last executing test programs: 20.547049457s ago: executing program 2 (id=698): recvmsg(0xffffffffffffffff, 0x0, 0x40000000) r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1}, 0x18) connect$can_j1939(r0, &(0x7f0000000140)={0x1d, r1, 0x0, {0x1, 0xff, 0xa8fe8ad4eea2351f}, 0x2}, 0x18) sendmmsg(r0, &(0x7f0000003e40), 0x3fffffffffffe3d, 0xf5) 19.704959405s ago: executing program 2 (id=710): r0 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) ioctl$SG_IO(r0, 0x2285, 0x0) writev(r0, &(0x7f0000000400)=[{&(0x7f0000000080)="aefdda9d240300005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d76641cb010052f436dd2a", 0x2a}, {&(0x7f0000000040)="aa1d484ea0a00000f7fc08fcd111fbdf23ea32db0e8f21d5bc27bd49eb067a0689fff2a41cfbf0e9d85e44", 0x2b}], 0x2) 19.504139202s ago: executing program 2 (id=713): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="170900e100000000000101000000080009000200000014001f000000000000000000000000000000000114002000fe8000000000000000000000000000230500070000000000060002000100000008000a"], 0x5c}}, 0x0) 19.373423462s ago: executing program 2 (id=715): openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$comedi(0xffffffffffffff9c, 0x0, 0x8080, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x40, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x6, 0x100000b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$sndpcmc(0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$rtc(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) keyctl$search(0xa, 0x0, 0x0, 0x0, 0xffffffffffffffff) bind$rds(0xffffffffffffffff, &(0x7f0000000840)={0x2, 0x4e24, @multicast1}, 0x10) r1 = shmget(0x1, 0x4000, 0x200, &(0x7f0000ffb000/0x4000)=nil) shmat(r1, &(0x7f0000ff9000/0x1000)=nil, 0x4000) read$msr(0xffffffffffffffff, &(0x7f0000000140)=""/19, 0x13) shmctl$IPC_RMID(r1, 0x0) getuid() sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) 17.753106864s ago: executing program 2 (id=720): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x18, 0x7, &(0x7f0000000180)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x4}, @exit, @initr0, @exit, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @exit], &(0x7f00000000c0)='GPL\x00'}, 0x78) setreuid(0xee01, 0xee01) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r0, 0x0, 0x0}, 0x10) 17.519716523s ago: executing program 2 (id=724): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x4, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2, 0x8f}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socket$igmp6(0xa, 0x3, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="58000000020601080000000000000000030000000900020073797a3100000000050001000700000005000500020000000c000780080006400000040111000300686173683a6e65742c6e657400000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)={0x50, 0x9, 0x6, 0x201, 0x0, 0x0, {0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @remote}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x64010101}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) unlink(0x0) sendto$inet6(r6, &(0x7f0000847fff)='X', 0x1, 0x0, 0x0, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="4000000010001fff000000000000000000060000", @ANYRES32=0x0, @ANYBLOB="81ffffff00000000180012800e0001007769726567756172640000000400028008000a005124deacb12e68d5b042fd94802e899d13e0374769b03ac3273b6ab1188023b587e473253682146a9f24b52e89b42d3c836c1702078fbba099e45a9ddb039922f65e595e5fb3172b8fc94fe9185633ff84974096e32e8d6ce93ad1488698052714e15b7763bfe3d117e145752db35e4553df3a7d153ee8c27ebc9342e6eecf4d1b92e4ac8c64700aec62c72fd06f652ebc960a30868729b4b249183381de3f1879286998f3493e664e810b0c", @ANYRES32, @ANYBLOB], 0x40}}, 0x0) r8 = getpid() r9 = syz_pidfd_open(r8, 0x0) process_madvise(r9, &(0x7f00000015c0), 0x0, 0x9, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e24, @local}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x6, &(0x7f0000000140)=0x1000201, 0x4) 15.109099939s ago: executing program 1 (id=730): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000002c0)={0x1b, 0x0, 0x0, 0x3, 0x0, 0xffffffffffffffff, 0xc, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4, 0x3}, 0x50) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000000000000020000002c0004802800018007000100637400001c0002800800014000000002080002400000000b05000300000000000900010073797a30000000000900020073797a320000000014000000110001"], 0x80}}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x14, 0x0, 0x14}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x0, 0x0, 0x18, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0xfd6c) 11.740373583s ago: executing program 1 (id=734): mremap(&(0x7f0000590000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) socket$nl_xfrm(0x10, 0x3, 0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'wg2\x00'}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_usb_connect$cdc_ecm(0x4, 0x0, 0x0, &(0x7f0000000340)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x250, 0x0, 0x8, 0x0, 0x40, 0x1}, 0x3c, &(0x7f0000000240)={0x5, 0xf, 0x3c, 0x5, [@ss_container_id={0x14, 0x10, 0x4, 0x6b, "dbeb155e2b17b983a7c22cab658edb58"}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1, 0x30, 0x40, 0x2001}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0x4, 0xe, 0x6}, @ssp_cap={0xc, 0x10, 0xa, 0x1, 0x0, 0xda, 0x7, 0x9}]}, 0x1, [{0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x1018}}]}) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2182, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/consoles\x00', 0x0, 0x0) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe3}]}, 0x10) sendto$inet(r6, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r6, &(0x7f0000004a80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x400c0) sendto$inet(r6, &(0x7f0000000580)="17", 0x1d4c, 0x10048095, 0x0, 0x0) sendfile(r4, r5, 0x0, 0x20000023896) fadvise64(0xffffffffffffffff, 0xfffffffffffffff8, 0x2000000000b09c, 0x0) 9.582691969s ago: executing program 3 (id=746): syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a82300000904000002ca744d00090503034d00ff99090805"], &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$packet(0x11, 0x3, 0x300) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000280)={'vcan0\x00', 0x0}) ioctl$TIOCL_PASTESEL(0xffffffffffffffff, 0x541c, &(0x7f0000000000)) bind$can_j1939(r4, &(0x7f0000000100)={0x1d, r5, 0x0, {}, 0xfd}, 0x18) connect$can_j1939(r4, &(0x7f0000000080)={0x1d, r5, 0x0, {0x0, 0xf0, 0x2}, 0xfe}, 0x18) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x503, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0x400}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x3}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4840) sendmsg$can_j1939(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)='.', 0x1a000}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000780)=@newlink={0x54, 0x10, 0x401, 0x2, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2000, 0x41042}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @vti={{0x8}, {0x14, 0x2, 0x0, 0x1, [@vti_common_policy=[@IFLA_VTI_LINK={0x8}], @IFLA_VTI_REMOTE={0x8, 0x5, @multicast1}]}}}, @IFLA_IFNAME={0x14, 0x3, 'ip_vti0\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x8c5}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={0xffffffffffffffff, 0x0, 0x10, 0x38, &(0x7f00000006c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000700)=""/8, 0x60ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r7, 0x1, 0x2c, &(0x7f0000000100), 0x4) setsockopt$sock_attach_bpf(r7, 0x1, 0x1b, &(0x7f0000000800), 0x4) 7.885217988s ago: executing program 4 (id=747): openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0) r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) socketpair(0x25, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$igmp6(0xa, 0x3, 0x2) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e24, 0x80, @mcast1, 0xf}, 0x1c) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0xa000, 0x1da) io_setup(0x5, &(0x7f0000000180)=0x0) sendmsg$TIPC_CMD_SET_NODE_ADDR(r4, 0x0, 0x8091) io_submit(r5, 0x2, &(0x7f0000000580)=[&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x8, 0xf17, r2, &(0x7f0000000200)="31739c2994a5ae806dea16c67642c4f15a10f0472b36d89dfe8060e391649e5700e7e6ba679cc534d6d4f97aa9b5d2fd71e320c56bc1be2545b23d5752651ef4c65b18939be9b51057d8b52471fcb27bcaf46b8e", 0x54, 0x1000, 0x0, 0x4, r4}, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x6, r1, &(0x7f0000000480)="5acaa90420f6f63da0a6ddf96032592b1f5692cf5240320ec7f71404c9228c3b1e385de72ad78018ab5ca20a6bf28685f7d8b5bf3255b2327bbea90971fde872ef051de7ca931a38882f225dbe22c1fc6c12d5c5723880703038d5a7fc78ec94baac064462450011f9de9aac5378840820c8dc375a3a548456959bb3e8ecefbbfaa2495a14d2", 0x86, 0x4000017, 0x0, 0x0, r2}]) socket$inet_smc(0x2b, 0x1, 0x0) read$FUSE(r4, &(0x7f0000004140)={0x2020}, 0x2020) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r7}, 0x10) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0) pselect6(0x40, &(0x7f0000000100)={0x3, 0x0, 0x0, 0xfffffffffffffffd, 0x3}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0xa, 0x0, 0x0, 0x4}, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0xa0c}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r8 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r8, &(0x7f0000032680)=""/102400, 0x19000) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'pcmmio\x00', [0x4f27, 0x2, 0x4, 0x4, 0x5, 0x5, 0x4, 0x7, 0x54c6cff3, 0xfd, 0x2, 0x1, 0x1, 0x1, 0x6, 0x6a, 0x0, 0x7f, 0x3, 0x40000003, 0x89, 0xcaa3, 0x0, 0x20001e5b, 0x9dc6, 0x2000e66, 0x3, 0x8, 0x4086, 0x0, 0xfffffffc]}) 7.656910146s ago: executing program 1 (id=748): socket$packet(0x11, 0x3, 0x300) socket$inet6(0xa, 0x2, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) socket$l2tp6(0xa, 0x2, 0x73) syz_usbip_server_init(0x1) syz_usbip_server_init(0x2) syz_usbip_server_init(0x0) syz_usbip_server_init(0x1) syz_usbip_server_init(0x5) syz_usbip_server_init(0x0) syz_usbip_server_init(0x0) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x2000, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_usbip_server_init(0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) syz_usbip_server_init(0x2) r2 = syz_io_uring_setup(0x42e6, &(0x7f0000000280)={0x0, 0x5ed9, 0x10100, 0x3, 0x25d, 0x0, r1}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='blkio.bfq.idle_time\x00', 0x275a, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x18, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, {0x3}}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000001c0)) write$UHID_CREATE2(r5, &(0x7f00000001c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r5, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x8, 0x0, 0x0, 0x6, 0x0, 0x1, 0x8}) io_uring_enter(r2, 0x7330, 0x0, 0x0, 0x0, 0x0) 6.75207319s ago: executing program 4 (id=751): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x0, 0x0}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$BTRFS_IOC_GET_FEATURES(r1, 0x80189439, &(0x7f0000000100)) quotactl_fd$Q_GETINFO(r0, 0xffffffff80000502, 0x0, &(0x7f0000000380)) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x50, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c000000020601080000000000000000000000400500010006200000050005000a00000005000400000000000900020073797a310000000011000300686173683a69702c6d61726b"], 0x4c}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r4, 0x0, 0x20000090) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x100000c, 0x10, 0xffffffffffffffff, 0x0) openat$sequencer2(0xffffff9c, &(0x7f0000000080), 0x143240, 0x0) dup(0xffffffffffffffff) 6.316049415s ago: executing program 0 (id=752): syz_usb_connect(0x6, 0x1fc, &(0x7f0000000780)={{0x12, 0x1, 0x250, 0xb8, 0x0, 0x51, 0x8, 0x1410, 0xa007, 0x3e68, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1ea, 0x3, 0xe, 0x0, 0x30, 0x3, [{{0x9, 0x4, 0x3, 0x9, 0x2, 0x7f, 0x54, 0xcc, 0x0, [], [{{0x9, 0x5, 0x2, 0x4, 0x400, 0x4, 0x4, 0x3, [@generic={0x80, 0x1, "09661bede31b6d40ffd5a6457d3483a7c64a2cf09c6b30e3afe9caf13ed9a2924ed053d2b4b24aedb4035d4212c8a5f7df3b67916187c245f81035efe9b53a8d79988d4b00a8aa5926f8b9103fd0e543cebd14ca5d0825146c7ff12ef0b8fe612538542d6f5c9fdc7894374795b8ccb6bdb303b42aa86746d3370ad7a31c"}]}}, {{0x9, 0x5, 0x4, 0x10, 0x40, 0x5, 0x2, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x2, 0x400}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0x1, 0x7}]}}]}}, {{0x9, 0x4, 0x5b, 0x6, 0xc, 0x31, 0x71, 0x35, 0x6, [], [{{0x9, 0x5, 0x5, 0x10, 0x8, 0x6, 0x0, 0xd3, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x2}]}}, {{0x9, 0x5, 0x6, 0x10, 0x20, 0x80, 0xff, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x6, 0x2}]}}, {{0x9, 0x5, 0x0, 0x10, 0x400, 0x9, 0x4, 0x1}}, {{0x9, 0x5, 0x4, 0x10, 0x40, 0xab, 0x0, 0x5}}, {{0x9, 0x5, 0x5, 0x2, 0x20, 0x6, 0xd, 0xd, [@generic={0x48, 0x66, "42bc0201de8fa807c3b757b1c182c0f4c59af7c59293e1bc41956912be0eafd96bdf03aa6117bc3e50fbee59a6e5dfc7206516e091fce94c0c778a134b5368d1af31d240535b"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x2, 0x1}]}}, {{0x9, 0x5, 0xb, 0x8, 0x400, 0x1, 0xa9, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x32, 0xbf6}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x6, 0x15ac}]}}, {{0x9, 0x5, 0x2, 0x14, 0x0, 0xc7, 0x7, 0xe}}, {{0x9, 0x5, 0x1, 0x4, 0x200, 0x8, 0x5, 0x80}}, {{0x9, 0x5, 0x5, 0x10, 0x200, 0x8, 0x2, 0xae, [@uac_iso={0x7, 0x25, 0x1, 0x103, 0xfb, 0xff}]}}, {{0x9, 0x5, 0x0, 0x10, 0x40, 0x8, 0x0, 0x3}}, {{0x9, 0x5, 0xc, 0x4, 0x200, 0x3, 0xd, 0x7, [@generic={0x41, 0xf, "8c1ea652c620acd24cbf2bfeb921dfc3f2c147f7c05a53e4f7db6742a64c76fe8d2f319387c80165b1ad6b9054e93ae7385d785e1c040f2c4e5c2388ef8791"}]}}, {{0x9, 0x5, 0x9, 0x0, 0x20, 0x1, 0x8, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x4, 0x6}]}}]}}, {{0x9, 0x4, 0xf5, 0x1, 0x0, 0xf, 0xd4, 0xdf, 0x3}}]}}]}}, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000940)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r1, @ANYBLOB="00000000000000001c001a800800028008000200080000003e127a510800020010"], 0x44}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xa0}}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0xfff0) recvmmsg$unix(r2, &(0x7f00000037c0), 0x0, 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)=@bridge_getvlan={0x20, 0x72, 0x7e3bfe4fa73db39f, 0x0, 0x0, {0x7, 0x0, 0x0, r1}, [@BRIDGE_VLANDB_DUMP_FLAGS={0x8, 0x1, 0x1}]}, 0x20}}, 0x0) 6.001225241s ago: executing program 3 (id=753): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4d8, 0xdd, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xa0, 0x8, [{{0x9, 0x4, 0x0, 0xfe, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0xffff, 0xfd, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x3, 0x0, 0xfd}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000080)={0x2c, &(0x7f00000012c0)={0x0, 0xb, 0x5, {0x5, 0xc, "26ed60"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000100), 0x2, 0x1) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000280)={0x0, 0x8, 0x5, &(0x7f0000000240)={0x8a, "040300000080000000d4f5f9c69747005100000000f0000000000200"}}) 5.667010208s ago: executing program 0 (id=754): socket$nl_netfilter(0x10, 0x3, 0xc) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) mount$fuseblk(&(0x7f0000002440), &(0x7f0000000040)='./file0\x00', &(0x7f00000003c0), 0x200840d, &(0x7f0000000280)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) write$FUSE_INIT(r0, &(0x7f0000000140)={0x50, 0x0, 0x0, {0x7, 0x2b, 0xd, 0x800000, 0xa, 0x8, 0x3, 0x6, 0x0, 0x0, 0x40, 0xfffffffc}}, 0x50) umount2(&(0x7f0000000000)='./file0\x00', 0x1) 5.40304889s ago: executing program 1 (id=755): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_PMK(r0, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x44, r1, 0x200, 0x70bd29, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x6, 0x5}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x20040024) socket$inet6_udplite(0xa, 0x2, 0x88) epoll_create1(0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) socket$nl_generic(0x10, 0x3, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x8607}, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000002240)={0x90, 0x16, 0xa01, 0x70bd2d, 0x0, {0x9}, [@typed={0x4}, @generic="597b66fa92944b4941c9ac494620cc262aee8354a0586b832e4a21cd0f114909e38d3dbeea52dccb4b6492b75301f38febf6036e82fca267bbe0486d6c682f78fe409af5ad7b287675e0546864ad437df6334d95ba735af0ded1d5fec1ddbccbb5c5b9bc075be3d79b5df561b3cc9576b235d6baf3"]}, 0x90}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000b00007910000000000000c310001001000000950074000000000031fb0d3a42319fa204399d17d34e075fdcda533ab1aa71ab1d764152e6cb25dadc7ded5dbe11b60ac5ea9fca11027d19e93adb603deb92de3141e8fd7ac5b87a2070213cdfdc5d6c4890cdeb50347c32060581172b94c6ba22a2b58eb6cbad46ed6e7965a2ba5fc4a5a17d103b0b36f790bb41931f9a3d4dd127c1b4e49f7468f5e603950c6367587e8ece17d5c6e7c7514386f5125c0e2aa441cda5630047b770bc93868c63db6b6c27786aaff609c902fd65b951074957e967a8a3a405eaafbfafacdb7c2f6f32c251fadcd5a2e34b2efc310dae213aaad007975c26f6001f9b9dd2bf699781e0bbff554630fd9f9fff61813814a65b8e3bb2156ea642519206f26eb7359f732d497c0d4fdb4a73"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x5, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f00000000c0), 0x20302, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='net\x00') r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000340)={0x0, 0x41, &(0x7f00000001c0)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1400}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_PACKETS_PER_SLAVE={0x8, 0x14, 0x2}]}}}]}, 0x3c}}, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x50}}, 0x4000800) read$FUSE(0xffffffffffffffff, &(0x7f0000000200)={0x2020}, 0x2020) 5.331910856s ago: executing program 0 (id=756): pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$EVIOCGMTSLOTS(r0, 0x8040450a, &(0x7f0000000240)=""/4096) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000900000000000000213f0000c50000000e800000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='mmap_lock_acquire_returned\x00', r1}, 0x10) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x2, 0x3, 0x801, 0x0, &(0x7f0000000040), 0xfffffffc) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_procfs(0x0, 0x0) fchdir(r3) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_open_procfs$namespace(r2, &(0x7f0000000040)='ns/cgroup\x00') mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) mlock2(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1) mincore(&(0x7f0000ff5000/0x4000)=nil, 0x4000, 0x0) 4.325020368s ago: executing program 1 (id=757): r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) poll(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(0xffffffffffffffff, 0x1, 0x0, 0x0) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'streebog256-generic\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x80800) recvmmsg$unix(r4, &(0x7f0000003700)=[{{0x0, 0x78d, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0) 3.874478334s ago: executing program 3 (id=758): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r2, 0x1, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x400c0) 3.647000733s ago: executing program 3 (id=759): timer_create(0x0, &(0x7f0000000040)={0x0, 0x20, 0x4, @thr={0x0, 0x0}}, &(0x7f0000000000)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000800)=@delchain={0x4c, 0x65, 0x2, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0xb}, {0x0, 0x3}, {0xa, 0xb}}, [@TCA_RATE={0x6, 0x5, {0x4, 0xc}}, @TCA_CHAIN={0x8, 0xb, 0x6}, @TCA_RATE={0x6, 0x5, {0x7, 0x26}}, @filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x81}, 0xc0) r0 = openat$sysfs(0xffffff9c, &(0x7f00000003c0)='/sys/power/pm_trace_dev_match', 0x20800, 0x2) finit_module(r0, 0x0, 0x3) socket(0x10, 0x803, 0x0) fsetxattr(r0, &(0x7f0000000080)=@known='trusted.overlay.upper\x00', 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmmsg(r4, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), 0xffffffffffffffff) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r5 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r5, 0x0, 0x23, &(0x7f0000000100)={@multicast2, @loopback}, 0xc) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, &(0x7f0000000340)=0x10001) writev(r6, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r6, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) setsockopt$inet_mreqsrc(r5, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) 3.228995146s ago: executing program 4 (id=760): mkdir(&(0x7f0000000280)='./file0\x00', 0x18a) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x10082, 0x0) chdir(&(0x7f0000000240)='./file0\x00') mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000500)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@uuid_off}]}) 2.285047103s ago: executing program 32 (id=724): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x4, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2, 0x8f}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socket$igmp6(0xa, 0x3, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="58000000020601080000000000000000030000000900020073797a3100000000050001000700000005000500020000000c000780080006400000040111000300686173683a6e65742c6e657400000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)={0x50, 0x9, 0x6, 0x201, 0x0, 0x0, {0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @remote}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x64010101}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) unlink(0x0) sendto$inet6(r6, &(0x7f0000847fff)='X', 0x1, 0x0, 0x0, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="4000000010001fff000000000000000000060000", @ANYRES32=0x0, @ANYBLOB="81ffffff00000000180012800e0001007769726567756172640000000400028008000a005124deacb12e68d5b042fd94802e899d13e0374769b03ac3273b6ab1188023b587e473253682146a9f24b52e89b42d3c836c1702078fbba099e45a9ddb039922f65e595e5fb3172b8fc94fe9185633ff84974096e32e8d6ce93ad1488698052714e15b7763bfe3d117e145752db35e4553df3a7d153ee8c27ebc9342e6eecf4d1b92e4ac8c64700aec62c72fd06f652ebc960a30868729b4b249183381de3f1879286998f3493e664e810b0c", @ANYRES32, @ANYBLOB], 0x40}}, 0x0) r8 = getpid() r9 = syz_pidfd_open(r8, 0x0) process_madvise(r9, &(0x7f00000015c0), 0x0, 0x9, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e24, @local}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x6, &(0x7f0000000140)=0x1000201, 0x4) 1.858598689s ago: executing program 4 (id=762): openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0) r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) socketpair(0x25, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$igmp6(0xa, 0x3, 0x2) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e24, 0x80, @mcast1, 0xf}, 0x1c) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0xa000, 0x1da) io_setup(0x5, &(0x7f0000000180)=0x0) sendmsg$TIPC_CMD_SET_NODE_ADDR(r4, 0x0, 0x8091) io_submit(r5, 0x2, &(0x7f0000000580)=[&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x8, 0xf17, r2, &(0x7f0000000200)="31739c2994a5ae806dea16c67642c4f15a10f0472b36d89dfe8060e391649e5700e7e6ba679cc534d6d4f97aa9b5d2fd71e320c56bc1be2545b23d5752651ef4c65b18939be9b51057d8b52471fcb27bcaf46b8e", 0x54, 0x1000, 0x0, 0x4, r4}, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x6, r1, &(0x7f0000000480)="5acaa90420f6f63da0a6ddf96032592b1f5692cf5240320ec7f71404c9228c3b1e385de72ad78018ab5ca20a6bf28685f7d8b5bf3255b2327bbea90971fde872ef051de7ca931a38882f225dbe22c1fc6c12d5c5723880703038d5a7fc78ec94baac064462450011f9de9aac5378840820c8dc375a3a548456959bb3e8ecefbbfaa2495a14d2", 0x86, 0x4000017, 0x0, 0x0, r2}]) socket$inet_smc(0x2b, 0x1, 0x0) read$FUSE(r4, &(0x7f0000004140)={0x2020}, 0x2020) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r7}, 0x10) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0) pselect6(0x40, &(0x7f0000000100)={0x3, 0x0, 0x0, 0xfffffffffffffffd, 0x3}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0xa, 0x0, 0x0, 0x4}, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0xa0c}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r8 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r8, &(0x7f0000032680)=""/102400, 0x19000) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'pcmmio\x00', [0x4f27, 0x2, 0x4, 0x4, 0x5, 0x5, 0x4, 0x7, 0x54c6cff3, 0xfd, 0x2, 0x1, 0x1, 0x1, 0x6, 0x6a, 0x0, 0x7f, 0x3, 0x40000003, 0x89, 0xcaa3, 0x0, 0x20001e5b, 0x9dc6, 0x2000e66, 0x3, 0x8, 0x4086, 0x0, 0xfffffffc]}) 1.644141666s ago: executing program 0 (id=763): bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x1, 0x100008, 0x4, 0x8, 0x1, 0xffffffffffffffff, 0x400000}, 0x50) bpf$PROG_LOAD(0x2, &(0x7f0000000680)={0x3, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 936.924834ms ago: executing program 3 (id=764): syz_usb_connect(0x6, 0x1fc, &(0x7f0000000780)={{0x12, 0x1, 0x250, 0xb8, 0x0, 0x51, 0x8, 0x1410, 0xa007, 0x3e68, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1ea, 0x3, 0xe, 0x0, 0x30, 0x3, [{{0x9, 0x4, 0x3, 0x9, 0x2, 0x7f, 0x54, 0xcc, 0x0, [], [{{0x9, 0x5, 0x2, 0x4, 0x400, 0x4, 0x4, 0x3, [@generic={0x80, 0x1, "09661bede31b6d40ffd5a6457d3483a7c64a2cf09c6b30e3afe9caf13ed9a2924ed053d2b4b24aedb4035d4212c8a5f7df3b67916187c245f81035efe9b53a8d79988d4b00a8aa5926f8b9103fd0e543cebd14ca5d0825146c7ff12ef0b8fe612538542d6f5c9fdc7894374795b8ccb6bdb303b42aa86746d3370ad7a31c"}]}}, {{0x9, 0x5, 0x4, 0x10, 0x40, 0x5, 0x2, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x2, 0x400}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0x1, 0x7}]}}]}}, {{0x9, 0x4, 0x5b, 0x6, 0xc, 0x31, 0x71, 0x35, 0x6, [], [{{0x9, 0x5, 0x5, 0x10, 0x8, 0x6, 0x0, 0xd3, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x2}]}}, {{0x9, 0x5, 0x6, 0x10, 0x20, 0x80, 0xff, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x6, 0x2}]}}, {{0x9, 0x5, 0x0, 0x10, 0x400, 0x9, 0x4, 0x1}}, {{0x9, 0x5, 0x4, 0x10, 0x40, 0xab, 0x0, 0x5}}, {{0x9, 0x5, 0x5, 0x2, 0x20, 0x6, 0xd, 0xd, [@generic={0x48, 0x66, "42bc0201de8fa807c3b757b1c182c0f4c59af7c59293e1bc41956912be0eafd96bdf03aa6117bc3e50fbee59a6e5dfc7206516e091fce94c0c778a134b5368d1af31d240535b"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x2, 0x1}]}}, {{0x9, 0x5, 0xb, 0x8, 0x400, 0x1, 0xa9, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x32, 0xbf6}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x6, 0x15ac}]}}, {{0x9, 0x5, 0x2, 0x14, 0x0, 0xc7, 0x7, 0xe}}, {{0x9, 0x5, 0x1, 0x4, 0x200, 0x8, 0x5, 0x80}}, {{0x9, 0x5, 0x5, 0x10, 0x200, 0x8, 0x2, 0xae, [@uac_iso={0x7, 0x25, 0x1, 0x103, 0xfb, 0xff}]}}, {{0x9, 0x5, 0x0, 0x10, 0x40, 0x8, 0x0, 0x3}}, {{0x9, 0x5, 0xc, 0x4, 0x200, 0x3, 0xd, 0x7, [@generic={0x41, 0xf, "8c1ea652c620acd24cbf2bfeb921dfc3f2c147f7c05a53e4f7db6742a64c76fe8d2f319387c80165b1ad6b9054e93ae7385d785e1c040f2c4e5c2388ef8791"}]}}, {{0x9, 0x5, 0x9, 0x0, 0x20, 0x1, 0x8, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x4, 0x6}]}}]}}, {{0x9, 0x4, 0xf5, 0x1, 0x0, 0xf, 0xd4, 0xdf, 0x3}}]}}]}}, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000940)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r1, @ANYBLOB="00000000000000001c001a800800028008000200080000003e127a510800020010"], 0x44}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xa0}}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0xfff0) recvmmsg$unix(r2, &(0x7f00000037c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)=@bridge_getvlan={0x20, 0x72, 0x7e3bfe4fa73db39f, 0x0, 0x0, {0x7, 0x0, 0x0, r1}, [@BRIDGE_VLANDB_DUMP_FLAGS={0x8, 0x1, 0x1}]}, 0x20}}, 0x0) 878.052738ms ago: executing program 1 (id=765): signalfd(0xffffffffffffffff, &(0x7f00000002c0)={[0x7fffffff]}, 0x8) r0 = socket$netlink(0x10, 0x3, 0x0) socketpair(0x29, 0x5, 0x6, 0x0) syz_io_uring_setup(0x45, &(0x7f0000000300)={0x0, 0x0, 0x40, 0x2, 0x18}, &(0x7f0000000100), &(0x7f00000000c0)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x6, 0x2}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x5}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getrlimit(0xc, &(0x7f0000000300)) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_update={'update ', 'default', 0x20, 'trusted:', 'trusted:'}, 0x20, 0xfffffffffffffffd) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001c00110c0000001467fb0f0007000000", @ANYRES32=r0, @ANYBLOB="800202000a00020057"], 0x48}}, 0x0) 724.671451ms ago: executing program 0 (id=766): r0 = socket(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty, 0x8}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f0000000100)=0x1, 0x4) sendto$inet_nvme_pdu(r0, &(0x7f0000000000)=@icresp={{0x1, 0x0, 0x80, 0x6, 0x6}, 0x0, 0x0, 0x2, 0x7}, 0x80, 0x0, 0x0, 0x0) 413.916506ms ago: executing program 4 (id=767): r0 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000400)=[{&(0x7f0000000080)="aefdda9d240300005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d76641cb010052f436dd2a", 0x2a}, {&(0x7f0000000040)="aa1d484ea0a00000f7fc08fcd111fbdf23ea32db0e8f21d5bc27bd49eb067a0689fff2a41cfbf0e9d85e44", 0x2b}], 0x2) 265.121088ms ago: executing program 0 (id=768): socket$nl_netfilter(0x10, 0x3, 0xc) socket$packet(0x11, 0x3, 0x300) r0 = io_uring_setup(0x6dc6, &(0x7f00000001c0)={0x0, 0xcf51, 0x400, 0x2}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) socket(0x2b, 0x1, 0x1) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x5) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) 177.516985ms ago: executing program 4 (id=769): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd2c, 0x2, {0x0, 0x0, 0x0, r3, {0xc, 0x1}, {}, {0x8, 0x1}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_IPV4_DST={0x8, 0x1d, @initdev={0xac, 0x1e, 0x0, 0x0}}]}}]}, 0x3c}}, 0x0) 0s ago: executing program 3 (id=770): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB], 0x64}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="4800000000010104000000000000000002000000240002801400018008000100e000000108000200e00000010c00028005000100000000000800154000000000080008"], 0x48}}, 0x4000000) kernel console output (not intermixed with test programs): stop error: local softirq work is pending, handler #200!!! [ 88.429605][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 88.503077][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 88.511381][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 88.555475][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 88.892787][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 89.234590][ T4357] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.323908][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.334466][ T4357] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.368169][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.421828][ T4396] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 89.441220][ T4396] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 89.472048][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.501441][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.520547][ T4398] Zero length message leads to an empty skb [ 89.529703][ T4396] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 89.580506][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.601781][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.625959][ T4396] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 89.783231][ T56] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.818423][ T56] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.878322][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 89.933934][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 89.942294][ T0] NOHZ tick-stop error: local softirq work is pending, handler #0a!!! [ 90.061560][ T4322] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 90.288773][ T4322] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 90.335988][ T4322] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 91.261084][ T4322] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 91.271571][ T4322] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.306689][ T4322] usb 4-1: config 0 descriptor?? [ 91.319995][ T4322] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 91.327954][ T4322] dvb-usb: bulk message failed: -22 (3/0) [ 91.371879][ T4322] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 91.383404][ T4322] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 91.394127][ T4322] usb 4-1: media controller created [ 91.455163][ T4322] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 91.535396][ T4401] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 91.566622][ T4322] dvb-usb: bulk message failed: -22 (6/0) [ 91.588100][ T4322] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 91.615500][ T4401] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 91.707621][ T4322] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input5 [ 91.789093][ T4322] dvb-usb: schedule remote query interval to 150 msecs. [ 91.950480][ T4322] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 92.037866][ T4322] usb 4-1: USB disconnect, device number 2 [ 93.320410][ T4421] sched: RT throttling activated [ 93.403976][ T4322] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 93.928372][ T4431] netlink: 'syz.4.9': attribute type 11 has an invalid length. [ 94.422262][ T4387] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 94.626435][ T4387] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 94.716409][ T4387] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 94.814239][ T4387] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 94.928130][ T4441] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 94.966685][ T4387] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 95.031865][ T4387] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 95.093442][ T48] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 95.104285][ T48] CPU: 0 PID: 48 Comm: kworker/u5:0 Not tainted 6.1.148-syzkaller #0 [ 95.112474][ T48] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 95.122561][ T48] Workqueue: hci3 hci_rx_work [ 95.127352][ T48] Call Trace: [ 95.130654][ T48] [ 95.133595][ T48] dump_stack_lvl+0x168/0x22e [ 95.138296][ T48] ? show_regs_print_info+0x12/0x12 [ 95.143519][ T48] ? load_image+0x3b0/0x3b0 [ 95.148101][ T48] sysfs_create_dir_ns+0x252/0x280 [ 95.153260][ T48] ? hci_rx_work+0x3eb/0xd40 [ 95.157907][ T48] ? sysfs_warn_dup+0xa0/0xa0 [ 95.162607][ T48] ? do_raw_spin_unlock+0x11d/0x230 [ 95.167860][ T48] kobject_add_internal+0x6b8/0xc80 [ 95.173115][ T48] kobject_add+0x152/0x210 [ 95.177592][ T48] ? kobject_init+0x1d0/0x1d0 [ 95.182318][ T48] ? klist_children_get+0x50/0x50 [ 95.187460][ T48] ? get_device_parent+0x121/0x3f0 [ 95.192607][ T48] device_add+0x483/0xfb0 [ 95.196992][ T48] ? kmem_cache_free+0xf7/0x290 [ 95.201877][ T48] hci_conn_add_sysfs+0xd1/0x1e0 [ 95.206958][ T48] le_conn_complete_evt+0xd1d/0x1320 [ 95.212303][ T48] ? hci_le_big_info_adv_report_evt+0x310/0x310 [ 95.218683][ T48] ? __mutex_unlock_slowpath+0x19e/0x6a0 [ 95.224393][ T48] ? skb_pull_data+0xf7/0x200 [ 95.229114][ T48] hci_le_conn_complete_evt+0x183/0x440 [ 95.234810][ T48] ? hci_remote_host_features_evt+0x270/0x270 [ 95.240909][ T48] hci_event_packet+0x791/0x1210 [ 95.245875][ T48] ? bis_list+0x280/0x280 [ 95.250232][ T48] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 95.256243][ T48] ? kcov_remote_start+0x4c7/0x7e0 [ 95.261393][ T48] ? mt_dump_node+0xbd0/0x1930 [ 95.266210][ T48] ? hci_send_to_monitor+0x9c/0x4a0 [ 95.271450][ T48] hci_rx_work+0x3eb/0xd40 [ 95.275896][ T48] ? _raw_spin_unlock+0x40/0x40 [ 95.280791][ T48] ? process_one_work+0x7a1/0x1160 [ 95.285915][ T48] process_one_work+0x898/0x1160 [ 95.290927][ T48] ? worker_detach_from_pool+0x240/0x240 [ 95.296607][ T48] ? _raw_spin_lock_irq+0xab/0xe0 [ 95.301661][ T48] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 95.307131][ T48] ? kthread_data+0x4b/0xc0 [ 95.311690][ T48] worker_thread+0xaa2/0x1250 [ 95.316408][ T48] kthread+0x29d/0x330 [ 95.320496][ T48] ? worker_clr_flags+0x1a0/0x1a0 [ 95.325563][ T48] ? kthread_blkcg+0xd0/0xd0 [ 95.330171][ T48] ret_from_fork+0x1f/0x30 [ 95.334639][ T48] [ 95.346818][ T48] kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 95.360347][ T48] Bluetooth: hci3: failed to register connection device [ 95.410433][ T4387] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 95.483163][ T4387] usb 5-1: Manufacturer: syz [ 95.591190][ T4387] usb 5-1: config 0 descriptor?? [ 96.519826][ T4453] netlink: 16 bytes leftover after parsing attributes in process `syz.3.15'. [ 96.883041][ T4387] usbhid 5-1:0.0: can't add hid device: -71 [ 96.889129][ T4387] usbhid: probe of 5-1:0.0 failed with error -71 [ 96.994935][ T4387] usb 5-1: USB disconnect, device number 2 [ 97.912412][ T4387] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 98.190255][ T4387] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 98.213213][ T4387] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 98.247355][ T4387] usb 1-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 98.282878][ T4387] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.422731][ T4387] usb 1-1: config 0 descriptor?? [ 98.461481][ T4387] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 98.491002][ T4387] dvb-usb: bulk message failed: -22 (3/0) [ 98.528348][ T4387] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 98.570780][ T4387] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 98.614429][ T4387] usb 1-1: media controller created [ 98.649995][ T4468] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 98.660582][ T4387] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 98.682650][ T4468] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 98.718628][ T4387] dvb-usb: bulk message failed: -22 (6/0) [ 98.758120][ T4387] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 98.800565][ T4387] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input6 [ 98.883251][ T4387] dvb-usb: schedule remote query interval to 150 msecs. [ 98.923224][ T4387] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 98.969137][ T4387] usb 1-1: USB disconnect, device number 2 [ 99.075065][ T4387] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 99.386920][ T48] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 99.432312][ T4322] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 99.633867][ T4322] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 99.644324][ T4322] usb 5-1: config 0 has no interfaces? [ 99.650939][ T4322] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 99.660296][ T4322] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.671141][ T4322] usb 5-1: config 0 descriptor?? [ 99.885748][ T4322] usb 5-1: USB disconnect, device number 3 [ 100.051558][ T4505] netlink: 12 bytes leftover after parsing attributes in process `syz.0.32'. [ 100.386967][ T4507] 9pnet_virtio: no channels available for device syz [ 100.568492][ T4515] netlink: 'syz.2.34': attribute type 11 has an invalid length. [ 100.975417][ T4522] netlink: 16 bytes leftover after parsing attributes in process `syz.3.37'. [ 101.862394][ T48] Bluetooth: hci3: command 0x0406 tx timeout [ 103.196833][ T4284] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 103.265803][ T4387] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 103.467220][ T4387] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 103.490365][ T4387] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 103.512297][ T4387] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 103.525712][ T4387] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.543108][ T4387] usb 5-1: config 0 descriptor?? [ 103.559553][ T4387] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 103.569120][ T4387] dvb-usb: bulk message failed: -22 (3/0) [ 103.586195][ T4387] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 103.606955][ T4387] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 103.616792][ T4387] usb 5-1: media controller created [ 103.624407][ T4387] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 103.639185][ T4387] dvb-usb: bulk message failed: -22 (6/0) [ 103.650591][ T4387] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 103.667310][ T4387] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input7 [ 103.683950][ T4387] dvb-usb: schedule remote query interval to 150 msecs. [ 103.691128][ T4387] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 103.793858][ T4536] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 103.807402][ T4536] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 103.826498][ T4345] usb 5-1: USB disconnect, device number 4 [ 103.891606][ T4345] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 104.256148][ T4561] netlink: 'syz.2.52': attribute type 11 has an invalid length. [ 105.026076][ T4572] netlink: 16 bytes leftover after parsing attributes in process `syz.4.56'. [ 105.930866][ T4583] netlink: 14 bytes leftover after parsing attributes in process `syz.2.60'. [ 106.233070][ T4284] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:201' [ 106.243096][ T4284] CPU: 1 PID: 4284 Comm: kworker/u5:8 Not tainted 6.1.148-syzkaller #0 [ 106.251403][ T4284] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 106.261606][ T4284] Workqueue: hci4 hci_rx_work [ 106.266363][ T4284] Call Trace: [ 106.269673][ T4284] [ 106.272675][ T4284] dump_stack_lvl+0x168/0x22e [ 106.277413][ T4284] ? show_regs_print_info+0x12/0x12 [ 106.282669][ T4284] ? load_image+0x3b0/0x3b0 [ 106.287225][ T4284] sysfs_create_dir_ns+0x252/0x280 [ 106.292895][ T4284] ? hci_rx_work+0x3eb/0xd40 [ 106.297567][ T4284] ? sysfs_warn_dup+0xa0/0xa0 [ 106.302308][ T4284] ? do_raw_spin_unlock+0x11d/0x230 [ 106.307583][ T4284] kobject_add_internal+0x6b8/0xc80 [ 106.312849][ T4284] kobject_add+0x152/0x210 [ 106.317309][ T4284] ? kobject_init+0x1d0/0x1d0 [ 106.322036][ T4284] ? klist_children_get+0x50/0x50 [ 106.327208][ T4284] ? get_device_parent+0x121/0x3f0 [ 106.332521][ T4284] device_add+0x483/0xfb0 [ 106.336907][ T4284] ? kmem_cache_free+0xf7/0x290 [ 106.341801][ T4284] hci_conn_add_sysfs+0xd1/0x1e0 [ 106.346774][ T4284] le_conn_complete_evt+0xd1d/0x1320 [ 106.352108][ T4284] ? hci_le_big_info_adv_report_evt+0x310/0x310 [ 106.358449][ T4284] ? __mutex_unlock_slowpath+0x19e/0x6a0 [ 106.364150][ T4284] ? skb_pull_data+0xf7/0x200 [ 106.368918][ T4284] hci_le_conn_complete_evt+0x183/0x440 [ 106.374538][ T4284] ? hci_remote_host_features_evt+0x270/0x270 [ 106.380678][ T4284] hci_event_packet+0x791/0x1210 [ 106.385677][ T4284] ? bis_list+0x280/0x280 [ 106.390040][ T4284] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 106.395973][ T4284] ? kcov_remote_start+0x4c7/0x7e0 [ 106.401145][ T4284] ? mt_dump_node+0xbd0/0x1930 [ 106.406006][ T4284] ? hci_send_to_monitor+0x9c/0x4a0 [ 106.411281][ T4284] hci_rx_work+0x3eb/0xd40 [ 106.415839][ T4284] ? _raw_spin_unlock+0x40/0x40 [ 106.420757][ T4284] ? process_one_work+0x7a1/0x1160 [ 106.425891][ T4284] process_one_work+0x898/0x1160 [ 106.430862][ T4284] ? worker_detach_from_pool+0x240/0x240 [ 106.436603][ T4284] ? _raw_spin_lock_irq+0xab/0xe0 [ 106.441737][ T4284] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 106.447512][ T4284] ? kthread_data+0x4b/0xc0 [ 106.452044][ T4284] worker_thread+0xaa2/0x1250 [ 106.456842][ T4284] ? __kthread_parkme+0x162/0x1c0 [ 106.462036][ T4284] kthread+0x29d/0x330 [ 106.466161][ T4284] ? worker_clr_flags+0x1a0/0x1a0 [ 106.471228][ T4284] ? kthread_blkcg+0xd0/0xd0 [ 106.475977][ T4284] ret_from_fork+0x1f/0x30 [ 106.480458][ T4284] [ 106.483595][ C1] vkms_vblank_simulate: vblank timer overrun [ 106.491531][ T4284] kobject_add_internal failed for hci4:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 106.506342][ T4284] Bluetooth: hci4: failed to register connection device [ 106.681567][ C1] vkms_vblank_simulate: vblank timer overrun [ 106.897380][ T4583] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 106.968654][ T4583] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 107.013860][ T4583] bond0 (unregistering): Released all slaves [ 107.630896][ T4608] device dummy0 entered promiscuous mode [ 107.647912][ T4608] device bond0 entered promiscuous mode [ 107.659504][ T4608] device bond_slave_0 entered promiscuous mode [ 107.666631][ T4608] device bond_slave_1 entered promiscuous mode [ 107.684720][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): hsr1: link becomes ready [ 107.832444][ T4618] netlink: 'syz.4.71': attribute type 11 has an invalid length. [ 108.157975][ T48] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 108.168089][ T48] CPU: 0 PID: 48 Comm: kworker/u5:0 Not tainted 6.1.148-syzkaller #0 [ 108.176248][ T48] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 108.186361][ T48] Workqueue: hci1 hci_rx_work [ 108.191067][ T48] Call Trace: [ 108.194366][ T48] [ 108.197315][ T48] dump_stack_lvl+0x168/0x22e [ 108.202029][ T48] ? show_regs_print_info+0x12/0x12 [ 108.207250][ T48] ? load_image+0x3b0/0x3b0 [ 108.211826][ T48] sysfs_create_dir_ns+0x252/0x280 [ 108.217090][ T48] ? hci_rx_work+0x3eb/0xd40 [ 108.221726][ T48] ? sysfs_warn_dup+0xa0/0xa0 [ 108.226470][ T48] ? do_raw_spin_unlock+0x11d/0x230 [ 108.231735][ T48] kobject_add_internal+0x6b8/0xc80 [ 108.236970][ T48] kobject_add+0x152/0x210 [ 108.241413][ T48] ? kobject_init+0x1d0/0x1d0 [ 108.246114][ T48] ? klist_children_get+0x50/0x50 [ 108.251163][ T48] ? get_device_parent+0x121/0x3f0 [ 108.256383][ T48] device_add+0x483/0xfb0 [ 108.260728][ T48] ? kmem_cache_free+0xf7/0x290 [ 108.265629][ T48] hci_conn_add_sysfs+0xd1/0x1e0 [ 108.270629][ T48] le_conn_complete_evt+0xd1d/0x1320 [ 108.275970][ T48] ? hci_le_big_info_adv_report_evt+0x310/0x310 [ 108.282248][ T48] ? __mutex_unlock_slowpath+0x19e/0x6a0 [ 108.288001][ T48] ? skb_pull_data+0xf7/0x200 [ 108.292704][ T48] hci_le_conn_complete_evt+0x183/0x440 [ 108.298307][ T48] ? hci_remote_host_features_evt+0x270/0x270 [ 108.304411][ T48] hci_event_packet+0x791/0x1210 [ 108.309410][ T48] ? bis_list+0x280/0x280 [ 108.313790][ T48] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 108.319751][ T48] ? kcov_remote_start+0x4c7/0x7e0 [ 108.324924][ T48] ? mt_dump_node+0xbd0/0x1930 [ 108.329708][ T48] ? hci_send_to_monitor+0x9c/0x4a0 [ 108.334947][ T48] hci_rx_work+0x3eb/0xd40 [ 108.339402][ T48] ? _raw_spin_unlock+0x40/0x40 [ 108.344551][ T48] ? process_one_work+0x7a1/0x1160 [ 108.349682][ T48] process_one_work+0x898/0x1160 [ 108.354666][ T48] ? worker_detach_from_pool+0x240/0x240 [ 108.360321][ T48] ? _raw_spin_lock_irq+0xab/0xe0 [ 108.365367][ T48] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 108.370774][ T48] ? kthread_data+0x4b/0xc0 [ 108.375305][ T48] worker_thread+0xaa2/0x1250 [ 108.380024][ T48] kthread+0x29d/0x330 [ 108.384117][ T48] ? worker_clr_flags+0x1a0/0x1a0 [ 108.389184][ T48] ? kthread_blkcg+0xd0/0xd0 [ 108.393875][ T48] ret_from_fork+0x1f/0x30 [ 108.398356][ T48] [ 108.403627][ T48] kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 108.419932][ T48] Bluetooth: hci1: failed to register connection device [ 108.727539][ T4626] netlink: 16 bytes leftover after parsing attributes in process `syz.3.76'. [ 109.983774][ T4637] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 110.029103][ T4637] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 110.074292][ T4637] Bluetooth: hci0: Suspend notifier action (1) failed: -4 [ 110.129276][ T4637] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 110.155829][ T4637] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 110.180970][ T4637] Bluetooth: hci1: Suspend notifier action (1) failed: -4 [ 110.239139][ T4637] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 110.279394][ T4637] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 110.301112][ T4637] Bluetooth: hci2: Suspend notifier action (1) failed: -4 [ 110.422570][ T4637] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 110.447208][ T4637] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 110.485890][ T4637] Bluetooth: hci3: Suspend notifier action (1) failed: -4 [ 110.566941][ T4637] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 110.790301][ T4637] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 110.805593][ T4637] Bluetooth: hci4: Suspend notifier action (1) failed: -4 [ 111.532508][ T48] Bluetooth: hci0: command 0x0c1a tx timeout [ 111.627955][ T48] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201' [ 111.638888][ T48] CPU: 0 PID: 48 Comm: kworker/u5:0 Not tainted 6.1.148-syzkaller #0 [ 111.647105][ T48] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 111.657211][ T48] Workqueue: hci2 hci_rx_work [ 111.661940][ T48] Call Trace: [ 111.665238][ T48] [ 111.668192][ T48] dump_stack_lvl+0x168/0x22e [ 111.672897][ T48] ? show_regs_print_info+0x12/0x12 [ 111.678116][ T48] ? load_image+0x3b0/0x3b0 [ 111.682690][ T48] sysfs_create_dir_ns+0x252/0x280 [ 111.687828][ T48] ? hci_rx_work+0x3eb/0xd40 [ 111.692447][ T48] ? sysfs_warn_dup+0xa0/0xa0 [ 111.697170][ T48] ? do_raw_spin_unlock+0x11d/0x230 [ 111.702407][ T48] kobject_add_internal+0x6b8/0xc80 [ 111.707645][ T48] kobject_add+0x152/0x210 [ 111.712096][ T48] ? kobject_init+0x1d0/0x1d0 [ 111.716816][ T48] ? klist_children_get+0x50/0x50 [ 111.721867][ T48] ? get_device_parent+0x121/0x3f0 [ 111.727008][ T48] device_add+0x483/0xfb0 [ 111.731362][ T48] ? kmem_cache_free+0xf7/0x290 [ 111.736237][ T48] hci_conn_add_sysfs+0xd1/0x1e0 [ 111.741218][ T48] le_conn_complete_evt+0xd1d/0x1320 [ 111.746553][ T48] ? hci_le_big_info_adv_report_evt+0x310/0x310 [ 111.752830][ T48] ? __mutex_unlock_slowpath+0x19e/0x6a0 [ 111.758486][ T48] ? skb_pull_data+0xf7/0x200 [ 111.763191][ T48] hci_le_conn_complete_evt+0x183/0x440 [ 111.768766][ T48] ? hci_remote_host_features_evt+0x270/0x270 [ 111.774893][ T48] hci_event_packet+0x791/0x1210 [ 111.779863][ T48] ? bis_list+0x280/0x280 [ 111.784214][ T48] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 111.790226][ T48] ? kcov_remote_start+0x4c7/0x7e0 [ 111.795363][ T48] ? mt_dump_node+0xbd0/0x1930 [ 111.800153][ T48] ? hci_send_to_monitor+0x9c/0x4a0 [ 111.805382][ T48] hci_rx_work+0x3eb/0xd40 [ 111.809913][ T48] ? _raw_spin_unlock+0x40/0x40 [ 111.814811][ T48] ? process_one_work+0x7a1/0x1160 [ 111.819963][ T48] process_one_work+0x898/0x1160 [ 111.824952][ T48] ? worker_detach_from_pool+0x240/0x240 [ 111.830696][ T48] ? _raw_spin_lock_irq+0xab/0xe0 [ 111.835829][ T48] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 111.841227][ T48] ? kthread_data+0x4b/0xc0 [ 111.846659][ T48] worker_thread+0xaa2/0x1250 [ 111.851405][ T48] kthread+0x29d/0x330 [ 111.855508][ T48] ? worker_clr_flags+0x1a0/0x1a0 [ 111.860748][ T48] ? kthread_blkcg+0xd0/0xd0 [ 111.865493][ T48] ret_from_fork+0x1f/0x30 [ 111.869986][ T48] [ 111.874509][ T48] kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 111.888008][ T48] Bluetooth: hci2: failed to register connection device [ 112.174519][ T48] Bluetooth: hci1: command 0x0c1a tx timeout [ 112.253959][ T48] Bluetooth: hci2: command 0x0c1a tx timeout [ 112.472002][ T4676] netlink: 'syz.1.90': attribute type 11 has an invalid length. [ 112.502406][ T48] Bluetooth: hci3: command 0x0c1a tx timeout [ 112.582428][ T48] Bluetooth: hci4: command 0x0c1a tx timeout [ 112.996945][ T128] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 113.185169][ T128] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 113.207581][ T4685] netlink: 16 bytes leftover after parsing attributes in process `syz.2.92'. [ 113.217006][ T128] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 113.234171][ T128] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 113.249024][ T128] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 113.307473][ T128] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 113.359049][ T128] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 113.407479][ T128] usb 2-1: Manufacturer: syz [ 113.450457][ T128] usb 2-1: config 0 descriptor?? [ 113.612370][ T48] Bluetooth: hci0: command 0x0406 tx timeout [ 114.262257][ T4283] Bluetooth: hci1: command 0x0406 tx timeout [ 114.332441][ T4283] Bluetooth: hci2: command 0x0406 tx timeout [ 114.582554][ T48] Bluetooth: hci3: command 0x0406 tx timeout [ 114.652324][ T4283] Bluetooth: hci4: command 0x0406 tx timeout [ 114.795525][ T14] kernel read not supported for file /media6 (pid: 14 comm: kworker/0:1) [ 115.010847][ T4283] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 115.466599][ T128] usbhid 2-1:0.0: can't add hid device: -71 [ 115.473736][ T128] usbhid: probe of 2-1:0.0 failed with error -71 [ 115.486096][ T128] usb 2-1: USB disconnect, device number 2 [ 115.502228][ T125] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 115.905105][ T125] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 115.940510][ T125] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 116.043945][ T125] usb 1-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 116.251719][ T125] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.288408][ T125] usb 1-1: config 0 descriptor?? [ 116.307832][ T125] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 116.329391][ T125] dvb-usb: bulk message failed: -22 (3/0) [ 116.341600][ T125] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 116.342398][ T4283] Bluetooth: hci1: command 0x0406 tx timeout [ 116.361505][ T125] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 116.370512][ T125] usb 1-1: media controller created [ 116.444189][ T125] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 116.491485][ T125] dvb-usb: bulk message failed: -22 (6/0) [ 116.503212][ T4710] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 116.512313][ T125] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 116.534418][ T4710] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 116.549920][ T125] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input8 [ 116.595584][ T125] dvb-usb: schedule remote query interval to 150 msecs. [ 116.608811][ T125] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 116.625914][ T125] usb 1-1: USB disconnect, device number 3 [ 116.689181][ T125] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 116.736840][ T4283] Bluetooth: hci4: command 0x0406 tx timeout [ 117.016666][ T128] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 117.206477][ T4742] netlink: 16 bytes leftover after parsing attributes in process `syz.3.111'. [ 117.222285][ T128] usb 2-1: Using ep0 maxpacket: 8 [ 117.229507][ T128] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 117.245518][ T128] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 117.257003][ T128] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 117.267244][ T128] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 117.277989][ T128] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 117.292049][ T128] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 117.301798][ T128] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.536599][ T128] usb 2-1: GET_CAPABILITIES returned 0 [ 117.543889][ T128] usbtmc 2-1:16.0: can't read capabilities [ 117.750419][ T128] usb 2-1: USB disconnect, device number 3 [ 118.013785][ T4283] Bluetooth: hci2: command 0x0406 tx timeout [ 118.572982][ T48] Bluetooth: hci4: Ignoring HCI_Connection_Complete for existing connection [ 119.058061][ T4771] netlink: 'syz.3.121': attribute type 11 has an invalid length. [ 119.492235][ T4337] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 119.695284][ T4337] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 119.714111][ T4781] trusted_key: encrypted_key: insufficient parameters specified [ 119.722524][ T4337] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 119.734827][ T4337] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 119.759459][ T4781] trusted_key: encrypted_key: insufficient parameters specified [ 119.767530][ T4337] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 119.814819][ T4337] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 119.827124][ T4337] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 119.835764][ T4337] usb 4-1: Manufacturer: syz [ 119.892975][ T4337] usb 4-1: config 0 descriptor?? [ 120.204430][ T4345] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 120.455115][ T4345] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 120.489633][ T4345] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 120.552362][ T4345] usb 1-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 120.600792][ T4345] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.661242][ T4345] usb 1-1: config 0 descriptor?? [ 120.713388][ T4345] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 120.754259][ T4345] dvb-usb: bulk message failed: -22 (3/0) [ 120.807976][ T4345] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 120.859611][ T4345] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 120.912849][ T4783] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 120.931722][ T4345] usb 1-1: media controller created [ 120.966061][ T4783] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 120.974563][ T4345] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 121.050938][ T4345] dvb-usb: bulk message failed: -22 (6/0) [ 121.122672][ T4345] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 121.211493][ T4345] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input9 [ 121.275001][ T4345] dvb-usb: schedule remote query interval to 150 msecs. [ 121.307938][ T4345] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 121.370267][ T4345] usb 1-1: USB disconnect, device number 4 [ 121.422752][ T4345] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 122.148653][ T4805] netlink: 16 bytes leftover after parsing attributes in process `syz.0.131'. [ 122.162577][ T4337] usbhid 4-1:0.0: can't add hid device: -71 [ 122.168657][ T4337] usbhid: probe of 4-1:0.0 failed with error -71 [ 122.187172][ T4337] usb 4-1: USB disconnect, device number 3 [ 122.264515][ T48] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 123.182392][ T4387] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 123.384260][ T4387] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 123.408117][ T4825] netlink: 'syz.3.140': attribute type 10 has an invalid length. [ 123.416603][ T4387] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 123.425752][ T4387] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 123.457755][ T4387] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.525614][ T4387] usb 5-1: config 0 descriptor?? [ 123.580297][ T4387] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 123.630660][ T4387] dvb-usb: bulk message failed: -22 (3/0) [ 123.749239][ T4387] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 123.769120][ T4823] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 123.812565][ T4387] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 123.821973][ T4825] batman_adv: batadv0: Adding interface: team0 [ 123.828627][ T4387] usb 5-1: media controller created [ 123.847171][ T4387] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 123.913225][ T4387] dvb-usb: bulk message failed: -22 (6/0) [ 123.923615][ T4825] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 123.949226][ C1] vkms_vblank_simulate: vblank timer overrun [ 123.956269][ T4387] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 123.965475][ T4387] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input10 [ 124.051047][ T4387] dvb-usb: schedule remote query interval to 150 msecs. [ 124.051326][ T4823] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 124.096384][ T4387] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 124.191667][ T125] usb 5-1: USB disconnect, device number 5 [ 124.298823][ T4825] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 124.486260][ T125] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 125.300899][ T4846] netlink: 'syz.3.146': attribute type 11 has an invalid length. [ 125.622324][ T4323] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 125.824166][ T4323] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 125.860664][ T4323] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 125.903472][ T4323] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 125.935835][ T4323] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 126.031929][ T4323] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 126.067621][ T4323] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 126.091949][ T4323] usb 4-1: Manufacturer: syz [ 126.127353][ T4323] usb 4-1: config 0 descriptor?? [ 126.318572][ T4283] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 126.988655][ T4878] netlink: 68 bytes leftover after parsing attributes in process `syz.2.156'. [ 127.022638][ T4352] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 127.216888][ T4352] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 127.250231][ T4352] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 127.446207][ T4352] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 127.478178][ T4352] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.557332][ T4352] usb 2-1: config 0 descriptor?? [ 127.628697][ T4884] netlink: 16 bytes leftover after parsing attributes in process `syz.2.157'. [ 127.641832][ T4352] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 127.688056][ T4352] dvb-usb: bulk message failed: -22 (3/0) [ 127.734854][ T4352] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 127.949921][ T4352] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 127.957269][ T4352] usb 2-1: media controller created [ 127.965213][ T4352] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 128.314652][ T4352] dvb-usb: bulk message failed: -22 (6/0) [ 128.415977][ T4352] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 128.436524][ T4352] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input11 [ 128.462904][ T4352] dvb-usb: schedule remote query interval to 150 msecs. [ 128.511093][ T4352] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 128.661423][ T4352] usb 2-1: USB disconnect, device number 4 [ 128.757763][ T4352] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 128.775828][ T4323] usbhid 4-1:0.0: can't add hid device: -71 [ 128.781928][ T4323] usbhid: probe of 4-1:0.0 failed with error -71 [ 128.854120][ T4323] usb 4-1: USB disconnect, device number 4 [ 128.908896][ T4893] smc: net device bond0 applied user defined pnetid SYZ2 [ 131.049817][ T4283] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 131.338130][ T4922] netlink: 'syz.1.172': attribute type 11 has an invalid length. [ 131.462715][ T4323] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 131.622409][ T4352] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 131.675807][ T4323] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 131.686330][ T4323] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 131.695721][ T4323] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 131.705212][ T4323] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.737407][ T4930] 9pnet_virtio: no channels available for device syz [ 131.738833][ T4323] usb 5-1: config 0 descriptor?? [ 131.750201][ T4930] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 131.770366][ T4323] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 131.773809][ T4930] overlayfs: missing 'lowerdir' [ 131.787302][ T4323] dvb-usb: bulk message failed: -22 (3/0) [ 131.814168][ T4352] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 131.815350][ T4323] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 131.837889][ T4352] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 131.855086][ T4323] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 131.863165][ T4323] usb 5-1: media controller created [ 131.869918][ T4323] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 131.899016][ T4323] dvb-usb: bulk message failed: -22 (6/0) [ 131.900516][ T4352] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 131.933462][ T4323] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 131.942447][ T4352] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 131.961240][ T4323] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input12 [ 131.976456][ T4352] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 131.997939][ T4352] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 132.011316][ T4352] usb 2-1: Manufacturer: syz [ 132.019274][ T4323] dvb-usb: schedule remote query interval to 150 msecs. [ 132.038006][ T4352] usb 2-1: config 0 descriptor?? [ 132.043395][ T4323] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 132.070127][ T4323] usb 5-1: USB disconnect, device number 6 [ 132.142794][ T4323] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 132.834580][ T4949] netlink: 16 bytes leftover after parsing attributes in process `syz.2.183'. [ 133.072276][ T4345] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 133.376070][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.383334][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.054374][ T4345] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 134.078448][ T4345] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 134.106602][ T4345] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.154605][ T4345] usb 5-1: Product: syz [ 134.168063][ T4345] usb 5-1: Manufacturer: syz [ 134.184893][ T4345] usb 5-1: SerialNumber: syz [ 134.208327][ T4345] usb 5-1: config 0 descriptor?? [ 134.397172][ T4352] usbhid 2-1:0.0: can't add hid device: -71 [ 134.406897][ T4352] usbhid: probe of 2-1:0.0 failed with error -71 [ 134.485610][ T4352] usb 2-1: USB disconnect, device number 5 [ 134.641667][ T4960] 9pnet_virtio: no channels available for device syz [ 134.720509][ T128] usb 5-1: USB disconnect, device number 7 [ 134.838586][ T48] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 136.149182][ T4978] netlink: 28 bytes leftover after parsing attributes in process `syz.1.195'. [ 136.181487][ T4978] netlink: 28 bytes leftover after parsing attributes in process `syz.1.195'. [ 136.492485][ T4387] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 136.569637][ T4994] netlink: 'syz.2.199': attribute type 11 has an invalid length. [ 136.791335][ T4387] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 136.802667][ T4387] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 136.812698][ T4387] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 136.824026][ T4387] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.834660][ T4387] usb 5-1: config 0 descriptor?? [ 136.843741][ T4387] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 136.850540][ T4387] dvb-usb: bulk message failed: -22 (3/0) [ 136.858615][ T4387] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 136.869038][ T4387] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 136.876342][ T4387] usb 5-1: media controller created [ 136.883047][ T4387] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 136.897008][ T4387] dvb-usb: bulk message failed: -22 (6/0) [ 136.903195][ T4387] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 136.912499][ T4387] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input13 [ 136.926828][ T4387] dvb-usb: schedule remote query interval to 150 msecs. [ 136.934196][ T128] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 136.941898][ T4387] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 136.991789][ T4999] netlink: 16 bytes leftover after parsing attributes in process `syz.1.202'. [ 137.066753][ T4345] usb 5-1: USB disconnect, device number 8 [ 137.116736][ T4345] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 137.156312][ T128] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 137.174330][ T128] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 137.175328][ T5001] IPVS: length: 139 != 8 [ 137.191586][ T128] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 137.201706][ T128] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 137.217655][ T128] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 137.227136][ T128] usb 3-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 137.235734][ T128] usb 3-1: Manufacturer: syz [ 137.251682][ T128] usb 3-1: config 0 descriptor?? [ 138.688403][ T4283] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201' [ 138.698856][ T4283] CPU: 1 PID: 4283 Comm: kworker/u5:7 Not tainted 6.1.148-syzkaller #0 [ 138.707164][ T4283] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 138.717242][ T4283] Workqueue: hci0 hci_rx_work [ 138.721991][ T4283] Call Trace: [ 138.725307][ T4283] [ 138.728304][ T4283] dump_stack_lvl+0x168/0x22e [ 138.733013][ T4283] ? show_regs_print_info+0x12/0x12 [ 138.738247][ T4283] ? load_image+0x3b0/0x3b0 [ 138.742805][ T4283] sysfs_create_dir_ns+0x252/0x280 [ 138.747949][ T4283] ? hci_rx_work+0x3eb/0xd40 [ 138.752585][ T4283] ? sysfs_warn_dup+0xa0/0xa0 [ 138.757321][ T4283] ? do_raw_spin_unlock+0x11d/0x230 [ 138.762592][ T4283] kobject_add_internal+0x6b8/0xc80 [ 138.767864][ T4283] kobject_add+0x152/0x210 [ 138.772328][ T4283] ? kobject_init+0x1d0/0x1d0 [ 138.777140][ T4283] ? klist_children_get+0x50/0x50 [ 138.782217][ T4283] ? get_device_parent+0x121/0x3f0 [ 138.787442][ T4283] device_add+0x483/0xfb0 [ 138.791824][ T4283] ? kmem_cache_free+0xf7/0x290 [ 138.796758][ T4283] hci_conn_add_sysfs+0xd1/0x1e0 [ 138.801746][ T4283] le_conn_complete_evt+0xd1d/0x1320 [ 138.807091][ T4283] ? hci_le_big_info_adv_report_evt+0x310/0x310 [ 138.813369][ T4283] ? __mutex_unlock_slowpath+0x19e/0x6a0 [ 138.819055][ T4283] ? skb_pull_data+0xf7/0x200 [ 138.823875][ T4283] hci_le_conn_complete_evt+0x183/0x440 [ 138.829487][ T4283] ? hci_remote_host_features_evt+0x270/0x270 [ 138.835597][ T4283] hci_event_packet+0x791/0x1210 [ 138.840598][ T4283] ? bis_list+0x280/0x280 [ 138.844985][ T4283] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 138.851097][ T4283] ? kcov_remote_start+0x4c7/0x7e0 [ 138.856339][ T4283] ? mt_dump_node+0xbd0/0x1930 [ 138.861145][ T4283] ? hci_send_to_monitor+0x9c/0x4a0 [ 138.866483][ T4283] hci_rx_work+0x3eb/0xd40 [ 138.871135][ T4283] ? _raw_spin_unlock+0x40/0x40 [ 138.876031][ T4283] ? process_one_work+0x7a1/0x1160 [ 138.881213][ T4283] process_one_work+0x898/0x1160 [ 138.886424][ T4283] ? worker_detach_from_pool+0x240/0x240 [ 138.892316][ T4283] ? _raw_spin_lock_irq+0xab/0xe0 [ 138.897506][ T4283] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 138.902942][ T4283] ? kthread_data+0x4b/0xc0 [ 138.907541][ T4283] worker_thread+0xaa2/0x1250 [ 138.912275][ T4283] ? __kthread_parkme+0x162/0x1c0 [ 138.917510][ T4283] kthread+0x29d/0x330 [ 138.921690][ T4283] ? worker_clr_flags+0x1a0/0x1a0 [ 138.926865][ T4283] ? kthread_blkcg+0xd0/0xd0 [ 138.931511][ T4283] ret_from_fork+0x1f/0x30 [ 138.935972][ T4283] [ 138.939073][ C1] vkms_vblank_simulate: vblank timer overrun [ 138.947508][ T4283] kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 138.961325][ T4283] Bluetooth: hci0: failed to register connection device [ 139.571302][ T128] usbhid 3-1:0.0: can't add hid device: -71 [ 139.581531][ T128] usbhid: probe of 3-1:0.0 failed with error -71 [ 139.632449][ T128] usb 3-1: USB disconnect, device number 2 [ 141.439585][ T4283] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 141.462366][ T4322] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 141.655794][ T4322] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 141.665807][ T5042] netlink: 'syz.0.220': attribute type 11 has an invalid length. [ 141.685448][ T4322] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 141.710013][ T4322] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 141.749202][ T4322] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.766370][ T4322] usb 2-1: config 0 descriptor?? [ 141.781666][ T4322] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 141.800824][ T4322] dvb-usb: bulk message failed: -22 (3/0) [ 141.822721][ T4322] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 141.847643][ T4322] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 141.865692][ T4322] usb 2-1: media controller created [ 141.872944][ T4322] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 141.897934][ T4322] dvb-usb: bulk message failed: -22 (6/0) [ 141.910682][ T4322] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 141.931231][ T4322] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input14 [ 141.967851][ T128] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 141.978824][ T4322] dvb-usb: schedule remote query interval to 150 msecs. [ 141.988416][ T5033] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 142.003150][ T4322] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 142.010530][ T5033] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 142.030516][ T4322] usb 2-1: USB disconnect, device number 6 [ 142.081825][ T4322] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 142.274086][ T128] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 143.447163][ T128] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 143.459076][ T128] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 143.469009][ T128] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 143.922255][ T128] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 143.942179][ T128] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 143.950370][ T128] usb 1-1: Manufacturer: syz [ 143.957380][ T128] usb 1-1: config 0 descriptor?? [ 144.208903][ T5063] netlink: 16 bytes leftover after parsing attributes in process `syz.2.226'. [ 144.628056][ T128] usbhid 1-1:0.0: can't add hid device: -71 [ 144.640668][ T128] usbhid: probe of 1-1:0.0 failed with error -71 [ 144.739808][ T128] usb 1-1: USB disconnect, device number 5 [ 145.452465][ T4283] Bluetooth: hci0: command 0x0406 tx timeout [ 146.001080][ T5089] mmap: syz.4.232 (5089) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 146.292272][ T128] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 146.482216][ T128] usb 2-1: Using ep0 maxpacket: 32 [ 146.500976][ T128] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 146.533269][ T4283] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 146.618420][ T128] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 146.734414][ T128] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 146.814516][ T128] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 146.859107][ T128] usb 2-1: Product: syz [ 146.888826][ T128] usb 2-1: Manufacturer: syz [ 146.935271][ T128] usb 2-1: SerialNumber: syz [ 146.985688][ T128] usb 2-1: config 0 descriptor?? [ 147.030145][ T128] hub 2-1:0.0: bad descriptor, ignoring hub [ 147.071511][ T128] hub: probe of 2-1:0.0 failed with error -5 [ 148.736858][ T4322] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 148.954181][ T4322] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 148.985726][ T4322] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 148.996489][ T128] usb 2-1: USB disconnect, device number 7 [ 149.082398][ T4322] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 149.126823][ T4322] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.199687][ T4322] usb 4-1: config 0 descriptor?? [ 149.278593][ T4322] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 149.362320][ T4322] dvb-usb: bulk message failed: -22 (3/0) [ 149.393534][ T4322] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 149.455168][ T4322] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 149.466759][ T5106] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 149.507776][ T5106] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 149.522306][ T4322] usb 4-1: media controller created [ 149.543609][ T4322] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 149.579514][ T4322] dvb-usb: bulk message failed: -22 (6/0) [ 149.589733][ T4322] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 149.645274][ T4322] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input15 [ 149.821678][ T4322] dvb-usb: schedule remote query interval to 150 msecs. [ 149.829202][ T4322] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 149.873202][ T4322] usb 4-1: USB disconnect, device number 5 [ 149.921009][ T4322] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 150.542478][ T5128] netlink: 'syz.3.246': attribute type 11 has an invalid length. [ 150.623463][ T4283] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 150.669183][ T5127] block device autoloading is deprecated and will be removed. [ 150.684351][ T5129] block device autoloading is deprecated and will be removed. [ 150.756627][ T5133] netlink: 16 bytes leftover after parsing attributes in process `syz.1.247'. [ 150.842511][ T4322] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 151.035240][ T4322] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 151.058339][ T4322] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 151.095880][ T4322] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 151.141556][ T4322] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 151.178155][ T4322] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 151.196235][ T4322] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 151.217109][ T4322] usb 4-1: Manufacturer: syz [ 151.248604][ T4322] usb 4-1: config 0 descriptor?? [ 151.632554][ T22] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 151.834610][ T22] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 151.862766][ T22] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 151.872537][ T22] usb 1-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 151.881817][ T22] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.882205][ T14] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 151.923522][ T22] usb 1-1: config 0 descriptor?? [ 151.965047][ T22] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 151.987484][ T22] dvb-usb: bulk message failed: -22 (3/0) [ 152.040578][ T22] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 152.070376][ T22] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 152.098452][ T22] usb 1-1: media controller created [ 152.112208][ T14] usb 3-1: Using ep0 maxpacket: 8 [ 152.123007][ T14] usb 3-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 152.139808][ T22] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 152.159766][ T5145] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 152.189775][ T5145] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 152.226743][ T22] dvb-usb: bulk message failed: -22 (6/0) [ 152.249332][ T14] usb 3-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 152.283334][ T22] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 152.302322][ T14] usb 3-1: config 0 interface 0 has no altsetting 0 [ 152.309325][ T14] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 152.330813][ T14] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.342577][ T14] usb 3-1: config 0 descriptor?? [ 152.382866][ T22] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input16 [ 152.438202][ T22] dvb-usb: schedule remote query interval to 150 msecs. [ 152.449616][ T22] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 152.505843][ T22] usb 1-1: USB disconnect, device number 6 [ 152.601482][ T22] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 152.759952][ T14] mcp2221 0003:04D8:00DD.0001: unknown main item tag 0x0 [ 152.777867][ T14] mcp2221 0003:04D8:00DD.0001: unknown main item tag 0x0 [ 152.796427][ T14] mcp2221 0003:04D8:00DD.0001: unknown main item tag 0x0 [ 152.811586][ T14] mcp2221 0003:04D8:00DD.0001: unknown main item tag 0x0 [ 152.828182][ T14] mcp2221 0003:04D8:00DD.0001: unknown main item tag 0x0 [ 152.851399][ T14] mcp2221 0003:04D8:00DD.0001: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.2-1/input0 [ 153.083919][ T14] usb 3-1: USB disconnect, device number 3 [ 153.332358][ T4322] usbhid 4-1:0.0: can't add hid device: -71 [ 153.340705][ T4322] usbhid: probe of 4-1:0.0 failed with error -71 [ 153.389100][ T4322] usb 4-1: USB disconnect, device number 6 [ 154.032429][ T14] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 154.061620][ T5185] netlink: 16 bytes leftover after parsing attributes in process `syz.0.271'. [ 154.203139][ T14] usb 5-1: device descriptor read/64, error -71 [ 154.392376][ T5194] netlink: 'syz.2.277': attribute type 11 has an invalid length. [ 154.482768][ T14] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 154.662738][ T14] usb 5-1: device descriptor read/64, error -71 [ 154.833288][ T14] usb usb5-port1: attempt power cycle [ 155.527223][ T4345] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 155.672276][ T14] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 155.794098][ T14] usb 5-1: device descriptor read/8, error -71 [ 155.813124][ T4345] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 156.102639][ T14] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 156.292247][ T4345] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 157.413151][ T4345] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 157.449630][ T4345] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 157.464544][ T14] usb 5-1: device descriptor read/8, error -71 [ 157.592411][ T14] usb usb5-port1: unable to enumerate USB device [ 157.698196][ T4345] usb 3-1: string descriptor 0 read error: -71 [ 157.722376][ T4345] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 157.748139][ T26] audit: type=1326 audit(1756066862.031:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5206 comm="syz.2.280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f306a18ebe9 code=0x7ffc0000 [ 157.762291][ T4345] usb 3-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 157.842522][ T26] audit: type=1326 audit(1756066862.051:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5206 comm="syz.2.280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=324 compat=0 ip=0x7f306a18ebe9 code=0x7ffc0000 [ 157.850599][ T4345] usb 3-1: config 0 descriptor?? [ 157.965044][ T4345] usb 3-1: can't set config #0, error -71 [ 157.991259][ T4345] usb 3-1: USB disconnect, device number 4 [ 158.008359][ T26] audit: type=1326 audit(1756066862.051:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5206 comm="syz.2.280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f306a18ebe9 code=0x7ffc0000 [ 158.202434][ T26] audit: type=1326 audit(1756066862.051:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5206 comm="syz.2.280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f306a18ebe9 code=0x7ffc0000 [ 158.656177][ T5210] overlayfs: missing 'lowerdir' [ 159.567940][ T5237] netlink: 'syz.1.290': attribute type 11 has an invalid length. [ 160.312191][ T4322] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 160.666505][ T14] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 160.802800][ T4322] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 160.838678][ T4322] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 160.849969][ T14] usb 3-1: device descriptor read/64, error -71 [ 160.870615][ T5252] netlink: 16 bytes leftover after parsing attributes in process `syz.4.294'. [ 160.898407][ T4322] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 160.921463][ T4322] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 160.943346][ T4322] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 160.968974][ T4322] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 160.992393][ T4322] usb 2-1: Manufacturer: syz [ 161.007435][ T4322] usb 2-1: config 0 descriptor?? [ 161.101770][ T5256] netlink: 1284 bytes leftover after parsing attributes in process `syz.3.298'. [ 161.112522][ T5256] netlink: get zone limit has 8 unknown bytes [ 161.152754][ T14] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 161.260154][ T26] audit: type=1326 audit(1756066865.541:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5257 comm="syz.3.299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f901718ebe9 code=0x7ffc0000 [ 161.291509][ T26] audit: type=1326 audit(1756066865.571:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5257 comm="syz.3.299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f901718ebe9 code=0x7ffc0000 [ 161.315497][ T26] audit: type=1326 audit(1756066865.571:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5257 comm="syz.3.299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f901718ebe9 code=0x7ffc0000 [ 161.322946][ T14] usb 3-1: device descriptor read/64, error -71 [ 161.409291][ T26] audit: type=1326 audit(1756066865.571:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5257 comm="syz.3.299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f901718ebe9 code=0x7ffc0000 [ 161.484585][ T26] audit: type=1326 audit(1756066865.571:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5257 comm="syz.3.299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f901718ebe9 code=0x7ffc0000 [ 161.522551][ T14] usb usb3-port1: attempt power cycle [ 161.530955][ T26] audit: type=1326 audit(1756066865.601:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5257 comm="syz.3.299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f901718ebe9 code=0x7ffc0000 [ 161.952252][ T14] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 162.017102][ T14] usb 3-1: device descriptor read/8, error -71 [ 162.232307][ T4387] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 162.312420][ T14] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 162.365087][ T14] usb 3-1: device descriptor read/8, error -71 [ 162.432418][ T4387] usb 4-1: Using ep0 maxpacket: 8 [ 162.439247][ T4387] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 162.461114][ T4387] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 162.476941][ T4387] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 162.493200][ T14] usb usb3-port1: unable to enumerate USB device [ 162.505308][ T4387] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 162.515672][ T4387] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 162.529102][ T4387] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 162.538614][ T4387] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.556849][ T4322] usbhid 2-1:0.0: can't add hid device: -71 [ 162.568066][ T4322] usbhid: probe of 2-1:0.0 failed with error -71 [ 162.617258][ T4322] usb 2-1: USB disconnect, device number 8 [ 162.681495][ T5274] netlink: 'syz.1.307': attribute type 12 has an invalid length. [ 162.697061][ T5274] netlink: 'syz.1.307': attribute type 29 has an invalid length. [ 162.725047][ T5274] netlink: 148 bytes leftover after parsing attributes in process `syz.1.307'. [ 162.737908][ T5274] netlink: 'syz.1.307': attribute type 1 has an invalid length. [ 162.747525][ T5275] netlink: 'syz.1.307': attribute type 12 has an invalid length. [ 162.759066][ T5275] netlink: 'syz.1.307': attribute type 29 has an invalid length. [ 162.778132][ T4387] usb 4-1: GET_CAPABILITIES returned 0 [ 162.780414][ T5275] netlink: 148 bytes leftover after parsing attributes in process `syz.1.307'. [ 162.784011][ T4387] usbtmc 4-1:16.0: can't read capabilities [ 162.800891][ T5275] netlink: 'syz.1.307': attribute type 1 has an invalid length. [ 162.978913][ T5280] 9pnet_virtio: no channels available for device syz [ 162.986299][ T4322] usb 4-1: USB disconnect, device number 7 [ 164.090178][ T5303] netlink: 16 bytes leftover after parsing attributes in process `syz.3.316'. [ 164.403101][ T5293] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 164.414928][ T5293] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 164.424631][ T5293] Bluetooth: hci0: Suspend notifier action (1) failed: -4 [ 164.482399][ T5293] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 164.516249][ T5293] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 164.555233][ T5293] Bluetooth: hci1: Suspend notifier action (1) failed: -4 [ 164.566397][ T5293] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 164.576166][ T5293] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 164.595813][ T5293] Bluetooth: hci2: Suspend notifier action (1) failed: -4 [ 164.607490][ T5293] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 164.616478][ T5293] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 164.626512][ T5293] Bluetooth: hci3: Suspend notifier action (1) failed: -4 [ 164.636253][ T5293] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 164.648155][ T5293] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 164.656694][ T5293] Bluetooth: hci4: Suspend notifier action (1) failed: -4 [ 164.952211][ T4352] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 164.960654][ T4322] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 165.019361][ T5313] delete_channel: no stack [ 165.142334][ T4322] usb 3-1: device descriptor read/64, error -71 [ 165.173833][ T4352] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 165.195150][ T4352] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 165.230115][ T4352] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 165.258172][ T4352] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 165.289467][ T4352] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 165.308934][ T4352] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 165.329178][ T4352] usb 2-1: Manufacturer: syz [ 165.344945][ T4352] usb 2-1: config 0 descriptor?? [ 165.422229][ T4322] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 165.582527][ T4322] usb 3-1: device descriptor read/64, error -71 [ 165.712528][ T4322] usb usb3-port1: attempt power cycle [ 165.781308][ T4283] Bluetooth: hci0: command 0x0c1a tx timeout [ 166.152329][ T4322] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 166.193185][ T4322] usb 3-1: device descriptor read/8, error -71 [ 166.472262][ T4322] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 166.492380][ T4283] Bluetooth: hci1: command 0x0c1a tx timeout [ 166.670622][ T4283] Bluetooth: hci2: command 0x0c1a tx timeout [ 166.677126][ T4283] Bluetooth: hci3: command 0x0c1a tx timeout [ 166.702244][ T48] Bluetooth: hci4: command 0x0c1a tx timeout [ 166.722310][ T4322] usb 3-1: device descriptor read/8, error -71 [ 167.070192][ T4322] usb usb3-port1: unable to enumerate USB device [ 167.215177][ T4352] usbhid 2-1:0.0: can't add hid device: -71 [ 167.221291][ T4352] usbhid: probe of 2-1:0.0 failed with error -71 [ 167.302580][ T4352] usb 2-1: USB disconnect, device number 9 [ 167.852291][ T4283] Bluetooth: hci0: command 0x0406 tx timeout [ 168.040916][ T5360] netlink: 16 bytes leftover after parsing attributes in process `syz.3.338'. [ 168.572348][ T4283] Bluetooth: hci1: command 0x0406 tx timeout [ 168.732390][ T48] Bluetooth: hci4: command 0x0406 tx timeout [ 168.732409][ T4283] Bluetooth: hci3: command 0x0406 tx timeout [ 168.732448][ T4283] Bluetooth: hci2: command 0x0406 tx timeout [ 169.216277][ T4322] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 169.402427][ T4322] usb 5-1: device descriptor read/64, error -71 [ 169.572236][ T4352] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 169.672287][ T4322] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 169.793839][ T4352] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 169.825314][ T4352] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 169.852373][ T4322] usb 5-1: device descriptor read/64, error -71 [ 169.899242][ T4352] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 169.927273][ T4352] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 169.967779][ T4352] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 169.992442][ T4322] usb usb5-port1: attempt power cycle [ 170.002353][ T4352] usb 3-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 170.032382][ T4352] usb 3-1: Manufacturer: syz [ 170.060026][ T4352] usb 3-1: config 0 descriptor?? [ 170.432460][ T4322] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 170.492969][ T4322] usb 5-1: device descriptor read/8, error -71 [ 170.792290][ T4322] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 170.842748][ T4322] usb 5-1: device descriptor read/8, error -71 [ 170.982736][ T4322] usb usb5-port1: unable to enumerate USB device [ 172.748526][ T4352] usbhid 3-1:0.0: can't add hid device: -71 [ 172.757121][ T4352] usbhid: probe of 3-1:0.0 failed with error -71 [ 172.803590][ T4352] usb 3-1: USB disconnect, device number 13 [ 173.836704][ T5428] netlink: 16 bytes leftover after parsing attributes in process `syz.4.359'. [ 174.520447][ T26] kauditd_printk_skb: 8 callbacks suppressed [ 174.520460][ T26] audit: type=1326 audit(1756066878.801:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5436 comm="syz.2.368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f306a18ebe9 code=0x7ffc0000 [ 176.221669][ T26] audit: type=1326 audit(1756066879.851:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5436 comm="syz.2.368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f306a18ebe9 code=0x7ffc0000 [ 176.245444][ T5435] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 176.482345][ T4387] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 176.501273][ T26] audit: type=1326 audit(1756066879.851:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5436 comm="syz.2.368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f306a18ebe9 code=0x7ffc0000 [ 176.531438][ T5445] netlink: 32 bytes leftover after parsing attributes in process `syz.0.370'. [ 176.568995][ T26] audit: type=1326 audit(1756066879.851:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5436 comm="syz.2.368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f306a18ebe9 code=0x7ffc0000 [ 176.595468][ T26] audit: type=1326 audit(1756066879.851:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5436 comm="syz.2.368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f306a18ebe9 code=0x7ffc0000 [ 176.617581][ C0] vkms_vblank_simulate: vblank timer overrun [ 176.629247][ T5445] netlink: 32 bytes leftover after parsing attributes in process `syz.0.370'. [ 176.692361][ T4387] usb 2-1: device descriptor read/64, error -71 [ 177.582166][ T26] audit: type=1326 audit(1756066880.401:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5436 comm="syz.2.368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f306a18ebe9 code=0x7ffc0000 [ 177.706612][ T26] audit: type=1326 audit(1756066880.401:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5436 comm="syz.2.368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f306a18ebe9 code=0x7ffc0000 [ 177.736783][ T26] audit: type=1326 audit(1756066880.401:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5436 comm="syz.2.368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f306a18ebe9 code=0x7ffc0000 [ 177.810309][ T26] audit: type=1326 audit(1756066880.401:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5436 comm="syz.2.368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f306a18ebe9 code=0x7ffc0000 [ 177.832927][ C0] vkms_vblank_simulate: vblank timer overrun [ 177.872217][ T4387] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 179.900170][ T26] audit: type=1326 audit(1756066880.401:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5436 comm="syz.2.368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f306a18ebe9 code=0x7ffc0000 [ 180.253359][ T26] audit: type=1326 audit(1756066880.401:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5436 comm="syz.2.368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f306a18ebe9 code=0x7ffc0000 [ 180.615053][ T26] audit: type=1326 audit(1756066880.401:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5436 comm="syz.2.368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f306a18ebe9 code=0x7ffc0000 [ 180.638271][ T26] audit: type=1326 audit(1756066880.401:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5436 comm="syz.2.368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f306a18ebe9 code=0x7ffc0000 [ 180.665292][ T26] audit: type=1326 audit(1756066880.401:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5436 comm="syz.2.368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f306a18ebe9 code=0x7ffc0000 [ 180.688142][ T26] audit: type=1326 audit(1756066880.401:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5436 comm="syz.2.368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=121 compat=0 ip=0x7f306a18ebe9 code=0x7ffc0000 [ 180.710529][ T26] audit: type=1326 audit(1756066880.401:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5436 comm="syz.2.368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f306a18ebe9 code=0x7ffc0000 [ 180.733896][ T26] audit: type=1326 audit(1756066880.401:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5436 comm="syz.2.368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f306a18ebe9 code=0x7ffc0000 [ 180.756361][ T26] audit: type=1326 audit(1756066880.401:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5436 comm="syz.2.368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7f306a18ebe9 code=0x7ffc0000 [ 180.778950][ T26] audit: type=1326 audit(1756066880.401:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5436 comm="syz.2.368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f306a18ebe9 code=0x7ffc0000 [ 182.884239][ T4352] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 183.042352][ T5492] I/O error, dev loop0, sector 2 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 183.106809][ T5492] hfsplus: unable to find HFS+ superblock [ 183.116350][ T4352] usb 3-1: Using ep0 maxpacket: 8 [ 183.130812][ T4352] usb 3-1: config index 0 descriptor too short (expected 74, got 45) [ 183.155335][ T4352] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 183.183874][ T4352] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 183.231855][ T4352] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 183.362316][ T4352] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 183.478947][ T4352] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 183.615438][ T4352] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 183.655737][ T4352] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.021450][ T4352] usb 3-1: GET_CAPABILITIES returned 0 [ 184.033937][ T4352] usbtmc 3-1:16.0: can't read capabilities [ 184.234746][ C0] usbtmc 3-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 184.286159][ T5490] usbtmc 3-1:16.0: Unable to send data, error -71 [ 184.381601][ T4352] usb 3-1: USB disconnect, device number 14 [ 184.762306][ T14] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 184.942220][ T14] usb 4-1: device descriptor read/64, error -71 [ 185.272269][ T14] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 185.433217][ T14] usb 4-1: device descriptor read/64, error -71 [ 185.552408][ T14] usb usb4-port1: attempt power cycle [ 185.937551][ T5514] syz.2.387 uses obsolete (PF_INET,SOCK_PACKET) [ 185.972224][ T14] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 186.023176][ T14] usb 4-1: device descriptor read/8, error -71 [ 186.078677][ T5515] Bluetooth: MGMT ver 1.22 [ 186.445642][ T14] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 186.542991][ T14] usb 4-1: device descriptor read/8, error -71 [ 186.882507][ T14] usb usb4-port1: unable to enumerate USB device [ 186.941336][ T5523] netlink: 16 bytes leftover after parsing attributes in process `syz.1.389'. [ 187.001181][ T5513] netlink: 'syz.0.388': attribute type 29 has an invalid length. [ 187.009676][ T5513] netlink: 8 bytes leftover after parsing attributes in process `syz.0.388'. [ 187.165748][ T5513] netlink: 'syz.0.388': attribute type 29 has an invalid length. [ 187.184853][ T5513] netlink: 8 bytes leftover after parsing attributes in process `syz.0.388'. [ 188.122383][ T14] usb 4-1: new full-speed USB device number 12 using dummy_hcd [ 188.942505][ T14] usb 4-1: device descriptor read/64, error -71 [ 189.222483][ T14] usb 4-1: new full-speed USB device number 13 using dummy_hcd [ 189.392207][ T14] usb 4-1: device descriptor read/64, error -71 [ 189.522363][ T14] usb usb4-port1: attempt power cycle [ 189.952873][ T14] usb 4-1: new full-speed USB device number 14 using dummy_hcd [ 189.995939][ T14] usb 4-1: device descriptor read/8, error -71 [ 190.272311][ T14] usb 4-1: new full-speed USB device number 15 using dummy_hcd [ 190.336184][ T14] usb 4-1: device descriptor read/8, error -71 [ 190.423515][ T5554] vcan0: MTU too low for tipc bearer [ 190.466374][ T5554] tipc: Enabling of bearer rejected, failed to enable media [ 190.542582][ T14] usb usb4-port1: unable to enumerate USB device [ 191.584912][ T5565] I/O error, dev loop3, sector 2 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 191.617807][ T5565] hfsplus: unable to find HFS+ superblock [ 191.648052][ T5569] tipc: Started in network mode [ 191.664615][ T5569] tipc: Node identity 7f000001, cluster identity 4711 [ 191.684798][ T5569] tipc: New replicast peer: 100.1.1.2 [ 191.699936][ T5569] tipc: Enabled bearer , priority 10 [ 192.813248][ T125] tipc: Node number set to 2130706433 [ 193.339286][ T5591] netlink: 16 bytes leftover after parsing attributes in process `syz.1.407'. [ 193.452296][ T4284] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 194.872882][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.879396][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.132278][ T5595] IPVS: set_ctl: invalid protocol: 50 172.20.20.67:20001 [ 195.673597][ T5103] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 195.862181][ T5103] usb 1-1: device descriptor read/64, error -71 [ 196.202343][ T5103] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 196.372214][ T5103] usb 1-1: device descriptor read/64, error -71 [ 196.492863][ T5103] usb usb1-port1: attempt power cycle [ 196.905112][ T5103] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 196.953009][ T5103] usb 1-1: device descriptor read/8, error -71 [ 197.102247][ T4323] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 197.233942][ T5103] usb 1-1: new full-speed USB device number 10 using dummy_hcd [ 197.253847][ T5622] netlink: 32 bytes leftover after parsing attributes in process `syz.2.419'. [ 197.278798][ T5622] netlink: 32 bytes leftover after parsing attributes in process `syz.2.419'. [ 197.283549][ T5103] usb 1-1: device descriptor read/8, error -71 [ 197.299916][ T4323] usb 5-1: Using ep0 maxpacket: 8 [ 197.307675][ T4323] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 197.353028][ T4323] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 197.363922][ T4323] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 197.374685][ T4323] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 197.392922][ T4323] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 197.402433][ T4323] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.457564][ T5103] usb usb1-port1: unable to enumerate USB device [ 197.517524][ T9] Bluetooth: hci5: Frame reassembly failed (-84) [ 197.552230][ T4337] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 197.630714][ T4323] usb 5-1: GET_CAPABILITIES returned 0 [ 197.636580][ T4323] usbtmc 5-1:16.0: can't read capabilities [ 197.722232][ T4345] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 197.745048][ T4337] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 197.756456][ T4337] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 197.766647][ T4337] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 197.775832][ T4337] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.787407][ T5620] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 197.905297][ C1] usbtmc 5-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 197.915054][ T5632] usbtmc 5-1:16.0: Unable to send data, error -71 [ 197.924293][ T4345] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 197.936509][ T4345] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 197.947707][ T4345] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 197.957858][ T4345] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 197.972800][ T4345] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 197.981923][ T4345] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 197.990723][ T4345] usb 4-1: Manufacturer: syz [ 198.006977][ T4345] usb 4-1: config 0 descriptor?? [ 198.018841][ T125] usb 2-1: USB disconnect, device number 12 [ 198.609402][ T5634] netlink: 132 bytes leftover after parsing attributes in process `syz.0.423'. [ 198.624290][ T5634] netlink: 320 bytes leftover after parsing attributes in process `syz.0.423'. [ 199.532316][ T4284] Bluetooth: hci5: command 0x1003 tx timeout [ 199.540709][ T4283] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 199.942767][ T14] usb 5-1: USB disconnect, device number 17 [ 200.524389][ T4345] usbhid 4-1:0.0: can't add hid device: -71 [ 200.530499][ T4345] usbhid: probe of 4-1:0.0 failed with error -71 [ 200.593123][ T4345] usb 4-1: USB disconnect, device number 16 [ 201.790164][ T5662] netlink: 80 bytes leftover after parsing attributes in process `syz.2.427'. [ 202.012372][ T4283] Bluetooth: hci1: command 0x0406 tx timeout [ 202.018532][ T4283] Bluetooth: hci3: command 0x0406 tx timeout [ 202.025094][ T4284] Bluetooth: hci2: command 0x0406 tx timeout [ 202.025140][ T48] Bluetooth: hci4: command 0x0406 tx timeout [ 202.081686][ T5663] netlink: 16 bytes leftover after parsing attributes in process `syz.3.428'. [ 202.850506][ T5671] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 202.921478][ T5671] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 202.933969][ T5671] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 202.946914][ T5671] device bridge_slave_0 left promiscuous mode [ 202.956469][ T5671] bridge0: port 1(bridge_slave_0) entered disabled state [ 202.994753][ T5671] device bridge_slave_1 left promiscuous mode [ 203.016522][ T5671] bridge0: port 2(bridge_slave_1) entered disabled state [ 203.051062][ T5671] bond0: (slave bond_slave_0): Releasing backup interface [ 203.060424][ T5671] device bond_slave_0 left promiscuous mode [ 203.100500][ T5671] bond0: (slave bond_slave_1): Releasing backup interface [ 203.116384][ T5671] device bond_slave_1 left promiscuous mode [ 203.262962][ T5671] team0: Port device team_slave_0 removed [ 203.334428][ T5671] team0: Port device team_slave_1 removed [ 203.373282][ T5671] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 203.380788][ T5671] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 203.496468][ T5671] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 203.563822][ T5671] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 203.685880][ T5672] netlink: 'syz.1.430': attribute type 10 has an invalid length. [ 203.806291][ T5680] netlink: 'syz.4.431': attribute type 11 has an invalid length. [ 203.832396][ T5672] device wlan1 entered promiscuous mode [ 203.871431][ T5672] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 204.179544][ T5684] netlink: 36 bytes leftover after parsing attributes in process `syz.0.433'. [ 204.452180][ T4345] usb 2-1: new full-speed USB device number 13 using dummy_hcd [ 204.632208][ T4345] usb 2-1: device descriptor read/64, error -71 [ 204.912788][ T4345] usb 2-1: new full-speed USB device number 14 using dummy_hcd [ 205.093098][ T4345] usb 2-1: device descriptor read/64, error -71 [ 205.232531][ T4345] usb usb2-port1: attempt power cycle [ 205.413126][ T4283] Bluetooth: hci3: unexpected event for opcode 0x2042 [ 205.662183][ T4345] usb 2-1: new full-speed USB device number 15 using dummy_hcd [ 205.702853][ T4345] usb 2-1: device descriptor read/8, error -71 [ 205.852388][ T4322] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 205.972507][ T4345] usb 2-1: new full-speed USB device number 16 using dummy_hcd [ 206.033608][ T4345] usb 2-1: device descriptor read/8, error -71 [ 206.063950][ T4322] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 206.132495][ T4322] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 206.212556][ T4345] usb usb2-port1: unable to enumerate USB device [ 206.271299][ T4322] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 206.585327][ T4322] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 206.637419][ T5709] netlink: 12 bytes leftover after parsing attributes in process `syz.2.440'. [ 206.648186][ T5709] netlink: 12 bytes leftover after parsing attributes in process `syz.2.440'. [ 206.678411][ T4322] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 206.702226][ T4322] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 206.726500][ T4322] usb 1-1: Manufacturer: syz [ 206.783347][ T4322] usb 1-1: config 0 descriptor?? [ 207.339389][ T5715] netlink: 32 bytes leftover after parsing attributes in process `syz.3.441'. [ 208.457740][ T4322] usbhid 1-1:0.0: can't add hid device: -71 [ 208.473840][ T4322] usbhid: probe of 1-1:0.0 failed with error -71 [ 208.550997][ T4322] usb 1-1: USB disconnect, device number 11 [ 209.085309][ T5730] netlink: 16 bytes leftover after parsing attributes in process `syz.4.445'. [ 209.210707][ T5732] netlink: 36 bytes leftover after parsing attributes in process `syz.0.448'. [ 209.464126][ T4283] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 209.474266][ T4283] Bluetooth: hci3: Injecting HCI hardware error event [ 209.484530][ T48] Bluetooth: hci3: hardware error 0x00 [ 211.161526][ T5751] netlink: 12 bytes leftover after parsing attributes in process `syz.3.454'. [ 211.198325][ T5751] netlink: 12 bytes leftover after parsing attributes in process `syz.3.454'. [ 211.242245][ T128] usb 2-1: new full-speed USB device number 17 using dummy_hcd [ 211.402189][ T128] usb 2-1: device descriptor read/64, error -71 [ 211.532380][ T48] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 211.682233][ T128] usb 2-1: new full-speed USB device number 18 using dummy_hcd [ 211.842288][ T128] usb 2-1: device descriptor read/64, error -71 [ 211.972572][ T128] usb usb2-port1: attempt power cycle [ 212.382516][ T128] usb 2-1: new full-speed USB device number 19 using dummy_hcd [ 212.984276][ T128] usb 2-1: device descriptor read/8, error -71 [ 213.252208][ T128] usb 2-1: new full-speed USB device number 20 using dummy_hcd [ 213.322275][ T128] usb 2-1: device descriptor read/8, error -71 [ 213.482418][ T128] usb usb2-port1: unable to enumerate USB device [ 217.283963][ T5847] tipc: Started in network mode [ 217.289891][ T5847] tipc: Node identity ac1414aa, cluster identity 4711 [ 217.305564][ T5847] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 217.320002][ T5847] tipc: Enabled bearer , priority 10 [ 217.442621][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 217.582353][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 217.732244][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 217.872308][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 217.919072][ T5872] netlink: 36 bytes leftover after parsing attributes in process `syz.0.472'. [ 218.012322][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 218.152301][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 218.292354][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 218.452995][ T5103] tipc: Node number set to 2886997162 [ 218.572272][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 218.842322][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 222.565809][ C1] net_ratelimit: 3 callbacks suppressed [ 222.565828][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 222.774205][ T48] Bluetooth: hci1: unexpected event for opcode 0x2005 [ 223.612518][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 224.185918][ T5916] netlink: 36 bytes leftover after parsing attributes in process `syz.2.486'. [ 224.433410][ T5920] netlink: 16 bytes leftover after parsing attributes in process `syz.1.481'. [ 224.642458][ T48] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 224.652638][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 225.692479][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 226.732434][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 227.772455][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 228.812425][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 228.892320][ T4283] Bluetooth: hci5: command 0x1003 tx timeout [ 228.900895][ T48] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 229.708691][ T4322] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 229.852267][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 229.923578][ T4322] usb 2-1: Using ep0 maxpacket: 8 [ 229.946531][ T4322] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 230.038872][ T4322] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 230.090434][ T6022] netlink: 8 bytes leftover after parsing attributes in process `syz.3.506'. [ 230.626121][ T4322] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 230.892452][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 231.021132][ T4322] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 231.116666][ T4322] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 231.191942][ T4322] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 231.455995][ T4322] usb 2-1: GET_CAPABILITIES returned 0 [ 231.461633][ T4322] usbtmc 2-1:16.0: can't read capabilities [ 231.651860][ T6035] random: crng reseeded on system resumption [ 231.656403][ T6027] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.678411][ T4322] usb 2-1: USB disconnect, device number 21 [ 231.887992][ T6037] overlayfs: overlapping lowerdir path [ 231.898198][ T6027] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.942327][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 232.081118][ T6027] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.292582][ T6027] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.414249][ T6043] netlink: 16 bytes leftover after parsing attributes in process `syz.2.509'. [ 232.631463][ T6027] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.698448][ T6027] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.718196][ T6027] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.735574][ T6027] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.749658][ T6046] fuse: Bad value for 'fd' [ 232.982351][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 234.012269][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 234.927968][ T6056] bridge0: port 2(bridge_slave_1) entered disabled state [ 234.935767][ T6056] bridge0: port 1(bridge_slave_0) entered disabled state [ 235.052275][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 235.452438][ T4283] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 235.459175][ T48] Bluetooth: hci5: command 0x1003 tx timeout [ 236.092203][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 237.132276][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 237.972488][ T6074] netlink: 4 bytes leftover after parsing attributes in process `syz.2.521'. [ 238.182232][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 239.222279][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 240.262291][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 241.302318][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 242.332278][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 242.443351][ T6056] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 242.467382][ T6095] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 242.480359][ T6096] netlink: 16 bytes leftover after parsing attributes in process `syz.0.525'. [ 242.643850][ T6056] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 243.372424][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 243.755102][ T6056] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.768326][ T6056] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.778254][ T6056] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.787994][ T6056] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.412220][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 244.492726][ T4283] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 244.499715][ T4269] Bluetooth: hci5: command 0x1003 tx timeout [ 245.358348][ T6120] md: md2 stopped. [ 245.452404][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 245.772220][ T4269] Bluetooth: hci6: command 0x1003 tx timeout [ 245.772258][ T48] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 246.492224][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 247.396541][ T6144] netlink: 16 bytes leftover after parsing attributes in process `syz.0.540'. [ 247.940850][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 249.262511][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 250.332511][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 250.956751][ T6163] device bridge_slave_0 left promiscuous mode [ 250.982594][ T6163] bridge0: port 1(bridge_slave_0) entered disabled state [ 251.072449][ T6163] device bridge_slave_1 left promiscuous mode [ 251.151493][ T6163] bridge0: port 2(bridge_slave_1) entered disabled state [ 251.241454][ T6163] bond0: (slave bond_slave_0): Releasing backup interface [ 251.251746][ T6163] bond0: (slave bond_slave_1): Releasing backup interface [ 251.295655][ T6163] team0: Port device team_slave_0 removed [ 251.316333][ T6163] team0: Port device team_slave_1 removed [ 251.325636][ T6163] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 251.338497][ T6163] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 251.372540][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 251.461918][ T6166] team0: Mode changed to "loadbalance" [ 251.488899][ T6169] netlink: 'syz.4.546': attribute type 10 has an invalid length. [ 251.627663][ T6169] 8021q: adding VLAN 0 to HW filter on device bond0 [ 251.641415][ T6169] team0: Port device bond0 added [ 251.648125][ T6172] netlink: 4 bytes leftover after parsing attributes in process `syz.4.546'. [ 252.217552][ T4269] Bluetooth: hci5: sending frame failed (-49) [ 252.226522][ T48] Bluetooth: hci5: Opcode 0x1003 failed: -49 [ 252.412490][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 252.528747][ T6172] team0 (unregistering): Port device bond0 removed [ 253.462481][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 253.523099][ T6191] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 253.537987][ T6191] overlayfs: failed to set xattr on upper [ 253.548486][ T6191] overlayfs: ...falling back to index=off,metacopy=off. [ 254.202696][ T6198] netlink: 16 bytes leftover after parsing attributes in process `syz.0.554'. [ 254.492520][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 255.532419][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 255.847667][ T6200] netlink: 8 bytes leftover after parsing attributes in process `syz.3.555'. [ 256.135391][ T6200] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready [ 256.265694][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.287484][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.572549][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 256.657952][ T6205] tipc: Started in network mode [ 256.738216][ T6205] tipc: Node identity a2cd74b5f2aa, cluster identity 4711 [ 256.746224][ T6205] tipc: Enabled bearer , priority 0 [ 256.864078][ T6203] tipc: Resetting bearer [ 257.612498][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 257.707106][ T6202] tipc: Disabling bearer [ 257.972836][ T6214] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 257.991205][ T6214] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 257.999578][ T6214] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 258.652513][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 259.044344][ T6218] block device autoloading is deprecated and will be removed. [ 259.229814][ T6221] netlink: 4 bytes leftover after parsing attributes in process `syz.4.558'. [ 259.692254][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 260.732279][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 261.773986][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 261.899733][ T6244] ======================================================= [ 261.899733][ T6244] WARNING: The mand mount option has been deprecated and [ 261.899733][ T6244] and is ignored by this kernel. Remove the mand [ 261.899733][ T6244] option from the mount to silence this warning. [ 261.899733][ T6244] ======================================================= [ 262.277376][ T6244] 9pnet_virtio: no channels available for device syz [ 262.473529][ T6249] netlink: 'syz.1.564': attribute type 2 has an invalid length. [ 262.508348][ T6249] netlink: 52 bytes leftover after parsing attributes in process `syz.1.564'. [ 262.601378][ T6249] device dummy0 left promiscuous mode [ 262.822249][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 263.852212][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 264.131175][ T6262] netlink: 8 bytes leftover after parsing attributes in process `syz.2.568'. [ 264.226052][ T6266] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 264.242391][ T6266] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 264.260274][ T6266] comedi comedi3: 8255: I/O port conflict (0x21,4) [ 264.267200][ T6266] comedi comedi3: 8255: I/O port conflict (0x8,4) [ 264.902259][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 264.997989][ T6271] netlink: 16 bytes leftover after parsing attributes in process `syz.3.573'. [ 265.477644][ T6280] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 265.495094][ T6280] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 265.503463][ T6280] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 265.932472][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 266.403215][ T6282] device wireguard0 entered promiscuous mode [ 266.844121][ T6264] ICMPv6: NA: fd:f9:a6:84:a5:1b advertised our address fe80::aa on syz_tun! [ 266.972319][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 267.002244][ T4352] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 267.224531][ T4352] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 267.248979][ T4352] usb 1-1: config 0 has no interfaces? [ 267.265974][ T4352] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 267.294035][ T4352] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 267.331029][ T4352] usb 1-1: config 0 descriptor?? [ 267.452538][ T5103] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 267.553159][ T4322] usb 1-1: USB disconnect, device number 12 [ 267.682291][ T5103] usb 5-1: Using ep0 maxpacket: 32 [ 267.691239][ T5103] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 267.747112][ T5103] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 267.814419][ T5103] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 267.857947][ T5103] usb 5-1: Product: syz [ 267.884305][ T5103] usb 5-1: Manufacturer: syz [ 267.908298][ T5103] usb 5-1: SerialNumber: syz [ 268.012255][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 268.081204][ T5103] usb 5-1: config 0 descriptor?? [ 268.100472][ T6292] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 268.110345][ T5103] hub 5-1:0.0: bad descriptor, ignoring hub [ 268.136310][ T5103] hub: probe of 5-1:0.0 failed with error -5 [ 269.052277][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 269.391572][ T6313] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 269.486415][ T6313] batman_adv: batadv0: Removing interface: team0 [ 269.589509][ T6313] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 269.597492][ T4322] usb 5-1: USB disconnect, device number 18 [ 269.637602][ T6313] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 269.703962][ T6313] device bridge_slave_0 left promiscuous mode [ 269.754834][ T6313] bridge0: port 1(bridge_slave_0) entered disabled state [ 269.791931][ T6313] device bridge_slave_1 left promiscuous mode [ 269.798762][ T6313] bridge0: port 2(bridge_slave_1) entered disabled state [ 269.831519][ T6313] bond0: (slave bond_slave_0): Releasing backup interface [ 270.092229][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 270.131094][ T6313] bond0: (slave bond_slave_1): Releasing backup interface [ 272.064180][ T6313] team0: Port device team_slave_0 removed [ 272.085810][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 272.387076][ T6313] team0: Port device team_slave_1 removed [ 272.418862][ C1] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 272.429668][ C1] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 272.492872][ T6313] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 272.529589][ T6313] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 272.607566][ C1] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 272.617976][ C1] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 272.628288][ C1] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 272.638517][ C1] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 272.733940][ C1] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 272.744204][ C1] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 272.871162][ T6313] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 272.894384][ T6313] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 272.915807][ C1] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 272.926055][ C1] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 273.077905][ T6313] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready [ 273.159827][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 273.178923][ T6315] team0: Mode changed to "loadbalance" [ 273.224051][ T6316] netlink: 'syz.3.582': attribute type 10 has an invalid length. [ 273.328335][ T6316] 8021q: adding VLAN 0 to HW filter on device bond0 [ 273.354705][ T6316] team0: Port device bond0 added [ 273.508351][ T6319] netlink: 4 bytes leftover after parsing attributes in process `syz.3.582'. [ 274.172292][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 274.307642][ T6319] team0 (unregistering): Port device bond0 removed [ 274.368725][ T6328] netlink: 12 bytes leftover after parsing attributes in process `syz.1.586'. [ 274.383874][ T6328] netlink: 'syz.1.586': attribute type 15 has an invalid length. [ 274.556110][ T6328] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 274.565758][ T6328] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 274.574636][ T6328] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 274.583424][ T6328] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 274.597835][ T6328] device vxlan0 entered promiscuous mode [ 274.633862][ T6342] netlink: 16 bytes leftover after parsing attributes in process `syz.2.592'. [ 275.212196][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 276.850992][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 277.031587][ T6368] 9pnet_virtio: no channels available for device syz [ 277.853340][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 278.892284][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 279.932247][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 280.982292][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 281.210187][ T6386] ICMPv6: NA: fd:f9:a6:84:a5:1b advertised our address fe80::aa on syz_tun! [ 282.012340][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 282.499600][ T6398] netlink: 16 bytes leftover after parsing attributes in process `syz.0.608'. [ 283.020899][ T6409] overlayfs: missing 'lowerdir' [ 283.052324][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 284.102231][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 284.428318][ T6418] netlink: 4 bytes leftover after parsing attributes in process `syz.1.613'. [ 285.132257][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 286.172239][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 286.436299][ T6434] netlink: 52 bytes leftover after parsing attributes in process `syz.3.619'. [ 286.729044][ T26] kauditd_printk_skb: 25 callbacks suppressed [ 286.729061][ T26] audit: type=1326 audit(1756066991.011:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6435 comm="syz.0.620" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fde6178ebe9 code=0x0 [ 287.212261][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 287.896212][ T6442] sctp: failed to load transform for md5: -2 [ 288.252200][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 289.292235][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 289.471244][ T4322] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 289.511201][ T6468] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 289.521909][ T6468] overlayfs: failed to set xattr on upper [ 289.548969][ T6468] overlayfs: ...falling back to index=off,metacopy=off. [ 289.558482][ T6471] overlayfs: missing 'lowerdir' [ 289.949124][ T4322] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 290.020523][ T4322] usb 1-1: config 0 has no interfaces? [ 290.040937][ T4322] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 290.091700][ T4322] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 290.137080][ T4322] usb 1-1: config 0 descriptor?? [ 290.332224][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 290.996291][ T6099] usb 1-1: USB disconnect, device number 13 [ 291.372265][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 292.007949][ T6494] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 292.051789][ T6494] overlayfs: failed to set xattr on upper [ 292.094612][ T6494] overlayfs: ...falling back to index=off,metacopy=off. [ 292.412224][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 292.482294][ T125] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 292.703265][ T125] usb 1-1: Using ep0 maxpacket: 8 [ 292.710227][ T125] usb 1-1: config 0 interface 0 has no altsetting 0 [ 292.736346][ T125] usb 1-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 292.787520][ T125] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 293.026781][ T125] usb 1-1: config 0 descriptor?? [ 293.452243][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 293.472942][ T6508] netlink: 'syz.3.640': attribute type 10 has an invalid length. [ 293.600490][ T125] mcp2221 0003:04D8:00DD.0002: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.0-1/input0 [ 294.274956][ T125] usb 1-1: USB disconnect, device number 14 [ 294.492215][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 295.532322][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 296.572465][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 296.829308][ T125] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 297.092994][ T6531] netlink: 20 bytes leftover after parsing attributes in process `syz.3.649'. [ 297.486618][ T125] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 297.531340][ T125] usb 5-1: config 0 has no interfaces? [ 297.542800][ T125] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 297.565743][ T125] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 297.612374][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 297.618990][ T125] usb 5-1: config 0 descriptor?? [ 297.862811][ T125] usb 5-1: USB disconnect, device number 19 [ 298.652325][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 299.692350][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 299.749601][ T6555] trusted_key: encrypted_key: keylen parameter is missing [ 299.806871][ T6555] netlink: 32 bytes leftover after parsing attributes in process `syz.1.653'. [ 300.732279][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 301.772355][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 302.812348][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 302.864777][ T26] audit: type=1326 audit(1756067007.151:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6574 comm="syz.3.661" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f901718ebe9 code=0x0 [ 302.909731][ T6581] process 'syz.0.671' launched '/dev/fd/8' with NULL argv: empty string added [ 303.696558][ T48] Bluetooth: hci1: unexpected event for opcode 0x0800 [ 303.737605][ T6590] netlink: 28 bytes leftover after parsing attributes in process `syz.4.662'. [ 303.741711][ T6587] sg_write: data in/out 41084/1 bytes for SCSI command 0x1c-- guessing data in; [ 303.741711][ T6587] program syz.2.664 not setting count and/or reply_len properly [ 303.746745][ T6590] netlink: 28 bytes leftover after parsing attributes in process `syz.4.662'. [ 303.852504][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 304.305506][ T6589] netlink: 'syz.0.663': attribute type 1 has an invalid length. [ 304.426205][ T6591] bond1: (slave ip6gretap2): Enslaving as a backup interface with an up link [ 304.437728][ T4396] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 304.438448][ T6593] 8021q: adding VLAN 0 to HW filter on device bond1 [ 304.634780][ T4482] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 304.752784][ T6594] device veth3 entered promiscuous mode [ 304.753150][ T6588] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 304.761905][ T6594] bond1: (slave veth3): Enslaving as a backup interface with a down link [ 304.794004][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 304.892554][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 305.932308][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 306.972284][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 307.772650][ T48] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 307.783163][ T48] Bluetooth: hci1: Injecting HCI hardware error event [ 307.795035][ T4269] Bluetooth: hci1: hardware error 0x00 [ 308.329469][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 309.282533][ T4337] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 309.372439][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 309.494069][ T4337] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 309.529704][ T4337] usb 5-1: config 0 has no interfaces? [ 309.563730][ T4337] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 309.602950][ T4337] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 309.650330][ T4337] usb 5-1: config 0 descriptor?? [ 309.868686][ T4337] usb 5-1: USB disconnect, device number 20 [ 309.942613][ T4269] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 310.412243][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 310.429726][ T6688] netlink: 'syz.2.688': attribute type 2 has an invalid length. [ 310.549259][ T6688] netlink: 52 bytes leftover after parsing attributes in process `syz.2.688'. [ 311.298175][ T6669] sctp: failed to load transform for md5: -2 [ 311.452244][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 312.404934][ T6726] sg_write: data in/out 41084/1 bytes for SCSI command 0x1c-- guessing data in; [ 312.404934][ T6726] program syz.3.695 not setting count and/or reply_len properly [ 312.492258][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 312.962362][ T4324] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 313.164085][ T4324] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 313.192280][ T4324] usb 4-1: config 0 has no interfaces? [ 313.197894][ T4324] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 313.262273][ T4324] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 313.290063][ T4324] usb 4-1: config 0 descriptor?? [ 313.457113][ T6757] sg_write: data in/out 41084/1 bytes for SCSI command 0x1c-- guessing data in; [ 313.457113][ T6757] program syz.2.710 not setting count and/or reply_len properly [ 313.508338][ T4324] usb 4-1: USB disconnect, device number 17 [ 313.532196][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 314.572329][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 314.799098][ T6771] overlayfs: missing 'lowerdir' [ 315.612319][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 315.649763][ T6787] sg_write: data in/out 41084/1 bytes for SCSI command 0x1c-- guessing data in; [ 315.649763][ T6787] program syz.0.723 not setting count and/or reply_len properly [ 316.652248][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 317.364967][ T6802] device wireguard0 entered promiscuous mode [ 317.692652][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 317.696975][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.706433][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.312354][ T4324] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 318.523798][ T4324] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 318.640470][ T4324] usb 5-1: config 0 has no interfaces? [ 318.651849][ T4324] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 318.671227][ T4324] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 318.732303][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 319.293686][ T4324] usb 5-1: config 0 descriptor?? [ 319.796751][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 320.019022][ T4324] usb 5-1: USB disconnect, device number 21 [ 320.796758][ T6829] overlayfs: missing 'lowerdir' [ 320.812308][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 321.644267][ T6834] sg_write: data in/out 41084/1 bytes for SCSI command 0x1c-- guessing data in; [ 321.644267][ T6834] program syz.4.735 not setting count and/or reply_len properly [ 321.852286][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 322.892483][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 323.314253][ T6855] netlink: 24 bytes leftover after parsing attributes in process `syz.3.743'. [ 323.897730][ T4324] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 323.932348][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 323.995289][ T4322] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 324.102270][ T4324] usb 4-1: Using ep0 maxpacket: 8 [ 324.117803][ T4324] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 324.135350][ T4324] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 324.160939][ T4324] usb 4-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 324.184733][ T4322] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 324.206082][ T4324] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 324.222880][ T4322] usb 1-1: config 0 has no interfaces? [ 324.230900][ T4324] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 324.248125][ T4322] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 324.271861][ T4322] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 324.280589][ T4324] usb 4-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 324.322678][ T4322] usb 1-1: config 0 descriptor?? [ 324.331575][ T4324] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 324.367557][ T4324] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 324.396845][ T4324] usb 4-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 324.448041][ T4324] usb 4-1: string descriptor 0 read error: -22 [ 324.465585][ T4324] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 324.488404][ T4324] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 324.537058][ T4324] adutux 4-1:168.0: interrupt endpoints not found [ 324.591494][ T4324] usb 1-1: USB disconnect, device number 15 [ 324.982300][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 325.631138][ T6870] overlayfs: missing 'lowerdir' [ 326.012190][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 326.147174][ T6872] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(10) [ 326.154680][ T6872] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 326.162390][ T6877] netlink: 'syz.0.749': attribute type 2 has an invalid length. [ 326.176406][ T6872] vhci_hcd vhci_hcd.0: Device attached [ 326.221342][ T6878] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(13) [ 326.228115][ T6878] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 326.331362][ T6872] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 326.348943][ T6878] vhci_hcd vhci_hcd.0: Device attached [ 326.442496][ T125] usb 35-1: new low-speed USB device number 2 using vhci_hcd [ 326.462355][ T6881] vhci_hcd vhci_hcd.0: pdev(1) rhport(2) sockfd(12) [ 326.469143][ T6881] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 326.480473][ T6872] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 326.506977][ T6883] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(19) [ 326.513660][ T6883] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 326.530287][ T6883] vhci_hcd vhci_hcd.0: Device attached [ 326.551597][ T6878] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 326.616453][ T6881] vhci_hcd vhci_hcd.0: Device attached [ 326.643301][ T6872] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 326.741836][ T6881] vhci_hcd vhci_hcd.0: pdev(1) rhport(7) sockfd(30) [ 326.748543][ T6881] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 326.883094][ T6881] vhci_hcd vhci_hcd.0: Device attached [ 327.007400][ T4322] usb 4-1: USB disconnect, device number 18 [ 327.062241][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 327.084045][ T6886] vhci_hcd: connection closed [ 327.086258][ T6882] vhci_hcd: connection closed [ 327.091067][ T6879] vhci_hcd: connection closed [ 327.095841][ T6874] vhci_hcd: connection reset by peer [ 327.110623][ T5834] vhci_hcd: stop threads [ 327.124291][ T5834] vhci_hcd: release socket [ 327.172348][ T5834] vhci_hcd: disconnect device [ 327.193214][ T5834] vhci_hcd: stop threads [ 327.210423][ T5834] vhci_hcd: release socket [ 327.230829][ T5834] vhci_hcd: disconnect device [ 327.262397][ T5834] vhci_hcd: stop threads [ 327.275569][ T5834] vhci_hcd: release socket [ 327.286155][ T5834] vhci_hcd: disconnect device [ 327.312701][ T5834] vhci_hcd: stop threads [ 327.317041][ T5834] vhci_hcd: release socket [ 327.332232][ T5834] vhci_hcd: disconnect device [ 327.553353][ T4322] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 327.671970][ T6894] vhci_hcd: connection closed [ 327.675412][ T4363] vhci_hcd: stop threads [ 327.699416][ T4363] vhci_hcd: release socket [ 327.752282][ T4322] usb 4-1: Using ep0 maxpacket: 8 [ 327.759285][ T4322] usb 4-1: config 0 interface 0 has no altsetting 0 [ 327.767321][ T4363] vhci_hcd: disconnect device [ 327.803376][ T4322] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 327.877660][ T4322] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 327.888737][ T6905] netlink: 120 bytes leftover after parsing attributes in process `syz.1.755'. [ 327.928186][ T4322] usb 4-1: config 0 descriptor?? [ 328.092290][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 328.376996][ T4322] mcp2221 0003:04D8:00DD.0003: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.3-1/input0 [ 328.621296][ T4322] usb 4-1: USB disconnect, device number 19 [ 328.656535][ T6905] nvme_fabrics: missing parameter 'transport=%s' [ 328.663594][ T6905] nvme_fabrics: missing parameter 'nqn=%s' [ 329.143751][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 330.172198][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 330.856140][ T6922] netlink: 'syz.3.759': attribute type 4 has an invalid length. [ 330.908010][ T6922] netlink: 'syz.3.759': attribute type 4 has an invalid length. [ 331.026380][ T6927] overlayfs: failed to resolve './file1': -2 [ 331.212244][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 331.646614][ T125] vhci_hcd: vhci_device speed not set [ 332.252181][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 332.390721][ T48] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 332.402378][ T48] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 332.413882][ T48] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 332.421948][ T48] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 332.433456][ T48] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 332.440888][ T48] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 332.897324][ T6946] trusted_key: encrypted_key: insufficient parameters specified [ 333.102739][ T6946] trusted_key: encrypted_key: keylen parameter is missing [ 333.113047][ T6949] [ 333.115455][ T6949] ====================================================== [ 333.122502][ T6949] WARNING: possible circular locking dependency detected [ 333.129559][ T6949] 6.1.148-syzkaller #0 Not tainted [ 333.134684][ T6949] ------------------------------------------------------ [ 333.141714][ T6949] syz.0.768/6949 is trying to acquire lock: [ 333.147610][ T6949] ffff888055141450 ((work_completion)(&new_smc->smc_listen_work)){+.+.}-{0:0}, at: __flush_work+0xd4/0xa60 [ 333.159061][ T6949] [ 333.159061][ T6949] but task is already holding lock: [ 333.166465][ T6949] ffff888055140130 (sk_lock-AF_SMC/1){+.+.}-{0:0}, at: smc_release+0x251/0x530 [ 333.175505][ T6949] [ 333.175505][ T6949] which lock already depends on the new lock. [ 333.175505][ T6949] [ 333.185939][ T6949] [ 333.185939][ T6949] the existing dependency chain (in reverse order) is: [ 333.195088][ T6949] [ 333.195088][ T6949] -> #1 (sk_lock-AF_SMC/1){+.+.}-{0:0}: [ 333.202972][ T6949] lock_sock_nested+0x44/0x100 [ 333.208289][ T6949] smc_listen_out+0x109/0x3d0 [ 333.213507][ T6949] process_one_work+0x898/0x1160 [ 333.219007][ T6949] worker_thread+0xaa2/0x1250 [ 333.224221][ T6949] kthread+0x29d/0x330 [ 333.228907][ T6949] ret_from_fork+0x1f/0x30 [ 333.233980][ T6949] [ 333.233980][ T6949] -> #0 ((work_completion)(&new_smc->smc_listen_work)){+.+.}-{0:0}: [ 333.244147][ T6949] __lock_acquire+0x2cf8/0x7c50 [ 333.249526][ T6949] lock_acquire+0x1b4/0x490 [ 333.254559][ T6949] __flush_work+0xed/0xa60 [ 333.259768][ T6949] __cancel_work_timer+0x3ac/0x520 [ 333.265419][ T6949] smc_clcsock_release+0x5c/0xe0 [ 333.270913][ T6949] __smc_release+0x661/0x7d0 [ 333.276043][ T6949] smc_close_non_accepted+0xd1/0x1f0 [ 333.281862][ T6949] smc_close_active+0xb00/0xea0 [ 333.287281][ T6949] __smc_release+0x8d/0x7d0 [ 333.292256][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 333.292307][ T6949] smc_release+0x2ca/0x530 [ 333.304323][ T6949] sock_close+0xd5/0x240 [ 333.309160][ T6949] __fput+0x22c/0x920 [ 333.313679][ T6949] task_work_run+0x1ca/0x250 [ 333.318799][ T6949] exit_to_user_mode_loop+0xe6/0x110 [ 333.324728][ T6949] exit_to_user_mode_prepare+0xb1/0x140 [ 333.330816][ T6949] syscall_exit_to_user_mode+0x16/0x40 [ 333.336986][ T6949] do_syscall_64+0x58/0xa0 [ 333.341935][ T6949] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 333.348378][ T6949] [ 333.348378][ T6949] other info that might help us debug this: [ 333.348378][ T6949] [ 333.358634][ T6949] Possible unsafe locking scenario: [ 333.358634][ T6949] [ 333.366184][ T6949] CPU0 CPU1 [ 333.371641][ T6949] ---- ---- [ 333.377104][ T6949] lock(sk_lock-AF_SMC/1); [ 333.381712][ T6949] lock((work_completion)(&new_smc->smc_listen_work)); [ 333.391272][ T6949] lock(sk_lock-AF_SMC/1); [ 333.398322][ T6949] lock((work_completion)(&new_smc->smc_listen_work)); [ 333.405297][ T6949] [ 333.405297][ T6949] *** DEADLOCK *** [ 333.405297][ T6949] [ 333.413540][ T6949] 2 locks held by syz.0.768/6949: [ 333.418658][ T6949] #0: ffff8880705eb810 (&sb->s_type->i_mutex_key#10){+.+.}-{3:3}, at: sock_close+0x90/0x240 [ 333.429100][ T6949] #1: ffff888055140130 (sk_lock-AF_SMC/1){+.+.}-{0:0}, at: smc_release+0x251/0x530 [ 333.438621][ T6949] [ 333.438621][ T6949] stack backtrace: [ 333.444607][ T6949] CPU: 0 PID: 6949 Comm: syz.0.768 Not tainted 6.1.148-syzkaller #0 [ 333.452633][ T6949] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 333.462728][ T6949] Call Trace: [ 333.466020][ T6949] [ 333.468956][ T6949] dump_stack_lvl+0x168/0x22e [ 333.473763][ T6949] ? load_image+0x3b0/0x3b0 [ 333.478284][ T6949] ? show_regs_print_info+0x12/0x12 [ 333.483586][ T6949] ? print_circular_bug+0x12b/0x1a0 [ 333.488802][ T6949] check_noncircular+0x274/0x310 [ 333.493931][ T6949] ? add_chain_block+0x940/0x940 [ 333.498883][ T6949] ? lockdep_lock+0xdc/0x1e0 [ 333.503492][ T6949] ? _find_first_zero_bit+0xcf/0x100 [ 333.508796][ T6949] __lock_acquire+0x2cf8/0x7c50 [ 333.513661][ T6949] ? xfd_validate_state+0x69/0x140 [ 333.518782][ T6949] ? hlock_conflict+0x59/0x1f0 [ 333.523581][ T6949] ? verify_lock_unused+0x140/0x140 [ 333.528790][ T6949] ? __bfs+0x2a3/0x5c0 [ 333.532870][ T6949] ? check_path+0x40/0x40 [ 333.537227][ T6949] ? mark_lock+0x94/0x320 [ 333.541576][ T6949] ? __lock_acquire+0x13c0/0x7c50 [ 333.546633][ T6949] ? add_chain_block+0x940/0x940 [ 333.551639][ T6949] lock_acquire+0x1b4/0x490 [ 333.556157][ T6949] ? __flush_work+0xd4/0xa60 [ 333.560771][ T6949] ? __lock_acquire+0x13c0/0x7c50 [ 333.565838][ T6949] ? read_lock_is_recursive+0x10/0x10 [ 333.571288][ T6949] ? verify_lock_unused+0x140/0x140 [ 333.576849][ T6949] ? __flush_work+0xd4/0xa60 [ 333.581458][ T6949] __flush_work+0xed/0xa60 [ 333.585913][ T6949] ? __flush_work+0xd4/0xa60 [ 333.590543][ T6949] ? verify_lock_unused+0x140/0x140 [ 333.595783][ T6949] ? flush_work+0x20/0x20 [ 333.600240][ T6949] ? try_to_grab_pending+0xf1/0x840 [ 333.605485][ T6949] ? lockdep_hardirqs_off+0x70/0x100 [ 333.610812][ T6949] ? mark_lock+0x94/0x320 [ 333.615167][ T6949] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 333.621192][ T6949] ? lock_chain_count+0x20/0x20 [ 333.626071][ T6949] ? __cancel_work_timer+0x331/0x520 [ 333.631384][ T6949] __cancel_work_timer+0x3ac/0x520 [ 333.636624][ T6949] ? cancel_work_sync+0x20/0x20 [ 333.641521][ T6949] ? __smc_release+0x659/0x7d0 [ 333.646395][ T6949] ? __local_bh_enable_ip+0x12a/0x1b0 [ 333.651888][ T6949] ? lockdep_hardirqs_on+0x94/0x140 [ 333.657120][ T6949] ? __local_bh_enable_ip+0x12a/0x1b0 [ 333.662617][ T6949] ? _local_bh_enable+0xa0/0xa0 [ 333.667619][ T6949] smc_clcsock_release+0x5c/0xe0 [ 333.672664][ T6949] __smc_release+0x661/0x7d0 [ 333.677273][ T6949] ? do_raw_spin_unlock+0x11d/0x230 [ 333.682497][ T6949] smc_close_non_accepted+0xd1/0x1f0 [ 333.687861][ T6949] smc_close_active+0xb00/0xea0 [ 333.692723][ T6949] ? sock_no_sendpage_locked+0x160/0x160 [ 333.698475][ T6949] __smc_release+0x8d/0x7d0 [ 333.702984][ T6949] ? do_raw_spin_unlock+0x11d/0x230 [ 333.708202][ T6949] smc_release+0x2ca/0x530 [ 333.712635][ T6949] sock_close+0xd5/0x240 [ 333.717054][ T6949] ? sock_mmap+0x90/0x90 [ 333.721362][ T6949] __fput+0x22c/0x920 [ 333.725632][ T6949] task_work_run+0x1ca/0x250 [ 333.730259][ T6949] ? task_work_cancel+0x230/0x230 [ 333.735312][ T6949] ? __close_range+0x1c5/0x730 [ 333.740114][ T6949] ? exit_to_user_mode_loop+0x3b/0x110 [ 333.745778][ T6949] exit_to_user_mode_loop+0xe6/0x110 [ 333.751229][ T6949] exit_to_user_mode_prepare+0xb1/0x140 [ 333.756810][ T6949] syscall_exit_to_user_mode+0x16/0x40 [ 333.762471][ T6949] do_syscall_64+0x58/0xa0 [ 333.766901][ T6949] ? clear_bhb_loop+0x60/0xb0 [ 333.771593][ T6949] ? clear_bhb_loop+0x60/0xb0 [ 333.776375][ T6949] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 333.782295][ T6949] RIP: 0033:0x7fde6178ebe9 [ 333.786730][ T6949] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 333.806456][ T6949] RSP: 002b:00007fde625da038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 333.814973][ T6949] RAX: 0000000000000000 RBX: 00007fde619b5fa0 RCX: 00007fde6178ebe9 [ 333.822955][ T6949] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000000000005 [ 333.831127][ T6949] RBP: 00007fde61811e19 R08: 0000000000000000 R09: 0000000000000000 [ 333.839115][ T6949] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 333.847268][ T6949] R13: 00007fde619b6038 R14: 00007fde619b5fa0 R15: 00007fffbb7d9f48 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 333.855256][ T6949] [ 334.174737][ T4324] usb usb36-port1: attempt power cycle [ 334.223333][ T6948] netlink: 32 bytes leftover after parsing attributes in process `syz.1.765'. [ 334.240740][ T6800] Set syz1 is full, maxelem 65536 reached [ 334.332198][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 334.492308][ T48] Bluetooth: hci5: command 0x0409 tx timeout [ 334.864814][ T4324] usb usb36-port1: unable to enumerate USB device [ 335.024146][ T4363] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 335.154178][ T4363] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 335.257197][ T4363] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 335.357086][ T4363] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 335.372409][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 336.236387][ T4363] device hsr_slave_0 left promiscuous mode [ 336.244481][ T4363] device hsr_slave_1 left promiscuous mode [ 336.264948][ T4363] device veth1_macvtap left promiscuous mode [ 336.271618][ T4363] device veth0_macvtap left promiscuous mode [ 336.279324][ T4363] device veth1_vlan left promiscuous mode [ 336.286120][ T4363] device veth0_vlan left promiscuous mode [ 336.412175][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 336.865456][ T4363] bond0 (unregistering): Released all slaves [ 337.411490][ T4363] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 337.452243][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 337.488738][ T4363] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 337.560698][ T4363] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 337.608093][ T4363] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 337.700361][ T4363] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 337.711492][ T4363] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 337.746887][ T4363] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 337.757419][ T4363] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 337.809494][ T4363] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 337.820011][ T4363] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 337.886515][ T4363] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 337.897808][ T4363] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.031343][ T4363] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.095242][ T4363] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.155077][ T4363] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.216505][ T4363] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.492225][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 338.571283][ T4363] tipc: Disabling bearer [ 338.577915][ T4363] tipc: Left network mode [ 338.585690][ T4363] tipc: Disabling bearer [ 338.590997][ T4363] tipc: Left network mode [ 338.597910][ T4363] tipc: Left network mode [ 338.819501][ T4363] bond1: (slave ip6gretap2): Removing an active aggregator [ 338.827357][ T4363] bond1: (slave ip6gretap2): Releasing backup interface [ 338.834898][ T4363] bond1: (slave ip6gretap2): the permanent HWaddr of slave - 9e:30:53:87:bd:e7 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 339.723688][ T4363] bond0: (slave wlan1): Releasing backup interface [ 339.731745][ T4363] device wlan1 left promiscuous mode [ 340.269883][ T4363] device hsr_slave_0 left promiscuous mode [ 340.277199][ T4363] device hsr_slave_1 left promiscuous mode [ 340.284189][ T4363] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 340.291744][ T4363] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 340.299764][ T4363] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 340.307496][ T4363] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 340.316563][ T4363] device bridge_slave_1 left promiscuous mode [ 340.322876][ T4363] bridge0: port 2(bridge_slave_1) entered disabled state [ 340.330968][ T4363] device bridge_slave_0 left promiscuous mode [ 340.337424][ T4363] bridge0: port 1(bridge_slave_0) entered disabled state [ 340.346160][ T4363] device bond0 left promiscuous mode [ 340.354313][ T4363] device hsr_slave_0 left promiscuous mode [ 340.360578][ T4363] device hsr_slave_1 left promiscuous mode [ 340.370153][ T4363] device hsr_slave_0 left promiscuous mode [ 340.376570][ T4363] device hsr_slave_1 left promiscuous mode [ 340.383480][ T4363] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 340.390969][ T4363] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 340.398829][ T4363] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 340.406291][ T4363] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 340.414126][ T4363] device bridge_slave_1 left promiscuous mode [ 340.420641][ T4363] bridge0: port 2(bridge_slave_1) entered disabled state [ 340.429079][ T4363] device bridge_slave_0 left promiscuous mode [ 340.435459][ T4363] bridge0: port 1(bridge_slave_0) entered disabled state [ 340.447212][ T4363] device hsr_slave_0 left promiscuous mode [ 340.453995][ T4363] device hsr_slave_1 left promiscuous mode [ 340.465129][ T4363] device veth1_macvtap left promiscuous mode [ 340.471253][ T4363] device veth0_macvtap left promiscuous mode [ 340.477502][ T4363] device veth1_vlan left promiscuous mode [ 340.483391][ T4363] device veth0_vlan left promiscuous mode [ 340.490102][ T4363] device veth1_macvtap left promiscuous mode [ 340.496420][ T4363] device veth0_macvtap left promiscuous mode [ 340.502654][ T4363] device veth1_vlan left promiscuous mode [ 340.508453][ T4363] device veth0_vlan left promiscuous mode [ 340.515560][ T4363] device veth1_macvtap left promiscuous mode [ 340.521651][ T4363] device veth0_macvtap left promiscuous mode [ 340.527911][ T4363] device veth1_vlan left promiscuous mode [ 340.534006][ T4363] device veth0_vlan left promiscuous mode [ 340.803281][ T4363] team0 (unregistering): Port device team_slave_1 removed [ 340.834783][ T4363] team0 (unregistering): Port device team_slave_0 removed [ 341.006806][ T4363] bond2 (unregistering): Released all slaves [ 341.016778][ T4363] bond1 (unregistering): Released all slaves [ 341.597428][ T4363] bond0 (unregistering): Released all slaves [ 341.714331][ T4363] bond1 (unregistering): (slave veth3): Releasing backup interface [ 341.728781][ T4363] bond1 (unregistering): Released all slaves [ 341.882349][ T4363] team0 (unregistering): Port device team_slave_1 removed [ 341.918177][ T4363] team0 (unregistering): Port device team_slave_0 removed [ 341.950660][ T4363] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 341.983071][ T4363] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 342.037646][ T4363] bond0 (unregistering): Released all slaves [ 342.079373][ T4363] bond0 (unregistering): Released all slaves [ 343.077011][ T4363] bond0 (unregistering): Released all slaves