last executing test programs: 48.683701964s ago: executing program 0 (id=3443): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000180), &(0x7f0000000240)=0xc) ioprio_set$uid(0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r4 = socket(0x10, 0x80002, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) sendmsg$nl_route(r4, &(0x7f0000000540)={0x0, 0x88a8ffff, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="440000001100a7cc5a8100ae541d002007000000", @ANYRES32=r3, @ANYBLOB="00000a00100000001c001a80080002802d00ff0408000200f47b0c0d"], 0x44}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r5 = socket(0x10, 0x3, 0x0) sendto$inet6(r5, &(0x7f0000000080)="7800000018002507b9409b14ffff00000204be04020506050e020409430009003f000c000a0000000d0085a168d0bf46d32345653600648d0b00120002000a0000005ade4a460c89b6ec0cff3959547f509058ba86c902000000004a32000400160005000a0000000000e000e218d1ddf66ed538f2523250", 0x78, 0x0, 0x0, 0x0) socket(0x1f, 0x80000, 0x32) r6 = dup(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r7, &(0x7f0000000500)={0xa, 0x2, 0x0, @empty}, 0x1c) listen(r7, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup_int(r6, &(0x7f0000000100)='memory.min\x00', 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.stat\x00', 0x26e1, 0x0) setsockopt$inet6_tcp_int(r8, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r8, &(0x7f00000000c0)="04", 0x1, 0x20010845, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000000800"/20], 0x14}}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), r0) 38.934622817s ago: executing program 0 (id=3454): creat(&(0x7f0000000240)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x0, 0x3}, 0x10) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) sendmsg$tipc(r3, &(0x7f0000000140)={0x0, 0x20d302, 0x0}, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r3, 0x10f, 0x81, &(0x7f0000000000), 0x4) r4 = dup3(r2, r3, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r4, 0x0, 0x0) setsockopt$TIPC_GROUP_LEAVE(r3, 0x10f, 0x88) r5 = epoll_create(0x208000) r6 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r6, &(0x7f00000000c0)) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000340), 0xc901, 0x0) write$P9_RVERSION(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r7 = dup(r1) write$FUSE_BMAP(r7, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r7, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r7}, 0x2c, {[{@cache_mmap}], [], 0x6b}}) chmod(&(0x7f0000000140)='./file0\x00', 0x0) r8 = open$dir(&(0x7f0000000140)='./file0\x00', 0x1, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) ftruncate(r9, 0x2000009) sendfile(r8, 0xffffffffffffffff, 0x0, 0x7ffff000) chown(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) 36.370380299s ago: executing program 0 (id=3461): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) keyctl$setperm(0x5, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100), 0x80000, 0x0) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000140)=0x1, 0x4) syz_emit_ethernet(0x0, 0x0, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x3f, &(0x7f0000000080)=0x1, 0x4) bind$inet(r2, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1f}]}, @NFT_MSG_NEWSETELEM={0x74, 0xc, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x48, 0x3, 0x0, 0x1, [{0x44, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x38, 0xb, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x5}, @NFTA_LIMIT_UNIT={0xc}, @NFTA_LIMIT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x3}]}}}]}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0xf8}}, 0x0) sendto$inet(r2, 0x0, 0x0, 0x200007fd, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x4) r4 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) read$FUSE(r4, 0x0, 0x27) rt_sigqueueinfo(0x0, 0x0, 0x0) tee(r1, r2, 0x7, 0x8) recvmmsg(r2, &(0x7f00000005c0), 0x40000000000026c, 0x0, 0x0) setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f0000000840)={0x40, {{0x2, 0x4e23, @loopback}}, 0x1, 0x3, [{{0x2, 0x4e22, @remote}}, {{0x2, 0x4e20, @remote}}, {{0x2, 0x4e21, @multicast2}}]}, 0x210) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000018c0)={r5, 0x18000000000002a0, 0xf, 0x0, &(0x7f00000009c0)="87d945b078a9ed43588e0fec5eccc1", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 31.067452893s ago: executing program 0 (id=3471): creat(&(0x7f0000000240)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x0, 0x3}, 0x10) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) sendmsg$tipc(r3, &(0x7f0000000140)={0x0, 0x20d302, 0x0}, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r3, 0x10f, 0x81, &(0x7f0000000000), 0x4) r4 = dup3(r2, r3, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r4, 0x0, 0x0) setsockopt$TIPC_GROUP_LEAVE(r3, 0x10f, 0x88) r5 = epoll_create(0x208000) r6 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r6, &(0x7f00000000c0)) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000340), 0xc901, 0x0) write$P9_RVERSION(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r7 = dup(r1) write$FUSE_BMAP(r7, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r7, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r7}, 0x2c, {[{@cache_mmap}], [], 0x6b}}) chmod(&(0x7f0000000140)='./file0\x00', 0x0) r8 = open$dir(&(0x7f0000000140)='./file0\x00', 0x1, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) ftruncate(r9, 0x2000009) sendfile(r8, 0xffffffffffffffff, 0x0, 0x7ffff000) chown(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) 30.344544536s ago: executing program 2 (id=3473): creat(&(0x7f0000000240)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x0, 0x3}, 0x10) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) sendmsg$tipc(r3, &(0x7f0000000140)={0x0, 0x20d302, 0x0}, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r3, 0x10f, 0x81, &(0x7f0000000000), 0x4) r4 = dup3(r2, r3, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r4, 0x0, 0x0) setsockopt$TIPC_GROUP_LEAVE(r3, 0x10f, 0x88) r5 = epoll_create(0x208000) r6 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r6, &(0x7f00000000c0)) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000340), 0xc901, 0x0) write$P9_RVERSION(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r7 = dup(r1) write$FUSE_NOTIFY_RETRIEVE(r7, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r7}, 0x2c, {[], [], 0x6b}}) chmod(&(0x7f0000000140)='./file0\x00', 0x0) r8 = open$dir(&(0x7f0000000140)='./file0\x00', 0x1, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) ftruncate(r9, 0x2000009) sendfile(r8, r9, 0x0, 0x7ffff000) 30.189706111s ago: executing program 0 (id=3474): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r5 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000140)={'fscrypt:', @desc1}, &(0x7f00000001c0)={0x0, "28d7b07d54891881fe02c1203fe49696b9f26f2da4149683f065714f8a61d1f32c99064bbd27b2aa77459cff33a3a98350f1af9d51ed5bef3d63520d260804d0"}, 0x48, 0xfffffffffffffffd) keyctl$revoke(0x3, r5) add_key$keyring(&(0x7f0000000100), &(0x7f0000000240)={'syz', 0x2}, 0x0, 0x0, r5) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=ANY=[@ANYBLOB="4c0000004900010029bd7000000000000a"], 0x4c}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat(r4, &(0x7f0000000040)='./file0\x00', 0x0) unshare(0x60600) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x34}}, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5}, 0xab) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r9}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x16, 0xc, &(0x7f0000000a40)=ANY=[@ANYRESHEX=r1, @ANYRES32, @ANYRESOCT=r8], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x90) 29.004145146s ago: executing program 0 (id=3477): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) chdir(&(0x7f00000003c0)='./bus\x00') socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) symlink(&(0x7f0000000dc0)='./file0\x00', &(0x7f0000000cc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') unlink(&(0x7f0000000a00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 28.90847432s ago: executing program 2 (id=3478): openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0x18, 0x20000000, 0x0) mknod(0x0, 0x0, 0x0) open(0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$inet(r0, 0x0, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$isdn(0x22, 0x3, 0x26) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) preadv(r1, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102394, 0x19045}], 0x1, 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000140)={&(0x7f00000006c0)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r2, 0xc02064b6, &(0x7f00000003c0)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r2, 0xc06864a2, &(0x7f0000000400)={0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "b4bc323ef77d1f000071849800000000deff00000000e6ffffff00"}}) 26.599647044s ago: executing program 2 (id=3482): sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r2, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000080)) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f00000003c0)=""/75, 0x0}) ioctl$VHOST_SET_FEATURES(r2, 0x4008af00, &(0x7f00000000c0)=0x4000000) r3 = dup(0xffffffffffffffff) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000000000000, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0xe501, 0x3, 0x308, 0x138, 0x0, 0x0, 0x0, 0x0, 0x270, 0x230, 0x230, 0x270, 0x230, 0x3, 0x0, {[{{@uncond, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@unspec=@limit={{0x48}, {0x0, 0x4}}, @common=@unspec=@devgroup={{0x38}, {0xd}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}, {{@uncond, 0x0, 0xd0, 0x138, 0x0, {}, [@common=@unspec=@time={{0x38}}, @common=@unspec=@cpu={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x368) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000000000)={0x0, r3}) r6 = io_uring_setup(0x7211, &(0x7f0000001040)={0x0, 0x92f9, 0x200, 0x3, 0x2}) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r6, 0x1c, 0x20000048, 0x0) dup(r1) getresuid(&(0x7f0000000440), &(0x7f0000000480), 0x0) 24.134882385s ago: executing program 1 (id=3486): sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r2, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000080)) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f00000003c0)=""/75, 0x0}) ioctl$VHOST_SET_FEATURES(r2, 0x4008af00, &(0x7f00000000c0)=0x4000000) r3 = dup(0xffffffffffffffff) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000000000000, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0xe501, 0x3, 0x308, 0x138, 0x0, 0x0, 0x0, 0x0, 0x270, 0x230, 0x230, 0x270, 0x230, 0x3, 0x0, {[{{@uncond, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@unspec=@limit={{0x48}, {0x0, 0x4}}, @common=@unspec=@devgroup={{0x38}, {0xd}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}, {{@uncond, 0x0, 0xd0, 0x138, 0x0, {}, [@common=@unspec=@time={{0x38}}, @common=@unspec=@cpu={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x368) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000000000)={0x0, r3}) io_uring_setup(0x7211, &(0x7f0000001040)={0x0, 0x92f9, 0x200, 0x3, 0x2}) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000000)='./file0\x00', &(0x7f0000000240)='squashfs\x00', 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0x1c, 0x20000048, 0x0) dup(r1) getresuid(&(0x7f0000000440), &(0x7f0000000480), 0x0) 22.673704815s ago: executing program 3 (id=3489): socket$inet6(0xa, 0x80000, 0x1) socket$key(0xf, 0x3, 0x2) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) futex(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) timer_create(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) rt_sigreturn() mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) prlimit64(0x0, 0x8, &(0x7f0000000140), 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)) syz_io_uring_setup(0x16d2, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000040), &(0x7f0000000140)) 21.806897448s ago: executing program 2 (id=3490): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) syz_usb_connect(0x0, 0x24, 0x0, 0x0) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000240)={0x1, 0x0, [{0x1d9, 0x0, 0x1}]}) 21.525181638s ago: executing program 4 (id=3491): socket$kcm(0x29, 0x5, 0x0) creat(0x0, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x0, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(0x0, 0x0, 0x0, 0x0) syz_open_dev$sndpcmp(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) creat(&(0x7f0000000240)='./bus\x00', 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) timer_gettime(r1, &(0x7f00000003c0)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x14, &(0x7f0000000400)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@call={0x85, 0x0, 0x0, 0x9e}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(r4, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000200)={'geneve0\x00'}) syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}, "00186371ae9b1c03"}}}}}, 0x0) 20.43587289s ago: executing program 2 (id=3492): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f00000004c0)=ANY=[@ANYBLOB="00000100000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r1, 0x5b02, 0x0) 20.136433385s ago: executing program 4 (id=3493): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) quotactl_fd$Q_GETFMT(0xffffffffffffffff, 0xffffffff80000401, 0xee00, &(0x7f0000000480)) accept4(0xffffffffffffffff, &(0x7f0000000240)=@nfc_llcp, &(0x7f0000000440)=0x80, 0x800) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getdents64(0xffffffffffffffff, 0x0, 0x0) write$FUSE_NOTIFY_DELETE(r1, &(0x7f0000000080)={0x2a, 0x6, 0x0, {0x1, 0x200000000004, 0x1, 0x2, '\x00', 0x8}}, 0x2a) socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a40)=ANY=[@ANYBLOB="b80100001200f52600000000000000000000000000004e2300"/56, @ANYRES32=0x0, @ANYBLOB="0000000000000000a207000000000000c800010046"], 0x1b8}}, 0x0) syz_fuse_handle_req(r1, &(0x7f00000021c0)="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", 0x2000, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001040)={0xb0, 0x0, 0x0, [{{0x200000000004, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc000, 0x5}}, {0x0, 0x0, 0x1, 0x0, '\x00'}}]}, 0x0, 0x0}) r2 = syz_io_uring_setup(0x320e, &(0x7f0000000800)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000540)=0x0) syz_io_uring_setup(0x297a, &(0x7f0000000200), &(0x7f00000002c0)=0x0, &(0x7f0000000080)) syz_io_uring_submit(r4, r3, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r2, 0x3332, 0x0, 0x0, 0x0, 0x0) readv(r0, &(0x7f0000002740)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000340)={{0x80}, 'port0\x00', 0xf3, 0x140043}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) 20.024740268s ago: executing program 1 (id=3494): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000840), r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) mount$tmpfs(0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='gid=', @ANYRESHEX=r1]) mount$overlay(0x0, 0x0, &(0x7f0000000080), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) ptrace$ARCH_GET_CPUID(0x1e, r2, 0x0, 0x1011) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) syz_init_net_socket$ax25(0x3, 0x3, 0x0) ftruncate(0xffffffffffffffff, 0x2007ffb) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x0, 0x1) mount(&(0x7f0000000100)=@nullb, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000000)='ntfs3\x00', 0x0, &(0x7f0000000340)) r4 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000040)={'veth1_vlan\x00', &(0x7f0000000080)=@ethtool_sfeatures={0x3b, 0x2, [{0xff, 0x2}, {0x2, 0x9}]}}) 19.74526768s ago: executing program 4 (id=3495): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) quotactl_fd$Q_GETFMT(0xffffffffffffffff, 0xffffffff80000401, 0xee00, &(0x7f0000000480)) accept4(0xffffffffffffffff, &(0x7f0000000240)=@nfc_llcp, &(0x7f0000000440)=0x80, 0x800) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getdents64(0xffffffffffffffff, 0x0, 0x0) write$FUSE_NOTIFY_DELETE(r1, &(0x7f0000000080)={0x2a, 0x6, 0x0, {0x1, 0x0, 0x1, 0x2, '\x00', 0x8}}, 0x2a) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a40)=ANY=[@ANYBLOB="b80100001200f52600000000000000000000000000004e2300"/56, @ANYRES32=0x0, @ANYBLOB="0000000000000000a207000000000000c800010046"], 0x1b8}}, 0x0) syz_fuse_handle_req(r1, &(0x7f00000021c0)="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", 0x2000, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001040)={0xb0, 0x0, 0x0, [{{0x200000000004, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc000, 0x5}}, {0x0, 0x0, 0x1, 0x0, '\x00'}}]}, 0x0, 0x0}) r3 = syz_io_uring_setup(0x320e, &(0x7f0000000800)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000540)=0x0) syz_io_uring_setup(0x297a, &(0x7f0000000200), &(0x7f00000002c0)=0x0, &(0x7f0000000080)) syz_io_uring_submit(r5, r4, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r3, 0x3332, 0x0, 0x0, 0x0, 0x0) readv(r0, &(0x7f0000002740)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000340)={{0x80}, 'port0\x00', 0xf3, 0x140043}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) 19.171980093s ago: executing program 4 (id=3496): r0 = openat$uinput(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$UI_DEV_CREATE(r0, 0x5501) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) write$binfmt_aout(r1, 0x0, 0x1000) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000080)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r2, 0x54a3) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="78226e6f65786163638173733d616e792c63a50068653d667363616368652cf738d315686e4f04281fc6f21400f43ef91134e0a114b48bed53efff2df9955a9445a72e8a2db6ef22c331aabde1a456f16dc86fa9499aad3d3732bb68235fe372140c000080683a7281c41c72980747265502cf47dbab08009817563a2aaadadbbaf965cd4ac7a9334f5f7859"]) syz_open_procfs(0x0, &(0x7f0000000080)='net/igmp\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_serviced\x00', 0x275a, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0xffffffffffffff44) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r4, 0x4068aea3, &(0x7f0000000080)={0xa4, 0x0, 0x1}) ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4040aea0, &(0x7f0000000000)={0x0, 0x0, 0x4, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d, 0x0, 0x0, 0x0, 0x0, '\x00', 0x9}) ioctl$KVM_RUN(r5, 0xae80, 0x0) syz_emit_ethernet(0x8e, &(0x7f00000002c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa3f867c043d797c1beaddaaaaaaaaaaaa86dd600a96460058060000000000000000000000000000007700"/58, @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="6002000090780000080a0000000000000000fe06f9891b940210a618d258fa3967785cbd05fa326d051a0000000100000005000000020000000700004be900001000fe07f989ad8706000000"], 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) 18.878841509s ago: executing program 1 (id=3497): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) keyctl$setperm(0x5, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100), 0x80000, 0x0) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000140)=0x1, 0x4) syz_emit_ethernet(0x0, 0x0, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x3f, &(0x7f0000000080)=0x1, 0x4) bind$inet(r2, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1f}]}, @NFT_MSG_NEWSETELEM={0x74, 0xc, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x48, 0x3, 0x0, 0x1, [{0x44, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x38, 0xb, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x5}, @NFTA_LIMIT_UNIT={0xc}, @NFTA_LIMIT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x3}]}}}]}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0xf8}}, 0x0) sendto$inet(r2, 0x0, 0x0, 0x200007fd, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x4) r4 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) read$FUSE(r4, 0x0, 0x27) rt_sigqueueinfo(0x0, 0x0, 0x0) sendmsg$inet(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000180)='/', 0x1}], 0x1}, 0x0) recvmmsg(r2, &(0x7f00000005c0), 0x40000000000026c, 0x0, 0x0) setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f0000000840)={0x40, {{0x2, 0x4e23, @loopback}}, 0x1, 0x3, [{{0x2, 0x4e22, @remote}}, {{0x2, 0x4e20, @remote}}, {{0x2, 0x4e21, @multicast2}}]}, 0x210) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a40)=ANY=[@ANYBLOB="b70200000d000000bfa300000000000005000000000000007a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065060400010000050404000001007d60b7030000000000006a0a00fe00000000850000000d000000b7000000000000009500000000000000496cf27fb6d2c643db7e2d5fb4b0936cdf827fb43a431ca711fcd0cdfa146ed3d09a6175037958e27106e225b7937f02008b5e5a076d83923dd29c034055b67d5b310efcfa89147a7fb0a93d035f2f206d2ef831ab7ea0c34f17e3ad6eecbb622003b538dfd8e012e79578e51bc53099e90f4580d7be3e8c254a5cba117cbdb9cd38bdb2ca8e050000003a14817ac61e4dd11183a13477bf7e060e3670ef0e6a9f65f1328d6704902cbe7bc04b82d2789cb132b8667c214733a18c8b6619f28d996d60a17e3c184b751c51160100000000000080148b9a31ee8dc8b544f3c4a532e60a0ac346dfebd31a08060000000200000000000000334d83239dd20100008000000000d858e8327ef01fb6c86acac12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e957bc73ddc4eabba08a406f99f7b1e1ad828267d4eadd3964663e085354133f7130856f756436303767d2e24f29e5dad9796edb697a6ea0183babc190ae2ebf8aad34732181feb28cb0bae7c34dc5e7c805210600000000000000c3dec04b25df45d4f71ab158c36657b7218baa07a99bd50499ccc421ace5e845885efb5b9964e4beba3da8223fe5308e4e65ee93e107000000f8ddebf70132a4d01776839b8eccf707882042e716df9b57b290c661d4e85031086197bcc5cb0e221a0c34323c129102b6ff0100002e88a1940b3c02ed9c92d6f64b1282dc51bb0015982730711c599e1c72ffa11ed8be1a6830d7507005154c46bd3ca96318c570f0721fc7aa2a5836ba99fe1f86468694f22cdf550ef091a78098534f0d973059594119d06d5ea9a8d0857382ec6e2a071474cfc12346e47ad97f4ead7cf70a9d1cdac944779dc08a705414888700a30e2366c6a06b3367a389ca39059787790017b0689a173db9c24db65c1e00015c1d093dab18fd0699fe3304000000323e9c7080397bc49d70c060d57bc88fbe3bbaa058b040362ab926150363fb099408885afc2bf9a46a076b7babfcddeff8c35030669ea69f5e4be1b8e0d6697e97186f9ae97d5670dba6623279f73db9dec75070cd9ab0fda6b069ef6d2857ca3e4e6068f1bf710d133d541da86e0477e4a6cc999dc21c3ef408e6b178e7c9f274d7fafc8d757d33dfa35aa2b2ff7f9a7d365e63845f3e1092f8dde8af3904ea0f4b82649b83ed4fa0f873339c4cadecc13219ba7518aa4f7db34ead13484742067ab743c1d82a5687f2ed690000010000000000000000000000000000000000000099d4fa0000000000003f0ecdc7c82e72919c91d2039afe17e95edef8ba72205beff7771bcb293747b88486cacee403000000a2919a4b09e168e4e4d5ff2ed893f2e314679fa69fc7e0cf761f918725704a01c56009a9f748e5aaf30a10bd8c409b1870c1f75e26b45264e3d3f8e0048e55ae289c2f884d0766cddc76eb7f601110ff39053c262279f4ef00fbdb8c328615a9ec84f27a9f3938ae736138b8c1ec220c1540bf3d162dc1c27fa30f0dc60b9f257db5d1c7ed2efce676a93110904d5e055af44664b53c764d61443f73552195c7ccfbf9f03c44432eaa3b7501d4239354da8de21eada75d3a3afb2c76ff0700007976694b6a0f0e946766f57544ff52cef0dd811bec4e3c0a30f2d7d19d26d201721b8eded3bc475958dd498ee2b2d6146e33fc0de1dc2e0516ac565ddb1d4ae89e671282a2d3066ac968c7d7d7db195f255b1b4a85eb9ee0a3b68c9e209756623adf685dd715d68ed1274b4d5502f512493af8f98c615cac3666c58f785c3f758be352a71871d5c081197d37980e4f4e26b5476fb20407ff7098b7174bef66fa03a99b5c0c20b378065fac4ef9ac2d0d804b9400000060e5d3f1749f6aecf69ba83a71caa9bdddc679f1b826f74b6563a4be1fd82b73c8c2bc65f63982b951fb058fd3c7b6341c4580376b2c16bd94d2da66059de81abfa15eeeae3b0ba38d8bb1bf032c73f1285e21fff5a1d138e061b1dc7bbda199b5fab8e0719e9cd69b47dcb52b0be6a3a73afdf328132e1d4f21065716be0c53a23940d07188b015fa341dbc92231c8b5e5717eac184f46c9f61b69f55cd2231bcf821052429a1f250e8b734be0605a15f25923d599544b319319ff0a32621019347df460a098119a6f47eb1bac47946d7a009cbc6ec74c19a93cc7c7138b28c95270116181fd5f5533d3c58104d2ad0e10d3663488e664401453f22f0d76d2162635365258af61ae1f46f4a7866f302d91e3f7c2781f602220522e84602a939a8d5e4137ae31ccd397404dc72e06715a6503d4d865182803ee6725da7293b23daeebefd6fce7411c9624a7e8d5ba5a13e1c32adc4f3274497c6882a72475e4280a4d9a47c003c6ed3071330c58145be813a10788a720a6b5a498ca2b42496c479a0a71e2f6f9bad8c84bc6be20281bde0b348cf2c60538a505ad4a0510eebb023e4954c9eb6cd70627f5c03d867dbf3ad5d1f1dc852064dd0efafc3df20ec8faf3d194db76127f88f284fa1b71ab964fdd2474471da76373e65e9a8bf844bdfdd348bc7d00c4c7e7abc231f8cde79b7a6c5aafe954b8ba37818e40c14b36f2d7c23f9f614576b689436fef2f27f8b1e756e00262e22bca49c43fd73e7e99b2fa44a8c1df7ffffff735ad6c5fabf082e0df0f8ba7e24272165f2f5b28230c095162b82ceaeaae9b1713b5f2ee68e2b53d44bd84bf6960157e96bbb96b5e10d66c87e7a9a7d53c281d88ebb175a4dbb82130e6870980e47913110f091d21760d985afd3163f2e6880682432f9b3b97d57a9f980edfa1116a3d04d58872a07d6a7e12db673acd2f7b8988d833e71943fe2c1c65a3cf355e5b91114052f8a398d8e10c96b955c56b55bfd3ecf0af694c71a03f2996c15b1ba971de1cb9c7e6a0000000000000014783ef54c51199317413f98dca8ff3df3572a7d9ef5f6103997f1f9e4b0c3970bda50f6c0af58dbd6c031b1a5a7512c58965c514adfa17d31429c68db50a93d88199defd3b4625fea426ff9293a28a544a6a9e24d192d67a1b3c6b14c4ec6d164e902ce4913843d65d841973468729ea12bf6d3499036dbb66718f3497855c3baa6cc07c0fa388ec9df0617c1a28ef5a595ee267a76175b8a057e6efaf4fefe46def451f2858fe71a53e77b1a44e98843bb3a40102da3703dfb9f61bdcea2fb810b32d52e2157a150a63ea6135d1cf6f864c2e68884d7245bc5d61dc5a114d10ffb2200040000fc1e3865d17d128306d1b81884a934cb0000000000d367000098a4526e6468987dbc63bff7590eb388afaba43d811996333eef7e9f472bee293f0c40d434b8be07cbd52325296e22802493edb5c590ad208bac683a8b2d4c9d2d57ff846ae8c422e0b28546671f11d8157bb762c91f3fbcca8e21589c92446ae65d408c0637ffcc2d44b615ce003dd1e12b085e186d069a55c2e96efbe5024d61a56a36d988c0f530043a6cd72af0fcd540a9d4e293690c5e697b3a1480e46df5371bca1cfb28a57c1b3c956ec81397e81fbf870a673804220423f52ad8178b9fd04bff816e00000000000000000000000000000000000000000079aaf19bd1e18f582aac5b83d76bd57297512fdcdad18bcf2455bc80394d8f34e2ef84733038f4b6ef516d7baa99f24f2f100fc46aec9dc19b30fe9966b7ae563b6459d86fd3b4c7173f06387517e4189f3fb09c069e20220354b054f2391efe55a0cc7f738b3987ae033ceabddec65ec31f98c7e0858e8d411087889964b8fb3c31f74fa7b2e6e1c1d84a46d8be8afff1ac67eb2da30294d4a0f89978d4e2137319b6448da45bd00eb23aa5be1d566782b5a4aa291a854a4932bcbf472fd1175b521edb1763bb7dae4a124b0006e2ce4799519b3dbd3c0109b17fe2b4b87f6ad4b7176c9c1959669ef42cfce81fbc6dcdc7f9bde1a66c0b3cf9329bfecf0217bda1b72924ee9d90a3bd0be833f206244b5ba0648309018da5442ebd22bca0363183aae9d38f80638f52015cab5a8d772f9b92cb2f286783fa976f7d215136cae0b0b0539dc7dbd56035a69807514c732763f542f10401e65368b821b584fe2f82c94b2f5930246800000000000000000000000000000000000000c8ed77d8ac9f28a2e8f205900241ec8872fe3ecdf73abfc4024298a69649e17f3fe5ebba1e17f2f280e6d3f094cd3448700c5ee102b5d1b04f08ab2e5272990646eca26a62431e8c942ea2c0c621b4821eb5beceee6d53468852159452cf47aead473a8638a4d1ce2d4c6df1074e8cb3ec16149e6b4b7ec1a9aa1b63f41d08afd3d885b98330e25eedaaf5f361b2e81ce0c52ee84a2b340afdc59b177921e2f2a99132b82ed3291196038fe9a4f5a5dc734788c71bf46222d266a48628774c87b88bf3dcbea4574a87726345587e1e233fd4117063d183f477cc53c52a3fafcb998a96cf9f61cdd9ffa82d648880552ac506811accffc85ca34b262ed983d4645f4657522ed32b278891c26d5e70d41f9a5c8df8dc163fd84a81af0020a10fe53ce940d350d62b526f198620abdad179a273682175da1d9d82fde7eb9a45b566e78904238d00908b5876b4ebfca376d631b9b0caf3f1ef32ae87507aace4715efaf840ebda28e741a8b6b29eed5861168b4e1b3842f6db4443974dd0f0d4ceed9ca62fd2a839a8150335dc2b9640825b83c8bf4f931a51b093bf2dc84809af7c14f04b58d64e4f852bc49cf1126567e11f61774559bdbcc500000000000000000000000000eab10c8c592cb6f1ebccd9eb16c155a0666189eb16cea09f164363456645c9b7c168bc214615a7e94ff3d53f85c6396c42050f3205cef3009458f33949efa6a583d87795448b8b21ab6a7ca4bd8b0da30dee0af8b3a0f3cfd0ad9a8e7819b2057e2e5d8b453b6f743f8fc4dee677658958c4d4663ddcdfd0fc44e996665ab5586a4eb40a959fb0dababa05e776c29cf2443ad1d2fa0920288db88e645033ae1a4357078810d20bd93b8194214554c3f8c6efd61bc40000"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000018c0)={r5, 0x18000000000002a0, 0xf, 0x0, &(0x7f00000009c0)="87d945b078a9ed43588e0fec5eccc1", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 18.464734385s ago: executing program 3 (id=3498): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000840), r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) mount$tmpfs(0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='gid=', @ANYRESHEX=r1]) mount$overlay(0x0, 0x0, &(0x7f0000000080), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff}) ptrace$ARCH_GET_CPUID(0x1e, r2, 0x0, 0x1011) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) syz_init_net_socket$ax25(0x3, 0x3, 0x0) ftruncate(0xffffffffffffffff, 0x2007ffb) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x0, 0x1) mount(&(0x7f0000000100)=@nullb, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000000)='ntfs3\x00', 0x0, &(0x7f0000000340)) r4 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000040)={'veth1_vlan\x00', &(0x7f0000000080)=@ethtool_sfeatures={0x3b, 0x2, [{0xff, 0x2}, {0x2, 0x9}]}}) 18.311696555s ago: executing program 4 (id=3499): socket$kcm(0x29, 0x5, 0x0) creat(0x0, 0x0) gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)=0x0) timer_settime(0x0, 0x0, 0x0, 0x0) syz_open_dev$sndpcmp(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) creat(&(0x7f0000000240)='./bus\x00', 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) timer_gettime(r0, &(0x7f00000003c0)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x14, &(0x7f0000000400)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@call={0x85, 0x0, 0x0, 0x9e}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(r3, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0x3, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}, @IFLA_AF_SPEC={0x4}]}, 0x38}, 0x1, 0x2}, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}, "00186371ae9b1c03"}}}}}, 0x0) 17.148480902s ago: executing program 2 (id=3500): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x4, 0x8, 0x9, 0x4, 0xc80, 0xffffffffffffffff, 0x80000001, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x2}, 0xffffffffffffff7d) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000740), 0x75, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305839, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = dup(r3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ioctl$TCSETSW2(r3, 0x402c542c, &(0x7f00000000c0)={0x8, 0x7f, 0x0, 0x0, 0x3, "f06fc539471398450104663ea5b3e92dad434f"}) r5 = socket$inet_udp(0x2, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r6, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) sendmsg$nl_route(r4, &(0x7f0000000380)={&(0x7f00000001c0), 0xc, &(0x7f0000000340)={&(0x7f0000000280)=@ipv4_getnetconf={0x3c, 0x52, 0x10, 0x70bd29, 0x25dfdbfe, {}, [@NETCONFA_RP_FILTER={0x8, 0x3, 0x10001}, @NETCONFA_PROXY_NEIGH={0x8, 0x5, 0x4}, @IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0xfffffffd}, @NETCONFA_PROXY_NEIGH={0x8, 0x5, 0x3ab}, @IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0x7f}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000015}, 0x4004) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000440)='wlan0\x00', 0x10) sendto$inet(r5, 0x0, 0x0, 0x400c8c6, &(0x7f0000000180)={0x2, 0x4e21, @multicast2}, 0x10) sendto$inet(r5, &(0x7f0000000100)='J', 0xfdbe, 0x4004084, 0x0, 0x11000a00) write$UHID_INPUT(r4, &(0x7f0000001980)={0x765, {"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", 0x1000}}, 0x1006) creat(&(0x7f0000000300)='./bus\x00', 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) socket$inet6(0xa, 0x800, 0x7) 16.972811836s ago: executing program 3 (id=3501): openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0x18, 0x20000000, 0x0) mknod(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$inet(r0, 0x0, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$isdn(0x22, 0x3, 0x26) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) preadv(r1, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102394, 0x19045}], 0x1, 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000140)={&(0x7f00000006c0)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r2, 0xc02064b6, &(0x7f00000003c0)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r2, 0xc06864a2, &(0x7f0000000400)={0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "b4bc323ef77d1f000071849800000000deff00000000e6ffffff00"}}) 16.82361744s ago: executing program 4 (id=3502): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x4, 0x8, 0x9, 0x4, 0xc80, 0xffffffffffffffff, 0x80000001, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x2}, 0xffffffffffffff7d) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000740), 0x75, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305839, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = dup(r3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ioctl$TCSETSW2(r3, 0x402c542c, &(0x7f00000000c0)={0x8, 0x7f, 0x0, 0x0, 0x3, "f06fc539471398450104663ea5b3e92dad434f"}) r5 = socket$inet_udp(0x2, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r6, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000440)='wlan0\x00', 0x10) sendto$inet(r5, 0x0, 0x0, 0x400c8c6, &(0x7f0000000180)={0x2, 0x4e21, @multicast2}, 0x10) sendto$inet(r5, &(0x7f0000000100)='J', 0xfdbe, 0x4004084, 0x0, 0x11000a00) write$UHID_INPUT(r4, &(0x7f0000001980)={0x765, {"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", 0x1000}}, 0x1006) open(0x0, 0x0, 0x0) creat(&(0x7f0000000300)='./bus\x00', 0x0) open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) socket$inet6(0xa, 0x800, 0x7) 15.474094062s ago: executing program 3 (id=3503): socket$kcm(0x29, 0x5, 0x0) creat(0x0, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x0, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(0x0, 0x0, 0x0, 0x0) syz_open_dev$sndpcmp(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) creat(&(0x7f0000000240)='./bus\x00', 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) timer_gettime(r1, &(0x7f00000003c0)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x14, &(0x7f0000000400)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@call={0x85, 0x0, 0x0, 0x9e}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(r4, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000200)={'geneve0\x00'}) syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}, "00186371ae9b1c03"}}}}}, 0x0) 14.897273966s ago: executing program 1 (id=3504): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) quotactl_fd$Q_GETFMT(0xffffffffffffffff, 0xffffffff80000401, 0xee00, &(0x7f0000000480)) accept4(0xffffffffffffffff, &(0x7f0000000240)=@nfc_llcp, &(0x7f0000000440)=0x80, 0x800) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getdents64(0xffffffffffffffff, 0x0, 0x0) write$FUSE_NOTIFY_DELETE(r1, &(0x7f0000000080)={0x2a, 0x6, 0x0, {0x1, 0x200000000004, 0x1, 0x2, '\x00', 0x8}}, 0x2a) socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a40)=ANY=[@ANYBLOB="b80100001200f52600000000000000000000000000004e2300"/56, @ANYRES32=0x0, @ANYBLOB="0000000000000000a207000000000000c800010046"], 0x1b8}}, 0x0) syz_fuse_handle_req(r1, &(0x7f00000021c0)="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", 0x2000, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001040)={0xb0, 0x0, 0x0, [{{0x200000000004, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc000, 0x5}}, {0x0, 0x0, 0x1, 0x0, '\x00'}}]}, 0x0, 0x0}) r2 = syz_io_uring_setup(0x320e, &(0x7f0000000800)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000540)=0x0) syz_io_uring_setup(0x297a, &(0x7f0000000200), &(0x7f00000002c0)=0x0, &(0x7f0000000080)) syz_io_uring_submit(r4, r3, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r2, 0x3332, 0x0, 0x0, 0x0, 0x0) readv(r0, &(0x7f0000002740)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000340)={{0x80}, 'port0\x00', 0xf3, 0x140043}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) 14.223585645s ago: executing program 1 (id=3505): ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000003c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote}}}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000000000001"]) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000040)) 14.2092827s ago: executing program 3 (id=3506): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="31010000dccd5e08cb060700000800000001090224000100007e0009", @ANYRES32], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000940)=ANY=[@ANYRESOCT], 0x7c}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x7a05, 0x1700) socket$inet6(0xa, 0x3, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x39, &(0x7f0000000380)="0022040000ffffebfffffffeffffff0706000000ff000207835eeb1317b208feefaf234b4ff8b4cc4c39bdc8451792b903f4b7d8c8cf2153622652328c19ef68234f905557c4070000008735e9ab2f77c62e0a5cdd2cf9984c070400000000000003ff23353d8b2fc6a3ae1ebfcb49004a3ccd3560ae01010000079c60ed7449b842f3e253be8a62b37f820fe75a9ea937ea4efbfb9b4a128f2dbe2837496d00ad7765abaac2ec0f91c88a1ea1ff6ee308c72febedcf00798d41991ac25bb6fce2220c25ea380c7e112ab358c3a6bd8a59c100000001b4e82cb03419544a3988bc226a85abe6eb60cd7cf8d103d38c31c7c86d16c4d86cbe4ab390c092d077ce70590fbbd4f8bf4d6ab1cea6dbe9d4a54c17aac0db6e3845317c39fc0767f4a256a96089c5ef113818b625c7f4608f500886aaa24e99a3d09b7633a734988eed1d09e1a8a3503468f7765fd83c14b7dca55511447ae9db14c6bfa0558e964211a86e029527f01b0d2d7956826366704697fc", 0x172) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x2000001, 0x12, 0xffffffffffffffff, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001240)=@newqdisc={0x45c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_PTAB={0x404, 0x3, [0xffffff7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30]}, @TCA_TBF_PARMS={0x28, 0x1, {{}, {0x4, 0x0, 0x0, 0x0, 0x0, 0x40}}}]}}]}, 0x45c}}, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/fs/cgroup', 0x0, 0x0) fchdir(r5) openat$incfs(0xffffffffffffffff, &(0x7f0000000080)='.pending_reads\x00', 0x0, 0x20) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(0xffffffffffffffff, 0x401070cd, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000d40)={0x0, 0x8000000000000000, 0x6, 0x1}) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/diskstats\x00', 0x0, 0x0) r7 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) sendfile(r7, r6, 0x0, 0x7ffff002) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000001740)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r8, &(0x7f0000000200)={0x0, 0x2c, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="09060000000000004f0000200800030021e0595cf178d25cc3accf16232997ee004a03b0ea4f77f7b05edc228ad1007cb2dd01e1f937cfe41926bf40db0918ff196805005841934e474aae91631e331ac781181e95a497ded9522b15852e9479ff36", @ANYRES32=r11, @ANYBLOB="38007a8014000200d069a8090000007d6c76af05004f4dff0c000300046b97a2d52c9bb714000100a9eb8b0ff5b8efd49381ec86ca7491a9887109ad494505a683f8f4e3e977ecd6"], 0x54}}, 0x0) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x74, 0x0, 0x2, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_FRAME={0xe, 0x33, @ctrl_frame=@ack={{}, {0x100}, @device_b}}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_FRAME={0x34, 0x33, @mgmt_frame=@disassoc={{{0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1}, {0x2e3}, @broadcast, @device_a, @initial, {0x6, 0x9}, @value=@ver_80211n={0x0, 0x7fff, 0x2, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1}}, 0x1, @val={0x8c, 0x10, {0x8da, "0d0c8991d3c7", @short="c8b02b2c8907cd85"}}}}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}]}, 0x74}, 0x1, 0x0, 0x0, 0x4000004}, 0x20000000) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) lsetxattr$trusted_overlay_nlink(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000100), 0x0, 0xfffffffffffffec1, 0x0) openat$mice(0xffffffffffffff9c, &(0x7f00000001c0), 0x4841) 11.032429397s ago: executing program 1 (id=3507): creat(&(0x7f0000000240)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x0, 0x3}, 0x10) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) sendmsg$tipc(r3, &(0x7f0000000140)={0x0, 0x20d302, 0x0}, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r3, 0x10f, 0x81, &(0x7f0000000000), 0x4) r4 = dup3(r2, r3, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r4, 0x0, 0x0) setsockopt$TIPC_GROUP_LEAVE(r3, 0x10f, 0x88) r5 = epoll_create(0x208000) r6 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r6, &(0x7f00000000c0)) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000340), 0xc901, 0x0) write$P9_RVERSION(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r7 = dup(r1) write$FUSE_BMAP(r7, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r7, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r7}, 0x2c, {[{@cache_mmap}], [], 0x6b}}) chmod(&(0x7f0000000140)='./file0\x00', 0x0) r8 = open$dir(&(0x7f0000000140)='./file0\x00', 0x1, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) ftruncate(r9, 0x2000009) sendfile(r8, r9, 0x0, 0x7ffff000) chown(0x0, 0x0, 0x0) 0s ago: executing program 3 (id=3509): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f00000004c0)=ANY=[@ANYBLOB="00000100000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r1, 0x5b02, 0x0) kernel console output (not intermixed with test programs): -1: config 0 descriptor?? [ 1866.647993][ T5093] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 1866.853527][ T5093] usb 4-1: Using ep0 maxpacket: 8 [ 1866.866284][ T5093] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 1866.877660][ T5093] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1866.892189][ T5093] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1866.906960][ T5093] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1866.918649][ T5093] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1866.926369][T20038] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1866.937465][ T5093] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1866.949224][ T5093] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1866.959302][T20038] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1867.006932][T13113] hid (null): unknown global tag 0xc [ 1867.040989][T13113] hid-generic 0003:0158:0100.0007: unknown main item tag 0x1 [ 1867.068386][T13113] hid-generic 0003:0158:0100.0007: unexpected long global item [ 1867.082175][T13113] hid-generic 0003:0158:0100.0007: probe with driver hid-generic failed with error -22 [ 1867.213176][ T5093] usb 4-1: usb_control_msg returned -32 [ 1867.213785][T13113] usb 1-1: USB disconnect, device number 20 [ 1867.218841][ T5093] usbtmc 4-1:16.0: can't read capabilities [ 1867.587841][T20044] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2908'. [ 1867.605076][T20046] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2908'. [ 1867.629616][T20052] usbtmc 4-1:16.0: INITIATE_CLEAR returned 0 [ 1867.636171][ T4478] Bluetooth: hci2: command tx timeout [ 1867.790137][T19838] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1867.805507][T19838] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1867.883941][T19838] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1867.895172][T13113] usb 4-1: USB disconnect, device number 19 [ 1867.983881][T19838] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1868.002702][T19838] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1868.072074][T19838] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1869.429787][T19838] hsr_slave_0: entered promiscuous mode [ 1869.497937][T19838] hsr_slave_1: entered promiscuous mode [ 1869.513010][T19838] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1869.520645][T19838] Cannot create hsr debugfs directory [ 1869.715290][ T4478] Bluetooth: hci2: command tx timeout [ 1869.802837][T16931] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 1869.972873][T16931] usb 4-1: device descriptor read/64, error -71 [ 1870.283779][T16931] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 1870.442873][T16931] usb 4-1: device descriptor read/64, error -71 [ 1870.520452][T19985] chnl_net:caif_netlink_parms(): no params data found [ 1870.594271][T16931] usb usb4-port1: attempt power cycle [ 1870.964869][ T81] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1871.039943][T16931] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 1871.084416][T20102] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2919'. [ 1871.119738][T16931] usb 4-1: device descriptor read/8, error -71 [ 1871.161546][T20102] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2919'. [ 1871.297775][ T4478] Bluetooth: hci1: unexpected event 0x06 length: 17 > 3 [ 1871.335858][ T81] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1871.425261][T16931] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 1871.455272][ T29] audit: type=1400 audit(1720348140.477:753): avc: denied { create } for pid=20107 comm="syz.0.2921" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 1871.476835][T16931] usb 4-1: device descriptor read/8, error -71 [ 1871.632255][T16931] usb usb4-port1: unable to enumerate USB device [ 1871.675470][ T81] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1871.732720][T20115] netlink: 'syz.4.2922': attribute type 9 has an invalid length. [ 1871.749904][T20115] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.2922'. [ 1872.131469][ T81] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1872.315837][T19985] bridge0: port 1(bridge_slave_0) entered blocking state [ 1872.323662][T19985] bridge0: port 1(bridge_slave_0) entered disabled state [ 1872.334407][T19985] bridge_slave_0: entered allmulticast mode [ 1872.348668][T19985] bridge_slave_0: entered promiscuous mode [ 1872.392395][T19985] bridge0: port 2(bridge_slave_1) entered blocking state [ 1872.407335][T19985] bridge0: port 2(bridge_slave_1) entered disabled state [ 1872.414985][T19985] bridge_slave_1: entered allmulticast mode [ 1872.425849][T19985] bridge_slave_1: entered promiscuous mode [ 1872.633734][T19985] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1872.699330][T19985] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1873.021109][T19838] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1873.276001][T19985] team0: Port device team_slave_0 added [ 1873.554021][T19838] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1873.734066][T19838] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1873.815600][T19838] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1874.197347][T19985] team0: Port device team_slave_1 added [ 1874.596540][T19985] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1874.611395][T19985] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1874.660568][T19985] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1874.691137][T19985] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1874.705713][T19985] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1874.773412][T19985] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1874.871742][ T81] gretap0: left allmulticast mode [ 1874.886925][ T81] gretap0: left promiscuous mode [ 1874.905231][ T81] bridge0: port 3(gretap0) entered disabled state [ 1874.941979][ T81] bridge_slave_1: left allmulticast mode [ 1874.978875][ T81] bridge_slave_1: left promiscuous mode [ 1875.006255][ T81] bridge0: port 2(bridge_slave_1) entered disabled state [ 1875.037721][ T81] bridge_slave_0: left allmulticast mode [ 1875.050749][ T81] bridge_slave_0: left promiscuous mode [ 1875.057145][ T81] bridge0: port 1(bridge_slave_0) entered disabled state [ 1875.793500][T13106] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 1875.984137][T13106] usb 5-1: Using ep0 maxpacket: 8 [ 1875.996169][T13106] usb 5-1: config 0 has an invalid interface number: 52 but max is 0 [ 1876.005741][T13106] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1876.021907][T13106] usb 5-1: config 0 has no interface number 0 [ 1876.028174][T13106] usb 5-1: config 0 interface 52 has no altsetting 0 [ 1876.037374][T13106] usb 5-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 8.00 [ 1876.047017][T13106] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1876.063880][T13106] usb 5-1: config 0 descriptor?? [ 1876.327298][ T81] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1876.357002][ T81] bond0 (unregistering): Released all slaves [ 1876.515071][ T5139] usb 5-1: USB disconnect, device number 23 [ 1876.675306][T19985] hsr_slave_0: entered promiscuous mode [ 1876.689893][T19985] hsr_slave_1: entered promiscuous mode [ 1876.697233][T19985] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1876.712611][T19985] Cannot create hsr debugfs directory [ 1877.047545][T19838] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1877.202066][T19838] 8021q: adding VLAN 0 to HW filter on device team0 [ 1877.227775][ T81] hsr_slave_0: left promiscuous mode [ 1877.242161][ T81] hsr_slave_1: left promiscuous mode [ 1877.264119][ T81] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1877.279910][ T81] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1877.304834][ T81] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1877.319461][ T81] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1877.375969][ T81] veth1_macvtap: left promiscuous mode [ 1877.381863][ T81] veth0_macvtap: left promiscuous mode [ 1877.387936][ T81] veth1_vlan: left promiscuous mode [ 1877.395667][ T81] veth0_vlan: left promiscuous mode [ 1879.595500][T13106] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 1879.813093][T13106] usb 4-1: Using ep0 maxpacket: 32 [ 1879.821089][T13106] usb 4-1: config 0 has no interfaces? [ 1879.826986][T13106] usb 4-1: New USB device found, idVendor=0458, idProduct=7006, bcdDevice=69.91 [ 1879.878992][T13106] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1879.898374][T13106] usb 4-1: config 0 descriptor?? [ 1880.109956][ T81] team0 (unregistering): Port device team_slave_1 removed [ 1880.446975][ T81] team0 (unregistering): Port device team_slave_0 removed [ 1881.475078][T20192] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2942'. [ 1883.205110][ T5158] usb 4-1: USB disconnect, device number 24 [ 1883.301293][T20200] 9pnet_virtio: no channels available for device syz [ 1885.477368][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 1885.484736][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1885.965335][T16090] bridge0: port 2(bridge_slave_1) entered blocking state [ 1885.972586][T16090] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1886.242476][T20233] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2956'. [ 1886.326247][T20237] ALSA: seq fatal error: cannot create timer (-22) [ 1886.878150][T20244] netlink: 'syz.0.2957': attribute type 5 has an invalid length. [ 1886.969132][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:2. Sending cookies. [ 1888.917878][T19985] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1888.959882][T19985] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1889.062358][T20277] trusted_key: encrypted_key: insufficient parameters specified [ 1889.267279][ T9] hid-generic 0000:0000:0000.0008: item fetching failed at offset 0/1 [ 1889.466859][T19985] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1889.600099][ T9] hid-generic 0000:0000:0000.0008: probe with driver hid-generic failed with error -22 [ 1889.962855][T19985] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1890.265299][T19838] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1891.191157][T19838] veth0_vlan: entered promiscuous mode [ 1891.344740][T20293] siw: device registration error -23 [ 1891.491794][T19838] veth1_vlan: entered promiscuous mode [ 1891.575356][T19985] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1891.791355][T19985] 8021q: adding VLAN 0 to HW filter on device team0 [ 1891.926637][T13106] bridge0: port 1(bridge_slave_0) entered blocking state [ 1891.933917][T13106] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1892.040396][T19931] bridge0: port 2(bridge_slave_1) entered blocking state [ 1892.047723][T19931] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1892.134333][T19838] veth0_macvtap: entered promiscuous mode [ 1892.219953][T19838] veth1_macvtap: entered promiscuous mode [ 1892.252945][ T5158] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 1892.465646][ T5158] usb 4-1: config 36 interface 0 altsetting 0 endpoint 0xFF has an invalid bInterval 0, changing to 7 [ 1892.485462][ T5158] usb 4-1: config 36 interface 0 altsetting 0 endpoint 0xFF has invalid wMaxPacketSize 0 [ 1893.515959][ T5158] usb 4-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29 [ 1893.539019][ T5158] usb 4-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 1893.544208][T19838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1893.572738][ T5158] usb 4-1: Manufacturer: syz [ 1893.586075][T19838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1893.603116][ T5158] usb 4-1: SerialNumber: syz [ 1893.607918][T19838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1893.643865][T19838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1893.677579][T19838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1893.698979][T19838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1893.745331][T19838] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1893.957492][T19838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1894.010415][T19838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1894.063789][T19838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1894.119296][T19838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1894.171863][T19838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1894.209785][T19838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1894.252091][T19838] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1894.300931][ T5158] yealink 4-1:36.0: invalid payload size 0, expected 16 [ 1894.330068][ T5158] input: Yealink usb-p1k as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:36.0/input/input43 [ 1894.365603][T19838] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1894.383442][ C0] yealink 4-1:36.0: urb_ctl_callback - urb status -71 [ 1894.385805][T19838] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1894.390492][ C0] yealink 4-1:36.0: urb_ctl_callback - urb status -71 [ 1894.400346][T19838] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1894.405928][ C0] yealink 4-1:36.0: urb_ctl_callback - urb status -71 [ 1894.421758][ C0] yealink 4-1:36.0: urb_ctl_callback - urb status -71 [ 1894.422142][T19838] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1894.429009][ C0] yealink 4-1:36.0: urb_ctl_callback - urb status -71 [ 1894.429293][ C0] yealink 4-1:36.0: urb_ctl_callback - urb status -71 [ 1894.429575][ C0] yealink 4-1:36.0: urb_ctl_callback - urb status -71 [ 1894.459038][ C0] yealink 4-1:36.0: urb_ctl_callback - urb status -71 [ 1894.465893][ C0] yealink 4-1:36.0: urb_ctl_callback - usb_submit_urb failed -90 [ 1894.512904][ T5158] usb 4-1: USB disconnect, device number 25 [ 1896.585443][T19985] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1896.942009][T19985] veth0_vlan: entered promiscuous mode [ 1897.936257][T19985] veth1_vlan: entered promiscuous mode [ 1897.981376][T17191] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1898.007639][T17191] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1898.020154][T17191] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1898.030685][T17191] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1898.041675][T17191] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1898.049498][T17191] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1898.698624][ T81] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1898.914880][T19985] veth0_macvtap: entered promiscuous mode [ 1898.973146][T20371] netlink: 'syz.4.2979': attribute type 5 has an invalid length. [ 1899.331320][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:2. Sending cookies. [ 1899.515224][ T81] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1899.748557][T19985] veth1_macvtap: entered promiscuous mode [ 1900.114970][T17191] Bluetooth: hci0: command tx timeout [ 1900.209558][ T81] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1900.506290][ T81] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1900.733484][T19985] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1900.773087][T19985] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1900.809568][T19985] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1900.831953][T19985] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1900.868204][T19985] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1900.914163][T19985] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1900.924622][T13113] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 1900.933240][T19985] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1900.945838][T19985] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1901.273493][T19985] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1901.356657][T13113] usb 4-1: config 36 interface 0 altsetting 0 endpoint 0xFF has an invalid bInterval 0, changing to 7 [ 1901.462388][T13113] usb 4-1: config 36 interface 0 altsetting 0 endpoint 0xFF has invalid wMaxPacketSize 0 [ 1901.498663][T19985] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1901.521308][T13113] usb 4-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29 [ 1901.537455][T19985] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1901.550609][T13113] usb 4-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 1901.567930][T19985] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1901.590263][T13113] usb 4-1: Manufacturer: syz [ 1901.596960][T13113] usb 4-1: SerialNumber: syz [ 1901.603598][T19985] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1901.628084][T19985] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1901.649925][T19985] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1901.671440][T19985] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1901.685040][T19985] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1901.712302][T19985] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1901.918341][T19985] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1901.995522][T19985] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1902.040284][T19985] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1902.061734][T19985] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1902.097175][T13113] yealink 4-1:36.0: invalid payload size 0, expected 16 [ 1902.120953][T13113] input: Yealink usb-p1k as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:36.0/input/input44 [ 1902.164727][ C0] yealink 4-1:36.0: urb_ctl_callback - urb status -71 [ 1902.171942][ C0] yealink 4-1:36.0: urb_ctl_callback - urb status -71 [ 1902.179004][ C0] yealink 4-1:36.0: urb_ctl_callback - urb status -71 [ 1902.186136][ C0] yealink 4-1:36.0: urb_ctl_callback - urb status -71 [ 1902.193303][ C0] yealink 4-1:36.0: urb_ctl_callback - urb status -71 [ 1902.193556][T17191] Bluetooth: hci0: command tx timeout [ 1902.200402][ C0] yealink 4-1:36.0: urb_ctl_callback - urb status -71 [ 1902.213139][ C0] yealink 4-1:36.0: urb_ctl_callback - urb status -71 [ 1902.220354][ C0] yealink 4-1:36.0: urb_ctl_callback - urb status -71 [ 1902.227190][ C0] yealink 4-1:36.0: urb_ctl_callback - usb_submit_urb failed -90 [ 1902.330837][T13113] usb 4-1: USB disconnect, device number 26 [ 1903.539164][ T81] bridge_slave_1: left allmulticast mode [ 1903.557201][ T81] bridge_slave_1: left promiscuous mode [ 1903.590614][ T81] bridge0: port 2(bridge_slave_1) entered disabled state [ 1903.665971][ T81] bridge_slave_0: left allmulticast mode [ 1903.687882][ T81] bridge_slave_0: left promiscuous mode [ 1903.705978][ T81] bridge0: port 1(bridge_slave_0) entered disabled state [ 1903.782127][T20426] siw: device registration error -23 [ 1904.273689][T17191] Bluetooth: hci0: command tx timeout [ 1904.671918][T17191] Bluetooth: hci5: unexpected event 0x09 length: 10 > 3 [ 1904.678169][T17191] Bluetooth: hci5: ISO packet for unknown connection handle 0 [ 1905.148655][ T81] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1905.162156][ T81] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1905.164675][T13106] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 1905.188677][ T81] bond0 (unregistering): Released all slaves [ 1905.310312][ T1055] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1905.327575][ T1055] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1905.328854][ T5139] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 1905.402974][T13106] usb 1-1: Using ep0 maxpacket: 16 [ 1905.416940][T13106] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1905.440364][T13106] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1905.453870][T13106] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.40 [ 1905.470323][T13106] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1905.502098][T13106] usb 1-1: config 0 descriptor?? [ 1905.555986][ T5139] usb 5-1: Using ep0 maxpacket: 8 [ 1905.567099][ T5139] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 1905.579291][T20358] chnl_net:caif_netlink_parms(): no params data found [ 1905.591166][ T51] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1905.616501][ T5139] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1905.627640][ T51] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1905.638759][ T5139] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1905.651688][ T5139] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1905.663609][ T5139] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1905.691761][ T5139] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1905.740654][ T5139] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1905.950920][ T81] hsr_slave_0: left promiscuous mode [ 1905.968578][ T81] hsr_slave_1: left promiscuous mode [ 1905.983402][ T81] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1906.003140][ T81] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1906.037927][ T81] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1906.054857][ T5139] usb 5-1: usb_control_msg returned -32 [ 1906.056345][ T81] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1906.060559][ T5139] usbtmc 5-1:16.0: can't read capabilities [ 1906.095650][T13106] cp2112 0003:10C4:EA90.0009: unbalanced delimiter at end of report description [ 1906.130629][T13106] cp2112 0003:10C4:EA90.0009: parse failed [ 1906.149572][T13106] cp2112 0003:10C4:EA90.0009: probe with driver cp2112 failed with error -22 [ 1906.281403][ T81] veth1_macvtap: left promiscuous mode [ 1906.293053][ T81] veth0_macvtap: left promiscuous mode [ 1906.312098][ T81] veth1_vlan: left promiscuous mode [ 1906.312302][ T81] veth0_vlan: left promiscuous mode [ 1906.333070][T13106] usb 1-1: USB disconnect, device number 21 [ 1906.363646][T17191] Bluetooth: hci0: command tx timeout [ 1906.686504][T17191] Bluetooth: hci4: unexpected event 0x2f length: 763 > 260 [ 1907.313038][ T5158] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 1907.492808][ T5158] usb 4-1: Using ep0 maxpacket: 32 [ 1907.495844][ T5158] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1907.495937][ T5158] usb 4-1: New USB device found, idVendor=d5ff, idProduct=0066, bcdDevice=d8.b0 [ 1907.495982][ T5158] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1907.519742][ T5158] usb 4-1: config 0 descriptor?? [ 1907.527535][ T5158] usb 4-1: bad CDC descriptors [ 1908.105200][ T9] usb 5-1: USB disconnect, device number 24 [ 1908.802857][ T9] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 1908.997597][ T9] usb 5-1: config 36 interface 0 altsetting 0 endpoint 0xFF has an invalid bInterval 0, changing to 7 [ 1908.997659][ T9] usb 5-1: config 36 interface 0 altsetting 0 endpoint 0xFF has invalid wMaxPacketSize 0 [ 1909.031841][ T9] usb 5-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29 [ 1909.031894][ T9] usb 5-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 1909.031934][ T9] usb 5-1: Manufacturer: syz [ 1909.031964][ T9] usb 5-1: SerialNumber: syz [ 1909.110776][T13113] usb 4-1: USB disconnect, device number 27 [ 1909.927747][ T81] team0 (unregistering): Port device team_slave_1 removed [ 1911.374340][ T81] team0 (unregistering): Port device team_slave_0 removed [ 1912.024844][T20487] netlink: 316 bytes leftover after parsing attributes in process `syz.3.3000'. [ 1912.172853][T17191] Bluetooth: hci1: unexpected event 0x09 length: 10 > 3 [ 1912.190360][T17191] Bluetooth: hci1: ISO packet for unknown connection handle 0 [ 1912.831138][T17191] Bluetooth: hci1: unexpected event 0x2f length: 763 > 260 [ 1913.352478][T20474] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2997'. [ 1913.522368][ T9] yealink 5-1:36.0: invalid payload size 0, expected 16 [ 1913.572586][ T9] input: Yealink usb-p1k as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:36.0/input/input45 [ 1913.671402][ C0] yealink 5-1:36.0: urb_ctl_callback - urb status -71 [ 1913.678579][ C0] yealink 5-1:36.0: urb_ctl_callback - urb status -71 [ 1913.685676][ C0] yealink 5-1:36.0: urb_ctl_callback - urb status -71 [ 1913.692783][ C0] yealink 5-1:36.0: urb_ctl_callback - urb status -71 [ 1913.699955][ C0] yealink 5-1:36.0: urb_ctl_callback - urb status -71 [ 1913.707046][ C0] yealink 5-1:36.0: urb_ctl_callback - urb status -71 [ 1913.714137][ C0] yealink 5-1:36.0: urb_ctl_callback - urb status -71 [ 1913.721202][ C0] yealink 5-1:36.0: urb_ctl_callback - urb status -71 [ 1913.728085][ C0] yealink 5-1:36.0: urb_ctl_callback - usb_submit_urb failed -90 [ 1913.762271][ T9] usb 5-1: USB disconnect, device number 25 [ 1913.857559][T20358] bridge0: port 1(bridge_slave_0) entered blocking state [ 1913.914972][T20358] bridge0: port 1(bridge_slave_0) entered disabled state [ 1913.954722][T20358] bridge_slave_0: entered allmulticast mode [ 1913.980471][T20358] bridge_slave_0: entered promiscuous mode [ 1913.991494][T20306] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 1914.039349][T20358] bridge0: port 2(bridge_slave_1) entered blocking state [ 1914.068267][T20358] bridge0: port 2(bridge_slave_1) entered disabled state [ 1914.107151][T20358] bridge_slave_1: entered allmulticast mode [ 1914.149067][T20358] bridge_slave_1: entered promiscuous mode [ 1914.217085][T20497] sysfs: cannot create duplicate filename '/class/ieee80211/C|+È‚!‡3§rU&6 bÎOo¸ ' 1©|y' [ 1914.230034][T20497] CPU: 1 PID: 20497 Comm: syz.0.3003 Not tainted 6.10.0-rc6-syzkaller-00215-g22f902dfc51e #0 [ 1914.240269][T20497] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 1914.250459][T20497] Call Trace: [ 1914.253772][T20497] [ 1914.256719][T20497] dump_stack_lvl+0x16c/0x1f0 [ 1914.261424][T20497] sysfs_warn_dup+0x7f/0xa0 [ 1914.266056][T20497] sysfs_do_create_link_sd+0x124/0x140 [ 1914.271575][T20497] sysfs_create_link+0x61/0xc0 [ 1914.276482][T20497] device_add+0x62e/0x1a70 [ 1914.281050][T20497] ? __pfx_device_add+0x10/0x10 [ 1914.285987][T20497] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1914.291924][T20497] ? ieee80211_set_bitrate_flags+0x249/0x6a0 [ 1914.298021][T20497] wiphy_register+0x2101/0x2d00 [ 1914.303204][T20497] ? __pfx_wiphy_register+0x10/0x10 [ 1914.308490][T20497] ieee80211_register_hw+0x2683/0x43b0 [ 1914.314150][T20497] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 1914.320027][T20497] ? lockdep_init_map_type+0x16d/0x7d0 [ 1914.325568][T20497] ? __asan_memset+0x23/0x50 [ 1914.330204][T20497] ? __hrtimer_init+0x106/0x2c0 [ 1914.336855][T20497] mac80211_hwsim_new_radio+0x22f6/0x4e50 [ 1914.342776][T20497] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 1914.349345][T20497] ? hwsim_new_radio_nl+0x9b6/0x1240 [ 1914.354673][T20497] ? __asan_memcpy+0x3c/0x60 [ 1914.359302][T20497] hwsim_new_radio_nl+0xaf9/0x1240 [ 1914.364456][T20497] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1914.370038][T20497] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 1914.377465][T20497] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 1914.384936][T20497] genl_family_rcv_msg_doit+0x202/0x2f0 [ 1914.390525][T20497] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1914.396630][T20497] ? ns_capable+0xd7/0x110 [ 1914.401069][T20497] genl_rcv_msg+0x565/0x800 [ 1914.405621][T20497] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1914.410683][T20497] ? __pfx___lock_acquire+0x10/0x10 [ 1914.415937][T20497] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1914.421571][T20497] netlink_rcv_skb+0x16b/0x440 [ 1914.426370][T20497] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1914.431445][T20497] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1914.436775][T20497] ? down_read+0xc9/0x330 [ 1914.441143][T20497] ? __pfx_down_read+0x10/0x10 [ 1914.445950][T20497] ? netlink_deliver_tap+0x1ae/0xd90 [ 1914.451267][T20497] genl_rcv+0x28/0x40 [ 1914.455286][T20497] netlink_unicast+0x542/0x820 [ 1914.460104][T20497] ? __pfx_netlink_unicast+0x10/0x10 [ 1914.465430][T20497] netlink_sendmsg+0x8b8/0xd70 [ 1914.470230][T20497] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1914.475546][T20497] ? __import_iovec+0x1fd/0x6e0 [ 1914.480427][T20497] ____sys_sendmsg+0xab5/0xc90 [ 1914.485213][T20497] ? copy_msghdr_from_user+0x10b/0x160 [ 1914.490703][T20497] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1914.496008][T20497] ? __pfx___futex_wait+0x10/0x10 [ 1914.501051][T20497] ? __pfx___lock_acquire+0x10/0x10 [ 1914.506289][T20497] ? try_to_wake_up+0xc08/0x13e0 [ 1914.511265][T20497] ___sys_sendmsg+0x135/0x1e0 [ 1914.515989][T20497] ? __pfx____sys_sendmsg+0x10/0x10 [ 1914.521278][T20497] ? __fget_light+0x173/0x210 [ 1914.526026][T20497] __sys_sendmsg+0x117/0x1f0 [ 1914.530657][T20497] ? __pfx___sys_sendmsg+0x10/0x10 [ 1914.535798][T20497] ? __x64_sys_futex+0x1e1/0x4c0 [ 1914.540785][T20497] do_syscall_64+0xcd/0x250 [ 1914.545329][T20497] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1914.551272][T20497] RIP: 0033:0x7f0ebb975bd9 [ 1914.555716][T20497] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1914.575448][T20497] RSP: 002b:00007f0ebc713048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1914.583896][T20497] RAX: ffffffffffffffda RBX: 00007f0ebbb04038 RCX: 00007f0ebb975bd9 [ 1914.591980][T20497] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000007 [ 1914.599980][T20497] RBP: 00007f0ebb9e4aa1 R08: 0000000000000000 R09: 0000000000000000 [ 1914.607988][T20497] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1914.615984][T20497] R13: 000000000000006e R14: 00007f0ebbb04038 R15: 00007ffe0c1a5ce8 [ 1914.624187][T20497] [ 1914.680713][T20306] usb 3-1: Using ep0 maxpacket: 8 [ 1914.696992][T20306] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 1914.705540][T20306] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1914.727971][T20306] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1914.738159][T20306] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1914.748632][T20306] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1914.764306][T20306] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1914.844603][T20306] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1915.138849][T20306] usb 3-1: usb_control_msg returned -32 [ 1915.144788][T20306] usbtmc 3-1:16.0: can't read capabilities [ 1915.240047][T20358] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1915.295314][T20358] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1915.888014][T20358] team0: Port device team_slave_0 added [ 1915.967635][T20358] team0: Port device team_slave_1 added [ 1916.091196][T17191] Bluetooth: hci4: unexpected event 0x2f length: 763 > 260 [ 1916.252503][T20526] No control pipe specified [ 1916.384523][T20358] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1916.391926][T20358] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1916.576254][T20358] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1916.593950][T20358] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1916.601336][T20358] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1916.627775][T20358] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1916.822886][T16090] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 1917.703361][T16090] usb 4-1: Using ep0 maxpacket: 32 [ 1917.759709][ T5139] usb 3-1: USB disconnect, device number 21 [ 1917.998134][T16090] usb 4-1: device descriptor read/all, error -71 [ 1918.171344][T20358] hsr_slave_0: entered promiscuous mode [ 1918.263511][T20358] hsr_slave_1: entered promiscuous mode [ 1918.312868][T20358] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1918.341466][T20358] Cannot create hsr debugfs directory [ 1920.280314][ T1252] ieee802154 phy0 wpan0: encryption failed: -22 [ 1920.287378][ T1252] ieee802154 phy1 wpan1: encryption failed: -22 [ 1920.353467][T17191] Bluetooth: hci5: unexpected event 0x09 length: 10 > 3 [ 1920.358228][T17191] Bluetooth: hci5: ISO packet for unknown connection handle 0 [ 1920.924073][T20557] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3013'. [ 1921.357515][T20569] No control pipe specified [ 1921.453116][ T5158] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 1921.487449][T20358] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1921.558670][T20571] netlink: 828 bytes leftover after parsing attributes in process `syz.0.3015'. [ 1921.623553][T20358] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1921.691958][T20358] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1921.721789][T20358] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1921.734211][ T5158] usb 3-1: config 36 interface 0 altsetting 0 endpoint 0xFF has an invalid bInterval 0, changing to 7 [ 1922.756430][ T5158] usb 3-1: config 36 interface 0 altsetting 0 endpoint 0xFF has invalid wMaxPacketSize 0 [ 1922.951357][ T5158] usb 3-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29 [ 1922.970969][ T5158] usb 3-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 1922.993241][ T5158] usb 3-1: Manufacturer: syz [ 1922.997930][ T5158] usb 3-1: SerialNumber: syz [ 1923.008505][ T9] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 1923.204560][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 1923.348590][T20358] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1923.504448][ T9] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 1923.668215][ T9] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1923.893165][ T9] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1923.918000][T20358] 8021q: adding VLAN 0 to HW filter on device team0 [ 1923.925265][ T9] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1923.989710][ T9] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1924.082061][T19931] bridge0: port 1(bridge_slave_0) entered blocking state [ 1924.089644][T19931] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1924.101692][ T9] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1924.115343][ T5158] yealink 3-1:36.0: invalid payload size 0, expected 16 [ 1924.128166][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1924.153218][ T5158] input: Yealink usb-p1k as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:36.0/input/input46 [ 1924.166728][T19931] bridge0: port 2(bridge_slave_1) entered blocking state [ 1924.174082][T19931] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1924.204547][ C0] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 1924.211705][ C0] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 1924.218813][ C0] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 1924.226020][ C0] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 1924.233237][ C0] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 1924.240677][ C0] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 1924.247862][ C0] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 1924.255049][ C0] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 1924.261900][ C0] yealink 3-1:36.0: urb_ctl_callback - usb_submit_urb failed -90 [ 1924.362308][ T5158] usb 3-1: USB disconnect, device number 22 [ 1924.453881][ T9] usb 4-1: usb_control_msg returned -32 [ 1926.392921][ T9] usbtmc 4-1:16.0: can't read capabilities [ 1927.434332][T20358] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1927.497580][ T29] audit: type=1326 audit(1720348196.177:754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20594 comm="syz.4.3021" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe4f3775bd9 code=0x0 [ 1927.726398][ T9] usb 4-1: USB disconnect, device number 30 [ 1928.334280][T20606] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3024'. [ 1929.548921][T20358] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1929.960774][T20358] veth0_vlan: entered promiscuous mode [ 1930.006704][T20358] veth1_vlan: entered promiscuous mode [ 1930.154110][T20358] veth0_macvtap: entered promiscuous mode [ 1930.221673][T20358] veth1_macvtap: entered promiscuous mode [ 1930.454782][T20358] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1930.501574][T20358] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1930.602761][T20358] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1930.629867][T20358] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1930.653040][T20358] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1930.679620][T20358] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1930.717555][T20358] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1930.763375][T20358] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1930.818526][T20358] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1930.906044][T20358] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1930.949900][T20358] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1930.987433][T20358] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1931.040783][T20358] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1931.073061][T20358] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1931.109161][T20358] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1931.112150][T17191] Bluetooth: hci2: unexpected event 0x09 length: 10 > 3 [ 1931.182271][T20358] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1931.212431][T17191] Bluetooth: hci2: ISO packet for unknown connection handle 0 [ 1931.275553][T20358] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1931.365796][T20358] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1931.420196][T20358] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1931.469823][T20358] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1931.494092][T20358] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1931.531327][T20358] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1931.933870][T20635] netlink: 'syz.4.3029': attribute type 72 has an invalid length. [ 1931.956814][ T7808] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1932.000513][T20635] netlink: 'syz.4.3029': attribute type 8 has an invalid length. [ 1932.005965][ T7808] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1932.366700][ T81] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1932.634026][ T81] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1934.445939][T20655] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3035'. [ 1934.655254][T19931] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 1935.022752][T19931] usb 4-1: Using ep0 maxpacket: 8 [ 1935.288356][T19931] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 1935.299149][T19931] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1935.323321][T19931] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1935.340533][T19931] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1935.388213][T19931] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1935.411222][T19931] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1935.421148][T19931] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1935.664823][T19931] usb 4-1: usb_control_msg returned -32 [ 1935.683107][T19931] usbtmc 4-1:16.0: can't read capabilities [ 1937.266744][T17191] Bluetooth: hci5: unexpected event 0x2f length: 763 > 260 [ 1937.344014][T20675] netlink: 'syz.0.3040': attribute type 72 has an invalid length. [ 1937.395268][T20675] netlink: 'syz.0.3040': attribute type 8 has an invalid length. [ 1937.735339][T20682] 9pnet_virtio: no channels available for device syz [ 1937.765308][T19931] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 1937.974816][T19931] usb 5-1: Using ep0 maxpacket: 32 [ 1937.994081][T19931] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1938.012553][T19931] usb 5-1: New USB device found, idVendor=d5ff, idProduct=0066, bcdDevice=d8.b0 [ 1938.025611][T19931] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1938.045186][T16090] usb 4-1: USB disconnect, device number 31 [ 1938.184447][T19931] usb 5-1: config 0 descriptor?? [ 1938.284039][T19931] usb 5-1: bad CDC descriptors [ 1939.057325][ T5158] usb 5-1: USB disconnect, device number 26 [ 1939.242782][T13113] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 1939.427736][T20703] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3046'. [ 1939.482749][T13113] usb 4-1: Using ep0 maxpacket: 8 [ 1939.516392][T13113] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 1939.542999][T13113] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1939.591831][T13113] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1939.620546][T13113] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1939.652898][T13113] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1939.691592][T13113] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1940.006140][T13113] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1940.436503][T20713] siw: device registration error -23 [ 1940.532963][T13113] usb 4-1: usb_control_msg returned -32 [ 1940.538756][T13113] usbtmc 4-1:16.0: can't read capabilities [ 1940.880720][T20719] usbtmc 4-1:16.0: usb_control_msg returned -32 [ 1940.895892][T20306] usb 4-1: USB disconnect, device number 32 [ 1940.912892][T13113] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 1941.125490][T13113] usb 5-1: config 36 interface 0 altsetting 0 endpoint 0xFF has an invalid bInterval 0, changing to 7 [ 1941.281239][T13113] usb 5-1: config 36 interface 0 altsetting 0 endpoint 0xFF has invalid wMaxPacketSize 0 [ 1941.333130][T13113] usb 5-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29 [ 1941.376231][T13113] usb 5-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 1941.403896][T20722] netlink: 'syz.2.3052': attribute type 72 has an invalid length. [ 1941.412893][T13113] usb 5-1: Manufacturer: syz [ 1941.417556][T13113] usb 5-1: SerialNumber: syz [ 1941.453852][T20722] netlink: 'syz.2.3052': attribute type 8 has an invalid length. [ 1942.028354][T13113] yealink 5-1:36.0: invalid payload size 0, expected 16 [ 1942.083597][T13113] input: Yealink usb-p1k as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:36.0/input/input48 [ 1942.122069][ C0] yealink 5-1:36.0: urb_ctl_callback - urb status -71 [ 1942.129585][ C0] yealink 5-1:36.0: urb_ctl_callback - urb status -71 [ 1942.137026][ C0] yealink 5-1:36.0: urb_ctl_callback - urb status -71 [ 1942.144765][ C0] yealink 5-1:36.0: urb_ctl_callback - urb status -71 [ 1942.151876][ C0] yealink 5-1:36.0: urb_ctl_callback - urb status -71 [ 1942.158958][ C0] yealink 5-1:36.0: urb_ctl_callback - urb status -71 [ 1942.166169][ C0] yealink 5-1:36.0: urb_ctl_callback - urb status -71 [ 1942.173216][ C0] yealink 5-1:36.0: urb_ctl_callback - urb status -71 [ 1942.180018][ C0] yealink 5-1:36.0: urb_ctl_callback - usb_submit_urb failed -90 [ 1942.229633][T13113] usb 5-1: USB disconnect, device number 27 [ 1943.214420][T20746] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3058'. [ 1946.080989][ T29] audit: type=1326 audit(1720348215.097:755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20747 comm="syz.1.3057" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f27bd375bd9 code=0x0 [ 1947.643913][T17191] Bluetooth: hci0: unexpected event 0x2f length: 763 > 260 [ 1947.796922][T20774] netlink: 892 bytes leftover after parsing attributes in process `syz.2.3064'. [ 1948.841941][T20776] debugfs: Directory 'C|+È‚!‡3§rU&6 bÎOo¸ ' 1©|y' with parent 'ieee80211' already present! [ 1949.232968][T16090] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 1949.447071][T16090] usb 3-1: config 36 interface 0 altsetting 0 endpoint 0xFF has an invalid bInterval 0, changing to 7 [ 1949.494552][T16090] usb 3-1: config 36 interface 0 altsetting 0 endpoint 0xFF has invalid wMaxPacketSize 0 [ 1949.527770][T16090] usb 3-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29 [ 1949.554213][T16090] usb 3-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 1949.562915][T16090] usb 3-1: Manufacturer: syz [ 1949.567859][T16090] usb 3-1: SerialNumber: syz [ 1950.606943][T20792] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3070'. [ 1950.861492][T16090] yealink 3-1:36.0: invalid payload size 0, expected 16 [ 1950.893757][T17191] Bluetooth: hci0: unexpected event 0x2f length: 763 > 260 [ 1950.909467][T16090] input: Yealink usb-p1k as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:36.0/input/input49 [ 1950.976500][ C1] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 1950.983524][ C1] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 1950.990523][ C1] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 1950.997619][ C1] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 1951.004710][ C1] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 1951.011841][ C1] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 1951.018996][ C1] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 1951.026115][ C1] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 1951.032959][ C1] yealink 3-1:36.0: urb_ctl_callback - usb_submit_urb failed -90 [ 1951.275149][T16090] usb 3-1: USB disconnect, device number 23 [ 1952.345388][T20799] sysfs: cannot create duplicate filename '/class/ieee80211/C|+È‚!‡3§rU&6 bÎOo¸ ' 1©|y' [ 1952.362731][T20799] CPU: 0 PID: 20799 Comm: syz.1.3071 Not tainted 6.10.0-rc6-syzkaller-00215-g22f902dfc51e #0 [ 1952.372972][T20799] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 1952.383075][T20799] Call Trace: [ 1952.386384][T20799] [ 1952.389329][T20799] dump_stack_lvl+0x16c/0x1f0 [ 1952.394040][T20799] sysfs_warn_dup+0x7f/0xa0 [ 1952.398619][T20799] sysfs_do_create_link_sd+0x124/0x140 [ 1952.404124][T20799] sysfs_create_link+0x61/0xc0 [ 1952.408927][T20799] device_add+0x62e/0x1a70 [ 1952.413386][T20799] ? __pfx_device_add+0x10/0x10 [ 1952.418378][T20799] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1952.424302][T20799] ? ieee80211_set_bitrate_flags+0x249/0x6a0 [ 1952.430321][T20799] wiphy_register+0x2101/0x2d00 [ 1952.435204][T20799] ? __pfx_wiphy_register+0x10/0x10 [ 1952.440451][T20799] ieee80211_register_hw+0x2683/0x43b0 [ 1952.445951][T20799] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 1952.451845][T20799] ? __hrtimer_init+0x22/0x2c0 [ 1952.456676][T20799] ? __asan_memset+0x23/0x50 [ 1952.461304][T20799] ? __hrtimer_init+0x106/0x2c0 [ 1952.466190][T20799] mac80211_hwsim_new_radio+0x22f6/0x4e50 [ 1952.471953][T20799] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 1952.478263][T20799] hwsim_new_radio_nl+0xaf9/0x1240 [ 1952.483429][T20799] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1952.489012][T20799] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 1952.496425][T20799] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 1952.503843][T20799] genl_family_rcv_msg_doit+0x202/0x2f0 [ 1952.509473][T20799] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1952.515689][T20799] ? ns_capable+0xd7/0x110 [ 1952.520133][T20799] genl_rcv_msg+0x565/0x800 [ 1952.524680][T20799] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1952.529742][T20799] ? __pfx___lock_acquire+0x10/0x10 [ 1952.534984][T20799] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1952.540574][T20799] netlink_rcv_skb+0x16b/0x440 [ 1952.545371][T20799] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1952.550432][T20799] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1952.555753][T20799] ? down_read+0xc9/0x330 [ 1952.560117][T20799] ? __pfx_down_read+0x10/0x10 [ 1952.564918][T20799] ? rcu_is_watching+0x12/0xc0 [ 1952.569711][T20799] genl_rcv+0x28/0x40 [ 1952.573833][T20799] netlink_unicast+0x542/0x820 [ 1952.578664][T20799] ? __pfx_netlink_unicast+0x10/0x10 [ 1952.583988][T20799] netlink_sendmsg+0x8b8/0xd70 [ 1952.588818][T20799] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1952.594166][T20799] ? __import_iovec+0x1fd/0x6e0 [ 1952.599051][T20799] ____sys_sendmsg+0xab5/0xc90 [ 1952.603859][T20799] ? copy_msghdr_from_user+0x10b/0x160 [ 1952.609376][T20799] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1952.614690][T20799] ? rcu_preempt_deferred_qs_irqrestore+0x505/0xb80 [ 1952.621316][T20799] ___sys_sendmsg+0x135/0x1e0 [ 1952.626028][T20799] ? __pfx____sys_sendmsg+0x10/0x10 [ 1952.631453][T20799] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1952.637303][T20799] ? lockdep_hardirqs_on+0x7c/0x110 [ 1952.642557][T20799] ? __fget_light+0x173/0x210 [ 1952.647274][T20799] __sys_sendmsg+0x117/0x1f0 [ 1952.651917][T20799] ? __pfx___sys_sendmsg+0x10/0x10 [ 1952.657089][T20799] ? __x64_sys_futex+0x1e1/0x4c0 [ 1952.662199][T20799] do_syscall_64+0xcd/0x250 [ 1952.666747][T20799] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1952.672702][T20799] RIP: 0033:0x7f27bd375bd9 [ 1952.677158][T20799] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1952.696856][T20799] RSP: 002b:00007f27be1b2048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1952.705440][T20799] RAX: ffffffffffffffda RBX: 00007f27bd504038 RCX: 00007f27bd375bd9 [ 1952.713449][T20799] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000007 [ 1952.721460][T20799] RBP: 00007f27bd3e4aa1 R08: 0000000000000000 R09: 0000000000000000 [ 1952.729471][T20799] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1952.737501][T20799] R13: 000000000000006e R14: 00007f27bd504038 R15: 00007ffc60078f98 [ 1952.745520][T20799] [ 1953.499555][T17191] Bluetooth: hci5: unexpected event 0x2f length: 763 > 260 [ 1957.049086][T20841] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3083'. [ 1957.502839][ T5139] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 1957.705781][ T5139] usb 2-1: config 36 interface 0 altsetting 0 endpoint 0xFF has an invalid bInterval 0, changing to 7 [ 1957.727122][ T5139] usb 2-1: config 36 interface 0 altsetting 0 endpoint 0xFF has invalid wMaxPacketSize 0 [ 1957.754130][ T5139] usb 2-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29 [ 1957.771749][ T5139] usb 2-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 1957.786264][ T5139] usb 2-1: Manufacturer: syz [ 1957.812050][ T5139] usb 2-1: SerialNumber: syz [ 1958.104069][T20856] netlink: 'syz.2.3088': attribute type 5 has an invalid length. [ 1958.117012][T17191] Bluetooth: hci1: unexpected event 0x09 length: 10 > 3 [ 1958.336369][ T5139] yealink 2-1:36.0: invalid payload size 0, expected 16 [ 1958.407542][ T5139] input: Yealink usb-p1k as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:36.0/input/input50 [ 1958.445416][ C1] yealink 2-1:36.0: urb_ctl_callback - urb status -71 [ 1958.452494][ C1] yealink 2-1:36.0: urb_ctl_callback - urb status -71 [ 1958.459578][ C1] yealink 2-1:36.0: urb_ctl_callback - urb status -71 [ 1958.466705][ C1] yealink 2-1:36.0: urb_ctl_callback - urb status -71 [ 1958.473833][ C1] yealink 2-1:36.0: urb_ctl_callback - urb status -71 [ 1958.481006][ C1] yealink 2-1:36.0: urb_ctl_callback - urb status -71 [ 1958.488066][ C1] yealink 2-1:36.0: urb_ctl_callback - urb status -71 [ 1958.495145][ C1] yealink 2-1:36.0: urb_ctl_callback - urb status -71 [ 1958.501958][ C1] yealink 2-1:36.0: urb_ctl_callback - usb_submit_urb failed -90 [ 1958.573407][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:2. Sending cookies. [ 1958.656860][ T5139] usb 2-1: USB disconnect, device number 23 [ 1961.685957][T17191] Bluetooth: hci4: unexpected event 0x2f length: 763 > 260 [ 1961.852976][ T4478] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1961.880019][ T4478] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1961.889098][ T4478] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1961.903251][ T4478] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1961.913170][ T4478] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1961.938036][ T4478] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1962.230274][T20896] 9pnet_virtio: no channels available for device syz [ 1962.783696][ T7808] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1963.022747][T16090] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 1963.117460][ T7808] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1963.214062][T16090] usb 3-1: config 36 interface 0 altsetting 0 endpoint 0xFF has an invalid bInterval 0, changing to 7 [ 1963.252382][T16090] usb 3-1: config 36 interface 0 altsetting 0 endpoint 0xFF has invalid wMaxPacketSize 0 [ 1963.285903][T16090] usb 3-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29 [ 1963.296999][T16090] usb 3-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 1963.316275][T16090] usb 3-1: Manufacturer: syz [ 1963.329938][T16090] usb 3-1: SerialNumber: syz [ 1963.409671][ T7808] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1963.602329][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:2. Sending cookies. [ 1963.693173][T20919] netlink: 'syz.0.3105': attribute type 5 has an invalid length. [ 1963.730636][T17191] Bluetooth: hci4: unexpected event 0x09 length: 10 > 3 [ 1963.749518][T17191] Bluetooth: hci4: ISO packet for unknown connection handle 0 [ 1963.800480][ T7808] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1963.921829][T16090] yealink 3-1:36.0: invalid payload size 0, expected 16 [ 1963.982479][T16090] input: Yealink usb-p1k as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:36.0/input/input52 [ 1964.033123][T17191] Bluetooth: hci3: command tx timeout [ 1964.035470][ C1] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 1964.046379][ C1] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 1964.053470][ C1] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 1964.060633][ C1] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 1964.067666][ C1] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 1964.074739][ C1] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 1964.081791][ C1] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 1964.089169][ C1] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 1964.096179][ C1] yealink 3-1:36.0: urb_ctl_callback - usb_submit_urb failed -90 [ 1964.224488][T16090] usb 3-1: USB disconnect, device number 24 [ 1965.388618][T20891] chnl_net:caif_netlink_parms(): no params data found [ 1966.013129][ T7808] bridge_slave_1: left allmulticast mode [ 1966.055657][ T7808] bridge_slave_1: left promiscuous mode [ 1966.061624][ T7808] bridge0: port 2(bridge_slave_1) entered disabled state [ 1966.144456][T17191] Bluetooth: hci3: command tx timeout [ 1966.161813][ T7808] bridge_slave_0: left allmulticast mode [ 1966.175929][ T7808] bridge_slave_0: left promiscuous mode [ 1966.188345][ T7808] bridge0: port 1(bridge_slave_0) entered disabled state [ 1967.919662][T17191] Bluetooth: hci1: unexpected event 0x2f length: 763 > 260 [ 1968.193110][T17191] Bluetooth: hci3: command tx timeout [ 1968.756052][ T7808] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1968.760837][T20974] 9pnet_virtio: no channels available for device syz [ 1968.804987][ T7808] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1968.818139][ T7808] bond0 (unregistering): Released all slaves [ 1969.259699][T20891] bridge0: port 1(bridge_slave_0) entered blocking state [ 1969.283588][T20891] bridge0: port 1(bridge_slave_0) entered disabled state [ 1969.312454][T20891] bridge_slave_0: entered allmulticast mode [ 1969.356534][T20891] bridge_slave_0: entered promiscuous mode [ 1969.397552][T20891] bridge0: port 2(bridge_slave_1) entered blocking state [ 1969.443157][T20891] bridge0: port 2(bridge_slave_1) entered disabled state [ 1969.453431][T20891] bridge_slave_1: entered allmulticast mode [ 1969.520695][T20891] bridge_slave_1: entered promiscuous mode [ 1970.048601][T20306] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 1970.273110][T17191] Bluetooth: hci3: command tx timeout [ 1976.565735][T20891] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1976.620590][T20891] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1977.036489][T20891] team0: Port device team_slave_0 added [ 1977.094063][T20891] team0: Port device team_slave_1 added [ 1977.202426][ T7808] hsr_slave_0: left promiscuous mode [ 1977.237109][ T7808] hsr_slave_1: left promiscuous mode [ 1977.288339][ T7808] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1977.322530][ T7808] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1977.375731][ T7808] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1977.395522][ T7808] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1977.568129][ T7808] veth1_macvtap: left promiscuous mode [ 1977.594983][ T7808] veth0_macvtap: left promiscuous mode [ 1977.620546][ T7808] veth1_vlan: left promiscuous mode [ 1977.643910][ T7808] veth0_vlan: left promiscuous mode [ 1977.934522][T17191] Bluetooth: hci1: unexpected event 0x2f length: 763 > 260 [ 1978.407244][ T5158] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 1978.572894][T20306] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 1978.622876][ T5158] usb 1-1: Using ep0 maxpacket: 32 [ 1978.631002][ T5158] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1978.652352][ T5158] usb 1-1: New USB device found, idVendor=d5ff, idProduct=0066, bcdDevice=d8.b0 [ 1978.680438][ T5158] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1978.700473][ T5158] usb 1-1: config 0 descriptor?? [ 1978.731695][ T5158] usb 1-1: bad CDC descriptors [ 1978.805766][T20306] usb 3-1: config 36 interface 0 altsetting 0 endpoint 0xFF has an invalid bInterval 0, changing to 7 [ 1978.821234][T20306] usb 3-1: config 36 interface 0 altsetting 0 endpoint 0xFF has invalid wMaxPacketSize 0 [ 1978.851268][T20306] usb 3-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29 [ 1978.861182][T20306] usb 3-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 1978.870389][T20306] usb 3-1: Manufacturer: syz [ 1978.875268][T20306] usb 3-1: SerialNumber: syz [ 1978.947374][T16090] usb 1-1: USB disconnect, device number 22 [ 1979.334621][ T7808] team0 (unregistering): Port device team_slave_1 removed [ 1979.431932][ T7808] team0 (unregistering): Port device team_slave_0 removed [ 1980.693867][T20306] yealink 3-1:36.0: invalid payload size 0, expected 16 [ 1980.716647][T20306] input: Yealink usb-p1k as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:36.0/input/input54 [ 1980.750775][ C1] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 1980.758629][ C1] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 1980.765824][ C1] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 1980.773016][ C1] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 1980.780421][ C1] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 1980.787609][ C1] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 1980.794807][ C1] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 1980.802056][ C1] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 1980.808886][ C1] yealink 3-1:36.0: urb_ctl_callback - usb_submit_urb failed -90 [ 1980.859825][T20306] usb 3-1: USB disconnect, device number 25 [ 1980.938295][T20891] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1980.970447][T20891] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1981.051361][T20891] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1981.124929][T20891] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1981.146208][T20891] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1981.208324][T20891] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1982.114295][ T1252] ieee802154 phy0 wpan0: encryption failed: -22 [ 1982.122065][ T1252] ieee802154 phy1 wpan1: encryption failed: -22 [ 1982.639578][T20891] hsr_slave_0: entered promiscuous mode [ 1982.830927][T20891] hsr_slave_1: entered promiscuous mode [ 1982.946278][T20891] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1982.967387][T20891] Cannot create hsr debugfs directory [ 1983.047309][T21067] 9pnet_fd: Insufficient options for proto=fd [ 1984.192836][ T4478] Bluetooth: hci2: command 0x0406 tx timeout [ 1988.396571][T21133] 9pnet_fd: Insufficient options for proto=fd [ 1988.441565][T20891] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1988.477577][T20891] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1988.537474][T20891] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1988.626860][T20891] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1989.243929][T20891] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1989.456400][T20891] 8021q: adding VLAN 0 to HW filter on device team0 [ 1989.525528][T20306] bridge0: port 1(bridge_slave_0) entered blocking state [ 1989.532857][T20306] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1992.055245][T20306] bridge0: port 2(bridge_slave_1) entered blocking state [ 1992.062533][T20306] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1993.351473][T21168] syz.4.3156: attempt to access beyond end of device [ 1993.351473][T21168] nbd4: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1993.395233][T21168] SQUASHFS error: Failed to read block 0x0: -5 [ 1993.459904][T21168] unable to read squashfs_super_block [ 1993.663315][T21187] netlink: 892 bytes leftover after parsing attributes in process `syz.3.3155'. [ 1993.809681][T20891] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1994.170557][T20891] veth0_vlan: entered promiscuous mode [ 1994.257518][T20891] veth1_vlan: entered promiscuous mode [ 1994.452445][T21199] 9pnet_fd: Insufficient options for proto=fd [ 1994.586866][T20891] veth0_macvtap: entered promiscuous mode [ 1994.649661][T20891] veth1_macvtap: entered promiscuous mode [ 1994.750721][T20891] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1994.791421][T20891] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1994.833773][T20891] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1994.884684][T20891] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1994.958645][T20891] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1994.980025][T20891] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1995.038821][T20891] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1995.059927][T20891] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1995.102779][T20891] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1995.163451][T20891] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1995.186775][T20891] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1995.205044][T20891] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1995.227682][T20891] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1995.260798][T20891] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1995.285082][T20891] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1995.308055][T20891] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1995.343905][T20891] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1995.389083][T20891] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1995.544025][T20891] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1995.597078][T20891] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1995.641470][T20891] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1995.673008][T20891] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2000.261863][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2000.358771][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2001.126334][T20756] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2001.173084][T20756] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2001.469869][T17191] Bluetooth: hci1: unexpected event 0x2f length: 763 > 260 [ 2001.742751][ T5158] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 2002.040629][T21259] sysfs: cannot create duplicate filename '/class/ieee80211/C|+È‚!‡3§rU&6 bÎOo¸ ' 1©|y' [ 2002.095409][ T5158] usb 3-1: Using ep0 maxpacket: 8 [ 2002.153628][ T5158] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 2002.164487][T21259] CPU: 1 PID: 21259 Comm: syz.0.3173 Not tainted 6.10.0-rc6-syzkaller-00215-g22f902dfc51e #0 [ 2002.174740][T21259] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 2002.184844][T21259] Call Trace: [ 2002.188158][T21259] [ 2002.191097][T21259] dump_stack_lvl+0x16c/0x1f0 [ 2002.195827][T21259] sysfs_warn_dup+0x7f/0xa0 [ 2002.200364][T21259] sysfs_do_create_link_sd+0x124/0x140 [ 2002.205889][T21259] sysfs_create_link+0x61/0xc0 [ 2002.210687][T21259] device_add+0x62e/0x1a70 [ 2002.215236][T21259] ? __pfx_device_add+0x10/0x10 [ 2002.220122][T21259] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 2002.226061][T21259] ? ieee80211_set_bitrate_flags+0x249/0x6a0 [ 2002.232102][T21259] wiphy_register+0x2101/0x2d00 [ 2002.236977][T21259] ? __pfx_wiphy_register+0x10/0x10 [ 2002.242219][T21259] ieee80211_register_hw+0x2683/0x43b0 [ 2002.247712][T21259] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 2002.253551][T21259] ? __hrtimer_init+0x1c1/0x2c0 [ 2002.258426][T21259] ? __asan_memset+0x23/0x50 [ 2002.263045][T21259] ? __hrtimer_init+0x106/0x2c0 [ 2002.268012][T21259] mac80211_hwsim_new_radio+0x22f6/0x4e50 [ 2002.273881][T21259] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 2002.279992][T21259] ? hwsim_new_radio_nl+0x9b6/0x1240 [ 2002.285329][T21259] ? __asan_memcpy+0x3c/0x60 [ 2002.289951][T21259] hwsim_new_radio_nl+0xaf9/0x1240 [ 2002.295183][T21259] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 2002.300806][T21259] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 2002.308229][T21259] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 2002.315649][T21259] genl_family_rcv_msg_doit+0x202/0x2f0 [ 2002.321255][T21259] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 2002.327368][T21259] ? ns_capable+0xd7/0x110 [ 2002.331820][T21259] genl_rcv_msg+0x565/0x800 [ 2002.336363][T21259] ? __pfx_genl_rcv_msg+0x10/0x10 [ 2002.341422][T21259] ? __pfx___lock_acquire+0x10/0x10 [ 2002.346654][T21259] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 2002.352237][T21259] netlink_rcv_skb+0x16b/0x440 [ 2002.357039][T21259] ? __pfx_genl_rcv_msg+0x10/0x10 [ 2002.362120][T21259] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 2002.367440][T21259] ? down_read+0xc9/0x330 [ 2002.371828][T21259] ? __pfx_down_read+0x10/0x10 [ 2002.377369][T21259] genl_rcv+0x28/0x40 [ 2002.381554][T21259] netlink_unicast+0x542/0x820 [ 2002.386518][T21259] ? __pfx_netlink_unicast+0x10/0x10 [ 2002.391906][T21259] netlink_sendmsg+0x8b8/0xd70 [ 2002.396725][T21259] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2002.402056][T21259] ____sys_sendmsg+0xab5/0xc90 [ 2002.407135][T21259] ? copy_msghdr_from_user+0x10b/0x160 [ 2002.412719][T21259] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2002.418031][T21259] ? __pfx___futex_wait+0x10/0x10 [ 2002.423080][T21259] ? __pfx___lock_acquire+0x10/0x10 [ 2002.428312][T21259] ? finish_task_switch.isra.0+0x212/0xcc0 [ 2002.434154][T21259] ___sys_sendmsg+0x135/0x1e0 [ 2002.438868][T21259] ? __pfx____sys_sendmsg+0x10/0x10 [ 2002.444325][T21259] ? __fget_light+0x173/0x210 [ 2002.449058][T21259] __sys_sendmsg+0x117/0x1f0 [ 2002.453692][T21259] ? __pfx___sys_sendmsg+0x10/0x10 [ 2002.458861][T21259] ? __x64_sys_futex+0x1e1/0x4c0 [ 2002.461724][ T5158] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2002.463842][T21259] do_syscall_64+0xcd/0x250 [ 2002.463899][T21259] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2002.484076][T21259] RIP: 0033:0x7f0ebb975bd9 [ 2002.488595][T21259] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2002.508330][T21259] RSP: 002b:00007f0ebc713048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2002.516784][T21259] RAX: ffffffffffffffda RBX: 00007f0ebbb04038 RCX: 00007f0ebb975bd9 [ 2002.524951][T21259] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000007 [ 2002.533004][T21259] RBP: 00007f0ebb9e4aa1 R08: 0000000000000000 R09: 0000000000000000 [ 2002.541087][T21259] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2002.549095][T21259] R13: 000000000000006e R14: 00007f0ebbb04038 R15: 00007ffe0c1a5ce8 [ 2002.557110][T21259] [ 2002.636144][ T5158] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 2002.718702][ T5158] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2002.799803][ T5158] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2002.850141][ T5158] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 2002.965019][ T5158] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2003.383532][T21269] xt_CT: You must specify a L4 protocol and not use inversions on it [ 2003.466715][ T5158] usb 3-1: usb_control_msg returned -32 [ 2003.502488][ T5158] usbtmc 3-1:16.0: can't read capabilities [ 2003.660829][T21269] syz.3.3174: attempt to access beyond end of device [ 2003.660829][T21269] nbd3: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 2003.683963][T21269] SQUASHFS error: Failed to read block 0x0: -5 [ 2003.706333][T21269] unable to read squashfs_super_block [ 2005.220003][T19931] usb 3-1: USB disconnect, device number 26 [ 2005.508652][T21293] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3175'. [ 2005.574016][T17191] Bluetooth: Wrong link type (-71) [ 2005.931284][T21303] netlink: 'syz.2.3177': attribute type 5 has an invalid length. [ 2006.355462][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:2. Sending cookies. [ 2006.394714][T21315] 9pnet_fd: Insufficient options for proto=fd [ 2008.718288][T17191] Bluetooth: hci4: unexpected event 0x2f length: 763 > 260 [ 2009.454542][ T7932] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 2009.621845][T21354] openvswitch: netlink: Port 8336768 exceeds max allowable 65535 [ 2009.752690][ T7932] usb 4-1: Using ep0 maxpacket: 32 [ 2009.785456][ T7932] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2009.823808][ T7932] usb 4-1: New USB device found, idVendor=d5ff, idProduct=0066, bcdDevice=d8.b0 [ 2009.862721][ T7932] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2009.911489][ T7932] usb 4-1: config 0 descriptor?? [ 2009.953876][ T7932] usb 4-1: bad CDC descriptors [ 2009.972758][ T5139] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 2010.161023][ T7932] usb 4-1: USB disconnect, device number 33 [ 2010.215451][ T5139] usb 1-1: Using ep0 maxpacket: 8 [ 2010.243917][ T5139] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 2010.252226][ T5139] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2010.265623][ T5139] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 2010.277161][ T5139] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2010.288660][ T5139] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2010.302274][ T5139] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 2010.314075][ T5139] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2010.618660][ T5139] usb 1-1: usb_control_msg returned -32 [ 2010.644887][ T5139] usbtmc 1-1:16.0: can't read capabilities [ 2011.053237][T21365] usbtmc 1-1:16.0: usb_control_msg returned -32 [ 2011.167201][ T7932] usb 1-1: USB disconnect, device number 23 [ 2012.119001][ T5139] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 2012.305922][ T5139] usb 2-1: config 36 interface 0 altsetting 0 endpoint 0xFF has an invalid bInterval 0, changing to 7 [ 2012.305981][ T5139] usb 2-1: config 36 interface 0 altsetting 0 endpoint 0xFF has invalid wMaxPacketSize 0 [ 2012.308618][ T5139] usb 2-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29 [ 2012.308668][ T5139] usb 2-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 2012.308707][ T5139] usb 2-1: Manufacturer: syz [ 2012.308736][ T5139] usb 2-1: SerialNumber: syz [ 2013.715409][ T5139] yealink 2-1:36.0: invalid payload size 0, expected 16 [ 2013.775903][ T5139] input: Yealink usb-p1k as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:36.0/input/input55 [ 2013.805630][ C1] yealink 2-1:36.0: urb_ctl_callback - urb status -71 [ 2013.805942][ C1] yealink 2-1:36.0: urb_ctl_callback - urb status -71 [ 2013.806252][ C1] yealink 2-1:36.0: urb_ctl_callback - urb status -71 [ 2013.806566][ C1] yealink 2-1:36.0: urb_ctl_callback - urb status -71 [ 2013.806867][ C1] yealink 2-1:36.0: urb_ctl_callback - urb status -71 [ 2013.807172][ C1] yealink 2-1:36.0: urb_ctl_callback - urb status -71 [ 2013.807467][ C1] yealink 2-1:36.0: urb_ctl_callback - urb status -71 [ 2013.807759][ C1] yealink 2-1:36.0: urb_ctl_callback - urb status -71 [ 2013.807795][ C1] yealink 2-1:36.0: urb_ctl_callback - usb_submit_urb failed -90 [ 2013.867301][ T5139] usb 2-1: USB disconnect, device number 24 [ 2017.378455][T21419] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3206'. [ 2017.434764][T17191] Bluetooth: Wrong link type (-71) [ 2017.526294][T17191] Bluetooth: hci3: unexpected event 0x2f length: 763 > 260 [ 2018.364149][ T5158] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 2018.593469][ T5158] usb 2-1: Using ep0 maxpacket: 32 [ 2018.611828][ T5158] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2018.632843][ T5158] usb 2-1: New USB device found, idVendor=d5ff, idProduct=0066, bcdDevice=d8.b0 [ 2018.712769][ T5158] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2018.754451][ T5158] usb 2-1: config 0 descriptor?? [ 2018.799474][ T5158] usb 2-1: bad CDC descriptors [ 2019.042849][T21440] ALSA: seq fatal error: cannot create timer (-22) [ 2019.213041][T20306] usb 2-1: USB disconnect, device number 25 [ 2021.331548][T21448] xt_CT: You must specify a L4 protocol and not use inversions on it [ 2021.691216][T21448] syz.4.3213: attempt to access beyond end of device [ 2021.691216][T21448] nbd4: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 2021.722965][T21448] SQUASHFS error: Failed to read block 0x0: -5 [ 2021.750275][T21448] unable to read squashfs_super_block [ 2022.428885][T21477] trusted_key: encrypted_key: insufficient parameters specified [ 2023.501796][ T5158] hid-generic 0000:0000:0000.000A: item fetching failed at offset 0/1 [ 2023.620325][ T5158] hid-generic 0000:0000:0000.000A: probe with driver hid-generic failed with error -22 [ 2023.649814][T17191] Bluetooth: Wrong link type (-71) [ 2024.559485][T21486] ALSA: seq fatal error: cannot create timer (-22) [ 2025.317401][ T29] audit: type=1400 audit(1720348294.317:756): avc: denied { setopt } for pid=21487 comm="syz.1.3224" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 2026.620722][ T29] audit: type=1400 audit(1720348295.637:757): avc: denied { read } for pid=21493 comm="syz.1.3226" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 2026.924647][T21500] netlink: 'syz.4.3225': attribute type 5 has an invalid length. [ 2027.751264][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:2. Sending cookies. [ 2028.918763][T21517] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3232'. [ 2028.943902][T17191] Bluetooth: Wrong link type (-71) [ 2029.265999][T21519] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3233'. [ 2029.299318][T17191] Bluetooth: Wrong link type (-71) [ 2029.744563][T21527] ALSA: seq fatal error: cannot create timer (-22) [ 2029.962710][T21532] netlink: 'syz.4.3235': attribute type 5 has an invalid length. [ 2030.620530][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:2. Sending cookies. [ 2033.620962][T17191] Bluetooth: hci2: SCO packet for unknown connection handle 200 [ 2037.664387][T21576] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3247'. [ 2037.697560][T21578] binder: BINDER_SET_CONTEXT_MGR already set [ 2037.726593][T21578] binder: 21577:21578 ioctl 4018620d 20000040 returned -16 [ 2037.757365][T21581] ALSA: seq fatal error: cannot create timer (-22) [ 2037.784930][T17191] Bluetooth: Wrong link type (-71) [ 2037.790271][T17191] Bluetooth: hci3: link tx timeout [ 2037.796491][T17191] Bluetooth: hci3: killing stalled connection 10:aa:aa:aa:aa:aa [ 2039.885520][T17191] Bluetooth: hci3: command 0x0406 tx timeout [ 2040.264044][T21596] netlink: 'syz.2.3253': attribute type 5 has an invalid length. [ 2040.335902][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:2. Sending cookies. [ 2040.836918][T21615] ALSA: seq fatal error: cannot create timer (-22) [ 2041.944725][T21622] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3261'. [ 2042.001288][ T4478] Bluetooth: Wrong link type (-71) [ 2042.105596][T21626] binder: BINDER_SET_CONTEXT_MGR already set [ 2042.115050][T21626] binder: 21624:21626 ioctl 4018620d 20000040 returned -16 [ 2043.159809][ T1252] ieee802154 phy0 wpan0: encryption failed: -22 [ 2043.166454][ T1252] ieee802154 phy1 wpan1: encryption failed: -22 [ 2044.923101][T13113] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 2044.947744][ T4478] Bluetooth: hci5: unexpected event 0x2f length: 763 > 260 [ 2045.142562][T13113] usb 2-1: config 36 interface 0 altsetting 0 endpoint 0xFF has an invalid bInterval 0, changing to 7 [ 2045.226405][T13113] usb 2-1: config 36 interface 0 altsetting 0 endpoint 0xFF has invalid wMaxPacketSize 0 [ 2045.273203][T13113] usb 2-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29 [ 2045.290747][T21648] sysfs: cannot create duplicate filename '/class/ieee80211/C|+È‚!‡3§rU&6 bÎOo¸ ' 1©|y' [ 2045.301985][T21648] CPU: 1 PID: 21648 Comm: syz.4.3269 Not tainted 6.10.0-rc6-syzkaller-00215-g22f902dfc51e #0 [ 2045.312245][T21648] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 2045.322516][T21648] Call Trace: [ 2045.325831][T21648] [ 2045.328792][T21648] dump_stack_lvl+0x16c/0x1f0 [ 2045.333499][T21648] sysfs_warn_dup+0x7f/0xa0 [ 2045.338053][T21648] sysfs_do_create_link_sd+0x124/0x140 [ 2045.343674][T21648] sysfs_create_link+0x61/0xc0 [ 2045.348481][T21648] device_add+0x62e/0x1a70 [ 2045.352955][T21648] ? __pfx_device_add+0x10/0x10 [ 2045.358079][T21648] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 2045.364034][T21648] ? ieee80211_set_bitrate_flags+0x249/0x6a0 [ 2045.370065][T21648] wiphy_register+0x2101/0x2d00 [ 2045.374953][T21648] ? __pfx_wiphy_register+0x10/0x10 [ 2045.380295][T21648] ieee80211_register_hw+0x2683/0x43b0 [ 2045.385814][T21648] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 2045.391688][T21648] ? lockdep_init_map_type+0x16d/0x7d0 [ 2045.397217][T21648] ? __asan_memset+0x23/0x50 [ 2045.401849][T21648] ? __hrtimer_init+0x106/0x2c0 [ 2045.406729][T21648] mac80211_hwsim_new_radio+0x22f6/0x4e50 [ 2045.412500][T21648] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 2045.418620][T21648] ? hwsim_new_radio_nl+0x9b6/0x1240 [ 2045.423959][T21648] ? __asan_memcpy+0x3c/0x60 [ 2045.428584][T21648] hwsim_new_radio_nl+0xaf9/0x1240 [ 2045.433758][T21648] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 2045.439343][T21648] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 2045.446761][T21648] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 2045.454237][T21648] genl_family_rcv_msg_doit+0x202/0x2f0 [ 2045.459885][T21648] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 2045.466102][T21648] ? ns_capable+0xd7/0x110 [ 2045.470595][T21648] genl_rcv_msg+0x565/0x800 [ 2045.475147][T21648] ? __pfx_genl_rcv_msg+0x10/0x10 [ 2045.480225][T21648] ? __pfx___lock_acquire+0x10/0x10 [ 2045.485496][T21648] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 2045.491096][T21648] netlink_rcv_skb+0x16b/0x440 [ 2045.495907][T21648] ? __pfx_genl_rcv_msg+0x10/0x10 [ 2045.500982][T21648] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 2045.506341][T21648] ? down_read+0xc9/0x330 [ 2045.510734][T21648] ? __pfx_down_read+0x10/0x10 [ 2045.515540][T21648] ? rcu_is_watching+0x12/0xc0 [ 2045.520418][T21648] genl_rcv+0x28/0x40 [ 2045.524438][T21648] netlink_unicast+0x542/0x820 [ 2045.529247][T21648] ? __pfx_netlink_unicast+0x10/0x10 [ 2045.534569][T21648] netlink_sendmsg+0x8b8/0xd70 [ 2045.539368][T21648] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2045.544712][T21648] ? __import_iovec+0x1fd/0x6e0 [ 2045.549593][T21648] ____sys_sendmsg+0xab5/0xc90 [ 2045.554481][T21648] ? copy_msghdr_from_user+0x10b/0x160 [ 2045.559980][T21648] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2045.565323][T21648] ? rcu_preempt_deferred_qs_irqrestore+0x505/0xb80 [ 2045.571963][T21648] ___sys_sendmsg+0x135/0x1e0 [ 2045.576686][T21648] ? __pfx____sys_sendmsg+0x10/0x10 [ 2045.581919][T21648] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 2045.587870][T21648] ? lockdep_hardirqs_on+0x7c/0x110 [ 2045.593859][T21648] ? __fget_light+0x173/0x210 [ 2045.598818][T21648] __sys_sendmsg+0x117/0x1f0 [ 2045.603450][T21648] ? __pfx___sys_sendmsg+0x10/0x10 [ 2045.608619][T21648] ? __x64_sys_futex+0x1e1/0x4c0 [ 2045.613681][T21648] do_syscall_64+0xcd/0x250 [ 2045.618259][T21648] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2045.624203][T21648] RIP: 0033:0x7fe4f3775bd9 [ 2045.628659][T21648] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2045.648465][T21648] RSP: 002b:00007fe4f4484048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2045.656991][T21648] RAX: ffffffffffffffda RBX: 00007fe4f3904038 RCX: 00007fe4f3775bd9 [ 2045.664980][T21648] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000007 [ 2045.672976][T21648] RBP: 00007fe4f37e4aa1 R08: 0000000000000000 R09: 0000000000000000 [ 2045.680978][T21648] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2045.688979][T21648] R13: 000000000000006e R14: 00007fe4f3904038 R15: 00007fff367b7ce8 [ 2045.697098][T21648] [ 2045.710957][T13113] usb 2-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 2045.735809][T13113] usb 2-1: Manufacturer: syz [ 2045.740578][T13113] usb 2-1: SerialNumber: syz [ 2046.261078][T13113] yealink 2-1:36.0: invalid payload size 0, expected 16 [ 2046.297559][T13113] input: Yealink usb-p1k as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:36.0/input/input56 [ 2046.724151][ C0] yealink 2-1:36.0: urb_ctl_callback - urb status -71 [ 2046.731259][ C0] yealink 2-1:36.0: urb_ctl_callback - urb status -71 [ 2046.738248][ C0] yealink 2-1:36.0: urb_ctl_callback - urb status -71 [ 2046.745278][ C0] yealink 2-1:36.0: urb_ctl_callback - urb status -71 [ 2046.752716][ C0] yealink 2-1:36.0: urb_ctl_callback - urb status -71 [ 2046.759895][ C0] yealink 2-1:36.0: urb_ctl_callback - urb status -71 [ 2046.767067][ C0] yealink 2-1:36.0: urb_ctl_callback - urb status -71 [ 2046.774126][ C0] yealink 2-1:36.0: urb_ctl_callback - urb status -71 [ 2046.780907][ C0] yealink 2-1:36.0: urb_ctl_callback - usb_submit_urb failed -90 [ 2046.902898][T13113] usb 2-1: USB disconnect, device number 26 [ 2047.335536][T21666] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3274'. [ 2047.393113][ T4478] Bluetooth: Wrong link type (-71) [ 2047.646132][T21671] binder: BINDER_SET_CONTEXT_MGR already set [ 2047.712083][T21671] binder: 21668:21671 ioctl 4018620d 20000040 returned -16 [ 2049.076157][T21688] FAULT_INJECTION: forcing a failure. [ 2049.076157][T21688] name failslab, interval 1, probability 0, space 0, times 0 [ 2049.109618][T21688] CPU: 0 PID: 21688 Comm: syz.1.3280 Not tainted 6.10.0-rc6-syzkaller-00215-g22f902dfc51e #0 [ 2049.119859][T21688] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 2049.129977][T21688] Call Trace: [ 2049.133454][T21688] [ 2049.136401][T21688] dump_stack_lvl+0x16c/0x1f0 [ 2049.141111][T21688] should_fail_ex+0x497/0x5b0 [ 2049.145825][T21688] should_failslab+0x9/0x20 [ 2049.150373][T21688] __kmalloc_noprof+0xcf/0x410 [ 2049.155166][T21688] blk_rq_map_user_iov+0x2c4/0x1770 [ 2049.160398][T21688] ? __pfx_blk_rq_map_user_iov+0x10/0x10 [ 2049.166088][T21688] ? find_held_lock+0x2d/0x110 [ 2049.170893][T21688] ? sg_common_write.constprop.0+0xc21/0x1cb0 [ 2049.177006][T21688] ? __pfx_lock_release+0x10/0x10 [ 2049.182162][T21688] ? trace_contention_end+0xea/0x140 [ 2049.187568][T21688] blk_rq_map_user_io+0x206/0x230 [ 2049.192634][T21688] ? __pfx_blk_rq_map_user_io+0x10/0x10 [ 2049.198222][T21688] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 2049.204252][T21688] ? sg_write+0x415/0xe10 [ 2049.208618][T21688] sg_common_write.constprop.0+0xd74/0x1cb0 [ 2049.214565][T21688] ? __pfx_sg_common_write.constprop.0+0x10/0x10 [ 2049.221195][T21688] sg_write+0x82e/0xe10 [ 2049.225419][T21688] ? __pfx_sg_write+0x10/0x10 [ 2049.230142][T21688] ? security_file_permission+0x98/0xc0 [ 2049.235718][T21688] ? __pfx_sg_write+0x10/0x10 [ 2049.240426][T21688] vfs_write+0x29a/0x1140 [ 2049.244797][T21688] ? __pfx_vfs_write+0x10/0x10 [ 2049.249601][T21688] ? __fget_files+0x256/0x400 [ 2049.254314][T21688] ? __fget_light+0x173/0x210 [ 2049.259023][T21688] ksys_write+0x12f/0x260 [ 2049.263409][T21688] ? __pfx_ksys_write+0x10/0x10 [ 2049.268315][T21688] do_syscall_64+0xcd/0x250 [ 2049.272866][T21688] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2049.278824][T21688] RIP: 0033:0x7ff0f9f75bd9 [ 2049.283268][T21688] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2049.303008][T21688] RSP: 002b:00007ff0fac9b048 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2049.311485][T21688] RAX: ffffffffffffffda RBX: 00007ff0fa103f60 RCX: 00007ff0f9f75bd9 [ 2049.319675][T21688] RDX: 0000000000000038 RSI: 0000000020000100 RDI: 0000000000000004 [ 2049.327670][T21688] RBP: 00007ff0fac9b0a0 R08: 0000000000000000 R09: 0000000000000000 [ 2049.335662][T21688] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2049.343653][T21688] R13: 000000000000000b R14: 00007ff0fa103f60 R15: 00007ffce3864868 [ 2049.352306][T21688] [ 2049.733807][T21695] ALSA: seq fatal error: cannot create timer (-22) [ 2049.748290][ T4478] Bluetooth: hci4: SCO packet for unknown connection handle 200 [ 2054.717479][T21704] netlink: 'syz.2.3285': attribute type 5 has an invalid length. [ 2054.995364][T21716] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3288'. [ 2055.148736][ T4478] Bluetooth: Wrong link type (-71) [ 2055.452084][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:2. Sending cookies. [ 2057.888328][T21737] siw: device registration error -23 [ 2058.098525][T21740] ALSA: seq fatal error: cannot create timer (-22) [ 2058.812724][ T5158] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 2059.043716][ T5158] usb 4-1: device descriptor read/64, error -71 [ 2059.342717][ T5158] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 2059.833037][ T5158] usb 4-1: device descriptor read/64, error -71 [ 2060.100360][ T4478] Bluetooth: hci2: SCO packet for unknown connection handle 200 [ 2060.123322][ T5158] usb usb4-port1: attempt power cycle [ 2060.152839][ T4478] Bluetooth: hci3: SCO packet for unknown connection handle 200 [ 2060.493012][T21763] 9pnet_fd: Insufficient options for proto=fd [ 2060.572764][ T5158] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 2060.617654][ T5158] usb 4-1: device descriptor read/8, error -71 [ 2060.637448][T21763] netlink: 'syz.0.3301': attribute type 10 has an invalid length. [ 2060.708069][ T4478] Bluetooth: hci1: Ignoring HCI_Sync_Conn_Complete event for existing connection [ 2060.993340][ T5158] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 2061.543046][ T5158] usb 4-1: device descriptor read/8, error -71 [ 2061.683358][ T5158] usb usb4-port1: unable to enumerate USB device [ 2062.141158][T21768] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3303'. [ 2062.285961][ T4478] Bluetooth: Wrong link type (-71) [ 2062.753125][ T4478] Bluetooth: hci1: command 0x0406 tx timeout [ 2063.261990][T21785] ALSA: seq fatal error: cannot create timer (-22) [ 2063.386697][T21779] netlink: 'syz.2.3305': attribute type 5 has an invalid length. [ 2063.525372][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:2. Sending cookies. [ 2067.235312][T16090] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 2067.690655][T16090] usb 1-1: device descriptor read/64, error -71 [ 2068.483055][T16090] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 2068.581092][ T4478] Bluetooth: hci4: SCO packet for unknown connection handle 200 [ 2068.623047][ T4478] Bluetooth: Wrong link type (-71) [ 2068.662915][T16090] usb 1-1: device descriptor read/64, error -71 [ 2068.819991][T16090] usb usb1-port1: attempt power cycle [ 2070.223250][T21838] xt_CT: You must specify a L4 protocol and not use inversions on it [ 2070.307977][T21841] ALSA: seq fatal error: cannot create timer (-22) [ 2074.350436][T21861] ntfs3: nullb0: Primary boot signature is not NTFS. [ 2074.351387][T21861] ntfs3: nullb0: try to read out of volume at offset 0x3e7ffffe00 [ 2075.654259][T21877] ALSA: seq fatal error: cannot create timer (-22) [ 2075.783050][T13113] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 2076.011186][ T4478] Bluetooth: Wrong link type (-71) [ 2076.012773][T13113] usb 3-1: device descriptor read/64, error -71 [ 2076.064907][T21881] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3333'. [ 2076.344761][ T4478] Bluetooth: Wrong link type (-71) [ 2076.473778][T13113] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 2076.645727][T13113] usb 3-1: device descriptor read/64, error -71 [ 2076.806753][T13113] usb usb3-port1: attempt power cycle [ 2077.262821][T13113] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 2077.288616][ T29] audit: type=1400 audit(1720348346.307:758): avc: denied { create } for pid=21894 comm="syz.3.3337" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 2077.412194][T13113] usb 3-1: device descriptor read/8, error -71 [ 2077.793473][ T29] audit: type=1326 audit(1720348346.807:759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21894 comm="syz.3.3337" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68e6575bd9 code=0x7ffc0000 [ 2078.097895][ T29] audit: type=1326 audit(1720348346.807:760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21894 comm="syz.3.3337" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68e6575bd9 code=0x7ffc0000 [ 2078.122720][T13113] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 2078.184304][T13113] usb 3-1: device descriptor read/8, error -71 [ 2078.222467][ T29] audit: type=1326 audit(1720348347.177:761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21894 comm="syz.3.3337" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f68e6575bd9 code=0x7ffc0000 [ 2078.265089][ T29] audit: type=1326 audit(1720348347.177:762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21894 comm="syz.3.3337" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68e6575bd9 code=0x7ffc0000 [ 2078.298387][ T29] audit: type=1326 audit(1720348347.177:763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21894 comm="syz.3.3337" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68e6575bd9 code=0x7ffc0000 [ 2078.326750][T13113] usb usb3-port1: unable to enumerate USB device [ 2078.335456][ T29] audit: type=1326 audit(1720348347.237:764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21894 comm="syz.3.3337" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f68e6575bd9 code=0x7ffc0000 [ 2078.453469][ T29] audit: type=1326 audit(1720348347.237:765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21894 comm="syz.3.3337" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68e6575bd9 code=0x7ffc0000 [ 2078.599214][ T29] audit: type=1326 audit(1720348347.237:766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21894 comm="syz.3.3337" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68e6575bd9 code=0x7ffc0000 [ 2078.642223][ T29] audit: type=1326 audit(1720348347.237:767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21894 comm="syz.3.3337" exe="/root/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7f68e6575bd9 code=0x7ffc0000 [ 2079.502357][T21908] 9pnet_fd: Insufficient options for proto=fd [ 2079.775523][T21908] netlink: 'syz.2.3340': attribute type 10 has an invalid length. [ 2080.581291][T21908] bond0: (slave bond_slave_0): Releasing backup interface [ 2081.014303][T21925] ntfs3: nullb0: Primary boot signature is not NTFS. [ 2081.023038][T21925] ntfs3: nullb0: try to read out of volume at offset 0x3e7ffffe00 [ 2082.260962][T21927] netlink: 'syz.4.3344': attribute type 5 has an invalid length. [ 2082.334166][ T4478] Bluetooth: Wrong link type (-71) [ 2082.616593][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:2. Sending cookies. [ 2082.683115][ T4478] Bluetooth: hci2: command 0x0406 tx timeout [ 2083.706194][T21946] ntfs3: nullb0: Primary boot signature is not NTFS. [ 2083.714651][T21946] ntfs3: nullb0: try to read out of volume at offset 0x3e7ffffe00 [ 2084.981071][T21954] netlink: 'syz.2.3350': attribute type 5 has an invalid length. [ 2085.212053][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:2. Sending cookies. [ 2088.974280][T21977] ntfs3: nullb0: Primary boot signature is not NTFS. [ 2088.981625][T21977] ntfs3: nullb0: try to read out of volume at offset 0x3e7ffffe00 [ 2090.856125][ T4478] Bluetooth: Wrong link type (-71) [ 2094.099008][ T4478] Bluetooth: hci5: unexpected event 0x2f length: 763 > 260 [ 2094.805475][T22012] sysfs: cannot create duplicate filename '/class/ieee80211/C|+È‚!‡3§rU&6 bÎOo¸ ' 1©|y' [ 2094.805741][T22012] CPU: 1 PID: 22012 Comm: syz.4.3365 Not tainted 6.10.0-rc6-syzkaller-00215-g22f902dfc51e #0 [ 2094.805783][T22012] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 2094.805804][T22012] Call Trace: [ 2094.805818][T22012] [ 2094.805830][T22012] dump_stack_lvl+0x16c/0x1f0 [ 2094.805875][T22012] sysfs_warn_dup+0x7f/0xa0 [ 2094.805923][T22012] sysfs_do_create_link_sd+0x124/0x140 [ 2094.805974][T22012] sysfs_create_link+0x61/0xc0 [ 2094.806024][T22012] device_add+0x62e/0x1a70 [ 2094.806074][T22012] ? __pfx_device_add+0x10/0x10 [ 2094.806123][T22012] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 2094.806159][T22012] ? ieee80211_set_bitrate_flags+0x249/0x6a0 [ 2094.806208][T22012] wiphy_register+0x2101/0x2d00 [ 2094.806246][T22012] ? __pfx_wiphy_register+0x10/0x10 [ 2094.806285][T22012] ieee80211_register_hw+0x2683/0x43b0 [ 2094.806331][T22012] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 2094.806382][T22012] ? lockdep_init_map_type+0x16d/0x7d0 [ 2094.806436][T22012] ? __asan_memset+0x23/0x50 [ 2094.806486][T22012] ? __hrtimer_init+0x106/0x2c0 [ 2094.806528][T22012] mac80211_hwsim_new_radio+0x22f6/0x4e50 [ 2094.806587][T22012] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 2094.806637][T22012] ? hwsim_new_radio_nl+0x9b6/0x1240 [ 2094.806685][T22012] ? __asan_memcpy+0x3c/0x60 [ 2094.806731][T22012] hwsim_new_radio_nl+0xaf9/0x1240 [ 2094.806779][T22012] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 2094.806830][T22012] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 2094.806892][T22012] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 2094.806957][T22012] genl_family_rcv_msg_doit+0x202/0x2f0 [ 2094.807015][T22012] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 2094.807072][T22012] ? lockdep_hardirqs_on+0x7c/0x110 [ 2094.807125][T22012] genl_rcv_msg+0x565/0x800 [ 2094.807182][T22012] ? __pfx_genl_rcv_msg+0x10/0x10 [ 2094.807237][T22012] ? __pfx___lock_acquire+0x10/0x10 [ 2094.807293][T22012] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 2094.807355][T22012] netlink_rcv_skb+0x16b/0x440 [ 2094.807404][T22012] ? __pfx_genl_rcv_msg+0x10/0x10 [ 2094.807463][T22012] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 2094.807521][T22012] ? down_read+0xc9/0x330 [ 2094.807572][T22012] ? __pfx_down_read+0x10/0x10 [ 2094.807622][T22012] ? rcu_is_watching+0x12/0xc0 [ 2094.807659][T22012] genl_rcv+0x28/0x40 [ 2094.807713][T22012] netlink_unicast+0x542/0x820 [ 2094.807765][T22012] ? __pfx_netlink_unicast+0x10/0x10 [ 2094.807820][T22012] netlink_sendmsg+0x8b8/0xd70 [ 2094.807873][T22012] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2094.807924][T22012] ? __import_iovec+0x1fd/0x6e0 [ 2094.807970][T22012] ____sys_sendmsg+0xab5/0xc90 [ 2094.808009][T22012] ? copy_msghdr_from_user+0x10b/0x160 [ 2094.808060][T22012] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2094.808099][T22012] ? __pfx___futex_wait+0x10/0x10 [ 2094.808135][T22012] ? __pfx___lock_acquire+0x10/0x10 [ 2094.808192][T22012] ? try_to_wake_up+0xc08/0x13e0 [ 2094.808240][T22012] ___sys_sendmsg+0x135/0x1e0 [ 2094.808291][T22012] ? __pfx____sys_sendmsg+0x10/0x10 [ 2094.808358][T22012] ? __fget_light+0x173/0x210 [ 2094.808409][T22012] __sys_sendmsg+0x117/0x1f0 [ 2094.808460][T22012] ? __pfx___sys_sendmsg+0x10/0x10 [ 2094.808510][T22012] ? __x64_sys_futex+0x1e1/0x4c0 [ 2094.808570][T22012] do_syscall_64+0xcd/0x250 [ 2094.808622][T22012] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2094.808683][T22012] RIP: 0033:0x7fe4f3775bd9 [ 2094.808711][T22012] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2094.808749][T22012] RSP: 002b:00007fe4f4484048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2094.808788][T22012] RAX: ffffffffffffffda RBX: 00007fe4f3904038 RCX: 00007fe4f3775bd9 [ 2094.808815][T22012] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000007 [ 2094.808840][T22012] RBP: 00007fe4f37e4aa1 R08: 0000000000000000 R09: 0000000000000000 [ 2094.808866][T22012] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2094.808891][T22012] R13: 000000000000006e R14: 00007fe4f3904038 R15: 00007fff367b7ce8 [ 2094.808923][T22012] [ 2097.648497][ T4478] Bluetooth: Wrong link type (-71) [ 2097.648686][ T4478] Bluetooth: hci3: link tx timeout [ 2097.648765][ T4478] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 2099.263254][T22054] netlink: 'syz.2.3372': attribute type 5 has an invalid length. [ 2099.834922][T22035] Bluetooth: hci3: command 0x0406 tx timeout [ 2100.574428][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:2. Sending cookies. [ 2101.361184][ T29] kauditd_printk_skb: 11 callbacks suppressed [ 2101.361210][ T29] audit: type=1400 audit(1720348370.377:779): avc: denied { read } for pid=22071 comm="syz.2.3379" name="file0" dev="tmpfs" ino=454 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 2101.647810][T22080] input: syz0 as /devices/virtual/input/input57 [ 2103.503374][ T4478] Bluetooth: Wrong link type (-71) [ 2103.898374][ T29] audit: type=1400 audit(1720348372.917:780): avc: denied { mounton } for pid=22102 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 2103.999878][T22035] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 2104.012749][T22035] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 2104.021792][T22035] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 2104.031378][T22035] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 2104.040820][T22035] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 2104.048624][T22035] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 2104.521478][ T7808] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2104.610516][ T1252] ieee802154 phy0 wpan0: encryption failed: -22 [ 2104.616966][ T1252] ieee802154 phy1 wpan1: encryption failed: -22 [ 2105.378775][ T7808] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2105.819374][ T7808] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2106.081230][ T7808] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2106.122997][ T4478] Bluetooth: hci0: command tx timeout [ 2107.384252][T22102] chnl_net:caif_netlink_parms(): no params data found [ 2108.030792][ T7808] bridge_slave_1: left allmulticast mode [ 2108.036704][ T7808] bridge_slave_1: left promiscuous mode [ 2108.042536][ T7808] bridge0: port 2(bridge_slave_1) entered disabled state [ 2108.089792][ T7808] bridge_slave_0: left allmulticast mode [ 2108.119237][ T7808] bridge_slave_0: left promiscuous mode [ 2108.153283][ T7808] bridge0: port 1(bridge_slave_0) entered disabled state [ 2108.193341][ T4478] Bluetooth: hci0: command tx timeout [ 2109.747234][ T4478] Bluetooth: Wrong link type (-71) [ 2110.289304][ T4478] Bluetooth: hci0: command tx timeout [ 2111.903968][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:2. Sending cookies. [ 2111.939812][ T7808] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2111.987360][ T7808] bond0 (unregistering): Released all slaves [ 2112.086414][T22169] netlink: 'syz.1.3400': attribute type 5 has an invalid length. [ 2112.432759][ T4478] Bluetooth: hci0: command tx timeout [ 2113.725615][T22102] bridge0: port 1(bridge_slave_0) entered blocking state [ 2113.794391][T22102] bridge0: port 1(bridge_slave_0) entered disabled state [ 2113.808705][T22102] bridge_slave_0: entered allmulticast mode [ 2113.842902][T22102] bridge_slave_0: entered promiscuous mode [ 2113.871736][T22102] bridge0: port 2(bridge_slave_1) entered blocking state [ 2113.942819][T22102] bridge0: port 2(bridge_slave_1) entered disabled state [ 2113.974423][T22102] bridge_slave_1: entered allmulticast mode [ 2114.022688][T22102] bridge_slave_1: entered promiscuous mode [ 2114.717997][T13113] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 2115.352387][T22102] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2115.412657][T13113] usb 4-1: Using ep0 maxpacket: 8 [ 2115.446967][T22102] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2115.491805][T13113] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2115.538378][T13113] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 2115.573087][ T7808] hsr_slave_0: left promiscuous mode [ 2115.590658][T13113] usb 4-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 8.00 [ 2115.673185][ T7808] hsr_slave_1: left promiscuous mode [ 2115.681255][T13113] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2115.716963][T13113] usb 4-1: config 0 descriptor?? [ 2115.725126][ T7808] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2115.747498][ T7808] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2115.773135][ T7808] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2115.790511][ T7808] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2116.585215][ T7808] veth1_macvtap: left promiscuous mode [ 2116.591478][ T7808] veth0_macvtap: left promiscuous mode [ 2116.598762][ T7808] veth1_vlan: left promiscuous mode [ 2116.611949][ T7808] veth0_vlan: left promiscuous mode [ 2117.449465][ T4478] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 2118.867283][ T4478] Bluetooth: hci1: unexpected event 0x2f length: 763 > 260 [ 2119.293682][ T5139] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 2119.418992][ T7808] team0 (unregistering): Port device team_slave_1 removed [ 2119.542950][ T5139] usb 1-1: Using ep0 maxpacket: 32 [ 2119.554516][ T5139] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2119.566933][ T5139] usb 1-1: New USB device found, idVendor=d5ff, idProduct=0066, bcdDevice=d8.b0 [ 2119.589201][ T5139] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2119.908068][ T5139] usb 1-1: config 0 descriptor?? [ 2119.921505][ T5139] usb 1-1: bad CDC descriptors [ 2120.330329][T16090] usb 1-1: USB disconnect, device number 27 [ 2120.373844][ T7808] team0 (unregistering): Port device team_slave_0 removed [ 2123.159221][T22230] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 2123.309047][T13274] usb 4-1: USB disconnect, device number 38 [ 2123.475269][T22102] team0: Port device team_slave_0 added [ 2123.539936][T22102] team0: Port device team_slave_1 added [ 2123.801460][T22102] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2123.876124][T22102] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2123.903419][T22280] 9pnet_fd: Insufficient options for proto=fd [ 2123.977365][T22102] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2124.027484][T22102] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2124.079966][T22102] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2124.159151][T22102] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2124.190167][T22285] netlink: 'syz.1.3424': attribute type 10 has an invalid length. [ 2124.240825][T22285] bond0: (slave bond_slave_0): Releasing backup interface [ 2125.425992][T22102] hsr_slave_0: entered promiscuous mode [ 2125.515240][T22295] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3427'. [ 2126.132757][ T4478] Bluetooth: hci3: command 0x0406 tx timeout [ 2126.559175][T22102] hsr_slave_1: entered promiscuous mode [ 2126.618317][T22102] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2126.648982][T22102] Cannot create hsr debugfs directory [ 2128.008800][T22314] trusted_key: encrypted_key: insufficient parameters specified [ 2129.010858][ T9] hid-generic 0000:0000:0000.000B: item fetching failed at offset 0/1 [ 2129.087961][ T9] hid-generic 0000:0000:0000.000B: probe with driver hid-generic failed with error -22 [ 2129.655346][ T4478] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 2129.806779][T13274] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 2130.036692][T13274] usb 3-1: Using ep0 maxpacket: 8 [ 2130.059680][T13274] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2130.095175][T13274] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 2130.116758][T13274] usb 3-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 8.00 [ 2130.182142][T13274] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2130.327392][T13274] usb 3-1: config 0 descriptor?? [ 2131.505711][T22102] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 2131.559439][T22102] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 2131.742230][T22343] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 2132.039102][T22352] trusted_key: encrypted_key: insufficient parameters specified [ 2133.707920][T22102] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 2133.767315][T22102] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 2133.801617][T13106] usb 3-1: USB disconnect, device number 31 [ 2134.579595][T22366] ntfs3: nullb0: Primary boot signature is not NTFS. [ 2134.586692][T22366] ntfs3: nullb0: try to read out of volume at offset 0x3e7ffffe00 [ 2136.109004][T22102] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2137.004442][T22384] netlink: 'syz.0.3443': attribute type 5 has an invalid length. [ 2137.464828][T22102] 8021q: adding VLAN 0 to HW filter on device team0 [ 2137.840765][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:2. Sending cookies. [ 2137.950113][ T5139] bridge0: port 1(bridge_slave_0) entered blocking state [ 2137.957580][ T5139] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2138.079564][ T5139] bridge0: port 2(bridge_slave_1) entered blocking state [ 2138.086952][ T5139] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2138.153361][T22395] 9pnet_virtio: no channels available for device syz [ 2138.324421][T22397] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.3448'. [ 2138.385218][T22397] openvswitch: netlink: Message has 3068 unknown bytes. [ 2138.887023][T20306] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 2139.195621][T20306] usb 3-1: Using ep0 maxpacket: 32 [ 2139.320759][T20306] usb 3-1: config 7 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2139.396570][T20306] usb 3-1: config 7 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2139.448721][T20306] usb 3-1: config 7 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 2139.522976][T20306] usb 3-1: config 7 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 2139.567709][T20306] usb 3-1: config 7 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 2139.633084][T20306] usb 3-1: New USB device found, idVendor=1b96, idProduct=000a, bcdDevice= 0.00 [ 2139.652690][T20306] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2144.482351][T20306] ntrig 0003:1B96:000A.000C: hidraw0: USB HID v0.00 Device [HID 1b96:000a] on usb-dummy_hcd.2-1/input0 [ 2144.902866][T20306] usb 3-1: USB disconnect, device number 32 [ 2145.098625][T22102] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2145.518984][T22438] ntfs3: nullb0: Primary boot signature is not NTFS. [ 2145.526012][T22438] ntfs3: nullb0: try to read out of volume at offset 0x3e7ffffe00 [ 2146.188104][T22453] 9pnet_fd: Insufficient options for proto=fd [ 2146.682949][T22453] netlink: 'syz.3.3456': attribute type 10 has an invalid length. [ 2146.905946][T22453] bond0: (slave bond_slave_0): Releasing backup interface [ 2149.334980][ T4478] Bluetooth: hci4: command 0x0406 tx timeout [ 2149.545172][T22102] veth0_vlan: entered promiscuous mode [ 2149.988621][T22102] veth1_vlan: entered promiscuous mode [ 2150.343976][T22492] ntfs3: nullb0: Primary boot signature is not NTFS. [ 2150.351901][T22492] ntfs3: nullb0: try to read out of volume at offset 0x3e7ffffe00 [ 2150.635284][T22102] veth0_macvtap: entered promiscuous mode [ 2150.761118][T22102] veth1_macvtap: entered promiscuous mode [ 2151.001613][T22102] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2151.122743][T22102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2151.260727][T22102] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2151.439542][T22102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2151.484148][T22102] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2151.547288][T22102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2151.582642][T22102] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2151.632942][T22102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2151.684364][T22102] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2151.770421][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:2. Sending cookies. [ 2151.776024][T22507] netlink: 'syz.1.3465': attribute type 5 has an invalid length. [ 2151.946985][T22102] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2151.989949][T22102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2152.030053][T22102] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2152.056396][T22514] 9pnet_virtio: no channels available for device syz [ 2152.093761][T22102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2152.132673][T22102] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2152.212272][T22102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2152.295463][T22102] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2152.338934][T22102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2152.357776][T22102] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2152.387878][T22102] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2152.421851][T22102] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2152.450990][T22102] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2152.467197][T22102] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2152.909433][T20756] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2152.949295][T20756] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2153.021401][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2153.052214][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2154.933274][T22559] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3474'. [ 2155.112051][T22558] ntfs3: nullb0: Primary boot signature is not NTFS. [ 2155.119041][T22558] ntfs3: nullb0: try to read out of volume at offset 0x3e7ffffe00 [ 2155.633387][T13274] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 2156.802083][T13274] usb 2-1: config 36 interface 0 altsetting 0 endpoint 0xFF has an invalid bInterval 0, changing to 7 [ 2156.825598][T13274] usb 2-1: config 36 interface 0 altsetting 0 endpoint 0xFF has invalid wMaxPacketSize 0 [ 2156.875542][T13274] usb 2-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29 [ 2156.909191][T13274] usb 2-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 2156.942744][T13274] usb 2-1: Manufacturer: syz [ 2156.970021][T13274] usb 2-1: SerialNumber: syz [ 2157.374959][ T4478] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 2157.693998][T22577] xt_CT: You must specify a L4 protocol and not use inversions on it [ 2157.761727][T13274] yealink 2-1:36.0: invalid payload size 0, expected 16 [ 2157.788348][T13274] input: Yealink usb-p1k as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:36.0/input/input60 [ 2157.913030][ C0] yealink 2-1:36.0: urb_ctl_callback - urb status -71 [ 2157.920251][ C0] yealink 2-1:36.0: urb_ctl_callback - urb status -71 [ 2157.927446][ C0] yealink 2-1:36.0: urb_ctl_callback - urb status -71 [ 2157.934600][ C0] yealink 2-1:36.0: urb_ctl_callback - urb status -71 [ 2157.941699][ C0] yealink 2-1:36.0: urb_ctl_callback - urb status -71 [ 2157.948760][ C0] yealink 2-1:36.0: urb_ctl_callback - urb status -71 [ 2157.955792][ C0] yealink 2-1:36.0: urb_ctl_callback - urb status -71 [ 2157.962889][ C0] yealink 2-1:36.0: urb_ctl_callback - urb status -71 [ 2157.969714][ C0] yealink 2-1:36.0: urb_ctl_callback - usb_submit_urb failed -90 [ 2158.033006][T13274] usb 2-1: USB disconnect, device number 27 [ 2158.782249][T22594] xt_CT: You must specify a L4 protocol and not use inversions on it [ 2159.411174][T22035] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 2159.435405][T22035] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 2159.447604][T22035] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 2159.590334][T22035] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 2159.599751][T22035] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 2160.055346][T22035] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 2160.190330][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2160.339851][T22614] 9pnet_virtio: no channels available for device syz [ 2160.510037][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2160.852185][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2160.876855][T22619] xt_CT: You must specify a L4 protocol and not use inversions on it [ 2160.901263][T22619] syz.1.3486: attempt to access beyond end of device [ 2160.901263][T22619] nbd1: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 2160.931075][T22619] SQUASHFS error: Failed to read block 0x0: -5 [ 2160.938769][T22619] unable to read squashfs_super_block [ 2161.218392][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2161.483815][T22622] ntfs3: nullb0: Primary boot signature is not NTFS. [ 2161.490697][T22622] ntfs3: nullb0: try to read out of volume at offset 0x3e7ffffe00 [ 2162.196066][T22035] Bluetooth: hci1: command tx timeout [ 2162.556100][ T12] bridge_slave_1: left allmulticast mode [ 2162.568745][ T12] bridge_slave_1: left promiscuous mode [ 2162.653089][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 2162.702239][ T12] bridge_slave_0: left allmulticast mode [ 2162.718685][ T12] bridge_slave_0: left promiscuous mode [ 2162.737311][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 2164.274610][T22035] Bluetooth: hci1: command tx timeout [ 2164.376251][ T5158] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 2164.622728][ T5158] usb 3-1: Using ep0 maxpacket: 8 [ 2164.630989][ T5158] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 2164.640413][ T5158] usb 3-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 2164.652336][ T5158] usb 3-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 2164.670231][ T5158] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 2164.732729][ T5158] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2164.825818][ T5158] usbtmc 3-1:16.0: bulk endpoints not found [ 2164.984341][T22653] ntfs3: nullb0: Primary boot signature is not NTFS. [ 2164.992979][T22653] ntfs3: nullb0: try to read out of volume at offset 0x3e7ffffe00 [ 2165.139291][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2165.190269][ T12] bond0 (unregistering): Released all slaves [ 2165.551432][T22658] 9pnet_virtio: no channels available for device syz [ 2165.974282][T22605] chnl_net:caif_netlink_parms(): no params data found [ 2166.057184][ T1252] ieee802154 phy0 wpan0: encryption failed: -22 [ 2166.063704][ T1252] ieee802154 phy1 wpan1: encryption failed: -22 [ 2166.353056][T22035] Bluetooth: hci1: command tx timeout [ 2166.997511][T22677] ntfs3: nullb0: Primary boot signature is not NTFS. [ 2167.004513][T22677] ntfs3: nullb0: try to read out of volume at offset 0x3e7ffffe00 [ 2167.488807][ T9] usb 3-1: USB disconnect, device number 33 [ 2168.434992][T22035] Bluetooth: hci1: command tx timeout [ 2168.628301][ T12] hsr_slave_0: left promiscuous mode [ 2168.646688][ T12] hsr_slave_1: left promiscuous mode [ 2168.653907][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2168.653976][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2168.654953][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2168.654985][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2168.860925][ T12] veth1_macvtap: left promiscuous mode [ 2168.861067][ T12] veth0_macvtap: left promiscuous mode [ 2168.861416][ T12] veth1_vlan: left promiscuous mode [ 2168.861700][ T12] veth0_vlan: left promiscuous mode [ 2172.382738][T19931] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 2176.385190][T19931] usb 4-1: Using ep0 maxpacket: 8 [ 2177.382984][T19931] usb 4-1: device descriptor read/all, error -71 [ 2228.408652][ T1252] ieee802154 phy0 wpan0: encryption failed: -22 [ 2228.408753][ T1252] ieee802154 phy1 wpan1: encryption failed: -22 [ 2233.385003][ T4478] Bluetooth: hci0: command 0x0406 tx timeout [ 2289.407712][ T1252] ieee802154 phy0 wpan0: encryption failed: -22 [ 2289.407816][ T1252] ieee802154 phy1 wpan1: encryption failed: -22 [ 2290.405868][ T4478] Bluetooth: hci1: command 0x0406 tx timeout [ 2323.382721][ T30] INFO: task dhcpcd:4748 blocked for more than 146 seconds. [ 2323.382800][ T30] Not tainted 6.10.0-rc6-syzkaller-00215-g22f902dfc51e #0 [ 2323.382825][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2323.382840][ T30] task:dhcpcd state:D stack:23352 pid:4748 tgid:4748 ppid:4747 flags:0x00000002 [ 2323.382898][ T30] Call Trace: [ 2323.382912][ T30] [ 2323.382930][ T30] __schedule+0xf15/0x5d00 [ 2323.382976][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 2323.383039][ T30] ? __pfx___schedule+0x10/0x10 [ 2323.383079][ T30] ? schedule+0x298/0x350 [ 2323.383115][ T30] ? __pfx_lock_release+0x10/0x10 [ 2323.383170][ T30] ? __mutex_lock+0x5b3/0x9c0 [ 2323.383213][ T30] ? __mutex_trylock_common+0x78/0x250 [ 2323.383274][ T30] schedule+0xe7/0x350 [ 2323.383313][ T30] schedule_preempt_disabled+0x13/0x30 [ 2323.383357][ T30] __mutex_lock+0x5b8/0x9c0 [ 2323.383414][ T30] ? devinet_ioctl+0x26e/0x1f10 [ 2323.383465][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 2323.383511][ T30] ? __pfx_lock_release+0x10/0x10 [ 2323.383567][ T30] ? security_capable+0x98/0xd0 [ 2323.383620][ T30] ? devinet_ioctl+0x26e/0x1f10 [ 2323.383669][ T30] devinet_ioctl+0x26e/0x1f10 [ 2323.383719][ T30] ? __might_fault+0xe3/0x190 [ 2323.383757][ T30] ? __pfx_devinet_ioctl+0x10/0x10 [ 2323.383807][ T30] ? _copy_from_user+0x5d/0xf0 [ 2323.383848][ T30] inet_ioctl+0x3aa/0x3f0 [ 2323.383901][ T30] ? __pfx_inet_ioctl+0x10/0x10 [ 2323.383962][ T30] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 2323.384002][ T30] sock_do_ioctl+0x116/0x280 [ 2323.384039][ T30] ? __pfx_sock_do_ioctl+0x10/0x10 [ 2323.384077][ T30] ? ioctl_has_perm.constprop.0.isra.0+0x2f9/0x470 [ 2323.384123][ T30] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 2323.384172][ T30] sock_ioctl+0x22e/0x6c0 [ 2323.384210][ T30] ? __pfx_sock_ioctl+0x10/0x10 [ 2323.384250][ T30] ? selinux_file_ioctl+0x180/0x270 [ 2323.384291][ T30] ? selinux_file_ioctl+0xb4/0x270 [ 2323.384333][ T30] ? __pfx_sock_ioctl+0x10/0x10 [ 2323.384371][ T30] __x64_sys_ioctl+0x193/0x220 [ 2323.384442][ T30] do_syscall_64+0xcd/0x250 [ 2323.384495][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2323.384555][ T30] RIP: 0033:0x7faa15e02d49 [ 2323.384583][ T30] RSP: 002b:00007fffa4111898 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2323.384620][ T30] RAX: ffffffffffffffda RBX: 00007faa15d346c0 RCX: 00007faa15e02d49 [ 2323.384648][ T30] RDX: 00007fffa4121a88 RSI: 0000000000008914 RDI: 0000000000000018 [ 2323.384673][ T30] RBP: 00007fffa4131c48 R08: 00007fffa4121a48 R09: 00007fffa41219f8 [ 2323.384700][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2323.384725][ T30] R13: 00007fffa4121a88 R14: 0000000000000028 R15: 0000000000008914 [ 2323.384757][ T30] [ 2323.384779][ T30] INFO: task kworker/1:5:5139 blocked for more than 146 seconds. [ 2323.384803][ T30] Not tainted 6.10.0-rc6-syzkaller-00215-g22f902dfc51e #0 [ 2323.384827][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2323.384842][ T30] task:kworker/1:5 state:D stack:23184 pid:5139 tgid:5139 ppid:2 flags:0x00004000 [ 2323.384899][ T30] Workqueue: events linkwatch_event [ 2323.384948][ T30] Call Trace: [ 2323.384961][ T30] [ 2323.384977][ T30] __schedule+0xf15/0x5d00 [ 2323.385016][ T30] ? __pfx___schedule+0x10/0x10 [ 2323.385054][ T30] ? __pfx_mark_lock+0x10/0x10 [ 2323.385113][ T30] ? __pfx___schedule+0x10/0x10 [ 2323.385152][ T30] ? schedule+0x298/0x350 [ 2323.385190][ T30] ? __pfx_lock_release+0x10/0x10 [ 2323.385250][ T30] schedule+0xe7/0x350 [ 2323.385289][ T30] schedule_preempt_disabled+0x13/0x30 [ 2323.385333][ T30] __mutex_lock+0x5b8/0x9c0 [ 2323.385386][ T30] ? linkwatch_event+0x51/0xc0 [ 2323.385437][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 2323.385485][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 2323.385541][ T30] ? __pfx_lock_release+0x10/0x10 [ 2323.385598][ T30] ? linkwatch_event+0x51/0xc0 [ 2323.385647][ T30] ? rtnl_lock+0x9/0x20 [ 2323.385696][ T30] linkwatch_event+0x51/0xc0 [ 2323.385749][ T30] ? __pfx_linkwatch_event+0x10/0x10 [ 2323.385800][ T30] ? rcu_is_watching+0x12/0xc0 [ 2323.385836][ T30] process_one_work+0x9c5/0x1b40 [ 2323.385880][ T30] ? __pfx_nsim_dev_hwstats_traffic_work+0x10/0x10 [ 2323.385939][ T30] ? __pfx_process_one_work+0x10/0x10 [ 2323.385981][ T30] ? assign_work+0x1a0/0x250 [ 2323.386037][ T30] worker_thread+0x6c8/0xf30 [ 2323.386079][ T30] ? __kthread_parkme+0x148/0x220 [ 2323.386126][ T30] ? __pfx_worker_thread+0x10/0x10 [ 2323.386165][ T30] kthread+0x2c1/0x3a0 [ 2323.386227][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 2323.386267][ T30] ? __pfx_kthread+0x10/0x10 [ 2323.386313][ T30] ret_from_fork+0x45/0x80 [ 2323.386365][ T30] ? __pfx_kthread+0x10/0x10 [ 2323.386417][ T30] ret_from_fork_asm+0x1a/0x30 [ 2323.386478][ T30] [ 2323.386512][ T30] INFO: task syz-executor:22605 blocked for more than 146 seconds. [ 2323.386537][ T30] Not tainted 6.10.0-rc6-syzkaller-00215-g22f902dfc51e #0 [ 2323.386560][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2323.386576][ T30] task:syz-executor state:D stack:24656 pid:22605 tgid:22605 ppid:1 flags:0x00004004 [ 2323.386632][ T30] Call Trace: [ 2323.386645][ T30] [ 2323.386662][ T30] __schedule+0xf15/0x5d00 [ 2323.386701][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 2323.386762][ T30] ? __pfx___schedule+0x10/0x10 [ 2323.386801][ T30] ? schedule+0x298/0x350 [ 2323.386838][ T30] ? __pfx_lock_release+0x10/0x10 [ 2323.386892][ T30] ? __mutex_lock+0x5b3/0x9c0 [ 2323.386936][ T30] ? __mutex_trylock_common+0x78/0x250 [ 2323.386995][ T30] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 2323.387037][ T30] schedule+0xe7/0x350 [ 2323.387076][ T30] schedule_preempt_disabled+0x13/0x30 [ 2323.387120][ T30] __mutex_lock+0x5b8/0x9c0 [ 2323.387167][ T30] ? rtnetlink_rcv_msg+0x372/0xea0 [ 2323.387211][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 2323.387263][ T30] ? rtnetlink_rcv_msg+0x372/0xea0 [ 2323.387305][ T30] rtnetlink_rcv_msg+0x372/0xea0 [ 2323.387351][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 2323.387403][ T30] ? avc_has_perm+0x11b/0x1c0 [ 2323.387447][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 2323.387502][ T30] ? __pfx_avc_has_perm+0x10/0x10 [ 2323.387547][ T30] ? __lock_acquire+0xc5d/0x3b30 [ 2323.387604][ T30] netlink_rcv_skb+0x16b/0x440 [ 2323.387655][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 2323.387701][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 2323.387758][ T30] ? netlink_deliver_tap+0x1ae/0xd90 [ 2323.387807][ T30] netlink_unicast+0x542/0x820 [ 2323.387859][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 2323.387912][ T30] netlink_sendmsg+0x8b8/0xd70 [ 2323.387964][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2323.388018][ T30] __sys_sendto+0x47f/0x4e0 [ 2323.388063][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 2323.388114][ T30] ? __pfx_task_mm_cid_work+0x10/0x10 [ 2323.388172][ T30] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 2323.388221][ T30] __x64_sys_sendto+0xe0/0x1c0 [ 2323.388267][ T30] ? do_syscall_64+0x91/0x250 [ 2323.388317][ T30] ? lockdep_hardirqs_on+0x7c/0x110 [ 2323.388363][ T30] do_syscall_64+0xcd/0x250 [ 2323.388419][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2323.388477][ T30] RIP: 0033:0x7f02b797796c [ 2323.388503][ T30] RSP: 002b:00007ffe54fba1c0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 2323.388542][ T30] RAX: ffffffffffffffda RBX: 00007f02b8634620 RCX: 00007f02b797796c [ 2323.388568][ T30] RDX: 000000000000006c RSI: 00007f02b8634670 RDI: 0000000000000003 [ 2323.388595][ T30] RBP: 0000000000000000 R08: 00007ffe54fba214 R09: 000000000000000c [ 2323.388621][ T30] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 2323.388648][ T30] R13: 0000000000000000 R14: 00007f02b8634670 R15: 0000000000000000 [ 2323.388692][ T30] [ 2323.388714][ T30] [ 2323.388714][ T30] Showing all locks held in the system: [ 2323.388729][ T30] 5 locks held by kworker/u8:1/12: [ 2323.388751][ T30] #0: ffff8880162d3148 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x1277/0x1b40 [ 2323.388841][ T30] #1: ffffc90000117d80 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x921/0x1b40 [ 2323.388928][ T30] #2: ffffffff8f732fd0 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0xbb/0xbf0 [ 2323.389028][ T30] #3: ffffffff8f748268 (rtnl_mutex){+.+.}-{3:3}, at: default_device_exit_batch+0x8c/0xae0 [ 2323.389127][ T30] #4: ffffffff8dbbcdb8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: exp_funnel_lock+0x1a4/0x3b0 [ 2323.389220][ T30] 1 lock held by kworker/R-mm_pe/13: [ 2323.389242][ T30] #0: ffffffff8da6b748 (wq_pool_attach_mutex){+.+.}-{3:3}, at: worker_detach_from_pool+0x95/0x3f0 [ 2323.389349][ T30] 1 lock held by khungtaskd/30: [ 2323.389371][ T30] #0: ffffffff8dbb1620 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x75/0x340 [ 2323.389485][ T30] 3 locks held by kworker/u8:3/51: [ 2323.389509][ T30] 3 locks held by kworker/u8:4/61: [ 2323.389532][ T30] 3 locks held by kworker/u8:5/81: [ 2323.389563][ T30] 3 locks held by kworker/u8:6/1039: [ 2323.389601][ T30] 1 lock held by dhcpcd/4748: [ 2323.389623][ T30] #0: ffffffff8f748268 (rtnl_mutex){+.+.}-{3:3}, at: devinet_ioctl+0x26e/0x1f10 [ 2323.389743][ T30] 2 locks held by getty/4840: [ 2323.389764][ T30] #0: ffff88802b0730a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 2323.389873][ T30] #1: ffffc900031232f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0xfc8/0x1490 [ 2323.389978][ T30] 3 locks held by kworker/1:5/5139: [ 2323.390001][ T30] #0: ffff888015480948 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x1277/0x1b40 [ 2323.390092][ T30] #1: ffffc9000325fd80 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work+0x921/0x1b40 [ 2323.390183][ T30] #2: ffffffff8f748268 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0x51/0xc0 [ 2323.390286][ T30] 3 locks held by kworker/0:6/5158: [ 2323.390309][ T30] #0: ffff888015481948 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_one_work+0x1277/0x1b40 [ 2323.390407][ T30] #1: ffffc9000392fd80 ((reg_check_chans).work){+.+.}-{0:0}, at: process_one_work+0x921/0x1b40 [ 2323.390498][ T30] #2: ffffffff8f748268 (rtnl_mutex){+.+.}-{3:3}, at: reg_check_chans_work+0x7d/0x10e0 [ 2323.390588][ T30] 2 locks held by kworker/u8:12/7347: [ 2323.390610][ T30] 3 locks held by kworker/u8:13/7808: [ 2323.390633][ T30] 3 locks held by kworker/0:0/13113: [ 2323.390657][ T30] 4 locks held by kworker/u8:0/13276: [ 2323.390680][ T30] 3 locks held by kworker/0:4/16931: [ 2323.390703][ T30] 1 lock held by syz-executor/17187: [ 2323.390728][ T30] 3 locks held by kworker/0:2/19931: [ 2323.390750][ T30] #0: ffff888015480948 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x1277/0x1b40 [ 2323.390840][ T30] #1: ffffc900033d7d80 (deferred_process_work){+.+.}-{0:0}, at: process_one_work+0x921/0x1b40 [ 2323.390932][ T30] #2: ffffffff8f748268 (rtnl_mutex){+.+.}-{3:3}, at: switchdev_deferred_process_work+0xe/0x20 [ 2323.391036][ T30] 3 locks held by kworker/u8:2/20591: [ 2323.391059][ T30] #0: ffff88802a42f948 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x1277/0x1b40 [ 2323.391150][ T30] #1: ffffc900033b7d80 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_one_work+0x921/0x1b40 [ 2323.391245][ T30] #2: ffffffff8f748268 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_verify_work+0x12/0x30 [ 2323.391336][ T30] 3 locks held by kworker/u8:9/20756: [ 2323.391358][ T30] 1 lock held by kworker/R-wg-cr/20937: [ 2323.391387][ T30] #0: ffffffff8da6b748 (wq_pool_attach_mutex){+.+.}-{3:3}, at: worker_attach_to_pool+0x27/0x420 [ 2323.391498][ T30] 1 lock held by kworker/R-wg-cr/22181: [ 2323.391520][ T30] 1 lock held by syz-executor/22605: [ 2323.391543][ T30] #0: ffffffff8f748268 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x372/0xea0 [ 2323.391637][ T30] 1 lock held by syz.2.3500/22688: [ 2323.391661][ T30] 5 locks held by syz.4.3502/22691: [ 2323.391684][ T30] 1 lock held by syz.1.3507/22723: [ 2323.391706][ T30] #0: ffffffff8f748268 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3e/0x250 [ 2323.391807][ T30] 3 locks held by kworker/u8:10/22729: [ 2323.391831][ T30] 3 locks held by kworker/1:6/22732: [ 2323.391854][ T30] 2 locks held by kworker/u8:11/22733: [ 2323.391878][ T30] 1 lock held by syz-executor/22736: [ 2323.391901][ T30] [ 2323.391910][ T30] ============================================= [ 2323.391910][ T30] [ 2323.391934][ T30] NMI backtrace for cpu 0 [ 2323.391950][ T30] CPU: 0 PID: 30 Comm: khungtaskd Not tainted 6.10.0-rc6-syzkaller-00215-g22f902dfc51e #0 [ 2323.391987][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 2323.392008][ T30] Call Trace: [ 2323.392022][ T30] [ 2323.392035][ T30] dump_stack_lvl+0x116/0x1f0 [ 2323.392078][ T30] nmi_cpu_backtrace+0x27b/0x390 [ 2323.392131][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 2323.392182][ T30] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 2323.392238][ T30] watchdog+0xf86/0x1240 [ 2323.392277][ T30] ? __pfx_watchdog+0x10/0x10 [ 2323.392312][ T30] ? lockdep_hardirqs_on+0x7c/0x110 [ 2323.392358][ T30] ? __kthread_parkme+0x148/0x220 [ 2323.392407][ T30] ? __pfx_watchdog+0x10/0x10 [ 2323.392443][ T30] kthread+0x2c1/0x3a0 [ 2323.392488][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 2323.392525][ T30] ? __pfx_kthread+0x10/0x10 [ 2323.392567][ T30] ret_from_fork+0x45/0x80 [ 2323.392615][ T30] ? __pfx_kthread+0x10/0x10 [ 2323.392658][ T30] ret_from_fork_asm+0x1a/0x30 [ 2323.392716][ T30] [ 2323.392805][ T30] Sending NMI from CPU 0 to CPUs 1: [ 2323.392840][ C1] NMI backtrace for cpu 1 [ 2323.392860][ C1] CPU: 1 PID: 22732 Comm: kworker/1:6 Not tainted 6.10.0-rc6-syzkaller-00215-g22f902dfc51e #0 [ 2323.392890][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 2323.392908][ C1] Workqueue: events_power_efficient gc_worker [ 2323.392949][ C1] RIP: 0010:kasan_check_range+0x1b/0x1a0 [ 2323.392983][ C1] Code: 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 66 0f 1f 00 48 85 f6 0f 84 50 01 00 00 48 89 f8 41 54 44 0f b6 c2 48 01 f0 55 53 <0f> 82 c6 00 00 00 48 b8 ff ff ff ff ff 7f ff ff 48 39 f8 0f 83 b3 [ 2323.393010][ C1] RSP: 0018:ffffc90003437958 EFLAGS: 00000082 [ 2323.393030][ C1] RAX: ffffffff94265358 RBX: 000000000000048d RCX: ffffffff816ae7ce [ 2323.393049][ C1] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff94265350 [ 2323.393066][ C1] RBP: ffffffff942670a8 R08: 0000000000000000 R09: fffffbfff284ca6a [ 2323.393084][ C1] R10: ffffffff94265357 R11: 0000000000000003 R12: 0000000000000000 [ 2323.393102][ C1] R13: 000000000000048d R14: ffff88801868c758 R15: 000000000000048d [ 2323.393120][ C1] FS: 0000000000000000(0000) GS:ffff8880b9300000(0000) knlGS:0000000000000000 [ 2323.393146][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2323.393166][ C1] CR2: 0000558196917318 CR3: 0000000063d3c000 CR4: 00000000003506f0 [ 2323.393184][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2323.393201][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 2323.393218][ C1] Call Trace: [ 2323.393227][ C1] [ 2323.393236][ C1] ? show_regs+0x8c/0xa0 [ 2323.393274][ C1] ? nmi_cpu_backtrace+0x1d8/0x390 [ 2323.393314][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 2323.393349][ C1] ? nmi_handle+0x1a9/0x5c0 [ 2323.393390][ C1] ? kasan_check_range+0x1b/0x1a0 [ 2323.393419][ C1] ? default_do_nmi+0x6a/0x160 [ 2323.393444][ C1] ? exc_nmi+0x170/0x1e0 [ 2323.393467][ C1] ? end_repeat_nmi+0xf/0x53 [ 2323.393494][ C1] ? hlock_class+0x4e/0x130 [ 2323.393525][ C1] ? kasan_check_range+0x1b/0x1a0 [ 2323.393554][ C1] ? kasan_check_range+0x1b/0x1a0 [ 2323.393584][ C1] ? kasan_check_range+0x1b/0x1a0 [ 2323.393613][ C1] [ 2323.393621][ C1] [ 2323.393637][ C1] hlock_class+0x4e/0x130 [ 2323.393668][ C1] __lock_acquire+0x14f4/0x3b30 [ 2323.393711][ C1] ? hlock_class+0x4e/0x130 [ 2323.393742][ C1] ? __pfx___lock_acquire+0x10/0x10 [ 2323.393783][ C1] ? __pfx_mark_lock+0x10/0x10 [ 2323.393821][ C1] lock_acquire+0x1b1/0x560 [ 2323.393861][ C1] ? process_one_work+0x9c5/0x1b40 [ 2323.393888][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 2323.393929][ C1] ? __pfx___might_resched+0x10/0x10 [ 2323.393960][ C1] gc_worker+0xe86/0x1770 [ 2323.394000][ C1] ? process_one_work+0x9c5/0x1b40 [ 2323.394027][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 2323.394068][ C1] ? __pfx_gc_worker+0x10/0x10 [ 2323.394110][ C1] process_one_work+0x9c5/0x1b40 [ 2323.394140][ C1] ? __pfx_nsim_dev_trap_report_work+0x10/0x10 [ 2323.394169][ C1] ? __pfx_process_one_work+0x10/0x10 [ 2323.394198][ C1] ? assign_work+0x1a0/0x250 [ 2323.394238][ C1] worker_thread+0x6c8/0xf30 [ 2323.394267][ C1] ? __kthread_parkme+0x148/0x220 [ 2323.394299][ C1] ? __pfx_worker_thread+0x10/0x10 [ 2323.394326][ C1] kthread+0x2c1/0x3a0 [ 2323.394357][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 2323.394386][ C1] ? __pfx_kthread+0x10/0x10 [ 2323.394418][ C1] ret_from_fork+0x45/0x80 [ 2323.394456][ C1] ? __pfx_kthread+0x10/0x10 [ 2323.394488][ C1] ret_from_fork_asm+0x1a/0x30 [ 2323.394531][ C1] [ 2328.383149][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 2328.383174][ T30] CPU: 0 PID: 30 Comm: khungtaskd Not tainted 6.10.0-rc6-syzkaller-00215-g22f902dfc51e #0 [ 2328.383214][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 2328.383250][ T30] Call Trace: [ 2328.383265][ T30] [ 2328.383278][ T30] dump_stack_lvl+0x3d/0x1f0 [ 2328.383324][ T30] panic+0x6f5/0x7a0 [ 2328.383377][ T30] ? __pfx_panic+0x10/0x10 [ 2328.383427][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 2328.383465][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 2328.383513][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 2328.383549][ T30] ? watchdog+0xd3d/0x1240 [ 2328.383584][ T30] ? watchdog+0xd30/0x1240 [ 2328.383621][ T30] watchdog+0xd4e/0x1240 [ 2328.383658][ T30] ? __pfx_watchdog+0x10/0x10 [ 2328.383693][ T30] ? lockdep_hardirqs_on+0x7c/0x110 [ 2328.383737][ T30] ? __kthread_parkme+0x148/0x220 [ 2328.383782][ T30] ? __pfx_watchdog+0x10/0x10 [ 2328.383817][ T30] kthread+0x2c1/0x3a0 [ 2328.383859][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 2328.383896][ T30] ? __pfx_kthread+0x10/0x10 [ 2328.383939][ T30] ret_from_fork+0x45/0x80 [ 2328.383990][ T30] ? __pfx_kthread+0x10/0x10 [ 2328.384033][ T30] ret_from_fork_asm+0x1a/0x30 [ 2328.384090][ T30] [ 2328.384403][ T30] Kernel Offset: disabled