBLOB="200304000000257ad057"], 0x0, 0x0, 0x0, 0x0, 0x0}) 0s ago: executing program 1 (id=3907): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) socket(0x10, 0x80002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$inet_sctp(0x2, 0x5, 0x84) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW2(r4, 0x402c542c, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000f40), r5) sendmsg$IPVS_CMD_NEW_SERVICE(r5, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010067bd7000fbdbdf25010000005c00018014000300fe80000000000a0000000000000000bb060001000a00000008000600777272000c0007002e000000050000000800090027000000060002001100000008000b00736970000800080009000000060004000015"], 0x70}, 0x1, 0x0, 0x0, 0x20004084}, 0x20008800) syz_open_procfs(0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000000, 0x5d032, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, r0, {0x0, 0x4}, {0xffff, 0xffff}, {0x7, 0xffe5}}}, 0x24}, 0x1, 0x0, 0x0, 0xc0}, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x15) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x488c4}, 0xc000) openat$tun(0xffffffffffffff9c, 0x0, 0xc0100, 0x0) kernel console output (not intermixed with test programs): T6126] hsr_slave_0: left promiscuous mode [ 756.068492][ T6126] hsr_slave_1: left promiscuous mode [ 756.181395][ T6126] veth1_macvtap: left promiscuous mode [ 756.181495][ T6126] veth0_macvtap: left promiscuous mode [ 756.181725][ T6126] veth1_vlan: left promiscuous mode [ 756.183166][ T6126] veth0_vlan: left promiscuous mode [ 758.374411][ T36] kauditd_printk_skb: 9 callbacks suppressed [ 758.374428][ T36] audit: type=1326 audit(1778540373.764:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14164 comm="syz.2.2756" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd939acdd9 code=0x7ffc0000 [ 758.376669][ T36] audit: type=1326 audit(1778540373.764:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14164 comm="syz.2.2756" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd939acdd9 code=0x7ffc0000 [ 758.437021][ T36] audit: type=1326 audit(1778540373.820:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14164 comm="syz.2.2756" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd939acdd9 code=0x7ffc0000 [ 758.437079][ T36] audit: type=1326 audit(1778540373.820:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14164 comm="syz.2.2756" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd939acdd9 code=0x7ffc0000 [ 758.437115][ T36] audit: type=1326 audit(1778540373.820:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14164 comm="syz.2.2756" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fcd939acdd9 code=0x7ffc0000 [ 758.437154][ T36] audit: type=1326 audit(1778540373.820:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14164 comm="syz.2.2756" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd939acdd9 code=0x7ffc0000 [ 758.437192][ T36] audit: type=1326 audit(1778540373.820:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14164 comm="syz.2.2756" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd939acdd9 code=0x7ffc0000 [ 758.437440][ T36] audit: type=1326 audit(1778540373.820:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14164 comm="syz.2.2756" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd939acdd9 code=0x7ffc0000 [ 758.438281][ T36] audit: type=1326 audit(1778540373.820:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14164 comm="syz.2.2756" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=76 compat=0 ip=0x7fcd939acdd9 code=0x7ffc0000 [ 758.438333][ T36] audit: type=1326 audit(1778540373.820:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14164 comm="syz.2.2756" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd939acdd9 code=0x7ffc0000 [ 762.424493][ T6126] team0 (unregistering): Port device team_slave_1 removed [ 762.638963][ T6126] team0 (unregistering): Port device team_slave_0 removed [ 771.662960][ T1335] ieee802154 phy0 wpan0: encryption failed: -22 [ 771.663026][ T1335] ieee802154 phy1 wpan1: encryption failed: -22 [ 772.233679][T14233] block device autoloading is deprecated and will be removed. [ 775.723845][ T5326] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 775.740377][ T6126] IPVS: stop unused estimator thread 0... [ 775.949649][ T5326] usb 7-1: Using ep0 maxpacket: 32 [ 775.951950][ T5326] usb 7-1: config 4 has an invalid interface number: 128 but max is 0 [ 775.951974][ T5326] usb 7-1: config 4 has no interface number 0 [ 775.952016][ T5326] usb 7-1: config 4 interface 128 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 775.952039][ T5326] usb 7-1: config 4 interface 128 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 775.952076][ T5326] usb 7-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 775.952097][ T5326] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 776.057044][ T5326] hub 7-1:4.128: USB hub found [ 776.883770][ T5326] hub 7-1:4.128: config failed, can't read hub descriptor (err -90) [ 777.218188][T13061] usb 7-1: USB disconnect, device number 12 [ 777.221349][T14312] netlink: 'syz.0.2798': attribute type 6 has an invalid length. [ 777.221370][T14312] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2798'. [ 780.587681][T14349] netlink: 'syz.0.2808': attribute type 6 has an invalid length. [ 780.587703][T14349] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2808'. [ 780.916745][ T6115] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 781.084638][ T6115] usb 2-1: Using ep0 maxpacket: 8 [ 781.087652][ T6115] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 781.087727][ T6115] usb 2-1: config 179 has no interface number 0 [ 781.088025][ T6115] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 781.088074][ T6115] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 781.088169][ T6115] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 52, changing to 9 [ 781.088234][ T6115] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8241, setting to 1024 [ 781.088259][ T6115] usb 2-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 781.088282][ T6115] usb 2-1: config 179 interface 65 has no altsetting 0 [ 781.088313][ T6115] usb 2-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 781.088333][ T6115] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 781.478597][ T5612] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 781.595676][ T5612] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 781.616017][ T5612] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 781.617608][ T5612] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 781.634144][ T5612] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 782.059306][ T6115] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:179.65/input/input26 [ 782.686100][ T4945] input input26: unable to receive magic message: -71 [ 782.866787][ C1] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -1 [ 782.968819][ T4945] input input26: unable to receive magic message: -71 [ 783.665521][ T6115] usb 2-1: USB disconnect, device number 21 [ 783.665608][ C1] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 783.665642][ C1] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 783.733616][ T4945] input input26: unable to receive magic message: -19 [ 784.474311][ T59] Bluetooth: hci5: command tx timeout [ 786.696196][ T59] Bluetooth: hci5: command tx timeout [ 788.937587][ T59] Bluetooth: hci5: command tx timeout [ 790.959121][T14455] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2830'. [ 791.232382][ T59] Bluetooth: hci5: command tx timeout [ 795.452007][T14493] netlink: 'syz.2.2838': attribute type 6 has an invalid length. [ 795.452030][T14493] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2838'. [ 795.707986][T14362] bridge0: port 1(bridge_slave_0) entered blocking state [ 795.709792][T14362] bridge0: port 1(bridge_slave_0) entered disabled state [ 795.710058][T14362] bridge_slave_0: entered allmulticast mode [ 795.738883][T14362] bridge_slave_0: entered promiscuous mode [ 795.753573][T14362] bridge0: port 2(bridge_slave_1) entered blocking state [ 795.753750][T14362] bridge0: port 2(bridge_slave_1) entered disabled state [ 795.754002][T14362] bridge_slave_1: entered allmulticast mode [ 795.778922][T14362] bridge_slave_1: entered promiscuous mode [ 795.931620][T14362] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 796.980179][T14362] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 797.186062][T14508] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2841'. [ 797.256361][T14362] team0: Port device team_slave_0 added [ 797.273335][T14362] team0: Port device team_slave_1 added [ 797.332617][T14362] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 797.332632][T14362] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 797.332656][T14362] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 797.334845][T14362] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 797.334857][T14362] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 797.334881][T14362] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 797.697128][T14362] hsr_slave_0: entered promiscuous mode [ 797.698240][T14362] hsr_slave_1: entered promiscuous mode [ 797.699007][T14362] debugfs: 'hsr0' already exists in 'hsr' [ 797.699039][T14362] Cannot create hsr debugfs directory [ 802.776553][T14547] netlink: 'syz.0.2849': attribute type 6 has an invalid length. [ 802.776574][T14547] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2849'. [ 802.984540][T14549] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2851'. [ 804.598342][ T5799] bridge_slave_1: left allmulticast mode [ 804.598376][ T5799] bridge_slave_1: left promiscuous mode [ 804.598704][ T5799] bridge0: port 2(bridge_slave_1) entered disabled state [ 806.174004][ T5799] bridge_slave_0: left allmulticast mode [ 806.174051][ T5799] bridge_slave_0: left promiscuous mode [ 806.211025][ T5799] bridge0: port 1(bridge_slave_0) entered disabled state [ 806.315357][T14580] netlink: 'syz.1.2860': attribute type 6 has an invalid length. [ 806.315391][T14580] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2860'. [ 806.418690][T14582] netlink: 10 bytes leftover after parsing attributes in process `syz.1.2861'. [ 806.765790][ T5799] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 806.891956][ T5799] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 806.958540][ T5799] bond0 (unregistering): Released all slaves [ 807.112939][ T5730] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 807.207352][ T59] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 807.286764][ T5730] usb 7-1: Using ep0 maxpacket: 32 [ 807.309054][ T5730] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 807.309085][ T5730] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 807.309122][ T5730] usb 7-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 807.309142][ T5730] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 807.320010][ T5730] usb 7-1: config 0 descriptor?? [ 807.333464][ T5730] hub 7-1:0.0: USB hub found [ 808.683024][ T5730] hub 7-1:0.0: config failed, can't read hub descriptor (err -22) [ 808.683988][T14578] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 808.714008][T14584] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2862'. [ 808.756779][ T5730] usbhid 7-1:0.0: can't add hid device: -71 [ 808.756894][ T5730] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 808.946099][ T5730] usb 7-1: USB disconnect, device number 13 [ 810.990124][ C0] bridge0: received packet on vlan2 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 811.077909][T14611] netlink: 'syz.1.2870': attribute type 6 has an invalid length. [ 811.077930][T14611] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2870'. [ 811.135393][ T5799] hsr_slave_0: left promiscuous mode [ 811.208613][ T5799] hsr_slave_1: left promiscuous mode [ 811.209628][ T5799] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 811.279024][ T5799] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 811.414466][T12903] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 811.607597][T12903] usb 7-1: Using ep0 maxpacket: 16 [ 811.611043][T12903] usb 7-1: unable to get BOS descriptor or descriptor too short [ 811.615994][T12903] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 811.616017][T12903] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 811.621719][T12903] usb 7-1: New USB device found, idVendor=1235, idProduct=9012, bcdDevice= 0.40 [ 811.621752][T12903] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 811.621770][T12903] usb 7-1: Product: syz [ 811.621783][T12903] usb 7-1: Manufacturer: syz [ 811.621795][T12903] usb 7-1: SerialNumber: syz [ 813.622430][T12903] usb 7-1: USB disconnect, device number 14 [ 815.401189][ T5799] team0 (unregistering): Port device team_slave_1 removed [ 815.526490][ T5799] team0 (unregistering): Port device team_slave_0 removed [ 817.475903][T14628] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2877'. [ 817.497262][T14646] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 818.851926][ T5730] usb 1-1: new full-speed USB device number 24 using dummy_hcd [ 820.560925][ T5730] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 226, changing to 4 [ 820.560970][ T5730] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 130, changing to 4 [ 820.563403][ T5730] usb 1-1: New USB device found, idVendor=1235, idProduct=8014, bcdDevice= 0.40 [ 820.563429][ T5730] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 820.563447][ T5730] usb 1-1: Product: syz [ 820.563459][ T5730] usb 1-1: Manufacturer: syz [ 820.563471][ T5730] usb 1-1: SerialNumber: syz [ 821.986036][ T5730] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 821.986603][ T5730] usb 1-1: found format II with max.bitrate = 184, frame size=3623 [ 821.986651][ T5730] usb 1-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 822.375437][ T5730] usb 1-1: USB disconnect, device number 24 [ 823.047851][ T5255] 8021q: adding VLAN 0 to HW filter on device eth5 [ 824.808164][T14707] netlink: 'syz.0.2895': attribute type 6 has an invalid length. [ 824.808188][T14707] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2895'. [ 825.204754][T14711] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2896'. [ 825.205009][T14712] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2896'. [ 826.464888][T14722] input input27: cannot allocate more than FF_MAX_EFFECTS effects [ 827.973655][T14739] netlink: 'syz.1.2903': attribute type 29 has an invalid length. [ 827.974040][T14738] netlink: 'syz.1.2903': attribute type 29 has an invalid length. [ 827.976921][T14738] netlink: 'syz.1.2903': attribute type 29 has an invalid length. [ 828.224856][T14745] netlink: 'syz.6.2905': attribute type 6 has an invalid length. [ 828.224878][T14745] netlink: 104 bytes leftover after parsing attributes in process `syz.6.2905'. [ 829.031630][T14764] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2909'. [ 829.049601][T14764] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2909'. [ 833.144279][T14796] netlink: 'syz.1.2917': attribute type 6 has an invalid length. [ 833.144300][T14796] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2917'. [ 833.294179][T14799] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2919'. [ 833.300182][T14799] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2919'. [ 833.398043][T14362] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 833.492011][T14362] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 833.493223][T14362] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 833.807344][T14362] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 833.820927][T14362] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 834.925543][T14362] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 834.992760][T14362] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 835.205207][T14362] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 837.590212][ T1335] ieee802154 phy0 wpan0: encryption failed: -22 [ 837.590280][ T1335] ieee802154 phy1 wpan1: encryption failed: -22 [ 837.900326][T14362] 8021q: adding VLAN 0 to HW filter on device bond0 [ 838.078759][T14852] netlink: 'syz.1.2929': attribute type 6 has an invalid length. [ 838.078782][T14852] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2929'. [ 838.133990][T14362] 8021q: adding VLAN 0 to HW filter on device team0 [ 838.351462][T12551] bridge0: port 1(bridge_slave_0) entered blocking state [ 838.351595][T12551] bridge0: port 1(bridge_slave_0) entered forwarding state [ 838.535243][ T6126] bridge0: port 2(bridge_slave_1) entered blocking state [ 838.535367][ T6126] bridge0: port 2(bridge_slave_1) entered forwarding state [ 840.646221][ T6126] wlan1: Trigger new scan to find an IBSS to join [ 842.463407][T14877] input input29: cannot allocate more than FF_MAX_EFFECTS effects [ 845.898851][T14895] netlink: 'syz.0.2939': attribute type 6 has an invalid length. [ 845.898873][T14895] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2939'. [ 847.473247][ T5612] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 847.552452][ T5612] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 847.556701][ T5612] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 847.559513][ T5612] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 847.560471][ T5612] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 848.078444][ T6126] wlan1: Trigger new scan to find an IBSS to join [ 849.794087][ T59] Bluetooth: hci2: command tx timeout [ 850.146057][ T1022] wlan1: Creating new IBSS network, BSSID ca:1b:6e:14:19:c6 [ 850.256372][T14935] netlink: 'syz.2.2949': attribute type 6 has an invalid length. [ 850.256388][T14935] netlink: 96 bytes leftover after parsing attributes in process `syz.2.2949'. [ 852.018509][ T59] Bluetooth: hci2: command tx timeout [ 852.168643][T14950] netlink: 'syz.6.2952': attribute type 21 has an invalid length. [ 852.168666][T14950] netlink: 100 bytes leftover after parsing attributes in process `syz.6.2952'. [ 853.316225][T14972] netlink: 'syz.2.2959': attribute type 6 has an invalid length. [ 853.316247][T14972] netlink: 96 bytes leftover after parsing attributes in process `syz.2.2959'. [ 854.607769][ T59] Bluetooth: hci2: command tx timeout [ 856.795984][ T59] Bluetooth: hci2: command tx timeout [ 858.166502][T15006] netlink: 'syz.2.2969': attribute type 6 has an invalid length. [ 858.166524][T15006] netlink: 96 bytes leftover after parsing attributes in process `syz.2.2969'. [ 859.001333][T15023] netlink: 'syz.6.2975': attribute type 10 has an invalid length. [ 859.001356][T15023] netlink: 65015 bytes leftover after parsing attributes in process `syz.6.2975'. [ 859.497014][T15035] IPv6: Can't replace route, no match found [ 860.332406][T14905] bridge0: port 1(bridge_slave_0) entered blocking state [ 860.332498][T14905] bridge0: port 1(bridge_slave_0) entered disabled state [ 860.332728][T14905] bridge_slave_0: entered allmulticast mode [ 860.356562][T14905] bridge_slave_0: entered promiscuous mode [ 860.407902][T14905] bridge0: port 2(bridge_slave_1) entered blocking state [ 860.407967][T14905] bridge0: port 2(bridge_slave_1) entered disabled state [ 860.408155][T14905] bridge_slave_1: entered allmulticast mode [ 860.426310][T14905] bridge_slave_1: entered promiscuous mode [ 863.509108][T14905] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 863.546789][T14905] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 865.238962][T14905] team0: Port device team_slave_0 added [ 865.263806][T14905] team0: Port device team_slave_1 added [ 865.718898][ T42] bridge_slave_1: left allmulticast mode [ 865.718933][ T42] bridge_slave_1: left promiscuous mode [ 865.719192][ T42] bridge0: port 2(bridge_slave_1) entered disabled state [ 865.795870][ T42] bridge_slave_0: left allmulticast mode [ 865.795906][ T42] bridge_slave_0: left promiscuous mode [ 865.797804][ T42] bridge0: port 1(bridge_slave_0) entered disabled state [ 868.441231][ T42] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 869.556643][ T42] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 870.485048][ T42] bond0 (unregistering): Released all slaves [ 870.628459][T14905] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 870.628475][T14905] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 870.628500][T14905] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 870.844229][T14905] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 870.844245][T14905] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 870.844271][T14905] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 871.097594][T14905] hsr_slave_0: entered promiscuous mode [ 871.100334][T14905] hsr_slave_1: entered promiscuous mode [ 871.100942][T14905] debugfs: 'hsr0' already exists in 'hsr' [ 871.100957][T14905] Cannot create hsr debugfs directory [ 871.839351][ T42] hsr_slave_0: left promiscuous mode [ 871.876369][ T42] hsr_slave_1: left promiscuous mode [ 871.932033][ T42] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 871.960901][ T42] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 872.015242][T15146] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3004'. [ 874.669793][ T42] team0 (unregistering): Port device team_slave_1 removed [ 874.695098][ T42] team0 (unregistering): Port device team_slave_0 removed [ 875.130810][ T5255] 8021q: adding VLAN 0 to HW filter on device eth5 [ 876.754651][T15175] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 878.171610][T15193] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3016'. [ 879.842697][T15207] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3019'. [ 879.843311][T15207] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3019'. [ 882.297375][ T2850] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 882.929652][T15219] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 883.094081][ T5255] 8021q: adding VLAN 0 to HW filter on device eth6 [ 883.229229][T15230] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3027'. [ 884.303918][T15243] overlayfs: missing 'lowerdir' [ 884.578010][T15252] netlink: 'syz.2.3031': attribute type 21 has an invalid length. [ 884.578033][T15252] netlink: 100 bytes leftover after parsing attributes in process `syz.2.3031'. [ 885.126029][T15245] team0: entered promiscuous mode [ 885.126064][T15245] team_slave_0: entered promiscuous mode [ 885.132595][T15245] team_slave_1: entered promiscuous mode [ 885.134265][T15245] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 886.814529][T15271] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 887.899361][T15290] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 889.472692][T15307] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 890.557468][T15332] overlayfs: missing 'lowerdir' [ 890.834579][T15332] team0: entered promiscuous mode [ 890.834600][T15332] team_slave_0: entered promiscuous mode [ 890.834749][T15332] team_slave_1: entered promiscuous mode [ 890.835563][T15332] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 890.886027][T14905] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 890.934986][T14905] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 890.945260][T14905] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 891.012643][T14905] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 891.013829][T14905] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 891.596857][T14905] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 892.027419][T15350] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 892.103034][T14905] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 892.255885][T14905] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 893.260287][T12903] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 893.426984][T12903] usb 1-1: Using ep0 maxpacket: 32 [ 893.430894][T12903] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 893.430924][T12903] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 893.430959][T12903] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 893.430980][T12903] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 893.446627][T12903] usb 1-1: config 0 descriptor?? [ 893.474814][T12903] hub 1-1:0.0: USB hub found [ 893.680512][T12903] hub 1-1:0.0: 1 port detected [ 893.710300][T14905] 8021q: adding VLAN 0 to HW filter on device bond0 [ 894.063078][T14905] 8021q: adding VLAN 0 to HW filter on device team0 [ 894.303419][ T59] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 894.303475][ T59] CPU: 0 UID: 0 PID: 59 Comm: kworker/u9:0 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 894.303503][ T59] Tainted: [L]=SOFTLOCKUP [ 894.303510][ T59] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 894.303523][ T59] Workqueue: hci1 hci_rx_work [ 894.303556][ T59] Call Trace: [ 894.303566][ T59] [ 894.303578][ T59] dump_stack_lvl+0xe8/0x150 [ 894.303616][ T59] sysfs_create_dir_ns+0x271/0x2a0 [ 894.303647][ T59] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 894.303671][ T59] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 894.303696][ T59] ? __rcu_read_unlock+0x83/0xe0 [ 894.303723][ T59] ? rt_spin_unlock+0x160/0x200 [ 894.303744][ T59] kobject_add_internal+0x631/0xd10 [ 894.303780][ T59] kobject_add+0x163/0x240 [ 894.303811][ T59] ? __pfx_kobject_add+0x10/0x10 [ 894.303843][ T59] ? get_device_parent+0x370/0x3a0 [ 894.303871][ T59] device_add+0x408/0xbb0 [ 894.303895][ T59] hci_conn_add_sysfs+0xd5/0x210 [ 894.303921][ T59] le_conn_complete_evt+0x10e6/0x16b0 [ 894.303961][ T59] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 894.303987][ T59] ? irqentry_exit+0x218/0x760 [ 894.304009][ T59] ? rcu_is_watching+0x15/0xb0 [ 894.304121][ T59] ? skb_pull_data+0xfb/0x200 [ 894.304153][ T59] hci_le_conn_complete_evt+0x187/0x470 [ 894.304191][ T59] hci_event_packet+0x659/0xef0 [ 894.304221][ T59] ? __pfx____migrate_enable+0x10/0x10 [ 894.304243][ T59] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 894.304267][ T59] ? __pfx_hci_event_packet+0x10/0x10 [ 894.304289][ T59] ? preempt_schedule_common+0x82/0xd0 [ 894.304312][ T59] ? preempt_schedule_thunk+0x16/0x30 [ 894.304343][ T59] ? hci_send_to_monitor+0xe2/0x590 [ 894.304373][ T59] hci_rx_work+0x3ee/0x1040 [ 894.304397][ T59] ? preempt_schedule_thunk+0x16/0x30 [ 894.304426][ T59] ? process_scheduled_works+0xa70/0x1860 [ 894.304450][ T59] process_scheduled_works+0xb5d/0x1860 [ 894.304504][ T59] ? __pfx_process_scheduled_works+0x10/0x10 [ 894.304532][ T59] ? assign_work+0x3d5/0x5e0 [ 894.304558][ T59] worker_thread+0xa53/0xfc0 [ 894.304614][ T59] kthread+0x388/0x470 [ 894.304639][ T59] ? __pfx_worker_thread+0x10/0x10 [ 894.304657][ T59] ? __pfx_kthread+0x10/0x10 [ 894.304683][ T59] ret_from_fork+0x514/0xb70 [ 894.304709][ T59] ? __pfx_ret_from_fork+0x10/0x10 [ 894.304731][ T59] ? __switch_to+0xc79/0x1410 [ 894.304760][ T59] ? __pfx_kthread+0x10/0x10 [ 894.304785][ T59] ret_from_fork_asm+0x1a/0x30 [ 894.304826][ T59] [ 894.305223][ T59] kobject: kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 894.305505][ T59] Bluetooth: hci1: failed to register connection device [ 894.950646][ T44] bridge0: port 1(bridge_slave_0) entered blocking state [ 894.950775][ T44] bridge0: port 1(bridge_slave_0) entered forwarding state [ 894.972111][T12903] hub 1-1:0.0: hub_hub_status failed (err = -32) [ 894.972145][T12903] hub 1-1:0.0: config failed, can't get hub status (err -32) [ 895.036119][T12903] usbhid 1-1:0.0: can't add hid device: -32 [ 895.036574][T12903] usbhid 1-1:0.0: probe with driver usbhid failed with error -32 [ 895.063129][ T44] bridge0: port 2(bridge_slave_1) entered blocking state [ 895.063257][ T44] bridge0: port 2(bridge_slave_1) entered forwarding state [ 895.879338][T15403] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 896.312644][T13150] usb 1-1: USB disconnect, device number 25 [ 897.209520][T15435] overlayfs: missing 'lowerdir' [ 897.270523][T15438] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 897.320899][T15435] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 897.395754][T14905] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 898.219817][T14905] veth0_vlan: entered promiscuous mode [ 898.262206][T14905] veth1_vlan: entered promiscuous mode [ 898.460953][T14905] veth0_macvtap: entered promiscuous mode [ 898.479627][T14905] veth1_macvtap: entered promiscuous mode [ 898.510141][T14905] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 898.585705][T14905] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 898.618521][ T5799] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 898.621563][ T5799] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 898.621731][ T5799] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 898.621765][ T5799] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 898.728037][T15467] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 900.343744][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 900.343768][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 900.470927][ T1134] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 900.470948][ T1134] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 901.523928][ T59] Bluetooth: hci1: command 0x0406 tx timeout [ 901.550422][T15497] netlink: 'syz.1.3102': attribute type 6 has an invalid length. [ 901.550446][T15497] netlink: 96 bytes leftover after parsing attributes in process `syz.1.3102'. [ 902.316743][T15528] overlayfs: missing 'lowerdir' [ 902.359620][T15528] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 902.965482][ T1335] ieee802154 phy0 wpan0: encryption failed: -22 [ 902.965547][ T1335] ieee802154 phy1 wpan1: encryption failed: -22 [ 903.151672][T15534] netlink: 'syz.0.3115': attribute type 6 has an invalid length. [ 903.151702][T15534] netlink: 96 bytes leftover after parsing attributes in process `syz.0.3115'. [ 903.543794][ T59] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 903.609061][ T59] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 903.631522][ T59] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 903.661124][ T59] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 903.664347][ T59] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 904.831014][T15565] netlink: 'syz.0.3126': attribute type 6 has an invalid length. [ 904.831028][T15565] netlink: 96 bytes leftover after parsing attributes in process `syz.0.3126'. [ 905.951469][ T59] Bluetooth: hci5: command tx timeout [ 906.337431][T15592] netlink: 'syz.6.3136': attribute type 6 has an invalid length. [ 906.337451][T15592] netlink: 96 bytes leftover after parsing attributes in process `syz.6.3136'. [ 906.483246][ T1022] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 906.675819][T15596] kvm: requested 72076 ns i8254 timer period limited to 200000 ns [ 906.695004][T15596] kvm: requested 55314 ns i8254 timer period limited to 200000 ns [ 907.614853][T15623] netlink: 'syz.1.3146': attribute type 6 has an invalid length. [ 907.614870][T15623] netlink: 96 bytes leftover after parsing attributes in process `syz.1.3146'. [ 908.170763][T15635] overlayfs: missing 'lowerdir' [ 908.181076][ T59] Bluetooth: hci5: command tx timeout [ 908.633291][ T6597] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 908.695244][ T1022] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 908.796840][ T6597] usb 4-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 908.796858][ T6597] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 908.796868][ T6597] usb 4-1: Product: syz [ 908.796880][ T6597] usb 4-1: Manufacturer: syz [ 908.796893][ T6597] usb 4-1: SerialNumber: syz [ 908.801166][ T6597] r8152-cfgselector 4-1: Unknown version 0x0000 [ 908.801182][ T6597] r8152-cfgselector 4-1: config 0 descriptor?? [ 909.029112][ T6597] r8152-cfgselector 4-1: Unknown version 0x0000 [ 909.029574][ T6597] r8152-cfgselector 4-1: No union descriptors [ 909.076773][ T6597] r8152-cfgselector 4-1: USB disconnect, device number 3 [ 909.131586][T15635] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 910.147211][ T1022] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 910.365858][T15652] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 910.397045][ T59] Bluetooth: hci5: command tx timeout [ 910.885804][T15661] netlink: 'syz.1.3156': attribute type 6 has an invalid length. [ 910.885832][T15661] netlink: 96 bytes leftover after parsing attributes in process `syz.1.3156'. [ 911.767883][ T1022] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 912.311831][T15688] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3163'. [ 912.312013][T15688] nbd: must specify a device to reconfigure [ 912.638018][ T59] Bluetooth: hci5: command tx timeout [ 913.420963][T15697] overlayfs: missing 'lowerdir' [ 913.491358][T15699] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 913.763178][T15698] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 916.545891][ T6597] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 916.754919][ T6597] usb 2-1: Using ep0 maxpacket: 32 [ 916.763239][ T6597] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 916.763269][ T6597] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 916.763306][ T6597] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 916.763326][ T6597] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 916.841347][ T6597] usb 2-1: config 0 descriptor?? [ 916.874515][ T6597] hub 2-1:0.0: USB hub found [ 916.975019][ T42] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 917.084383][ T6597] hub 2-1:0.0: 1 port detected [ 917.629028][ T59] Bluetooth: hci6: Ignoring HCI_Connection_Complete for existing connection [ 918.791914][ T6597] hub 2-1:0.0: hub_hub_status failed (err = -32) [ 918.791941][ T6597] hub 2-1:0.0: config failed, can't get hub status (err -32) [ 918.819777][ T6597] usbhid 2-1:0.0: can't add hid device: -32 [ 918.819894][ T6597] usbhid 2-1:0.0: probe with driver usbhid failed with error -32 [ 919.362362][ T6599] usb 2-1: USB disconnect, device number 22 [ 919.542858][ T1022] vlan2: left allmulticast mode [ 919.543024][ T1022] geneve0: left allmulticast mode [ 919.543167][ T1022] vlan2: left promiscuous mode [ 919.543179][ T1022] geneve0: left promiscuous mode [ 919.566291][ T1022] bridge0: port 3(vlan2) entered disabled state [ 919.675669][ T1022] bridge_slave_1: left allmulticast mode [ 919.675693][ T1022] bridge_slave_1: left promiscuous mode [ 919.675929][ T1022] bridge0: port 2(bridge_slave_1) entered disabled state [ 919.783728][ T1022] bridge_slave_0: left allmulticast mode [ 919.783763][ T1022] bridge_slave_0: left promiscuous mode [ 919.784001][ T1022] bridge0: port 1(bridge_slave_0) entered disabled state [ 920.196997][T15765] overlayfs: missing 'lowerdir' [ 921.231081][T15773] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 921.286126][ T1022] bond1 (unregistering): (slave bridge1): Releasing active interface [ 921.403505][ T1022] bond2 (unregistering): (slave bridge2): Releasing active interface [ 921.531872][ T1022] bond3 (unregistering): (slave bridge3): Releasing active interface [ 921.660071][ T1022] bond4 (unregistering): (slave bridge4): Releasing active interface [ 921.852693][ T1022] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 921.937936][ T1022] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 921.961097][ T1022] bond0 (unregistering): Released all slaves [ 921.967211][ T1022] bond1 (unregistering): Released all slaves [ 921.979289][ T1022] bond2 (unregistering): Released all slaves [ 921.990159][ T1022] bond3 (unregistering): Released all slaves [ 922.000997][ T1022] bond4 (unregistering): Released all slaves [ 922.063659][T15766] team0: entered promiscuous mode [ 922.063675][T15766] team_slave_0: entered promiscuous mode [ 922.063767][T15766] team_slave_1: entered promiscuous mode [ 922.064213][T15766] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 922.150273][ T5255] 8021q: adding VLAN 0 to HW filter on device eth5 [ 923.473963][T15539] bridge0: port 1(bridge_slave_0) entered blocking state [ 923.474291][T15539] bridge0: port 1(bridge_slave_0) entered disabled state [ 923.474539][T15539] bridge_slave_0: entered allmulticast mode [ 923.499156][T15539] bridge_slave_0: entered promiscuous mode [ 923.502776][T15539] bridge0: port 2(bridge_slave_1) entered blocking state [ 923.502910][T15539] bridge0: port 2(bridge_slave_1) entered disabled state [ 923.503098][T15539] bridge_slave_1: entered allmulticast mode [ 923.507886][T15539] bridge_slave_1: entered promiscuous mode [ 923.508722][ T10] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 923.802893][T15803] overlayfs: missing 'lowerdir' [ 924.071906][T15801] team0: entered promiscuous mode [ 924.071930][T15801] team_slave_0: entered promiscuous mode [ 924.072067][T15801] team_slave_1: entered promiscuous mode [ 924.073282][T15801] 8021q: adding VLAN 0 to HW filter on device team0 [ 924.073569][T15801] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 924.118148][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 924.220738][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 924.220817][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 924.221050][ T10] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 924.221097][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 924.573389][ T10] usb 2-1: config 0 descriptor?? [ 924.592919][ T10] hub 2-1:0.0: USB hub found [ 924.794177][ T10] hub 2-1:0.0: 1 port detected [ 925.211706][T15539] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 925.325086][ T5612] Bluetooth: hci6: Ignoring HCI_Connection_Complete for existing connection [ 925.473322][T15539] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 925.873773][ T10] hub 2-1:0.0: hub_hub_status failed (err = -32) [ 925.873799][ T10] hub 2-1:0.0: config failed, can't get hub status (err -32) [ 925.913450][ T10] usbhid 2-1:0.0: can't add hid device: -32 [ 925.913551][ T10] usbhid 2-1:0.0: probe with driver usbhid failed with error -32 [ 926.184492][T15539] team0: Port device team_slave_0 added [ 926.330086][ T1022] hsr_slave_0: left promiscuous mode [ 926.350764][ T1022] hsr_slave_1: left promiscuous mode [ 926.351999][ T1022] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 926.352023][ T1022] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 926.684171][ T1022] veth1_macvtap: left promiscuous mode [ 926.684271][ T1022] veth0_macvtap: left promiscuous mode [ 926.730545][ T1022] veth1_vlan: left promiscuous mode [ 926.730727][ T1022] veth0_vlan: left promiscuous mode [ 926.735946][ T6599] usb 2-1: USB disconnect, device number 23 [ 928.863178][ T1022] team_slave_1 (unregistering): left promiscuous mode [ 928.894514][ T1022] team0 (unregistering): Port device team_slave_1 removed [ 928.904238][ T1022] team_slave_0 (unregistering): left promiscuous mode [ 928.904768][ T6599] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 928.958654][ T1022] team0 (unregistering): Port device team_slave_0 removed [ 929.075714][ T6599] usb 7-1: Using ep0 maxpacket: 32 [ 929.078546][ T6599] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 929.078577][ T6599] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 929.078617][ T6599] usb 7-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 929.078637][ T6599] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 929.102235][ T6599] usb 7-1: config 0 descriptor?? [ 929.120176][ T6599] hub 7-1:0.0: USB hub found [ 929.222629][T15539] team0: Port device team_slave_1 added [ 929.311755][ T5255] 8021q: adding VLAN 0 to HW filter on device eth6 [ 929.339411][ T6599] hub 7-1:0.0: 1 port detected [ 929.821976][ T59] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 929.970224][T15898] netlink: 'syz.3.3209': attribute type 6 has an invalid length. [ 929.970245][T15898] netlink: 96 bytes leftover after parsing attributes in process `syz.3.3209'. [ 929.984755][T15539] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 929.984771][T15539] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 929.984797][T15539] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 930.007344][T15539] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 930.007361][T15539] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 930.007386][T15539] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 930.149399][T15900] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 930.464375][T15539] hsr_slave_0: entered promiscuous mode [ 930.467983][T15539] hsr_slave_1: entered promiscuous mode [ 930.472009][T15539] debugfs: 'hsr0' already exists in 'hsr' [ 930.472035][T15539] Cannot create hsr debugfs directory [ 930.498773][ T6599] hub 7-1:0.0: hub_hub_status failed (err = -32) [ 930.498799][ T6599] hub 7-1:0.0: config failed, can't get hub status (err -32) [ 930.821928][ T6599] usbhid 7-1:0.0: can't add hid device: -32 [ 930.822040][ T6599] usbhid 7-1:0.0: probe with driver usbhid failed with error -32 [ 932.206616][T13150] usb 7-1: USB disconnect, device number 15 [ 932.214570][ T1022] IPVS: stop unused estimator thread 0... [ 932.356676][T15935] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 932.412574][ T6599] wlan1: authenticate with 08:02:11:00:00:00 (local address=08:02:11:00:00:01) [ 932.412819][ T6599] wlan1: send auth to 08:02:11:00:00:00 (try 1/3) [ 932.621526][ T12] wlan1: send auth to 08:02:11:00:00:00 (try 2/3) [ 932.754269][ T12] wlan1: send auth to 08:02:11:00:00:00 (try 3/3) [ 932.781929][T15943] netlink: 'syz.0.3220': attribute type 6 has an invalid length. [ 932.781951][T15943] netlink: 96 bytes leftover after parsing attributes in process `syz.0.3220'. [ 932.882027][ T1022] wlan1: authentication with 08:02:11:00:00:00 timed out [ 933.600216][T15973] netlink: 'syz.3.3231': attribute type 6 has an invalid length. [ 933.600236][T15973] netlink: 96 bytes leftover after parsing attributes in process `syz.3.3231'. [ 933.627933][ T10] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 933.788306][ T10] usb 7-1: Using ep0 maxpacket: 32 [ 933.791037][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 933.791067][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 933.791102][ T10] usb 7-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 933.791123][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 933.824743][ T10] usb 7-1: config 0 descriptor?? [ 933.840926][ T10] hub 7-1:0.0: USB hub found [ 934.058820][ T10] hub 7-1:0.0: 1 port detected [ 934.566390][ T5612] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 935.190281][ T10] hub 7-1:0.0: hub_hub_status failed (err = -32) [ 935.190308][ T10] hub 7-1:0.0: config failed, can't get hub status (err -32) [ 935.196613][ T10] usbhid 7-1:0.0: can't add hid device: -32 [ 935.196721][ T10] usbhid 7-1:0.0: probe with driver usbhid failed with error -32 [ 935.519145][T16025] netlink: 'syz.3.3241': attribute type 6 has an invalid length. [ 935.519622][T16025] netlink: 96 bytes leftover after parsing attributes in process `syz.3.3241'. [ 936.742500][ T5731] usb 7-1: USB disconnect, device number 16 [ 936.830923][T15539] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 936.883264][T15539] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 936.894760][T15539] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 936.945815][T15539] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 936.956864][T16063] netlink: 'syz.1.3252': attribute type 6 has an invalid length. [ 936.956887][T16063] netlink: 96 bytes leftover after parsing attributes in process `syz.1.3252'. [ 937.025879][T15539] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 937.091791][T15539] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 937.127060][T15539] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 937.193462][T15539] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 937.289648][T16073] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3254'. [ 937.751042][T16092] netlink: 'syz.0.3257': attribute type 29 has an invalid length. [ 937.761882][T16092] netlink: 'syz.0.3257': attribute type 29 has an invalid length. [ 937.985249][T15539] 8021q: adding VLAN 0 to HW filter on device bond0 [ 938.019530][T15539] 8021q: adding VLAN 0 to HW filter on device team0 [ 938.039607][ T2850] bridge0: port 1(bridge_slave_0) entered blocking state [ 938.039820][ T2850] bridge0: port 1(bridge_slave_0) entered forwarding state [ 938.065645][T16099] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 938.082180][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 938.083250][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 938.087302][ T10] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 938.291593][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 938.294277][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 938.294307][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 938.294343][ T10] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 938.294364][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 938.329571][ T10] usb 4-1: config 0 descriptor?? [ 938.365553][ T10] hub 4-1:0.0: USB hub found [ 938.513060][T16110] netlink: 'syz.0.3263': attribute type 6 has an invalid length. [ 938.513082][T16110] netlink: 96 bytes leftover after parsing attributes in process `syz.0.3263'. [ 938.581936][ T10] hub 4-1:0.0: 1 port detected [ 939.113928][ T59] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201' [ 939.113961][ T59] CPU: 0 UID: 0 PID: 59 Comm: kworker/u9:0 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 939.113990][ T59] Tainted: [L]=SOFTLOCKUP [ 939.113996][ T59] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 939.114010][ T59] Workqueue: hci2 hci_rx_work [ 939.114048][ T59] Call Trace: [ 939.114057][ T59] [ 939.114066][ T59] dump_stack_lvl+0xe8/0x150 [ 939.114095][ T59] sysfs_create_dir_ns+0x271/0x2a0 [ 939.114125][ T59] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 939.114149][ T59] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 939.114180][ T59] ? rt_spin_unlock+0x160/0x200 [ 939.114202][ T59] kobject_add_internal+0x631/0xd10 [ 939.114236][ T59] kobject_add+0x163/0x240 [ 939.114266][ T59] ? __pfx_kobject_add+0x10/0x10 [ 939.114298][ T59] ? get_device_parent+0x370/0x3a0 [ 939.114328][ T59] device_add+0x408/0xbb0 [ 939.114352][ T59] hci_conn_add_sysfs+0xd5/0x210 [ 939.114378][ T59] le_conn_complete_evt+0x10e6/0x16b0 [ 939.114415][ T59] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 939.114442][ T59] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 939.114464][ T59] ? lockdep_hardirqs_on+0x7a/0x110 [ 939.114489][ T59] ? skb_pull_data+0xfb/0x200 [ 939.114521][ T59] hci_le_conn_complete_evt+0x187/0x470 [ 939.114553][ T59] hci_event_packet+0x659/0xef0 [ 939.114582][ T59] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 939.114599][ T59] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 939.114622][ T59] ? __pfx_hci_event_packet+0x10/0x10 [ 939.114644][ T59] ? rt_spin_unlock+0x14f/0x200 [ 939.114671][ T59] ? hci_send_to_monitor+0xe2/0x590 [ 939.114702][ T59] hci_rx_work+0x3ee/0x1040 [ 939.114731][ T59] ? process_scheduled_works+0xa70/0x1860 [ 939.114755][ T59] process_scheduled_works+0xb5d/0x1860 [ 939.114808][ T59] ? __pfx_process_scheduled_works+0x10/0x10 [ 939.114835][ T59] ? assign_work+0x3d5/0x5e0 [ 939.114861][ T59] worker_thread+0xa53/0xfc0 [ 939.114910][ T59] kthread+0x388/0x470 [ 939.114934][ T59] ? __pfx_worker_thread+0x10/0x10 [ 939.114953][ T59] ? __pfx_kthread+0x10/0x10 [ 939.114977][ T59] ret_from_fork+0x514/0xb70 [ 939.115002][ T59] ? __pfx_ret_from_fork+0x10/0x10 [ 939.115023][ T59] ? __switch_to+0xc79/0x1410 [ 939.115063][ T59] ? __pfx_kthread+0x10/0x10 [ 939.115088][ T59] ret_from_fork_asm+0x1a/0x30 [ 939.115130][ T59] [ 939.115226][ T59] kobject: kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 939.115268][ T59] Bluetooth: hci2: failed to register connection device [ 939.819611][ T10] hub 4-1:0.0: hub_hub_status failed (err = -32) [ 939.819639][ T10] hub 4-1:0.0: config failed, can't get hub status (err -32) [ 939.913112][ T10] usbhid 4-1:0.0: can't add hid device: -32 [ 939.913189][ T10] usbhid 4-1:0.0: probe with driver usbhid failed with error -32 [ 940.730126][T15539] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 940.898440][T15539] veth0_vlan: entered promiscuous mode [ 940.994744][T15539] veth1_vlan: entered promiscuous mode [ 941.112902][T15539] veth0_macvtap: entered promiscuous mode [ 941.124647][T15539] veth1_macvtap: entered promiscuous mode [ 941.300833][T15539] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 941.308424][T16149] netlink: 'syz.6.3270': attribute type 29 has an invalid length. [ 941.339706][T15809] usb 4-1: USB disconnect, device number 4 [ 941.400131][T16149] netlink: 'syz.6.3270': attribute type 29 has an invalid length. [ 941.423240][T15539] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 941.539892][T14222] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 941.543057][T14222] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 941.544538][T14222] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 941.544793][T14222] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 941.610693][T16150] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3269'. [ 942.402729][T16159] netlink: 'syz.6.3274': attribute type 6 has an invalid length. [ 942.402753][T16159] netlink: 96 bytes leftover after parsing attributes in process `syz.6.3274'. [ 942.606014][T12551] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 942.606034][T12551] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 944.587480][T16178] netlink: 'syz.3.3281': attribute type 29 has an invalid length. [ 944.588076][T16181] netlink: 'syz.3.3281': attribute type 29 has an invalid length. [ 944.661813][T16182] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3282'. [ 944.694936][ T1140] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 944.694955][ T1140] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 946.310229][ T5612] Bluetooth: hci2: command 0x0406 tx timeout [ 948.527980][T16215] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 951.121162][ T6126] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 952.985138][T16250] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 953.417239][T16256] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 953.489163][T16257] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 956.458267][ T5612] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 956.510151][ T5612] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 956.515153][ T5612] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 956.527693][ T5612] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 956.530314][ T5612] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 956.914327][T16274] overlayfs: missing 'lowerdir' [ 957.093746][T16275] team0: entered promiscuous mode [ 957.093792][T16275] team_slave_0: entered promiscuous mode [ 957.094682][T16275] team_slave_1: entered promiscuous mode [ 957.100731][T16275] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 958.782935][ T5612] Bluetooth: hci4: command tx timeout [ 960.162368][T16305] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3321'. [ 961.635416][ T5612] Bluetooth: hci4: command tx timeout [ 961.978778][T16313] overlayfs: missing 'lowerdir' [ 962.420586][T16314] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 963.489881][T16337] netlink: 132 bytes leftover after parsing attributes in process `syz.6.3333'. [ 963.516964][ T6599] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 963.642083][T16259] bridge0: port 1(bridge_slave_0) entered blocking state [ 963.642205][T16259] bridge0: port 1(bridge_slave_0) entered disabled state [ 963.642422][T16259] bridge_slave_0: entered allmulticast mode [ 963.645303][T16259] bridge_slave_0: entered promiscuous mode [ 963.648907][T16259] bridge0: port 2(bridge_slave_1) entered blocking state [ 963.649129][T16259] bridge0: port 2(bridge_slave_1) entered disabled state [ 963.649646][T16259] bridge_slave_1: entered allmulticast mode [ 963.652076][T16259] bridge_slave_1: entered promiscuous mode [ 963.687876][ T6599] usb 3-1: Using ep0 maxpacket: 32 [ 963.690036][ T6599] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 963.690065][ T6599] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 963.690102][ T6599] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 963.690121][ T6599] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 963.699426][ T6599] usb 3-1: config 0 descriptor?? [ 963.707760][ T6599] hub 3-1:0.0: USB hub found [ 963.715042][T16259] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 963.724884][T16259] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 963.827540][ T59] Bluetooth: hci4: command tx timeout [ 963.972197][T16259] team0: Port device team_slave_0 added [ 963.983673][T16259] team0: Port device team_slave_1 added [ 964.101907][T16259] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 964.102031][T16259] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 964.102057][T16259] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 964.145668][ T6599] hub 3-1:0.0: config failed, can't read hub descriptor (err -22) [ 964.191619][ T6599] usbhid 3-1:0.0: can't add hid device: -71 [ 964.191738][ T6599] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 964.192939][T16259] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 964.192952][T16259] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 964.192990][T16259] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 964.239545][ T6599] usb 3-1: USB disconnect, device number 28 [ 966.108584][ T59] Bluetooth: hci4: command tx timeout [ 966.249206][T16259] hsr_slave_0: entered promiscuous mode [ 966.250752][T16259] hsr_slave_1: entered promiscuous mode [ 966.254763][T16259] debugfs: 'hsr0' already exists in 'hsr' [ 966.254790][T16259] Cannot create hsr debugfs directory [ 968.645315][ T1335] ieee802154 phy0 wpan0: encryption failed: -22 [ 968.645396][ T1335] ieee802154 phy1 wpan1: encryption failed: -22 [ 969.084252][ T10] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 971.117329][ T10] usb 7-1: Using ep0 maxpacket: 32 [ 971.150964][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 971.150984][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 971.151004][ T10] usb 7-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 971.151015][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 971.156766][ T10] usb 7-1: config 0 descriptor?? [ 971.214562][ T10] hub 7-1:0.0: USB hub found [ 971.616101][ T10] hub 7-1:0.0: config failed, can't read hub descriptor (err -90) [ 971.802720][T16401] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 971.848006][ T10] usbhid 7-1:0.0: can't add hid device: -71 [ 971.848127][ T10] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 971.895550][ T10] usb 7-1: USB disconnect, device number 17 [ 974.240589][ T49] kworker/1:1 (49) used greatest stack depth: 17800 bytes left [ 979.691793][T16433] netlink: 'syz.3.3366': attribute type 29 has an invalid length. [ 979.708182][T16433] netlink: 'syz.3.3366': attribute type 29 has an invalid length. [ 980.063581][T16435] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3367'. [ 980.099250][T16444] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 984.259754][ T6126] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 984.831093][ T66] bridge0: port 4(erspan0) entered disabled state [ 984.870808][ T66] vlan2: left allmulticast mode [ 984.870830][ T66] geneve0: left allmulticast mode [ 984.870860][ T66] vlan2: left promiscuous mode [ 984.870871][ T66] geneve0: left promiscuous mode [ 984.871305][ T66] bridge0: port 3(vlan2) entered disabled state [ 984.958298][ T66] bridge_slave_1: left allmulticast mode [ 984.958344][ T66] bridge_slave_1: left promiscuous mode [ 984.972049][ T66] bridge0: port 2(bridge_slave_1) entered disabled state [ 985.066328][ T66] bridge_slave_0: left allmulticast mode [ 985.066361][ T66] bridge_slave_0: left promiscuous mode [ 985.076065][ T66] bridge0: port 1(bridge_slave_0) entered disabled state [ 986.123810][T16490] overlayfs: missing 'lowerdir' [ 986.361158][ T66] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 986.439236][ T66] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 986.461192][ T66] bond0 (unregistering): Released all slaves [ 986.485042][ T66] bond1 (unregistering): Released all slaves [ 986.553550][T16476] netlink: 'syz.3.3377': attribute type 29 has an invalid length. [ 986.581606][T16481] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 986.581743][T16486] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3380'. [ 986.593368][T16490] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 988.458831][ T66] tipc: Left network mode [ 990.426933][T16508] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3388'. [ 990.821548][ T5731] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 991.029537][ T5731] usb 2-1: device descriptor read/64, error -71 [ 991.045081][T16259] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 991.084257][T16259] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 991.085876][T16259] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 991.205598][T16259] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 991.279164][ T5731] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 991.401129][T16259] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 991.418403][ T5731] usb 2-1: device descriptor read/64, error -71 [ 991.457218][T16259] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 991.459794][T16259] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 991.538689][ T5731] usb usb2-port1: attempt power cycle [ 991.553117][T16259] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 991.931149][ T66] hsr_slave_0: left promiscuous mode [ 991.952462][ T5731] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 991.974025][ T66] hsr_slave_1: left promiscuous mode [ 991.975205][ T66] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 991.986707][ T5731] usb 2-1: device descriptor read/8, error -71 [ 992.038127][ T6597] usb 3-1: new full-speed USB device number 29 using dummy_hcd [ 992.143230][ T66] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 992.237485][ T6597] usb 3-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 992.237515][ T6597] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 992.237532][ T6597] usb 3-1: Product: syz [ 992.237544][ T6597] usb 3-1: Manufacturer: syz [ 992.237556][ T6597] usb 3-1: SerialNumber: syz [ 992.241832][ T5731] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 992.263160][ T5731] usb 2-1: device descriptor read/8, error -71 [ 992.299343][ T6597] r8152-cfgselector 3-1: Unknown version 0x0000 [ 992.299360][ T6597] r8152-cfgselector 3-1: config 0 descriptor?? [ 992.385632][ T5731] usb usb2-port1: unable to enumerate USB device [ 992.526046][ T6597] r8152-cfgselector 3-1: Unknown version 0x0000 [ 992.526650][ T6597] r8152-cfgselector 3-1: No union descriptors [ 992.722540][ T5612] Bluetooth: hci2: command 0x0406 tx timeout [ 992.748249][ T10] r8152-cfgselector 3-1: USB disconnect, device number 29 [ 993.942554][T16556] overlayfs: missing 'lowerdir' [ 994.204579][ T66] team_slave_1 (unregistering): left promiscuous mode [ 994.251878][ T66] team0 (unregistering): Port device team_slave_1 removed [ 994.343743][ T66] team_slave_0 (unregistering): left promiscuous mode [ 994.369857][ T66] team0 (unregistering): Port device team_slave_0 removed [ 995.053139][T16556] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 995.446517][T16259] 8021q: adding VLAN 0 to HW filter on device bond0 [ 997.377445][T16259] 8021q: adding VLAN 0 to HW filter on device team0 [ 997.477132][ T1140] bridge0: port 1(bridge_slave_0) entered blocking state [ 997.477322][ T1140] bridge0: port 1(bridge_slave_0) entered forwarding state [ 997.551383][T13351] bridge0: port 2(bridge_slave_1) entered blocking state [ 997.551527][T13351] bridge0: port 2(bridge_slave_1) entered forwarding state [ 997.731865][T16583] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 1000.287959][ T66] IPVS: stop unused estimator thread 0... [ 1001.446188][ T6599] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 1001.960868][ T6599] usb 7-1: Using ep0 maxpacket: 16 [ 1001.963495][ T6599] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1001.963525][ T6599] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1001.963544][ T6599] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1001.963580][ T6599] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1001.963601][ T6599] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1001.974047][ T6599] usb 7-1: config 0 descriptor?? [ 1002.499754][T16606] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1002.500294][T16606] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1004.114654][ T6599] microsoft 0003:045E:07DA.000C: ignoring exceeding usage max [ 1004.131498][ T6599] hid_parser_main: 7 callbacks suppressed [ 1004.131523][ T6599] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0 [ 1004.131552][ T6599] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0 [ 1004.131578][ T6599] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0 [ 1004.823138][ T6599] input: HID 045e:07da as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:045E:07DA.000C/input/input31 [ 1004.889463][T16259] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1005.144742][ T6599] microsoft 0003:045E:07DA.000C: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.6-1/input0 [ 1005.173266][ T6599] usb 7-1: USB disconnect, device number 18 [ 1005.444352][T16259] veth0_vlan: entered promiscuous mode [ 1005.510914][T16259] veth1_vlan: entered promiscuous mode [ 1005.942635][T16630] fido_id[16630]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/7-1/report_descriptor': No such file or directory [ 1006.118440][T16638] overlayfs: missing 'lowerdir' [ 1006.195601][T16639] team0: entered promiscuous mode [ 1006.195626][T16639] team_slave_0: entered promiscuous mode [ 1006.195775][T16639] team_slave_1: entered promiscuous mode [ 1006.196272][T16639] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1006.507263][T16640] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1006.537477][T16259] veth0_macvtap: entered promiscuous mode [ 1006.570735][T16259] veth1_macvtap: entered promiscuous mode [ 1006.715534][T16259] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1006.767615][T16259] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1006.950640][ T66] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1006.952812][ T66] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1006.952953][ T66] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1006.952973][ T66] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1009.550038][ T5799] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1009.550059][ T5799] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1011.164455][T16666] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 1011.166403][T12903] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 1011.260459][T16674] overlayfs: missing 'lowerdir' [ 1011.499385][T12903] usb 7-1: Using ep0 maxpacket: 16 [ 1011.503003][T12903] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1011.503034][T12903] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1011.503055][T12903] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1011.503102][T12903] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1011.503123][T12903] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1011.564446][T16675] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1011.623122][T12903] usb 7-1: config 0 descriptor?? [ 1012.025441][ T6126] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1012.025462][ T6126] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1012.317304][T12903] microsoft 0003:045E:07DA.000D: ignoring exceeding usage max [ 1012.335041][T12903] microsoft 0003:045E:07DA.000D: unknown main item tag 0x0 [ 1012.335075][T12903] microsoft 0003:045E:07DA.000D: unknown main item tag 0x0 [ 1012.335100][T12903] microsoft 0003:045E:07DA.000D: unknown main item tag 0x0 [ 1012.335125][T12903] microsoft 0003:045E:07DA.000D: unknown main item tag 0x0 [ 1012.335149][T12903] microsoft 0003:045E:07DA.000D: unknown main item tag 0x0 [ 1012.335174][T12903] microsoft 0003:045E:07DA.000D: unknown main item tag 0x0 [ 1012.335198][T12903] microsoft 0003:045E:07DA.000D: unknown main item tag 0x0 [ 1012.335222][T12903] microsoft 0003:045E:07DA.000D: unknown main item tag 0x0 [ 1012.335246][T12903] microsoft 0003:045E:07DA.000D: unknown main item tag 0x0 [ 1012.335270][T12903] microsoft 0003:045E:07DA.000D: unknown main item tag 0x0 [ 1013.148042][T16681] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1013.945180][T12903] microsoft 0003:045E:07DA.000D: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.6-1/input0 [ 1013.945213][T12903] microsoft 0003:045E:07DA.000D: no inputs found [ 1013.945227][T12903] microsoft 0003:045E:07DA.000D: could not initialize ff, continuing anyway [ 1014.157780][T12903] usb 7-1: USB disconnect, device number 19 [ 1015.713575][T16687] fido_id[16687]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 1015.841308][T16698] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3432'. [ 1016.066777][T16698] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3432'. [ 1018.265988][ T44] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1020.224265][T16716] overlayfs: missing 'lowerdir' [ 1020.285532][T16717] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1020.559016][T12903] usb 3-1: new full-speed USB device number 30 using dummy_hcd [ 1020.725179][T12903] usb 3-1: config 0 has an invalid interface number: 120 but max is 0 [ 1020.725206][T12903] usb 3-1: config 0 has no interface number 0 [ 1020.725247][T12903] usb 3-1: config 0 interface 120 altsetting 0 has an endpoint descriptor with address 0x51, changing to 0x1 [ 1020.725272][T12903] usb 3-1: config 0 interface 120 altsetting 0 endpoint 0x1 has invalid maxpacket 44517, setting to 64 [ 1020.725312][T12903] usb 3-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58 [ 1020.725332][T12903] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1020.794023][T12903] usb 3-1: config 0 descriptor?? [ 1020.798989][T16710] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1021.304366][T16720] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1025.868637][T16752] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 1027.934108][ T10] usb 3-1: USB disconnect, device number 30 [ 1028.361425][T16765] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1028.584595][T16771] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3459'. [ 1030.306787][T16777] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3450'. [ 1030.487697][T16777] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3450'. [ 1032.765258][ T5730] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 1032.933529][ T5730] usb 2-1: Using ep0 maxpacket: 32 [ 1032.940404][ T5730] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1032.940434][ T5730] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1032.940469][ T5730] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1032.940490][ T5730] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1032.994989][ T5730] usb 2-1: config 0 descriptor?? [ 1033.026544][ T5730] hub 2-1:0.0: USB hub found [ 1033.157884][ T10] usb 1-1: new full-speed USB device number 26 using dummy_hcd [ 1033.236552][ T5730] hub 2-1:0.0: 1 port detected [ 1033.486439][ T59] Bluetooth: hci6: Ignoring HCI_Connection_Complete for existing connection [ 1033.489608][T13061] usb 3-1: new full-speed USB device number 31 using dummy_hcd [ 1034.336519][ T1335] ieee802154 phy0 wpan0: encryption failed: -22 [ 1034.336575][ T1335] ieee802154 phy1 wpan1: encryption failed: -22 [ 1034.412854][ T5730] hub 2-1:0.0: hub_hub_status failed (err = -32) [ 1034.412934][ T5730] hub 2-1:0.0: config failed, can't get hub status (err -32) [ 1034.476336][T13061] usb 3-1: config 0 has an invalid interface number: 120 but max is 0 [ 1034.476364][T13061] usb 3-1: config 0 has no interface number 0 [ 1034.476407][T13061] usb 3-1: config 0 interface 120 altsetting 0 has an endpoint descriptor with address 0x51, changing to 0x1 [ 1034.476431][T13061] usb 3-1: config 0 interface 120 altsetting 0 endpoint 0x1 has invalid maxpacket 44517, setting to 64 [ 1034.476469][T13061] usb 3-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58 [ 1034.476491][T13061] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1034.481948][ T5730] usbhid 2-1:0.0: can't add hid device: -32 [ 1034.482024][ T5730] usbhid 2-1:0.0: probe with driver usbhid failed with error -32 [ 1034.645723][T13061] usb 3-1: config 0 descriptor?? [ 1034.648854][T16801] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 1035.144857][T16807] overlayfs: missing 'lowerdir' [ 1035.936607][ T6115] usb 2-1: USB disconnect, device number 28 [ 1036.258353][ T59] Bluetooth: hci4: link tx timeout [ 1036.258745][ T59] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1037.591241][ T5730] usb 3-1: USB disconnect, device number 31 [ 1039.010738][ T59] Bluetooth: hci4: command 0x0406 tx timeout [ 1039.111669][ T5730] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 1039.313159][ T5730] usb 3-1: Using ep0 maxpacket: 32 [ 1039.315725][ T5730] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1039.315755][ T5730] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1039.315792][ T5730] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1039.315813][ T5730] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1039.513748][T16853] netlink: 'syz.3.3486': attribute type 6 has an invalid length. [ 1039.513763][T16853] netlink: 112 bytes leftover after parsing attributes in process `syz.3.3486'. [ 1040.462567][ T5730] usb 3-1: config 0 descriptor?? [ 1040.471986][ T5730] hub 3-1:0.0: USB hub found [ 1040.685797][ T5730] hub 3-1:0.0: 1 port detected [ 1041.156057][ T5612] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci5/hci5:201' [ 1041.156085][ T5612] CPU: 1 UID: 0 PID: 5612 Comm: kworker/u9:7 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1041.156112][ T5612] Tainted: [L]=SOFTLOCKUP [ 1041.156118][ T5612] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1041.156130][ T5612] Workqueue: hci5 hci_rx_work [ 1041.156155][ T5612] Call Trace: [ 1041.156160][ T5612] [ 1041.156165][ T5612] dump_stack_lvl+0xe8/0x150 [ 1041.156183][ T5612] sysfs_create_dir_ns+0x271/0x2a0 [ 1041.156211][ T5612] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1041.156235][ T5612] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 1041.156267][ T5612] ? rt_spin_unlock+0x160/0x200 [ 1041.156288][ T5612] kobject_add_internal+0x631/0xd10 [ 1041.156319][ T5612] kobject_add+0x163/0x240 [ 1041.156338][ T5612] ? __pfx_kobject_add+0x10/0x10 [ 1041.156355][ T5612] ? get_device_parent+0x370/0x3a0 [ 1041.156382][ T5612] device_add+0x408/0xbb0 [ 1041.156406][ T5612] hci_conn_add_sysfs+0xd5/0x210 [ 1041.156432][ T5612] le_conn_complete_evt+0x10e6/0x16b0 [ 1041.156470][ T5612] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 1041.156490][ T5612] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1041.156502][ T5612] ? lockdep_hardirqs_on+0x7a/0x110 [ 1041.156516][ T5612] ? skb_pull_data+0xfb/0x200 [ 1041.156536][ T5612] hci_le_conn_complete_evt+0x187/0x470 [ 1041.156568][ T5612] hci_event_packet+0x659/0xef0 [ 1041.156606][ T5612] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1041.156623][ T5612] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 1041.156647][ T5612] ? __pfx_hci_event_packet+0x10/0x10 [ 1041.156660][ T5612] ? rt_spin_unlock+0x14f/0x200 [ 1041.156675][ T5612] ? hci_send_to_monitor+0xe2/0x590 [ 1041.156692][ T5612] hci_rx_work+0x3ee/0x1040 [ 1041.156717][ T5612] ? process_scheduled_works+0xa70/0x1860 [ 1041.156741][ T5612] process_scheduled_works+0xb5d/0x1860 [ 1041.156794][ T5612] ? __pfx_process_scheduled_works+0x10/0x10 [ 1041.156820][ T5612] ? assign_work+0x3d5/0x5e0 [ 1041.156834][ T5612] worker_thread+0xa53/0xfc0 [ 1041.156860][ T5612] kthread+0x388/0x470 [ 1041.156879][ T5612] ? __pfx_worker_thread+0x10/0x10 [ 1041.156896][ T5612] ? __pfx_kthread+0x10/0x10 [ 1041.156921][ T5612] ret_from_fork+0x514/0xb70 [ 1041.156946][ T5612] ? __pfx_ret_from_fork+0x10/0x10 [ 1041.156966][ T5612] ? __switch_to+0xc79/0x1410 [ 1041.156995][ T5612] ? __pfx_kthread+0x10/0x10 [ 1041.157008][ T5612] ret_from_fork_asm+0x1a/0x30 [ 1041.157029][ T5612] [ 1041.157093][ T5612] kobject: kobject_add_internal failed for hci5:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 1041.157140][ T5612] Bluetooth: hci5: failed to register connection device [ 1041.160239][ T5612] Bluetooth: hci5: link tx timeout [ 1041.160454][ T5612] Bluetooth: hci5: killing stalled connection 10:aa:aa:aa:aa:aa [ 1041.181468][ T5612] Bluetooth: hci5: link tx timeout [ 1041.181488][ T5612] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 1041.544288][ T5730] hub 3-1:0.0: hub_hub_status failed (err = -71) [ 1041.544315][ T5730] hub 3-1:0.0: config failed, can't get hub status (err -71) [ 1041.680062][ T5730] usbhid 3-1:0.0: can't add hid device: -71 [ 1041.680137][ T5730] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1041.814096][ T5730] usb 3-1: USB disconnect, device number 32 [ 1042.613821][T13150] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 1042.786052][T13150] usb 4-1: Using ep0 maxpacket: 8 [ 1042.788811][T13150] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1042.796436][T13150] usb 4-1: New USB device found, idVendor=05e1, idProduct=0893, bcdDevice=fd.5b [ 1042.796463][T13150] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1042.802345][T13150] usb 4-1: Product: syz [ 1042.802366][T13150] usb 4-1: Manufacturer: syz [ 1042.802379][T13150] usb 4-1: SerialNumber: syz [ 1042.869314][T13150] usb 4-1: config 0 descriptor?? [ 1042.871524][T16160] usb 1-1: new full-speed USB device number 27 using dummy_hcd [ 1042.906714][T13150] gspca_main: stk014-2.14.0 probing 05e1:0893 [ 1042.906892][T13150] usb 4-1: selecting invalid altsetting 1 [ 1043.038990][T16160] usb 1-1: config 0 has an invalid interface number: 120 but max is 0 [ 1043.039016][T16160] usb 1-1: config 0 has no interface number 0 [ 1043.039058][T16160] usb 1-1: config 0 interface 120 altsetting 0 has an endpoint descriptor with address 0x51, changing to 0x1 [ 1043.039082][T16160] usb 1-1: config 0 interface 120 altsetting 0 endpoint 0x1 has invalid maxpacket 44517, setting to 64 [ 1043.039123][T16160] usb 1-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58 [ 1043.039143][T16160] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1043.108288][T16160] usb 1-1: config 0 descriptor?? [ 1043.138944][T16873] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1043.149286][T13150] gspca_stk014: reg_r err -71 [ 1043.149390][T13150] stk014 4-1:0.0: probe with driver stk014 failed with error -71 [ 1043.174539][T13150] usb 4-1: USB disconnect, device number 5 [ 1043.417236][ T5612] Bluetooth: hci5: command 0x0406 tx timeout [ 1043.866143][T16888] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1043.967107][T16889] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3498'. [ 1046.081974][ T5612] Bluetooth: hci5: command 0x0406 tx timeout [ 1047.081717][T16160] usb 2-1: new full-speed USB device number 29 using dummy_hcd [ 1047.081990][ C0] raw-gadget.0 gadget.1: ignoring, device is not running [ 1047.232910][T16160] usb 2-1: device descriptor read/64, error -32 [ 1049.756931][T15809] usb 3-1: new full-speed USB device number 33 using dummy_hcd [ 1049.990181][T15809] usb 3-1: config index 0 descriptor too short (expected 20362, got 36) [ 1049.990208][T15809] usb 3-1: config 117 has too many interfaces: 199, using maximum allowed: 32 [ 1049.990226][T15809] usb 3-1: config 117 has an invalid descriptor of length 36, skipping remainder of the config [ 1049.990243][T15809] usb 3-1: config 117 has 0 interfaces, different from the descriptor's value: 199 [ 1049.990276][T15809] usb 3-1: New USB device found, idVendor=05ac, idProduct=8240, bcdDevice= 0.00 [ 1049.990295][T15809] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1050.186918][T13150] usb 1-1: USB disconnect, device number 27 [ 1050.340411][T16901] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1050.340778][T16901] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1051.479869][T15809] usb 3-1: string descriptor 0 read error: -71 [ 1051.505321][T15809] usb 3-1: USB disconnect, device number 33 [ 1052.607597][T16936] netlink: 'syz.6.3512': attribute type 4 has an invalid length. [ 1053.554810][ T42] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1057.415716][T16160] usb 7-1: new full-speed USB device number 20 using dummy_hcd [ 1059.513291][T16160] usb 7-1: config 0 has an invalid interface number: 120 but max is 0 [ 1059.513319][T16160] usb 7-1: config 0 has no interface number 0 [ 1059.513360][T16160] usb 7-1: config 0 interface 120 altsetting 0 has an endpoint descriptor with address 0x51, changing to 0x1 [ 1059.513385][T16160] usb 7-1: config 0 interface 120 altsetting 0 endpoint 0x1 has invalid maxpacket 44517, setting to 64 [ 1059.513425][T16160] usb 7-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58 [ 1059.513446][T16160] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1059.615682][T16160] usb 7-1: config 0 descriptor?? [ 1059.632104][T16956] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1059.692135][ T5729] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 1059.861121][ T5729] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1059.861151][ T5729] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1059.861169][ T5729] usb 3-1: Product: syz [ 1059.861182][ T5729] usb 3-1: Manufacturer: syz [ 1059.861195][ T5729] usb 3-1: SerialNumber: syz [ 1059.948761][ T5729] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1060.639734][ T5729] usb 3-1: USB disconnect, device number 34 [ 1061.052209][ T10] usb 3-1: ath9k_htc: Firmware - ath9k_htc/htc_9271-1.4.0.fw download failed [ 1061.086126][ T5729] usb 3-1: ath9k_htc: USB layer deinitialized [ 1064.738074][ T5729] usb 7-1: USB disconnect, device number 20 [ 1065.777659][ T10] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 1066.660597][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 1066.663066][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1066.663096][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1066.663132][ T10] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1066.663153][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1066.720835][ T10] usb 4-1: config 0 descriptor?? [ 1066.732021][ T10] hub 4-1:0.0: USB hub found [ 1066.754839][ T5729] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 1067.474267][ T10] hub 4-1:0.0: 1 port detected [ 1067.494050][ T5729] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1067.494068][ T5729] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1067.494078][ T5729] usb 1-1: Product: syz [ 1067.494084][ T5729] usb 1-1: Manufacturer: syz [ 1067.494091][ T5729] usb 1-1: SerialNumber: syz [ 1067.595055][ T5729] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1067.767872][ T59] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 1067.849186][T15809] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1069.165780][T15809] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 1069.171900][ T10] hub 4-1:0.0: hub_hub_status failed (err = -32) [ 1069.171927][ T10] hub 4-1:0.0: config failed, can't get hub status (err -32) [ 1069.247693][T15809] ath9k_htc: Failed to initialize the device [ 1069.315096][ T10] usbhid 4-1:0.0: can't add hid device: -32 [ 1069.315297][ T10] usbhid 4-1:0.0: probe with driver usbhid failed with error -32 [ 1070.340408][ T5729] usb 1-1: USB disconnect, device number 28 [ 1070.810293][ T10] usb 4-1: USB disconnect, device number 6 [ 1070.858439][ T5729] usb 1-1: ath9k_htc: USB layer deinitialized [ 1076.229959][T17088] netlink: 'syz.3.3552': attribute type 4 has an invalid length. [ 1078.947594][T16160] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 1079.335860][T17097] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1079.646122][T17108] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1079.710281][T17097] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1089.322709][T16781] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1093.504748][T17202] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1093.836046][T17202] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1093.908938][T17202] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1099.273636][T15809] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 1100.247134][ T1335] ieee802154 phy0 wpan0: encryption failed: -22 [ 1100.247201][ T1335] ieee802154 phy1 wpan1: encryption failed: -22 [ 1100.362451][T15809] usb 2-1: Using ep0 maxpacket: 8 [ 1100.365090][T15809] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1100.369646][T15809] usb 2-1: New USB device found, idVendor=05e1, idProduct=0893, bcdDevice=fd.5b [ 1100.369673][T15809] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1100.369691][T15809] usb 2-1: Product: syz [ 1100.369703][T15809] usb 2-1: Manufacturer: syz [ 1100.369716][T15809] usb 2-1: SerialNumber: syz [ 1100.376499][T15809] usb 2-1: config 0 descriptor?? [ 1100.382891][T15809] gspca_main: stk014-2.14.0 probing 05e1:0893 [ 1100.383064][T15809] usb 2-1: selecting invalid altsetting 1 [ 1100.921553][T15809] gspca_stk014: reg_r err -110 [ 1100.921649][T15809] stk014 2-1:0.0: probe with driver stk014 failed with error -110 [ 1101.151511][T17248] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1101.171644][T17248] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1103.709101][T17262] netlink: 'syz.2.3597': attribute type 4 has an invalid length. [ 1104.837125][T13150] usb 2-1: USB disconnect, device number 31 [ 1106.342200][T17275] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3600'. [ 1106.387568][T17275] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3600'. [ 1108.981187][T15809] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 1109.124964][T15809] usb 1-1: device descriptor read/64, error -71 [ 1112.332373][T15809] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 1113.094335][T17314] overlayfs: missing 'lowerdir' [ 1114.769678][T17318] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1116.503076][T17318] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1116.521611][T17318] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1116.906248][ T59] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1116.907074][ T59] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1119.207721][ T5612] Bluetooth: hci1: command tx timeout [ 1121.235278][T16160] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 1121.396743][ T5612] Bluetooth: hci1: command tx timeout [ 1121.588979][T16160] usb 2-1: device descriptor read/64, error -71 [ 1122.546702][T16160] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 1122.685663][T16160] usb 2-1: device descriptor read/64, error -71 [ 1122.803662][T16160] usb usb2-port1: attempt power cycle [ 1124.585249][ T5612] Bluetooth: hci1: command tx timeout [ 1124.740370][T16160] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 1124.897626][T16160] usb 2-1: device descriptor read/8, error -71 [ 1125.030603][T17386] sch_tbf: burst 0 is lower than device lo mtu (18) ! [ 1126.780156][ T59] Bluetooth: hci1: command tx timeout [ 1134.634231][T17450] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3642'. [ 1134.634265][T17450] nbd: must specify a device to reconfigure [ 1136.364641][ T6599] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 1136.563513][T17312] bridge0: port 1(bridge_slave_0) entered blocking state [ 1136.563738][T17312] bridge0: port 1(bridge_slave_0) entered disabled state [ 1136.565349][T17312] bridge_slave_0: entered allmulticast mode [ 1136.569991][T17312] bridge_slave_0: entered promiscuous mode [ 1136.754468][T17312] bridge0: port 2(bridge_slave_1) entered blocking state [ 1136.754662][T17312] bridge0: port 2(bridge_slave_1) entered disabled state [ 1136.754904][T17312] bridge_slave_1: entered allmulticast mode [ 1136.759262][ T6599] usb 2-1: device descriptor read/64, error -71 [ 1136.776141][T17312] bridge_slave_1: entered promiscuous mode [ 1136.895242][T17312] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1136.910331][T17312] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1137.015621][ T6599] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 1137.023155][T17312] team0: Port device team_slave_0 added [ 1137.041804][T17312] team0: Port device team_slave_1 added [ 1137.090814][T17312] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1137.090831][T17312] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1137.090855][T17312] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1137.094041][T17312] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1137.094055][T17312] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1137.094079][T17312] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1137.154513][ T6599] usb 2-1: device descriptor read/64, error -71 [ 1138.466967][ T6599] usb usb2-port1: attempt power cycle [ 1140.115454][T17478] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3649'. [ 1142.451389][T17500] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3656'. [ 1142.452776][T17499] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3653'. [ 1142.452796][T17499] nbd: must specify a device to reconfigure [ 1145.935422][T17312] hsr_slave_0: entered promiscuous mode [ 1145.937132][T17312] hsr_slave_1: entered promiscuous mode [ 1145.937981][T17312] debugfs: 'hsr0' already exists in 'hsr' [ 1145.938002][T17312] Cannot create hsr debugfs directory [ 1150.152231][T17543] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3667'. [ 1150.152457][T17543] nbd: must specify a device to reconfigure [ 1153.162584][T17312] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1153.293844][T17312] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1153.295153][T17312] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1153.607906][T17312] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1153.609631][T17312] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1153.681673][T17312] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1153.683157][T17312] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1153.748126][T17312] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1154.299094][T17573] netlink: 'syz.3.3665': attribute type 4 has an invalid length. [ 1155.425796][T17312] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1155.457043][T17312] 8021q: adding VLAN 0 to HW filter on device team0 [ 1155.473241][T13351] bridge0: port 1(bridge_slave_0) entered blocking state [ 1155.473520][T13351] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1155.557729][T13351] bridge0: port 2(bridge_slave_1) entered blocking state [ 1155.557862][T13351] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1161.512817][T17613] IPv6: Can't replace route, no match found [ 1165.858336][T17312] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1167.022181][ T1335] ieee802154 phy0 wpan0: encryption failed: -22 [ 1167.022246][ T1335] ieee802154 phy1 wpan1: encryption failed: -22 [ 1168.098973][T17312] veth0_vlan: entered promiscuous mode [ 1168.117920][T17312] veth1_vlan: entered promiscuous mode [ 1168.209547][T17312] veth0_macvtap: entered promiscuous mode [ 1168.253275][T17312] veth1_macvtap: entered promiscuous mode [ 1168.286739][T17312] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1168.312998][T17312] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1168.362428][ T4312] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1169.488001][T17693] netlink: 'syz.1.3701': attribute type 6 has an invalid length. [ 1169.488024][T17693] netlink: 96 bytes leftover after parsing attributes in process `syz.1.3701'. [ 1169.548180][ T4312] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1169.555015][ T4312] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1169.559446][ T4312] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1171.875817][ T4312] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1171.875835][ T4312] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1172.173829][ T1134] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1172.173857][ T1134] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1172.250043][T17719] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3709'. [ 1173.275522][ T59] Bluetooth: hci4: command 0x0406 tx timeout [ 1175.346475][T16890] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 1175.506745][T16890] usb 2-1: Using ep0 maxpacket: 16 [ 1175.513060][T16890] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00 [ 1175.513089][T16890] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1175.513107][T16890] usb 2-1: Product: syz [ 1175.513121][T16890] usb 2-1: Manufacturer: syz [ 1175.513133][T16890] usb 2-1: SerialNumber: syz [ 1175.574518][T16890] usb 2-1: config 0 descriptor?? [ 1175.601541][T16890] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 1175.620335][T16890] usb 2-1: Detected FT-X [ 1175.970433][ T59] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1176.008389][ T59] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1176.012006][ T59] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1176.019143][ T59] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1176.045358][ T59] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1176.874094][T16890] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 1178.016634][T16890] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1178.053206][T16890] usb 2-1: USB disconnect, device number 39 [ 1178.402686][T16160] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 1178.737366][T16890] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1178.739796][T16890] ftdi_sio 2-1:0.0: device disconnected [ 1178.750466][T16160] usb 1-1: Using ep0 maxpacket: 8 [ 1178.762125][T16160] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1178.762178][T16160] usb 1-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 1178.762198][T16160] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1179.787108][T16160] usb 1-1: config 0 descriptor?? [ 1180.204821][ T5612] Bluetooth: hci3: command tx timeout [ 1180.302003][T16160] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 1180.512444][T17770] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3722'. [ 1181.404021][T16160] gspca_vc032x: reg_w err -110 [ 1181.404123][T16160] vc032x 1-1:0.0: probe with driver vc032x failed with error -110 [ 1181.504525][T16160] usb 1-1: USB disconnect, device number 31 [ 1182.429909][ T5612] Bluetooth: hci3: command tx timeout [ 1184.007340][T12551] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1185.007674][ T5612] Bluetooth: hci3: command tx timeout [ 1187.555991][ T5612] Bluetooth: hci3: command tx timeout [ 1187.557622][T17800] netlink: 'syz.2.3729': attribute type 4 has an invalid length. [ 1189.134392][T12551] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1189.640786][T17811] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3732'. [ 1189.689135][T16160] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 1189.751355][T16890] usb 2-1: new full-speed USB device number 40 using dummy_hcd [ 1190.671028][T16160] usb 1-1: Using ep0 maxpacket: 8 [ 1190.679408][T16160] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1190.679462][T16160] usb 1-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 1190.679482][T16160] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1190.728015][T16160] usb 1-1: config 0 descriptor?? [ 1190.835075][T16160] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 1190.931903][ T5612] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1190.960694][ T5612] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1190.964975][ T5612] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1190.968958][ T5612] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1191.064310][T17826] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3735'. [ 1191.078269][ T5612] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1191.305423][T17831] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3737'. [ 1192.199462][T16160] gspca_vc032x: reg_r err -110 [ 1192.199554][T16160] vc032x 1-1:0.0: probe with driver vc032x failed with error -110 [ 1192.266831][ T5326] usb 1-1: USB disconnect, device number 32 [ 1192.286050][T12551] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1194.746073][ T59] Bluetooth: hci1: command tx timeout [ 1195.504360][T17861] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3743'. [ 1196.531896][T12551] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1197.475722][ T59] Bluetooth: hci1: command tx timeout [ 1197.942666][T17737] bridge0: port 1(bridge_slave_0) entered blocking state [ 1197.942887][T17737] bridge0: port 1(bridge_slave_0) entered disabled state [ 1197.943142][T17737] bridge_slave_0: entered allmulticast mode [ 1197.979871][T17737] bridge_slave_0: entered promiscuous mode [ 1197.986137][T17737] bridge0: port 2(bridge_slave_1) entered blocking state [ 1197.986256][T17737] bridge0: port 2(bridge_slave_1) entered disabled state [ 1197.987630][T17737] bridge_slave_1: entered allmulticast mode [ 1198.030646][T17737] bridge_slave_1: entered promiscuous mode [ 1198.166283][T17737] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1198.213274][T17737] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1198.361103][T17874] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3746'. [ 1199.374857][T17867] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3744'. [ 1199.467369][T17737] team0: Port device team_slave_0 added [ 1199.494127][T17737] team0: Port device team_slave_1 added [ 1199.584164][T16890] usb 3-1: new full-speed USB device number 35 using dummy_hcd [ 1199.689375][ T59] Bluetooth: hci1: command tx timeout [ 1200.469912][T17737] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1200.469930][T17737] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1200.469955][T17737] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1200.713961][T17737] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1200.713978][T17737] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1200.714004][T17737] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1202.348303][ T59] Bluetooth: hci1: command tx timeout [ 1203.252683][T17906] netlink: 'syz.0.3750': attribute type 4 has an invalid length. [ 1206.820435][T17737] hsr_slave_0: entered promiscuous mode [ 1206.825934][T17737] hsr_slave_1: entered promiscuous mode [ 1206.882842][T17737] debugfs: 'hsr0' already exists in 'hsr' [ 1206.882872][T17737] Cannot create hsr debugfs directory [ 1209.570400][T17920] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3754'. [ 1209.640570][T17920] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3754'. [ 1210.735903][T17928] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3756'. [ 1212.523480][T17945] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3759'. [ 1213.556341][T12551] bridge_slave_1: left allmulticast mode [ 1213.556377][T12551] bridge_slave_1: left promiscuous mode [ 1213.556661][T12551] bridge0: port 2(bridge_slave_1) entered disabled state [ 1213.605827][T12551] bridge_slave_0: left allmulticast mode [ 1213.605863][T12551] bridge_slave_0: left promiscuous mode [ 1213.609120][T12551] bridge0: port 1(bridge_slave_0) entered disabled state [ 1214.383976][T17956] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1214.601357][T12551] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1214.658032][T17956] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1214.660064][T17956] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1215.195862][T12551] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1215.218120][T12551] bond0 (unregistering): Released all slaves [ 1215.278744][ T5255] 8021q: adding VLAN 0 to HW filter on device eth5 [ 1219.036267][T17983] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3765'. [ 1224.432329][T18009] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3771'. [ 1224.515114][T18010] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3771'. [ 1228.671928][T18031] netlink: 'syz.0.3777': attribute type 4 has an invalid length. [ 1231.587843][ T1335] ieee802154 phy0 wpan0: encryption failed: -22 [ 1231.587912][ T1335] ieee802154 phy1 wpan1: encryption failed: -22 [ 1231.801089][T12551] hsr_slave_0: left promiscuous mode [ 1231.856020][T12551] hsr_slave_1: left promiscuous mode [ 1231.942411][T12551] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1231.942440][T12551] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1232.001688][T12551] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1232.001720][T12551] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1233.341729][T12551] veth1_macvtap: left promiscuous mode [ 1233.341830][T12551] veth0_macvtap: left promiscuous mode [ 1233.342068][T12551] veth1_vlan: left promiscuous mode [ 1233.342224][T12551] veth0_vlan: left promiscuous mode [ 1233.594082][T18073] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3788'. [ 1233.663097][T18074] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3788'. [ 1237.060388][T12551] team0 (unregistering): Port device team_slave_1 removed [ 1237.112690][T12551] team0 (unregistering): Port device team_slave_0 removed [ 1237.322531][T18087] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3790'. [ 1238.741746][T18101] netlink: 'syz.0.3795': attribute type 6 has an invalid length. [ 1238.741767][T18101] netlink: 96 bytes leftover after parsing attributes in process `syz.0.3795'. [ 1243.286265][T18125] overlayfs: missing 'lowerdir' [ 1244.532626][T18126] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1244.537005][ T5255] 8021q: adding VLAN 0 to HW filter on device eth6 [ 1245.977792][T18139] netlink: 'syz.2.3804': attribute type 6 has an invalid length. [ 1245.977815][T18139] netlink: 96 bytes leftover after parsing attributes in process `syz.2.3804'. [ 1246.213080][T18142] IPv6: Can't replace route, no match found [ 1247.024860][ T5612] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1247.117564][T18146] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1247.195728][ T5612] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1247.245818][ T5612] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1247.247025][ T5612] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1247.248164][ T5612] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1247.509703][T18148] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1247.511931][T18148] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1248.057930][T18162] netlink: 'syz.1.3806': attribute type 4 has an invalid length. [ 1249.700172][ T59] Bluetooth: hci7: command tx timeout [ 1249.757786][T17819] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wg0": -EINTR [ 1250.444380][ T5612] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 1250.581095][ T5612] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 1250.653083][ T5612] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 1250.778242][ T5612] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 1250.810324][ T5612] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 1251.415183][T18208] overlayfs: missing 'lowerdir' [ 1252.313667][ T59] Bluetooth: hci7: command tx timeout [ 1252.804800][T18209] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1253.295382][ T59] Bluetooth: hci8: command tx timeout [ 1253.440545][T18224] netlink: 'syz.2.3813': attribute type 4 has an invalid length. [ 1255.333146][ T59] Bluetooth: hci7: command tx timeout [ 1255.566601][ T59] Bluetooth: hci8: command tx timeout [ 1257.558843][ T59] Bluetooth: hci7: command tx timeout [ 1257.801792][ T59] Bluetooth: hci8: command tx timeout [ 1257.872217][T12551] bond0 (unregistering): Released all slaves [ 1259.591384][T18272] overlayfs: missing 'lowerdir' [ 1260.658059][ T59] Bluetooth: hci8: command tx timeout [ 1261.005484][T18274] team0: entered promiscuous mode [ 1261.005501][T18274] team_slave_0: entered promiscuous mode [ 1261.005596][T18274] team_slave_1: entered promiscuous mode [ 1261.006051][T18274] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1263.201476][T18281] overlayfs: missing 'lowerdir' [ 1263.944238][T18137] bridge0: port 1(bridge_slave_0) entered blocking state [ 1263.972334][T18137] bridge0: port 1(bridge_slave_0) entered disabled state [ 1263.972613][T18137] bridge_slave_0: entered allmulticast mode [ 1263.979302][T18137] bridge_slave_0: entered promiscuous mode [ 1263.995279][T18137] bridge0: port 2(bridge_slave_1) entered blocking state [ 1263.995499][T18137] bridge0: port 2(bridge_slave_1) entered disabled state [ 1263.995751][T18137] bridge_slave_1: entered allmulticast mode [ 1264.076848][T18137] bridge_slave_1: entered promiscuous mode [ 1265.166727][T18319] overlayfs: missing 'lowerdir' [ 1265.287191][T18320] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1266.057976][T18137] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1266.179556][T18137] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1266.179705][T18323] sch_tbf: burst 0 is lower than device lo mtu (18) ! [ 1266.475454][T18137] team0: Port device team_slave_0 added [ 1266.506676][T18137] team0: Port device team_slave_1 added [ 1266.868331][T18337] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3833'. [ 1267.003181][T18337] overlayfs: overlapping lowerdir path [ 1267.917635][T18137] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1267.917651][T18137] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1267.917670][T18137] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1268.453696][T18343] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3834'. [ 1268.563226][T18344] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3834'. [ 1270.562125][T18137] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1270.562140][T18137] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1270.562163][T18137] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1271.198619][T18367] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3838'. [ 1271.334455][T18367] overlayfs: overlapping lowerdir path [ 1272.272169][T18137] hsr_slave_0: entered promiscuous mode [ 1272.289297][T18137] hsr_slave_1: entered promiscuous mode [ 1272.298926][T18137] debugfs: 'hsr0' already exists in 'hsr' [ 1272.298953][T18137] Cannot create hsr debugfs directory [ 1273.407756][T18376] overlayfs: missing 'lowerdir' [ 1273.733192][T12551] bridge_slave_1: left allmulticast mode [ 1273.733225][T12551] bridge_slave_1: left promiscuous mode [ 1273.743712][T12551] bridge0: port 2(bridge_slave_1) entered disabled state [ 1273.837846][T12551] bridge_slave_0: left allmulticast mode [ 1273.837880][T12551] bridge_slave_0: left promiscuous mode [ 1273.840544][T12551] bridge0: port 1(bridge_slave_0) entered disabled state [ 1274.296184][T18394] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3842'. [ 1274.867559][T18396] netlink: 'syz.0.3843': attribute type 4 has an invalid length. [ 1276.206200][T12551] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1276.331994][T12551] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1276.427507][T12551] bond0 (unregistering): Released all slaves [ 1277.459607][T18421] overlayfs: missing 'lowerdir' [ 1277.527357][T18422] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1279.759985][T12551] hsr_slave_0: left promiscuous mode [ 1279.802732][T12551] hsr_slave_1: left promiscuous mode [ 1279.803844][T12551] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1279.846341][T12551] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1283.052158][T12551] team0 (unregistering): Port device team_slave_1 removed [ 1283.094720][T12551] team0 (unregistering): Port device team_slave_0 removed [ 1283.377950][T18191] bridge0: port 1(bridge_slave_0) entered blocking state [ 1283.378081][T18191] bridge0: port 1(bridge_slave_0) entered disabled state [ 1283.378338][T18191] bridge_slave_0: entered allmulticast mode [ 1283.422028][T18191] bridge_slave_0: entered promiscuous mode [ 1283.515929][T18191] bridge0: port 2(bridge_slave_1) entered blocking state [ 1283.516060][T18191] bridge0: port 2(bridge_slave_1) entered disabled state [ 1283.516291][T18191] bridge_slave_1: entered allmulticast mode [ 1283.526717][T18191] bridge_slave_1: entered promiscuous mode [ 1283.838045][T18191] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1283.956453][T18191] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1284.105829][T18464] overlayfs: missing 'lowerdir' [ 1284.189406][T18465] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1285.403092][T18191] team0: Port device team_slave_0 added [ 1285.419432][T18191] team0: Port device team_slave_1 added [ 1286.520446][ T5731] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 1286.866148][ T5731] usb 2-1: Using ep0 maxpacket: 8 [ 1286.868473][ T5731] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1286.868534][ T5731] usb 2-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 1286.868554][ T5731] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1286.928743][ T5731] usb 2-1: config 0 descriptor?? [ 1286.946442][ T5731] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 1287.265150][ T5731] gspca_vc032x: reg_r err -32 [ 1287.265261][ T5731] vc032x 2-1:0.0: probe with driver vc032x failed with error -32 [ 1287.434037][T18191] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1287.434053][T18191] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1287.434086][T18191] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1287.604634][T18191] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1287.604649][T18191] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1287.604675][T18191] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1287.956163][ T5731] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 1288.129368][T18191] hsr_slave_0: entered promiscuous mode [ 1288.130921][T18191] hsr_slave_1: entered promiscuous mode [ 1288.132061][T18191] debugfs: 'hsr0' already exists in 'hsr' [ 1288.132083][T18191] Cannot create hsr debugfs directory [ 1288.316566][T18137] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1288.362222][ T5731] usb 3-1: Using ep0 maxpacket: 16 [ 1288.379636][ T5731] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00 [ 1288.379664][ T5731] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1288.379680][ T5731] usb 3-1: Product: syz [ 1288.379693][ T5731] usb 3-1: Manufacturer: syz [ 1288.379705][ T5731] usb 3-1: SerialNumber: syz [ 1288.397407][ T5731] usb 3-1: config 0 descriptor?? [ 1288.423730][ T5731] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 1288.425062][ T5731] usb 3-1: Detected FT-X [ 1289.246445][ T5326] usb 2-1: USB disconnect, device number 42 [ 1289.249221][ T5731] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 1289.431111][T18137] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1292.122848][ T5731] ftdi_sio 3-1:0.0: GPIO initialisation failed: -71 [ 1292.134315][ T5731] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1292.146402][ T5731] usb 3-1: USB disconnect, device number 36 [ 1292.199323][T18137] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1292.286414][T18137] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1292.341054][ T5731] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1292.362763][ T5731] ftdi_sio 3-1:0.0: device disconnected [ 1292.450178][T18137] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1292.495214][T18137] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1292.536858][T18137] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1292.567810][T18137] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1294.607274][T18137] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1294.712492][T18516] netlink: 'syz.2.3872': attribute type 4 has an invalid length. [ 1296.444830][T18137] 8021q: adding VLAN 0 to HW filter on device team0 [ 1296.461205][T18524] netlink: 592 bytes leftover after parsing attributes in process `syz.2.3876'. [ 1296.571158][T13351] bridge0: port 1(bridge_slave_0) entered blocking state [ 1296.571318][T13351] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1296.595322][T13351] bridge0: port 2(bridge_slave_1) entered blocking state [ 1296.607336][T13351] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1297.052653][ T1335] ieee802154 phy0 wpan0: encryption failed: -22 [ 1297.052723][ T1335] ieee802154 phy1 wpan1: encryption failed: -22 [ 1298.208120][T18191] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1299.941274][T18191] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1299.965236][T18191] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1300.992121][T18191] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1300.994073][T18191] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1301.029036][T18191] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1301.032798][T18191] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1301.071786][T18191] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1303.554129][T18571] overlayfs: missing 'lowerdir' [ 1303.685647][T18572] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1305.486490][T18191] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1305.659286][T18191] 8021q: adding VLAN 0 to HW filter on device team0 [ 1305.716338][ T1134] bridge0: port 1(bridge_slave_0) entered blocking state [ 1305.716469][ T1134] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1305.789849][ T1134] bridge0: port 2(bridge_slave_1) entered blocking state [ 1305.794600][ T1134] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1305.851828][ T5612] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1305.883724][ T5612] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1305.894660][ T5612] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1305.909444][ T5612] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1305.910161][ T5612] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1307.511351][T18590] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1307.841913][T18593] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1307.844200][T18593] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1308.465760][T18599] netlink: 592 bytes leftover after parsing attributes in process `syz.0.3887'. [ 1310.158837][ T5612] Bluetooth: hci1: command tx timeout [ 1312.417154][ T5612] Bluetooth: hci1: command tx timeout [ 1312.781675][ T5731] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 1312.941465][ T5731] usb 1-1: Using ep0 maxpacket: 8 [ 1312.952774][ T5731] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1312.984090][ T5731] usb 1-1: New USB device found, idVendor=05e1, idProduct=0893, bcdDevice=fd.5b [ 1312.984116][ T5731] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1312.984134][ T5731] usb 1-1: Product: syz [ 1312.984146][ T5731] usb 1-1: Manufacturer: syz [ 1312.984158][ T5731] usb 1-1: SerialNumber: syz [ 1313.056324][ T5731] usb 1-1: config 0 descriptor?? [ 1313.097539][ T5731] gspca_main: stk014-2.14.0 probing 05e1:0893 [ 1313.098325][ T5731] usb 1-1: selecting invalid altsetting 1 [ 1313.281497][T18191] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1313.482212][T18644] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1313.482815][T18644] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1313.663380][ T5731] gspca_stk014: reg_r err -110 [ 1313.663472][ T5731] stk014 1-1:0.0: probe with driver stk014 failed with error -110 [ 1314.227049][T13150] usb 1-1: USB disconnect, device number 33 [ 1314.586924][ T5612] Bluetooth: hci1: command tx timeout [ 1315.146425][ T59] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1316.314912][ T59] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1316.316411][ T59] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1316.405171][ T59] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1316.410021][ T59] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1317.415811][ T5612] Bluetooth: hci1: command tx timeout [ 1318.941749][ T5612] Bluetooth: hci3: command tx timeout [ 1322.108888][ T5612] Bluetooth: hci3: command tx timeout [ 1325.298529][ T5612] Bluetooth: hci3: command tx timeout [ 1326.140715][T18584] bridge0: port 1(bridge_slave_0) entered blocking state [ 1326.140935][T18584] bridge0: port 1(bridge_slave_0) entered disabled state [ 1326.141224][T18584] bridge_slave_0: entered allmulticast mode [ 1326.144101][T18584] bridge_slave_0: entered promiscuous mode [ 1326.186522][T18584] bridge0: port 2(bridge_slave_1) entered blocking state [ 1326.186753][T18584] bridge0: port 2(bridge_slave_1) entered disabled state [ 1326.186970][T18584] bridge_slave_1: entered allmulticast mode [ 1326.190132][T18584] bridge_slave_1: entered promiscuous mode [ 1326.511634][ T37] INFO: task syz.3.3700:17691 blocked for more than 144 seconds. [ 1326.511659][ T37] Tainted: G L syzkaller #0 [ 1326.511669][ T37] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1326.511677][ T37] task:syz.3.3700 state:D stack:27896 pid:17691 tgid:17687 ppid:14905 task_flags:0x400140 flags:0x00080002 [ 1326.511723][ T37] Call Trace: [ 1326.511730][ T37] [ 1326.511741][ T37] __schedule+0x16ec/0x5620 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1326.511795][ T37] ? look_up_lock_class+0x57/0x110 [ 1326.511817][ T37] ? __pfx___schedule+0x10/0x10 [ 1326.511844][ T37] ? schedule+0x90/0x360 [ 1326.511866][ T37] schedule+0x164/0x360 [ 1326.511887][ T37] schedule_timeout+0xc3/0x2c0 [ 1326.511906][ T37] ? __lock_acquire+0x6b5/0x2cf0 [ 1326.512027][ T37] ? __pfx_schedule_timeout+0x10/0x10 [ 1326.512045][ T37] ? do_raw_spin_lock+0x12b/0x2f0 [ 1326.512099][ T37] ? _raw_spin_unlock_irq+0x23/0x50 [ 1326.512119][ T37] ? wait_for_completion+0x274/0x5e0 [ 1326.512142][ T37] wait_for_completion+0x2cc/0x5e0 [ 1326.512171][ T37] ? __pfx_wait_for_completion+0x10/0x10 [ 1326.512197][ T37] ? __flush_work+0x104/0xda0 [ 1326.512222][ T37] __flush_work+0x9e0/0xda0 [ 1326.512239][ T37] ? __flush_work+0x104/0xda0 [ 1326.512262][ T37] ? __pfx___flush_work+0x10/0x10 [ 1326.512281][ T37] ? __pfx_wq_barrier_func+0x10/0x10 [ 1326.512317][ T37] ? flush_[ 1326.512317][ T37] ? flush_work+0xd/0x30 [ 1326.512340][ T37] p9_fd_close+0x226/0x400 [ 1326.512413][ T37] p9_client_create+0x6b4/0xcc0 [ 1326.512476][ T37] ? __pfx_p9_client_create+0x10/0x10 [ 1326.512521][ T37] v9fs_session_init+0x46/0xe60 [ 1326.512598][ T37] ? __kasan_kmalloc+0x93/0xb0 [ 1326.512667][ T37] ? __kmalloc_cache_noprof+0x3a6/0x690 [ 1326.512717][ T37] ? vfs_parse_monolithic_sep+0x290/0x360 [ 1326.512788][ T37] ? v9fs_get_tree+0xaa/0xac0 [ 1326.512993][ T37] v9fs_get_tree+0xbd/0xac0 [ 1326.513017][ T37] ? __pfx_vfs_parse_comma_sep+0x10/0x10 [ 1326.513040][ T37] ? __pfx_v9fs_get_tree+0x10/0x10 [ 1326.513060][ T37] ? cap_capable+0x123/0x460 [ 1326.513135][ T37] ? safesetid_security_capable+0xa9/0x1a0 [ 1326.513194][ T37] vfs_get_tree+0x92/0x2a0 [ 1326.513265][ T37] do_new_mount+0x341/0xd30 [ 1326.513342][ T37] ? safesetid_security_capable+0xa9/0x1a0 [ 1326.513365][ T37] ? __pfx_do_new_mount+0x10/0x10 [ 1326.513386][ T37] ? ns_capable+0x89/0xe0 [ 1326.513408][ T37] ? path_mount+0x690/0x10e0 [ 1326.513440][ T37] ? user_path_at+0xd4/0x160 [ 1326.513489][ T37] ? user_path_at+0xd4/0x160 [ 1326.513510][ T37] __se_sys_mount+0x31d/0x420 [ 1326.513541][ T37] ? __pfx___se_sys_mount+0x10/0x10 [ 1326.513572][ T37] ? __x64_sys_mount+0x20/0xc0 [ 1326.513596][ T37] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1326.513635][ T37] do_syscall_64+0x15f/0xf80 [ 1326.513656][ T37] ? trace_irq_disable+0x3b/0x140 [ 1326.513719][ T37] ? clear_bhb_loop+0x40/0x90 [ 1326.513741][ T37] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1326.513765][ T37] RIP: 0033:0x7f54a4fbcdd9 [ 1326.513786][ T37] RSP: 002b:00007f54a2da9028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1326.513839][ T37] RAX: ffffffffffffffda RBX: 00007f54a5236270 RCX: 00007f54a4fbcdd9 [ 1326.513853][ T37] RDX: 0000200000000540 RSI: 0000200000000000 RDI: 0000000000000000 [ 1326.513865][ T37] RBP: 00007f54a5052d69 R08: 0000200000000940 R09: 0000000000000000 [ 1326.513877][ T37] R10: 0000000002000000 R11: 0000000000000246 R12: 0000000000000000 [ 1326.513893][ T37] R13: 00007f54a5236308 R14: 00007f54a5236270 R15: 00007fff56ae0c88 [ 1326.513924][ T37] [ 1326.513959][ T37] [ 1326.513959][ T37] Showing all locks held in the system: [ 1326.514001][ T37] 1 lock held by khungtaskd/37: [ 1326.514012][ T37] #0: ffffffff8dfc8140 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1326.514173][ T37] 2 locks held by kworker/u8:7/1022: [ 1326.514216][ T37] 5 locks held by kworker/u8:8/1134: [ 1326.514226][ T37] #0: ffff88801b290938 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 1326.514272][ T37] #1: ffffc900065f7c40 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 1326.514314][ T37] #2: ffffffff8f3487a0 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf4/0x800 [ 1326.514391][ T37] #3: ffff88803d7d2160 (&dev->mutex){....}-{4:4}, at: devlink_pernet_pre_exit+0x129/0x420 [ 1326.514498][ T37] #4: ffff88803d730310 (&devlink->lock_key#13){+.+.}-{4:4}, at: devlink_pernet_pre_exit+0x142/0x420 [ 1326.514571][ T37] 2 locks held by kworker/u8:10/2850: [ 1326.514581][ T37] #0: ffff88801a074938 ((wq_completion)events_unbound#2){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 1326.514628][ T37] #1: ffffc9000dd47c40 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 1326.514680][ T37] 2 locks held by getty/5347: [ 1326.514690][ T37] #0: ffff8880369450a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1326.514799][ T37] #1: ffffc90003cc62e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x462/0x13a0 [ 1326.516717][ T37] 2 locks held by kworker/0:7/5732: [ 1326.516728][ T37] #0: ffff88801a037938 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 1326.516772][ T37] #1: ffffc90005effc40 (p9_poll_work){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 1326.516813][ T37] 2 locks held by kworker/1:10/6599: [ 1326.516834][ T37] 10 locks held by syz-executor/15539: [ 1326.516844][ T37] 8 locks held by kworker/0:4/16160: [ 1326.516857][ T37] 12 locks held by kworker/u8:18/16619: [ 1326.516867][ T37] 2 locks held by kworker/u8:19/16626: [ 1326.516876][ T37] #0: ffff88801a074138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 1326.516915][ T37] #1: ffffc90008f97c40 ((work_completion)(&map->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 1326.516953][ T37] 10 locks held by kworker/u8:20/16781: [ 1326.516967][ T37] 3 locks held by syz-executor/18584: [ 1326.516978][ T37] 3 locks held by syz.0.3898/18696: [ 1326.516987][ T37] 2 locks held by modprobe/18706: [ 1326.516998][ T37] [ 1326.517002][ T37] ============================================= [ 1326.517002][ T37] [ 1326.517018][ T37] NMI backtrace for cpu 1 [ 1326.517034][ T37] CPU: 1 UID: 0 PID: 37 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1326.517056][ T37] Tainted: [L]=SOFTLOCKUP [ 1326.517062][ T37] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1326.517072][ T37] Call Trace: [ 1326.517079][ T37] [ 1326.517086][ T37] dump_stack_lvl+0xe8/0x150 [ 1326.517108][ T37] nmi_cpu_backtrace+0x274/0x2d0 [ 1326.517225][ T37] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1326.517259][ T37] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 1326.517285][ T37] sys_info+0x135/0x170 [ 1326.517332][ T37] watchdog+0xfd3/0x1030 [ 1326.517388][ T37] ? watchdog+0x1c9/0x1030 [ 1326.517413][ T37] kthread+0x388/0x470 [ 1326.517442][ T37] ? __pfx_watchdog+0x10/0x10 [ 1326.517459][ T37] ? __pfx_kthread+0x10/0x10 [ 1326.517481][ T37] ret_from_fork+0x514/0xb70 [ 1326.517504][ T37] ? __pfx_ret_from_fork+0x10/0x10 [ 1326.517523][ T37] ? __switch_to+0xc79/0x1410 [ 1326.517550][ T37] ? __pfx_kthread+0x10/0x10 [ 1326.517573][ T37] ret_from_fork_asm+0x1a/0x30 [ 1326.517609][ T37] [ 1326.517615][ T37] Sending NMI from CPU 1 to CPUs 0: [ 1326.517639][ C0] NMI backtrace for cpu 0 [ 1326.517654][ C0] CPU: 0 UID: 0 PID: 16619 Comm: kworker/u8:18 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1326.517675][ C0] Tainted: [L]=SOFTLOCKUP [ 1326.517681][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1326.517690][ C0] Workqueue: events_unbound nsim_dev_trap_report_work [ 1326.517776][ C0] RIP: 0010:__lock_acquire+0x2c5/0x2cf0 [ 1326.517798][ C0] Code: 00 48 89 6c 24 28 48 8d 04 ad 00 00 00 00 48 01 e8 89 f1 81 e1 ff 1f 00 00 ba 00 e0 ff ff 41 23 54 c7 20 09 ca 41 89 54 c7 20 <4d> 89 44 c7 08 4d 89 4c c7 10 48 8b 94 24 20 01 00 00 49 89 54 c7 [ 1326.517838][ C0] RSP: 0018:ffffc9000c82f540 EFLAGS: 00000006 [ 1326.517851][ C0] RAX: 0000000000000019 RBX: 0000000000000000 RCX: 000000000000004b [ 1326.517862][ C0] RDX: 000000000002004b RSI: 000000000000004b RDI: 0000000000000000 [ 1326.517871][ C0] RBP: 0000000000000005 R08: ffffffff8b1f360f R09: ffff8880b8836dd0 [ 1326.517882][ C0] R10: dffffc0000000000 R11: fffffbfff1f11dff R12: 0000000000000000 [ 1326.517892][ C0] R13: 0000000000000000 R14: ffff888011c60000 R15: ffff888011c60bf8 [ 1326.517903][ C0] FS: 0000000000000000(0000) GS:ffff888126176000(0000) knlGS:0000000000000000 [ 1326.517916][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1326.517933][ C0] CR2: 00007fdcc2076d10 CR3: 0000000044158000 CR4: 00000000003526f0 [ 1326.517947][ C0] Call Trace: [ 1326.517953][ C0] [ 1326.517968][ C0] ? rt_mutex_slowunlock+0xbf/0x8b0 [ 1326.517984][ C0] lock_acquire+0x106/0x350 [ 1326.518001][ C0] ? rt_mutex_slowunlock+0xbf/0x8b0 [ 1326.518019][ C0] ? rcu_is_watching+0x15/0xb0 [ 1326.518040][ C0] _raw_spin_lock_irqsave+0x40/0x60 [ 1326.518057][ C0] ? rt_mutex_slowunlock+0xbf/0x8b0 [ 1326.518071][ C0] rt_mutex_slowunlock+0xbf/0x8b0 [ 1326.518085][ C0] ? reacquire_held_locks+0x104/0x190 [ 1326.518104][ C0] ? rt_spin_lock+0x1e0/0x400 [ 1326.518119][ C0] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1326.518134][ C0] ? rt_spin_unlock+0x14f/0x200 [ 1326.518149][ C0] ? rt_spin_unlock+0x160/0x200 [ 1326.518181][ C0] crng_make_state+0x235/0x5d0 [ 1326.518258][ C0] _get_random_bytes+0xff/0x260 [ 1326.518277][ C0] ? __pfx__get_random_bytes+0x10/0x10 [ 1326.518304][ C0] ? __alloc_skb+0x4e5/0x7d0 [ 1326.518320][ C0] ? skb_put+0x11b/0x210 [ 1326.518337][ C0] nsim_dev_trap_report_work+0x392/0xbd0 [ 1326.518362][ C0] ? process_scheduled_works+0xa70/0x1860 [ 1326.518378][ C0] process_scheduled_works+0xb5d/0x1860 [ 1326.518409][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 1326.518428][ C0] ? assign_work+0x3d5/0x5e0 [ 1326.518444][ C0] worker_thread+0xa53/0xfc0 [ 1326.518470][ C0] kthread+0x388/0x470 [ 1326.518488][ C0] ? __pfx_worker_thread+0x10/0x10 [ 1326.518502][ C0] ? __pfx_kthread+0x10/0x10 [ 1326.518521][ C0] ret_from_fork+0x514/0xb70 [ 1326.518538][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1326.518553][ C0] ? __switch_to+0xc79/0x1410 [ 1326.518574][ C0] ? __pfx_kthread+0x10/0x10 [ 1326.518592][ C0] ret_from_fork_asm+0x1a/0x30 [ 1326.518615][ C0] [ 1326.662800][ T37] Kernel panic - not syncing: hung_task: blocked tasks [ 1326.662823][ T37] CPU: 0 UID: 0 PID: 37 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1326.662848][ T37] Tainted: [L]=SOFTLOCKUP [ 1326.662855][ T37] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1326.662865][ T37] Call Trace: [ 1326.662873][ T37] [ 1326.662881][ T37] vpanic+0x56c/0xa60 [ 1326.662908][ T37] ? __pfx___schedule+0x10/0x10 [ 1326.662937][ T37] ? __pfx_vpanic+0x10/0x10 [ 1326.662967][ T37] panic+0xc5/0xd0 [ 1326.662985][ T37] ? __pfx_panic+0x10/0x10 [ 1326.663007][ T37] ? preempt_schedule_thunk+0x16/0x30 [ 1326.663036][ T37] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 1326.663065][ T37] watchdog+0x102c/0x1030 [ 1326.663092][ T37] ? watchdog+0x1c9/0x1030 [ 1326.663116][ T37] kthread+0x388/0x470 [ 1326.663138][ T37] ? __pfx_watchdog+0x10/0x10 [ 1326.663155][ T37] ? __pfx_kthread+0x10/0x10 [ 1326.663178][ T37] ret_from_fork+0x514/0xb70 [ 1326.663201][ T37] ? __pfx_ret_from_fork+0x10/0x10 [ 1326.663220][ T37] ? __switch_to+0xc79/0x1410 [ 1326.663246][ T37] ? __pfx_kthread+0x10/0x10 [ 1326.663268][ T37] ret_from_fork_asm+0x1a/0x30 [ 1326.663303][ T37] [ 1326.663575][ T37] Kernel Offset: disabled