last executing test programs: 17m56.030579754s ago: executing program 4 (id=1168): r0 = socket$nl_route(0x10, 0x3, 0x0) read$dsp(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_CLOCK(0xffffffffffffffff, 0x1d, &(0x7f00000001c0), 0x0) r1 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='c:::\x00', 0x0) r2 = gettid() fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r3 = syz_open_procfs(0x0, 0x0) lseek(r3, 0x1, 0x2) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000200)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x19, 0x8, &(0x7f0000000000)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r4}, {}, {0x85, 0x0, 0x0, 0xba}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r5 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = userfaultfd(0x80801) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffc000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_COPY(r6, 0xc028aa03, &(0x7f0000000140)={&(0x7f0000ffd000/0x2000)=nil, &(0x7f0000400000/0xc00000)=nil, 0x2000}) tkill(r2, 0xb) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x4d, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newlink={0x58, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x13101}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x24, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x5, @ipv4={'\x00', '\xff\xff', @loopback}}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x1}]}}}]}, 0x58}}, 0x0) 17m54.727305863s ago: executing program 4 (id=1172): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYRESDEC=0x0]) r1 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x10c4, 0x0, 0x0, 0x180000}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) getpid() syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)={0x1c, 0x2d, 0x1, 0x70bd26, 0x25dfdbfc, {0x4}, [@typed={0x6, 0x9, 0x0, 0x0, @binary="38ea"}]}, 0x1c}}, 0x20000000) syz_fuse_handle_req(r0, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x90, 0x0, 0xffffffffffffffff, {0x3, 0x0, 0x0, 0x0, 0x0, 0x2, {0x0, 0xfffffffffffffffd, 0x2, 0x0, 0x0, 0x9, 0x1ff, 0xff, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x9}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) rename(&(0x7f0000000100)='./file0/../file0/file0\x00', &(0x7f0000000140)='./file0/../file0/file0\x00') ioctl$VFAT_IOCTL_READDIR_SHORT(0xffffffffffffffff, 0x82307202, &(0x7f00000006c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 17m51.837185838s ago: executing program 4 (id=1177): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) r3 = socket$tipc(0x1e, 0x5, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') bind$tipc(r3, 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x1}, 0x10) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, 0x0, 0x0) 17m46.42052871s ago: executing program 4 (id=1190): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$igmp6(0xa, 0x3, 0x2) socket$inet6(0xa, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000cf76c38140464025398745af0cd06ea5bf64567b0eab44c561fe"], &(0x7f00000000c0)='syzkaller\x00'}, 0x94) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x83, &(0x7f0000000080), 0x8) socket$netlink(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) connect$x25(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, 0xffffffffffffffff, 0xc4) sendmsg$key(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="020200020d00000000000000000000000200080008000000fd00000000000000020001000000000000000500000000a0030006000000000002000000ac1414ff00000000000000000300050000000000020000000000000000000000000000000100140000000000f7799d882160f53ff47b5679c292cab89c0d521949c1924b2e"], 0x68}, 0x1, 0x7}, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r5, 0x400448ca, 0x0) bind$bt_hci(r5, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) 17m45.224580508s ago: executing program 4 (id=1194): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) ioctl$BLKBSZSET(r0, 0x40081271, &(0x7f0000000100)=0x10000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d000000"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) dup(0xffffffffffffffff) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/seq/clients\x00', 0x0, 0x0) preadv(r5, &(0x7f0000000040)=[{&(0x7f0000000180)=""/128, 0x80}], 0x1, 0x0, 0x8) 17m43.727639351s ago: executing program 4 (id=1197): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10) ioctl$TCFLSH(r0, 0x400455c8, 0x4) syz_usb_connect(0x5, 0x0, 0x0, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 17m28.275638296s ago: executing program 32 (id=1197): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10) ioctl$TCFLSH(r0, 0x400455c8, 0x4) syz_usb_connect(0x5, 0x0, 0x0, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 15m36.493169574s ago: executing program 3 (id=1466): mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) pipe(0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket(0x27, 0x3, 0x80000000) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) socket$nl_generic(0x10, 0x3, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) timerfd_settime(0xffffffffffffffff, 0x3, &(0x7f0000000440)={{0x0, 0x989680}}, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') rename(&(0x7f0000000400)='./bus\x00', &(0x7f0000000f00)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mknod(&(0x7f0000000100)='./file1/file3\x00', 0xc000, 0x7) renameat2(0xffffffffffffff9c, &(0x7f0000002200)='./file0\x00', 0xffffffffffffff9c, &(0x7f00000021c0)='./file1/file3\x00', 0x2) 15m35.199598943s ago: executing program 3 (id=1469): getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f00000000c0)=@sack_info={r0, 0x0, 0x6}, 0xc) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) listen(0xffffffffffffffff, 0x9d5e) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0x8, 0x8, 0x80, 0x5, 0x3, 0x7f, 0x20000006, 0x4d, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0xff, 0x6, 0x5, 0x4, 0x0, 0x7, 0x3c5b, 0x0, 0x24, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x5, 0x7, 0x83, 0x8, 0x4c74, 0x0, 0x242, 0x2, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x21, 0x7, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x0, 0x85, 0x6, 0x8, 0x3ff, 0x83, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432e6, 0x88, 0xf9, 0xe, 0x2bb, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2b, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0xff, 0x0, 0x1000ff, 0x5, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x9, 0x8, 0x9, 0x6, 0x47, 0xbc2, 0x1, 0xfe000000, 0x8, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x4, 0x3, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x1, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x3, 0x5, 0x800000, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x3038, 0x3e5, 0xb, 0x2, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x16d01, 0x6, 0x38, 0x800003, 0x600, 0x80, 0xbf7, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x4a9, 0x5, 0x6, 0xac8, 0x5, 0x7, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0x3, 0x5, 0x1b, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0xa, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x1, 0x7fff, 0xffff, 0xa620, 0x1, 0x7, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x10000016, 0xffffffff, 0x80000000, 0x5, 0xffffffff, 0xc8, 0x1, 0xfffff000, 0x10000, 0x3, 0x7e, 0x100, 0x9602, 0x7, 0xae, 0x8, 0x6, 0x226, 0x3, 0x100, 0x8, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x8, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0x7ff]}, 0x45c) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000), 0x2) r3 = memfd_create(&(0x7f0000000380)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xa9\x1fg\xf1\x85z{\x1d<\xe2\x1c7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xedn\x8c<5\xcf\x92;\x85)\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\x05\x831\xd3\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xf6\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\xc6(\x19\xf8\xb4?Fv\xac\xc7m\xe1\xf68W\x19\x0f\x87\x84\xafK\x91v\xb5\xe7Cf\xe0L\b9\xe2\x15d~R4\xdf\xbb\xfeiH', 0x3) ftruncate(r3, 0xffff) syz_open_procfs(0x0, &(0x7f0000000080)='uid_map\x00') syz_open_dev$loop(&(0x7f00000001c0), 0x3, 0x400000) 15m34.77369233s ago: executing program 3 (id=1472): r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r0, &(0x7f0000001a40)=[{&(0x7f0000000180)=@in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000680)=[{&(0x7f0000000040)="608d59", 0x3}], 0x1, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000008401190f00000007000000ac1e00010000000023a7284222c01b3650bacf2432e3065ba2a1bf0340af5a6a5d722139a91e735ab205f6fb282d23b6bf8b19315aab9f28eaf5cefe8b2c9f"], 0x18, 0x1}], 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) keyctl$dh_compute(0x17, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x0}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0x2) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/crypto\x00', 0x0, 0x0) write$sndseq(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0x4058534c, &(0x7f0000001140)={0x80, 0x1}) r4 = socket$inet_udp(0x2, 0x2, 0x0) sendfile(r4, r3, 0x0, 0x20000023893) r5 = getpgid(0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/power/resume', 0x149a82, 0x0) r7 = fanotify_init(0x200, 0x0) writev(r7, &(0x7f00000005c0)=[{&(0x7f00000001c0)="84", 0x1}], 0x1) write$cgroup_int(r6, &(0x7f0000000040)=0x1ff8, 0x12) ptrace$ARCH_SET_CPUID(0x1e, r5, 0x1, 0x1012) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) r9 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="5800000010000304000300"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c610ad71512700505f7800c0002001e0000000f00000006000100fe0f000008000500fbd79faf4a43d998905851e25e1b0297f11777b34b3060aaa822b646cc4de0904ed420a1baadec713993166a89829295d3ef9f24a155aa64ce2216e3533c1ada37e146c3", @ANYRES32=r10, @ANYBLOB='\b\x00\n\x00', @ANYRES16=r0, @ANYRESDEC=r8], 0x58}}, 0x8000) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x300000000000000, 0x0, 0x4004}, 0x0) 15m34.418961915s ago: executing program 0 (id=1475): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x1, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x3}}, 0x0}, 0x94) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000480)=ANY=[@ANYRES16, @ANYBLOB="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"], 0x21c}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000009c0)={0x6, 0xe, &(0x7f0000000600)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8}, [@map_idx_val={0x18, 0x4}, @printk={@x}, @exit]}, &(0x7f00000002c0)='GPL\x00', 0xdf64, 0x0, 0x0, 0x41100, 0x5, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000580)={0x8, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r1 = socket$alg(0x26, 0x5, 0x0) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x67, &(0x7f0000000300)=0x5, 0x4) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff0802110000"], 0x6f4}}, 0x0) 15m33.999281422s ago: executing program 0 (id=1476): prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x4b, 0x89}, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x49, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{0x0}], 0x1) getsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x7, &(0x7f0000000380), 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x800c6613, 0x0) write$USERIO_CMD_SET_PORT_TYPE(0xffffffffffffffff, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) rseq(&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x4}, 0x20, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_COUNTERS(r2, 0x0, 0x81, &(0x7f00000000c0)={'broute\x00', 0x0, 0x0, 0x0, [0x1, 0x51e5, 0xd78, 0x9a, 0x1, 0x268], 0x1, 0x0, 0x0, [{}]}, 0x88) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) dup2(r3, r1) r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r4, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10) recvmmsg(r4, &(0x7f00000050c0)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000000)=""/23, 0x17}, {0x0}], 0x2}}, {{0x0, 0x0, 0x0}, 0xc4ed}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000053c0)=""/196, 0xc4}, 0x4}], 0x3, 0x6bf68237da62a01, 0x0) sendmmsg(r4, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) 15m33.519163079s ago: executing program 0 (id=1477): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) socket$inet_tcp(0x2, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$alg(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) getpid() sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) r2 = gettid() kcmp$KCMP_EPOLL_TFD(r2, r2, 0x7, 0xffffffffffffffff, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x4, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0xf, 0x4, 0x207, 0x2, 0x0, 0xffffffffffffffff, 0x1000, '\x00', 0x0, 0xffffffffffffffff, 0x8}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r5, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r4}, 0x20) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180)='rpc_pipefs\x00', 0x0, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x9, 0x10, r3, 0x31aad000) r7 = inotify_init() inotify_add_watch(r7, 0x0, 0x20000002) umount2(&(0x7f0000000000)='./file0\x00', 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xc, &(0x7f0000000bc0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x20}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x90ff}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f00000008c0)='syzkaller\x00', 0x2}, 0x94) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r8, 0xffffffffffffffff, 0x0) 15m32.738789621s ago: executing program 0 (id=1478): syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000000), 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{0x0}, {0x0}], 0x2) socket$nl_route(0x10, 0x3, 0x0) pselect6(0x40, &(0x7f0000000280)={0x5, 0x0, 0x120000000000, 0x2, 0x500, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f0000000180)={0x3fe, 0x7, 0x0, 0x9, 0x86, 0x800, 0x80000002}, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) getsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) 15m31.598552688s ago: executing program 0 (id=1484): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x1000, 0x2}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000780)={0x44, 0x0, &(0x7f0000000900)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) 15m31.318248873s ago: executing program 0 (id=1486): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = getpid() r3 = io_uring_setup(0x30a7, 0x0) io_uring_register$IORING_REGISTER_MEM_REGION(r3, 0x22, &(0x7f0000000280)={&(0x7f0000000240)={&(0x7f0000000080)="8d981ea1d21e9c323ca7d532cdec0937b316013f0f25553ba24b280ed978b136d7c5e1f61ecbc67ba0bbd43817d8692de4a30854a3bbdd34b11ba9ec35055e155a51332b73", 0x45, 0x1, 0xe28, 0xfffffffffffffff2}}, 0x1) r4 = syz_pidfd_open(r2, 0x0) open_by_handle_at(r4, &(0x7f0000000180)=ANY=[@ANYBLOB="15000000fe"], 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8b04, &(0x7f0000000040)={'wlan1\x00', @random="0e00"}) recvmmsg(r1, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)=""/4082, 0xff2}], 0x1}, 0x5}], 0x40000000000000d, 0x2000, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000001380)={'macvtap0\x00', 0x1}) symlink(&(0x7f0000000080)='.\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') setxattr$trusted_overlay_redirect(0x0, &(0x7f0000001300), &(0x7f0000001340)='./file1\x00', 0x8, 0x0) 15m30.18353805s ago: executing program 3 (id=1491): write$binfmt_register(0xffffffffffffffff, &(0x7f0000000300)={0x3a, 'syz0', 0x3a, 'M', 0x3a, 0x8, 0x3a, ',%:-&', 0x3a, ':%])#*-:[.[):', 0x3a, './file0'}, 0x39) 15m29.550973739s ago: executing program 3 (id=1493): getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f00000000c0)=@sack_info={r0, 0x0, 0x6}, 0xc) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) listen(0xffffffffffffffff, 0x9d5e) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0x8, 0x8, 0x80, 0x5, 0x3, 0x7f, 0x20000006, 0x4d, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0xff, 0x6, 0x5, 0x4, 0x0, 0x7, 0x3c5b, 0x0, 0x24, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x5, 0x7, 0x83, 0x8, 0x4c74, 0x0, 0x242, 0x2, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x21, 0x7, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x0, 0x85, 0x6, 0x8, 0x3ff, 0x83, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432e6, 0x88, 0xf9, 0xe, 0x2bb, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2b, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0xff, 0x0, 0x1000ff, 0x5, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x9, 0x8, 0x9, 0x6, 0x47, 0xbc2, 0x1, 0xfe000000, 0x8, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x4, 0x3, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x1, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x3, 0x5, 0x800000, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x3038, 0x3e5, 0xb, 0x2, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x16d01, 0x6, 0x38, 0x800003, 0x600, 0x80, 0xbf7, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x4a9, 0x5, 0x6, 0xac8, 0x5, 0x7, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0x3, 0x5, 0x1b, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0xa, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x1, 0x7fff, 0xffff, 0xa620, 0x1, 0x7, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x10000016, 0xffffffff, 0x80000000, 0x5, 0xffffffff, 0xc8, 0x1, 0xfffff000, 0x10000, 0x3, 0x7e, 0x100, 0x9602, 0x7, 0xae, 0x8, 0x6, 0x226, 0x3, 0x100, 0x8, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x8, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0x7ff]}, 0x45c) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000), 0x2) r3 = memfd_create(&(0x7f0000000380)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xa9\x1fg\xf1\x85z{\x1d<\xe2\x1c7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xedn\x8c<5\xcf\x92;\x85)\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\x05\x831\xd3\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xf6\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\xc6(\x19\xf8\xb4?Fv\xac\xc7m\xe1\xf68W\x19\x0f\x87\x84\xafK\x91v\xb5\xe7Cf\xe0L\b9\xe2\x15d~R4\xdf\xbb\xfeiH', 0x3) ftruncate(r3, 0xffff) syz_open_procfs(0x0, &(0x7f0000000080)='uid_map\x00') syz_open_dev$loop(&(0x7f00000001c0), 0x3, 0x400000) 15m29.053956927s ago: executing program 3 (id=1494): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={0x0, 0x0, 0x35, 0x0, 0x1, 0x5, 0x10000}, 0x28) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x24004800) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0xd1) lsetxattr$system_posix_acl(&(0x7f0000000080)='./file0\x00', &(0x7f0000000400)='system.posix_acl_default\x00', &(0x7f0000000540)=ANY=[@ANYBLOB="020000000c00ebffffff0100020000", @ANYRES32=0x0, @ANYBLOB="040000000000000010000300000000002000000000000000"], 0x2c, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x800000000000001, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019640)=""/102392, 0x18ff8) r1 = openat$nvme_fabrics(0xffffffffffffff9c, 0x0, 0x80000, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c00003f", @ANYRES16=r3, @ANYRES32=r4, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x24084004}, 0x4000) r5 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x403, 0x6101, 0x0, {0x0, 0x0, 0x0, 0x0, 0x56760003ded1ddd3}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @vti={{0x8}, {0x14, 0x2, 0x0, 0x1, [@vti_common_policy=[@IFLA_VTI_LINK={0x8, 0x1, r6}], @IFLA_VTI_REMOTE={0x8, 0x5, @private=0xa010101}]}}}]}, 0x40}}, 0x10) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r1, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="34010000", @ANYBLOB], 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x41) r7 = socket(0x10, 0x3, 0x0) write(r7, &(0x7f00000000c0)="1c0000001e005f0214fffffffffffff807000000000000000000000008", 0x1d) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) socket$kcm(0xa, 0x1, 0x106) r8 = syz_init_net_socket$ax25(0x3, 0x2, 0x1) ioctl$SIOCAX25ADDUID(r8, 0x89e1, &(0x7f0000000080)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0xee01}) 15m15.799750228s ago: executing program 33 (id=1486): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = getpid() r3 = io_uring_setup(0x30a7, 0x0) io_uring_register$IORING_REGISTER_MEM_REGION(r3, 0x22, &(0x7f0000000280)={&(0x7f0000000240)={&(0x7f0000000080)="8d981ea1d21e9c323ca7d532cdec0937b316013f0f25553ba24b280ed978b136d7c5e1f61ecbc67ba0bbd43817d8692de4a30854a3bbdd34b11ba9ec35055e155a51332b73", 0x45, 0x1, 0xe28, 0xfffffffffffffff2}}, 0x1) r4 = syz_pidfd_open(r2, 0x0) open_by_handle_at(r4, &(0x7f0000000180)=ANY=[@ANYBLOB="15000000fe"], 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8b04, &(0x7f0000000040)={'wlan1\x00', @random="0e00"}) recvmmsg(r1, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)=""/4082, 0xff2}], 0x1}, 0x5}], 0x40000000000000d, 0x2000, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000001380)={'macvtap0\x00', 0x1}) symlink(&(0x7f0000000080)='.\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') setxattr$trusted_overlay_redirect(0x0, &(0x7f0000001300), &(0x7f0000001340)='./file1\x00', 0x8, 0x0) 15m13.153523048s ago: executing program 34 (id=1494): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={0x0, 0x0, 0x35, 0x0, 0x1, 0x5, 0x10000}, 0x28) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x24004800) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0xd1) lsetxattr$system_posix_acl(&(0x7f0000000080)='./file0\x00', &(0x7f0000000400)='system.posix_acl_default\x00', &(0x7f0000000540)=ANY=[@ANYBLOB="020000000c00ebffffff0100020000", @ANYRES32=0x0, @ANYBLOB="040000000000000010000300000000002000000000000000"], 0x2c, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x800000000000001, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019640)=""/102392, 0x18ff8) r1 = openat$nvme_fabrics(0xffffffffffffff9c, 0x0, 0x80000, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c00003f", @ANYRES16=r3, @ANYRES32=r4, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x24084004}, 0x4000) r5 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x403, 0x6101, 0x0, {0x0, 0x0, 0x0, 0x0, 0x56760003ded1ddd3}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @vti={{0x8}, {0x14, 0x2, 0x0, 0x1, [@vti_common_policy=[@IFLA_VTI_LINK={0x8, 0x1, r6}], @IFLA_VTI_REMOTE={0x8, 0x5, @private=0xa010101}]}}}]}, 0x40}}, 0x10) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r1, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="34010000", @ANYBLOB], 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x41) r7 = socket(0x10, 0x3, 0x0) write(r7, &(0x7f00000000c0)="1c0000001e005f0214fffffffffffff807000000000000000000000008", 0x1d) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) socket$kcm(0xa, 0x1, 0x106) r8 = syz_init_net_socket$ax25(0x3, 0x2, 0x1) ioctl$SIOCAX25ADDUID(r8, 0x89e1, &(0x7f0000000080)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0xee01}) 11m31.542266444s ago: executing program 6 (id=2101): mlockall(0x2) r0 = shmget$private(0x0, 0x400000, 0x8, &(0x7f000000e000/0x400000)=nil) ioperm(0x0, 0x2, 0x7e) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)=ANY=[@ANYRESHEX=0x0, @ANYRES8=r0], 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0x80000000}, {0x6, 0xfd, 0x0, 0x7ffffcb9}]}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x281}, 0x0) madvise(&(0x7f0000130000/0xd000)=nil, 0xd000, 0x66) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19) socket(0x1a, 0x2, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000001880)=@req3={0x9, 0x8, 0x6, 0x2, 0x5b, 0x1, 0x7f}, 0x1c) r5 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3}, 0x10) recvmmsg(r4, &(0x7f0000004140)=[{{&(0x7f0000000300)=@can, 0x80, &(0x7f00000015c0)=[{&(0x7f0000000380)=""/177, 0xb1}, {&(0x7f0000000480)=""/134, 0x86}, {&(0x7f00000000c0)=""/17, 0x11}, {&(0x7f0000000540)=""/92, 0x5c}, {&(0x7f00000005c0)=""/4096, 0x1000}], 0x5, &(0x7f0000001640)=""/190, 0xbe}, 0x1be}, {{&(0x7f0000001700)=@l2, 0x80, &(0x7f0000002900)=[{&(0x7f0000001780)=""/196, 0xc4}, {&(0x7f0000000280)=""/28, 0x1c}, {&(0x7f0000004300)=""/70, 0x46}, {&(0x7f00000018c0)=""/4096, 0x1000}, {&(0x7f00000028c0)=""/16, 0x10}], 0x5, &(0x7f0000002b00)=""/223, 0xdf}, 0xc7}, {{&(0x7f0000002a80)=@tipc=@name, 0x80, &(0x7f0000002c00), 0x0, &(0x7f0000002c40)=""/247, 0xf7}, 0x7fffffff}, {{&(0x7f0000002d40)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, &(0x7f0000003280)=[{&(0x7f0000002dc0)=""/245, 0xf5}, {&(0x7f0000002ec0)=""/126, 0x7e}, {&(0x7f0000002f40)=""/226, 0xe2}, {&(0x7f0000003040)=""/152, 0x98}, {&(0x7f0000003100)=""/141, 0x8d}, {&(0x7f00000031c0)=""/132, 0x84}], 0x6, &(0x7f0000003300)=""/69, 0x45}, 0xe}, {{&(0x7f0000003380)=@l2tp={0x2, 0x0, @private}, 0x80, &(0x7f00000034c0)=[{&(0x7f0000003400)=""/59, 0x3b}, {&(0x7f0000003940)=""/95, 0x5f}], 0x2, &(0x7f0000003500)=""/24, 0x18}, 0xfffffff7}, {{0x0, 0x0, &(0x7f0000003a80)=[{&(0x7f0000003540)=""/214, 0xd6}, {&(0x7f0000003640)=""/136, 0x88}, {&(0x7f0000003700)=""/123, 0x7b}, {&(0x7f0000003780)=""/201, 0xc9}, {&(0x7f0000003880)=""/145, 0x91}, {&(0x7f0000004380)=""/233, 0xe9}, {&(0x7f0000003a40)=""/37, 0x25}], 0x7, &(0x7f0000003b00)=""/100, 0x64}, 0x4}, {{&(0x7f0000003b80)=@tipc=@name, 0x80, &(0x7f0000004080)=[{&(0x7f0000003c00)=""/131, 0x83}, {&(0x7f0000003cc0)=""/80, 0x50}, {&(0x7f0000003d40)=""/226, 0xe2}, {&(0x7f0000003e80)=""/97, 0x61}, {&(0x7f0000003f00)=""/176, 0xb0}, {&(0x7f0000003fc0)=""/187, 0xbb}], 0x6, &(0x7f0000004100)=""/52, 0x34}, 0x2}], 0x7, 0x7fb10727dda9, 0x0) 11m29.609205254s ago: executing program 6 (id=2103): socket$kcm(0x10, 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) syz_emit_ethernet(0x52, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_open_dev$admmidi(0x0, 0x2, 0x0) read$msr(r0, &(0x7f0000032680)=""/102400, 0x19000) r1 = socket$netlink(0x10, 0x3, 0x4) capset(&(0x7f0000000080)={0x20071026}, 0x0) writev(r1, &(0x7f0000000080)=[{&(0x7f0000000340)="480000001400191809004beafd0d3602028447000b4e230f02000500a2bc5603ca00000f7f89004e00200000000101ff05c00e030002000000000001000000", 0x3f}], 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=@newlink={0x34, 0x10, 0x437, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x4048b}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x40000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x44880) r3 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r3, 0x40096101, &(0x7f0000000100)={{}, 0x7}) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={&(0x7f0000000480)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x7, [@enum64={0x6, 0x1, 0x0, 0x13, 0x1, 0x2, [{0x1000000, 0x2, 0xb}]}]}, {0x0, [0x2e, 0x2e, 0x30, 0x30, 0x2e]}}, 0x0, 0x37, 0x0, 0x1, 0x6}, 0x28) 11m27.85760653s ago: executing program 6 (id=2108): openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi0\x00', 0x8080, 0x0) fsopen(&(0x7f0000000000)='mqueue\x00', 0x0) waitid(0x2, 0x0, 0x0, 0x4, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x2, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000100), 0x1358, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x8, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000ff010000000000000000000061"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r1, 0xc1105517, &(0x7f0000000080)={{0x1009, 0x0, 0x0, 0x80, 'syz0\x00'}, 0x5, 0x0, 0x1, 0x0, 0x0, 0x8, 'syz1\x00', 0x0}) r3 = syz_clone(0x800200, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) kcmp$KCMP_EPOLL_TFD(r3, r3, 0x7, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan3\x00'}) 11m25.623721374s ago: executing program 6 (id=2112): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="d800000019007b29e00212ba0d8105040a601100fe02040b067c55a1bc001400090006990600000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b3", 0x51}], 0x1, 0x0, 0x0, 0x2663}, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket(0x2, 0x80805, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$packet(0x11, 0x2, 0x300) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r1, &(0x7f0000005d40)=[{{&(0x7f0000000180)=@can={0x1d, r3}, 0x80, 0x0}}], 0x1, 0x0) 11m25.036428473s ago: executing program 6 (id=2115): ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xaece, 0x0) socket$pppoe(0x18, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r0, &(0x7f0000000300)=""/102392, 0x18ff8) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000019300)=ANY=[@ANYBLOB="0a00000004000000040000000600000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r2, @ANYBLOB="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"], 0x50) 11m22.691291039s ago: executing program 6 (id=2121): syz_genetlink_get_family_id$ieee802154(&(0x7f0000000480), 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x910ec27568a00e35, 0x40000002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, 0x0, &(0x7f0000000180)='GPL\x00', 0x9}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_usbip_server_init(0x3) add_key$user(&(0x7f0000000380), &(0x7f0000000000)={'syz', 0x0}, &(0x7f0000000580)='X', 0x1, 0xfffffffffffffffe) openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1/file3\x00', 0x0) r3 = landlock_create_ruleset(&(0x7f0000000140)={0x2000}, 0x10, 0x0) landlock_restrict_self(r3, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000180)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, 0x0, &(0x7f0000000080)) 11m7.514144779s ago: executing program 35 (id=2121): syz_genetlink_get_family_id$ieee802154(&(0x7f0000000480), 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x910ec27568a00e35, 0x40000002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, 0x0, &(0x7f0000000180)='GPL\x00', 0x9}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_usbip_server_init(0x3) add_key$user(&(0x7f0000000380), &(0x7f0000000000)={'syz', 0x0}, &(0x7f0000000580)='X', 0x1, 0xfffffffffffffffe) openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1/file3\x00', 0x0) r3 = landlock_create_ruleset(&(0x7f0000000140)={0x2000}, 0x10, 0x0) landlock_restrict_self(r3, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000180)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, 0x0, &(0x7f0000000080)) 5m25.088163935s ago: executing program 7 (id=2921): r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2a, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x2}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) close(r0) 5m24.521291743s ago: executing program 7 (id=2925): getrusage(0xfffffffffffffffe, 0x0) rmdir(&(0x7f0000000080)='./cgroup/../file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x107042, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file3\x00', 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) openat$cgroup_ro(r0, &(0x7f0000000040)='devices.list\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) mknodat(0xffffffffffffff9c, 0x0, 0x0, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x60142, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0xc) r3 = openat$cgroup_subtree(r2, &(0x7f0000000100), 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x20, 0x0, 0x0, 0xfffff038}, {0x6}]}, 0x10) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x581, 0x20000000008c}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) write$cgroup_subtree(r3, &(0x7f0000000980)={[{0x2d, 'pids'}]}, 0x1f) syz_open_dev$evdev(&(0x7f0000000040), 0x100004, 0x0) 5m23.488120988s ago: executing program 7 (id=2927): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[], 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000200)='inet_sk_error_report\x00', r3}, 0x18) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) lseek(r1, 0x1800000, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r4, 0x40505331, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="3000000010000108000000000000002000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000080004004400000008001b0000000000"], 0x30}}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000240)={r5, @in={{0x2, 0x4e22, @rand_addr=0x64010102}}, 0x0, 0x6}, 0x88) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000840)={r5, @in6={{0xa, 0x4e20, 0x3ae, @empty, 0x129}}, 0x2, 0x2, 0x614, 0x1, 0xd, 0x7, 0x4}, 0x9c) 5m21.567544887s ago: executing program 7 (id=2932): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet6(0xa, 0x3, 0xff) socket(0x2, 0x2, 0x1) connect$inet6(r1, &(0x7f0000000480)={0xa, 0xfffe, 0x3, @loopback, 0xff}, 0x1c) r2 = dup2(r1, r1) sendmmsg$unix(r2, &(0x7f0000008380), 0x400000000000174, 0x4008890) 5m19.17578901s ago: executing program 7 (id=2936): mremap(&(0x7f0000064000/0x3000)=nil, 0x3000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TCSETSW(r1, 0x5403, &(0x7f00000000c0)={0x5, 0x6, 0x3d, 0x7fff, 0x14, "71feaf33432ed6fe90107884be157e88b3e578"}) bind$phonet(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x100000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000) openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[], 0x50) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, 0x0, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=@newtaction={0x18, 0x5a, 0x5, 0x70bd28, 0x25dfdbfb, {0x2}, [{0x4, 0x3}]}, 0x18}}, 0xc084) r4 = dup(r0) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) 5m18.193422232s ago: executing program 7 (id=2942): ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xaece, 0x0) socket$pppoe(0x18, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r0, &(0x7f0000000300)=""/102392, 0x18ff8) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000019300)=ANY=[@ANYBLOB="0a00000004000000040000000600000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r2, @ANYBLOB="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"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, 0x0, &(0x7f0000000240), 0xfff, r3}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x6, r3}, 0x38) open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x1d2) truncate(&(0x7f0000000040)='./file0\x00', 0x1000000) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) getsockopt$inet6_mreq(0xffffffffffffffff, 0x3a, 0x1, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 5m3.11235808s ago: executing program 36 (id=2942): ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xaece, 0x0) socket$pppoe(0x18, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r0, &(0x7f0000000300)=""/102392, 0x18ff8) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000019300)=ANY=[@ANYBLOB="0a00000004000000040000000600000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r2, @ANYBLOB="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"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, 0x0, &(0x7f0000000240), 0xfff, r3}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x6, r3}, 0x38) open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x1d2) truncate(&(0x7f0000000040)='./file0\x00', 0x1000000) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) getsockopt$inet6_mreq(0xffffffffffffffff, 0x3a, 0x1, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 17.732964845s ago: executing program 5 (id=3684): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, 0x0) openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) mkdir(&(0x7f00000008c0)='./bus\x00', 0x0) syz_open_dev$video(0x0, 0x3, 0x2500) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r3, 0xc4c85512, &(0x7f00000000c0)={{0x7, 0x0, 0x0, 0x200000, 'syz0\x00'}, 0x0, [0x0, 0x0, 0xa8c9, 0xfffffffffffffffe, 0xfffffffff7fffffe, 0x0, 0x4, 0x0, 0xfffe, 0x10000, 0x4, 0x0, 0x0, 0x3, 0x7, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4, 0x9, 0x6, 0x0, 0x0, 0x6, 0xae4f, 0x0, 0xfffffffffffffffe, 0x1, 0x0, 0x8, 0xfffffffffffffffd, 0x14e, 0xfff, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x40000, 0x7fffffffffffffff, 0xfffffffffffffffc, 0x0, 0x0, 0x4, 0x6, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfff, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfa0, 0x0, 0xfffffffffffffffb, 0xea4d, 0x377, 0xffffffffffffffff, 0xffffffff, 0x0, 0x0, 0x0, 0x4000, 0x1, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x3, 0x0, 0x0, 0x2, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0xc, 0x0, 0x200000000000000, 0x9, 0x4000000000000, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x4, 0xd30, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4000000, 0x31, 0x6, 0x0, 0x0, 0x0, 0x0, 0x71]}) 16.217113828s ago: executing program 9 (id=3687): socket$nl_rdma(0x10, 0x3, 0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0xf) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$TCFLSH(r5, 0x400455c8, 0x2) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x1f2f, 0x0, 0x0, 0x0, 0x0, 0x241, 0x0, 0x0, 0x0, &(0x7f0000000700)}, 0x50) ioctl$TIOCSETD(r5, 0x5412, &(0x7f0000000140)=0xffffffc0) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000040)=0x5) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000180)) 13.090492205s ago: executing program 9 (id=3692): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x800000001, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x7, 0x80100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) read$FUSE(0xffffffffffffffff, &(0x7f0000000bc0)={0x2020}, 0x2020) r2 = io_uring_setup(0x5ae4, &(0x7f0000005840)) r3 = epoll_create1(0x0) r4 = dup3(r3, r2, 0x0) epoll_pwait2(r4, &(0x7f0000000080)=[{}], 0x1, 0x0, 0x0, 0xfffffffffffffc8a) r5 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000001380)={&(0x7f00000000c0)="43be979d0e62125c473d1e3247bc0ebb027817a86a9f279b6c836822d9f7e9abefccecd558fb51259c23d8594c4a81940a062ab9b6dd73019701009304689a78e1d0e1383513837e372f464a1c0731443e33f0068ebdfd7cbb284afd4f7f16459c775e3abd6593b091c6bd77", &(0x7f0000000280)=""/4096, &(0x7f0000000180)="bf7bbf428626971f4e0d757e6661f3cd89085259af5a41ade533da95f5fb6f7e7bc8c6ad8471ec94e2978bed1248e7a4e7e0b3aab1a38387200486db127c6a7577ecdc81cd330dcf367cb58a3a6b21eb0416854f789dbf4e45626d52163e892634cb0a1b20865178740c2c0ad8f0b1bb70a4ad4a509d4114a8efe886bee37c6f060f", &(0x7f0000001280)="c271252e6cf26d2e535777174f802255982063dcc2e2d888ebd999092b26b06ebcc3f4b2b993d126203ffd7f5e463f60328c1764e44dce12efbd8c164c169f3ef7e60857c43b5d07b8a864f8c969", 0xfffffff9, 0xffffffffffffffff, 0x4}, 0x38) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x3fe3aa0262d8c583, 0x70bd29, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x8, 0x4, 0xfffffff3}]}}]}, 0x38}}, 0x0) syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000040)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r7, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r8 = syz_io_uring_setup(0x39, &(0x7f0000000580)={0x0, 0xe7b7, 0x13500}, &(0x7f0000000240), &(0x7f0000001880)) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r8, 0x21, &(0x7f0000000440), 0x1) 11.946618061s ago: executing program 9 (id=3694): mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = getpid() r2 = io_uring_setup(0x30a7, 0x0) io_uring_register$IORING_REGISTER_MEM_REGION(r2, 0x22, 0x0, 0x1) syz_pidfd_open(r1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$ppp(0xffffffffffffff9c, 0x0, 0xc0802, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)) pipe2(&(0x7f0000001cc0), 0x800) r3 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, &(0x7f0000000340)={&(0x7f0000000040)=[0x0], 0x1}) r5 = socket$phonet_pipe(0x23, 0x5, 0x2) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{}, 0x0, &(0x7f0000000200)=r5}, 0x1e) ioctl$DRM_IOCTL_MODE_ATOMIC(r3, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r4], &(0x7f0000000180), &(0x7f0000000200), &(0x7f00000001c0)=[0x7fffffff]}) 11.303569091s ago: executing program 9 (id=3697): syz_usb_connect$uac1(0x0, 0xa3, &(0x7f0000000200)=ANY=[@ANYBLOB="12015002000000406b1d01014000010203010902910003018040080904000000010100000a240107005002010208240803ff00fab0082404030d82ab090c2402030502018102000c81090401000001020000090401010101020000090501090800037c090725018208addc0904020000010200000904020101010200000f240202720907000269abd9d900df0724010412091009058209ff91"], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0}) 11.234968592s ago: executing program 5 (id=3698): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$igmp6(0xa, 0x3, 0x2) socket$inet6(0xa, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000cf76c38140464025"], &(0x7f00000000c0)='syzkaller\x00'}, 0x94) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x83, &(0x7f0000000080), 0x8) socket$netlink(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) connect$x25(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, 0xffffffffffffffff, 0xc4) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[], 0x68}, 0x1, 0x7}, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r6, 0x400448ca, 0x0) bind$bt_hci(r6, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) 10.209942707s ago: executing program 2 (id=3700): prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0xfffffffffffffa8a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) mknod(0x0, 0x2a8, 0x8021) mount(&(0x7f0000000580)=@nullb, &(0x7f0000000100)='./file0\x00', &(0x7f0000000080)='nilfs2\x00', 0x0, 0x0) 10.209580458s ago: executing program 5 (id=3701): socket$nl_rdma(0x10, 0x3, 0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0xf) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$TCFLSH(r5, 0x400455c8, 0x2) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x1f2f, 0x0, 0x0, 0x0, 0x0, 0x241, 0x0, 0x0, 0x0, &(0x7f0000000700)}, 0x50) ioctl$TIOCSETD(r5, 0x5412, &(0x7f0000000140)=0xffffffc0) 8.958630156s ago: executing program 5 (id=3702): socket$nl_rdma(0x10, 0x3, 0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0xf) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$TCFLSH(r5, 0x400455c8, 0x2) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x1f2f, 0x0, 0x0, 0x0, 0x0, 0x241, 0x0, 0x0, 0x0, &(0x7f0000000700)}, 0x50) ioctl$TIOCSETD(r5, 0x5412, &(0x7f0000000140)=0xffffffc0) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000040)=0x5) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000180)) 8.790511218s ago: executing program 2 (id=3703): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x804e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, 0x0, 0x0) keyctl$set_reqkey_keyring(0xe, 0x2) keyctl$set_reqkey_keyring(0xe, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x0) r4 = socket(0x2a, 0x2, 0x4005) sendto(r4, 0x0, 0x0, 0x0, &(0x7f0000000040)=@qipcrtr={0x2a, 0xffffffff}, 0x80) 7.953315341s ago: executing program 1 (id=3704): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x800000001, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x7, 0x80100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) read$FUSE(0xffffffffffffffff, &(0x7f0000000bc0)={0x2020}, 0x2020) r2 = io_uring_setup(0x5ae4, &(0x7f0000005840)) r3 = epoll_create1(0x0) r4 = dup3(r3, r2, 0x0) epoll_pwait2(r4, &(0x7f0000000080)=[{}], 0x1, 0x0, 0x0, 0xfffffffffffffc8a) r5 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000001380)={&(0x7f00000000c0)="43be979d0e62125c473d1e3247bc0ebb027817a86a9f279b6c836822d9f7e9abefccecd558fb51259c23d8594c4a81940a062ab9b6dd73019701009304689a78e1d0e1383513837e372f464a1c0731443e33f0068ebdfd7cbb284afd4f7f16459c775e3abd6593b091c6bd77", &(0x7f0000000280)=""/4096, &(0x7f0000000180)="bf7bbf428626971f4e0d757e6661f3cd89085259af5a41ade533da95f5fb6f7e7bc8c6ad8471ec94e2978bed1248e7a4e7e0b3aab1a38387200486db127c6a7577ecdc81cd330dcf367cb58a3a6b21eb0416854f789dbf4e45626d52163e892634cb0a1b20865178740c2c0ad8f0b1bb70a4ad4a509d4114a8efe886bee37c6f060f", &(0x7f0000001280)="c271252e6cf26d2e535777174f802255982063dcc2e2d888ebd999092b26b06ebcc3f4b2b993d126203ffd7f5e463f60328c1764e44dce12efbd8c164c169f3ef7e60857c43b5d07b8a864f8c969", 0xfffffff9, 0xffffffffffffffff, 0x4}, 0x38) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x3fe3aa0262d8c583, 0x70bd29, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x8, 0x4, 0xfffffff3}]}}]}, 0x38}}, 0x0) syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000040)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r7, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r8 = syz_io_uring_setup(0x39, &(0x7f0000000580)={0x0, 0xe7b7, 0x13500}, &(0x7f0000000240), &(0x7f0000001880)) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r8, 0x21, &(0x7f0000000440), 0x1) 7.820781083s ago: executing program 2 (id=3705): pwritev(0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffffc, 0x0) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x14) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x94}}, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x400000) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f0000000080)={'ip_vti0\x00', &(0x7f0000000b40)={'ip_vti0\x00', 0x0, 0x7, 0x40, 0x3, 0x4, {{0x24, 0x4, 0x1, 0x9, 0x90, 0x65, 0x0, 0xfe, 0x2f, 0x0, @remote, @broadcast, {[@rr={0x7, 0x3, 0x94}, @timestamp_prespec={0x44, 0x44, 0x9c, 0x3, 0x9, [{@broadcast, 0x8}, {@multicast2, 0x7}, {@loopback, 0x8}, {@loopback, 0x8}, {@dev={0xac, 0x14, 0x14, 0x37}, 0x1ff}, {@multicast2, 0xb90}, {@remote, 0x9}, {@private=0xa010100, 0xffffff7f}]}, @timestamp_addr={0x44, 0x34, 0x49, 0x1, 0x9, [{@local, 0x4}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x188e26a7}, {@remote, 0x3}, {@multicast1, 0x1000}, {@broadcast, 0x6}, {@dev={0xac, 0x14, 0x14, 0x2d}, 0x2c0}]}, @end]}}}}}) r2 = socket(0x10, 0x803, 0x0) prlimit64(0x0, 0x8, &(0x7f0000000000)={0x9, 0x5}, 0x0) sendto(r2, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x2, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000080000000000000000850000009c0002009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_IMPORTANCE(r3, 0x10f, 0x7f, &(0x7f0000000440)=0x2, 0x4) socket$alg(0x26, 0x5, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000200), 0x4) sendto$inet6(r0, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) madvise(&(0x7f0000cf6000/0x4000)=nil, 0x4000, 0x16) 7.613957976s ago: executing program 5 (id=3706): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$kcm(0x10, 0x400000002, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4000) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newtfilter={0x34, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0x0, 0xf}, {}, {0x7, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x24000014}, 0x20084084) 7.409925499s ago: executing program 9 (id=3707): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000580)='sched_switch\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_io_uring_setup(0xd44, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r4, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x11) recvfrom$inet(r4, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x700, 0x0, 0xfffffffffffffd25) 6.886905827s ago: executing program 2 (id=3708): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="3000000010000108000000000000002000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000080004004400000008001b0000000000"], 0x30}}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000240)={r2, @in={{0x2, 0x4e22, @rand_addr=0x64010102}}, 0x0, 0x6}, 0x88) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000840)={r2, @in6={{0xa, 0x4e20, 0x3ae, @empty, 0x129}}, 0x2, 0x2, 0x614, 0x1, 0xd, 0x7, 0x4}, 0x9c) 6.057452099s ago: executing program 9 (id=3709): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, 0x0) openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) mkdir(&(0x7f00000008c0)='./bus\x00', 0x0) syz_open_dev$video(0x0, 0x3, 0x2500) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r3, 0xc4c85512, &(0x7f00000000c0)={{0x7, 0x0, 0x0, 0x200000, 'syz0\x00'}, 0x0, [0x0, 0x0, 0xa8c9, 0xfffffffffffffffe, 0xfffffffff7fffffe, 0x0, 0x4, 0x0, 0xfffe, 0x10000, 0x4, 0x0, 0x0, 0x3, 0x7, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4, 0x9, 0x6, 0x0, 0x0, 0x6, 0xae4f, 0x0, 0xfffffffffffffffe, 0x1, 0x0, 0x8, 0xfffffffffffffffd, 0x14e, 0xfff, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x40000, 0x7fffffffffffffff, 0xfffffffffffffffc, 0x0, 0x0, 0x4, 0x6, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfff, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfa0, 0x0, 0xfffffffffffffffb, 0xea4d, 0x377, 0xffffffffffffffff, 0xffffffff, 0x0, 0x0, 0x0, 0x4000, 0x1, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x3, 0x0, 0x0, 0x2, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0xc, 0x0, 0x200000000000000, 0x9, 0x4000000000000, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x4, 0xd30, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4000000, 0x31, 0x6, 0x0, 0x0, 0x0, 0x0, 0x71]}) 6.01492012s ago: executing program 1 (id=3710): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$KDFONTOP_SET(r1, 0x4b72, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000780)=ANY=[@ANYRES32, @ANYBLOB="080001007f00000108000200ac14", @ANYRES32, @ANYRES64=r1, @ANYRESHEX=r2], 0x30}, 0x1, 0x0, 0x0, 0x444c1}, 0x40040d4) socket$key(0xf, 0x3, 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_SERVICE(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)={0x14, r4, 0x711, 0x70bd25, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x24004894}, 0x0) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x24004080) 5.495086998s ago: executing program 1 (id=3711): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x8, 0xfffa}, 0x3a, [0x8000, 0x3ff, 0xf, 0x8, 0x80000001, 0x2, 0x7, 0x7f, 0xa9, 0x4d, 0x6, 0x5f, 0x9, 0x15, 0xffff2d37, 0xff7fff01, 0x7, 0x5, 0x1fd, 0x0, 0x6, 0x0, 0x7, 0x3c5b, 0x1, 0x22, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x0, 0x7, 0x5, 0x8, 0x4c74, 0x10000, 0x242, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x0, 0x1, 0x7, 0x3, 0x3e, 0x20018e, 0xa, 0xfffffeff, 0x0, 0x6, 0x4, 0x8, 0x3ff, 0xfffffff9, 0x0, 0x4, 0x6, 0x4, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8008, 0x5, 0xfffffff3, 0x129432f6, 0xc8, 0x5, 0x1510edcf, 0x2c3, 0x6c7, 0x9, 0x0, 0x3, 0x7, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x66abcbd2, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x2, 0xff, 0x5, 0x1000005, 0x5f2d, 0xd, 0x4e0, 0x381, 0x4, 0xb, 0x4, 0x9, 0x8, 0x44, 0x6, 0x47, 0x8000, 0x1, 0x0, 0xffff, 0x2, 0x4, 0x9, 0x4, 0x3, 0x4000009, 0x6, 0x0, 0x3, 0x1, 0x48c93793, 0x42, 0x3], [0x7, 0x408, 0x3ff, 0x5, 0xffffffff, 0x100, 0x9, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x80, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303e, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x200, 0x40200, 0xffffffff, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0xf3, 0xa9, 0x20000005, 0x6, 0xac4, 0xbf, 0xfffffffe, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0xffffffff, 0x7, 0x1c, 0x120000, 0x7ff, 0x2009, 0x2, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce4, 0x1ff, 0x2, 0x57, 0x4000005, 0x3, 0x2, 0x10001, 0x4, 0x7fff, 0xffff, 0xa620, 0x1, 0x5, 0x1, 0x2000006, 0x150, 0x1, 0x6, 0x6, 0xffffffff, 0x80000004, 0x5, 0x5, 0xc8, 0x1, 0xfffff002, 0x10000, 0x3, 0x7e, 0x100, 0x9622, 0x8, 0xae, 0x20000008, 0x5, 0x226, 0x2, 0x5, 0x0, 0x30b1d693, 0xa1f, 0xf3f, 0x7, 0x530e, 0x6a, 0x0, 0x4, 0x5, 0x7ff, 0xd7, 0x200, 0xb, 0xfff]}, 0x45c) openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32, @ANYRES32=r0, @ANYBLOB='\a'], 0x10) 5.493655528s ago: executing program 8 (id=3712): socket$nl_rdma(0x10, 0x3, 0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0xf) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$TCFLSH(r5, 0x400455c8, 0x2) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x1f2f, 0x0, 0x0, 0x0, 0x0, 0x241, 0x0, 0x0, 0x0, &(0x7f0000000700)}, 0x50) ioctl$TIOCSETD(r5, 0x5412, &(0x7f0000000140)=0xffffffc0) 4.439918023s ago: executing program 8 (id=3713): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$igmp6(0xa, 0x3, 0x2) socket$inet6(0xa, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000cf76c38140464025398745af0cd06ea5bf64567b0eab44c561fe"], &(0x7f00000000c0)='syzkaller\x00'}, 0x94) socket$inet6_sctp(0xa, 0x1, 0x84) socket$netlink(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) connect$x25(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, 0xffffffffffffffff, 0xc4) epoll_create1(0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="020200020d00000000000000000000000200080008000000fd00000000000000020001000000000000000500000000a0030006000000000002000000ac1414ff00000000000000000300050000000000020000000000000000000000000000000100140000000000f7799d882160f53ff47b5679c292cab89c0d521949c1924b2e"], 0x68}, 0x1, 0x7}, 0x0) 4.439638463s ago: executing program 1 (id=3714): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb92e0a4831371400000069bd6efb2502eaf60d000300020400bf050005001201", 0x2e}], 0x1}, 0x0) r2 = fsopen(&(0x7f0000000080)='bpf\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x8) readlinkat(r3, &(0x7f00000001c0)='./file0/../file0\x00', &(0x7f00000002c0)=""/204, 0xcc) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYRES8=r5, @ANYRES16=r5, @ANYBLOB="010026b57000000000000000080008000300", @ANYRES32=r4, @ANYBLOB="30003300a0240300ffffffffffffffffffffffff50505050505057001d008c1079411da23129725942c46abce2a803e908005700"], 0x54}, 0x1, 0x0, 0x0, 0xc0}, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) sendfile(r6, r0, 0x0, 0x8000000000000000) 3.30762259s ago: executing program 8 (id=3715): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x4, &(0x7f0000000000)=ANY=[], 0x0, 0x4, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0d000000230000000400000002000000400000"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a00)={{r1}, &(0x7f0000000980), &(0x7f00000009c0)=r0}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000007c0)={r1, &(0x7f0000000680), &(0x7f0000000700)=""/168}, 0x20) socket$nl_route(0x10, 0x3, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'veth0\x00'}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) ioctl$BLKIOMIN(r2, 0x1278, &(0x7f0000000040)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'hsr0\x00'}) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000001c0)}, &(0x7f0000000280)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000003c0)={r5, @in={{0x2, 0x1000, @empty}}, 0x7fff, 0x0, 0xd78e, 0x0, 0x5a1, 0x0, 0x7}, 0x9c) ioctl$SNDCTL_DSP_CHANNELS(r4, 0xc0045006, &(0x7f0000000080)=0x7f) syz_open_dev$ndb(&(0x7f0000000500), 0x0, 0xac102) ioctl$SNDCTL_DSP_SPEED(r4, 0xc0045002, &(0x7f00000000c0)=0x6) read$dsp(r4, &(0x7f00000011c0)=""/4106, 0x100a) 1.749204444s ago: executing program 8 (id=3716): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x804e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, 0x0, 0x0) keyctl$set_reqkey_keyring(0xe, 0x2) keyctl$set_reqkey_keyring(0xe, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x0) r4 = socket(0x2a, 0x2, 0x4005) sendto(r4, 0x0, 0x0, 0x0, &(0x7f0000000040)=@qipcrtr={0x2a, 0xffffffff}, 0x80) 1.722025014s ago: executing program 2 (id=3717): socket$nl_rdma(0x10, 0x3, 0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0xf) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$TCFLSH(r5, 0x400455c8, 0x2) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x1f2f, 0x0, 0x0, 0x0, 0x0, 0x241, 0x0, 0x0, 0x0, &(0x7f0000000700)}, 0x50) ioctl$TIOCSETD(r5, 0x5412, &(0x7f0000000140)=0xffffffc0) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000040)=0x5) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000180)) 724.520519ms ago: executing program 8 (id=3718): r0 = openat$comedi(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = dup(r0) write$P9_RREADLINK(r1, 0x0, 0x0) 670.01456ms ago: executing program 1 (id=3719): prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x0, &(0x7f0000000100)) 618.411831ms ago: executing program 2 (id=3720): socket$inet6(0xa, 0x2, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r1, @ANYBLOB="00000000000000001c001a800800028008000200080000003e120000080002001040e5"], 0x44}}, 0x0) r3 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00'}) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) io_uring_setup(0x1453, &(0x7f0000000180)={0x0, 0x73d5, 0x20000, 0x3, 0x1f}) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400010bce) r4 = syz_open_dev$MSR(&(0x7f0000000380), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) epoll_create(0x10001) mount$9p_fd(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, &(0x7f0000001180)=0x2000001) ioctl$KVM_GET_LAPIC(0xffffffffffffffff, 0x8400ae8e, &(0x7f00000006c0)={"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"}) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) ioctl$VIDIOC_G_PARM(0xffffffffffffffff, 0xc0cc5615, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) setresuid(0xee01, 0xee00, 0x0) r5 = socket(0x2a, 0x3, 0x3a) ioctl$SIOCSIFMTU(r5, 0x8922, &(0x7f0000000080)={'veth0_vlan\x00', 0x200}) 496.522042ms ago: executing program 5 (id=3721): write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x13f, 0x8}}, 0x20) syz_open_dev$sndctrl(0x0, 0x0, 0x0) syz_io_uring_setup(0x49c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ppoll(&(0x7f0000000040)=[{r1, 0x100}], 0x1, 0x0, 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat$nullb(0xffffffffffffff9c, 0x0, 0xa4242, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x6, 0x4, &(0x7f0000002180)=ANY=[@ANYBLOB="180200000000000000000000cfffffff850000001700000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r5, 0x25, 0x4, @val=@tracing={0x0, 0x20000000}}, 0x1c) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000500)={'sit0\x00', &(0x7f0000000480)={'gre0\x00', 0x0, 0x40, 0x80, 0x7, 0x7, {{0xe, 0x4, 0x3, 0x9, 0x38, 0x66, 0x0, 0xf, 0x2f, 0x0, @local, @empty, {[@end, @ssrr={0x89, 0x23, 0x6, [@private=0xa010100, @loopback, @multicast1, @dev={0xac, 0x14, 0x14, 0x42}, @multicast1, @multicast1, @empty, @empty]}]}}}}}) getsockname$packet(0xffffffffffffffff, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000700)={'syztnl2\x00', 0x0}) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000240)={0x2008}) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, 0x0) mount(0x0, 0x0, &(0x7f0000000200)='pstore\x00', 0x400, &(0x7f0000000280)='-#\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x9, 0x15031, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) ioctl$UFFDIO_CONTINUE(0xffffffffffffffff, 0xc020aa08, &(0x7f0000000340)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) sendfile(r2, r2, 0x0, 0x40008) 386.105394ms ago: executing program 1 (id=3722): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) fstat(r0, &(0x7f0000000100)) 0s ago: executing program 8 (id=3723): socket$nl_rdma(0x10, 0x3, 0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$TCFLSH(r5, 0x400455c8, 0x2) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x1f2f, 0x0, 0x0, 0x0, 0x0, 0x241, 0x0, 0x0, 0x0, &(0x7f0000000700)}, 0x50) ioctl$TIOCSETD(r5, 0x5412, &(0x7f0000000140)=0xffffffc0) kernel console output (not intermixed with test programs): 6 audit(1752910809.882:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13796 comm="syz.2.2417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f07e1b8e9a9 code=0x7ffc0000 [ 1055.298239][ T26] audit: type=1326 audit(1752910809.882:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13796 comm="syz.2.2417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07e1b8e9a9 code=0x7ffc0000 [ 1055.913202][T11530] Bluetooth: (null): Invalid header checksum [ 1056.182438][T11530] Bluetooth: (null): Invalid header checksum [ 1056.246961][T11530] Bluetooth: (null): Invalid header checksum [ 1056.341830][T11530] Bluetooth: (null): Invalid header checksum [ 1063.691441][T10364] usb 6-1: new full-speed USB device number 17 using dummy_hcd [ 1063.952755][T10364] usb 6-1: not running at top speed; connect to a high speed hub [ 1064.002242][T10364] usb 6-1: config 1 interface 0 has no altsetting 0 [ 1064.054719][T13923] blktrace: Concurrent blktraces are not allowed on sg0 [ 1064.135366][T13923] lo speed is unknown, defaulting to 1000 [ 1064.230129][T10364] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1064.289718][T10364] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1064.365490][T10364] usb 6-1: Product: ꒇ蔤孯♐龾ꮬ槠飧곁‷ᎎ웦﨔溙錧熌區缍໼⣶쬑귛ꍾ˛ᘑ㯐嗼Ωꑨ퀭뒟范㶸鴑瀑휿㠕훊΍쁞挌閇獡ݢ㞵ꍬ䙧﯀蘛봔宨囨ꄆ㪉缀ꜹ☩⒅폹떿簒꠵ࢬ닱蓰礙걎蛕쇃㧷箳鿇椹熼ᘀ숢혫㾖ᾁ쨵㫙걤㈥뜻ȫ劗魌䕀꘱邡긺䁌ಶ녪ꇣ걭둗蟡醭䁀ස띫踖㚤퍒ᜋ [ 1066.566322][T10364] usb 6-1: Manufacturer: 嘋䶟偏眆⴫㗖馷瀒稍ิ縃삱匦䦷飋є灕啠见ꬦ쾁シꛨ怮䣲둾ﲱ㲝姾ऍ庌鵃燋膸娄頣򿢨톖쑇գ੄饬䓱鋏Ӿꐷ時궼䓡︸嵞喙⟷셝瑯褾鱊軖돟䷆谗끹쯜䕿ꣵ픭䮵猱拮쿜惪ꈻ讽텴㪐灧恺嬃涨휥◧苭ꆳ讄黐볋퇋壷㊼䉨頮汆ᷯञ⤭ᆰ엺 [ 1066.645443][T13940] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2448'. [ 1066.656245][T13940] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2448'. [ 1066.936594][T10364] usb 6-1: SerialNumber: 꾨ᐯ㝄㿪鎠怰⊑壐䊄⤢tඬ㴛鏻襳簳錗켟ꓡ菷圩㐉琒햠댚ꈶ渨嗱䨂蕐Ꮴ裉췻㑶䥅袨䏱༯梹ﴑኁ밪ዸ┙滆㙱綒揭뭨㺵礌闵℘鄬㻞㔲㏖⠿쀋಍뛰잗䝳想ﯵᓇ븜ш佧㵺쑮ᑬ梺雬淽ڑ玒ঁ䠫䃙叴琺閾뉶⃔ [ 1067.079578][T10364] usb 6-1: can't set config #1, error -71 [ 1067.102664][T10364] usb 6-1: USB disconnect, device number 17 [ 1071.500090][T11530] Bluetooth: (null): Invalid header checksum [ 1071.660624][T11530] Bluetooth: (null): Invalid header checksum [ 1074.193843][T13997] netlink: 36 bytes leftover after parsing attributes in process `syz.8.2462'. [ 1074.212099][ T1290] block nbd8: Attempted send on invalid socket [ 1074.218754][ T1290] I/O error, dev nbd8, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1074.230605][ T1290] block nbd8: Attempted send on invalid socket [ 1074.236842][ T1290] I/O error, dev nbd8, sector 120 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1074.246159][T13997] Mount JFS Failure: -5 [ 1077.017864][T14032] block nbd7: shutting down sockets [ 1079.524090][T14058] netlink: 'syz.1.2477': attribute type 3 has an invalid length. [ 1080.335015][T14071] blktrace: Concurrent blktraces are not allowed on sg0 [ 1080.411552][T14071] lo speed is unknown, defaulting to 1000 [ 1083.723216][T14083] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1086.252180][T14113] lo speed is unknown, defaulting to 1000 [ 1086.581339][T14129] input: syz1 as /devices/virtual/input/input11 [ 1086.636258][T10312] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 1086.931419][T10312] usb 3-1: device descriptor read/64, error -71 [ 1087.250915][T14130] netlink: 36 bytes leftover after parsing attributes in process `syz.8.2493'. [ 1087.435204][T14128] 9pnet: Could not find request transport: fd0x0000000000000003 [ 1087.445647][T10312] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 1087.624520][T10312] usb 3-1: device descriptor read/64, error -71 [ 1087.751602][T10312] usb usb3-port1: attempt power cycle [ 1088.181350][T10312] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 1088.676216][T10312] usb 3-1: device descriptor read/8, error -71 [ 1089.932304][T14153] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1090.296699][T14169] netlink: 'syz.5.2503': attribute type 3 has an invalid length. [ 1091.816166][T14180] Bluetooth: MGMT ver 1.22 [ 1093.131395][T10167] usb 9-1: new full-speed USB device number 2 using dummy_hcd [ 1093.837157][T14202] netlink: 'syz.5.2512': attribute type 3 has an invalid length. [ 1094.152824][T10167] usb 9-1: config index 0 descriptor too short (expected 156, got 27) [ 1094.201330][T10167] usb 9-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 1094.256380][T10167] usb 9-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 10 [ 1094.282058][T10167] usb 9-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid maxpacket 255, setting to 64 [ 1094.336554][T10167] usb 9-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 1095.480474][T10167] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1095.490946][T10167] usb 9-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 1095.500554][T10167] usb 9-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 1095.509641][T10167] usb 9-1: Product: syz [ 1095.514160][T10167] usb 9-1: Manufacturer: syz [ 1095.518848][T10167] usb 9-1: SerialNumber: syz [ 1095.528992][T10167] usb 9-1: config 0 descriptor?? [ 1095.542166][T14192] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1095.570975][T10167] ldusb 9-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 1095.587097][T10167] ldusb 9-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 1096.147074][T10167] usb 9-1: USB disconnect, device number 2 [ 1096.258934][T10167] ldusb 9-1:0.0: LD USB Device #0 now disconnected [ 1097.221399][ T8626] Bluetooth: hci3: command 0x0406 tx timeout [ 1098.581515][ T4318] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 1098.801443][ T4318] usb 3-1: Using ep0 maxpacket: 8 [ 1098.820918][ T4318] usb 3-1: config index 0 descriptor too short (expected 30, got 18) [ 1099.005896][ T4318] usb 3-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 1099.204545][ T4318] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1099.216410][ T4318] usb 3-1: Product: syz [ 1099.220659][ T4318] usb 3-1: Manufacturer: syz [ 1099.226127][ T4318] usb 3-1: SerialNumber: syz [ 1099.533872][ T4318] usb 3-1: config 0 descriptor?? [ 1099.667385][ T4318] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 1099.675906][ T4318] usb 3-1: setting power ON [ 1099.681097][ T4318] dvb-usb: bulk message failed: -22 (2/0) [ 1099.827485][T14260] blktrace: Concurrent blktraces are not allowed on sg0 [ 1099.836024][ T4318] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1099.906560][T14260] lo speed is unknown, defaulting to 1000 [ 1099.951779][ T4318] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 1099.962027][ T4318] usb 3-1: media controller created [ 1099.982104][ T4318] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1100.097213][ T4318] usb 3-1: selecting invalid altsetting 6 [ 1100.104943][ T4318] usb 3-1: digital interface selection failed (-22) [ 1100.112018][ T4318] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 1100.124747][ T4318] usb 3-1: setting power OFF [ 1100.130017][ T4318] dvb-usb: bulk message failed: -22 (2/0) [ 1100.274305][ T4318] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 1100.285301][ T4318] (NULL device *): no alternate interface [ 1100.498287][ T4318] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 1100.919103][ T4318] usb 3-1: USB disconnect, device number 31 [ 1103.342480][ T7] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 1104.060615][ T7] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1104.763676][ T7] usb 2-1: config 4 has an invalid interface number: 113 but max is 0 [ 1104.776013][ T7] usb 2-1: config 4 has no interface number 0 [ 1104.782297][ T7] usb 2-1: config 4 interface 113 has no altsetting 0 [ 1104.791657][ T7] usb 2-1: New USB device found, idVendor=08ca, idProduct=0110, bcdDevice=b1.a1 [ 1104.800723][ T7] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1104.810201][ T7] usb 2-1: Product: syz [ 1104.814642][ T7] usb 2-1: Manufacturer: syz [ 1104.819252][ T7] usb 2-1: SerialNumber: syz [ 1105.165781][ T7] gspca_main: mr97310a-2.14.0 probing 08ca:0110 [ 1105.192185][ T7] gspca_mr97310a: reg write [21] error -22 [ 1105.201378][ T7] mr97310a: probe of 2-1:4.113 failed with error -22 [ 1105.251109][ T7] usb 2-1: USB disconnect, device number 20 [ 1106.823553][ T7] usb 6-1: new full-speed USB device number 18 using dummy_hcd [ 1107.122877][ T7] usb 6-1: config 1 interface 0 has no altsetting 0 [ 1107.137203][ T7] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1107.617901][ T7] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1107.631591][ T7] usb 6-1: Product: syz [ 1107.639218][ T7] usb 6-1: Manufacturer: syz [ 1107.644670][ T7] usb 6-1: SerialNumber: syz [ 1108.534715][ T7] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 18 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 1109.915176][ T4336] usb 6-1: USB disconnect, device number 18 [ 1109.995626][ T4336] usblp0: removed [ 1110.041429][T12133] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 1110.093603][T14379] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1110.110868][T14379] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 1110.130042][T14379] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 1110.327034][T14382] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1110.338698][T14382] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1110.350485][T14382] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1110.364294][T14382] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1110.387410][T14382] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1110.399571][T14382] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1110.411807][T14382] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1110.424155][T14382] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1110.435819][T14382] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1110.447682][T14382] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1110.533541][T14379] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 1110.549457][T14379] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 1110.562476][T14379] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 1110.575817][T14379] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 1111.051486][T12133] usb 3-1: Using ep0 maxpacket: 16 [ 1111.064339][T12133] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1111.146134][T12133] usb 3-1: config 0 has no interfaces? [ 1111.697856][T12133] usb 3-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 1111.750215][T12133] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1111.776807][T12133] usb 3-1: Product: syz [ 1111.800286][T12133] usb 3-1: Manufacturer: syz [ 1111.816803][T12133] usb 3-1: SerialNumber: syz [ 1111.902358][T12133] usb 3-1: config 0 descriptor?? [ 1113.806637][ T4318] usb 3-1: USB disconnect, device number 32 [ 1115.679296][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 1115.686198][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 1115.692934][T14417] blktrace: Concurrent blktraces are not allowed on sg0 [ 1116.559950][T14417] lo speed is unknown, defaulting to 1000 [ 1124.360955][T14503] blktrace: Concurrent blktraces are not allowed on sg0 [ 1124.440939][T14503] lo speed is unknown, defaulting to 1000 [ 1125.712997][ T4509] Bluetooth: (null): Too short H5 packet [ 1128.006987][T14531] delete_channel: no stack [ 1128.972118][T14540] netlink: 'syz.8.2589': attribute type 21 has an invalid length. [ 1129.013874][T14540] netlink: 6 bytes leftover after parsing attributes in process `syz.8.2589'. [ 1130.409377][T14573] blktrace: Concurrent blktraces are not allowed on sg0 [ 1130.482222][ T4411] Bluetooth: (null): Too short H5 packet [ 1130.550246][ T4411] Bluetooth: (null): Invalid header checksum [ 1130.698194][T14573] lo speed is unknown, defaulting to 1000 [ 1130.842165][ T4411] Bluetooth: (null): Invalid header checksum [ 1133.238212][T14600] binder: 14596:14600 ioctl 400c620e 200000000100 returned -22 [ 1134.751574][T12133] usb 6-1: new full-speed USB device number 19 using dummy_hcd [ 1135.262931][T12133] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1135.295271][T12133] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1135.324283][T12133] usb 6-1: New USB device found, idVendor=146b, idProduct=0902, bcdDevice= 0.00 [ 1136.133137][T12133] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1136.580346][T12133] usb 6-1: config 0 descriptor?? [ 1137.700757][T14641] blktrace: Concurrent blktraces are not allowed on sg0 [ 1138.233684][T12133] bigben 0003:146B:0902.0004: unexpected rdesc, please submit for review [ 1138.283436][T12133] bigben 0003:146B:0902.0004: hidraw0: USB HID v0.01 Device [HID 146b:0902] on usb-dummy_hcd.5-1/input0 [ 1138.501100][ T9960] Bluetooth: hci6: Ignoring HCI_Connection_Complete for existing connection [ 1138.719730][T12133] bigben 0003:146B:0902.0004: not enough fields in HID_OUTPUT_REPORT 0 [ 1138.753562][T12133] bigben 0003:146B:0902.0004: no output report found [ 1138.789124][T12133] usb 6-1: USB disconnect, device number 19 [ 1138.864187][T14641] lo speed is unknown, defaulting to 1000 [ 1139.312785][T14667] QAT: Device 7 not found [ 1139.522517][T14661] fido_id[14661]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 1139.558470][T14666] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1144.247691][T14718] blktrace: Concurrent blktraces are not allowed on sg0 [ 1144.334742][T14705] sctp: [Deprecated]: syz.8.2632 (pid 14705) Use of int in max_burst socket option deprecated. [ 1144.334742][T14705] Use struct sctp_assoc_value instead [ 1144.496113][ T9960] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:201' [ 1144.506022][ T9960] CPU: 1 PID: 9960 Comm: kworker/u5:1 Not tainted 6.1.146-syzkaller #0 [ 1144.514255][ T9960] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1144.524315][ T9960] Workqueue: hci4 hci_rx_work [ 1144.529109][ T9960] Call Trace: [ 1144.532404][ T9960] [ 1144.535348][ T9960] dump_stack_lvl+0x168/0x22e [ 1144.540051][ T9960] ? show_regs_print_info+0x12/0x12 [ 1144.545272][ T9960] ? load_image+0x3b0/0x3b0 [ 1144.549795][ T9960] sysfs_create_dir_ns+0x252/0x280 [ 1144.554900][ T9960] ? hci_rx_work+0x3eb/0xd40 [ 1144.559486][ T9960] ? sysfs_warn_dup+0xa0/0xa0 [ 1144.564149][ T9960] ? do_raw_spin_unlock+0x11d/0x230 [ 1144.569336][ T9960] kobject_add_internal+0x6b8/0xc80 [ 1144.574523][ T9960] kobject_add+0x152/0x210 [ 1144.578935][ T9960] ? kobject_init+0x1d0/0x1d0 [ 1144.583607][ T9960] ? klist_children_get+0x50/0x50 [ 1144.588615][ T9960] ? get_device_parent+0x121/0x3f0 [ 1144.593711][ T9960] device_add+0x483/0xfb0 [ 1144.598041][ T9960] ? kmem_cache_free+0xf7/0x290 [ 1144.602921][ T9960] hci_conn_add_sysfs+0xd1/0x1e0 [ 1144.607854][ T9960] le_conn_complete_evt+0xd1d/0x1320 [ 1144.613139][ T9960] ? hci_le_big_info_adv_report_evt+0x310/0x310 [ 1144.619370][ T9960] ? __mutex_unlock_slowpath+0x19e/0x6a0 [ 1144.624992][ T9960] ? skb_pull_data+0xf7/0x200 [ 1144.629663][ T9960] hci_le_conn_complete_evt+0x183/0x440 [ 1144.635202][ T9960] ? hci_remote_host_features_evt+0x270/0x270 [ 1144.641275][ T9960] hci_event_packet+0x791/0x1210 [ 1144.646211][ T9960] ? bis_list+0x280/0x280 [ 1144.650532][ T9960] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 1144.656416][ T9960] ? kcov_remote_start+0x4c7/0x7e0 [ 1144.661515][ T9960] ? mce_start+0x60/0x140 [ 1144.665837][ T9960] ? hci_send_to_monitor+0x9c/0x4a0 [ 1144.671025][ T9960] hci_rx_work+0x3eb/0xd40 [ 1144.675430][ T9960] ? _raw_spin_unlock+0x40/0x40 [ 1144.680272][ T9960] ? process_one_work+0x7a1/0x1160 [ 1144.685370][ T9960] process_one_work+0x898/0x1160 [ 1144.690304][ T9960] ? worker_detach_from_pool+0x240/0x240 [ 1144.695939][ T9960] ? _raw_spin_lock_irq+0xab/0xe0 [ 1144.700952][ T9960] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 1144.706314][ T9960] ? kthread_data+0x4b/0xc0 [ 1144.710808][ T9960] worker_thread+0xaa2/0x1250 [ 1144.715511][ T9960] ? __kthread_parkme+0x162/0x1c0 [ 1144.720539][ T9960] kthread+0x29d/0x330 [ 1144.724598][ T9960] ? worker_clr_flags+0x1a0/0x1a0 [ 1144.729604][ T9960] ? kthread_blkcg+0xd0/0xd0 [ 1144.734184][ T9960] ret_from_fork+0x1f/0x30 [ 1144.738608][ T9960] [ 1144.835610][ T9960] kobject_add_internal failed for hci4:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 1144.849789][ T9960] Bluetooth: hci4: failed to register connection device [ 1145.886638][T14718] lo speed is unknown, defaulting to 1000 [ 1147.043935][T10312] hid-generic 0003:0004:0000.0005: unknown main item tag 0x0 [ 1147.105009][T10312] hid-generic 0003:0004:0000.0005: unknown main item tag 0x0 [ 1147.137503][T10312] hid-generic 0003:0004:0000.0005: unknown main item tag 0x0 [ 1148.027036][T10312] hid-generic 0003:0004:0000.0005: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 1148.345640][T14754] fido_id[14754]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1148.481730][ T51] Bluetooth: (null): Too short H5 packet [ 1148.490760][ T51] Bluetooth: (null): Invalid header checksum [ 1148.500249][ T51] Bluetooth: (null): Invalid header checksum [ 1148.598629][T14763] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1152.021480][ T8626] Bluetooth: hci4: command 0x0406 tx timeout [ 1152.059859][T14789] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1152.067012][T14797] QAT: Device 7 not found [ 1154.078749][T14816] batman_adv: batadv0: Adding interface: dummy0 [ 1154.085165][T14816] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1154.110424][ C1] vkms_vblank_simulate: vblank timer overrun [ 1154.116619][T14816] batman_adv: batadv0: Interface activated: dummy0 [ 1154.140311][T14817] batadv0: mtu less than device minimum [ 1154.148150][T14817] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1154.160952][T14817] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1154.173155][T14817] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1154.185398][T14817] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1154.197624][T14817] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1154.209839][T14817] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1154.222075][T14817] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1154.234289][T14817] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1154.246504][T14817] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1154.544406][T14822] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1156.771412][ T4336] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 1157.202982][ T4336] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1157.241564][ T4336] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1157.250554][ T4336] usb 9-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 1157.274089][ T4336] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1157.298340][ T4336] usb 9-1: Product: syz [ 1157.302965][ T4336] usb 9-1: Manufacturer: syz [ 1157.307676][ T4336] usb 9-1: SerialNumber: syz [ 1157.342825][ T4336] usb 9-1: config 0 descriptor?? [ 1157.361201][ T4336] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 1158.667314][ T4336] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1158.931972][ T4336] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 1158.940745][ T4336] usb 9-1: media controller created [ 1158.968960][ T4336] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1159.911838][ T4336] DVB: Unable to find symbol tda10046_attach() [ 1159.919275][ T4336] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 1160.837720][ T4336] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 1160.999772][ T4336] dvb_usb_m920x: probe of 9-1:0.0 failed with error -71 [ 1161.055441][ T4336] usb 9-1: USB disconnect, device number 3 [ 1163.611712][ T9960] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1163.623199][ T9960] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1163.655206][ T9960] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1163.663586][ T9960] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1163.677231][ T9960] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1163.684517][ T9960] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1163.719527][ T4279] bond0: (slave syz_tun): Releasing backup interface [ 1163.974104][ T9347] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1164.034809][T14923] lo speed is unknown, defaulting to 1000 [ 1164.341890][ T9347] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1164.958984][ T9347] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1165.505818][ T9347] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1165.701383][ T8626] Bluetooth: hci1: command 0x0409 tx timeout [ 1166.304244][T14923] chnl_net:caif_netlink_parms(): no params data found [ 1167.781380][ T9960] Bluetooth: hci1: command 0x041b tx timeout [ 1168.240174][T14923] bridge0: port 1(bridge_slave_0) entered blocking state [ 1168.306749][T14923] bridge0: port 1(bridge_slave_0) entered disabled state [ 1168.432636][T14923] device bridge_slave_0 entered promiscuous mode [ 1168.442621][T14923] bridge0: port 2(bridge_slave_1) entered blocking state [ 1168.449807][T14923] bridge0: port 2(bridge_slave_1) entered disabled state [ 1168.457923][T14923] device bridge_slave_1 entered promiscuous mode [ 1169.568507][T14923] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1169.861511][ T9960] Bluetooth: hci1: command 0x040f tx timeout [ 1170.643200][T14923] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1171.134686][T14923] team0: Port device team_slave_0 added [ 1171.170555][T14923] team0: Port device team_slave_1 added [ 1172.310377][ T9960] Bluetooth: hci1: command 0x0419 tx timeout [ 1172.702786][T15046] netlink: 36 bytes leftover after parsing attributes in process `syz.7.2712'. [ 1173.802800][T14923] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1173.837735][T14923] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1174.007448][T14923] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1174.150903][T14923] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1174.172568][T14923] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1174.310461][T14923] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1176.313092][T14923] device hsr_slave_0 entered promiscuous mode [ 1176.331152][T14923] device hsr_slave_1 entered promiscuous mode [ 1176.367272][T14923] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1176.405126][T14923] Cannot create hsr debugfs directory [ 1176.889540][T15087] delete_channel: no stack [ 1177.081585][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.088136][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 1178.077999][T15097] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2724'. [ 1180.784943][ T9347] device hsr_slave_0 left promiscuous mode [ 1181.103940][ T9347] device hsr_slave_1 left promiscuous mode [ 1181.311808][ T9347] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1181.371374][ T9347] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1181.411913][ T9347] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1181.419322][ T9347] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1181.562512][T15116] NILFS (nullb0): couldn't find nilfs on the device [ 1181.902404][T10231] usb 2-1: new full-speed USB device number 21 using dummy_hcd [ 1181.927405][ T9347] device bridge_slave_1 left promiscuous mode [ 1181.938784][ T9347] bridge0: port 2(bridge_slave_1) entered disabled state [ 1181.962957][ T9347] device bridge_slave_0 left promiscuous mode [ 1181.969203][ T9347] bridge0: port 1(bridge_slave_0) entered disabled state [ 1182.850316][T10231] usb 2-1: not running at top speed; connect to a high speed hub [ 1182.882198][T10231] usb 2-1: config 1 interface 0 has no altsetting 0 [ 1182.898725][T10231] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1182.921316][T10231] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1182.931627][T10231] usb 2-1: Product: ꒇ蔤孯♐龾ꮬ槠飧곁‷ᎎ웦﨔溙錧熌區缍໼⣶쬑귛ꍾ˛ᘑ㯐嗼Ωꑨ퀭뒟范㶸鴑瀑휿㠕훊΍쁞挌閇獡ݢ㞵ꍬ䙧﯀蘛봔宨囨ꄆ㪉缀ꜹ☩⒅폹떿簒꠵ࢬ닱蓰礙걎蛕쇃㧷箳鿇椹熼ᘀ숢혫㾖ᾁ쨵㫙걤㈥뜻ȫ劗魌䕀꘱邡긺䁌ಶ녪ꇣ걭둗蟡醭䁀ස띫踖㚤퍒ᜋ [ 1182.970229][T10231] usb 2-1: Manufacturer: 嘋䶟偏眆⴫㗖馷瀒稍ิ縃삱匦䦷飋є灕啠见ꬦ쾁シꛨ怮䣲둾ﲱ㲝姾ऍ庌鵃燋膸娄頣򿢨톖쑇գ੄饬䓱鋏Ӿꐷ時궼䓡︸嵞喙⟷셝瑯褾鱊軖돟䷆谗끹쯜䕿ꣵ픭䮵猱拮쿜惪ꈻ讽텴㪐灧恺嬃涨휥◧苭ꆳ讄黐볋퇋壷㊼䉨頮汆ᷯञ⤭ᆰ엺 [ 1183.007047][T10231] usb 2-1: SerialNumber: 꾨ᐯ㝄㿪鎠怰⊑壐䊄⤢tඬ㴛鏻襳簳錗켟ꓡ菷圩㐉琒햠댚ꈶ渨嗱䨂蕐Ꮴ裉췻㑶䥅袨䏱༯梹ﴑኁ밪ዸ┙滆㙱綒揭뭨㺵礌闵℘鄬㻞㔲㏖⠿쀋಍뛰잗䝳想ﯵᓇ븜ш佧㵺쑮ᑬ梺雬淽ڑ玒ঁ䠫䃙叴琺閾뉶⃔ [ 1183.581926][ T9347] device veth1_macvtap left promiscuous mode [ 1183.588611][ T9347] device veth0_macvtap left promiscuous mode [ 1183.637798][ T9347] device veth1_vlan left promiscuous mode [ 1183.665752][ T9347] device veth0_vlan left promiscuous mode [ 1183.687944][T10231] usb 2-1: can't set config #1, error -71 [ 1183.718619][T10231] usb 2-1: USB disconnect, device number 21 [ 1184.940348][T15142] netlink: 'syz.5.2735': attribute type 3 has an invalid length. [ 1185.228870][ T9347] bond4 (unregistering): Released all slaves [ 1185.639133][ T9347] bond3 (unregistering): Released all slaves [ 1185.825973][ T9347] bond2 (unregistering): Released all slaves [ 1186.895095][ T9347] bond1 (unregistering): Released all slaves [ 1188.257677][ T9347] team0 (unregistering): Port device team_slave_1 removed [ 1188.297752][ T9347] team0 (unregistering): Port device team_slave_0 removed [ 1188.338265][ T9347] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1188.381020][ T9347] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1189.309079][ T9347] bond0 (unregistering): Released all slaves [ 1191.430518][T15182] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2744'. [ 1191.537198][T15181] netlink: 'syz.8.2745': attribute type 3 has an invalid length. [ 1193.199662][T15198] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1193.214494][T15198] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 1193.230509][T15198] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 1193.244479][T15198] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 1193.272859][T15198] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 1193.285011][T15198] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 1193.297855][T15198] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 1194.058632][T15201] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 1194.058632][T15201] program syz.8.2747 not setting count and/or reply_len properly [ 1195.437730][T14923] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1195.549551][T14923] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1195.568131][T14923] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1195.602957][T14923] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1196.802282][T15206] tipc: Started in network mode [ 1196.807533][T15206] tipc: Node identity c2adbf28857b, cluster identity 4711 [ 1196.857790][T15206] tipc: Enabled bearer , priority 0 [ 1197.297304][T14923] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1197.428130][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1197.856926][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1197.950631][T14923] 8021q: adding VLAN 0 to HW filter on device team0 [ 1197.973605][ T125] tipc: Node number set to 1205255976 [ 1198.322577][ T9347] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1198.415767][ T9347] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1198.554541][ T9347] bridge0: port 1(bridge_slave_0) entered blocking state [ 1198.561670][ T9347] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1198.703343][ T9347] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1198.718784][ T9347] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1199.577141][ T9347] bridge0: port 2(bridge_slave_1) entered blocking state [ 1199.584321][ T9347] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1199.641601][ T9347] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1199.895614][ T9347] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1200.502367][T10158] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1201.968188][T10158] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1201.980467][T10158] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1201.989883][T10158] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1201.999629][T10158] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1202.062361][T10158] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1203.745995][T14923] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1203.832637][T14923] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1204.062571][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1204.327435][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1204.372899][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1204.400570][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1204.428712][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1204.451725][T15204] tipc: Disabling bearer [ 1206.542088][T15309] QAT: Device 7 not found [ 1209.610881][T15341] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1209.623075][T15341] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 1209.631561][T15341] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 1209.639519][T15341] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 1209.648017][T15341] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 1209.656608][T15341] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 1209.946046][T15341] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 1210.137840][T15341] sctp_transport_update_pmtu: 48 callbacks suppressed [ 1210.137910][T15341] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1210.155942][T15341] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1210.167589][T15341] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1210.182619][T15341] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1210.195253][T15341] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1210.206455][T15341] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1210.220392][T15341] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1210.233729][T15341] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1210.246942][T15341] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1210.258279][T15341] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1212.072704][T15361] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1212.103063][T15361] QAT: Device 7 not found [ 1212.209585][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1212.223574][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1212.240810][T14923] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1213.317383][T10158] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1214.001077][T10158] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1214.036519][T14923] device veth0_vlan entered promiscuous mode [ 1214.052268][T10158] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1214.074971][T10158] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1214.911362][T14923] device veth1_vlan entered promiscuous mode [ 1214.918882][T10158] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1214.930801][T10158] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1216.140359][T10158] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1216.176900][T14923] device veth0_macvtap entered promiscuous mode [ 1216.240540][T10158] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1216.268077][T10158] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1216.297032][T10158] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1216.415025][T14923] device veth1_macvtap entered promiscuous mode [ 1217.630856][T15398] netlink: 'syz.5.2792': attribute type 3 has an invalid length. [ 1217.639643][T14923] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1217.694430][T14923] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1217.747990][T14923] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1217.915347][T15402] sctp: [Deprecated]: syz.7.2793 (pid 15402) Use of int in max_burst socket option deprecated. [ 1217.915347][T15402] Use struct sctp_assoc_value instead [ 1218.217632][T14923] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1218.243127][T14923] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1218.255021][T14923] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1218.265774][T14923] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1218.277905][T14923] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1218.291990][T14923] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1218.936885][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1219.144502][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1219.243054][T14923] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1219.309661][T14923] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1219.320156][T14923] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1219.337722][T14923] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1219.366210][T14923] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1219.391101][T14923] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1219.418737][T14923] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1219.434308][T14923] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1219.919590][T14923] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1219.940187][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1219.956614][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1220.016853][T14923] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1220.127828][T14923] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1220.139530][T14923] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1220.148574][T14923] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1220.804819][T15165] usb 6-1: new full-speed USB device number 20 using dummy_hcd [ 1221.147929][T15165] usb 6-1: not running at top speed; connect to a high speed hub [ 1221.168476][T15420] delete_channel: no stack [ 1221.210988][T15165] usb 6-1: config 1 interface 0 has no altsetting 0 [ 1221.317386][T15165] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1221.366110][T15165] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1221.429837][T15165] usb 6-1: Product: ꒇ蔤孯♐龾ꮬ槠飧곁‷ᎎ웦﨔溙錧熌區缍໼⣶쬑귛ꍾ˛ᘑ㯐嗼Ωꑨ퀭뒟范㶸鴑瀑휿㠕훊΍쁞挌閇獡ݢ㞵ꍬ䙧﯀蘛봔宨囨ꄆ㪉缀ꜹ☩⒅폹떿簒꠵ࢬ닱蓰礙걎蛕쇃㧷箳鿇椹熼ᘀ숢혫㾖ᾁ쨵㫙걤㈥뜻ȫ劗魌䕀꘱邡긺䁌ಶ녪ꇣ걭둗蟡醭䁀ස띫踖㚤퍒ᜋ [ 1221.564605][T15165] usb 6-1: Manufacturer: 嘋䶟偏眆⴫㗖馷瀒稍ิ縃삱匦䦷飋є灕啠见ꬦ쾁シꛨ怮䣲둾ﲱ㲝姾ऍ庌鵃燋膸娄頣򿢨톖쑇գ੄饬䓱鋏Ӿꐷ時궼䓡︸嵞喙⟷셝瑯褾鱊軖돟䷆谗끹쯜䕿ꣵ픭䮵猱拮쿜惪ꈻ讽텴㪐灧恺嬃涨휥◧苭ꆳ讄黐볋퇋壷㊼䉨頮汆ᷯञ⤭ᆰ엺 [ 1221.628353][T15165] usb 6-1: SerialNumber: 꾨ᐯ㝄㿪鎠怰⊑壐䊄⤢tඬ㴛鏻襳簳錗켟ꓡ菷圩㐉琒햠댚ꈶ渨嗱䨂蕐Ꮴ裉췻㑶䥅袨䏱༯梹ﴑኁ밪ዸ┙滆㙱綒揭뭨㺵礌闵℘鄬㻞㔲㏖⠿쀋಍뛰잗䝳想ﯵᓇ븜ш佧㵺쑮ᑬ梺雬淽ڑ玒ঁ䠫䃙叴琺閾뉶⃔ [ 1221.686511][ T5032] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1221.706598][ T5032] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1221.743088][ T56] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1221.761308][ T56] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1221.763541][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1221.786092][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1221.900074][T15165] usblp 6-1:1.0: usblp0: USB Bidirectional printer dev 20 if 0 alt 243 proto 3 vid 0x0525 pid 0xA4A8 [ 1221.939018][T15165] usb 6-1: USB disconnect, device number 20 [ 1221.945474][T12133] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 1221.974818][T15165] usblp0: removed [ 1222.141423][T12133] usb 9-1: Using ep0 maxpacket: 16 [ 1222.153692][T12133] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1222.167480][T12133] usb 9-1: config 0 has no interfaces? [ 1222.177244][T12133] usb 9-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 1222.190349][T12133] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1222.199450][T12133] usb 9-1: Product: syz [ 1222.208598][T12133] usb 9-1: Manufacturer: syz [ 1222.213473][T12133] usb 9-1: SerialNumber: syz [ 1222.227930][T12133] usb 9-1: config 0 descriptor?? [ 1222.456979][T12133] usb 9-1: USB disconnect, device number 4 [ 1224.636954][T15465] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1224.649268][T15465] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 1224.657506][T15465] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 1224.665586][T15465] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 1224.673716][T15465] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 1224.681910][T15465] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 1224.696557][T15465] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 1227.611122][T15485] block nbd8: shutting down sockets [ 1228.401646][T15492] loop6: detected capacity change from 0 to 7 [ 1228.709160][ T9960] Bluetooth: hci6: Ignoring HCI_Connection_Complete for existing connection [ 1228.722187][T15492] Dev loop6: unable to read RDB block 7 [ 1228.727800][T15492] loop6: AHDI p1 p2 p3 [ 1228.732029][T15492] loop6: partition table partially beyond EOD, truncated [ 1228.739286][T15492] loop6: p1 start 1601398130 is beyond EOD, truncated [ 1228.746177][T15492] loop6: p2 start 1702059890 is beyond EOD, truncated [ 1229.542234][ T9960] Bluetooth: hci1: command 0x0405 tx timeout [ 1229.717656][T15506] netlink: 36 bytes leftover after parsing attributes in process `syz.7.2819'. [ 1231.554905][T15521] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1231.570515][T15521] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 1231.587811][T15521] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 1231.749650][T15521] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 1231.789803][T15521] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 1231.802362][T15521] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 1231.816001][T15521] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 1233.753245][T15532] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1234.068500][T15532] QAT: Device 7 not found [ 1234.594077][T12791] bond0: (slave syz_tun): Releasing backup interface [ 1235.529293][T15557] netlink: 36 bytes leftover after parsing attributes in process `syz.7.2834'. [ 1235.612039][ T8626] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1235.639840][ T8626] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1235.649655][ T8626] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1236.533214][ T8626] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1236.542884][ T8626] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1236.550151][ T8626] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1236.613042][T15560] lo speed is unknown, defaulting to 1000 [ 1238.517120][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.524027][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 1238.581418][ T8626] Bluetooth: hci2: command 0x0409 tx timeout [ 1239.071363][ T4269] usb 3-1: new full-speed USB device number 33 using dummy_hcd [ 1239.258536][T15560] chnl_net:caif_netlink_parms(): no params data found [ 1239.275335][ T4269] usb 3-1: not running at top speed; connect to a high speed hub [ 1239.305402][ T4269] usb 3-1: config 1 interface 0 has no altsetting 0 [ 1239.510446][ T4269] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1239.569220][T15592] QAT: Device 7 not found [ 1239.823244][ T4269] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1239.833694][ T4269] usb 3-1: Product: ꒇ蔤孯♐龾ꮬ槠飧곁‷ᎎ웦﨔溙錧熌區缍໼⣶쬑귛ꍾ˛ᘑ㯐嗼Ωꑨ퀭뒟范㶸鴑瀑휿㠕훊΍쁞挌閇獡ݢ㞵ꍬ䙧﯀蘛봔宨囨ꄆ㪉缀ꜹ☩⒅폹떿簒꠵ࢬ닱蓰礙걎蛕쇃㧷箳鿇椹熼ᘀ숢혫㾖ᾁ쨵㫙걤㈥뜻ȫ劗魌䕀꘱邡긺䁌ಶ녪ꇣ걭둗蟡醭䁀ස띫踖㚤퍒ᜋ [ 1239.895383][ T4269] usb 3-1: Manufacturer: 嘋䶟偏眆⴫㗖馷瀒稍ิ縃삱匦䦷飋є灕啠见ꬦ쾁シꛨ怮䣲둾ﲱ㲝姾ऍ庌鵃燋膸娄頣򿢨톖쑇գ੄饬䓱鋏Ӿꐷ時궼䓡︸嵞喙⟷셝瑯褾鱊軖돟䷆谗끹쯜䕿ꣵ픭䮵猱拮쿜惪ꈻ讽텴㪐灧恺嬃涨휥◧苭ꆳ讄黐볋퇋壷㊼䉨頮汆ᷯञ⤭ᆰ엺 [ 1239.948077][ T4269] usb 3-1: SerialNumber: 꾨ᐯ㝄㿪鎠怰⊑壐䊄⤢tඬ㴛鏻襳簳錗켟ꓡ菷圩㐉琒햠댚ꈶ渨嗱䨂蕐Ꮴ裉췻㑶䥅袨䏱༯梹ﴑኁ밪ዸ┙滆㙱綒揭뭨㺵礌闵℘鄬㻞㔲㏖⠿쀋಍뛰잗䝳想ﯵᓇ븜ш佧㵺쑮ᑬ梺雬淽ڑ玒ঁ䠫䃙叴琺閾뉶⃔ [ 1240.339863][T15600] NILFS (nullb0): couldn't find nilfs on the device [ 1240.362804][ T4269] usblp 3-1:1.0: usblp0: USB Bidirectional printer dev 33 if 0 alt 243 proto 3 vid 0x0525 pid 0xA4A8 [ 1240.465022][ T4269] usb 3-1: USB disconnect, device number 33 [ 1240.515941][ T4269] usblp0: removed [ 1240.562866][T15560] bridge0: port 1(bridge_slave_0) entered blocking state [ 1240.569980][T15560] bridge0: port 1(bridge_slave_0) entered disabled state [ 1240.599450][T15560] device bridge_slave_0 entered promiscuous mode [ 1240.614818][T15560] bridge0: port 2(bridge_slave_1) entered blocking state [ 1240.627936][T15560] bridge0: port 2(bridge_slave_1) entered disabled state [ 1240.645384][T15560] device bridge_slave_1 entered promiscuous mode [ 1240.671323][ T8626] Bluetooth: hci2: command 0x041b tx timeout [ 1240.805256][T15560] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1240.825264][T15560] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1240.986989][ T8626] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 1240.997105][ T8626] CPU: 1 PID: 8626 Comm: kworker/u5:0 Not tainted 6.1.146-syzkaller #0 [ 1241.005370][ T8626] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1241.015443][ T8626] Workqueue: hci3 hci_rx_work [ 1241.020161][ T8626] Call Trace: [ 1241.023435][ T8626] [ 1241.026354][ T8626] dump_stack_lvl+0x168/0x22e [ 1241.031024][ T8626] ? show_regs_print_info+0x12/0x12 [ 1241.036213][ T8626] ? load_image+0x3b0/0x3b0 [ 1241.040713][ T8626] sysfs_create_dir_ns+0x252/0x280 [ 1241.045825][ T8626] ? hci_rx_work+0x3eb/0xd40 [ 1241.050514][ T8626] ? sysfs_warn_dup+0xa0/0xa0 [ 1241.055182][ T8626] ? do_raw_spin_unlock+0x11d/0x230 [ 1241.060373][ T8626] kobject_add_internal+0x6b8/0xc80 [ 1241.065570][ T8626] kobject_add+0x152/0x210 [ 1241.069989][ T8626] ? kobject_init+0x1d0/0x1d0 [ 1241.074676][ T8626] ? klist_children_get+0x50/0x50 [ 1241.079700][ T8626] ? get_device_parent+0x121/0x3f0 [ 1241.084957][ T8626] device_add+0x483/0xfb0 [ 1241.089295][ T8626] ? kmem_cache_free+0xf7/0x290 [ 1241.094160][ T8626] hci_conn_add_sysfs+0xd1/0x1e0 [ 1241.099101][ T8626] le_conn_complete_evt+0xd1d/0x1320 [ 1241.104402][ T8626] ? hci_le_big_info_adv_report_evt+0x310/0x310 [ 1241.110652][ T8626] ? __mutex_unlock_slowpath+0x19e/0x6a0 [ 1241.116286][ T8626] ? skb_pull_data+0xf7/0x200 [ 1241.120966][ T8626] hci_le_conn_complete_evt+0x183/0x440 [ 1241.126517][ T8626] ? hci_remote_host_features_evt+0x270/0x270 [ 1241.132592][ T8626] hci_event_packet+0x791/0x1210 [ 1241.137530][ T8626] ? bis_list+0x280/0x280 [ 1241.141852][ T8626] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 1241.147749][ T8626] ? kcov_remote_start+0x4c7/0x7e0 [ 1241.152855][ T8626] ? mce_start+0x60/0x140 [ 1241.157199][ T8626] ? hci_send_to_monitor+0x9c/0x4a0 [ 1241.162412][ T8626] hci_rx_work+0x3eb/0xd40 [ 1241.166834][ T8626] ? _raw_spin_unlock+0x40/0x40 [ 1241.171691][ T8626] ? process_one_work+0x7a1/0x1160 [ 1241.176797][ T8626] process_one_work+0x898/0x1160 [ 1241.181758][ T8626] ? worker_detach_from_pool+0x240/0x240 [ 1241.187404][ T8626] ? _raw_spin_lock_irq+0xab/0xe0 [ 1241.192436][ T8626] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 1241.197811][ T8626] ? kthread_data+0x4b/0xc0 [ 1241.202320][ T8626] worker_thread+0xaa2/0x1250 [ 1241.207006][ T8626] ? __kthread_parkme+0x162/0x1c0 [ 1241.212044][ T8626] kthread+0x29d/0x330 [ 1241.216108][ T8626] ? worker_clr_flags+0x1a0/0x1a0 [ 1241.221648][ T8626] ? kthread_blkcg+0xd0/0xd0 [ 1241.226249][ T8626] ret_from_fork+0x1f/0x30 [ 1241.230730][ T8626] [ 1241.233812][ C1] vkms_vblank_simulate: vblank timer overrun [ 1241.243482][ T8626] kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 1241.256761][ T8626] Bluetooth: hci3: failed to register connection device [ 1241.364304][T15560] team0: Port device team_slave_0 added [ 1241.382159][T15560] team0: Port device team_slave_1 added [ 1241.578500][T15560] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1241.597691][T15560] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1241.631385][T15560] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1241.670013][T15560] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1241.692474][T15560] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1241.732419][T15560] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1241.922854][T15560] device hsr_slave_0 entered promiscuous mode [ 1241.932222][T15560] device hsr_slave_1 entered promiscuous mode [ 1241.940210][T15560] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1242.741321][ T8626] Bluetooth: hci2: command 0x040f tx timeout [ 1242.780792][T15560] Cannot create hsr debugfs directory [ 1244.336928][T15560] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1244.822463][ T8626] Bluetooth: hci2: command 0x0419 tx timeout [ 1245.125541][T15560] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1245.176445][T15639] lo speed is unknown, defaulting to 1000 [ 1245.390517][T15560] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1245.532062][T15560] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1245.611878][ T4375] Bluetooth: (null): Too short H5 packet [ 1245.617575][ T4375] Bluetooth: (null): Invalid header checksum [ 1245.653155][ T4375] Bluetooth: (null): Invalid header checksum [ 1245.721777][T10365] Bluetooth: (null): Invalid header checksum [ 1245.781489][ T41] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 1245.874334][ T4535] Bluetooth: (null): Invalid header checksum [ 1245.945174][ T56] Bluetooth: (null): Invalid header checksum [ 1246.053382][ T56] Bluetooth: (null): Invalid header checksum [ 1246.081557][ T41] usb 6-1: device descriptor read/64, error -71 [ 1246.163526][ T4505] Bluetooth: (null): Invalid header checksum [ 1246.200238][T12133] usb 9-1: new full-speed USB device number 5 using dummy_hcd [ 1246.275076][T13993] Bluetooth: (null): Invalid header checksum [ 1246.313616][T15560] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1246.345074][T15560] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1246.352037][ T41] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 1246.396616][T15560] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1246.418974][T15560] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1246.501392][ T41] usb 6-1: device descriptor read/64, error -71 [ 1246.513542][T12133] usb 9-1: not running at top speed; connect to a high speed hub [ 1246.529055][T12133] usb 9-1: config 1 interface 0 has no altsetting 0 [ 1246.550046][T12133] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1246.568258][T12133] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1246.595108][T12133] usb 9-1: Product: ꒇ蔤孯♐龾ꮬ槠飧곁‷ᎎ웦﨔溙錧熌區缍໼⣶쬑귛ꍾ˛ᘑ㯐嗼Ωꑨ퀭뒟范㶸鴑瀑휿㠕훊΍쁞挌閇獡ݢ㞵ꍬ䙧﯀蘛봔宨囨ꄆ㪉缀ꜹ☩⒅폹떿簒꠵ࢬ닱蓰礙걎蛕쇃㧷箳鿇椹熼ᘀ숢혫㾖ᾁ쨵㫙걤㈥뜻ȫ劗魌䕀꘱邡긺䁌ಶ녪ꇣ걭둗蟡醭䁀ස띫踖㚤퍒ᜋ [ 1246.627145][ T41] usb usb6-port1: attempt power cycle [ 1246.657942][T15560] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1246.700910][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1246.703444][T12133] usb 9-1: Manufacturer: 嘋䶟偏眆⴫㗖馷瀒稍ิ縃삱匦䦷飋є灕啠见ꬦ쾁シꛨ怮䣲둾ﲱ㲝姾ऍ庌鵃燋膸娄頣򿢨톖쑇գ੄饬䓱鋏Ӿꐷ時궼䓡︸嵞喙⟷셝瑯褾鱊軖돟䷆谗끹쯜䕿ꣵ픭䮵猱拮쿜惪ꈻ讽텴㪐灧恺嬃涨휥◧苭ꆳ讄黐볋퇋壷㊼䉨頮汆ᷯञ⤭ᆰ엺 [ 1246.747865][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1246.764913][T15560] 8021q: adding VLAN 0 to HW filter on device team0 [ 1246.782430][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1246.795343][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1246.806341][ T4375] bridge0: port 1(bridge_slave_0) entered blocking state [ 1246.813455][ T4375] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1246.833148][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1246.846394][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1246.860212][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1246.875505][ T4375] bridge0: port 2(bridge_slave_1) entered blocking state [ 1246.882628][ T4375] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1246.893549][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1246.907508][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1246.935362][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1246.954107][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1246.965684][T12133] usb 9-1: SerialNumber: 꾨ᐯ㝄㿪鎠怰⊑壐䊄⤢tඬ㴛鏻襳簳錗켟ꓡ菷圩㐉琒햠댚ꈶ渨嗱䨂蕐Ꮴ裉췻㑶䥅袨䏱༯梹ﴑኁ밪ዸ┙滆㙱綒揭뭨㺵礌闵℘鄬㻞㔲㏖⠿쀋಍뛰잗䝳想ﯵᓇ븜ш佧㵺쑮ᑬ梺雬淽ڑ玒ঁ䠫䃙叴琺閾뉶⃔ [ 1247.013725][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1247.031689][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1247.042803][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1247.052643][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1247.062676][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1247.063547][ T41] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 1247.083663][T15560] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1247.119506][T15560] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1247.139825][T10365] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1247.141981][ T41] usb 6-1: device descriptor read/8, error -71 [ 1247.160258][T10365] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1247.228947][T12133] usblp 9-1:1.0: usblp0: USB Bidirectional printer dev 5 if 0 alt 243 proto 3 vid 0x0525 pid 0xA4A8 [ 1247.287209][T12133] usb 9-1: USB disconnect, device number 5 [ 1247.308533][T12133] usblp0: removed [ 1247.431579][ T41] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 1247.462195][ T8626] Bluetooth: hci3: command 0x0406 tx timeout [ 1247.471833][ T41] usb 6-1: device descriptor read/8, error -71 [ 1247.591793][ T41] usb usb6-port1: unable to enumerate USB device [ 1248.300356][ T4505] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1248.396689][ T4505] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1249.223318][T15560] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1249.281734][T15677] NILFS (nullb0): couldn't find nilfs on the device [ 1249.345313][ T9218] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1249.371046][ T9218] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1249.484354][T15684] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2861'. [ 1249.515775][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1249.547239][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1249.555350][T15683] block nbd8: shutting down sockets [ 1249.638949][T15560] device veth0_vlan entered promiscuous mode [ 1249.647248][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1249.694625][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1250.592288][T15560] device veth1_vlan entered promiscuous mode [ 1251.195243][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1251.219669][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1251.298317][T15560] device veth0_macvtap entered promiscuous mode [ 1251.556514][T15560] device veth1_macvtap entered promiscuous mode [ 1251.760488][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1251.802369][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1251.835874][T15703] lo speed is unknown, defaulting to 1000 [ 1251.862987][T15560] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1251.883363][T15560] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1251.893760][T15560] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1251.904670][T15560] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1251.915575][T15560] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1251.926547][T15560] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1251.944892][T15560] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1251.957339][T15560] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1251.967720][T15560] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1251.981470][T15560] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1251.995667][T15560] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1252.865313][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1252.882046][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1252.918081][T15560] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1252.959532][T15560] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1253.000003][T15560] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1253.021746][T15560] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1253.031890][T15560] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1253.042563][T15560] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1253.052723][T15560] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1253.081355][T15560] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1253.110328][T15560] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1253.126587][T15560] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1253.138414][T15560] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1253.151538][ T41] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 1253.166067][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1253.197102][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1253.228933][T15560] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1253.247501][T15560] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1253.283914][T15560] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1253.314418][T15560] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1253.351582][ T41] usb 6-1: device descriptor read/64, error -71 [ 1253.492795][T13993] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1253.507194][T13993] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1253.544813][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1253.562654][ T4411] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1253.583688][ T4411] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1253.614557][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1253.631350][ T41] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 1253.811332][ T41] usb 6-1: device descriptor read/64, error -71 [ 1253.942528][ T41] usb usb6-port1: attempt power cycle [ 1254.432303][ T41] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 1255.398011][ T41] usb 6-1: device descriptor read/8, error -71 [ 1256.027766][T15737] block nbd5: shutting down sockets [ 1260.309797][T15758] delete_channel: no stack [ 1261.954066][T15790] netlink: 'syz.2.2894': attribute type 3 has an invalid length. [ 1262.582383][T15803] QAT: Device 7 not found [ 1262.957239][T15802] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1266.152820][T15831] netlink: 'syz.8.2907': attribute type 3 has an invalid length. [ 1266.779800][T15833] sctp: [Deprecated]: syz.1.2904 (pid 15833) Use of int in max_burst socket option deprecated. [ 1266.779800][T15833] Use struct sctp_assoc_value instead [ 1267.478721][T15837] NILFS (nullb0): couldn't find nilfs on the device [ 1270.065711][T15863] block nbd8: shutting down sockets [ 1272.200785][T15884] NILFS (nullb0): couldn't find nilfs on the device [ 1272.223157][ T125] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 1272.461342][ T125] usb 2-1: Using ep0 maxpacket: 16 [ 1272.561309][ T125] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1272.697764][T15887] netlink: 'syz.5.2920': attribute type 3 has an invalid length. [ 1272.825176][ T125] usb 2-1: config 0 has no interfaces? [ 1273.074034][ T125] usb 2-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 1273.125841][ T125] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1273.161940][ T125] usb 2-1: Product: syz [ 1273.169123][ T125] usb 2-1: Manufacturer: syz [ 1273.183311][ T125] usb 2-1: SerialNumber: syz [ 1273.197572][ T125] usb 2-1: config 0 descriptor?? [ 1273.640818][ T4336] usb 2-1: USB disconnect, device number 22 [ 1273.826544][T15898] JFS: discard option not supported on device [ 1273.836661][T15898] Mount JFS Failure: -22 [ 1273.841013][T15898] jfs_mount failed w/return code = -22 [ 1276.004481][T15920] block nbd5: shutting down sockets [ 1278.222845][T15933] NILFS (nullb0): couldn't find nilfs on the device [ 1278.826498][T15940] netlink: 'syz.7.2936': attribute type 3 has an invalid length. [ 1279.534643][T15946] netlink: 'syz.2.2941': attribute type 1 has an invalid length. [ 1279.750792][T15946] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1279.759452][T15946] bond3: (slave bond4): making interface the new active one [ 1279.850184][T15946] bond3: (slave bond4): Enslaving as an active interface with an up link [ 1286.741358][ T9960] Bluetooth: hci1: command 0x0406 tx timeout [ 1291.383175][T16025] lo speed is unknown, defaulting to 1000 [ 1292.433107][T16040] blktrace: Concurrent blktraces are not allowed on sg0 [ 1292.452542][T16040] lo speed is unknown, defaulting to 1000 [ 1292.561284][ T7307] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 1292.631257][T12133] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 1294.081254][T12133] usb 2-1: Using ep0 maxpacket: 16 [ 1294.089839][T12133] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1294.121255][ T7307] usb 3-1: device descriptor read/64, error -71 [ 1294.131762][T12133] usb 2-1: config 0 has no interfaces? [ 1294.156531][T12133] usb 2-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 1294.215405][T12133] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1294.224753][T12133] usb 2-1: Product: syz [ 1294.230360][T12133] usb 2-1: Manufacturer: syz [ 1294.246647][T12133] usb 2-1: SerialNumber: syz [ 1294.262134][T12133] usb 2-1: config 0 descriptor?? [ 1294.385947][T16060] block nbd5: shutting down sockets [ 1294.411348][ T7307] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 1294.485937][T10167] usb 2-1: USB disconnect, device number 23 [ 1295.108085][ T9960] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1295.117885][ T9960] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1295.129885][ T9960] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1295.140944][ T9960] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1295.152118][ T9960] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1295.159520][ T9960] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1295.497871][T16065] lo speed is unknown, defaulting to 1000 [ 1297.381321][ T8626] Bluetooth: hci4: command 0x0409 tx timeout [ 1297.955660][T16093] blktrace: Concurrent blktraces are not allowed on sg0 [ 1297.986140][T16093] lo speed is unknown, defaulting to 1000 [ 1298.609636][T16065] chnl_net:caif_netlink_parms(): no params data found [ 1298.862345][ T4504] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1299.136358][T10167] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 1299.213878][ T4504] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1299.411525][T10167] usb 6-1: Using ep0 maxpacket: 16 [ 1299.427149][T10167] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1299.463288][ T9960] Bluetooth: hci4: command 0x041b tx timeout [ 1299.469527][ T4504] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1299.633441][T10167] usb 6-1: config 0 has no interfaces? [ 1299.648809][T10167] usb 6-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 1299.667600][T16065] bridge0: port 1(bridge_slave_0) entered blocking state [ 1299.674860][T10167] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1299.677849][T16065] bridge0: port 1(bridge_slave_0) entered disabled state [ 1299.697521][T10167] usb 6-1: Product: syz [ 1299.698785][T16065] device bridge_slave_0 entered promiscuous mode [ 1299.708619][T10167] usb 6-1: Manufacturer: syz [ 1299.713327][T10167] usb 6-1: SerialNumber: syz [ 1299.729957][T10167] usb 6-1: config 0 descriptor?? [ 1299.775155][ T4504] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1299.790511][T16065] bridge0: port 2(bridge_slave_1) entered blocking state [ 1299.820236][T16065] bridge0: port 2(bridge_slave_1) entered disabled state [ 1299.880241][T16065] device bridge_slave_1 entered promiscuous mode [ 1299.948764][T15746] usb 6-1: USB disconnect, device number 29 [ 1299.957894][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 1299.957983][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 1301.541274][ T9960] Bluetooth: hci4: command 0x040f tx timeout [ 1302.065761][T16065] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1302.195919][T16065] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1303.621321][ T9960] Bluetooth: hci4: command 0x0419 tx timeout [ 1303.692988][T16147] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1303.710475][T16147] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 1303.716001][T16154] netlink: 'syz.5.2995': attribute type 3 has an invalid length. [ 1303.746139][T16147] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 1303.868711][T16147] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 1303.891514][T16147] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 1303.998857][T16147] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 1304.069153][T16147] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 1304.214424][T16065] team0: Port device team_slave_0 added [ 1304.286978][T16065] team0: Port device team_slave_1 added [ 1304.717005][T16065] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1304.757212][T16065] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1304.851544][T16065] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1304.904601][ T4504] tipc: Left network mode [ 1304.918508][T16065] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1304.951143][T16065] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1305.057360][T16065] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1306.165860][T16171] delete_channel: no stack [ 1306.597020][T16065] device hsr_slave_0 entered promiscuous mode [ 1306.620458][T16065] device hsr_slave_1 entered promiscuous mode [ 1306.641309][T12133] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 1306.669342][T16065] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1306.689690][T16065] Cannot create hsr debugfs directory [ 1306.841282][T12133] usb 3-1: Using ep0 maxpacket: 16 [ 1306.861439][T12133] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1306.957554][T12133] usb 3-1: config 0 has no interfaces? [ 1306.996160][T12133] usb 3-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 1307.012915][T12133] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1307.054183][T12133] usb 3-1: Product: syz [ 1307.069997][T12133] usb 3-1: Manufacturer: syz [ 1307.078293][T12133] usb 3-1: SerialNumber: syz [ 1307.101083][T12133] usb 3-1: config 0 descriptor?? [ 1307.388785][T15746] usb 3-1: USB disconnect, device number 36 [ 1307.972111][T16065] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1308.000644][T16065] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1308.612050][T16065] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1309.052164][T16224] netlink: 'syz.2.3011': attribute type 3 has an invalid length. [ 1309.064581][T16065] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1309.080626][T16219] delete_channel: no stack [ 1309.865108][T16250] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3017'. [ 1310.277772][T16065] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1310.366728][ T4504] device hsr_slave_0 left promiscuous mode [ 1310.380867][ T4504] device hsr_slave_1 left promiscuous mode [ 1310.466788][ T4504] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1310.696481][ T4504] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1310.827516][ T4504] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1310.845646][ T4504] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1310.890561][ T4504] device bridge_slave_1 left promiscuous mode [ 1310.915624][ T4504] bridge0: port 2(bridge_slave_1) entered disabled state [ 1310.970737][ T4504] device bridge_slave_0 left promiscuous mode [ 1311.027853][ T4504] bridge0: port 1(bridge_slave_0) entered disabled state [ 1311.250196][ T4504] device veth1_macvtap left promiscuous mode [ 1311.260384][ T4504] device veth0_macvtap left promiscuous mode [ 1311.334183][ T4504] device veth1_vlan left promiscuous mode [ 1311.342196][ T4504] device veth0_vlan left promiscuous mode [ 1314.593626][T16287] delete_channel: no stack [ 1315.091587][ T9960] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201' [ 1315.101556][ T9960] CPU: 1 PID: 9960 Comm: kworker/u5:1 Not tainted 6.1.146-syzkaller #0 [ 1315.109831][ T9960] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1315.119882][ T9960] Workqueue: hci2 hci_rx_work [ 1315.124569][ T9960] Call Trace: [ 1315.127840][ T9960] [ 1315.130765][ T9960] dump_stack_lvl+0x168/0x22e [ 1315.135459][ T9960] ? show_regs_print_info+0x12/0x12 [ 1315.140669][ T9960] ? load_image+0x3b0/0x3b0 [ 1315.145173][ T9960] sysfs_create_dir_ns+0x252/0x280 [ 1315.150281][ T9960] ? hci_rx_work+0x3eb/0xd40 [ 1315.154863][ T9960] ? sysfs_warn_dup+0xa0/0xa0 [ 1315.159530][ T9960] ? do_raw_spin_unlock+0x11d/0x230 [ 1315.164721][ T9960] kobject_add_internal+0x6b8/0xc80 [ 1315.169911][ T9960] kobject_add+0x152/0x210 [ 1315.174326][ T9960] ? kobject_init+0x1d0/0x1d0 [ 1315.179005][ T9960] ? klist_children_get+0x50/0x50 [ 1315.184018][ T9960] ? get_device_parent+0x121/0x3f0 [ 1315.189112][ T9960] device_add+0x483/0xfb0 [ 1315.193452][ T9960] ? kmem_cache_free+0xf7/0x290 [ 1315.198292][ T9960] hci_conn_add_sysfs+0xd1/0x1e0 [ 1315.203214][ T9960] le_conn_complete_evt+0xd1d/0x1320 [ 1315.208495][ T9960] ? hci_le_big_info_adv_report_evt+0x310/0x310 [ 1315.214726][ T9960] ? __mutex_unlock_slowpath+0x19e/0x6a0 [ 1315.220355][ T9960] ? skb_pull_data+0xf7/0x200 [ 1315.225037][ T9960] hci_le_conn_complete_evt+0x183/0x440 [ 1315.230574][ T9960] ? hci_remote_host_features_evt+0x270/0x270 [ 1315.236626][ T9960] hci_event_packet+0x791/0x1210 [ 1315.241555][ T9960] ? bis_list+0x280/0x280 [ 1315.245885][ T9960] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 1315.251806][ T9960] ? kcov_remote_start+0x4c7/0x7e0 [ 1315.256913][ T9960] ? mce_start+0x60/0x140 [ 1315.261247][ T9960] ? hci_send_to_monitor+0x9c/0x4a0 [ 1315.266446][ T9960] hci_rx_work+0x3eb/0xd40 [ 1315.270865][ T9960] ? _raw_spin_unlock+0x40/0x40 [ 1315.275714][ T9960] ? process_one_work+0x7a1/0x1160 [ 1315.280812][ T9960] process_one_work+0x898/0x1160 [ 1315.285747][ T9960] ? worker_detach_from_pool+0x240/0x240 [ 1315.291368][ T9960] ? _raw_spin_lock_irq+0xab/0xe0 [ 1315.296379][ T9960] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 1315.301766][ T9960] ? kthread_data+0x4b/0xc0 [ 1315.306297][ T9960] worker_thread+0xaa2/0x1250 [ 1315.311190][ T9960] ? __kthread_parkme+0x162/0x1c0 [ 1315.316230][ T9960] kthread+0x29d/0x330 [ 1315.320294][ T9960] ? worker_clr_flags+0x1a0/0x1a0 [ 1315.325391][ T9960] ? kthread_blkcg+0xd0/0xd0 [ 1315.329977][ T9960] ret_from_fork+0x1f/0x30 [ 1315.334394][ T9960] [ 1315.347055][ T9960] kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 1315.360499][ T9960] Bluetooth: hci2: failed to register connection device [ 1315.552096][T16302] netlink: 'syz.8.3030': attribute type 3 has an invalid length. [ 1315.567143][T16301] blktrace: Concurrent blktraces are not allowed on sg0 [ 1315.680845][ T4504] bond7 (unregistering): Released all slaves [ 1316.561887][ T4504] bond6 (unregistering): Released all slaves [ 1316.829582][ T4504] bond5 (unregistering): Released all slaves [ 1317.304836][ T4504] bond4 (unregistering): Released all slaves [ 1319.776792][T16327] delete_channel: no stack [ 1319.784305][ T4504] bond3 (unregistering): Released all slaves [ 1320.989609][T16341] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3040'. [ 1321.101779][ T4504] bond2 (unregistering): Released all slaves [ 1321.433128][ T4504] bond1 (unregistering): Released all slaves [ 1321.871289][ T8626] Bluetooth: hci2: command 0x0406 tx timeout [ 1322.238480][ T4504] team0 (unregistering): Port device team_slave_1 removed [ 1322.307153][ T4504] team0 (unregistering): Port device team_slave_0 removed [ 1322.411766][ T4504] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1322.534778][ T4504] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1323.334528][ T4504] bond0 (unregistering): Released all slaves [ 1323.439587][T16065] 8021q: adding VLAN 0 to HW filter on device team0 [ 1323.452428][T13993] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1323.465267][T13993] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1323.565211][T16301] lo speed is unknown, defaulting to 1000 [ 1323.600575][T16325] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1323.627439][T16325] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 1323.668479][T16325] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 1323.723380][T16325] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 1323.773017][T16325] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 1323.802321][T16325] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 1323.880857][T16325] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 1323.919139][T16348] kthread_run failed with err -4 [ 1323.940460][ T4505] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1323.989660][ T4505] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1324.017692][ T4505] bridge0: port 1(bridge_slave_0) entered blocking state [ 1324.024905][ T4505] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1324.040287][ T4505] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1324.085238][ T4505] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1324.191986][ T4505] bridge0: port 2(bridge_slave_1) entered blocking state [ 1324.199096][ T4505] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1324.228381][ T4505] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1325.615015][ T4505] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1325.698459][ T4505] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1325.707970][ T4505] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1325.720610][ T4505] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1325.732014][ T4505] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1325.748562][ T4505] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1325.762631][ T4505] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1325.774593][ T4505] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1326.660289][ T4505] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1327.444010][ T4414] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1327.673534][ T4414] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1327.823241][T16065] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1328.713493][T16393] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1328.728638][T16393] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 1328.748747][T16393] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 1328.766660][T16393] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 1328.779913][T16393] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 1328.792812][T16393] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 1328.807641][T16393] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 1329.704578][ T8626] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 1331.028781][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1331.058666][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1331.118284][T16065] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1334.751377][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1334.790725][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1334.842052][T16464] blktrace: Concurrent blktraces are not allowed on sg0 [ 1334.872995][T16464] lo speed is unknown, defaulting to 1000 [ 1334.905869][T16065] device veth0_vlan entered promiscuous mode [ 1334.977568][T16065] device veth1_vlan entered promiscuous mode [ 1335.038701][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1335.056183][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1335.097037][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1335.131787][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1335.583339][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1336.782850][T16471] delete_channel: no stack [ 1336.851034][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1336.943737][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1337.042600][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1337.749660][T16065] device veth0_macvtap entered promiscuous mode [ 1337.790155][T16065] device veth1_macvtap entered promiscuous mode [ 1338.102599][ T4414] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1338.136970][T16065] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1338.558219][T16065] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1338.607958][T16065] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1338.618693][T16065] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1338.628592][T16065] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1338.649449][T16065] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1338.681436][T16065] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1338.711268][T16065] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1338.727534][T16065] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1338.747498][T16065] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1338.777612][T16065] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1339.177564][ T9218] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1339.232338][ T9218] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1339.251257][ T41] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 1339.314667][T16065] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1339.345198][T16065] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1339.356097][T16065] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1339.368485][T16065] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1339.504661][T16065] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1339.515177][T16065] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1339.525095][ T41] usb 3-1: Using ep0 maxpacket: 16 [ 1339.526480][T16065] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1339.531761][ T41] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1340.244251][ T41] usb 3-1: config 0 has no interfaces? [ 1340.268006][ T41] usb 3-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 1340.287581][ T41] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1340.301863][T16065] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1340.314171][ T41] usb 3-1: Product: syz [ 1340.318752][ T41] usb 3-1: Manufacturer: syz [ 1340.323877][T16065] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1340.334950][ T41] usb 3-1: SerialNumber: syz [ 1340.340558][T16065] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1340.372780][ T41] usb 3-1: config 0 descriptor?? [ 1340.401639][T16065] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1340.414930][T16065] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1340.423859][T16065] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1340.433142][T16065] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1340.451846][T16065] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1340.610734][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1340.625486][T12133] usb 3-1: USB disconnect, device number 37 [ 1340.647800][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1342.516082][T16527] delete_channel: no stack [ 1342.615959][ T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1342.634435][ T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1342.786264][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1342.922282][ T51] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1342.930469][ T51] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1343.043763][ T9218] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1343.854483][ T8626] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 1346.991288][ T22] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 1347.381242][ T22] usb 10-1: Using ep0 maxpacket: 16 [ 1347.434969][ T22] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1347.492728][ T22] usb 10-1: config 0 has no interfaces? [ 1347.546933][ T22] usb 10-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 1347.571302][ T22] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1347.585528][ T22] usb 10-1: Product: syz [ 1347.589932][ T22] usb 10-1: Manufacturer: syz [ 1347.597370][ T22] usb 10-1: SerialNumber: syz [ 1347.669208][ T22] usb 10-1: config 0 descriptor?? [ 1348.025198][T15165] usb 10-1: USB disconnect, device number 2 [ 1348.042017][T16588] netlink: 'syz.1.3102': attribute type 3 has an invalid length. [ 1348.256724][T16591] lo speed is unknown, defaulting to 1000 [ 1349.361392][ T7] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 1349.622176][ T7] usb 3-1: device descriptor read/64, error -71 [ 1349.958486][ T7] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 1350.190780][ T7] usb 3-1: device descriptor read/64, error -71 [ 1350.848375][ T4535] Bluetooth: (null): Invalid header checksum [ 1350.859833][ T7] usb usb3-port1: attempt power cycle [ 1350.872769][ T4535] Bluetooth: (null): Invalid header checksum [ 1350.887709][ T4535] Bluetooth: (null): Invalid header checksum [ 1350.898594][ T4535] Bluetooth: (null): Invalid header checksum [ 1350.916904][ T4535] Bluetooth: (null): Invalid header checksum [ 1353.297325][ T7] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 1354.259785][ T7] usb 9-1: Using ep0 maxpacket: 16 [ 1355.027202][ T7] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1355.053491][ T7] usb 9-1: config 0 has no interfaces? [ 1355.094638][ T7] usb 9-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 1355.113003][ T7] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1356.502077][ T7] usb 9-1: Product: syz [ 1356.506298][ T7] usb 9-1: Manufacturer: syz [ 1356.582440][ T7] usb 9-1: SerialNumber: syz [ 1356.633731][ T7] usb 9-1: config 0 descriptor?? [ 1356.678983][ T7] usb 9-1: can't set config #0, error -71 [ 1356.715091][ T7] usb 9-1: USB disconnect, device number 6 [ 1357.084548][T16688] lo speed is unknown, defaulting to 1000 [ 1357.846800][T16699] lo speed is unknown, defaulting to 1000 [ 1358.121310][ T22] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 1358.597588][ T22] usb 9-1: device descriptor read/64, error -71 [ 1359.031252][ T22] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 1359.311371][ T22] usb 9-1: device descriptor read/64, error -71 [ 1359.441450][ T22] usb usb9-port1: attempt power cycle [ 1359.511271][T12133] usb 2-1: new full-speed USB device number 24 using dummy_hcd [ 1359.733573][T12133] usb 2-1: not running at top speed; connect to a high speed hub [ 1359.786232][T12133] usb 2-1: config 1 interface 0 has no altsetting 0 [ 1359.837994][T12133] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1359.851236][ T22] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 1359.865577][T12133] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1359.895928][T12133] usb 2-1: Product: ꒇ蔤孯♐龾ꮬ槠飧곁‷ᎎ웦﨔溙錧熌區缍໼⣶쬑귛ꍾ˛ᘑ㯐嗼Ωꑨ퀭뒟范㶸鴑瀑휿㠕훊΍쁞挌閇獡ݢ㞵ꍬ䙧﯀蘛봔宨囨ꄆ㪉缀ꜹ☩⒅폹떿簒꠵ࢬ닱蓰礙걎蛕쇃㧷箳鿇椹熼ᘀ숢혫㾖ᾁ쨵㫙걤㈥뜻ȫ劗魌䕀꘱邡긺䁌ಶ녪ꇣ걭둗蟡醭䁀ස띫踖㚤퍒ᜋ [ 1360.070932][T12133] usb 2-1: Manufacturer: 嘋䶟偏眆⴫㗖馷瀒稍ิ縃삱匦䦷飋є灕啠见ꬦ쾁シꛨ怮䣲둾ﲱ㲝姾ऍ庌鵃燋膸娄頣򿢨톖쑇գ੄饬䓱鋏Ӿꐷ時궼䓡︸嵞喙⟷셝瑯褾鱊軖돟䷆谗끹쯜䕿ꣵ픭䮵猱拮쿜惪ꈻ讽텴㪐灧恺嬃涨휥◧苭ꆳ讄黐볋퇋壷㊼䉨頮汆ᷯञ⤭ᆰ엺 [ 1360.121362][ T22] usb 9-1: device not accepting address 9, error -71 [ 1360.217116][T16740] netlink: 'syz.8.3134': attribute type 3 has an invalid length. [ 1360.634047][T12133] usb 2-1: SerialNumber: 꾨ᐯ㝄㿪鎠怰⊑壐䊄⤢tඬ㴛鏻襳簳錗켟ꓡ菷圩㐉琒햠댚ꈶ渨嗱䨂蕐Ꮴ裉췻㑶䥅袨䏱༯梹ﴑኁ밪ዸ┙滆㙱綒揭뭨㺵礌闵℘鄬㻞㔲㏖⠿쀋಍뛰잗䝳想ﯵᓇ븜ш佧㵺쑮ᑬ梺雬淽ڑ玒ঁ䠫䃙叴琺閾뉶⃔ [ 1360.965763][T12133] usblp 2-1:1.0: usblp0: USB Bidirectional printer dev 24 if 0 alt 243 proto 3 vid 0x0525 pid 0xA4A8 [ 1361.023875][T12133] usb 2-1: USB disconnect, device number 24 [ 1361.041324][T15165] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 1361.106670][T12133] usblp0: removed [ 1361.231321][T15165] usb 6-1: Using ep0 maxpacket: 16 [ 1361.384974][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 1361.391569][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 1362.087027][T15165] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1362.170503][T15165] usb 6-1: config 0 has no interfaces? [ 1362.223472][T15165] usb 6-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 1362.278573][T15165] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1362.346650][T15165] usb 6-1: Product: syz [ 1362.380160][T15165] usb 6-1: Manufacturer: syz [ 1362.422784][T15165] usb 6-1: SerialNumber: syz [ 1362.446907][T15165] usb 6-1: config 0 descriptor?? [ 1363.734290][ T4280] usb 6-1: USB disconnect, device number 30 [ 1363.867832][ T8626] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 1363.988223][T16780] blktrace: Concurrent blktraces are not allowed on sg0 [ 1364.598422][T16780] lo speed is unknown, defaulting to 1000 [ 1367.608485][T16820] sctp_transport_update_pmtu: 47 callbacks suppressed [ 1367.608514][T16820] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1367.626635][T16820] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1367.637892][T16820] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1367.649432][T16820] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1367.671559][T16820] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1367.682768][T16820] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1367.694162][T16820] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1367.705625][T16820] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1367.717024][T16820] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1367.728507][T16820] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1367.951256][ T4336] usb 3-1: new full-speed USB device number 41 using dummy_hcd [ 1368.045497][T16816] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1368.155025][ T4336] usb 3-1: not running at top speed; connect to a high speed hub [ 1368.179618][ T4336] usb 3-1: config 1 interface 0 has no altsetting 0 [ 1368.205975][ T4336] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1368.215455][ T4336] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1368.223609][ T4336] usb 3-1: Product: ꒇ蔤孯♐龾ꮬ槠飧곁‷ᎎ웦﨔溙錧熌區缍໼⣶쬑귛ꍾ˛ᘑ㯐嗼Ωꑨ퀭뒟范㶸鴑瀑휿㠕훊΍쁞挌閇獡ݢ㞵ꍬ䙧﯀蘛봔宨囨ꄆ㪉缀ꜹ☩⒅폹떿簒꠵ࢬ닱蓰礙걎蛕쇃㧷箳鿇椹熼ᘀ숢혫㾖ᾁ쨵㫙걤㈥뜻ȫ劗魌䕀꘱邡긺䁌ಶ녪ꇣ걭둗蟡醭䁀ස띫踖㚤퍒ᜋ [ 1368.262741][ T4336] usb 3-1: Manufacturer: 嘋䶟偏眆⴫㗖馷瀒稍ิ縃삱匦䦷飋є灕啠见ꬦ쾁シꛨ怮䣲둾ﲱ㲝姾ऍ庌鵃燋膸娄頣򿢨톖쑇գ੄饬䓱鋏Ӿꐷ時궼䓡︸嵞喙⟷셝瑯褾鱊軖돟䷆谗끹쯜䕿ꣵ픭䮵猱拮쿜惪ꈻ讽텴㪐灧恺嬃涨휥◧苭ꆳ讄黐볋퇋壷㊼䉨頮汆ᷯञ⤭ᆰ엺 [ 1368.352309][T16816] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 1368.411189][T16816] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 1368.424361][T16816] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 1368.453062][T16816] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 1368.455759][ T4336] usb 3-1: SerialNumber: 꾨ᐯ㝄㿪鎠怰⊑壐䊄⤢tඬ㴛鏻襳簳錗켟ꓡ菷圩㐉琒햠댚ꈶ渨嗱䨂蕐Ꮴ裉췻㑶䥅袨䏱༯梹ﴑኁ밪ዸ┙滆㙱綒揭뭨㺵礌闵℘鄬㻞㔲㏖⠿쀋಍뛰잗䝳想ﯵᓇ븜ш佧㵺쑮ᑬ梺雬淽ڑ玒ঁ䠫䃙叴琺閾뉶⃔ [ 1368.732095][ T4336] usblp 3-1:1.0: usblp0: USB Bidirectional printer dev 41 if 0 alt 243 proto 3 vid 0x0525 pid 0xA4A8 [ 1368.781505][T16816] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 1368.798379][T16816] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 1368.806638][ T4336] usb 3-1: USB disconnect, device number 41 [ 1368.857330][ T4336] usblp0: removed [ 1369.397460][ T7] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 1370.001314][ T7] usb 10-1: Using ep0 maxpacket: 16 [ 1370.023328][ T7] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1370.085730][ T7] usb 10-1: config 0 has no interfaces? [ 1370.120748][ T7] usb 10-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 1370.634692][ T7] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1370.701529][ T7] usb 10-1: Product: syz [ 1370.728375][ T7] usb 10-1: Manufacturer: syz [ 1370.750766][ T7] usb 10-1: SerialNumber: syz [ 1370.768019][ T7] usb 10-1: config 0 descriptor?? [ 1370.979715][T15165] usb 10-1: USB disconnect, device number 3 [ 1372.182781][T16865] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3163'. [ 1372.251991][T16863] lo speed is unknown, defaulting to 1000 [ 1372.308140][T16865] netlink: 5 bytes leftover after parsing attributes in process `syz.1.3163'. [ 1374.258017][ T8626] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 1377.643142][T16933] netlink: 'syz.5.3178': attribute type 3 has an invalid length. [ 1378.081358][T12133] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 1378.183397][T16927] lo speed is unknown, defaulting to 1000 [ 1378.271502][T12133] usb 3-1: Using ep0 maxpacket: 16 [ 1378.278642][T12133] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1378.352777][T12133] usb 3-1: config 0 has no interfaces? [ 1378.388995][T12133] usb 3-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 1378.430851][T12133] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1378.509591][T12133] usb 3-1: Product: syz [ 1378.525291][T12133] usb 3-1: Manufacturer: syz [ 1379.001334][T12133] usb 3-1: SerialNumber: syz [ 1379.015222][T12133] usb 3-1: config 0 descriptor?? [ 1379.035168][T12133] usb 3-1: can't set config #0, error -71 [ 1379.068826][T12133] usb 3-1: USB disconnect, device number 42 [ 1380.761014][T16961] NILFS (nullb0): couldn't find nilfs on the device [ 1380.916102][ T8626] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 1380.925867][ T8626] CPU: 1 PID: 8626 Comm: kworker/u5:0 Not tainted 6.1.146-syzkaller #0 [ 1380.934116][ T8626] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1380.944173][ T8626] Workqueue: hci1 hci_rx_work [ 1380.948857][ T8626] Call Trace: [ 1380.952132][ T8626] [ 1380.955058][ T8626] dump_stack_lvl+0x168/0x22e [ 1380.959733][ T8626] ? show_regs_print_info+0x12/0x12 [ 1380.964930][ T8626] ? load_image+0x3b0/0x3b0 [ 1380.969439][ T8626] sysfs_create_dir_ns+0x252/0x280 [ 1380.974544][ T8626] ? hci_rx_work+0x3eb/0xd40 [ 1380.979129][ T8626] ? sysfs_warn_dup+0xa0/0xa0 [ 1380.983800][ T8626] ? do_raw_spin_unlock+0x11d/0x230 [ 1380.988993][ T8626] kobject_add_internal+0x6b8/0xc80 [ 1380.994210][ T8626] kobject_add+0x152/0x210 [ 1380.998620][ T8626] ? kobject_init+0x1d0/0x1d0 [ 1381.003291][ T8626] ? klist_children_get+0x50/0x50 [ 1381.008305][ T8626] ? get_device_parent+0x121/0x3f0 [ 1381.013409][ T8626] device_add+0x483/0xfb0 [ 1381.017728][ T8626] ? kmem_cache_free+0xf7/0x290 [ 1381.022569][ T8626] hci_conn_add_sysfs+0xd1/0x1e0 [ 1381.027500][ T8626] le_conn_complete_evt+0xd1d/0x1320 [ 1381.032786][ T8626] ? hci_le_big_info_adv_report_evt+0x310/0x310 [ 1381.039022][ T8626] ? __mutex_unlock_slowpath+0x19e/0x6a0 [ 1381.044652][ T8626] ? skb_pull_data+0xf7/0x200 [ 1381.049324][ T8626] hci_le_conn_complete_evt+0x183/0x440 [ 1381.054867][ T8626] ? hci_remote_host_features_evt+0x270/0x270 [ 1381.060926][ T8626] hci_event_packet+0x791/0x1210 [ 1381.065861][ T8626] ? bis_list+0x280/0x280 [ 1381.070177][ T8626] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 1381.076062][ T8626] ? kcov_remote_start+0x4c7/0x7e0 [ 1381.081170][ T8626] ? mce_start+0x60/0x140 [ 1381.085506][ T8626] ? hci_send_to_monitor+0x9c/0x4a0 [ 1381.090697][ T8626] hci_rx_work+0x3eb/0xd40 [ 1381.095106][ T8626] ? _raw_spin_unlock+0x40/0x40 [ 1381.099952][ T8626] ? process_one_work+0x7a1/0x1160 [ 1381.105050][ T8626] process_one_work+0x898/0x1160 [ 1381.109984][ T8626] ? worker_detach_from_pool+0x240/0x240 [ 1381.115607][ T8626] ? _raw_spin_lock_irq+0xab/0xe0 [ 1381.120620][ T8626] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 1381.125980][ T8626] ? kthread_data+0x4b/0xc0 [ 1381.130497][ T8626] worker_thread+0xaa2/0x1250 [ 1381.135178][ T8626] ? __kthread_parkme+0x162/0x1c0 [ 1381.140197][ T8626] kthread+0x29d/0x330 [ 1381.144257][ T8626] ? worker_clr_flags+0x1a0/0x1a0 [ 1381.149270][ T8626] ? kthread_blkcg+0xd0/0xd0 [ 1381.153850][ T8626] ret_from_fork+0x1f/0x30 [ 1381.158264][ T8626] [ 1381.162545][ T8626] kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 1381.176141][ T8626] Bluetooth: hci1: failed to register connection device [ 1383.311963][T16993] blktrace: Concurrent blktraces are not allowed on sg0 [ 1383.416488][T16984] lo speed is unknown, defaulting to 1000 [ 1383.624601][T10364] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 1383.841337][T10364] usb 6-1: Using ep0 maxpacket: 16 [ 1383.850104][T10364] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1383.866491][T17003] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1383.881328][T17003] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 1383.889467][T17003] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 1383.898377][T17003] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 1383.907011][T17003] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 1383.915472][T17003] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 1384.056827][T17005] sctp_transport_update_pmtu: 49 callbacks suppressed [ 1384.056854][T17005] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1384.076918][T17005] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1384.087774][T17005] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1384.098065][T17005] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1384.112542][T17005] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1384.125996][T17005] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1384.145067][T17005] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1384.155495][T17005] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1384.165689][T17005] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1384.176131][T17005] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1384.244289][T17003] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 1385.512597][T10364] usb 6-1: config 0 has no interfaces? [ 1385.532045][ T4385] Bluetooth: (null): Too short H5 packet [ 1385.556628][ T4385] Bluetooth: (null): Invalid header checksum [ 1385.709258][ T4385] Bluetooth: (null): Invalid header checksum [ 1385.758048][ T4385] Bluetooth: (null): Invalid header checksum [ 1385.810049][ T4385] Bluetooth: (null): Invalid header checksum [ 1385.858058][ T4385] Bluetooth: (null): Invalid header checksum [ 1385.936688][ T4385] Bluetooth: (null): Invalid header checksum [ 1386.002557][ T4385] Bluetooth: (null): Invalid header checksum [ 1386.391920][T10158] Bluetooth: (null): Invalid header checksum [ 1386.441513][T10364] usb 6-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 1386.450579][T10364] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1386.469176][T10158] Bluetooth: (null): Invalid header checksum [ 1386.538289][T10364] usb 6-1: Product: syz [ 1386.548561][T10364] usb 6-1: Manufacturer: syz [ 1386.577136][T10364] usb 6-1: config 0 descriptor?? [ 1386.590011][ T4535] Bluetooth: (null): Invalid header checksum [ 1386.607916][T10364] usb 6-1: can't set config #0, error -71 [ 1386.618724][T10364] usb 6-1: USB disconnect, device number 31 [ 1386.697983][ T9] Bluetooth: (null): Invalid header checksum [ 1386.769528][ T9] Bluetooth: (null): Invalid header checksum [ 1386.871624][ T9] Bluetooth: (null): Invalid header checksum [ 1386.993242][T11530] Bluetooth: (null): Invalid header checksum [ 1387.240433][T11530] Bluetooth: (null): Invalid header checksum [ 1387.360553][T11530] Bluetooth: (null): Invalid header checksum [ 1387.467982][T11530] Bluetooth: (null): Invalid header checksum [ 1387.515101][T11530] Bluetooth: (null): Invalid header checksum [ 1387.561633][ T5032] Bluetooth: (null): Invalid header checksum [ 1387.629399][ T9960] Bluetooth: hci1: command 0x0406 tx timeout [ 1387.676410][ T4506] Bluetooth: (null): Invalid header checksum [ 1387.786562][T11530] Bluetooth: (null): Invalid header checksum [ 1387.910268][ T5032] Bluetooth: (null): Invalid header checksum [ 1388.505557][ T5032] Bluetooth: (null): Invalid header checksum [ 1389.115445][ T5032] Bluetooth: (null): Invalid header checksum [ 1389.526479][ T5032] Bluetooth: (null): Invalid header checksum [ 1389.548358][ T5032] Bluetooth: (null): Invalid header checksum [ 1389.574702][ T5032] Bluetooth: (null): Invalid header checksum [ 1391.328494][T17055] lo speed is unknown, defaulting to 1000 [ 1391.861339][ T7307] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 1392.081253][ T7307] usb 10-1: Using ep0 maxpacket: 16 [ 1392.100236][ T7307] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1392.111837][ T7307] usb 10-1: config 0 has no interfaces? [ 1392.133781][ T7307] usb 10-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 1392.143387][ T7307] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1392.272026][ T7307] usb 10-1: Product: syz [ 1392.276437][ T7307] usb 10-1: Manufacturer: syz [ 1392.299512][ T7307] usb 10-1: SerialNumber: syz [ 1392.525460][ T7307] usb 10-1: config 0 descriptor?? [ 1392.607206][T17066] sctp: [Deprecated]: syz.8.3210 (pid 17066) Use of int in max_burst socket option deprecated. [ 1392.607206][T17066] Use struct sctp_assoc_value instead [ 1392.789290][ T7307] usb 10-1: USB disconnect, device number 4 [ 1393.016072][T17095] lo speed is unknown, defaulting to 1000 [ 1393.904494][ T9960] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 1394.456559][T15165] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 1394.671439][T15165] usb 6-1: device descriptor read/64, error -71 [ 1395.308135][T17116] blktrace: Concurrent blktraces are not allowed on sg0 [ 1396.181578][T15165] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 1396.414877][T17118] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1396.428946][T17118] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 1396.437834][T17118] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 1396.446562][T17118] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 1396.455291][T17118] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 1396.482410][T17118] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 1396.495391][T17118] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 1396.882468][T17117] lo speed is unknown, defaulting to 1000 [ 1398.183109][T17135] sctp: [Deprecated]: syz.5.3227 (pid 17135) Use of int in max_burst socket option deprecated. [ 1398.183109][T17135] Use struct sctp_assoc_value instead [ 1399.701480][ T7] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 1400.091313][ T7] usb 3-1: Using ep0 maxpacket: 16 [ 1400.113798][ T7] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1400.164466][ T7] usb 3-1: config 0 has no interfaces? [ 1400.239074][ T7] usb 3-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 1400.286244][ T7] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1400.317063][ T7] usb 3-1: Product: syz [ 1400.368873][ T7] usb 3-1: Manufacturer: syz [ 1400.397179][ T7] usb 3-1: SerialNumber: syz [ 1400.467847][ T7] usb 3-1: config 0 descriptor?? [ 1400.700016][ T7] usb 3-1: USB disconnect, device number 43 [ 1400.957611][T17173] lo speed is unknown, defaulting to 1000 [ 1402.261832][T10364] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 1402.645516][T10364] usb 9-1: device descriptor read/64, error -71 [ 1403.231365][T10364] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 1403.421396][T10364] usb 9-1: device descriptor read/64, error -71 [ 1403.565383][T10364] usb usb9-port1: attempt power cycle [ 1404.423103][T17208] blktrace: Concurrent blktraces are not allowed on sg0 [ 1406.138620][T17208] lo speed is unknown, defaulting to 1000 [ 1414.891280][ T22] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 1414.932570][T17303] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1414.944316][T17303] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 1414.952494][T17303] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 1414.961505][T17303] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 1414.969790][T17303] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 1414.977966][T17303] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 1415.231928][T17303] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 1415.501525][ T22] usb 10-1: Using ep0 maxpacket: 16 [ 1415.512744][ T22] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1415.592315][T17303] sctp_transport_update_pmtu: 49 callbacks suppressed [ 1415.592342][T17303] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1415.610480][T17303] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1415.621817][T17303] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1415.633219][T17303] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1415.657198][T17303] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1415.668954][T17303] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1415.682473][T17303] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1415.692631][T17303] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1415.704119][T17303] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1415.715514][T17303] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1415.986607][T17311] lo speed is unknown, defaulting to 1000 [ 1415.991570][ T22] usb 10-1: config 0 has no interfaces? [ 1416.005062][ T22] usb 10-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 1416.153296][ T22] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1416.162058][ T22] usb 10-1: Product: syz [ 1416.166328][ T22] usb 10-1: Manufacturer: syz [ 1416.171070][ T22] usb 10-1: SerialNumber: syz [ 1416.190703][ T22] usb 10-1: config 0 descriptor?? [ 1416.522862][T10167] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 1416.731374][T10167] usb 9-1: device descriptor read/64, error -71 [ 1416.831767][T12133] usb 10-1: USB disconnect, device number 5 [ 1417.030467][T10167] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 1417.601260][T10167] usb 9-1: device descriptor read/64, error -71 [ 1417.732346][T10167] usb usb9-port1: attempt power cycle [ 1418.531455][T10167] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 1418.633252][T10167] usb 9-1: device descriptor read/8, error -71 [ 1418.991303][T10167] usb 9-1: new high-speed USB device number 17 using dummy_hcd [ 1420.253801][T17348] NILFS (nullb0): couldn't find nilfs on the device [ 1420.633578][T17357] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1420.642608][T17357] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 1420.652203][T17357] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 1420.660599][T17357] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 1420.669320][T17357] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 1420.677825][T17357] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 1420.686387][T17357] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 1420.695619][T10167] usb 9-1: device not accepting address 17, error -71 [ 1420.713110][T10167] usb usb9-port1: unable to enumerate USB device [ 1420.993974][T17370] sctp: [Deprecated]: syz.8.3281 (pid 17370) Use of int in max_burst socket option deprecated. [ 1420.993974][T17370] Use struct sctp_assoc_value instead [ 1423.141940][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 1423.148274][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 1425.965232][T17405] lo speed is unknown, defaulting to 1000 [ 1427.977223][T17421] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1427.985258][T17421] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 1427.992660][T17421] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 1427.999904][T17421] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 1428.007412][T17421] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 1428.014990][T17421] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 1428.022556][T17421] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 1428.141484][T12133] usb 6-1: new full-speed USB device number 34 using dummy_hcd [ 1428.206492][T17425] sctp: [Deprecated]: syz.8.3297 (pid 17425) Use of int in max_burst socket option deprecated. [ 1428.206492][T17425] Use struct sctp_assoc_value instead [ 1428.458548][T17421] sctp_transport_update_pmtu: 49 callbacks suppressed [ 1428.458561][T17421] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1428.476355][T17421] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1428.486634][T17421] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1428.496940][T17421] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1428.507877][T17421] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1428.518169][T17421] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1428.528429][T17421] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1428.538712][T17421] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1428.549047][T17421] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1428.559381][T17421] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1428.661581][T17009] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 1428.785251][T12133] usb 6-1: not running at top speed; connect to a high speed hub [ 1428.831206][T17009] usb 3-1: device descriptor read/64, error -71 [ 1428.832194][T12133] usb 6-1: config 1 interface 0 has no altsetting 0 [ 1429.151202][T17009] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 1430.073919][T12133] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1430.177155][T12133] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1430.264931][T12133] usb 6-1: Product: ꒇ蔤孯♐龾ꮬ槠飧곁‷ᎎ웦﨔溙錧熌區缍໼⣶쬑귛ꍾ˛ᘑ㯐嗼Ωꑨ퀭뒟范㶸鴑瀑휿㠕훊΍쁞挌閇獡ݢ㞵ꍬ䙧﯀蘛봔宨囨ꄆ㪉缀ꜹ☩⒅폹떿簒꠵ࢬ닱蓰礙걎蛕쇃㧷箳鿇椹熼ᘀ숢혫㾖ᾁ쨵㫙걤㈥뜻ȫ劗魌䕀꘱邡긺䁌ಶ녪ꇣ걭둗蟡醭䁀ස띫踖㚤퍒ᜋ [ 1430.761160][T12133] usb 6-1: Manufacturer: 嘋䶟偏眆⴫㗖馷瀒稍ิ縃삱匦䦷飋є灕啠见ꬦ쾁シꛨ怮䣲둾ﲱ㲝姾ऍ庌鵃燋膸娄頣򿢨톖쑇գ੄饬䓱鋏Ӿꐷ時궼䓡︸嵞喙⟷셝瑯褾鱊軖돟䷆谗끹쯜䕿ꣵ픭䮵猱拮쿜惪ꈻ讽텴㪐灧恺嬃涨휥◧苭ꆳ讄黐볋퇋壷㊼䉨頮汆ᷯञ⤭ᆰ엺 [ 1431.304420][T12133] usb 6-1: SerialNumber: 꾨ᐯ㝄㿪鎠怰⊑壐䊄⤢tඬ㴛鏻襳簳錗켟ꓡ菷圩㐉琒햠댚ꈶ渨嗱䨂蕐Ꮴ裉췻㑶䥅袨䏱༯梹ﴑኁ밪ዸ┙滆㙱綒揭뭨㺵礌闵℘鄬㻞㔲㏖⠿쀋಍뛰잗䝳想ﯵᓇ븜ш佧㵺쑮ᑬ梺雬淽ڑ玒ঁ䠫䃙叴琺閾뉶⃔ [ 1432.461367][T12133] usb 6-1: can't set config #1, error -71 [ 1432.482585][T12133] usb 6-1: USB disconnect, device number 34 [ 1432.732469][ T125] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 1433.581237][ T125] usb 10-1: Using ep0 maxpacket: 16 [ 1433.617352][ T125] usb 10-1: device descriptor read/all, error -71 [ 1433.871783][T17470] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1433.879803][T17470] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 1433.887348][T17470] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 1433.894633][T17470] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 1433.903104][T17470] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 1433.910599][T17470] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 1433.918125][T17470] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 1434.025735][T17470] sctp_transport_update_pmtu: 48 callbacks suppressed [ 1434.025747][T17470] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1434.043139][T17470] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1434.053564][T17470] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1434.063897][T17470] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1434.074913][T17470] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1434.085270][T17470] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1434.095680][T17470] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1434.106255][T17470] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1434.117186][T17470] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1434.127639][T17470] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1435.327324][T17482] sctp: [Deprecated]: syz.1.3312 (pid 17482) Use of int in max_burst socket option deprecated. [ 1435.327324][T17482] Use struct sctp_assoc_value instead [ 1435.572144][T17499] netlink: 'syz.2.3316': attribute type 3 has an invalid length. [ 1438.054428][T17009] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 1439.101198][T17009] usb 3-1: Using ep0 maxpacket: 16 [ 1439.540044][T17009] usb 3-1: device descriptor read/all, error -71 [ 1440.269407][T17538] blktrace: Concurrent blktraces are not allowed on sg0 [ 1440.326872][T17538] lo speed is unknown, defaulting to 1000 [ 1441.705327][T17542] delete_channel: no stack [ 1442.114160][T17555] sctp: [Deprecated]: syz.1.3328 (pid 17555) Use of int in max_burst socket option deprecated. [ 1442.114160][T17555] Use struct sctp_assoc_value instead [ 1443.242442][ T9960] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 1445.262995][T17580] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1445.272772][T17580] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 1445.280464][T17580] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 1445.288008][T17580] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 1445.295595][T17580] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 1445.303181][T17580] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 1445.310685][T17580] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 1445.318588][ C1] sctp_transport_update_pmtu: 47 callbacks suppressed [ 1445.318601][ C1] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1445.336229][ C1] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1445.346393][ C1] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1445.356688][ C1] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1445.368391][ C1] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1445.378567][ C1] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1445.388735][ C1] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1445.398928][ C1] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1445.409083][ C1] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1445.419262][ C1] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1446.451437][ T35] Bluetooth: (null): Too short H5 packet [ 1446.457705][ T35] Bluetooth: (null): Invalid header checksum [ 1446.478066][T17618] tipc: Started in network mode [ 1446.497557][T17618] tipc: Node identity 96dd532f33cc, cluster identity 4711 [ 1446.534687][T17618] tipc: Enabled bearer , priority 0 [ 1447.662612][T17009] tipc: Node number set to 2769376047 [ 1447.976184][T17614] tipc: Disabling bearer [ 1449.169168][T17634] tipc: Started in network mode [ 1449.175231][T17634] tipc: Node identity c624bf8eced7, cluster identity 4711 [ 1449.201577][T17634] tipc: Enabled bearer , priority 0 [ 1449.434120][T17629] tipc: Disabling bearer [ 1449.508293][T17645] netlink: 'syz.9.3344': attribute type 3 has an invalid length. [ 1450.745204][ T9960] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 1451.515420][T12133] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 1452.456264][T12133] usb 2-1: Using ep0 maxpacket: 16 [ 1452.473060][T12133] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1452.870304][T12133] usb 2-1: config 0 has no interfaces? [ 1453.014271][T12133] usb 2-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 1453.097164][T12133] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1453.143921][T12133] usb 2-1: Product: syz [ 1453.297602][T12133] usb 2-1: Manufacturer: syz [ 1453.331255][T12133] usb 2-1: SerialNumber: syz [ 1453.445054][T12133] usb 2-1: config 0 descriptor?? [ 1453.715360][T17688] netlink: 'syz.2.3357': attribute type 3 has an invalid length. [ 1454.858312][ T125] usb 2-1: USB disconnect, device number 25 [ 1456.185641][ T9960] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 1456.838486][T17730] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1456.874012][T17730] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 1457.348983][T17730] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 1457.364735][T17730] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 1457.374125][T17730] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 1457.402535][T17730] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 1457.420315][T17730] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 1457.493660][T17740] netlink: 'syz.8.3372': attribute type 3 has an invalid length. [ 1458.014618][T17742] sctp_transport_update_pmtu: 49 callbacks suppressed [ 1458.014631][T17742] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1458.122726][T17742] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1458.157820][T17742] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1458.199900][T17742] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1458.237669][T17742] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1458.268502][T17742] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1458.316577][T17742] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1458.361584][T17742] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1458.414983][T17742] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1458.451402][ T41] usb 9-1: new high-speed USB device number 18 using dummy_hcd [ 1458.469672][T17742] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1458.674043][ T41] usb 9-1: Using ep0 maxpacket: 16 [ 1458.712884][ T41] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1458.959248][ T41] usb 9-1: config 0 has no interfaces? [ 1458.973247][ T41] usb 9-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 1459.040283][ T41] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1459.058925][ T41] usb 9-1: Product: syz [ 1459.074878][ T41] usb 9-1: Manufacturer: syz [ 1459.089610][ T41] usb 9-1: SerialNumber: syz [ 1459.114959][ T41] usb 9-1: config 0 descriptor?? [ 1459.173663][T17761] lo speed is unknown, defaulting to 1000 [ 1459.611314][ T41] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 1459.811304][ T41] usb 2-1: device descriptor read/64, error -71 [ 1460.091398][ T41] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 1460.261180][ T41] usb 2-1: device descriptor read/64, error -71 [ 1460.382786][ T41] usb usb2-port1: attempt power cycle [ 1460.811172][ T41] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 1460.856992][ T41] usb 2-1: device descriptor read/8, error -71 [ 1461.142174][ T41] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 1461.174207][T17009] usb 9-1: USB disconnect, device number 18 [ 1461.226132][ T41] usb 2-1: device descriptor read/8, error -71 [ 1461.352062][ T41] usb usb2-port1: unable to enumerate USB device [ 1461.940926][T17792] netlink: 'syz.8.3386': attribute type 3 has an invalid length. [ 1463.722948][T17812] blktrace: Concurrent blktraces are not allowed on sg0 [ 1464.660355][T17812] lo speed is unknown, defaulting to 1000 [ 1466.921352][ T22] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 1467.131217][ T22] usb 10-1: Using ep0 maxpacket: 16 [ 1467.138190][ T22] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1467.162086][ T22] usb 10-1: config 0 has no interfaces? [ 1467.177112][ T22] usb 10-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 1467.590666][ T22] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1467.606523][ T22] usb 10-1: Product: syz [ 1467.610901][ T22] usb 10-1: Manufacturer: syz [ 1467.626862][ T22] usb 10-1: SerialNumber: syz [ 1467.647122][ T22] usb 10-1: config 0 descriptor?? [ 1467.674800][T17833] lo speed is unknown, defaulting to 1000 [ 1467.850395][T17840] NILFS (nullb0): couldn't find nilfs on the device [ 1467.874350][ T22] usb 10-1: USB disconnect, device number 8 [ 1468.871188][T12133] usb 9-1: new high-speed USB device number 19 using dummy_hcd [ 1469.165975][T12133] usb 9-1: device descriptor read/64, error -71 [ 1470.021235][T12133] usb 9-1: new high-speed USB device number 20 using dummy_hcd [ 1470.088825][T17863] blktrace: Concurrent blktraces are not allowed on sg0 [ 1470.182644][T12133] usb 9-1: device descriptor read/64, error -71 [ 1470.190365][T17863] lo speed is unknown, defaulting to 1000 [ 1470.362514][T12133] usb usb9-port1: attempt power cycle [ 1470.981342][ T8626] Bluetooth: hci4: command 0x0406 tx timeout [ 1475.150723][T17906] lo speed is unknown, defaulting to 1000 [ 1475.293842][T12133] usb 10-1: new full-speed USB device number 9 using dummy_hcd [ 1475.503879][T12133] usb 10-1: not running at top speed; connect to a high speed hub [ 1475.524215][T12133] usb 10-1: config 1 interface 0 has no altsetting 0 [ 1475.563585][T12133] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1475.592891][T12133] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1475.625320][T12133] usb 10-1: Product: ꒇ蔤孯♐龾ꮬ槠飧곁‷ᎎ웦﨔溙錧熌區缍໼⣶쬑귛ꍾ˛ᘑ㯐嗼Ωꑨ퀭뒟范㶸鴑瀑휿㠕훊΍쁞挌閇獡ݢ㞵ꍬ䙧﯀蘛봔宨囨ꄆ㪉缀ꜹ☩⒅폹떿簒꠵ࢬ닱蓰礙걎蛕쇃㧷箳鿇椹熼ᘀ숢혫㾖ᾁ쨵㫙걤㈥뜻ȫ劗魌䕀꘱邡긺䁌ಶ녪ꇣ걭둗蟡醭䁀ස띫踖㚤퍒ᜋ [ 1475.678494][T12133] usb 10-1: Manufacturer: 嘋䶟偏眆⴫㗖馷瀒稍ิ縃삱匦䦷飋є灕啠见ꬦ쾁シꛨ怮䣲둾ﲱ㲝姾ऍ庌鵃燋膸娄頣򿢨톖쑇գ੄饬䓱鋏Ӿꐷ時궼䓡︸嵞喙⟷셝瑯褾鱊軖돟䷆谗끹쯜䕿ꣵ픭䮵猱拮쿜惪ꈻ讽텴㪐灧恺嬃涨휥◧苭ꆳ讄黐볋퇋壷㊼䉨頮汆ᷯञ⤭ᆰ엺 [ 1475.728456][T12133] usb 10-1: SerialNumber: 꾨ᐯ㝄㿪鎠怰⊑壐䊄⤢tඬ㴛鏻襳簳錗켟ꓡ菷圩㐉琒햠댚ꈶ渨嗱䨂蕐Ꮴ裉췻㑶䥅袨䏱༯梹ﴑኁ밪ዸ┙滆㙱綒揭뭨㺵礌闵℘鄬㻞㔲㏖⠿쀋಍뛰잗䝳想ﯵᓇ븜ш佧㵺쑮ᑬ梺雬淽ڑ玒ঁ䠫䃙叴琺閾뉶⃔ [ 1475.756648][ T125] usb 9-1: new high-speed USB device number 22 using dummy_hcd [ 1475.941247][ T125] usb 9-1: device descriptor read/64, error -71 [ 1476.002659][T12133] usblp 10-1:1.0: usblp0: USB Bidirectional printer dev 9 if 0 alt 243 proto 3 vid 0x0525 pid 0xA4A8 [ 1476.092852][T12133] usb 10-1: USB disconnect, device number 9 [ 1476.107346][T12133] usblp0: removed [ 1476.216777][ T125] usb 9-1: new high-speed USB device number 23 using dummy_hcd [ 1476.247176][T17912] delete_channel: no stack [ 1476.381222][ T125] usb 9-1: device descriptor read/64, error -71 [ 1477.208772][ T125] usb usb9-port1: attempt power cycle [ 1477.385973][T17927] NILFS (nullb0): couldn't find nilfs on the device [ 1478.356877][ T125] usb 9-1: new high-speed USB device number 24 using dummy_hcd [ 1478.763953][ T125] usb 9-1: device not accepting address 24, error -71 [ 1481.208900][T17957] delete_channel: no stack [ 1483.436718][T17979] netlink: 'syz.9.3441': attribute type 3 has an invalid length. [ 1484.381932][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 1484.391972][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 1487.531959][T18004] delete_channel: no stack [ 1488.252536][T18017] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1488.279536][T18017] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 1488.959314][T18017] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 1488.976681][T18017] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 1489.209827][T18017] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 1489.338417][T18017] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 1489.349557][T18017] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 1490.747735][T18028] sctp_transport_update_pmtu: 48 callbacks suppressed [ 1490.747748][T18028] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1491.993278][T18028] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1492.012673][T18028] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1492.030101][T18028] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1492.141025][T18039] 9pnet_virtio: no channels available for device syz [ 1492.319619][T18028] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1492.420004][T18028] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1492.840944][T18028] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1492.865182][T18028] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1492.904691][T18028] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1492.919285][T18028] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1493.091354][T12133] usb 3-1: new full-speed USB device number 48 using dummy_hcd [ 1493.174956][T18055] netlink: 'syz.8.3462': attribute type 3 has an invalid length. [ 1493.285275][T12133] usb 3-1: not running at top speed; connect to a high speed hub [ 1493.318314][T12133] usb 3-1: config 1 interface 0 has no altsetting 0 [ 1493.339880][T12133] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1493.365529][T12133] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1493.374656][T12133] usb 3-1: Product: ꒇ蔤孯♐龾ꮬ槠飧곁‷ᎎ웦﨔溙錧熌區缍໼⣶쬑귛ꍾ˛ᘑ㯐嗼Ωꑨ퀭뒟范㶸鴑瀑휿㠕훊΍쁞挌閇獡ݢ㞵ꍬ䙧﯀蘛봔宨囨ꄆ㪉缀ꜹ☩⒅폹떿簒꠵ࢬ닱蓰礙걎蛕쇃㧷箳鿇椹熼ᘀ숢혫㾖ᾁ쨵㫙걤㈥뜻ȫ劗魌䕀꘱邡긺䁌ಶ녪ꇣ걭둗蟡醭䁀ස띫踖㚤퍒ᜋ [ 1493.416914][T12133] usb 3-1: Manufacturer: 嘋䶟偏眆⴫㗖馷瀒稍ิ縃삱匦䦷飋є灕啠见ꬦ쾁シꛨ怮䣲둾ﲱ㲝姾ऍ庌鵃燋膸娄頣򿢨톖쑇գ੄饬䓱鋏Ӿꐷ時궼䓡︸嵞喙⟷셝瑯褾鱊軖돟䷆谗끹쯜䕿ꣵ픭䮵猱拮쿜惪ꈻ讽텴㪐灧恺嬃涨휥◧苭ꆳ讄黐볋퇋壷㊼䉨頮汆ᷯञ⤭ᆰ엺 [ 1493.448648][T12133] usb 3-1: SerialNumber: 꾨ᐯ㝄㿪鎠怰⊑壐䊄⤢tඬ㴛鏻襳簳錗켟ꓡ菷圩㐉琒햠댚ꈶ渨嗱䨂蕐Ꮴ裉췻㑶䥅袨䏱༯梹ﴑኁ밪ዸ┙滆㙱綒揭뭨㺵礌闵℘鄬㻞㔲㏖⠿쀋಍뛰잗䝳想ﯵᓇ븜ш佧㵺쑮ᑬ梺雬淽ڑ玒ঁ䠫䃙叴琺閾뉶⃔ [ 1493.481219][ T41] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 1493.752869][T18037] team0 (unregistering): Port device team_slave_0 removed [ 1493.771334][ T41] usb 6-1: device descriptor read/64, error -71 [ 1493.835619][T18037] team0 (unregistering): Port device team_slave_1 removed [ 1493.925989][T12133] usblp 3-1:1.0: usblp0: USB Bidirectional printer dev 48 if 0 alt 243 proto 3 vid 0x0525 pid 0xA4A8 [ 1493.965670][T18048] lo speed is unknown, defaulting to 1000 [ 1494.043291][ T41] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 1494.054691][T12133] usb 3-1: USB disconnect, device number 48 [ 1494.104150][T12133] usblp0: removed [ 1494.231297][ T41] usb 6-1: device descriptor read/64, error -71 [ 1494.351525][ T41] usb usb6-port1: attempt power cycle [ 1494.771256][ T41] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 1494.821995][ T41] usb 6-1: device descriptor read/8, error -71 [ 1495.091297][ T41] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 1495.131662][ T41] usb 6-1: device descriptor read/8, error -71 [ 1495.262961][ T41] usb usb6-port1: unable to enumerate USB device [ 1497.675483][T18094] NILFS (nullb0): couldn't find nilfs on the device [ 1500.122845][ T8626] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 1504.126952][ T8626] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:201' [ 1504.136829][ T8626] CPU: 1 PID: 8626 Comm: kworker/u5:0 Not tainted 6.1.146-syzkaller #0 [ 1504.145076][ T8626] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1504.155137][ T8626] Workqueue: hci4 hci_rx_work [ 1504.159807][ T8626] Call Trace: [ 1504.163079][ T8626] [ 1504.165995][ T8626] dump_stack_lvl+0x168/0x22e [ 1504.170659][ T8626] ? show_regs_print_info+0x12/0x12 [ 1504.175845][ T8626] ? load_image+0x3b0/0x3b0 [ 1504.180343][ T8626] sysfs_create_dir_ns+0x252/0x280 [ 1504.185535][ T8626] ? hci_rx_work+0x3eb/0xd40 [ 1504.190111][ T8626] ? sysfs_warn_dup+0xa0/0xa0 [ 1504.194774][ T8626] ? do_raw_spin_unlock+0x11d/0x230 [ 1504.199964][ T8626] kobject_add_internal+0x6b8/0xc80 [ 1504.205157][ T8626] kobject_add+0x152/0x210 [ 1504.209564][ T8626] ? kobject_init+0x1d0/0x1d0 [ 1504.214230][ T8626] ? klist_children_get+0x50/0x50 [ 1504.219243][ T8626] ? get_device_parent+0x121/0x3f0 [ 1504.224354][ T8626] device_add+0x483/0xfb0 [ 1504.228711][ T8626] ? kmem_cache_free+0xf7/0x290 [ 1504.233588][ T8626] hci_conn_add_sysfs+0xd1/0x1e0 [ 1504.238544][ T8626] le_conn_complete_evt+0xd1d/0x1320 [ 1504.243866][ T8626] ? hci_le_big_info_adv_report_evt+0x310/0x310 [ 1504.250137][ T8626] ? __mutex_unlock_slowpath+0x19e/0x6a0 [ 1504.255792][ T8626] ? skb_pull_data+0xf7/0x200 [ 1504.260493][ T8626] hci_le_conn_complete_evt+0x183/0x440 [ 1504.266070][ T8626] ? hci_remote_host_features_evt+0x270/0x270 [ 1504.272158][ T8626] hci_event_packet+0x791/0x1210 [ 1504.277117][ T8626] ? bis_list+0x280/0x280 [ 1504.281457][ T8626] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 1504.287388][ T8626] ? kcov_remote_start+0x4c7/0x7e0 [ 1504.292519][ T8626] ? mce_start+0x60/0x140 [ 1504.296871][ T8626] ? hci_send_to_monitor+0x9c/0x4a0 [ 1504.302061][ T8626] hci_rx_work+0x3eb/0xd40 [ 1504.306469][ T8626] ? _raw_spin_unlock+0x40/0x40 [ 1504.311312][ T8626] ? process_one_work+0x7a1/0x1160 [ 1504.316409][ T8626] process_one_work+0x898/0x1160 [ 1504.321337][ T8626] ? worker_detach_from_pool+0x240/0x240 [ 1504.326957][ T8626] ? _raw_spin_lock_irq+0xab/0xe0 [ 1504.331968][ T8626] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 1504.337325][ T8626] ? kthread_data+0x4b/0xc0 [ 1504.341822][ T8626] worker_thread+0xaa2/0x1250 [ 1504.346493][ T8626] ? __kthread_parkme+0x162/0x1c0 [ 1504.351509][ T8626] kthread+0x29d/0x330 [ 1504.355563][ T8626] ? worker_clr_flags+0x1a0/0x1a0 [ 1504.360571][ T8626] ? kthread_blkcg+0xd0/0xd0 [ 1504.365183][ T8626] ret_from_fork+0x1f/0x30 [ 1504.369653][ T8626] [ 1504.376152][ T8626] kobject_add_internal failed for hci4:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 1504.390488][ T8626] Bluetooth: hci4: failed to register connection device [ 1504.416681][T18157] delete_channel: no stack [ 1504.664756][T17041] Bluetooth: (null): Too short H5 packet [ 1504.676710][T17041] Bluetooth: (null): Invalid header checksum [ 1504.697676][T17041] Bluetooth: (null): Invalid header checksum [ 1504.773145][ T8901] Bluetooth: (null): Invalid header checksum [ 1504.849894][T18172] NILFS (nullb0): couldn't find nilfs on the device [ 1505.111173][ T41] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 1505.301234][ T41] usb 2-1: Using ep0 maxpacket: 16 [ 1505.307744][ T41] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1505.349764][ T41] usb 2-1: config 0 has no interfaces? [ 1505.385107][ T41] usb 2-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 1505.425940][ T41] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1505.455822][ T41] usb 2-1: Product: syz [ 1505.477015][ T41] usb 2-1: Manufacturer: syz [ 1505.498272][ T41] usb 2-1: SerialNumber: syz [ 1505.531172][ T41] usb 2-1: config 0 descriptor?? [ 1505.756424][ T41] usb 2-1: USB disconnect, device number 30 [ 1507.920380][T18190] sctp: [Deprecated]: syz.8.3502 (pid 18190) Use of int in max_burst socket option deprecated. [ 1507.920380][T18190] Use struct sctp_assoc_value instead [ 1508.000330][T18198] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3501'. [ 1511.103311][T10167] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 1511.341227][T10167] usb 3-1: Using ep0 maxpacket: 16 [ 1511.348121][T10167] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1511.370139][T10167] usb 3-1: config 0 has no interfaces? [ 1511.394145][T10167] usb 3-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 1511.431512][T18242] lo speed is unknown, defaulting to 1000 [ 1511.440189][T10167] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1511.458083][T10167] usb 3-1: Product: syz [ 1512.606459][T10167] usb 3-1: Manufacturer: syz [ 1513.530270][T10167] usb 3-1: SerialNumber: syz [ 1513.821616][T10167] usb 3-1: config 0 descriptor?? [ 1513.835159][T10167] usb 3-1: can't set config #0, error -71 [ 1513.842251][T10167] usb 3-1: USB disconnect, device number 49 [ 1514.055339][T18253] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 1514.342661][ T125] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 1514.442317][ T9] Bluetooth: (null): Too short H5 packet [ 1514.449984][ T9] Bluetooth: (null): Invalid header checksum [ 1514.469942][ T9] Bluetooth: (null): Invalid header checksum [ 1514.511286][ T125] usb 6-1: device descriptor read/64, error -71 [ 1514.580932][ T4535] Bluetooth: (null): Invalid header checksum [ 1514.691798][ T4506] Bluetooth: (null): Invalid header checksum [ 1514.780536][ T4506] Bluetooth: (null): Invalid header checksum [ 1514.973437][ T56] Bluetooth: (null): Invalid header checksum [ 1518.139345][ T8626] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 1519.464068][ T125] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 1521.088475][T18305] lo speed is unknown, defaulting to 1000 [ 1521.101207][ T41] usb 6-1: new full-speed USB device number 41 using dummy_hcd [ 1521.161160][ T125] usb 2-1: Using ep0 maxpacket: 16 [ 1521.170732][ T125] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1521.210323][ T125] usb 2-1: config 0 has no interfaces? [ 1521.218670][ T125] usb 2-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 1521.269233][ T125] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1521.289633][ T125] usb 2-1: Product: syz [ 1521.294018][ T41] usb 6-1: not running at top speed; connect to a high speed hub [ 1521.303313][ T125] usb 2-1: Manufacturer: syz [ 1521.316895][ T125] usb 2-1: SerialNumber: syz [ 1521.342448][ T41] usb 6-1: config 1 interface 0 has no altsetting 0 [ 1521.344079][ T125] usb 2-1: config 0 descriptor?? [ 1521.363025][ T41] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1521.373274][ T41] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1521.382205][ T41] usb 6-1: Product: ꒇ蔤孯♐龾ꮬ槠飧곁‷ᎎ웦﨔溙錧熌區缍໼⣶쬑귛ꍾ˛ᘑ㯐嗼Ωꑨ퀭뒟范㶸鴑瀑휿㠕훊΍쁞挌閇獡ݢ㞵ꍬ䙧﯀蘛봔宨囨ꄆ㪉缀ꜹ☩⒅폹떿簒꠵ࢬ닱蓰礙걎蛕쇃㧷箳鿇椹熼ᘀ숢혫㾖ᾁ쨵㫙걤㈥뜻ȫ劗魌䕀꘱邡긺䁌ಶ녪ꇣ걭둗蟡醭䁀ස띫踖㚤퍒ᜋ [ 1521.426854][ T41] usb 6-1: Manufacturer: 嘋䶟偏眆⴫㗖馷瀒稍ิ縃삱匦䦷飋є灕啠见ꬦ쾁シꛨ怮䣲둾ﲱ㲝姾ऍ庌鵃燋膸娄頣򿢨톖쑇գ੄饬䓱鋏Ӿꐷ時궼䓡︸嵞喙⟷셝瑯褾鱊軖돟䷆谗끹쯜䕿ꣵ픭䮵猱拮쿜惪ꈻ讽텴㪐灧恺嬃涨휥◧苭ꆳ讄黐볋퇋壷㊼䉨頮汆ᷯञ⤭ᆰ엺 [ 1521.489673][ T41] usb 6-1: SerialNumber: 꾨ᐯ㝄㿪鎠怰⊑壐䊄⤢tඬ㴛鏻襳簳錗켟ꓡ菷圩㐉琒햠댚ꈶ渨嗱䨂蕐Ꮴ裉췻㑶䥅袨䏱༯梹ﴑኁ밪ዸ┙滆㙱綒揭뭨㺵礌闵℘鄬㻞㔲㏖⠿쀋಍뛰잗䝳想ﯵᓇ븜ш佧㵺쑮ᑬ梺雬淽ڑ玒ঁ䠫䃙叴琺閾뉶⃔ [ 1522.421637][ T22] usb 2-1: USB disconnect, device number 31 [ 1522.571287][ T7307] usb 9-1: new high-speed USB device number 26 using dummy_hcd [ 1522.731313][ T7307] usb 9-1: device descriptor read/64, error -71 [ 1523.066185][ T41] usblp 6-1:1.0: usblp0: USB Bidirectional printer dev 41 if 0 alt 243 proto 3 vid 0x0525 pid 0xA4A8 [ 1523.085421][ T41] usb 6-1: USB disconnect, device number 41 [ 1523.097887][ T41] usblp0: removed [ 1523.351190][ T7307] usb 9-1: new high-speed USB device number 27 using dummy_hcd [ 1524.152061][ T7307] usb 9-1: device descriptor read/64, error -71 [ 1524.272107][ T7307] usb usb9-port1: attempt power cycle [ 1525.661174][ T7] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 1525.704671][ T8626] Bluetooth: hci4: Ignoring HCI_Connection_Complete for existing connection [ 1525.881182][ T7] usb 6-1: Using ep0 maxpacket: 16 [ 1525.916982][ T7] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1526.030332][ T7] usb 6-1: config 0 has no interfaces? [ 1526.928345][ T7] usb 6-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 1526.992022][ T7] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1527.000040][ T7] usb 6-1: Product: syz [ 1527.034664][ T7] usb 6-1: Manufacturer: syz [ 1527.056633][ T7] usb 6-1: SerialNumber: syz [ 1527.135183][T18361] blktrace: Concurrent blktraces are not allowed on sg0 [ 1527.611257][ T7307] usb 2-1: new full-speed USB device number 32 using dummy_hcd [ 1527.813792][ T7307] usb 2-1: not running at top speed; connect to a high speed hub [ 1527.897367][ T7] usb 6-1: config 0 descriptor?? [ 1527.912128][ T7307] usb 2-1: config 1 interface 0 has no altsetting 0 [ 1528.043588][ T7307] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1528.135145][ T7] usb 6-1: USB disconnect, device number 42 [ 1528.147805][ T7307] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1528.169007][ T7307] usb 2-1: Product: ꒇ蔤孯♐龾ꮬ槠飧곁‷ᎎ웦﨔溙錧熌區缍໼⣶쬑귛ꍾ˛ᘑ㯐嗼Ωꑨ퀭뒟范㶸鴑瀑휿㠕훊΍쁞挌閇獡ݢ㞵ꍬ䙧﯀蘛봔宨囨ꄆ㪉缀ꜹ☩⒅폹떿簒꠵ࢬ닱蓰礙걎蛕쇃㧷箳鿇椹熼ᘀ숢혫㾖ᾁ쨵㫙걤㈥뜻ȫ劗魌䕀꘱邡긺䁌ಶ녪ꇣ걭둗蟡醭䁀ස띫踖㚤퍒ᜋ [ 1528.266824][ T7307] usb 2-1: Manufacturer: 嘋䶟偏眆⴫㗖馷瀒稍ิ縃삱匦䦷飋є灕啠见ꬦ쾁シꛨ怮䣲둾ﲱ㲝姾ऍ庌鵃燋膸娄頣򿢨톖쑇գ੄饬䓱鋏Ӿꐷ時궼䓡︸嵞喙⟷셝瑯褾鱊軖돟䷆谗끹쯜䕿ꣵ픭䮵猱拮쿜惪ꈻ讽텴㪐灧恺嬃涨휥◧苭ꆳ讄黐볋퇋壷㊼䉨頮汆ᷯञ⤭ᆰ엺 [ 1528.306140][ T7307] usb 2-1: SerialNumber: 꾨ᐯ㝄㿪鎠怰⊑壐䊄⤢tඬ㴛鏻襳簳錗켟ꓡ菷圩㐉琒햠댚ꈶ渨嗱䨂蕐Ꮴ裉췻㑶䥅袨䏱༯梹ﴑኁ밪ዸ┙滆㙱綒揭뭨㺵礌闵℘鄬㻞㔲㏖⠿쀋಍뛰잗䝳想ﯵᓇ븜ш佧㵺쑮ᑬ梺雬淽ڑ玒ঁ䠫䃙叴琺閾뉶⃔ [ 1528.355701][T18361] lo speed is unknown, defaulting to 1000 [ 1528.560229][ T7307] usblp 2-1:1.0: usblp0: USB Bidirectional printer dev 32 if 0 alt 243 proto 3 vid 0x0525 pid 0xA4A8 [ 1528.621687][ T7307] usb 2-1: USB disconnect, device number 32 [ 1528.652438][ T7307] usblp0: removed [ 1528.682400][T18367] lo speed is unknown, defaulting to 1000 [ 1529.471194][ T7] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 1529.666119][ T7] usb 10-1: device descriptor read/64, error -71 [ 1530.032297][ T7] usb 10-1: new high-speed USB device number 11 using dummy_hcd [ 1530.241265][ T7] usb 10-1: device descriptor read/64, error -71 [ 1530.405481][ T7] usb usb10-port1: attempt power cycle [ 1530.931273][ T7] usb 10-1: new high-speed USB device number 12 using dummy_hcd [ 1531.763193][ T7] usb 10-1: device descriptor read/8, error -71 [ 1533.011145][ T7307] usb 9-1: new high-speed USB device number 29 using dummy_hcd [ 1533.201273][ T7307] usb 9-1: Using ep0 maxpacket: 16 [ 1534.071030][ T7307] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1534.111143][ T7307] usb 9-1: config 0 has no interfaces? [ 1534.140610][ T7307] usb 9-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 1534.161198][ T7307] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1534.169223][ T7307] usb 9-1: Product: syz [ 1534.211263][ T7307] usb 9-1: Manufacturer: syz [ 1534.215905][ T7307] usb 9-1: SerialNumber: syz [ 1534.259737][ T7307] usb 9-1: config 0 descriptor?? [ 1534.309380][ T8626] Bluetooth: hci4: Ignoring HCI_Connection_Complete for existing connection [ 1535.048706][T10167] usb 9-1: USB disconnect, device number 29 [ 1535.119044][T18410] syz.2.3559 (18410): drop_caches: 2 [ 1535.386457][T18427] lo speed is unknown, defaulting to 1000 [ 1535.410103][T18425] tipc: Started in network mode [ 1535.515392][T18425] tipc: Node identity 72fdd6866ed1, cluster identity 4711 [ 1535.526514][T18425] tipc: Enabled bearer , priority 0 [ 1535.588542][T18438] NILFS (nullb0): couldn't find nilfs on the device [ 1535.891156][T10167] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 1536.079945][T18420] tipc: Disabling bearer [ 1536.170499][T10167] usb 3-1: device descriptor read/64, error -71 [ 1537.794456][ T41] tipc: Node number set to 472700550 [ 1538.061431][T10167] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 1541.661349][ T41] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 1542.311409][ T41] usb 3-1: Using ep0 maxpacket: 16 [ 1542.330118][ T41] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1542.411801][ T41] usb 3-1: config 0 has no interfaces? [ 1542.435754][ T41] usb 3-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 1542.480686][ T41] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1542.516425][ T41] usb 3-1: Product: syz [ 1542.518222][T18492] lo speed is unknown, defaulting to 1000 [ 1542.520910][ T41] usb 3-1: Manufacturer: syz [ 1542.531409][ T41] usb 3-1: SerialNumber: syz [ 1542.550630][ T41] usb 3-1: config 0 descriptor?? [ 1543.084283][T10167] usb 3-1: USB disconnect, device number 52 [ 1543.151460][ T9960] Bluetooth: hci2: command 0x0406 tx timeout [ 1543.911411][ T9] Bluetooth: (null): Too short H5 packet [ 1543.951229][ T41] usb 9-1: new high-speed USB device number 30 using dummy_hcd [ 1544.046297][ T9] Bluetooth: (null): Invalid header checksum [ 1544.084059][ T9] Bluetooth: (null): Invalid header checksum [ 1544.331852][ T41] usb 9-1: device descriptor read/64, error -71 [ 1544.406914][T18517] binder: 18516:18517 unknown command 0 [ 1544.415333][T18517] binder: 18516:18517 ioctl c0306201 200000000540 returned -22 [ 1544.701461][ T41] usb 9-1: new high-speed USB device number 31 using dummy_hcd [ 1545.314076][ T41] usb 9-1: device descriptor read/64, error -71 [ 1545.648288][ T41] usb usb9-port1: attempt power cycle [ 1545.714491][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 1545.731488][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 1546.792593][T18545] tipc: Enabling of bearer rejected, failed to enable media [ 1548.239433][T10307] Bluetooth: (null): Too short H5 packet [ 1548.247762][T10307] Bluetooth: (null): Invalid header checksum [ 1548.255224][T10307] Bluetooth: (null): Invalid header checksum [ 1548.291476][ T7307] usb 9-1: new high-speed USB device number 33 using dummy_hcd [ 1548.338133][ T9] Bluetooth: (null): Invalid header checksum [ 1548.468619][ T9] Bluetooth: (null): Invalid header checksum [ 1548.486857][ T7307] usb 9-1: Using ep0 maxpacket: 16 [ 1548.556757][ T7307] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1548.633505][ T9] Bluetooth: (null): Invalid header checksum [ 1548.671411][ T9] Bluetooth: (null): Invalid header checksum [ 1548.867988][ T7307] usb 9-1: config 0 has no interfaces? [ 1548.876120][ T7307] usb 9-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 1548.885691][ T7307] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1548.894010][ T7307] usb 9-1: Product: syz [ 1548.898986][ T7307] usb 9-1: Manufacturer: syz [ 1548.904083][ T7307] usb 9-1: SerialNumber: syz [ 1548.927552][ T7307] usb 9-1: config 0 descriptor?? [ 1548.948259][T18566] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1550.142781][ T7] usb 9-1: USB disconnect, device number 33 [ 1556.371424][ T7] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 1556.611368][ T7] usb 3-1: Using ep0 maxpacket: 16 [ 1556.920701][ T7] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1557.371182][ T7] usb 3-1: config 0 has no interfaces? [ 1557.587348][ T7] usb 3-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 1557.637825][ T7] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1557.669717][ T7] usb 3-1: Product: syz [ 1557.689830][ T7] usb 3-1: Manufacturer: syz [ 1557.726897][ T7] usb 3-1: SerialNumber: syz [ 1557.746725][ T7] usb 3-1: config 0 descriptor?? [ 1558.009121][ T7] usb 3-1: USB disconnect, device number 53 [ 1558.092359][T18662] tipc: Started in network mode [ 1558.227055][T18662] tipc: Node identity 9afeae880a9e, cluster identity 4711 [ 1558.251810][T18662] tipc: Enabled bearer , priority 0 [ 1559.371260][ T125] tipc: Node number set to 2422255240 [ 1559.505375][T18670] netlink: 'syz.5.3630': attribute type 3 has an invalid length. [ 1559.557522][T18656] tipc: Disabling bearer [ 1560.232349][ T4535] Bluetooth: (null): Too short H5 packet [ 1560.256688][T18687] netlink: 'syz.5.3634': attribute type 4 has an invalid length. [ 1560.279775][ T4535] Bluetooth: (null): Invalid header checksum [ 1560.321757][ T4535] Bluetooth: (null): Invalid header checksum [ 1560.327995][ T4535] Bluetooth: (null): Invalid header checksum [ 1560.335544][ T4535] Bluetooth: (null): Invalid header checksum [ 1560.345983][ T4535] Bluetooth: (null): Invalid header checksum [ 1560.352224][ T4535] Bluetooth: (null): Invalid header checksum [ 1560.442928][ T4389] Bluetooth: (null): Invalid header checksum [ 1560.733166][T18697] usb usb1: usbfs: interface 0 claimed by hub while 'syz.5.3636' sets config #0 [ 1561.579163][T18697] usb usb1: usbfs: interface 0 claimed by hub while 'syz.5.3636' sets config #1 [ 1561.914445][ T7] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 1562.101469][ T7] usb 3-1: Using ep0 maxpacket: 16 [ 1562.109227][ T7] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1562.178182][ T7] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1562.217777][ T7] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1562.247622][ T7] usb 3-1: config 0 descriptor?? [ 1562.898456][T18716] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3642'. [ 1562.955848][ T7] mcp2221 0003:04D8:00DD.0006: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.2-1/input0 [ 1563.031132][ T7307] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 1563.221832][ T7307] usb 2-1: Using ep0 maxpacket: 16 [ 1563.240033][ T7307] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1563.293807][ T7307] usb 2-1: config 0 has no interfaces? [ 1563.331633][ T7307] usb 2-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 1563.374526][ T7] usb 3-1: USB disconnect, device number 54 [ 1563.385364][ T7307] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1563.438053][ T7307] usb 2-1: Product: syz [ 1563.452236][ T7307] usb 2-1: Manufacturer: syz [ 1563.477785][ T7307] usb 2-1: SerialNumber: syz [ 1563.501733][ T7307] usb 2-1: config 0 descriptor?? [ 1563.720586][ T7307] usb 2-1: USB disconnect, device number 33 [ 1563.810105][T18730] NILFS (nullb0): couldn't find nilfs on the device [ 1565.708679][T18743] overlayfs: failed to set xattr on upper [ 1565.812234][T18743] overlayfs: ...falling back to index=off,metacopy=off. [ 1565.920078][T18743] overlayfs: failed to resolve './file0': -2 [ 1567.729718][T18760] tipc: Enabling of bearer rejected, failed to enable media [ 1569.949528][T18781] NILFS (nullb0): couldn't find nilfs on the device [ 1571.641208][ T125] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 1571.831320][ T125] usb 6-1: Using ep0 maxpacket: 16 [ 1571.843401][ T125] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1571.859430][ T125] usb 6-1: config 0 has no interfaces? [ 1571.868030][ T125] usb 6-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 1571.887124][ T125] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1571.908234][ T125] usb 6-1: Product: syz [ 1571.916491][ T125] usb 6-1: Manufacturer: syz [ 1571.927452][ T125] usb 6-1: SerialNumber: syz [ 1571.955333][ T125] usb 6-1: config 0 descriptor?? [ 1572.319561][T17009] usb 6-1: USB disconnect, device number 43 [ 1576.212291][T18843] NILFS (nullb0): couldn't find nilfs on the device [ 1576.272232][ T41] usb 9-1: new high-speed USB device number 34 using dummy_hcd [ 1577.252938][ T41] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1577.285806][ T41] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1577.304519][T18849] netlink: 'syz.9.3673': attribute type 4 has an invalid length. [ 1577.342176][ T41] usb 9-1: New USB device found, idVendor=05ac, idProduct=021e, bcdDevice= 0.00 [ 1577.386757][ T41] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1577.912253][ T4335] Bluetooth: (null): Invalid header checksum [ 1578.015683][ T4335] Bluetooth: (null): Invalid header checksum [ 1578.053955][ T4335] Bluetooth: (null): Invalid header checksum [ 1578.060912][ T41] usb 9-1: config 0 descriptor?? [ 1578.074117][T18852] netlink: 'syz.9.3673': attribute type 4 has an invalid length. [ 1578.187026][T18596] Bluetooth: (null): Invalid header checksum [ 1578.455984][T18852] autofs4:pid:18852:autofs_fill_super: called with bogus options [ 1578.731667][ T41] apple 0003:05AC:021E.0007: unknown main item tag 0x0 [ 1578.748510][ T41] apple 0003:05AC:021E.0007: hidraw0: USB HID v0.04 Device [HID 05ac:021e] on usb-dummy_hcd.8-1/input0 [ 1579.145803][ T7] usb 9-1: USB disconnect, device number 34 [ 1580.256755][T18872] fido_id[18872]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.8/usb9/report_descriptor': No such file or directory [ 1582.854428][ T4411] Bluetooth: (null): Too short H5 packet [ 1582.870395][ T4411] Bluetooth: (null): Invalid header checksum [ 1582.914992][ T4411] Bluetooth: (null): Invalid header checksum [ 1582.952688][ T51] Bluetooth: (null): Invalid header checksum [ 1584.105590][T18902] 9pnet_virtio: no channels available for device syz [ 1585.430688][T18904] team0 (unregistering): Port device team_slave_0 removed [ 1585.509435][T18904] team0 (unregistering): Port device team_slave_1 removed [ 1586.740257][T18935] tipc: Enabling of bearer rejected, failed to enable media [ 1587.477995][ T22] usb 10-1: new high-speed USB device number 14 using dummy_hcd [ 1587.690870][ T22] usb 10-1: unable to get BOS descriptor or descriptor too short [ 1587.818448][ T22] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1587.842783][ T22] usb 10-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1587.982703][ T22] usb 10-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 33279, setting to 1024 [ 1587.995991][ T22] usb 10-1: config 1 interface 1 has no altsetting 0 [ 1588.738534][ T22] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1588.769768][ T22] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1588.779591][ T22] usb 10-1: Product: syz [ 1588.784744][ T22] usb 10-1: Manufacturer: syz [ 1588.790440][ T22] usb 10-1: SerialNumber: syz [ 1589.671438][ T4335] Bluetooth: (null): Too short H5 packet [ 1589.701272][ T22] usb 10-1: 2:1 : no or invalid class specific endpoint descriptor [ 1589.702088][ T4335] Bluetooth: (null): Invalid header checksum [ 1589.715435][ T22] usb 10-1: 2:1 : unknown format tag 0x1009 is detected. processed as MPEG. [ 1589.724424][ T22] usb 10-1: found format II with max.bitrate = 2418, frame size=7 [ 1589.735750][ T22] usb 10-1: 2:1 : no or invalid class specific endpoint descriptor [ 1589.745106][ T4335] Bluetooth: (null): Invalid header checksum [ 1589.752875][ T22] usb 10-1: 2:1 : unknown format tag 0x1009 is detected. processed as MPEG. [ 1589.764313][ T4335] Bluetooth: (null): Invalid header checksum [ 1589.770432][ T22] usb 10-1: found format II with max.bitrate = 2418, frame size=7 [ 1589.803082][ T9347] Bluetooth: (null): Invalid header checksum [ 1589.860184][ T22] usb 10-1: USB disconnect, device number 14 [ 1590.106320][T18965] sctp: [Deprecated]: syz.2.3705 (pid 18965) Use of int in max_burst socket option deprecated. [ 1590.106320][T18965] Use struct sctp_assoc_value instead [ 1591.710060][T18979] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1591.758193][T18979] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 1591.837741][T18979] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 1591.997554][T18979] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 1592.069580][T18979] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 1592.134208][T18979] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 1592.234066][T18979] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 1592.324349][T18987] sctp_transport_update_pmtu: 48 callbacks suppressed [ 1592.324368][T18987] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1593.202080][T18987] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1593.320007][T18987] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1593.408884][T18987] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1593.474647][T18987] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1593.601803][T18987] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1593.619303][T18987] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1594.372032][T18987] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1594.389311][T18996] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1594.414379][T18987] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1594.438725][T18987] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1594.441182][T18996] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1595.744366][T18996] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1595.813578][T18996] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1596.799834][T10307] Bluetooth: (null): Too short H5 packet [ 1596.811177][T10307] Bluetooth: (null): Invalid header checksum [ 1596.822407][T10307] Bluetooth: (null): Invalid header checksum [ 1596.841192][T10307] Bluetooth: (null): Invalid header checksum [ 1596.975290][T10307] Bluetooth: (null): Invalid header checksum [ 1600.945213][ T4504] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1601.199284][ T4504] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1601.280496][ T4504] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1601.388309][ T4504] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1602.427785][ T4504] device hsr_slave_0 left promiscuous mode [ 1602.435881][ T4504] device hsr_slave_1 left promiscuous mode [ 1602.442564][ T4504] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1602.449963][ T4504] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1602.458821][ T4504] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1602.466470][ T4504] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1602.474205][ T4504] device bridge_slave_1 left promiscuous mode [ 1602.480359][ T4504] bridge0: port 2(bridge_slave_1) entered disabled state [ 1602.493146][ T4504] device bridge_slave_0 left promiscuous mode [ 1602.499307][ T4504] bridge0: port 1(bridge_slave_0) entered disabled state [ 1602.524653][ T4504] device veth1_macvtap left promiscuous mode [ 1602.530680][ T4504] device veth0_macvtap left promiscuous mode [ 1602.536914][ T4504] device veth1_vlan left promiscuous mode [ 1602.542988][ T4504] device veth0_vlan left promiscuous mode [ 1602.753148][ T4504] bond1 (unregistering): Released all slaves [ 1603.212350][ T4504] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1603.262949][ T4504] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1603.617892][ T4504] bond0 (unregistering): Released all slaves [ 1604.133190][ T4504] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1604.213280][ T4504] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1604.275976][ T4504] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1604.327212][ T4504] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1604.418381][ T4504] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1604.510071][ T4504] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1604.577619][ T4504] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1604.627125][ T4504] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1604.744068][ T4504] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1604.818564][ T4504] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1604.876683][ T4504] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1604.936751][ T4504] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1605.035259][ T4504] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1605.108328][ T4504] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1605.181843][ T4504] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1605.266736][ T4504] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1605.430781][ T4504] tipc: Left network mode [ 1605.445549][ T4504] tipc: Left network mode [ 1605.459252][ T4504] tipc: Left network mode [ 1605.472923][ T4504] tipc: Left network mode [ 1607.150509][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 1607.157080][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 1607.328766][ T4504] device hsr_slave_0 left promiscuous mode [ 1607.335508][ T4504] device hsr_slave_1 left promiscuous mode [ 1607.343735][ T4504] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1607.351268][ T4504] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1607.358958][ T4504] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1607.366799][ T4504] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1607.375026][ T4504] device bridge_slave_1 left promiscuous mode [ 1607.387634][ T4504] bridge0: port 2(bridge_slave_1) entered disabled state [ 1607.398716][ T4504] device bridge_slave_0 left promiscuous mode [ 1607.404947][ T4504] bridge0: port 1(bridge_slave_0) entered disabled state [ 1607.425262][ T4504] device hsr_slave_0 left promiscuous mode [ 1607.433065][ T4504] device hsr_slave_1 left promiscuous mode [ 1607.439441][ T4504] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1607.446973][ T4504] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1607.457026][ T4504] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1607.464804][ T4504] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1607.474331][ T4504] device bridge_slave_1 left promiscuous mode [ 1607.480477][ T4504] bridge0: port 2(bridge_slave_1) entered disabled state [ 1607.488533][ T4504] device bridge_slave_0 left promiscuous mode [ 1607.494978][ T4504] bridge0: port 1(bridge_slave_0) entered disabled state [ 1607.505579][ T4504] device hsr_slave_0 left promiscuous mode [ 1607.512001][ T4504] device hsr_slave_1 left promiscuous mode [ 1607.518190][ T4504] batman_adv: batadv0: Interface deactivated: dummy0 [ 1607.525039][ T4504] batman_adv: batadv0: Removing interface: dummy0 [ 1607.535884][ T4504] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1607.543542][ T4504] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1607.552034][ T4504] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1607.559447][ T4504] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1607.567198][ T4504] device bridge_slave_1 left promiscuous mode [ 1607.573454][ T4504] bridge0: port 2(bridge_slave_1) entered disabled state [ 1607.581594][ T4504] device bridge_slave_0 left promiscuous mode [ 1607.587742][ T4504] bridge0: port 1(bridge_slave_0) entered disabled state [ 1607.598465][ T4504] device hsr_slave_0 left promiscuous mode [ 1607.604747][ T4504] device hsr_slave_1 left promiscuous mode [ 1607.610953][ T4504] device bridge_slave_1 left promiscuous mode [ 1607.617365][ T4504] bridge0: port 2(bridge_slave_1) entered disabled state [ 1607.625964][ T4504] device bridge_slave_0 left promiscuous mode [ 1607.632259][ T4504] bridge0: port 1(bridge_slave_0) entered disabled state [ 1607.715854][ T4504] device veth1_macvtap left promiscuous mode [ 1607.721961][ T4504] device veth0_macvtap left promiscuous mode [ 1607.728007][ T4504] device veth1_vlan left promiscuous mode [ 1607.733845][ T4504] device veth0_vlan left promiscuous mode [ 1607.740585][ T4504] device veth1_macvtap left promiscuous mode [ 1607.746802][ T4504] device veth0_macvtap left promiscuous mode [ 1607.753147][ T4504] device veth1_vlan left promiscuous mode [ 1607.758936][ T4504] device veth0_vlan left promiscuous mode [ 1607.766071][ T4504] device veth1_macvtap left promiscuous mode [ 1607.772360][ T4504] device veth0_macvtap left promiscuous mode [ 1607.778661][ T4504] device veth1_vlan left promiscuous mode [ 1607.784671][ T4504] device veth0_vlan left promiscuous mode [ 1607.792578][ T4504] device veth1_macvtap left promiscuous mode [ 1607.798608][ T4504] device veth0_macvtap left promiscuous mode [ 1607.805063][ T4504] device veth1_vlan left promiscuous mode [ 1607.810854][ T4504] device veth0_vlan left promiscuous mode [ 1608.206610][ T4504] bond3 (unregistering): (slave bond4): Releasing backup interface [ 1608.216694][ T4504] bond4 (unregistering): Released all slaves [ 1608.227945][ T4504] bond3 (unregistering): Released all slaves [ 1608.360537][ T4504] bond2 (unregistering): Released all slaves [ 1608.487358][ T4504] bond1 (unregistering): Released all slaves [ 1608.864771][ T4504] team0 (unregistering): Port device team_slave_1 removed [ 1608.910401][ T4504] team0 (unregistering): Port device team_slave_0 removed [ 1608.954139][ T4504] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1608.999524][ T4504] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1609.474237][ T4504] bond0 (unregistering): Released all slaves [ 1609.939177][ T4504] team0 (unregistering): Port device team_slave_1 removed [ 1609.985491][ T4504] team0 (unregistering): Port device team_slave_0 removed [ 1610.030786][ T4504] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1610.082333][ T4504] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface