last executing test programs: 20m53.607211494s ago: executing program 4 (id=639): prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_dev$loop(0x0, 0x75d, 0x2480) userfaultfd(0x801) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) 20m52.567220179s ago: executing program 4 (id=641): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = gettid() tkill(r3, 0x2a) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x42, 0x0) r5 = fanotify_init(0xef0, 0x2) fanotify_mark(r5, 0x105, 0x40009965, r4, 0x0) ioctl$NBD_CLEAR_SOCK(r4, 0xab04) epoll_pwait(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0, 0x0) 20m49.346545084s ago: executing program 4 (id=645): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1ff) mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x800000, 0x0) chdir(&(0x7f0000000240)='./file0\x00') open(&(0x7f00009e1000)='./file0\x00', 0x8060, 0x0) link(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x1000) 20m46.959441493s ago: executing program 4 (id=649): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ef) lsetxattr$security_capability(&(0x7f0000000340)='./file1\x00', 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c8) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) truncate(&(0x7f0000000140)='./file0/file1\x00', 0xe2) 20m43.800037849s ago: executing program 4 (id=651): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) syz_open_dev$usbmon(0x0, 0xffffffffffc00000, 0x51241) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x7, 0x0, 0x0) socket$inet6(0xa, 0x80002, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x0, 0x1, @ipv4={'\x00', '\xff\xff', @local}, 0x100}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) r4 = socket$inet6(0x10, 0x2, 0x4) sendto$inet6(r4, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x810, 0x0, 0x0) 20m38.468572149s ago: executing program 4 (id=661): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ef) lsetxattr$security_capability(&(0x7f0000000340)='./file1\x00', 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c8) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) truncate(&(0x7f0000000140)='./file0/file1\x00', 0xe2) 20m22.22349487s ago: executing program 32 (id=661): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ef) lsetxattr$security_capability(&(0x7f0000000340)='./file1\x00', 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c8) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) truncate(&(0x7f0000000140)='./file0/file1\x00', 0xe2) 14m28.967410518s ago: executing program 3 (id=1157): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000340)=0x6) r3 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r3, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbfb, 0x8000}, 0xc) keyctl$get_persistent(0x16, 0x0, 0xfffffffffffffffe) r4 = socket$tipc(0x1e, 0x5, 0x0) listen(r4, 0x0) setsockopt$sock_timeval(r4, 0x1, 0x14, &(0x7f0000000040)={0x0, 0x2710}, 0x10) recvmsg(r4, &(0x7f0000007d00)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000240)=""/83, 0x53}], 0x1}, 0x0) r5 = syz_socket_connect_nvme_tcp() recvmsg$inet_nvme(r5, &(0x7f00000008c0)={&(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000380)=""/246, 0xf6}, {&(0x7f0000000480)=""/66, 0x42}, {&(0x7f0000000500)=""/1, 0x1}, {&(0x7f0000000640)=""/58, 0x3a}, {&(0x7f0000000680)=""/224, 0xe0}], 0x5, &(0x7f0000000800)=""/186, 0xba}, 0x2002) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1b9) mount(0x0, 0x0, &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./proc/mtrr\x00', 0x80001, 0x41) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r7) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r7, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x24, r8, 0x331, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r9}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x22040000}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r8, 0x10, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xfffffff7}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x80000001}]}, 0x24}, 0x1, 0x0, 0x0, 0x4008000}, 0x10) syz_ublk_setup_queues(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) 14m27.6233519s ago: executing program 3 (id=1158): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1ff) mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x800000, 0x0) open(&(0x7f00009e1000)='./file0\x00', 0x8060, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) name_to_handle_at(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x1000) 14m26.719205932s ago: executing program 3 (id=1160): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0xa27}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, 0x0) ioctl$XFS_IOC_PATH_TO_HANDLE(r1, 0xc0385869, &(0x7f0000000400)={r1, &(0x7f0000000080)='wg1\x00', 0x800, &(0x7f00000001c0)={@_ha_fsid={[0x7, 0x5]}, {0x2, 0x1bcc, 0x3, 0x10001}}, 0x7, &(0x7f0000000280)={@_ha_fsid}, &(0x7f0000000300)=0x9}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sendmsg$WG_CMD_GET_DEVICE(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)={0x28, r2, 0x301, 0x70bd2c, 0x25dfdbfe, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000c1}, 0x20040000) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000700)={'syz0\x00', {0x0, 0xe5e4, 0x0, 0x9}, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80000000, 0x0, 0x0, 0x0, 0x8, 0x0, 0x2000001, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0xfffffffc, 0x4, 0xfffffefe, 0x0, 0xf6, 0x0, 0x0, 0x3, 0x1, 0x9, 0x0, 0x0, 0x80001ff, 0x4, 0x0, 0x1, 0x7fffffff, 0x2, 0x4000000, 0xfffffffd, 0x5, 0x0, 0xfdfffffe, 0x4, 0x0, 0x0, 0x0, 0x0, 0x5, 0xfffffffe, 0xffffffff, 0x7b67], [0x0, 0x0, 0x0, 0x3, 0x3, 0x0, 0xfffffffe, 0x3, 0x0, 0x0, 0x9b05, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0xfffffff8, 0xfffffffc, 0x2, 0x7, 0x5, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x6, 0x0, 0xffffffff, 0xfffffffc, 0x0, 0x0, 0xc33, 0xffffffff, 0x1a0d, 0x39, 0xaecd, 0x10, 0x0, 0x3, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc], [0x1, 0x0, 0x567, 0x4, 0x0, 0x0, 0x0, 0x9, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000005, 0x0, 0x0, 0x0, 0x0, 0x3, 0x10000000, 0x0, 0x101, 0xfffffffe, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xfffffffd, 0x0, 0x0, 0x4000000d, 0xffffffff, 0x0, 0x9, 0x3, 0x0, 0x14, 0x1, 0x0, 0x400a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x1d, 0x400, 0x0, 0x8, 0x4000002, 0x0, 0x100000], [0x0, 0x1ff, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffe, 0xf7b, 0x0, 0x0, 0x0, 0xaad, 0x10000, 0x80000, 0x0, 0x8, 0x0, 0x3e8, 0xfffffffd, 0x10000001, 0x0, 0x0, 0x5861, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x13, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x101, 0xfffffffe, 0x0, 0x5, 0x0, 0x1]}, 0x45c) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r6, &(0x7f0000000040), 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1100, 0x2}) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) dup3(r7, 0xffffffffffffffff, 0x0) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/custom1\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r8, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000006c0)={0x68, 0x0, &(0x7f0000000380)=[@transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}, @request_death={0x400c630e, 0x3}, @dead_binder_done], 0x53, 0x0, &(0x7f0000000600)="f3774e72e5d8a4bb4ee16628a0bf1ba0eb8436558ac0c0b67767414866609ebe207757b65922e3cd55457833645908160523322b46ff92d061b19cb89dcb5a79a5aeabce6b3cb0a21a2ed5788a94b2a55efc53"}) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)={0x14, 0x15, 0x301, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) 14m23.051471172s ago: executing program 3 (id=1166): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000340)=0x6) r3 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r3, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbfb, 0x8000}, 0xc) keyctl$get_persistent(0x16, 0x0, 0xfffffffffffffffe) r4 = socket$tipc(0x1e, 0x5, 0x0) listen(r4, 0x0) setsockopt$sock_timeval(r4, 0x1, 0x14, &(0x7f0000000040)={0x0, 0x2710}, 0x10) recvmsg(r4, &(0x7f0000007d00)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000240)=""/83, 0x53}], 0x1}, 0x0) r5 = socket$netlink(0x10, 0x3, 0xc) syz_socket_connect_nvme_tcp() mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1b9) mount(0x0, 0x0, &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./proc/mtrr\x00', 0x80001, 0x41) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r7) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r7, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x24, r8, 0x331, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r9}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x22040000}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r8, 0x10, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xfffffff7}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x80000001}]}, 0x24}, 0x1, 0x0, 0x0, 0x4008000}, 0x10) syz_ublk_setup_queues(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) 14m21.768065329s ago: executing program 3 (id=1167): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) syz_open_dev$usbmon(0x0, 0xffffffffffc00000, 0x51241) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, 0x0, 0x0) setsockopt$sock_int(r4, 0x1, 0x7, 0x0, 0x0) socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x1, @ipv4={'\x00', '\xff\xff', @local}, 0x100}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) r5 = socket$inet6(0x10, 0x2, 0x4) sendto$inet6(r5, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd80000", 0x4b, 0x810, 0x0, 0x0) 14m17.43508103s ago: executing program 3 (id=1176): syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$l2tp6(0xa, 0x2, 0x73) r0 = getpgid(0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000005c0)=ANY=[], 0x0, 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$inet6(0xa, 0x80002, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket(0x2d, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r4, 0x89fa, &(0x7f0000000040)={'sit0\x00', &(0x7f0000000000)={@remote, @broadcast, 0xb, 0xfffe}}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, 0x0) socket$kcm(0x2d, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r5 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_EXPBUF(r5, 0xc0405610, &(0x7f0000000040)={0x2, 0x0, 0x20}) close(0x3) setsockopt$inet_sctp6_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x17, &(0x7f0000000440)=ANY=[@ANYRES32=0x0, @ANYBLOB="06"], 0x9) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) 14m1.363658401s ago: executing program 33 (id=1176): syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$l2tp6(0xa, 0x2, 0x73) r0 = getpgid(0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000005c0)=ANY=[], 0x0, 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$inet6(0xa, 0x80002, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket(0x2d, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r4, 0x89fa, &(0x7f0000000040)={'sit0\x00', &(0x7f0000000000)={@remote, @broadcast, 0xb, 0xfffe}}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, 0x0) socket$kcm(0x2d, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r5 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_EXPBUF(r5, 0xc0405610, &(0x7f0000000040)={0x2, 0x0, 0x20}) close(0x3) setsockopt$inet_sctp6_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x17, &(0x7f0000000440)=ANY=[@ANYRES32=0x0, @ANYBLOB="06"], 0x9) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) 16.919011161s ago: executing program 0 (id=4035): rseq(0x0, 0x0, 0x1, 0x0) sendmsg$ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000540)={&(0x7f0000000480)={0x80, 0x0, 0x400, 0x70bd2c, 0x25dfdbff, {}, [@ETHTOOL_A_EEE_HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}, @ETHTOOL_A_EEE_HEADER={0x4}, @ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5, 0x6, 0x1}, @ETHTOOL_A_EEE_ENABLED={0x5}, @ETHTOOL_A_EEE_TX_LPI_TIMER={0x8, 0x7, 0x3}]}, 0x80}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000001) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000001c0)={0x10, 0x30, 0x1}, 0x10}], 0x1, 0x0, 0x0, 0x1}, 0x0) ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, &(0x7f0000000340)={0x5, 0x0, 0xfffffe3f, 0xfffffffd, 0x0, "4d6b55f6fe02bfc6aa7bd98ec07c05a8765ccb", 0x8000388, 0x800}) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000a40)=0x6) readv(0xffffffffffffffff, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="2000000010"], 0x20}}, 0x20000090) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="040302"], 0x4) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0xa8002, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000280)="c021", 0x1700}], 0x1) 15.365393183s ago: executing program 0 (id=4040): socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket(0x10, 0x803, 0x0) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x8, &(0x7f0000001340)=ANY=[@ANYBLOB="beaa00000000000079a008000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000bf0300000000000085000000c9000000b70000000000000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x22}, 0x94) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000023c0)=@newlink={0x38, 0x10, 0x1, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x40810, 0x1}, [@IFLA_GROUP={0x8}, @IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x10000}, @IFLA_TXQLEN={0x8, 0xd, 0x80}]}, 0x38}, 0x1, 0x0, 0x0, 0x24040051}, 0x4000000) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000002900), 0x4) bind$netlink(r2, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) syz_genetlink_get_family_id$ethtool(&(0x7f0000000a80), r0) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x5, &(0x7f0000000040)=0x3, 0x4) 14.730796196s ago: executing program 2 (id=4044): r0 = socket(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0x10}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, 0x0, 0x20000000) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x2000000) 13.954574106s ago: executing program 6 (id=4046): r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x200}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000009c0)={0x84, &(0x7f0000000500)=ANY=[@ANYBLOB="383312000000cdbc06"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 11.172665543s ago: executing program 5 (id=4053): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) prlimit64(0x0, 0x7, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) unshare(0x6020400) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) fsmount(r2, 0x0, 0x80) r3 = fsmount(0xffffffffffffffff, 0x0, 0x8) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000280)={@fallback=r3, 0x0, 0x0, 0xce2c, &(0x7f0000002100)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0}, 0x40) r4 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x961a02, 0x0) ioctl$TIOCSSOFTCAR(r4, 0x5453, 0x0) r5 = syz_open_dev$sndpcmp(0x0, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_UNLINK(r5, 0x40044160, 0x3) ioctl$int_in(0xffffffffffffffff, 0x5421, 0x0) 9.817350363s ago: executing program 5 (id=4054): prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x80000100008f}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x5, 0x8, 0x40, 0x5, 0x41}, 0x50) 8.911101669s ago: executing program 1 (id=4057): socket$igmp6(0xa, 0x3, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001140)=ANY=[], &(0x7f0000000140)='GPL\x00'}, 0x94) ioctl$TIOCNXCL(0xffffffffffffffff, 0x540d) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) setsockopt$packet_int(r0, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendto$inet(r1, &(0x7f0000000100)="1ce0", 0xffeb, 0x0, &(0x7f0000001100)={0x2, 0x0, @private}, 0x10) 7.458447732s ago: executing program 6 (id=4058): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, 0x0, 0x0) listen(r0, 0xfffffffc) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x720, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000440), 0x0, 0x100000000000000) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22, 0x2000000, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x840, 0x0, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$BTRFS_IOC_INO_PATHS(0xffffffffffffffff, 0xc0389423, 0x0) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) close(0x3) 7.441535868s ago: executing program 1 (id=4059): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, 0x0) 7.44044335s ago: executing program 5 (id=4060): r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r0, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) gettid() timer_create(0x0, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, 0x0) unshare(0xe040400) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) r1 = socket(0xa, 0x3, 0xff) ioctl$TIOCL_GETMOUSEREPORTING(0xffffffffffffffff, 0x541c, 0x0) setsockopt$inet6_int(r1, 0x29, 0x24, &(0x7f0000000040)=0x9, 0x4) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r2 = socket$unix(0x1, 0x1, 0x0) socket$unix(0x1, 0x1, 0x0) connect$unix(r2, 0x0, 0x0) 7.052834554s ago: executing program 5 (id=4061): setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x4001, 0x3, 0x300, 0x0, 0x700001b, 0x148, 0x0, 0x148, 0x268, 0x206, 0x240, 0x268, 0x240, 0x7fffffe, 0x0, {[{{@uncond, 0x1ea, 0xc8, 0xf0, 0x0, {0x390, 0x8f00}, [@inet=@rpfilter={{0x28}, {0x3}}, @common=@addrtype={{0x30}, {0xb07, 0x302, 0x20, 0x1}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@ip={@multicast2=0xe000001f, @empty, 0xffffffff, 0xffffffff, 'macvlan0\x00', 'dvmrp0\x00', {0xff}, {}, 0x6, 0x2, 0x4a}, 0x0, 0x110, 0x178, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'bridge_slave_1\x00', {0x21, 0xfffffffe, 0x0, 0xc, 0x0, 0x531aeecb, 0xc07, 0x0, 0x18}, {0xfff}}}, @common=@unspec=@ipvs={{0x48}, {@ipv6=@private0, [0xff, 0xffffff00], 0x4e22, 0x2b, 0x2, 0x4e20, 0x8, 0x38}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x2, 0x3, 0x3, 0xd, '\x00', 'syz0\x00', {0x54}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x360) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x8001}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000003c0)=@ccm_128={{0x303}, "63a7d38a4937c1fc", "5f90d5f023d7bd5bd799356c95abffc8", "09fe0891", "0aa3b9dd5fe7a771"}, 0x28) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001480)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$tun(r1, &(0x7f0000000340)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@ccm_128={{0x303}, "b421eba833d4b156", "56df2295bfda5c4f9fecff61beaa8bb4", "808065e3", "7f1f1c2ab4421d27"}, 0x28) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) recvfrom(r0, &(0x7f0000002800)=""/4071, 0xfffffffffffffdab, 0x17, 0x0, 0x0) writev(r0, &(0x7f0000001400)=[{&(0x7f0000000140)="58ddb007a47a8b1f458ab677d557ca50def8e5bc61dbc50bca64f7e76268cd64007095adfef77465b69ec03139854d6f03d5f9bd019fe046035ef7049f48fcc7321c34faca94ff08f59edaf2ab55eedcc278df823564618627217a527b971bdfa0afd948a6cdb9e05ccaef35c22047246a7b97a8e1b645e51c47b296c759c8dfd56beb8fa15c800ad060ab378a269557bc053d9be903", 0x96}, {&(0x7f0000000300)="2ea63d218bc1023b2e6eceeb92d548803a43d4dddc2433c76650030c188f490311ff86da69fab1539139f6dda31739c2bb4412dd471137e2a53496c5f7707e01ccfb826f2eb96895230862e11d56c19af139de912ac5e68a99080e428443fcfba8b0460290c6275affe9953a97260b0304fd7ef159c9cd30cae1bcc75d568d353575ec3b5293fb80de85c7562804230489274831b2c17dccccc523ada66a46", 0xfe86}, {&(0x7f0000000580)="63e73686513c53aec098be4b2dfc27b5be1f5f85f54c24efb8fc94ccaac29f1378e04daa49f8dcbda8b0faff57761a0ce8a311802e5dd07a159721cac7d2250f4359e04727386cc7d1a3e8bf93339f3df1340041f71046f2b1d9a80af70fb8246258d09c310af3bef017fde1fd8ce505cd4858549192a95e512257b6c676a7ebb41230e4e4fb23e9666bfdc8bc2ca77bbd11810836df4a6f3dbe3ee75c34b07c64e1af6d62d54fccb9f281eac16eca7129aa4355fd53", 0xb6}, {&(0x7f0000000500)="de21cff472aa580c2ee9f858", 0xfc96}, {&(0x7f00000014c0)="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", 0xdf3}], 0x5) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f00000000c0)=0xffff1884, 0x4) 6.925135683s ago: executing program 1 (id=4062): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x2100, 0x100) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x200) fchdir(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x80000, 0x0) getdents64(r1, 0x0, 0x0) 6.702593036s ago: executing program 1 (id=4063): mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) fchdir(0xffffffffffffffff) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000100)='proc\x00', 0x40, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$peek(0x2, r0, 0x0) 6.464278649s ago: executing program 1 (id=4064): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) prlimit64(0x0, 0x7, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) unshare(0x6020400) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) fsmount(r2, 0x0, 0x80) r3 = fsmount(0xffffffffffffffff, 0x0, 0x8) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000280)={@fallback=r3, 0x0, 0x0, 0xce2c, &(0x7f0000002100)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0}, 0x40) r4 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x961a02, 0x0) ioctl$TIOCSSOFTCAR(r4, 0x5453, 0x0) syz_open_dev$sndpcmp(0x0, 0x0, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$int_in(r5, 0x5421, 0x0) 6.450946171s ago: executing program 0 (id=4065): unshare(0x22020600) r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) listen(r2, 0x0) connect$unix(r1, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) connect$unix(r1, &(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x6e) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x6) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 6.449061007s ago: executing program 6 (id=4066): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xb, 0xa, 0x4, 0x2, 0x1, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x6c7, r0, 0x14}, 0x38) 6.295337385s ago: executing program 6 (id=4067): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3000009, 0x50, 0xffffffffffffffff, 0xec776000) r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) 5.218586943s ago: executing program 2 (id=4068): socket$packet(0x11, 0x3, 0x300) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff0180"], 0x15) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, 0x0, 0x0, 0x1, 0x5}, 0x94) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000a51000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f00003cf000/0x2000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x58}, 0xfd73) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x4819, 0x1f480, 0x2, 0x325}) io_uring_enter(r0, 0x12a, 0xe054, 0x17, 0x0, 0x0) 5.120643788s ago: executing program 1 (id=4069): socket$igmp6(0xa, 0x3, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001140)=ANY=[], &(0x7f0000000140)='GPL\x00'}, 0x94) ioctl$TIOCNXCL(0xffffffffffffffff, 0x540d) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) setsockopt$packet_int(r0, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendto$inet(r1, &(0x7f0000000100)="1ce0", 0xffeb, 0x0, &(0x7f0000001100)={0x2, 0x0, @private}, 0x10) 5.117257416s ago: executing program 0 (id=4070): openat$kvm(0xffffffffffffff9c, 0x0, 0x2200, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(r0, 0x0, 0x0, 0x0) wait4(0x0, 0x0, 0x80000000, 0xfffffffffffffffc) rt_sigprocmask(0x2, 0x0, 0x0, 0x0) openat$binfmt(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0xc058534f, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@broadcast, @dev, @void, {@arp={0x806, @ether_ipv4={0x6, 0x800, 0x6, 0x4, 0x0, @multicast, @rand_addr, @broadcast, @empty}}}}, 0x0) ioctl$UI_SET_RELBIT(0xffffffffffffffff, 0x40045566, 0x3) syz_emit_vhci(&(0x7f00000007c0)=ANY=[@ANYBLOB="040e06006220"], 0x9) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, 0x0}], 0x1, 0x10, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) socket$igmp(0x2, 0x3, 0x2) 4.852985592s ago: executing program 6 (id=4071): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000280)={0x1, &(0x7f0000000080)=[{0x7, 0x0, 0x0, 0x10000}]}) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r3, 0x0, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0x4c80, &(0x7f0000000600)={0x0, 0x0, "ac06f105d310541258e0a2a0b883eb29e46b4bfb57461914278705b6a55ba904cefb1f00536dfdc9ce9c12d1207f8a3ad1dad7ed0fc16b2ccd00000000000000080000000c0996d78e489e96651d35ca509de7cf52e7578e9ce37700000000000032936e283ae72a84cc5a72f07fef2fec1463729b336e892b5aadc70f51cb4582b7757f779254377a6a42493fb7023b15fb899a2072631f76cd0a59b17031b431163758724ac0df2d95b9c3fbccef0111f1fc6db466c73268e04c38df1f6bf2cc88aa6126229c332b887eb8e67102000631988ad55f281047000000000000000003000000000100", "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"}) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x4eb) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x891c, &(0x7f0000000200)={'wg2\x00', {0x2, 0x0, @empty}}) openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) getsockopt$sock_buf(r0, 0x1, 0x1a, 0x0, &(0x7f0000000340)) lsetxattr$security_ima(&(0x7f0000000300)='./file0\x00', &(0x7f0000000080), 0x0, 0x0, 0x0) 4.770805803s ago: executing program 2 (id=4072): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000fc0)={0x2, 0x0, [{0x56000, 0x0, 0x0}, {0x0, 0x0, 0x0}]}) 3.28411333s ago: executing program 6 (id=4073): syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_encrypt_change={{0x8, 0x4}, {0x4, 0xc9, 0x4}}}, 0x7) ioctl(0xffffffffffffffff, 0xc138fd0f, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfc, {0x0, 0x0, 0x0, r1, {0x0, 0xb}, {0xffff, 0xffff}, {0x5}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0x0, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000900)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70b928, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0x0, 0xe}, {0xffff, 0xb}, {0xffff, 0xb}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x5, 0x7, 0x5, 0x8, 0x0, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x240048e0}, 0x0) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4058587a, &(0x7f00000002c0)={{0xffffffffffffffff, &(0x7f0000000140)='][/.\x00', 0x20200, &(0x7f0000000180)={@align=0xffffffff, {0x0, 0xff, 0x4, 0x3}}, 0x70, &(0x7f00000001c0), &(0x7f0000000200)=0xffff}, {[0x200, 0x8001, 0x1, 0x6]}, 0x0, 0x68, &(0x7f0000000240)=""/104}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x1, 0x7, 0x3, 0xd25e, 0x14000, 0x1, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x1}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x18, 0x6, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}, [@btf_id={0x18, 0x5, 0x3, 0x0, 0x4}, @ldst={0x3, 0x2, 0x6, 0x8, 0x1, 0xfffffffffffffff4, 0xfffffffffffffff0}]}, &(0x7f0000000080)='GPL\x00', 0x8001, 0x4b, &(0x7f00000000c0)=""/75, 0x100, 0x20, '\x00', r1, 0x0, r2, 0x8, &(0x7f0000000340)={0x9, 0x3}, 0x8, 0x10, &(0x7f0000000380)={0x1, 0x8, 0x1, 0x7f}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000480)=[r3, r4], &(0x7f0000000500)=[{0x4, 0x4, 0xc, 0x6}], 0x10, 0x9}, 0x94) ioctl$TIOCCBRK(0xffffffffffffffff, 0x5428) lseek(0xffffffffffffffff, 0x0, 0x4) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae03, 0x42) 2.953558391s ago: executing program 5 (id=4074): socket$nl_route(0x10, 0x3, 0x0) openat(0xffffffffffffff9c, 0x0, 0x10900, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f0000000200)='./file1/file4/file5\x00', 0x81c0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file1/file4/file7\x00', 0x1c0) r3 = landlock_create_ruleset(&(0x7f00000002c0)={0x2001}, 0x18, 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r3, 0x1, &(0x7f0000000340)={0x2000, r4}, 0x0) landlock_restrict_self(r3, 0x0) linkat(0xffffffffffffff9c, &(0x7f0000000500)='./file1/file4/file5\x00', 0xffffffffffffff9c, &(0x7f0000000540)='./file1/file4/file7/file5\x00', 0x0) 2.818482613s ago: executing program 0 (id=4075): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000000c0)=@bpf_lsm={0x3, 0x4, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x4c}, [@call={0x85, 0x0, 0x0, 0xce}]}, &(0x7f0000000000)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x401}, 0x94) 2.776645187s ago: executing program 2 (id=4076): socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket(0x10, 0x803, 0x0) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x8, &(0x7f0000001340)=ANY=[@ANYBLOB="beaa00000000000079a008000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000bf0300000000000085000000c9000000b70000000000000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x22}, 0x94) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000023c0)=@newlink={0x38, 0x10, 0x1, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x40810, 0x1}, [@IFLA_GROUP={0x8}, @IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x10000}, @IFLA_TXQLEN={0x8, 0xd, 0x80}]}, 0x38}, 0x1, 0x0, 0x0, 0x24040051}, 0x4000000) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000002900), 0x4) bind$netlink(r2, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) syz_genetlink_get_family_id$ethtool(&(0x7f0000000a80), r0) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x5, &(0x7f0000000040)=0x3, 0x4) 2.553104452s ago: executing program 0 (id=4077): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12011001000000106a050703000000000001090224000100002008090400fe010300030009210800030122280009058103000406c1"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, &(0x7f0000000240)={0x14, &(0x7f00000000c0)={0x40, 0x25, 0x28, {0x28, 0x23, "2763274b202062ed7027604b0cc939731b2559f7ac820d6e5a50b95d07b847855516740682d3"}}, 0x0}, 0x0) 1.728031928s ago: executing program 5 (id=4078): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000480)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) readv(r0, &(0x7f0000000740)=[{&(0x7f0000000380)=""/218, 0xda}], 0x1) 1.623867753s ago: executing program 2 (id=4079): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) prlimit64(0x0, 0x7, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) unshare(0x6020400) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) fsmount(r2, 0x0, 0x80) r3 = fsmount(0xffffffffffffffff, 0x0, 0x8) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000280)={@fallback=r3, 0x0, 0x0, 0xce2c, &(0x7f0000002100)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0}, 0x40) r4 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x961a02, 0x0) ioctl$TIOCSSOFTCAR(r4, 0x5453, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$int_in(r5, 0x5421, 0x0) 0s ago: executing program 2 (id=4080): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0x439, 0x70bd3d, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x9801}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_GSO_MAX_SIZE={0x8, 0x29, 0xe304}]}, 0x40}, 0x1, 0x0, 0x0, 0x24000007}, 0x0) kernel console output (not intermixed with test programs): stered as video103. [ 1349.133920][T11930] input: PWC snapshot button as /devices/platform/dummy_hcd.6/usb7/7-1/input/input7 [ 1349.143816][T11930] usb 7-1: USB disconnect, device number 10 [ 1349.181195][ T199] usb 3-1: USB disconnect, device number 35 [ 1349.331549][ T999] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 1349.479371][ T999] usb 1-1: Using ep0 maxpacket: 16 [ 1349.480308][ T999] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1349.481869][ T999] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1349.481895][ T999] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1349.481918][ T999] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 4 [ 1349.483076][ T999] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1349.483098][ T999] usb 1-1: SerialNumber: syz [ 1349.498616][T14590] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1349.518693][ T999] cdc_acm 1-1:1.0: skipping garbage [ 1349.529986][ T999] cdc_acm 1-1:1.0: probe with driver cdc_acm failed with error -12 [ 1350.646256][ T5732] usb 1-1: USB disconnect, device number 43 [ 1352.034323][ T10] usb 6-1: Cannot set autoneg [ 1352.035111][ T10] MOSCHIP usb-ethernet driver 6-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 1352.124077][ T10] usb 6-1: USB disconnect, device number 34 [ 1352.196593][T14609] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2025'. [ 1352.548422][T14615] 9p: Bad value for 'rfdno' [ 1354.152417][T14637] FAULT_INJECTION: forcing a failure. [ 1354.152417][T14637] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1354.152499][T14637] CPU: 1 UID: 0 PID: 14637 Comm: syz.2.2032 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1354.152523][T14637] Tainted: [L]=SOFTLOCKUP [ 1354.152532][T14637] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1354.152541][T14637] Call Trace: [ 1354.152548][T14637] [ 1354.152555][T14637] dump_stack_lvl+0xe8/0x150 [ 1354.152585][T14637] should_fail_ex+0x46b/0x600 [ 1354.152612][T14637] strncpy_from_user+0x36/0x2c0 [ 1354.152635][T14637] do_getname+0x77/0x250 [ 1354.152663][T14637] do_sys_openat2+0xcc/0x200 [ 1354.152688][T14637] ? __pfx_do_sys_openat2+0x10/0x10 [ 1354.152713][T14637] ? ksys_write+0x248/0x270 [ 1354.152735][T14637] ? __pfx_ksys_write+0x10/0x10 [ 1354.152767][T14637] __x64_sys_openat+0x138/0x170 [ 1354.152796][T14637] do_syscall_64+0x166/0x520 [ 1354.152815][T14637] ? trace_irq_disable+0x3b/0x140 [ 1354.152837][T14637] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1354.152855][T14637] ? clear_bhb_loop+0x70/0xc0 [ 1354.152877][T14637] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1354.152894][T14637] RIP: 0033:0x7f911685e98e [ 1354.152912][T14637] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1354.152927][T14637] RSP: 002b:00007f9114af5f28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1354.152947][T14637] RAX: ffffffffffffffda RBX: 00007f9114af66c0 RCX: 00007f911685e98e [ 1354.152960][T14637] RDX: 0000000000000000 RSI: 00007f911693475f RDI: ffffffffffffff9c [ 1354.152973][T14637] RBP: 00007f9114af6090 R08: 0000000000000000 R09: 0000000000000000 [ 1354.152984][T14637] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1354.152995][T14637] R13: 00007f9116b26038 R14: 00007f9116b25fa0 R15: 00007fff9941b3d8 [ 1354.153023][T14637] [ 1354.338225][T14640] FAULT_INJECTION: forcing a failure. [ 1354.338225][T14640] name failslab, interval 1, probability 0, space 0, times 0 [ 1354.338261][T14640] CPU: 1 UID: 0 PID: 14640 Comm: syz.6.2035 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1354.338293][T14640] Tainted: [L]=SOFTLOCKUP [ 1354.338300][T14640] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1354.338311][T14640] Call Trace: [ 1354.338318][T14640] [ 1354.338326][T14640] dump_stack_lvl+0xe8/0x150 [ 1354.338358][T14640] should_fail_ex+0x46b/0x600 [ 1354.338384][T14640] should_failslab+0xa8/0x100 [ 1354.338412][T14640] kmem_cache_alloc_node_noprof+0xac/0x660 [ 1354.338434][T14640] ? __alloc_skb+0x1db/0x7a0 [ 1354.338587][T14640] ? __alloc_skb+0x1db/0x7a0 [ 1354.338613][T14640] __alloc_skb+0x1db/0x7a0 [ 1354.338638][T14640] netlink_sendmsg+0x5d4/0xb40 [ 1354.338738][T14640] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1354.338765][T14640] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 1354.338790][T14640] ? __kernel_text_address+0xd/0x30 [ 1354.338810][T14640] ? unwind_get_return_address+0x4d/0x90 [ 1354.338834][T14640] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1354.338857][T14640] sock_sendmsg_nosec+0x13a/0x180 [ 1354.338878][T14640] ____sys_sendmsg+0x565/0x870 [ 1354.338910][T14640] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1354.338937][T14640] ? import_iovec+0x73/0xa0 [ 1354.338962][T14640] ___sys_sendmsg+0x2a5/0x360 [ 1354.338984][T14640] ? __lock_acquire+0x6df/0x2e40 [ 1354.339010][T14640] ? __pfx____sys_sendmsg+0x10/0x10 [ 1354.339067][T14640] ? __fget_files+0x2a/0x420 [ 1354.339085][T14640] ? __fget_files+0x3a8/0x420 [ 1354.339112][T14640] __x64_sys_sendmsg+0x1b7/0x290 [ 1354.339138][T14640] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1354.339180][T14640] do_syscall_64+0x166/0x520 [ 1354.339198][T14640] ? trace_irq_disable+0x3b/0x140 [ 1354.339217][T14640] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1354.339234][T14640] ? clear_bhb_loop+0x70/0xc0 [ 1354.339254][T14640] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1354.339278][T14640] RIP: 0033:0x7f8bf322e159 [ 1354.339294][T14640] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1354.339309][T14640] RSP: 002b:00007f8bf1486028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1354.339329][T14640] RAX: ffffffffffffffda RBX: 00007f8bf34b5fa0 RCX: 00007f8bf322e159 [ 1354.339342][T14640] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000003 [ 1354.339354][T14640] RBP: 00007f8bf1486090 R08: 0000000000000000 R09: 0000000000000000 [ 1354.339366][T14640] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1354.339377][T14640] R13: 00007f8bf34b6038 R14: 00007f8bf34b5fa0 R15: 00007ffd214b8458 [ 1354.339405][T14640] [ 1355.110384][ T5743] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 1355.383557][T14638] netlink: 56 bytes leftover after parsing attributes in process `syz.5.2033'. [ 1355.499713][ T5743] usb 3-1: Using ep0 maxpacket: 16 [ 1355.509569][ T5743] usb 3-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 1355.527333][ T5743] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1355.529319][ T5743] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1355.555650][ T5743] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1355.564541][ T5743] usb 3-1: Product: syz [ 1355.564563][ T5743] usb 3-1: Manufacturer: syz [ 1355.564578][ T5743] usb 3-1: SerialNumber: syz [ 1355.593822][ T5743] usb 3-1: config 0 descriptor?? [ 1355.726606][T14655] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2039'. [ 1355.761900][T14656] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2038'. [ 1356.203886][ T10] usb 6-1: new full-speed USB device number 35 using dummy_hcd [ 1356.318121][ T5743] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input8 [ 1356.350372][ T10] usb 6-1: New USB device found, idVendor=0755, idProduct=2626, bcdDevice= 0.00 [ 1356.362996][ T10] usb 6-1: too many endpoints for config 0 interface 0 altsetting 9: 254, using maximum allowed: 30 [ 1356.363675][ T10] usb 6-1: config 0 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 1356.363705][ T10] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1356.363737][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1356.403469][ T10] usb 6-1: config 0 descriptor?? [ 1356.837293][T14659] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 1356.915586][ T10] hid_parser_main: 92 callbacks suppressed [ 1356.916155][ T10] aureal 0003:0755:2626.0003: unknown main item tag 0x0 [ 1356.916190][ T10] aureal 0003:0755:2626.0003: unknown main item tag 0x6 [ 1356.916217][ T10] aureal 0003:0755:2626.0003: unknown main item tag 0x1 [ 1356.916241][ T10] aureal 0003:0755:2626.0003: unknown main item tag 0x0 [ 1356.916263][ T10] aureal 0003:0755:2626.0003: unknown main item tag 0x0 [ 1356.916285][ T10] aureal 0003:0755:2626.0003: unknown main item tag 0x0 [ 1356.916310][ T10] aureal 0003:0755:2626.0003: unknown main item tag 0x0 [ 1356.916359][ T10] aureal 0003:0755:2626.0003: unknown main item tag 0x0 [ 1356.916385][ T10] aureal 0003:0755:2626.0003: unknown main item tag 0x0 [ 1356.916410][ T10] aureal 0003:0755:2626.0003: unknown main item tag 0x0 [ 1357.016002][ T10] aureal 0003:0755:2626.0003: hidraw0: USB HID vff.fd Device [HID 0755:2626] on usb-dummy_hcd.5-1/input0 [ 1357.105650][ T10] usb 6-1: USB disconnect, device number 35 [ 1357.584146][ C1] imon 3-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 1357.600396][ T5743] imon:send_packet: packet tx failed (-71) [ 1357.629395][ T5743] imon 3-1:0.0: panel buttons/knobs setup failed [ 1357.709439][ T5743] rc_core: IR keymap rc-imon-pad not found [ 1357.717695][ T5743] Registered IR keymap rc-empty [ 1357.717875][ T5743] imon 3-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 1357.717887][ T5743] imon 3-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 1357.718183][ T5743] imon:send_packet: packet tx failed (-71) [ 1357.750776][ T5743] imon 3-1:0.0: remote input dev register failed [ 1357.753925][ T5743] imon 3-1:0.0: imon_init_intf0: rc device setup failed [ 1357.893861][ T5743] imon 3-1:0.0: unable to initialize intf0, err 0 [ 1357.893936][ T5743] imon:imon_probe: failed to initialize context! [ 1357.893950][ T5743] imon 3-1:0.0: unable to register, err -19 [ 1357.903328][ T5743] usb 3-1: USB disconnect, device number 36 [ 1366.875081][ T1325] ieee802154 phy0 wpan0: encryption failed: -22 [ 1366.883547][ T1325] ieee802154 phy1 wpan1: encryption failed: -22 [ 1390.972160][ T8603] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 1391.439525][ T5732] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 1392.119365][ T999] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 1392.332624][ T37] audit: type=1326 audit(1788347327.826:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14726 comm="syz.6.2056" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bf322e159 code=0x7ffc0000 [ 1392.332724][ T37] audit: type=1326 audit(1788347327.826:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14726 comm="syz.6.2056" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bf322e159 code=0x7ffc0000 [ 1392.332765][ T37] audit: type=1326 audit(1788347327.826:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14726 comm="syz.6.2056" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bf322e159 code=0x7ffc0000 [ 1392.332804][ T37] audit: type=1326 audit(1788347327.826:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14726 comm="syz.6.2056" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=91 compat=0 ip=0x7f8bf322e159 code=0x7ffc0000 [ 1392.332841][ T37] audit: type=1326 audit(1788347327.826:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14726 comm="syz.6.2056" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bf322e159 code=0x7ffc0000 [ 1392.332881][ T37] audit: type=1326 audit(1788347327.826:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14726 comm="syz.6.2056" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bf322e159 code=0x7ffc0000 [ 1392.332919][ T37] audit: type=1326 audit(1788347327.826:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14726 comm="syz.6.2056" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bf322e159 code=0x7ffc0000 [ 1392.332957][ T37] audit: type=1326 audit(1788347327.826:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14726 comm="syz.6.2056" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f8bf322e159 code=0x7ffc0000 [ 1392.332994][ T37] audit: type=1326 audit(1788347327.876:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14726 comm="syz.6.2056" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bf322e159 code=0x7ffc0000 [ 1392.333032][ T37] audit: type=1326 audit(1788347327.876:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14726 comm="syz.6.2056" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bf322e159 code=0x7ffc0000 [ 1392.590363][ T999] usb 6-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1392.592120][ T999] usb 6-1: config 220 has an invalid interface number: 76 but max is 2 [ 1392.592145][ T999] usb 6-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 1392.592163][ T999] usb 6-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1392.592181][ T999] usb 6-1: config 220 has no interface number 2 [ 1392.592249][ T999] usb 6-1: config 220 interface 1 altsetting 5 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 1392.592274][ T999] usb 6-1: config 220 interface 1 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 12 [ 1392.592299][ T999] usb 6-1: config 220 interface 0 has no altsetting 0 [ 1392.592316][ T999] usb 6-1: config 220 interface 76 has no altsetting 0 [ 1392.592333][ T999] usb 6-1: config 220 interface 1 has no altsetting 0 [ 1392.595206][ T999] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1392.595228][ T999] usb 6-1: Product: syz [ 1392.595241][ T999] usb 6-1: Manufacturer: syz [ 1392.595254][ T999] usb 6-1: SerialNumber: syz [ 1393.936955][ T999] uvcvideo 6-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 1393.939381][ T999] uvcvideo 6-1:220.0: No valid video chain found. [ 1393.942248][ T999] usb 6-1: selecting invalid altsetting 0 [ 1394.056634][ T59] Bluetooth: hci0: unexpected event for opcode 0x1009 [ 1394.105002][ T999] usb 6-1: selecting invalid altsetting 0 [ 1394.106934][T14746] tmpfs: Bad value for 'mpol' [ 1394.107113][ T999] usbtest 6-1:220.1: probe with driver usbtest failed with error -22 [ 1394.126646][ T999] usb 6-1: USB disconnect, device number 36 [ 1395.540439][T14774] ubi: mtd0 is already attached to ubi0 [ 1396.219748][T14776] FAULT_INJECTION: forcing a failure. [ 1396.219748][T14776] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1396.219786][T14776] CPU: 1 UID: 0 PID: 14776 Comm: syz.5.2066 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1396.219812][T14776] Tainted: [L]=SOFTLOCKUP [ 1396.219818][T14776] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1396.219828][T14776] Call Trace: [ 1396.219835][T14776] [ 1396.219844][T14776] dump_stack_lvl+0xe8/0x150 [ 1396.219873][T14776] should_fail_ex+0x46b/0x600 [ 1396.219899][T14776] strncpy_from_user+0x36/0x2c0 [ 1396.219922][T14776] do_getname+0x77/0x250 [ 1396.219951][T14776] ksys_truncate+0xa0/0x1c0 [ 1396.219971][T14776] ? __pfx_ksys_truncate+0x10/0x10 [ 1396.219991][T14776] ? __pfx_ksys_write+0x10/0x10 [ 1396.220019][T14776] __x64_sys_truncate+0x5b/0x70 [ 1396.220040][T14776] do_syscall_64+0x166/0x520 [ 1396.220060][T14776] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1396.220076][T14776] ? clear_bhb_loop+0x70/0xc0 [ 1396.220097][T14776] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1396.220114][T14776] RIP: 0033:0x7fe37562e159 [ 1396.220131][T14776] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1396.220145][T14776] RSP: 002b:00007fe373886028 EFLAGS: 00000246 ORIG_RAX: 000000000000004c [ 1396.220166][T14776] RAX: ffffffffffffffda RBX: 00007fe3758b5fa0 RCX: 00007fe37562e159 [ 1396.220180][T14776] RDX: 0000000000000000 RSI: 00000000000000e2 RDI: 0000200000000140 [ 1396.220200][T14776] RBP: 00007fe373886090 R08: 0000000000000000 R09: 0000000000000000 [ 1396.220212][T14776] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1396.220224][T14776] R13: 00007fe3758b6038 R14: 00007fe3758b5fa0 R15: 00007ffe3ec26a78 [ 1396.220251][T14776] [ 1396.484054][T14778] nbd: must specify at least one socket [ 1398.559534][T14795] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x4255 instead [ 1398.559619][T14795] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x0001 instead [ 1398.559636][T14795] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000018: 0xc150 instead [ 1398.559651][T14795] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000003c: 0x51c3 instead [ 1398.559663][T14795] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000040: 0x4255 instead [ 1398.559676][T14795] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000044: 0x0101 instead [ 1398.559691][T14795] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000048: 0xff7f instead [ 1398.559709][T14795] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000007c: 0xb365 instead [ 1398.559735][T14795] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000128: 0x16f1 instead [ 1398.559762][T14795] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000001d4: 0x16f1 instead [ 1398.559777][T14795] jffs2: Further such events for this erase block will not be printed [ 1398.560076][T14795] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001000: 0x4255 instead [ 1398.560093][T14795] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001004: 0x0001 instead [ 1398.560110][T14795] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001018: 0xc150 instead [ 1398.560127][T14795] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000103c: 0x51c3 instead [ 1398.560143][T14795] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001040: 0x4255 instead [ 1398.560158][T14795] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001044: 0x0101 instead [ 1398.560174][T14795] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001048: 0xff7f instead [ 1398.560193][T14795] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000107c: 0xef7b instead [ 1398.560232][T14795] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001128: 0x16f1 instead [ 1398.560259][T14795] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000011d4: 0x16f1 instead [ 1398.560275][T14795] jffs2: Further such events for this erase block will not be printed [ 1398.567516][T14795] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002000: 0x4255 instead [ 1398.567541][T14795] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002004: 0x0001 instead [ 1398.567559][T14795] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002018: 0xc150 instead [ 1398.567576][T14795] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000203c: 0x9afc instead [ 1398.567620][T14795] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003000: 0x4255 instead [ 1398.567636][T14795] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003004: 0x0001 instead [ 1398.567653][T14795] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003018: 0xc150 instead [ 1398.567671][T14795] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000303c: 0x9afc instead [ 1398.567714][T14795] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004000: 0x4255 instead [ 1398.567729][T14795] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004004: 0x0001 instead [ 1398.567746][T14795] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004018: 0xc150 instead [ 1398.567763][T14795] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000403c: 0x9afc instead [ 1398.567812][T14795] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005000: 0x4255 instead [ 1398.567828][T14795] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005004: 0x0001 instead [ 1398.567845][T14795] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005018: 0xc150 instead [ 1398.567863][T14795] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000503c: 0x9afc instead [ 1398.567906][T14795] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006000: 0x4255 instead [ 1398.567922][T14795] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006004: 0x0001 instead [ 1398.567938][T14795] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006018: 0xc150 instead [ 1398.567956][T14795] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000603c: 0x9afc instead [ 1398.567998][T14795] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007000: 0x4255 instead [ 1398.568013][T14795] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007004: 0x0001 instead [ 1398.568030][T14795] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007018: 0xc150 instead [ 1398.568046][T14795] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000703c: 0x9afc instead [ 1398.568090][T14795] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008000: 0x4255 instead [ 1398.568105][T14795] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008004: 0x0001 instead [ 1398.568121][T14795] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008018: 0xc150 instead [ 1398.568138][T14795] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000803c: 0x9afc instead [ 1398.568180][T14795] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009000: 0x4255 instead [ 1398.568195][T14795] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009004: 0x0001 instead [ 1398.568211][T14795] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009018: 0xc150 instead [ 1398.568228][T14795] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000903c: 0x9afc instead [ 1398.568271][T14795] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a000: 0x4255 instead [ 1398.568286][T14795] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a004: 0x0001 instead [ 1398.568301][T14795] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a018: 0xc150 instead [ 1398.568316][T14795] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a03c: 0x9afc instead [ 1398.568359][T14795] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b000: 0x4255 instead [ 1398.568374][T14795] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b004: 0x0001 instead [ 1398.568389][T14795] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b018: 0xc150 instead [ 1398.568406][T14795] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b03c: 0x9afc instead [ 1398.568462][T14795] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c000: 0x4255 instead [ 1398.568478][T14795] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c004: 0x0001 instead [ 1398.568493][T14795] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c018: 0xc150 instead [ 1398.568510][T14795] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c03c: 0x9afc instead [ 1398.568553][T14795] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d000: 0x4255 instead [ 1398.568568][T14795] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d004: 0x0001 instead [ 1398.568584][T14795] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d018: 0xc150 instead [ 1398.568602][T14795] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d03c: 0x9afc instead [ 1398.568644][T14795] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e000: 0x4255 instead [ 1398.568660][T14795] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e004: 0x0001 instead [ 1398.568677][T14795] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e018: 0xc150 instead [ 1398.568695][T14795] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e03c: 0x9afc instead [ 1398.568736][T14795] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f000: 0x4255 instead [ 1398.568752][T14795] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f004: 0x0001 instead [ 1398.568768][T14795] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f018: 0xc150 instead [ 1398.568786][T14795] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f03c: 0x9afc instead [ 1398.568834][T14795] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010000: 0x4255 instead [ 1398.568850][T14795] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010004: 0x0001 instead [ 1398.568866][T14795] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010018: 0xc150 instead [ 1398.575549][T14795] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001003c: 0x9afc instead [ 1398.575608][T14795] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011000: 0x4255 instead [ 1398.575625][T14795] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011004: 0x0001 instead [ 1398.575642][T14795] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011018: 0xc150 instead [ 1398.575660][T14795] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001103c: 0x9afc instead [ 1398.575705][T14795] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012000: 0x4255 instead [ 1398.575720][T14795] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012004: 0x0001 instead [ 1398.575750][T14795] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012018: 0xc150 instead [ 1398.575767][T14795] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001203c: 0x9afc instead [ 1398.575817][T14795] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013000: 0x4255 instead [ 1398.575834][T14795] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013004: 0x0001 instead [ 1398.575850][T14795] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013018: 0xc150 instead [ 1398.575868][T14795] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001303c: 0x9afc instead [ 1398.575912][T14795] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014000: 0x4255 instead [ 1398.575928][T14795] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014004: 0x0001 instead [ 1398.575945][T14795] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014018: 0xc150 instead [ 1398.575963][T14795] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001403c: 0x9afc instead [ 1398.576008][T14795] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015000: 0x4255 instead [ 1398.576023][T14795] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015004: 0x0001 instead [ 1398.576039][T14795] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015018: 0xc150 instead [ 1398.576056][T14795] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001503c: 0x9afc instead [ 1398.576098][T14795] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016000: 0x4255 instead [ 1398.576114][T14795] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016004: 0x0001 instead [ 1398.576130][T14795] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016018: 0xc150 instead [ 1398.576147][T14795] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001603c: 0x9afc instead [ 1398.576188][T14795] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017000: 0x4255 instead [ 1398.576204][T14795] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017004: 0x0001 instead [ 1398.576220][T14795] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017018: 0xc150 instead [ 1398.576237][T14795] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001703c: 0x9afc instead [ 1398.576278][T14795] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018000: 0x4255 instead [ 1398.576293][T14795] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018004: 0x0001 instead [ 1398.576309][T14795] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018018: 0xc150 instead [ 1398.576326][T14795] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001803c: 0x9afc instead [ 1398.576367][T14795] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019000: 0x4255 instead [ 1398.576382][T14795] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019004: 0x0001 instead [ 1398.576399][T14795] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019018: 0xc150 instead [ 1398.576415][T14795] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001903c: 0x9afc instead [ 1398.576458][T14795] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a000: 0x4255 instead [ 1398.576472][T14795] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a004: 0x0001 instead [ 1398.576488][T14795] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a018: 0xc150 instead [ 1398.576526][T14795] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a03c: 0x9afc instead [ 1398.576569][T14795] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b000: 0x4255 instead [ 1398.576585][T14795] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b004: 0x0001 instead [ 1398.576601][T14795] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b018: 0xc150 instead [ 1398.576619][T14795] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b03c: 0x9afc instead [ 1398.576662][T14795] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c000: 0x4255 instead [ 1398.576678][T14795] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c004: 0x0001 instead [ 1398.576693][T14795] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c018: 0xc150 instead [ 1398.576711][T14795] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c03c: 0x9afc instead [ 1398.576794][T14795] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d000: 0x4255 instead [ 1398.576817][T14795] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d004: 0x0001 instead [ 1398.576834][T14795] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d018: 0xc150 instead [ 1398.576853][T14795] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d03c: 0x9afc instead [ 1398.576896][T14795] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e000: 0x4255 instead [ 1398.576911][T14795] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e004: 0x0001 instead [ 1398.576928][T14795] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e018: 0xc150 instead [ 1398.576946][T14795] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e03c: 0x9afc instead [ 1398.579360][ T10] usb 3-1: new full-speed USB device number 37 using dummy_hcd [ 1398.584861][T14795] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f000: 0x4255 instead [ 1398.584884][T14795] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f004: 0x0001 instead [ 1398.584902][T14795] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f018: 0xc150 instead [ 1398.584920][T14795] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f03c: 0x9afc instead [ 1398.584950][T14795] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 1398.584960][T14795] jffs2: empty_blocks 0, bad_blocks 0, c->nr_blocks 32 [ 1398.829356][ T10] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1398.854684][ T10] usb 3-1: not running at top speed; connect to a high speed hub [ 1398.854729][ T10] usb 3-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 1398.870516][T14770] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 1398.949282][ T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1398.987291][ T10] usb 3-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 1398.987316][ T10] usb 3-1: Product: syz [ 1398.987328][ T10] usb 3-1: Manufacturer: syz [ 1398.987342][ T10] usb 3-1: SerialNumber: syz [ 1399.048100][T14770] usb 6-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 1399.055161][T14770] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1399.055186][T14770] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1399.058390][T14770] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1399.058414][T14770] usb 6-1: Product: syz [ 1399.058428][T14770] usb 6-1: Manufacturer: syz [ 1399.058441][T14770] usb 6-1: SerialNumber: syz [ 1399.577800][ T10] usb 3-1: config 0 descriptor?? [ 1399.795955][T14770] usb 6-1: 0:1 : does not exist [ 1399.796118][T14770] usb 6-1: BAAD SPEAKER p_chmask mismatch [ 1400.172314][T14803] UDC core: g1: couldn't find an available UDC or it's busy [ 1400.477568][T14815] FAULT_INJECTION: forcing a failure. [ 1400.477568][T14815] name failslab, interval 1, probability 0, space 0, times 0 [ 1400.477603][T14815] CPU: 1 UID: 0 PID: 14815 Comm: syz.0.2079 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1400.477628][T14815] Tainted: [L]=SOFTLOCKUP [ 1400.477635][T14815] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1400.477656][T14815] Call Trace: [ 1400.477663][T14815] [ 1400.477671][T14815] dump_stack_lvl+0xe8/0x150 [ 1400.477703][T14815] should_fail_ex+0x46b/0x600 [ 1400.477730][T14815] should_failslab+0xa8/0x100 [ 1400.477757][T14815] kmem_cache_alloc_node_noprof+0xac/0x660 [ 1400.477780][T14815] ? __alloc_skb+0x1db/0x7a0 [ 1400.477800][T14815] ? __alloc_skb+0x1db/0x7a0 [ 1400.477825][T14815] __alloc_skb+0x1db/0x7a0 [ 1400.477849][T14815] netlink_sendmsg+0x5d4/0xb40 [ 1400.477885][T14815] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1400.477911][T14815] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 1400.477938][T14815] ? __kernel_text_address+0xd/0x30 [ 1400.477957][T14815] ? unwind_get_return_address+0x4d/0x90 [ 1400.477981][T14815] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1400.478004][T14815] sock_sendmsg_nosec+0x13a/0x180 [ 1400.478027][T14815] ____sys_sendmsg+0x565/0x870 [ 1400.478059][T14815] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1400.478089][T14815] ? import_iovec+0x73/0xa0 [ 1400.478113][T14815] ___sys_sendmsg+0x2a5/0x360 [ 1400.478135][T14815] ? __lock_acquire+0x6df/0x2e40 [ 1400.478159][T14815] ? __pfx____sys_sendmsg+0x10/0x10 [ 1400.478215][T14815] ? __fget_files+0x2a/0x420 [ 1400.478232][T14815] ? __fget_files+0x3a8/0x420 [ 1400.478262][T14815] __x64_sys_sendmsg+0x1b7/0x290 [ 1400.478295][T14815] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1400.478337][T14815] do_syscall_64+0x166/0x520 [ 1400.478358][T14815] ? trace_irq_disable+0x3b/0x140 [ 1400.478378][T14815] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1400.478396][T14815] ? clear_bhb_loop+0x70/0xc0 [ 1400.478417][T14815] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1400.478435][T14815] RIP: 0033:0x7fdb4b48e159 [ 1400.478452][T14815] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1400.478467][T14815] RSP: 002b:00007fdb496e6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1400.478487][T14815] RAX: ffffffffffffffda RBX: 00007fdb4b715fa0 RCX: 00007fdb4b48e159 [ 1400.478500][T14815] RDX: 0000000000000000 RSI: 0000200000004340 RDI: 0000000000000003 [ 1400.478512][T14815] RBP: 00007fdb496e6090 R08: 0000000000000000 R09: 0000000000000000 [ 1400.478523][T14815] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1400.478534][T14815] R13: 00007fdb4b716038 R14: 00007fdb4b715fa0 R15: 00007fffa3ef66f8 [ 1400.478564][T14815] [ 1401.849406][ T10] usb 3-1: can't set config #0, error -71 [ 1401.857957][ T10] usb 3-1: USB disconnect, device number 37 [ 1402.450954][T14831] ubi: mtd0 is already attached to ubi0 [ 1403.910720][T14770] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1403.936293][T14770] usb 6-1: USB disconnect, device number 37 [ 1404.002215][T14696] udevd[14696]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1404.139378][ T10] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 1404.279653][T14770] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 1404.479900][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 1404.511038][ T10] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1404.511506][ T10] usb 2-1: New USB device found, idVendor=0499, idProduct=1054, bcdDevice= 0.40 [ 1404.570929][ T10] usb 2-1: config 1 has an invalid descriptor of length 198, skipping remainder of the config [ 1404.574407][ T10] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1405.112182][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1405.112263][ T10] usb 2-1: Product: 椠⺻ﾶ䞷ᡀꄣઘᅀ [ 1405.112279][ T10] usb 2-1: Manufacturer: á¼ [ 1405.112294][ T10] usb 2-1: SerialNumber: syz [ 1405.246245][T14770] usb 6-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1405.261492][T14770] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 1405.267576][T14770] usb 6-1: config 0 has no interface number 0 [ 1405.281070][T14770] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1405.291520][T14770] usb 6-1: Product: syz [ 1405.291611][T14770] usb 6-1: Manufacturer: syz [ 1405.291626][T14770] usb 6-1: SerialNumber: syz [ 1405.318478][T14770] usb 6-1: config 0 descriptor?? [ 1405.747913][T14770] usb 6-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 1405.761722][T14770] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1405.792256][ T10] usb 2-1: Audio class v2/v3 interfaces need an interface association [ 1405.804238][T14770] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 1405.804289][T14770] usb 6-1: media controller created [ 1405.856806][T14770] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1406.123261][T14835] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1406.144365][T14835] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1406.984576][T14864] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1408.288034][T14869] FAULT_INJECTION: forcing a failure. [ 1408.288034][T14869] name failslab, interval 1, probability 0, space 0, times 0 [ 1408.288119][T14869] CPU: 0 UID: 0 PID: 14869 Comm: syz.2.2093 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1408.288146][T14869] Tainted: [L]=SOFTLOCKUP [ 1408.288153][T14869] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1408.288164][T14869] Call Trace: [ 1408.288172][T14869] [ 1408.288182][T14869] dump_stack_lvl+0xe8/0x150 [ 1408.288213][T14869] should_fail_ex+0x46b/0x600 [ 1408.288240][T14869] should_failslab+0xa8/0x100 [ 1408.288265][T14869] ? do_getname+0x2e/0x250 [ 1408.288290][T14869] kmem_cache_alloc_noprof+0x9e/0x690 [ 1408.288312][T14869] ? do_getname+0x2e/0x250 [ 1408.288341][T14869] do_getname+0x2e/0x250 [ 1408.288366][T14869] ? user_path_at+0x1e/0x160 [ 1408.288389][T14869] user_path_at+0x2a/0x160 [ 1408.288410][T14869] __se_sys_mount+0x2dc/0x420 [ 1408.288435][T14869] ? __pfx___se_sys_mount+0x10/0x10 [ 1408.288464][T14869] ? __x64_sys_mount+0x20/0xc0 [ 1408.288484][T14869] do_syscall_64+0x166/0x520 [ 1408.288504][T14869] ? trace_irq_disable+0x3b/0x140 [ 1408.288525][T14869] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1408.288544][T14869] ? clear_bhb_loop+0x70/0xc0 [ 1408.288566][T14869] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1408.288584][T14869] RIP: 0033:0x7f911689e159 [ 1408.288602][T14869] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1408.288617][T14869] RSP: 002b:00007f9114af6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1408.288637][T14869] RAX: ffffffffffffffda RBX: 00007f9116b25fa0 RCX: 00007f911689e159 [ 1408.288651][T14869] RDX: 0000200000000140 RSI: 00002000000000c0 RDI: 0000000000000000 [ 1408.288664][T14869] RBP: 00007f9114af6090 R08: 0000000000000000 R09: 0000000000000000 [ 1408.288676][T14869] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1408.288688][T14869] R13: 00007f9116b26038 R14: 00007f9116b25fa0 R15: 00007fff9941b3d8 [ 1408.288719][T14869] [ 1408.511138][T14872] FAULT_INJECTION: forcing a failure. [ 1408.511138][T14872] name failslab, interval 1, probability 0, space 0, times 0 [ 1408.511173][T14872] CPU: 0 UID: 0 PID: 14872 Comm: syz.6.2096 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1408.511198][T14872] Tainted: [L]=SOFTLOCKUP [ 1408.511205][T14872] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1408.511216][T14872] Call Trace: [ 1408.511225][T14872] [ 1408.511232][T14872] dump_stack_lvl+0xe8/0x150 [ 1408.511265][T14872] should_fail_ex+0x46b/0x600 [ 1408.511291][T14872] should_failslab+0xa8/0x100 [ 1408.511318][T14872] __kmalloc_cache_noprof+0xa1/0x680 [ 1408.511341][T14872] ? input_allocate_device+0x4e/0x2b0 [ 1408.511517][T14872] ? input_allocate_device+0x4e/0x2b0 [ 1408.511543][T14872] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1408.511568][T14872] input_allocate_device+0x4e/0x2b0 [ 1408.511595][T14872] uinput_ioctl_handler+0x18a/0x15a0 [ 1408.511669][T14872] ? __pfx_uinput_ioctl_handler+0x10/0x10 [ 1408.511702][T14872] ? __fget_files+0x2a/0x420 [ 1408.511719][T14872] ? __fget_files+0x3a8/0x420 [ 1408.511741][T14872] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1408.511776][T14872] ? __pfx_uinput_ioctl+0x10/0x10 [ 1408.511799][T14872] __se_sys_ioctl+0xff/0x170 [ 1408.511823][T14872] do_syscall_64+0x166/0x520 [ 1408.511843][T14872] ? trace_irq_disable+0x3b/0x140 [ 1408.511863][T14872] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1408.511882][T14872] ? clear_bhb_loop+0x70/0xc0 [ 1408.511904][T14872] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1408.511922][T14872] RIP: 0033:0x7f8bf322e159 [ 1408.511939][T14872] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1408.511957][T14872] RSP: 002b:00007f8bf1486028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1408.511977][T14872] RAX: ffffffffffffffda RBX: 00007f8bf34b5fa0 RCX: 00007f8bf322e159 [ 1408.511991][T14872] RDX: 00000000000002f1 RSI: 000000004004556a RDI: 0000000000000003 [ 1408.512003][T14872] RBP: 00007f8bf1486090 R08: 0000000000000000 R09: 0000000000000000 [ 1408.512014][T14872] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1408.512025][T14872] R13: 00007f8bf34b6038 R14: 00007f8bf34b5fa0 R15: 00007ffd214b8458 [ 1408.512055][T14872] [ 1410.494629][ T10] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1410.543283][ T10] usb 2-1: USB disconnect, device number 51 [ 1410.748711][T14887] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2097'. [ 1412.168241][T14703] udevd[14703]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1413.524378][T14770] usb 6-1: USB disconnect, device number 38 [ 1415.448440][T14923] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2114'. [ 1415.460855][T14923] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2114'. [ 1415.618485][T14928] IPVS: Scheduler module ip_vs_sip not found [ 1416.005429][T12670] IPVS: starting estimator thread 0... [ 1416.129261][T14950] IPVS: using max 11 ests per chain, 26400 per kthread [ 1416.803002][T14978] netlink: Invalid conntrack timeout [ 1416.808678][T14978] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1417.017903][T14981] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2134'. [ 1417.707995][T15004] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 1417.709402][T15004] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1418.591628][T15024] openvswitch: netlink: IP tunnel dst address not specified [ 1419.363740][T15036] netlink: 'syz.6.2151': attribute type 1 has an invalid length. [ 1419.416949][T15005] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 1419.454373][T15005] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 1419.454512][T15005] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 1419.511047][T15005] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 1419.592604][T15005] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 1420.357222][T15045] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2154'. [ 1420.381707][T15045] bridge_slave_1: left allmulticast mode [ 1420.381775][T15045] bridge_slave_1: left promiscuous mode [ 1420.382602][T15045] bridge0: port 2(bridge_slave_1) entered disabled state [ 1420.411942][T15049] netlink: 'syz.2.2154': attribute type 83 has an invalid length. [ 1420.571383][T15052] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2156'. [ 1420.610777][T15045] bridge_slave_0: left allmulticast mode [ 1420.610921][T15045] bridge_slave_0: left promiscuous mode [ 1420.611187][T15045] bridge0: port 1(bridge_slave_0) entered disabled state [ 1421.967391][T15084] netlink: 'syz.1.2169': attribute type 2 has an invalid length. [ 1421.967463][ T1495] smbdirect: ib_dev[syz2] removed [ 1421.978294][T15084] netlink: 80 bytes leftover after parsing attributes in process `syz.1.2169'. [ 1421.983340][T15084] Bluetooth: MGMT ver 1.23 [ 1422.086556][T15090] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2171'. [ 1422.093458][T15090] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2171'. [ 1422.093486][T15090] netlink: 'syz.0.2171': attribute type 18 has an invalid length. [ 1422.783213][ T162] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 4352 - 0 [ 1422.784587][ T162] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 4352 - 0 [ 1422.784632][ T162] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 4352 - 0 [ 1422.784666][ T162] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 4352 - 0 [ 1422.972580][T15109] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2176'. [ 1423.481757][T15127] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2183'. [ 1423.494428][T15127] IPv6: NLM_F_CREATE should be specified when creating new route [ 1423.553955][T15130] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2184'. [ 1423.622979][T15127] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2183'. [ 1423.633887][T15127] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2183'. [ 1423.674363][T15127] gretap1: entered allmulticast mode [ 1423.971609][T15133] gre0: entered promiscuous mode [ 1423.976014][T15133] gre0: entered allmulticast mode [ 1424.284795][T15140] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2184'. [ 1424.848096][T15150] openvswitch: netlink: IP tunnel dst address not specified [ 1425.214866][T15157] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2192'. [ 1425.292278][T15160] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2190'. [ 1425.356520][T15152] netlink: 'syz.5.2190': attribute type 1 has an invalid length. [ 1425.592353][T12670] IPVS: starting estimator thread 0... [ 1425.699319][T15168] IPVS: using max 10 ests per chain, 24000 per kthread [ 1427.248991][T15200] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1427.282800][T15203] __nla_validate_parse: 3 callbacks suppressed [ 1427.282820][T15203] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2205'. [ 1427.368875][T15207] bridge_slave_0: left allmulticast mode [ 1427.382680][T15207] bridge_slave_0: left promiscuous mode [ 1427.382998][T15207] bridge0: port 1(bridge_slave_0) entered disabled state [ 1427.500602][T15213] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2208'. [ 1427.542648][T15215] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2209'. [ 1427.643403][T15207] bridge_slave_1: left allmulticast mode [ 1427.643472][T15207] bridge_slave_1: left promiscuous mode [ 1427.643701][T15207] bridge0: port 2(bridge_slave_1) entered disabled state [ 1427.820828][T15207] bond0: (slave bond_slave_0): Releasing backup interface [ 1427.920669][T15207] bond0: (slave bond_slave_1): Releasing backup interface [ 1428.016178][T15207] team0: Port device team_slave_0 removed [ 1428.045592][T15207] team0: Port device team_slave_1 removed [ 1428.047155][T15207] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1428.047184][T15207] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1428.116180][T15207] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1428.116211][T15207] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1428.154274][T15207] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1428.322910][ T1325] ieee802154 phy0 wpan0: encryption failed: -22 [ 1428.392880][T15215] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1428.448797][T15231] netlink: 'syz.5.2213': attribute type 1 has an invalid length. [ 1428.984847][T15231] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1429.078742][T15233] vlan3: entered allmulticast mode [ 1429.084732][T15233] batadv0: entered allmulticast mode [ 1429.126677][T15233] bond1: (slave vlan3): making interface the new active one [ 1429.173221][T15233] bond1: (slave vlan3): Enslaving as an active interface with an up link [ 1429.351102][T15256] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2222'. [ 1429.842438][T15271] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2223'. [ 1430.151501][T15271] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2223'. [ 1430.225630][T15277] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2225'. [ 1430.558251][T15288] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1431.055816][T15298] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2229'. [ 1432.288551][T15334] netlink: 7 bytes leftover after parsing attributes in process `syz.0.2244'. [ 1432.908517][T15347] sctp: [Deprecated]: syz.6.2249 (pid 15347) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1432.908517][T15347] Use struct sctp_sack_info instead [ 1432.912485][T15347] sctp: [Deprecated]: syz.6.2249 (pid 15347) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1432.912485][T15347] Use struct sctp_sack_info instead [ 1434.317699][T15393] Bluetooth: hci0: unsupported parameter 5135 [ 1434.317778][T15393] Bluetooth: hci0: invalid length 1, exp 2 for type 24 [ 1435.443507][T15430] netlink: 'syz.0.2283': attribute type 13 has an invalid length. [ 1435.995418][T15449] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2289'. [ 1436.012095][T15451] sctp: [Deprecated]: syz.2.2290 (pid 15451) Use of int in maxseg socket option. [ 1436.012095][T15451] Use struct sctp_assoc_value instead [ 1436.088557][T15448] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1436.904430][ T59] block nbd0: Receive control failed (result -32) [ 1436.909354][T13339] block nbd0: Receive control failed (result -32) [ 1437.471027][T15476] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2302'. [ 1437.832820][T15489] netlink: 'syz.0.2309': attribute type 4 has an invalid length. [ 1438.025775][T15489] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2309'. [ 1438.515331][T15489] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1438.515409][T15489] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1438.558214][T15489] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1438.558291][T15489] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1439.787886][T15533] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 1439.805483][T15533] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 1439.805529][T15533] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 1439.854373][T15533] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 1440.128416][T15541] vlan2: entered allmulticast mode [ 1440.137312][T15541] batadv0: entered allmulticast mode [ 1440.804603][T15564] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2334'. [ 1441.076133][T15568] siw: device registration error -23 [ 1443.472434][T15605] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2350'. [ 1443.664318][T15610] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2352'. [ 1448.020022][T15665] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2369'. [ 1448.538921][T15693] openvswitch: netlink: Missing key (keys=40, expected=100) [ 1448.589390][T12670] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1448.589478][T12670] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1448.589505][T12670] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1448.589533][T12670] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1449.542536][T15731] Bluetooth: hci0: unsupported parameter 5135 [ 1449.542613][T15731] Bluetooth: hci0: invalid length 1, exp 2 for type 11 [ 1450.656523][T15772] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2410'. [ 1451.313565][T15801] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2420'. [ 1452.814716][T15839] gre0: entered promiscuous mode [ 1452.814795][T15839] gre0: entered allmulticast mode [ 1453.241455][T15857] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2440'. [ 1453.402041][T15841] batman_adv: batadv0: Adding interface: veth0 [ 1453.402107][T15841] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1453.402139][T15841] batman_adv: batadv0: Interface activated: veth0 [ 1453.441601][T15853] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1453.449089][T15853] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1453.640184][T15853] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1453.641087][T15853] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1453.726996][T15853] batman_adv: batadv0: Interface deactivated: veth0 [ 1453.727024][T15853] batman_adv: batadv0: Removing interface: veth0 [ 1453.948045][T15879] netlink: 48 bytes leftover after parsing attributes in process `syz.6.2448'. [ 1453.967411][T15878] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2447'. [ 1454.110322][T15885] netlink: 'syz.6.2451': attribute type 10 has an invalid length. [ 1454.447167][T15885] team0 (unregistering): Port device team_slave_0 removed [ 1454.497812][T15885] team0 (unregistering): Port device team_slave_1 removed [ 1454.757052][T15912] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2461'. [ 1460.530013][T15992] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2496'. [ 1460.616673][T15998] sctp: [Deprecated]: syz.5.2498 (pid 15998) Use of int in maxseg socket option. [ 1460.616673][T15998] Use struct sctp_assoc_value instead [ 1460.774723][T16006] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2503'. [ 1461.168588][T16024] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 1461.168672][T16024] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1461.309565][T16026] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2511'. [ 1461.509395][T16036] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2517'. [ 1461.612324][T16036] netlink: 'syz.2.2517': attribute type 1 has an invalid length. [ 1461.812371][T16036] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2517'. [ 1462.314937][T16073] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2530'. [ 1462.808219][T16087] syzkaller0: entered promiscuous mode [ 1462.816185][T16087] syzkaller0: entered allmulticast mode [ 1462.976692][T16092] sctp: [Deprecated]: syz.0.2539 (pid 16092) Use of int in maxseg socket option. [ 1462.976692][T16092] Use struct sctp_assoc_value instead [ 1463.424927][T16104] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2545'. [ 1464.332019][T16133] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2557'. [ 1464.348433][T16136] netlink: 'syz.6.2558': attribute type 7 has an invalid length. [ 1464.901403][T16162] sctp: [Deprecated]: syz.6.2571 (pid 16162) Use of int in maxseg socket option. [ 1464.901403][T16162] Use struct sctp_assoc_value instead [ 1466.042180][T16182] bond1 (unregistering): Released all slaves [ 1466.058730][T16193] sctp: [Deprecated]: syz.5.2582 (pid 16193) Use of int in maxseg socket option. [ 1466.058730][T16193] Use struct sctp_assoc_value instead [ 1466.850659][T16227] batman_adv: batadv0: Adding interface: veth0 [ 1466.856982][T16227] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1466.857025][T16227] batman_adv: batadv0: Interface activated: veth0 [ 1466.925495][T16227] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1466.933132][T16227] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1467.055589][T16227] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1467.055670][T16227] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1467.104253][T16227] batman_adv: batadv0: Interface deactivated: veth0 [ 1467.105806][T16227] batman_adv: batadv0: Removing interface: veth0 [ 1467.138019][T16239] netlink: 'syz.1.2599': attribute type 4 has an invalid length. [ 1467.805205][T16264] IPVS: sync thread started: state = BACKUP, mcast_ifn = macsec0, syncid = 3, id = 0 [ 1467.986979][T16269] netlink: 'syz.6.2608': attribute type 22 has an invalid length. [ 1467.995230][T16269] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2608'. [ 1468.245540][T16275] sctp: [Deprecated]: syz.2.2611 (pid 16275) Use of int in maxseg socket option. [ 1468.245540][T16275] Use struct sctp_assoc_value instead [ 1468.435960][T16279] sctp: [Deprecated]: syz.2.2613 (pid 16279) Use of int in maxseg socket option. [ 1468.435960][T16279] Use struct sctp_assoc_value instead [ 1468.752310][T16295] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2619'. [ 1468.925599][T16305] netlink: 400 bytes leftover after parsing attributes in process `syz.6.2623'. [ 1469.084922][T16299] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2621'. [ 1469.963771][T16345] nbd: nbd0 already in use [ 1469.968435][T16345] block nbd0: NBD_DISCONNECT [ 1469.978393][T16345] block nbd0: Send disconnect failed -32 [ 1469.992935][T16345] block nbd0: Send disconnect failed -32 [ 1469.992966][T16345] block nbd0: shutting down sockets [ 1470.089585][T16351] netlink: 'syz.0.2641': attribute type 1 has an invalid length. [ 1470.187521][T16354] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2641'. [ 1470.187602][T16354] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2641'. [ 1470.486013][T16351] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1470.794974][T16379] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2654'. [ 1470.817749][ T1507] IPVS: starting estimator thread 0... [ 1470.833463][T16378] IPVS: lblc: SCTP 172.20.20.187:0 - no destination available [ 1470.929327][T16382] IPVS: using max 8 ests per chain, 19200 per kthread [ 1471.090441][T16383] IPVS: Scheduler module ip_vs_sip not found [ 1471.146581][T16378] netlink: 'syz.5.2655': attribute type 1 has an invalid length. [ 1471.158315][T16394] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2659'. [ 1471.236280][T16378] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1471.321674][T16383] bond2: entered promiscuous mode [ 1471.326881][T16383] bond2: entered allmulticast mode [ 1472.137584][T16436] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2672'. [ 1472.344268][T16447] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2678'. [ 1472.346587][T16447] netlink: 'syz.6.2678': attribute type 1 has an invalid length. [ 1473.382156][T13339] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1473.386394][T16473] __nla_validate_parse: 3 callbacks suppressed [ 1473.386829][T16473] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2685'. [ 1473.516328][T13339] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1473.519477][T13339] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1473.525097][T13339] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1473.526799][T13339] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1475.371665][ T1507] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 4352 - 0 [ 1475.372770][ T1507] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1475.722630][T16527] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2707'. [ 1475.753254][ T59] Bluetooth: hci0: command tx timeout [ 1476.114023][ T1507] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 4352 - 0 [ 1476.114113][ T1507] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1476.634579][ T1507] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 4352 - 0 [ 1476.634658][ T1507] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1476.968715][T16561] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2721'. [ 1477.481116][ T1507] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 4352 - 0 [ 1477.481207][ T1507] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1477.649476][T16582] sctp: [Deprecated]: syz.6.2732 (pid 16582) Use of int in maxseg socket option. [ 1477.649476][T16582] Use struct sctp_assoc_value instead [ 1477.830116][ T59] Bluetooth: hci0: command tx timeout [ 1478.734765][T16465] bridge0: port 1(bridge_slave_0) entered blocking state [ 1478.742396][T16465] bridge0: port 1(bridge_slave_0) entered disabled state [ 1478.742773][T16465] bridge_slave_0: entered allmulticast mode [ 1478.767276][T16465] bridge_slave_0: entered promiscuous mode [ 1478.791416][T16465] bridge0: port 2(bridge_slave_1) entered blocking state [ 1478.791616][T16465] bridge0: port 2(bridge_slave_1) entered disabled state [ 1478.791816][T16465] bridge_slave_1: entered allmulticast mode [ 1478.813733][T16465] bridge_slave_1: entered promiscuous mode [ 1479.234612][T16465] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1479.276984][T16465] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1479.635575][T16465] team0: Port device team_slave_0 added [ 1479.640296][T16465] team0: Port device team_slave_1 added [ 1479.900484][ T1507] bridge_slave_1: left allmulticast mode [ 1479.906293][ T1507] bridge_slave_1: left promiscuous mode [ 1479.906562][ T1507] bridge0: port 2(bridge_slave_1) entered disabled state [ 1479.910598][ T59] Bluetooth: hci0: command tx timeout [ 1480.083826][ T1507] bridge_slave_0: left allmulticast mode [ 1480.090703][ T1507] bridge_slave_0: left promiscuous mode [ 1480.091072][ T1507] bridge0: port 1(bridge_slave_0) entered disabled state [ 1481.619936][ T1507] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1481.679989][ T1507] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1481.722056][ T1507] bond0 (unregistering): Released all slaves [ 1481.731859][ T1507] bond1 (unregistering): Released all slaves [ 1481.994453][ T59] Bluetooth: hci0: command tx timeout [ 1482.001683][ T5256] 8021q: adding VLAN 0 to HW filter on device eth9 [ 1482.121925][T16465] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1482.123179][T16465] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1482.123207][T16465] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1482.150964][ T1507] tipc: Left network mode [ 1482.159681][T16465] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1482.159697][T16465] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1482.159729][T16465] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1482.536961][T16709] netlink: 'syz.5.2779': attribute type 1 has an invalid length. [ 1482.537036][T16709] netlink: 232 bytes leftover after parsing attributes in process `syz.5.2779'. [ 1482.537053][T16709] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2779'. [ 1482.995860][T16732] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2787'. [ 1483.053955][T16465] hsr_slave_0: entered promiscuous mode [ 1483.056378][T16465] hsr_slave_1: entered promiscuous mode [ 1483.057461][T16465] debugfs: 'hsr0' already exists in 'hsr' [ 1483.057485][T16465] Cannot create hsr debugfs directory [ 1483.069964][T16732] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 1483.193211][ T5256] 8021q: adding VLAN 0 to HW filter on device eth10 [ 1483.333317][T16740] netlink: 'syz.6.2789': attribute type 1 has an invalid length. [ 1484.088787][T16764] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1485.704435][ T5256] 8021q: adding VLAN 0 to HW filter on device eth11 [ 1485.829386][ T1507] hsr_slave_0: left promiscuous mode [ 1485.849849][ T1507] hsr_slave_1: left promiscuous mode [ 1485.902794][ T1507] veth1_macvtap: left promiscuous mode [ 1485.902899][ T1507] veth0_macvtap: left promiscuous mode [ 1485.903086][ T1507] veth1_vlan: left promiscuous mode [ 1485.903212][ T1507] veth0_vlan: left promiscuous mode [ 1486.710911][ T1507] team0 (unregistering): Port device team_slave_1 removed [ 1486.771177][ T1507] team0 (unregistering): Port device team_slave_0 removed [ 1489.700844][T16891] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2840'. [ 1489.754140][ T1325] ieee802154 phy0 wpan0: encryption failed: -22 [ 1490.230001][ T1507] IPVS: stop unused estimator thread 0... [ 1490.377685][T16906] IPVS: lblc: SCTP 172.20.20.187:0 - no destination available [ 1490.380845][T16903] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2843'. [ 1491.024854][T16914] xfrm0 speed is unknown, defaulting to 1000 [ 1491.170928][T16914] xfrm0 speed is unknown, defaulting to 1000 [ 1491.172307][T16914] xfrm0 speed is unknown, defaulting to 1000 [ 1491.850097][T16942] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2854'. [ 1492.434226][T16914] infiniband syz0: set down [ 1492.460382][T16914] infiniband syz0: added xfrm0 [ 1492.525741][T16914] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 1492.561852][T16914] infiniband syz0: Couldn't open port 1 [ 1492.576937][T16914] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 1492.576969][T16914] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 1492.577002][T16914] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 1492.733411][T16914] RDS/IB: syz0: added [ 1492.755448][ T999] xfrm0 speed is unknown, defaulting to 1000 [ 1492.761817][T16914] smc: adding ib device syz0 with port count 1 [ 1492.812935][T16914] smc: ib device syz0 port 1 has no pnetid [ 1492.928843][T14770] xfrm0 speed is unknown, defaulting to 1000 [ 1492.951250][T16914] xfrm0 speed is unknown, defaulting to 1000 [ 1493.695146][T16465] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1493.778941][T16465] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1493.780774][T16465] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1493.900366][T16465] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1493.904506][T16465] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1494.050276][T16465] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1494.056182][T16465] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1494.276542][T16465] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1494.665410][T16914] xfrm0 speed is unknown, defaulting to 1000 [ 1494.897647][T16465] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1495.046694][T16465] 8021q: adding VLAN 0 to HW filter on device team0 [ 1495.351268][T12670] bridge0: port 1(bridge_slave_0) entered blocking state [ 1495.353198][T12670] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1495.466309][T12670] bridge0: port 2(bridge_slave_1) entered blocking state [ 1495.468393][T12670] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1495.872317][T16914] xfrm0 speed is unknown, defaulting to 1000 [ 1496.962073][T16914] xfrm0 speed is unknown, defaulting to 1000 [ 1497.630636][T16465] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1497.686056][T16914] xfrm0 speed is unknown, defaulting to 1000 [ 1497.915150][T16465] veth0_vlan: entered promiscuous mode [ 1498.070260][T17123] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2900'. [ 1498.073517][T16465] veth1_vlan: entered promiscuous mode [ 1498.346674][T16465] veth0_macvtap: entered promiscuous mode [ 1498.517346][T16465] veth1_macvtap: entered promiscuous mode [ 1498.592538][T16465] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1498.657386][T16465] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1499.025997][T12670] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1499.055852][ T1504] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1499.059938][ T2874] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1499.060719][ T2874] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1500.098364][T17161] syzkaller1: entered promiscuous mode [ 1500.105422][T17161] syzkaller1: entered allmulticast mode [ 1500.280765][ T1491] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1500.280787][ T1491] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1501.031733][ T1507] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1501.032197][ T1507] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1501.656682][T13339] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1501.713494][T13339] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1501.743100][T13339] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1501.754777][T13339] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1501.756007][T13339] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1501.957800][T17224] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2939'. [ 1502.564264][T17251] netlink: 564 bytes leftover after parsing attributes in process `syz.1.2945'. [ 1502.610658][T17253] xt_nfacct: accounting object `s' does not exist [ 1502.667098][T17251] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2945'. [ 1502.862506][T17254] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input10 [ 1503.153515][T17265] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2953'. [ 1503.188044][T17266] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2952'. [ 1503.339671][T17268] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 1503.340360][T17220] xfrm0 speed is unknown, defaulting to 1000 [ 1503.760872][T17275] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2955'. [ 1503.877873][T17275] bond2: option lacp_active: invalid value (5) [ 1503.944586][T17275] bond2 (unregistering): Released all slaves [ 1503.990014][T13339] Bluetooth: hci4: command tx timeout [ 1504.084239][T17283] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2958'. [ 1504.387957][T17287] netlink: 'syz.6.2960': attribute type 1 has an invalid length. [ 1504.993523][T17295] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2964'. [ 1505.548138][T17316] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2968'. [ 1505.629399][T17318] netlink: 64 bytes leftover after parsing attributes in process `syz.5.2970'. [ 1506.259412][T13339] Bluetooth: hci4: command tx timeout [ 1507.136130][T17346] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2981'. [ 1507.547289][T17358] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2985'. [ 1507.597873][T17358] bridge_slave_1: left allmulticast mode [ 1507.597948][T17358] bridge_slave_1: left promiscuous mode [ 1507.598217][T17358] bridge0: port 2(bridge_slave_1) entered disabled state [ 1507.660638][T17362] netlink: 'syz.0.2985': attribute type 83 has an invalid length. [ 1508.215363][T17369] xt_nfacct: accounting object `syz' does not exist [ 1508.313095][T13339] Bluetooth: hci4: command tx timeout [ 1508.451290][T17358] bridge_slave_0: left allmulticast mode [ 1508.451377][T17358] bridge_slave_0: left promiscuous mode [ 1508.451613][T17358] bridge0: port 1(bridge_slave_0) entered disabled state [ 1508.967613][T17384] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2994'. [ 1509.131794][T17220] bridge0: port 1(bridge_slave_0) entered blocking state [ 1509.139331][T17220] bridge0: port 1(bridge_slave_0) entered disabled state [ 1509.139521][T17220] bridge_slave_0: entered allmulticast mode [ 1509.142154][T17220] bridge_slave_0: entered promiscuous mode [ 1509.145119][T17220] bridge0: port 2(bridge_slave_1) entered blocking state [ 1509.145326][T17220] bridge0: port 2(bridge_slave_1) entered disabled state [ 1509.145512][T17220] bridge_slave_1: entered allmulticast mode [ 1509.148037][T17220] bridge_slave_1: entered promiscuous mode [ 1509.247088][T17220] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1509.260641][T17220] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1509.313292][T17220] team0: Port device team_slave_0 added [ 1509.323000][T17220] team0: Port device team_slave_1 added [ 1509.368402][T17220] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1509.375573][T17220] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1509.402518][T17220] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1509.416511][T17220] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1509.425681][T17220] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1509.425714][T17220] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1509.604170][T17220] hsr_slave_0: entered promiscuous mode [ 1509.620884][T17220] hsr_slave_1: entered promiscuous mode [ 1509.622573][T17220] debugfs: 'hsr0' already exists in 'hsr' [ 1509.622597][T17220] Cannot create hsr debugfs directory [ 1510.389468][T13339] Bluetooth: hci4: command tx timeout [ 1510.449503][T17418] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3010'. [ 1511.940456][T17220] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1512.646390][T17468] bridge_slave_0: left allmulticast mode [ 1512.646427][T17468] bridge_slave_0: left promiscuous mode [ 1512.646674][T17468] bridge0: port 1(bridge_slave_0) entered disabled state [ 1512.852512][T17485] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3040'. [ 1512.972592][T17468] bridge_slave_1: left allmulticast mode [ 1512.972670][T17468] bridge_slave_1: left promiscuous mode [ 1512.972893][T17468] bridge0: port 2(bridge_slave_1) entered disabled state [ 1513.131879][T17468] bond0: (slave bond_slave_0): Releasing backup interface [ 1513.240614][T17468] bond0: (slave bond_slave_1): Releasing backup interface [ 1513.307336][T17468] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1513.418333][T17495] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3041'. [ 1513.484191][T17497] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1513.964207][T17220] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1514.531960][T17522] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3055'. [ 1514.585498][T17528] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input11 [ 1515.038629][T17220] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1515.061710][T17541] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3058'. [ 1515.147408][T17542] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3058'. [ 1515.626708][T17557] netlink: 220 bytes leftover after parsing attributes in process `syz.0.3060'. [ 1515.643295][T17557] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3060'. [ 1515.686065][T17551] netdevsim netdevsim0: Direct firmware load for .® failed with error -2 [ 1515.703224][T17551] netdevsim netdevsim0: Falling back to sysfs fallback for: .® [ 1516.313505][T17220] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1516.385124][ T5256] veth0_macvtap: left promiscuous mode [ 1516.397255][T17557] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 1516.397297][T17557] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 1516.397316][T17557] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 1516.649599][T17573] Bluetooth: MGMT ver 1.23 [ 1516.673477][T17573] netlink: 'syz.5.3065': attribute type 3 has an invalid length. [ 1518.570555][T17631] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3083'. [ 1518.658908][T17633] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3084'. [ 1518.668294][T17633] netdevsim netdevsim6 netdevsim0: entered allmulticast mode [ 1518.668968][T17633] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3084'. [ 1518.919936][T17220] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1519.084830][T17220] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1519.105464][T17220] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1519.223377][T17220] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1519.242554][T17220] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1519.284988][T17220] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1519.471877][T17220] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1519.514373][T17220] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1519.832844][T17220] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1519.961781][T17220] 8021q: adding VLAN 0 to HW filter on device team0 [ 1519.975921][T17668] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3094'. [ 1519.993664][T12670] bridge0: port 1(bridge_slave_0) entered blocking state [ 1519.993889][T12670] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1520.042134][ T1491] bridge0: port 2(bridge_slave_1) entered blocking state [ 1520.049569][ T1491] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1520.547244][T17683] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3099'. [ 1521.007216][T17705] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3105'. [ 1521.008791][T17705] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3105'. [ 1521.059360][T17708] netlink: 'syz.6.3105': attribute type 4 has an invalid length. [ 1521.061117][T17708] netlink: 152 bytes leftover after parsing attributes in process `syz.6.3105'. [ 1521.556644][T17705] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1521.575932][T17705] bond2: (slave bond0): making interface the new active one [ 1521.577022][T17705] bond2: (slave bond0): Enslaving as an active interface with an up link [ 1521.579998][T17708] .`: renamed from bond0 (while UP) [ 1521.784730][T17735] netlink: 220 bytes leftover after parsing attributes in process `syz.1.3118'. [ 1522.876307][T17220] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1523.334393][T17748] netlink: 136 bytes leftover after parsing attributes in process `syz.1.3122'. [ 1523.376839][T17220] veth0_vlan: entered promiscuous mode [ 1523.415491][T17220] veth1_vlan: entered promiscuous mode [ 1523.607925][T17220] veth0_macvtap: entered promiscuous mode [ 1523.636397][T17220] veth1_macvtap: entered promiscuous mode [ 1523.696547][T17220] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1523.755561][T17220] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1524.524251][T17794] lo: entered promiscuous mode [ 1524.563592][T17794] tunl0: entered promiscuous mode [ 1524.624514][T17794] gre0: entered promiscuous mode [ 1524.681558][T17794] gretap0: entered promiscuous mode [ 1524.774453][T17794] erspan0: entered promiscuous mode [ 1524.780210][T17794] ip_vti0: entered promiscuous mode [ 1524.783957][T17794] ip6_vti0: entered promiscuous mode [ 1524.796152][T17794] sit0: entered promiscuous mode [ 1524.813190][T17794] ip6tnl0: entered promiscuous mode [ 1524.845479][T17794] ip6gre0: entered promiscuous mode [ 1524.901175][T17794] syz_tun: entered promiscuous mode [ 1525.031517][T17794] ip6gretap0: entered promiscuous mode [ 1525.460124][ T1507] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1525.482452][ T56] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1525.516826][T17843] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3160'. [ 1525.752898][ T56] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1525.761454][ T162] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1525.938260][T17847] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3162'. [ 1526.863993][T12670] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1526.864107][T12670] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1527.366923][T17873] 8021q: adding VLAN 0 to HW filter on device .` [ 1527.418586][T17873] xfrm0: left promiscuous mode [ 1527.543860][T17873] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 1527.596450][T17873] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1527.668232][T17873] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1527.813964][ T5743] xfrm0 speed is unknown, defaulting to 1000 [ 1527.817121][ T5743] syz0: Port: 1 Link ACTIVE [ 1527.825744][ T5743] xfrm0 speed is unknown, defaulting to 1000 [ 1527.838218][ T162] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1527.839681][ T162] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1527.963828][ T1491] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1527.982866][ T1491] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1527.993724][ T8591] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1528.209656][ T162] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1528.219222][ T8591] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1528.371424][T17912] openvswitch: netlink: Flow key attr not present in new flow. [ 1528.889812][T17932] block nbd0: Unsupported socket: should be TCP or UNIX. [ 1529.504153][ T59] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1529.562035][ T59] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1529.587359][ T59] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1529.608847][ T59] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1529.658747][ T59] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1530.991543][T17992] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3207'. [ 1531.043432][T17993] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3207'. [ 1531.829327][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1531.909487][T13339] Bluetooth: hci3: command tx timeout [ 1532.093876][T17952] xfrm0 speed is unknown, defaulting to 1000 [ 1533.351640][T18082] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_team, syncid = 0, id = 0 [ 1533.632660][T17952] bridge0: port 1(bridge_slave_0) entered blocking state [ 1533.640459][T17952] bridge0: port 1(bridge_slave_0) entered disabled state [ 1533.645478][T17952] bridge_slave_0: entered allmulticast mode [ 1533.656991][T17952] bridge_slave_0: entered promiscuous mode [ 1533.696805][T17952] bridge0: port 2(bridge_slave_1) entered blocking state [ 1533.704189][T17952] bridge0: port 2(bridge_slave_1) entered disabled state [ 1533.704395][T17952] bridge_slave_1: entered allmulticast mode [ 1533.733299][T17952] bridge_slave_1: entered promiscuous mode [ 1533.801496][T17952] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1533.816705][T17952] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1533.917880][T17952] team0: Port device team_slave_0 added [ 1533.924887][T17952] team0: Port device team_slave_1 added [ 1533.989442][T13339] Bluetooth: hci3: command tx timeout [ 1534.005639][T17952] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1534.005703][T17952] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1534.005734][T17952] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1534.008327][T17952] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1534.008341][T17952] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1534.008365][T17952] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1534.178916][T17952] hsr_slave_0: entered promiscuous mode [ 1534.191623][T17952] hsr_slave_1: entered promiscuous mode [ 1534.194762][T17952] debugfs: 'hsr0' already exists in 'hsr' [ 1534.194788][T17952] Cannot create hsr debugfs directory [ 1535.377820][T17952] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1535.577676][T18145] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_team, syncid = 0, id = 0 [ 1535.938228][T17952] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1536.069509][T13339] Bluetooth: hci3: command tx timeout [ 1536.426023][T17952] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1536.612232][T18180] openvswitch: netlink: IP tunnel dst address not specified [ 1536.827267][T17952] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1538.159265][T13339] Bluetooth: hci3: command tx timeout [ 1539.176532][T18247] IPVS: persistence engine module ip_vs_pe_ not found [ 1539.188747][T17952] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1539.220403][T17952] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1539.223394][T17952] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1539.263951][T17952] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1539.278244][T18255] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3313'. [ 1539.522140][T17952] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1539.565364][T17952] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1539.588259][T17952] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1539.626009][T17952] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1539.679833][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1539.688257][T18258] xfrm0 speed is unknown, defaulting to 1000 [ 1539.827351][T17952] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1539.904955][T17952] 8021q: adding VLAN 0 to HW filter on device team0 [ 1539.924297][ T1504] bridge0: port 1(bridge_slave_0) entered blocking state [ 1539.924483][ T1504] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1539.962327][ T1504] bridge0: port 2(bridge_slave_1) entered blocking state [ 1539.962472][ T1504] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1541.250861][T18277] netlink: 136 bytes leftover after parsing attributes in process `syz.2.3319'. [ 1541.918700][T18323] syz_tun: entered promiscuous mode [ 1541.941120][T18323] vlan2: entered promiscuous mode [ 1542.021878][T18330] openvswitch: netlink: Flow key attr not present in new flow. [ 1542.283391][T17952] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1542.663085][T17952] veth0_vlan: entered promiscuous mode [ 1542.712407][T17952] veth1_vlan: entered promiscuous mode [ 1542.797271][T18352] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1542.849400][T17952] veth0_macvtap: entered promiscuous mode [ 1542.855586][T17952] veth1_macvtap: entered promiscuous mode [ 1542.876403][T17952] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1542.893213][T17952] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1542.967485][T18356] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3348'. [ 1542.967568][T18356] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3348'. [ 1543.006645][ T2874] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1543.007039][ T2874] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1543.218810][T18358] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3349'. [ 1543.540824][T18358] bridge_slave_1: left allmulticast mode [ 1543.554300][T18358] bridge_slave_1: left promiscuous mode [ 1543.554596][T18358] bridge0: port 2(bridge_slave_1) entered disabled state [ 1543.805000][T18358] bridge_slave_0: left allmulticast mode [ 1543.818103][T18358] bridge_slave_0: left promiscuous mode [ 1543.818403][T18358] bridge0: port 1(bridge_slave_0) entered disabled state [ 1544.572515][ T1507] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1544.574077][ T1507] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1544.649477][ T1491] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1544.947380][T18389] netlink: 'syz.6.3361': attribute type 1 has an invalid length. [ 1544.955789][T18389] netlink: 224 bytes leftover after parsing attributes in process `syz.6.3361'. [ 1544.981519][ T56] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1544.981542][ T56] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1546.201872][T18393] xfrm0 speed is unknown, defaulting to 1000 [ 1546.739491][ T1495] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1547.316261][T18470] netlink: 'syz.1.3389': attribute type 1 has an invalid length. [ 1547.316286][T18470] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3389'. [ 1548.878938][T18487] capability: warning: `syz.2.3393' uses deprecated v2 capabilities in a way that may be insecure [ 1549.314664][ T5712] xfrm0 speed is unknown, defaulting to 1000 [ 1549.321308][ T5712] syz0: Port: 1 Link DOWN [ 1549.626433][ T5712] xfrm0 speed is unknown, defaulting to 1000 [ 1549.635542][ T162] netdevsim netdevsim6 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1549.645001][ T162] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1549.654324][ T162] netdevsim netdevsim6 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1549.663301][ T162] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1549.696311][ T1491] netdevsim netdevsim6 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1549.696383][ T1491] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1549.696519][ T1491] netdevsim netdevsim6 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1549.696539][ T1491] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1550.778647][T18524] netlink: 68 bytes leftover after parsing attributes in process `syz.5.3408'. [ 1550.956150][T18530] netlink: 'syz.1.3409': attribute type 1 has an invalid length. [ 1550.956841][T18530] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3409'. [ 1551.205809][ T1325] ieee802154 phy0 wpan0: encryption failed: -22 [ 1551.607331][T18560] netlink: 72 bytes leftover after parsing attributes in process `syz.6.3423'. [ 1552.627700][T18574] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3429'. [ 1552.628336][T18574] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3429'. [ 1552.808137][T18579] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3428'. [ 1553.080095][T18590] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1554.004756][T18622] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3448'. [ 1555.236146][T18655] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3460'. [ 1555.729566][T18661] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3462'. [ 1558.454124][T18718] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3483'. [ 1558.458967][T18718] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3483'. [ 1560.473779][T18742] netlink: 148 bytes leftover after parsing attributes in process `syz.1.3492'. [ 1561.118741][T18756] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3498'. [ 1561.122968][T18756] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3498'. [ 1561.283653][T18759] block nbd0: server does not support multiple connections per device. [ 1561.354906][T18759] block nbd0: shutting down sockets [ 1561.526836][T18767] binder: 18763:18767 ioctl c0306201 200000000080 returned -14 [ 1562.396717][T18778] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3506'. [ 1562.398056][T18778] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3506'. [ 1563.379007][T18799] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3511'. [ 1563.393473][T18799] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3511'. [ 1563.403186][T18801] block nbd0: server does not support multiple connections per device. [ 1563.417799][T18801] block nbd0: shutting down sockets [ 1564.976649][T18861] 8021q: VLANs not supported on ip6gre0 [ 1565.073198][T18866] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3542'. [ 1565.439221][ T5743] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 1565.446980][ T37] kauditd_printk_skb: 254 callbacks suppressed [ 1565.446999][ T37] audit: type=1326 audit(1788347501.066:353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18886 comm="syz.2.3552" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51c18ce159 code=0x7ffc0000 [ 1565.449944][ T37] audit: type=1326 audit(1788347501.066:354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18886 comm="syz.2.3552" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51c18ce159 code=0x7ffc0000 [ 1565.455399][ T37] audit: type=1326 audit(1788347501.076:355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18886 comm="syz.2.3552" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=90 compat=0 ip=0x7f51c18ce159 code=0x7ffc0000 [ 1565.455709][ T37] audit: type=1326 audit(1788347501.076:356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18886 comm="syz.2.3552" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51c18ce159 code=0x7ffc0000 [ 1565.457040][ T37] audit: type=1326 audit(1788347501.076:357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18886 comm="syz.2.3552" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51c18ce159 code=0x7ffc0000 [ 1565.589336][ T5743] usb 6-1: Using ep0 maxpacket: 16 [ 1565.590181][ T5743] usb 6-1: New USB device found, idVendor=056a, idProduct=030a, bcdDevice= 0.00 [ 1565.591422][ T5743] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1565.591444][ T5743] usb 6-1: config 0 has no interfaces? [ 1565.591472][ T5743] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1565.608543][ T5743] usb 6-1: config 0 descriptor?? [ 1566.009444][ T5732] usb 6-1: USB disconnect, device number 39 [ 1566.777854][T18930] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3568'. [ 1566.856257][T18932] netlink: 'syz.5.3570': attribute type 1 has an invalid length. [ 1566.856314][T18932] netlink: 224 bytes leftover after parsing attributes in process `syz.5.3570'. [ 1568.219611][T18942] usb usb1: usbfs: interface 0 claimed by hub while 'syz.5.3573' sets config #1 [ 1569.043110][T18953] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3576'. [ 1569.439469][T18965] netlink: 'syz.0.3582': attribute type 1 has an invalid length. [ 1569.439564][T18965] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3582'. [ 1570.792309][T18963] netlink: 136 bytes leftover after parsing attributes in process `syz.6.3581'. [ 1572.082400][T19014] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1572.623945][T19020] netlink: 136 bytes leftover after parsing attributes in process `syz.2.3599'. [ 1573.600429][T13339] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 1575.643963][T19068] netlink: 136 bytes leftover after parsing attributes in process `syz.6.3620'. [ 1575.683660][T13339] block nbd0: Receive control failed (result -32) [ 1575.896900][T19104] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3632'. [ 1576.058282][T13339] Bluetooth: hci2: unexpected event for opcode 0x0407 [ 1576.298618][T19125] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3639'. [ 1576.800222][T19145] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3645'. [ 1577.603264][T19137] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1577.618869][T19137] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1578.252736][T19167] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3652'. [ 1578.263571][T19169] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3653'. [ 1578.304408][T19170] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3652'. [ 1579.150055][ T8591] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1579.610389][ T8591] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1579.621674][ T8591] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1579.621832][ T8591] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1580.289269][ T999] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 1580.323501][T19200] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3663'. [ 1580.324089][T19200] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3663'. [ 1580.427846][T13339] Bluetooth: hci4: Malformed MSFT vendor event: 0x02 [ 1580.462064][ T999] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1580.463369][ T999] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1580.463392][ T999] usb 2-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 1580.463427][ T999] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1580.526555][T19206] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3666'. [ 1580.528731][T19206] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3666'. [ 1580.871908][T13339] Bluetooth: hci4: Malformed MSFT vendor event: 0x02 [ 1580.887218][ T999] usb 2-1: USB disconnect, device number 52 [ 1581.459344][ T5851] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 1581.609236][ T5851] usb 6-1: Using ep0 maxpacket: 16 [ 1581.614582][ T5851] usb 6-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1581.621202][ T5851] usb 6-1: config index 0 descriptor too short (expected 51443, got 18) [ 1581.637659][ T5851] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1581.646086][ T5851] usb 6-1: Product: syz [ 1581.646108][ T5851] usb 6-1: Manufacturer: syz [ 1581.646122][ T5851] usb 6-1: SerialNumber: syz [ 1581.669405][ T5851] r8152-cfgselector 6-1: Unknown version 0x0000 [ 1581.669483][ T5851] r8152-cfgselector 6-1: config 0 descriptor?? [ 1582.203403][ T999] r8152-cfgselector 6-1: USB disconnect, device number 40 [ 1584.166387][T19283] nbd: must specify at least one socket [ 1585.352345][T19317] nbd: must specify at least one socket [ 1587.179757][ T10] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 1587.330144][ T10] usb 2-1: New USB device found, idVendor=0763, idProduct=2081, bcdDevice= 0.40 [ 1587.341114][ T10] usb 2-1: config 1 has an invalid interface number: 112 but max is 2 [ 1587.341140][ T10] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1587.341159][ T10] usb 2-1: config 1 has 4 interfaces, different from the descriptor's value: 3 [ 1587.341178][ T10] usb 2-1: config 1 has no interface number 3 [ 1587.341259][ T10] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 37, changing to 7 [ 1587.344198][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1587.344224][ T10] usb 2-1: Product: syz [ 1587.344238][ T10] usb 2-1: Manufacturer: syz [ 1587.344252][ T10] usb 2-1: SerialNumber: syz [ 1587.670420][ T10] usb 2-1: Can't get UAC3 power state for id 10 [ 1587.705808][ T10] usb 2-1: 2:0: failed to get current value for ch 0 (-71) [ 1587.717304][ T10] usb 2-1: 2:0: cannot get min/max values for control 2 (id 2) [ 1587.717334][ T10] usb 2-1: Warning! Unlikely small volume range (=1), linear volume or custom curve? [ 1587.717352][ T10] usb 2-1: [2] FU [Speaker Playback Volume] ch = 1, val = 0/1/1 [ 1588.219597][ T10] usb 2-1: 2:0: cannot get min/max values for control 2 (id 2) [ 1588.289724][ T10] usb 2-1: 2:0: cannot get min/max values for control 2 (id 2) [ 1588.343447][ T10] usb 2-1: USB disconnect, device number 53 [ 1589.777255][T19397] udevd[19397]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1589.802868][T19399] __nla_validate_parse: 1 callbacks suppressed [ 1589.802887][T19399] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3737'. [ 1590.097865][T19405] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3739'. [ 1590.107445][T19405] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3739'. [ 1590.701820][T19428] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3748'. [ 1594.366363][T19463] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3759'. [ 1595.276358][T19482] netlink: 'syz.1.3766': attribute type 11 has an invalid length. [ 1598.048236][T19490] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3772'. [ 1599.402588][T19503] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1599.829800][T13339] Bluetooth: hci0: command 0x0406 tx timeout [ 1599.919212][T14770] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 1600.242347][T14770] usb 2-1: Using ep0 maxpacket: 32 [ 1600.372742][T14770] usb 2-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 1600.474746][T14770] usb 2-1: config 0 has an invalid interface number: 188 but max is 0 [ 1600.474774][T14770] usb 2-1: config 0 has no interface number 0 [ 1600.474819][T14770] usb 2-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 1600.484426][T14770] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1600.484451][T14770] usb 2-1: Product: syz [ 1600.484465][T14770] usb 2-1: Manufacturer: syz [ 1600.484480][T14770] usb 2-1: SerialNumber: syz [ 1600.541225][T14770] usb 2-1: config 0 descriptor?? [ 1600.548151][T19517] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1601.019457][T19541] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3791'. [ 1601.404811][T19517] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1601.619418][T14770] asix 2-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1601.619706][T14770] asix 2-1:0.188: probe with driver asix failed with error -71 [ 1601.630868][T14770] usb 2-1: USB disconnect, device number 54 [ 1602.338383][ T59] Bluetooth: hci4: Malformed MSFT vendor event: 0x02 [ 1603.060888][T19580] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3802'. [ 1604.178440][ T59] Bluetooth: hci0: Malformed MSFT vendor event: 0x02 [ 1605.579011][T19621] syz_tun: entered promiscuous mode [ 1605.579414][T19621] vlan2: entered promiscuous mode [ 1605.929383][ T59] Bluetooth: hci2: Malformed MSFT vendor event: 0x02 [ 1608.343110][T19655] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3832'. [ 1608.561317][T19658] usb usb1: usbfs: interface 0 claimed by hub while 'syz.0.3833' sets config #1 [ 1610.231475][T19669] 8021q: VLANs not supported on ip6gre0 [ 1611.544350][T19689] netlink: 1688 bytes leftover after parsing attributes in process `syz.6.3845'. [ 1611.768688][T19697] 8021q: VLANs not supported on ip6gre0 [ 1611.878157][T19702] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3852'. [ 1612.520300][T13339] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1612.522417][T19719] netlink: 1688 bytes leftover after parsing attributes in process `syz.2.3858'. [ 1612.578413][T13339] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1612.587333][T13339] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1612.638865][ T1325] ieee802154 phy0 wpan0: encryption failed: -22 [ 1612.653136][T13339] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1612.657509][T13339] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1615.615569][T13339] Bluetooth: hci1: command tx timeout [ 1615.914717][T19741] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3867'. [ 1616.211796][T19739] 8021q: VLANs not supported on ip6tnl0 [ 1616.593849][T19753] binder: 19748:19753 ioctl c0306201 200000000080 returned -14 [ 1618.841969][T13339] Bluetooth: hci1: command tx timeout [ 1619.205381][T19765] netlink: 256 bytes leftover after parsing attributes in process `syz.1.3873'. [ 1619.833269][T19714] xfrm0 speed is unknown, defaulting to 1000 [ 1620.424339][T19784] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3878'. [ 1621.601745][T13339] Bluetooth: hci1: command tx timeout [ 1622.397700][T19814] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3889'. [ 1624.468060][ T59] Bluetooth: hci1: command tx timeout [ 1624.526389][T19714] bridge0: port 1(bridge_slave_0) entered blocking state [ 1624.526507][T19714] bridge0: port 1(bridge_slave_0) entered disabled state [ 1624.549345][T19714] bridge_slave_0: entered allmulticast mode [ 1624.553374][T19714] bridge_slave_0: entered promiscuous mode [ 1624.580570][T19714] bridge0: port 2(bridge_slave_1) entered blocking state [ 1624.580775][T19714] bridge0: port 2(bridge_slave_1) entered disabled state [ 1624.580975][T19714] bridge_slave_1: entered allmulticast mode [ 1624.592772][T19714] bridge_slave_1: entered promiscuous mode [ 1624.714473][T19851] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3902'. [ 1625.806568][T19714] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1625.840723][T19714] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1626.018325][T19865] binder: 19862:19865 ioctl c0306201 200000000080 returned -14 [ 1626.505758][T19714] team0: Port device team_slave_0 added [ 1626.510326][T19714] team0: Port device team_slave_1 added [ 1626.572004][T19714] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1626.580832][T19714] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1626.580866][T19714] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1626.588378][T19714] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1626.588397][T19714] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1626.588424][T19714] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1626.761578][T19714] hsr_slave_0: entered promiscuous mode [ 1626.768757][T19714] hsr_slave_1: entered promiscuous mode [ 1626.776304][T19714] debugfs: 'hsr0' already exists in 'hsr' [ 1626.782297][T19714] Cannot create hsr debugfs directory [ 1629.183402][T19878] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3910'. [ 1630.172863][ T59] Bluetooth: hci5: unexpected event for opcode 0x080e [ 1633.154643][T19896] isofs_fill_super: bread failed, dev=loop13, iso_blknum=16, block=32 [ 1634.309958][T19714] bond0: (slave netdevsim1): Releasing backup interface [ 1641.094378][ T59] Bluetooth: hci4: command 0x0406 tx timeout [ 1642.005889][T17151] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 1642.159822][T17151] usb 1-1: Using ep0 maxpacket: 32 [ 1642.170393][T17151] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1642.183183][T17151] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1642.183216][T17151] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1642.183254][T17151] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1643.059587][T17151] usb 1-1: config 0 descriptor?? [ 1643.078428][T17151] hub 1-1:0.0: USB hub found [ 1643.297161][T17151] hub 1-1:0.0: 1 port detected [ 1643.339266][T19714] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1643.475390][T19714] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1643.497602][T19714] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1643.532734][T17151] hub 1-1:0.0: config failed, can't get hub status (err -5) [ 1643.793259][T19714] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1643.818301][T19714] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1643.908169][T19714] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1643.918383][T19714] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1643.952236][ C0] raw-gadget.0 gadget.0: ignoring, device is not running [ 1643.965911][T19714] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1643.976460][T17151] usbhid 1-1:0.0: can't add hid device: -71 [ 1643.976581][T17151] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1644.085216][T17151] usb 1-1: USB disconnect, device number 45 [ 1644.818042][T19714] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1644.874349][T19714] 8021q: adding VLAN 0 to HW filter on device team0 [ 1644.918186][T12670] bridge0: port 1(bridge_slave_0) entered blocking state [ 1644.918428][T12670] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1644.977310][ T1507] bridge0: port 2(bridge_slave_1) entered blocking state [ 1644.977386][ T1507] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1645.361645][T20012] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1649.349558][T19714] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1650.462658][T19714] veth0_vlan: entered promiscuous mode [ 1650.556219][T19714] veth1_vlan: entered promiscuous mode [ 1650.763458][T19714] veth0_macvtap: entered promiscuous mode [ 1650.795338][T19714] veth1_macvtap: entered promiscuous mode [ 1650.877613][T19714] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1650.966699][T19714] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1651.299432][T12670] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1653.181153][T20075] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3974'. [ 1653.181191][T20075] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3974'. [ 1653.181204][T20075] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3974'. [ 1653.243409][ T56] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1653.307450][T12670] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1653.310231][T12670] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1655.569277][ T1504] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1655.569349][ T1504] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1655.672564][T13339] Bluetooth: hci3: command 0x0406 tx timeout [ 1655.757781][ T1504] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1655.757866][ T1504] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1660.701674][T16468] Bluetooth: hci5: unexpected event for opcode 0x0c12 [ 1662.712868][T20150] vlan2: entered promiscuous mode [ 1663.477379][T20145] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4000'. [ 1664.632290][T20169] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4009'. [ 1664.925625][T20173] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4011'. [ 1665.975028][T20193] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1667.658554][T20216] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4025'. [ 1667.720127][T16468] Bluetooth: hci4: Malformed LE Event: 0x0f [ 1669.068111][T20226] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1670.171931][T20238] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1670.285087][T16468] Bluetooth: hci0: unexpected event 0x03 length: 1 < 11 [ 1670.339190][ T8708] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 1670.907698][T20256] FAULT_INJECTION: forcing a failure. [ 1670.907698][T20256] name failslab, interval 1, probability 0, space 0, times 0 [ 1670.926671][T20256] CPU: 0 UID: 0 PID: 20256 Comm: syz.5.4039 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1670.926710][T20256] Tainted: [L]=SOFTLOCKUP [ 1670.926719][T20256] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1670.926731][T20256] Call Trace: [ 1670.926740][T20256] [ 1670.926749][T20256] dump_stack_lvl+0xe8/0x150 [ 1670.926788][T20256] should_fail_ex+0x46b/0x600 [ 1670.926832][T20256] should_failslab+0xa8/0x100 [ 1670.926864][T20256] __kmalloc_noprof+0xfb/0x790 [ 1670.926890][T20256] ? sk_prot_alloc+0xe7/0x210 [ 1670.926915][T20256] ? sk_prot_alloc+0xe7/0x210 [ 1670.926945][T20256] sk_prot_alloc+0xe7/0x210 [ 1670.926968][T20256] ? sk_alloc+0x27/0x390 [ 1670.926993][T20256] sk_alloc+0x3a/0x390 [ 1670.927021][T20256] bt_sock_alloc+0x3b/0x340 [ 1670.927162][T20256] hci_sock_create+0xa3/0x1c0 [ 1670.927248][T20256] bt_sock_create+0x163/0x240 [ 1670.927272][T20256] __sock_create+0x4b3/0x9d0 [ 1670.927304][T20256] __sys_socket+0xd6/0x1b0 [ 1670.927329][T20256] __x64_sys_socket+0x7a/0x90 [ 1670.927351][T20256] do_syscall_64+0x166/0x520 [ 1670.927374][T20256] ? trace_irq_disable+0x3b/0x140 [ 1670.927399][T20256] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1670.927420][T20256] ? clear_bhb_loop+0x70/0xc0 [ 1670.927444][T20256] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1670.927464][T20256] RIP: 0033:0x7fe5ed89e159 [ 1670.927490][T20256] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1670.927507][T20256] RSP: 002b:00007fe5ebaf5fc8 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 1670.927529][T20256] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00007fe5ed89e159 [ 1670.927543][T20256] RDX: 0000000000000001 RSI: 0000000000000003 RDI: 000000000000001f [ 1670.927555][T20256] RBP: 00007fe5ed935024 R08: 0000000000000000 R09: 0000000000000000 [ 1670.927568][T20256] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1670.927580][T20256] R13: 00007fe5edb26038 R14: 00007fe5edb25fa0 R15: 00007ffff147af28 [ 1670.927611][T20256] [ 1671.254925][ T8708] usb 7-1: Using ep0 maxpacket: 8 [ 1671.334392][ T8708] usb 7-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1671.541387][ T8708] usb 7-1: config 179 has an invalid interface number: 65 but max is 0 [ 1671.562983][ T8708] usb 7-1: config 179 has no interface number 0 [ 1671.563045][ T8708] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1671.563072][ T8708] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 1671.563098][ T8708] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1671.563122][ T8708] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 1671.563147][ T8708] usb 7-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1671.563189][ T8708] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1671.788235][T20236] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1672.572154][ C1] xpad 7-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1672.572432][ C1] xpad 7-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 1672.572512][T14770] usb 7-1: USB disconnect, device number 12 [ 1672.927167][ T8708] input: Generic X-Box pad as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:179.65/input/input13 [ 1674.184354][ T1325] ieee802154 phy0 wpan0: encryption failed: -22 [ 1674.595536][T14770] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 1674.904276][T14770] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1674.917408][T14770] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1674.959839][T14770] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1674.967995][T14770] usb 7-1: Product: syz [ 1674.968017][T14770] usb 7-1: Manufacturer: syz [ 1674.968031][T14770] usb 7-1: SerialNumber: syz [ 1675.124045][T20258] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1675.141035][T20258] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1677.925779][T14770] cdc_ncm 7-1:1.0: bind() failure [ 1677.941678][T14770] cdc_ncm 7-1:1.1: CDC Union missing and no IAD found [ 1677.941778][T14770] cdc_ncm 7-1:1.1: bind() failure [ 1677.975308][T14770] usb 7-1: USB disconnect, device number 13 [ 1678.158835][ T37] audit: type=1326 audit(1788347613.766:358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20310 comm="syz.1.4056" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09d6bce159 code=0x7ffc0000 [ 1678.158893][ T37] audit: type=1326 audit(1788347613.766:359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20310 comm="syz.1.4056" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09d6bce159 code=0x7ffc0000 [ 1678.173328][ T37] audit: type=1326 audit(1788347613.796:360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20310 comm="syz.1.4056" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09d6bce159 code=0x7ffc0000 [ 1678.173383][ T37] audit: type=1326 audit(1788347613.796:361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20310 comm="syz.1.4056" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09d6bce159 code=0x7ffc0000 [ 1678.174834][ T37] audit: type=1326 audit(1788347613.796:362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20310 comm="syz.1.4056" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=255 compat=0 ip=0x7f09d6bce159 code=0x7ffc0000 [ 1678.174879][ T37] audit: type=1326 audit(1788347613.796:363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20310 comm="syz.1.4056" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09d6bce159 code=0x7ffc0000 [ 1678.174915][ T37] audit: type=1326 audit(1788347613.796:364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20310 comm="syz.1.4056" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09d6bce159 code=0x7ffc0000 [ 1678.180702][ T37] audit: type=1326 audit(1788347613.796:365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20310 comm="syz.1.4056" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f09d6bce159 code=0x7ffc0000 [ 1678.180749][ T37] audit: type=1326 audit(1788347613.806:366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20310 comm="syz.1.4056" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f09d6bce159 code=0x7ffc0000 [ 1680.847850][ T1507] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1681.033912][ T1491] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1681.308544][T13384] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1681.314252][ T1507] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1683.943773][T16468] Bluetooth: hci0: unexpected Set CIG Parameters response data [ 1683.950291][T16468] Bluetooth: hci0: unexpected event for opcode 0x2062 [ 1686.113491][ T5712] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 1686.419427][ T5712] usb 1-1: Using ep0 maxpacket: 16 [ 1686.425663][ T5712] usb 1-1: New USB device found, idVendor=056a, idProduct=0307, bcdDevice= 0.00 [ 1686.430590][ T5712] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1686.432014][ T5712] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1686.477746][ T5712] usb 1-1: config 0 descriptor?? [ 1686.957258][ T5712] hid_parser_main: 5 callbacks suppressed [ 1686.978134][ T5712] wacom 0003:056A:0307.0004: unknown main item tag 0x2 [ 1686.985189][ T5712] wacom 0003:056A:0307.0004: unknown main item tag 0x2 [ 1686.985223][ T5712] wacom 0003:056A:0307.0004: unknown main item tag 0x2 [ 1686.985249][ T5712] wacom 0003:056A:0307.0004: unknown main item tag 0x6 [ 1687.256466][T16468] [ 1687.258845][T16468] ====================================================== [ 1687.265847][T16468] WARNING: possible circular locking dependency detected [ 1687.272862][T16468] syzkaller #0 Tainted: G L [ 1687.278851][T16468] ------------------------------------------------------ [ 1687.285852][T16468] kworker/u9:1/16468 is trying to acquire lock: [ 1687.292160][T16468] ffffffff8f779498 (rfcomm_mutex){+.+.}-{4:4}, at: rfcomm_security_cfm+0x90/0x820 [ 1687.301484][T16468] [ 1687.301484][T16468] but task is already holding lock: [ 1687.308852][T16468] ffffffff8f754e98 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_encrypt_cfm+0x313/0x500 [ 1687.318260][T16468] [ 1687.318260][T16468] which lock already depends on the new lock. [ 1687.318260][T16468] [ 1687.328650][T16468] [ 1687.328650][T16468] the existing dependency chain (in reverse order) is: [ 1687.337657][T16468] [ 1687.337657][T16468] -> #2 (hci_cb_list_lock){+.+.}-{4:4}: [ 1687.345402][T16468] mutex_lock_nested+0x5a/0x1d0 [ 1687.350808][T16468] hci_remote_features_evt+0x53d/0x950 [ 1687.356870][T16468] hci_event_packet+0x6cd/0xf10 [ 1687.362238][T16468] hci_rx_work+0x3ee/0x1020 [ 1687.367257][T16468] process_scheduled_works+0xc3d/0x1630 [ 1687.373349][T16468] worker_thread+0xa47/0xfb0 [ 1687.378457][T16468] kthread+0x38b/0x470 [ 1687.383052][T16468] ret_from_fork+0x514/0xb70 [ 1687.388153][T16468] ret_from_fork_asm+0x1a/0x30 [ 1687.393424][T16468] [ 1687.393424][T16468] -> #1 (&hdev->lock){+.+.}-{4:4}: [ 1687.400714][T16468] mutex_lock_nested+0x5a/0x1d0 [ 1687.406082][T16468] l2cap_chan_connect+0xff/0xf60 [ 1687.411536][T16468] l2cap_sock_connect+0x5e4/0x7e0 [ 1687.417147][T16468] kernel_connect+0x141/0x1c0 [ 1687.422347][T16468] rfcomm_dlc_open+0x644/0x1080 [ 1687.427711][T16468] rfcomm_sock_connect+0x2ed/0x650 [ 1687.433360][T16468] __sys_connect+0x32d/0x470 [ 1687.438519][T16468] __x64_sys_connect+0x7a/0x90 [ 1687.443812][T16468] do_syscall_64+0x166/0x520 [ 1687.448911][T16468] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1687.455313][T16468] [ 1687.455313][T16468] -> #0 (rfcomm_mutex){+.+.}-{4:4}: [ 1687.462687][T16468] __lock_acquire+0x15ff/0x2e40 [ 1687.462787][T20376] input: syz0 as /devices/virtual/input/input14 [ 1687.474307][T16468] lock_acquire+0x115/0x350 [ 1687.479350][T16468] mutex_lock_nested+0x5a/0x1d0 [ 1687.484748][T16468] rfcomm_security_cfm+0x90/0x820 [ 1687.490326][T16468] hci_encrypt_cfm+0x37e/0x500 [ 1687.495631][T16468] hci_encrypt_change_evt+0x5db/0xcf0 [ 1687.501552][T16468] hci_event_packet+0x6cd/0xf10 [ 1687.506953][T16468] hci_rx_work+0x3ee/0x1020 [ 1687.512001][T16468] process_scheduled_works+0xc3d/0x1630 [ 1687.518093][T16468] worker_thread+0xa47/0xfb0 [ 1687.523339][T16468] kthread+0x38b/0x470 [ 1687.527948][T16468] ret_from_fork+0x514/0xb70 [ 1687.533077][T16468] ret_from_fork_asm+0x1a/0x30 [ 1687.538375][T16468] [ 1687.538375][T16468] other info that might help us debug this: [ 1687.538375][T16468] [ 1687.548633][T16468] Chain exists of: [ 1687.548633][T16468] rfcomm_mutex --> &hdev->lock --> hci_cb_list_lock [ 1687.548633][T16468] [ 1687.561152][T16468] Possible unsafe locking scenario: [ 1687.561152][T16468] [ 1687.568642][T16468] CPU0 CPU1 [ 1687.574019][T16468] ---- ---- [ 1687.579398][T16468] lock(hci_cb_list_lock); [ 1687.583922][T16468] lock(&hdev->lock); [ 1687.590530][T16468] lock(hci_cb_list_lock); [ 1687.597582][T16468] lock(rfcomm_mutex); [ 1687.601760][T16468] [ 1687.601760][T16468] *** DEADLOCK *** [ 1687.601760][T16468] [ 1687.609905][T16468] locks held by kworker/u9:1/16468: 4, last CPU#0: [ 1687.616413][T16468] #0: ffff88804cf2e138 ((wq_completion)hci5#2){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1687.627501][T16468] #1: ffffc90006d77c40 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1687.639550][T16468] #2: ffff8880639140b0 (&hdev->lock){+.+.}-{4:4}, at: hci_encrypt_change_evt+0x92/0xcf0 [ 1687.649420][T16468] #3: ffffffff8f754e98 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_encrypt_cfm+0x313/0x500 [ 1687.659238][T16468] [ 1687.659238][T16468] stack backtrace: [ 1687.665180][T16468] CPU: 0 UID: 0 PID: 16468 Comm: kworker/u9:1 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1687.676821][T16468] Tainted: [L]=SOFTLOCKUP [ 1687.681176][T16468] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1687.691258][T16468] Workqueue: hci5 hci_rx_work [ 1687.695974][T16468] Call Trace: [ 1687.699328][T16468] [ 1687.702284][T16468] dump_stack_lvl+0xe8/0x150 [ 1687.706897][T16468] print_circular_bug+0x2e2/0x300 [ 1687.711989][T16468] check_noncircular+0x12f/0x150 [ 1687.716950][T16468] __lock_acquire+0x15ff/0x2e40 [ 1687.721820][T16468] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1687.727644][T16468] ? rt_mutex_slowunlock+0x219/0x460 [ 1687.733015][T16468] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1687.738686][T16468] lock_acquire+0x115/0x350 [ 1687.743208][T16468] ? rfcomm_security_cfm+0x90/0x820 [ 1687.748435][T16468] ? rfcomm_security_cfm+0x90/0x820 [ 1687.753668][T16468] ? __pfx_rfcomm_security_cfm+0x10/0x10 [ 1687.759331][T16468] ? rfcomm_security_cfm+0x90/0x820 [ 1687.764636][T16468] mutex_lock_nested+0x5a/0x1d0 [ 1687.769499][T16468] ? rfcomm_security_cfm+0x90/0x820 [ 1687.774713][T16468] ? __pfx_l2cap_security_cfm+0x10/0x10 [ 1687.780379][T16468] ? __pfx_rfcomm_security_cfm+0x10/0x10 [ 1687.786051][T16468] rfcomm_security_cfm+0x90/0x820 [ 1687.791109][T16468] ? __pfx_rfcomm_security_cfm+0x10/0x10 [ 1687.796770][T16468] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1687.802598][T16468] ? mutex_lock_nested+0x152/0x1d0 [ 1687.807812][T16468] ? hci_encrypt_cfm+0x313/0x500 [ 1687.812756][T16468] ? __pfx_rfcomm_security_cfm+0x10/0x10 [ 1687.818411][T16468] hci_encrypt_cfm+0x37e/0x500 [ 1687.823188][T16468] hci_encrypt_change_evt+0x5db/0xcf0 [ 1687.828564][T16468] ? __pfx_hci_encrypt_change_evt+0x10/0x10 [ 1687.834464][T16468] ? skb_pull_data+0xf0/0x200 [ 1687.839168][T16468] hci_event_packet+0x6cd/0xf10 [ 1687.844030][T16468] ? reacquire_held_locks+0x117/0x1a0 [ 1687.849863][T16468] ? __pfx_hci_encrypt_change_evt+0x10/0x10 [ 1687.855778][T16468] ? __pfx_hci_event_packet+0x10/0x10 [ 1687.861172][T16468] ? rt_spin_unlock+0x159/0x200 [ 1687.866060][T16468] ? hci_send_to_monitor+0xe2/0x590 [ 1687.871281][T16468] hci_rx_work+0x3ee/0x1020 [ 1687.875796][T16468] ? process_scheduled_works+0x97a/0x1630 [ 1687.881518][T16468] process_scheduled_works+0xc3d/0x1630 [ 1687.887103][T16468] ? __pfx_process_scheduled_works+0x10/0x10 [ 1687.893109][T16468] ? assign_work+0x3cf/0x5d0 [ 1687.897749][T16468] worker_thread+0xa47/0xfb0 [ 1687.902352][T16468] ? __kthread_parkme+0x71/0x1f0 [ 1687.907314][T16468] kthread+0x38b/0x470 [ 1687.911393][T16468] ? __pfx_worker_thread+0x10/0x10 [ 1687.916505][T16468] ? __pfx_kthread+0x10/0x10 [ 1687.921088][T16468] ret_from_fork+0x514/0xb70 [ 1687.925690][T16468] ? __pfx_ret_from_fork+0x10/0x10 [ 1687.930814][T16468] ? __switch_to+0xc89/0x1420 [ 1687.935526][T16468] ? __pfx_kthread+0x10/0x10 [ 1687.940108][T16468] ret_from_fork_asm+0x1a/0x30 [ 1687.944887][T16468] [ 1687.954977][ T10] usb 1-1: USB disconnect, device number 46 [ 1688.419372][T20401] cgroup: Unknown subsys name 'cpuset' [ 1688.595784][T13339] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 1688.595830][T13339] Bluetooth: hci0: Injecting HCI hardware error event [ 1688.597801][T16468] Bluetooth: hci0: hardware error 0x00 [ 1690.629213][T20403] Bluetooth: hci5: command 0x0406 tx timeout [ 1691.029261][T16468] Bluetooth: hci0: Opcode 0x0c03 failed: -110