last executing test programs: 8m38.193362935s ago: executing program 1 (id=3358): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x200a4800) recvmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4135, 0x1027}], 0x1}, 0x42) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000a40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a1d010000000000000000020000000900010073797a3000000000080002400000000098"], 0xfc}}, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xffffffffffffffba, &(0x7f0000000080)=[{&(0x7f0000000500)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00b17d10cc40a888a8b96688a882000596aaaa02faf23884372d474d8235b094550aff7f", 0x33fe0}], 0x1}, 0x8000) 8m37.922584109s ago: executing program 1 (id=3360): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xffff, 0xb}, {0xd, 0xb}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0xfffffff9}, @TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5, 0xb, 0x7}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4008000) r4 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r4, 0x0, 0x0, 0x20000000, &(0x7f00000001c0)={0x11, 0x8100, r3, 0x1, 0xd5, 0x6, @broadcast}, 0x14) 8m37.304813102s ago: executing program 1 (id=3366): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x102, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000380)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000340)={0xffffffffffffffff}, 0x111, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000080)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000300), r3, 0x0, 0x1, 0x4}}, 0x20) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000080), 0x62}, {&(0x7f0000000100)="18000000246837f73199aee6fdb9291b120000002d41d227975ad8ec030f5919f397867997f9c0efa9c9092a31cdbb98ea272787afda0af59a320709c3a59ef05c6f40ceafec53f48d6186e7d8409e35306221caf67b370d875eff3191932728e5ab6c9a3acf6ccee3e352c898f5744abaedfb53f92c37acb126bd143f3e9cdfcf25a8d6129fcc3a141c3f5ab6db772f87c787817a9b699dd60732d952716b103bc1e91ac5b1ed92f35389580994bb0df9bce07e7a80921888f984139f488d256a67fec0cbb5c4e93d5c151d97f676ab93b1efbd46f600dc964231e3257bf358448fddf894c0cdfa9115adbe5b19bc912fcbc8aac7719b649b1ff1267491da", 0x682c}, {&(0x7f0000001480)="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", 0x1001}], 0x3) close(r1) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r4) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller0\x00', @multicast}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r5) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x38e72a2a, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x100, 0x7, 0x6341, 0x5, 0xffffffed, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x6}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000006c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70b925, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {}, {0xb, 0xb}, {0x0, 0xd}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x9, 0x7, 0xb, 0x1, 0xfffffffc, 0xffff, 0x5, 0x1, 0x4000}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20018041}, 0xc804) ioctl$SIOCSIFHWADDR(r5, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 8m36.320948596s ago: executing program 1 (id=3370): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x1400c, &(0x7f0000000680)={[{@test_dummy_encryption}, {@init_itable}, {@noload}]}, 0x3, 0x470, &(0x7f0000001240)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3168049, 0x0, 0xfe, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000002180)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000340)=""/207, 0xcf) 8m35.548285013s ago: executing program 1 (id=3374): syz_emit_ethernet(0x3a, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x3d}, @link_local, @val={@void, {0x8100, 0x0, 0x0, 0x1}}, {@ipv6={0x86dd, @generic={0x0, 0x6, "6410a6", 0x0, 0x0, 0x0, @remote, @mcast2}}}}, 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @multicast2}, 0x10) sendmsg$NL80211_CMD_GET_REG(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x20000080}, 0x240008d4) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000000)) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r1, 0x4, 0x0}) dup(0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x54, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth1_macvtap\x00'}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x58, 0x5, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2000}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x20, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'veth1_macvtap\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}]}, @NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}]}], {0x14}}, 0xf4}}, 0x0) r3 = dup(r0) sendto(r0, &(0x7f00000000c0)="2f53d7", 0x3, 0x844, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000480)={'wlan0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r3) writev(r0, &(0x7f00000008c0)=[{&(0x7f0000000240)="7ea4ba8dd0a19ea30e7796da2ba9912a0e6dfc8f00464bf3d9fccd55d0ea65e7c79608794466277721a9761010878a20f562a06e1637fe4c74fe83cade311c8329f688e735ddf6bf6b4e85d982be366863cd8705039aaceafadfc82f12e9494f544bb77a1450c5bdb460031459dcbe637630ddaffc9c49d285f5b759e9c242bf15da4ffb7bece8b5bc9c9f865f301186e44895adb9621df7d09879159ec8c386ca0931c1fc5227aab7b6a07ac09258126b97c1802dd7b79f3e53095f8e6ffae6f7873df39761591f2550ba795677e6eeaf0cfb441928969c98ef493d7c", 0xdd}, {&(0x7f0000000340)="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", 0xfd}, {&(0x7f00000004c0)="416342cf6636bc36d4189858f9fa57b1d50e603354fb06150728c26077fe5d1dfdf403d5b1cc23e374e6a3a9a9edbc74f0ee762fcf9c6560dda8c8111d57b30e4c7c05e75509aa8bf5ec7f6f9578d6a3d750c9b0ffa8389a5502a6c727b89bb48138fcb84e5f73693c49fc0e8e86c15010fd7b7f38a2ff4bb05490fe85099526dad9a4a855aa181be83c729ac0237f539931dadbefb2234ed7a90ae86b492532a8b1f88262c4acc9d464eae6e932b0c882e2a6c8c1ac85338f9b5d7e53cd911a79fe4e03eb0788fc9ea04c6b345f90304913829044ade823abca5c62668153d40883aac2168ac2978873c254cf99c72a6db9b8ca9d", 0xf5}, {&(0x7f00000005c0)="87f9bcf9e52fdc50245114b9614d2aa69bccea662d3070c13dd711fc32832d8dce4d2e3721bc8022bb06cf5c857ba6becba7a283f2d011c9b5be7530ac696b62377d453118a4d4b4fc2ee10d9129bb8bb197221e880445621b47c01f", 0x5c}, {&(0x7f0000000640)="437b3e2afce11c76bf9322f0acc6bac342755fdf92f154f9912b0d89f0930c49c5f2e0bf60d977c78c8bec3cffb969a7136f35c94ddcde66184455d3ceee522a17c3ed3ec9051e5c5cc9456c4507f3a91026df6e3ffab7ed8b345fc2bbdd509713788d0ab34fcad3a488f864571f90b8c391d3d6eb37fc03af3051b25a79f8782e940db7dec0788bc67b25bceac1b888c5d7c24a409fd192fc53467f47f7beb5b0715fd569", 0xa5}, {&(0x7f0000000800)}, {&(0x7f0000000b40)="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", 0xffe}, {&(0x7f0000000440)}], 0x8) 8m34.060871539s ago: executing program 1 (id=3382): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000001c0)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {0x5, 0x0, 0x43}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8}, @IPSET_ATTR_NETMASK={0x5, 0x14, 0x9}]}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x24014000}, 0x4400) 8m33.75419641s ago: executing program 32 (id=3382): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000001c0)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {0x5, 0x0, 0x43}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8}, @IPSET_ATTR_NETMASK={0x5, 0x14, 0x9}]}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x24014000}, 0x4400) 1m17.468107474s ago: executing program 4 (id=4902): ioctl$DRM_IOCTL_VERSION(0xffffffffffffffff, 0xc0406400, &(0x7f00000003c0)={0x8, 0x5, 0x7, 0x0, 0x0, 0x0, 0x0, 0x35, &(0x7f0000000380)=""/53}) 1m17.253815997s ago: executing program 4 (id=4904): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000100)={0x1, "ff0f000000000000f5a72d866b0000000000f0ffdefe00"}) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) socket$inet6_sctp(0xa, 0x1, 0x84) r2 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, &(0x7f0000000100)={0x4, r1}) io_uring_setup(0xee4, &(0x7f00000002c0)={0x0, 0xe, 0x2, 0xffffffff, 0xfffffffe}) socket$nl_route(0x10, 0x3, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x0) open$dir(&(0x7f0000000080)='./file0\x00', 0xc402, 0x80) openat$iommufd(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000009500"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x10, 0x2}) pipe(&(0x7f0000000200)) r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYRES8=r3], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r4, &(0x7f0000000000), 0xd) 1m17.047633006s ago: executing program 4 (id=4906): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000000040000701feffffff00000000047c0000040042801400018006000600800a000008001c", @ANYRES32=r0, @ANYBLOB="040008"], 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) r1 = socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect$hid(0x0, 0x3f, 0x0, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r3 = socket(0x1, 0x803, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="7fff0000000000002800128009000100766c616e000000001800028006000100340200000c0002001f0000001e00", @ANYRES32=r4], 0x50}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSETELEM={0x2c, 0xb, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x74}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r8}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) 1m15.060900137s ago: executing program 4 (id=4912): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x0, &(0x7f00000021c0)='./file0\x00', &(0x7f0000002200), 0x200000, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1a8584c, 0x0) 1m14.745964104s ago: executing program 4 (id=4914): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x36, &(0x7f0000000140)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x17, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x10, 0x0, 0x0, 0x1000}}}}}}, 0x0) 1m14.390069592s ago: executing program 4 (id=4915): r0 = openat$drirender128(0xffffffffffffff9c, 0x0, 0x40, 0x0) ioctl$DRM_IOCTL_VERSION(r0, 0xc0406400, &(0x7f00000003c0)={0x8, 0x5, 0x7, 0x0, 0x0, 0x0, 0x0, 0x35, &(0x7f0000000380)=""/53}) 1m13.727908386s ago: executing program 33 (id=4915): r0 = openat$drirender128(0xffffffffffffff9c, 0x0, 0x40, 0x0) ioctl$DRM_IOCTL_VERSION(r0, 0xc0406400, &(0x7f00000003c0)={0x8, 0x5, 0x7, 0x0, 0x0, 0x0, 0x0, 0x35, &(0x7f0000000380)=""/53}) 11.210835579s ago: executing program 0 (id=5078): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000000c0)={'veth1_virt_wifi\x00', &(0x7f0000000040)=@ethtool_eee={0x44, 0x1, 0x3, 0x400, 0x3, 0x7, 0x15ac, 0xf, [0x4, 0x8]}}) r2 = syz_open_procfs(0x0, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000001c0)='br_fdb_external_learn_add\x00', 0xffffffffffffffff, 0x0, 0xff}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0x8, 0x8, 0x80, 0x8, 0x3, 0x7f, 0x20000006, 0x4d, 0x6, 0x5f, 0xa, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0xff, 0x6, 0x5, 0x4, 0x0, 0x7, 0x3c57, 0x0, 0x24, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x5, 0x7, 0x83, 0x9, 0x4c74, 0x0, 0x242, 0x2, 0xe, 0x0, 0x400, 0x7, 0x17, 0x21, 0x7, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x0, 0x85, 0x6, 0xffff8001, 0x3ff, 0x83, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x0, 0x8004, 0x5, 0xfffffff3, 0x129432e6, 0x88, 0xf9, 0x388000, 0x2bb, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2b, 0xe, 0x312, 0x78, 0xea4, 0x0, 0xfff, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0xff, 0x0, 0x1000ff, 0x5, 0x1000005, 0x5f31, 0xf, 0xd86, 0x2, 0x4, 0x8, 0x4, 0x9, 0x8, 0x9, 0x6, 0x47, 0xbc2, 0x1, 0xfe000000, 0x8, 0x2, 0x200004, 0x9, 0x3, 0x3, 0x9, 0x4, 0x3, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x1, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x3, 0x5, 0x800000, 0x1ef, 0x8, 0x8, 0x86, 0x3, 0x3038, 0xff, 0xb, 0x2, 0x2, 0x2, 0x7, 0x20000008, 0x4, 0x16d01, 0x6, 0x38, 0x800003, 0x600, 0x80, 0xbf7, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x4a9, 0x5, 0x6, 0xac8, 0x5, 0x7, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0x3, 0x5, 0x1b, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x80000000], [0x9, 0xbb33, 0xa, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x3, 0x10000, 0x9, 0x7fff, 0xffff, 0xa620, 0x1, 0x7, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x10000016, 0xffffffff, 0x80000000, 0x5, 0xffffffff, 0xc8, 0x1, 0xfffff000, 0x10000, 0x3, 0x7e, 0x100, 0x9602, 0x7, 0xae, 0x8, 0x6, 0x226, 0x3, 0x100, 0x8, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x8, 0x4, 0x5, 0x40b1e, 0xd7, 0x200, 0xffff3441, 0x4]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) read$eventfd(r2, &(0x7f0000000180), 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x5, [@var={0x4, 0x0, 0x0, 0xe, 0x4}, @func_proto={0x0, 0x0, 0x0, 0xd, 0x4}, @ptr={0x0, 0x0, 0x0, 0x10, 0x4}, @func={0x4, 0x0, 0x0, 0x8, 0x3}]}, {0x0, [0x0, 0x0, 0x0]}}, 0x0, 0x51}, 0x28) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x30, 0x40, 0x107, 0xfffffefe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x14, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}, @typed={0x6, 0xc, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x4, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) 11.205581591s ago: executing program 5 (id=5079): symlinkat(0x0, 0xffffffffffffff9c, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) pivot_root(0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = openat$vimc1(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_TRY_FMT(r2, 0xc0cc5640, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) socket(0x10, 0x3, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000240), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR(r3, 0xc01c64a3, &(0x7f0000000280)={0x3, 0x0, 0x1, 0xffff, 0xa, 0x1ff, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR2(r4, 0xc02464bb, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1, 0x4, 0x0, 0x0, 0xf}, 0x94) r5 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, 0x0) r6 = openat$drirender128(0xffffff9c, &(0x7f0000000300), 0xe0000, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(r6, 0xc01064c5, &(0x7f0000000540)={&(0x7f0000000500)=[0x0], 0x1}) r7 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r7, 0x8923, &(0x7f0000000000)={'bridge_slave_0\x00', 0x1}) socket(0x10, 0x2, 0x0) 10.643103841s ago: executing program 0 (id=5081): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000000040000701feffffff00000000047c0000040042801400018006000600800a000008001c", @ANYRES32=r0, @ANYBLOB="040008"], 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) r1 = socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect$hid(0x0, 0x3f, 0x0, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r3 = socket(0x1, 0x803, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYBLOB="7fff0000000000002800128009000100766c616e000000001800028006000100340200000c0002001f0000001e00000008000500", @ANYRES32=r4], 0x50}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSETELEM={0x2c, 0xb, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x74}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r8}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) 10.256999361s ago: executing program 2 (id=5082): sendmsg$NLBL_MGMT_C_PROTOCOLS(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16, @ANYBLOB="020026bd7000fddbdf25070000000800020004000000140006002001000000000000000000000000000206000b"], 0x6c}, 0x1, 0x0, 0x0, 0x10}, 0x40090) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffb4, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e9"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r2, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x8, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x4}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0xd, 0x0, 0x1, 0x0, 0x0, 0x2000c841}, 0x200000d5) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x40f00, 0x24, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) ioctl$KVM_RUN(r3, 0xae80, 0x0) 9.67118631s ago: executing program 0 (id=5083): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f00000002c0)={0x0, 0x4, 0x10, 0x0, @vifc_lcl_addr=@empty, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) syz_usb_connect(0x5, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', 0xffffffffffffffff, 0x0, 0xffffffffffffffff}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1d, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005100000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000003900000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @lsm=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) 9.600160686s ago: executing program 5 (id=5085): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xe, 0x4, 0x4, 0x1, 0x0, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') read$eventfd(r1, &(0x7f0000000180), 0x8) 9.550832162s ago: executing program 6 (id=5086): bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000880)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000f7ffff230000002400000002000000000000000000000400000003"], 0xffffffffffffffff, 0x3e, 0x0, 0x2}, 0x28) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000780)=@newlink={0x44, 0x10, 0xffffff23, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x15610}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_PROTO={0x5, 0x9, 0x29}]}}}, @IFLA_MTU={0x8, 0x4, 0x6}]}, 0x44}, 0x1, 0x0, 0x0, 0x20040001}, 0x8000) 9.466179853s ago: executing program 5 (id=5087): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$kcm(0x2, 0x3, 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) accept4$alg(r1, 0x0, 0x0, 0x800) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r2 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r2, &(0x7f0000002700)=""/102392, 0x18ff8) r3 = socket(0x200000000000011, 0x4000000000080002, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bind$packet(r3, &(0x7f0000001100)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) r4 = dup2(r3, r3) sendmmsg$unix(r4, &(0x7f0000008380), 0x400000000000174, 0x4008890) io_uring_setup(0x771, &(0x7f0000001fc0)={0x0, 0x2f2, 0x200, 0x0, 0x20003d1}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) epoll_create1(0x0) socket$inet_tcp(0x2, 0x1, 0x0) syz_usb_connect(0x0, 0x24, 0x0, 0x0) socket(0x10, 0x2, 0x0) socket(0x2, 0x5, 0x0) 8.190070951s ago: executing program 2 (id=5088): socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x50880) link(0x0, &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="043e1f0a00c9000201"], 0x22) 8.004239857s ago: executing program 6 (id=5090): syz_usb_connect(0x5, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x6b4, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$get_persistent(0x16, 0xffffffffffffffff, r3) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x15, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x6}, 0x94) keyctl$clear(0x7, r3) 7.140488499s ago: executing program 5 (id=5091): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2, 0x0, 0xa}, 0x10) sendmsg$NFT_BATCH(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0xd0) write$tun(r0, &(0x7f0000000840)=ANY=[@ANYBLOB="08000800060006"], 0xfce) 7.139168549s ago: executing program 2 (id=5092): socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) syz_open_dev$mouse(&(0x7f00000000c0), 0x0, 0x2042) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000001700), 0x0, 0x0) ioctl$SW_SYNC_IOC_INC(r1, 0xc0105702, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) syz_emit_vhci(0x0, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/oops_count', 0x140000, 0x0) read$usbfs(r2, &(0x7f00000001c0)=""/90, 0x5a) ioctl$SG_GET_VERSION_NUM(r2, 0x2282, &(0x7f0000000380)) socket$key(0xf, 0x3, 0x2) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=@setneightbl={0x14, 0x43, 0x1, 0xffff7ffe, 0x0, {0xa}}, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) socket(0x40000000015, 0x5, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r4, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x40080) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0xc0b0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x4, 0x80100008b}, 0x0) mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./bus\x00', 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000480)=ANY=[@ANYBLOB="aaaaaaaaaaaa429e82211cf886dd6a7abd6a00006701fc000000009dbd4c56990380c60000000000000000000000ff02000000000000000000000000000114aa7b13fded831a665742042623f2fdeb23a306ed54a5368422166036c57bb21777d42b7e0afb730ce6611a3bce50367108658868fdd363cfdefa38f547f92fb81af92cc5b0e29dabc4a18b821d5757e9b7be3f49d98120dce3f31fa514c3565979c0bc4431"], 0x0) utime(&(0x7f0000000240)='./bus\x00', &(0x7f0000000340)={0x1, 0x100}) 6.651974417s ago: executing program 2 (id=5093): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000000040000701feffffff00000000047c0000040042801400018006000600800a000008001c", @ANYRES32=r0, @ANYBLOB="040008"], 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) r1 = socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect$hid(0x0, 0x3f, 0x0, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r3 = socket(0x1, 0x803, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYBLOB="7fff0000000000002800128009000100766c616e000000001800028006000100340200000c0002001f0000001e00000008000500", @ANYRES32=r4], 0x50}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSETELEM={0x2c, 0xb, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x74}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r8}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) 6.576280613s ago: executing program 5 (id=5094): socket$netlink(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_generic(0x10, 0x3, 0x10) r3 = getpid() r4 = syz_pidfd_open(r3, 0x0) open_by_handle_at(r4, &(0x7f0000000180)=@OVL_FILEID_V0={0x15, 0xfe, {0x0, 0xfb, 0x15, 0x2, 0x44, "b464e15688d32a5c55332899da424cb5"}}, 0x1) 6.508299583s ago: executing program 0 (id=5095): symlinkat(0x0, 0xffffffffffffff9c, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) pivot_root(0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = openat$vimc1(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_TRY_FMT(r2, 0xc0cc5640, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) socket(0x10, 0x3, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000240), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR(r3, 0xc01c64a3, &(0x7f0000000280)={0x3, 0x0, 0x1, 0xffff, 0xa, 0x1ff, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR2(r4, 0xc02464bb, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1, 0x4, 0x0, 0x0, 0xf}, 0x94) r5 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, 0x0) r6 = openat$drirender128(0xffffff9c, &(0x7f0000000300), 0xe0000, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(r6, 0xc01064c5, &(0x7f0000000540)={&(0x7f0000000500)=[0x0], 0x1}) r7 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r7, 0x8923, &(0x7f0000000000)={'bridge_slave_0\x00', 0x1}) socket(0x10, 0x2, 0x0) 5.041071839s ago: executing program 2 (id=5100): r0 = syz_open_dev$sndctrl(0x0, 0x84, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r0, 0xc0b45545, 0x0) ioctl$TIOCGSERIAL(0xffffffffffffffff, 0x541e, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb2570000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ptrace$ARCH_MAP_VDSO_64(0x1e, r2, 0x2, 0x2003) r5 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_ENCAP(r5, 0x113, 0x1, &(0x7f00000000c0)=0x1, 0x4) ioctl$RTC_PIE_ON(0xffffffffffffffff, 0x7005) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) getsockopt$WPAN_SECURITY(r1, 0x0, 0x1, 0x0, &(0x7f0000000040)) syz_usb_connect(0x3, 0x2d, 0x0, 0x0) 4.903772033s ago: executing program 6 (id=5102): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$kcm(0x2, 0x3, 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) accept4$alg(r1, 0x0, 0x0, 0x800) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r2 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r2, &(0x7f0000002700)=""/102392, 0x18ff8) r3 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'lo\x00', 0x0}) bind$packet(r3, &(0x7f0000001100)={0x11, 0x3, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) r5 = dup2(r3, r3) sendmmsg$unix(r5, &(0x7f0000008380), 0x400000000000174, 0x4008890) io_uring_setup(0x771, &(0x7f0000001fc0)={0x0, 0x2f2, 0x200, 0x0, 0x20003d1}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) epoll_create1(0x0) socket$inet_tcp(0x2, 0x1, 0x0) syz_usb_connect(0x0, 0x24, 0x0, 0x0) socket(0x10, 0x2, 0x0) socket(0x2, 0x5, 0x0) 4.233305034s ago: executing program 3 (id=5103): socket$packet(0x11, 0x3, 0x300) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) syz_emit_ethernet(0x32, &(0x7f0000000000)={@random="e90c610faca2", @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xc}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0xe000, 0x3, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x10, 0x0, @opaque="24dc6170e1e03185"}}}}}, 0x0) syz_emit_ethernet(0x131, &(0x7f0000006340)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x123, 0x0, 0x2, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x10f, 0x0, @opaque="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"}}}}}, 0x0) 3.41013403s ago: executing program 5 (id=5104): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="170000000700000008", @ANYRES32], 0x50) modify_ldt$write(0x1, 0x0, 0x0) r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x2, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) mq_getsetattr(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r3, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000200)=@mmap={0x1, 0x1, 0x4, 0x1, 0x6, {0x77359400}, {0x1, 0x8, 0x5, 0x9, 0x64, 0xe, ' \x00'}, 0xfffffff7, 0x1, {}, 0x2}) 3.396767097s ago: executing program 3 (id=5105): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000100)={0x0, 'batadv0\x00', {0x1}, 0x26}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000007c0)={&(0x7f0000002a80)=ANY=[@ANYBLOB="a26b191d7c00"/17, @ANYRES16=0x0, @ANYBLOB="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"], 0x2150}, 0x1, 0x0, 0x0, 0x4000881}, 0x440c4) r3 = socket$inet(0xa, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f00000002c0)=@mangle={'mangle\x00', 0x44, 0x6, 0x410, 0x2d8, 0x98, 0x2d8, 0x98, 0x138, 0x378, 0x378, 0x378, 0x378, 0x378, 0x6, 0x0, {[{{@ip={@loopback, @multicast1=0xe0007600, 0x0, 0x0, 'gre0\x00', 'ip6gre0\x00', {}, {}, 0x0, 0x0, 0x11}, 0x7a00, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@multicast1, @local, 0x0, 0x0, 'wg1\x00', 'nicvf0\x00', {}, {}, 0x11}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0xb8, 0x100, 0x0, {}, [@common=@unspec=@limit={{0x48}, {0x0, 0x28, 0x0, 0x0, 0x0, 0x1}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private2, 'veth0_virt_wifi\x00', {0x7}}}}, {{@ip={@rand_addr, @private, 0xffffffff, 0xff, 'syzkaller0\x00', 'veth1_to_team\x00', {}, {0xff}}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @empty}}}, {{@ip={@empty, @empty, 0xff000000, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x1fb, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x470) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='xfs\x00', 0x2208004, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x19) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e20, 0x6e, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f00000000c0)={r4, 0x6}, 0x8) mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0), 0x2010042, &(0x7f00000000c0)={[{@subsystem='cpu'}, {@subsystem='memory'}, {@xattr}]}) r5 = epoll_create1(0x80000) r6 = signalfd4(r5, &(0x7f00000000c0)={[0x4]}, 0x8, 0x40800) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r6, &(0x7f0000000180)={0x90000009}) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r6, 0x6, 0x21, &(0x7f0000000280)="b96837d332cb8bc7c7b4a4b4acf00c93", 0x10) mount(0x0, 0x0, 0x0, 0x40078, 0x0) socket$kcm(0x2, 0x2, 0x0) 3.171684077s ago: executing program 0 (id=5106): r0 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x801) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000100)) gettid() timer_create(0x8, 0x0, &(0x7f0000bbdffc)=0x0) timer_settime(r1, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r2, 0x11, 0x67, 0x0, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB, @ANYBLOB="13f7033d81f474c385ec2f6d99834849e9db53d2a6db88451f9a18b84f855de7246ba9cfc0a937310f400533c19daf465f985b220bebbf774ad5a9746782aa58321cf349a906f950ab33675ef0061349dc450fcc20612f19fb83922e4e37d6326ff05106d4da0695edb81f80f650344d16fcd16bca9eac2ef193db107bda8e223037bd79ea7ffdc65c", @ANYRES8=r2, @ANYRES8=r2], 0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socket$netlink(0x10, 0x3, 0x0) getsockopt$TIPC_NODE_RECVQ_DEPTH(0xffffffffffffffff, 0x10f, 0x83, 0x0, &(0x7f0000000480)) r4 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6, 0xfffffefd}, 0x1c) r5 = io_uring_setup(0x279c, &(0x7f0000000300)={0x0, 0xa0e3, 0x8, 0x0, 0x2d8}) io_uring_register$IORING_UNREGISTER_BUFFERS(r5, 0x1, 0x0, 0x0) bind$nfc_llcp(r4, &(0x7f0000000400)={0x27, 0x0, 0x0, 0x3, 0x0, 0x9, "c46e9fd1a84b7fefa0bf2cca6beb9363a680b652a86bcf56a1b9f4e6b54cc6beca5462202c484c10ca5386103a5ccbe47b7b9aa6d8d701a3ba6a6c0ce8b978", 0x1}, 0x60) r6 = dup(r4) sendmsg$NL80211_CMD_SET_PMKSA(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x0) ioctl$NBD_SET_SOCK(r6, 0xab00, 0xffffffffffffffff) sendmmsg$inet6(r2, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) 2.339474262s ago: executing program 3 (id=5107): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x1}]}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c0000000d0a010300000000000000000a0000010900020073797a310000"], 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) recvmsg(r2, &(0x7f0000002240)={0x0, 0x0, 0x0}, 0x0) 2.158201897s ago: executing program 6 (id=5108): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r2 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r2, 0x1, 0x4000000000000002, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000000c0)='sched_switch\x00', r1, 0x0, 0x36}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfec8d000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='net\x00') r7 = fanotify_init(0x20, 0x400) socket$kcm(0x29, 0x2, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000840), 0x0, 0x0, 0x8) readv(r7, &(0x7f00000001c0)=[{0x0}], 0x1) close_range(r6, 0xffffffffffffffff, 0x0) 2.046475967s ago: executing program 3 (id=5109): r0 = openat$comedi(0xffffff9c, 0x0, 0xa400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000140)={'ni_at_a2150\x00', [0xb013, 0x7, 0x4, 0xdd5, 0x88d7, 0x8f, 0x2, 0x8012, 0x1006, 0xffffffff, 0x203, 0x7, 0x10000009, 0x3, 0x7, 0xfffffffd, 0x8, 0x6, 0x9, 0x8e, 0x3, 0x3, 0x7, 0xa, 0x4, 0x1, 0xb0c4, 0x800, 0x4, 0x400002, 0x22]}) 1.197109479s ago: executing program 2 (id=5110): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000000040000701feffffff00000000047c0000040042801400018006000600800a000008001c", @ANYRES32=r0, @ANYBLOB="040008"], 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) r1 = socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect$hid(0x0, 0x3f, 0x0, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r3 = socket(0x1, 0x803, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYRES32=0x0, @ANYBLOB="7fff0000000000002800128009000100766c616e000000001800028006000100340200000c0002001f0000001e00000008000500", @ANYRES32=r4], 0x50}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSETELEM={0x2c, 0xb, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x74}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r8}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) 1.121362987s ago: executing program 6 (id=5111): syz_genetlink_get_family_id$nl802154(&(0x7f0000002600), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x2c, r1, 0x5, 0x4, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_INACTIVITY_TIMEOUT={0x6, 0x96, 0x9}, @NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x2c}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(0x0, r3) sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000000380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4008801}, 0x40000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x2f) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x15, 0x1c, &(0x7f0000000000)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r8}, {}, {0x7, 0x0, 0xb, 0x6, 0x0, 0x0, 0x5}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0x6, 0x9}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x1, 0xa, 0x9, 0x9}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x6, 0x2, 0x0, r7}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 945.185ms ago: executing program 0 (id=5112): syz_usb_connect(0x5, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x6b4, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$get_persistent(0x16, 0xffffffffffffffff, r3) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x15, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x6}, 0x94) keyctl$clear(0x7, r3) 861.02922ms ago: executing program 3 (id=5113): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newtfilter={0x24, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0xb, 0x4}, {}, {0x7, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20041090}, 0x8000) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r9) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r10, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000480)="03", 0x1}], 0x1}, 0x4) 546.042887ms ago: executing program 3 (id=5114): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x18, 0x7, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000e500030000000000060000000000000025000000100000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x101, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x82200, 0x0) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000000)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f00000000c0)=""/60, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000780)={0x1, 0x1, &(0x7f0000000380)=""/240, &(0x7f0000000900)=""/103, &(0x7f0000000800)=""/90}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x1, r1}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000980)=0x1) 0s ago: executing program 6 (id=5115): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb702000008", @ANYBLOB="0000000004000000b705000008000000850000006a000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r0, 0x0, 0xfffffffffffffffd}, 0x18) socket$pppl2tp(0x18, 0x1, 0x1) creat(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180500000000c800000000004b64ffec850000007d000000850000002a00000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r5, 0x0, 0x4000054) kernel console output (not intermixed with test programs): n available UDC or it's busy [ 804.046881][T16848] netdevice_event(NETDEV_UNREGISTER) for ffff888059d1e000 on ffff888033674000 start [ 804.070958][T18733] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 804.086983][T16848] netdevice_event(NETDEV_UNREGISTER) for ffff888059d1e000 on ffff888033674000 end [ 804.103728][T16848] netdevice_event(NETDEV_UNREGISTER) for ffff888059d1e000 on ffff888033674000 start [ 804.120967][T16848] netdevice_event(NETDEV_UNREGISTER) for ffff888059d1e000 on ffff888033674000 end [ 804.137305][T18733] team_slave_0: entered promiscuous mode [ 804.143407][T18733] team_slave_1: entered promiscuous mode [ 804.149774][T18733] vlan2: entered promiscuous mode [ 804.154870][T18733] team0: entered promiscuous mode [ 804.203704][ T6050] netdevice_event(NETDEV_UNREGISTER) for ffff888059d1e000 on ffff888033674000 start [ 804.240287][ T6050] netdevice_event(NETDEV_UNREGISTER) for ffff888059d1e000 on ffff888033674000 end [ 804.341728][T18767] vivid-000: ================= START STATUS ================= [ 804.353118][T18767] vivid-000: Radio HW Seek Mode: Bounded [ 804.362657][T18767] vivid-000: Radio Programmable HW Seek: false [ 804.370111][T18767] vivid-000: RDS Rx I/O Mode: Block I/O [ 804.378691][T18767] vivid-000: Generate RBDS Instead of RDS: false [ 804.385624][T18767] vivid-000: RDS Reception: true [ 804.393061][T18767] vivid-000: RDS Program Type: 0 inactive [ 804.399292][T18767] vivid-000: RDS PS Name: inactive [ 804.408609][T18767] vivid-000: RDS Radio Text: inactive [ 804.414594][T18767] vivid-000: RDS Traffic Announcement: false inactive [ 804.421936][T18767] vivid-000: RDS Traffic Program: false inactive [ 804.428822][T18767] vivid-000: RDS Music: false inactive [ 804.434970][T18767] vivid-000: ================== END STATUS ================== [ 804.454941][ T5971] ipheth 4-1:0.196: Unable to find endpoints [ 804.474323][ T5971] usb 4-1: USB disconnect, device number 15 [ 805.567271][T15677] usb 1-1: USB disconnect, device number 22 [ 806.056498][T18786] xt_hashlimit: max too large, truncated to 1048576 [ 807.643165][T18797] syz.2.4200 (18797): drop_caches: 2 [ 807.656211][T18797] syz.2.4200 (18797): drop_caches: 2 [ 807.876024][T18803] tipc: Started in network mode [ 807.892612][T18803] tipc: Node identity ac1414aa, cluster identity 4711 [ 807.944285][T18803] tipc: New replicast peer: 172.20.20.63 [ 807.970683][T18803] tipc: Enabled bearer , priority 10 [ 808.297045][T18812] vivid-000: ================= START STATUS ================= [ 808.347731][T18812] vivid-000: Radio HW Seek Mode: Bounded [ 808.353465][T18812] vivid-000: Radio Programmable HW Seek: false [ 808.412487][T18812] vivid-000: RDS Rx I/O Mode: Block I/O [ 808.429191][T18812] vivid-000: Generate RBDS Instead of RDS: false [ 808.435801][T18812] vivid-000: RDS Reception: true [ 808.441014][T18812] vivid-000: RDS Program Type: 0 inactive [ 808.447112][T18812] vivid-000: RDS PS Name: inactive [ 808.452795][T18812] vivid-000: RDS Radio Text: inactive [ 808.459148][T18812] vivid-000: RDS Traffic Announcement: false inactive [ 808.467417][T18812] vivid-000: RDS Traffic Program: false inactive [ 808.474093][T18812] vivid-000: RDS Music: false inactive [ 808.480947][T18812] vivid-000: ================== END STATUS ================== [ 808.885699][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.892061][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.013595][T18817] pimreg: entered allmulticast mode [ 809.041897][ T9] tipc: Node number set to 2886997162 [ 809.064860][ T50] bridge_slave_1: left promiscuous mode [ 809.070581][ T50] bridge0: port 2(bridge_slave_1) entered disabled state [ 809.165264][ T50] bridge_slave_0: left allmulticast mode [ 809.196391][ T50] bridge_slave_0: left promiscuous mode [ 809.204869][ T5901] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 809.236336][ T50] bridge0: port 1(bridge_slave_0) entered disabled state [ 809.393883][ T5901] usb 1-1: Using ep0 maxpacket: 8 [ 809.418115][ T5901] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 809.462981][ T5901] usb 1-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 809.508204][ T5901] usb 1-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 809.538325][ T5901] usb 1-1: Product: syz [ 809.555688][ T5901] usb 1-1: Manufacturer: syz [ 809.570722][ T5901] usb 1-1: SerialNumber: syz [ 809.613956][ T9] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 809.744164][ T6050] netdevice_event(NETDEV_UNREGISTER) for ffff888059d1e000 on ffff888033674000 start [ 809.786271][ T6050] netdevice_event(NETDEV_UNREGISTER) for ffff888059d1e000 on ffff888033674000 end [ 809.804256][ T9] usb 3-1: config 0 has an invalid interface number: 182 but max is 1 [ 809.823579][ T50] bond2 (unregistering): (slave ip6gretap1): Releasing active interface [ 809.833033][ T9] usb 3-1: config 0 has no interface number 1 [ 809.839572][ T6050] netdevice_event(NETDEV_UNREGISTER) for ffff888059d1e000 on ffff888033674000 start [ 809.856526][ T5901] usb 1-1: Handspring Visor / Palm OS: No valid connect info available [ 809.887537][ T9] usb 3-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice=9c.af [ 809.897304][ T5901] usb 1-1: Handspring Visor / Palm OS: port 208, is for unknown use [ 809.921804][ T6050] netdevice_event(NETDEV_UNREGISTER) for ffff888059d1e000 on ffff888033674000 end [ 809.943846][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 810.002574][ T9] usb 3-1: config 0 descriptor?? [ 810.003915][ T5901] usb 1-1: Handspring Visor / Palm OS: port 187, is for Console use [ 810.070271][ T5901] usb 1-1: Handspring Visor / Palm OS: Number of ports: 2 [ 810.113489][ T5901] visor 1-1:1.0: Handspring Visor / Palm OS converter detected [ 810.187928][ T5901] usb 1-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 810.247692][ T5901] usb 1-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 811.172879][T18833] xt_hashlimit: max too large, truncated to 1048576 [ 811.973112][ T5901] usb 1-1: USB disconnect, device number 23 [ 812.088011][T15328] netdevice_event(NETDEV_UNREGISTER) for ffff888059d1e000 on ffff888033674000 start [ 812.104900][ T5901] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 812.155040][T15328] netdevice_event(NETDEV_UNREGISTER) for ffff888059d1e000 on ffff888033674000 end [ 812.179141][ T5901] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 812.213406][T15328] netdevice_event(NETDEV_UNREGISTER) for ffff888059d1e000 on ffff888033674000 start [ 812.228133][ T5901] visor 1-1:1.0: device disconnected [ 812.247289][T15328] netdevice_event(NETDEV_UNREGISTER) for ffff888059d1e000 on ffff888033674000 end [ 812.458696][ T6053] netdevice_event(NETDEV_UNREGISTER) for ffff888059d1e000 on ffff888033674000 start [ 812.469067][ T6053] netdevice_event(NETDEV_UNREGISTER) for ffff888059d1e000 on ffff888033674000 end [ 813.523295][ T5894] usb 3-1: USB disconnect, device number 20 [ 813.624010][ T6036] netdevice_event(NETDEV_UNREGISTER) for ffff888059d1e000 on ffff888033674000 start [ 813.670736][ T6036] netdevice_event(NETDEV_UNREGISTER) for ffff888059d1e000 on ffff888033674000 end [ 813.691860][ T6036] netdevice_event(NETDEV_UNREGISTER) for ffff888059d1e000 on ffff888033674000 start [ 813.760687][ T6036] netdevice_event(NETDEV_UNREGISTER) for ffff888059d1e000 on ffff888033674000 end [ 814.111045][T18863] vivid-001: ================= START STATUS ================= [ 814.124677][ T6061] netdevice_event(NETDEV_UNREGISTER) for ffff888059d1e000 on ffff888033674000 start [ 814.135265][T18863] vivid-001: Radio HW Seek Mode: Bounded [ 814.140942][T18863] vivid-001: Radio Programmable HW Seek: false [ 814.153074][ T6061] netdevice_event(NETDEV_UNREGISTER) for ffff888059d1e000 on ffff888033674000 end [ 814.197429][T18863] vivid-001: RDS Rx I/O Mode: Block I/O [ 814.203153][T18863] vivid-001: Generate RBDS Instead of RDS: false [ 814.215641][T15282] netdevice_event(NETDEV_UNREGISTER) for ffff888059d1e000 on ffff888033674000 start [ 814.219814][T18863] vivid-001: RDS Reception: true [ 814.239307][T18863] vivid-001: RDS Program Type: 0 inactive [ 814.247719][T18863] vivid-001: RDS PS Name: inactive [ 814.253344][T18863] vivid-001: RDS Radio Text: inactive [ 814.256690][T15282] netdevice_event(NETDEV_UNREGISTER) for ffff888059d1e000 on ffff888033674000 end [ 814.266331][T18863] vivid-001: RDS Traffic Announcement: false inactive [ 814.275232][T18863] vivid-001: RDS Traffic Program: false inactive [ 814.284147][T18863] vivid-001: RDS Music: false inactive [ 814.325651][T18863] vivid-001: ================== END STATUS ================== [ 814.399418][ T9] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 814.840580][T14002] netdevice_event(NETDEV_UNREGISTER) for ffff888059d1e000 on ffff888033674000 start [ 814.857258][T14002] netdevice_event(NETDEV_UNREGISTER) for ffff888059d1e000 on ffff888033674000 end [ 815.034311][T16848] netdevice_event(NETDEV_UNREGISTER) for ffff888059d1e000 on ffff888033674000 start [ 815.045436][T16848] netdevice_event(NETDEV_UNREGISTER) for ffff888059d1e000 on ffff888033674000 end [ 815.607544][T16848] netdevice_event(NETDEV_UNREGISTER) for ffff888059d1e000 on ffff888033674000 start [ 815.621141][T16848] netdevice_event(NETDEV_UNREGISTER) for ffff888059d1e000 on ffff888033674000 end [ 816.020468][T18878] loop0: detected capacity change from 0 to 32768 [ 816.062454][T18878] (syz.0.4220,18878,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 816.091661][T18878] (syz.0.4220,18878,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 816.191940][T18878] JBD2: Ignoring recovery information on journal [ 816.362599][ T6036] netdevice_event(NETDEV_UNREGISTER) for ffff888059d1e000 on ffff888033674000 start [ 816.392311][T18878] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 816.403545][ T50] $Hÿ (unregistering): (slave bond_slave_0): Releasing backup interface [ 816.483956][T18889] xt_hashlimit: max too large, truncated to 1048576 [ 816.875035][ T6036] netdevice_event(NETDEV_UNREGISTER) for ffff888059d1e000 on ffff888033674000 end [ 816.900205][ T50] bond_slave_0: left promiscuous mode [ 816.936178][ T50] $Hÿ (unregistering): (slave bond_slave_1): Releasing backup interface [ 816.970005][ T50] bond_slave_1: left promiscuous mode [ 817.001760][ T50] $Hÿ (unregistering): (slave dummy0): Releasing backup interface [ 817.173314][ T50] dummy0: left promiscuous mode [ 817.189172][ T50] $Hÿ (unregistering): Released all slaves [ 817.666227][T14425] ocfs2: Unmounting device (7,0) on (node local) [ 817.815117][ T50] bond0 (unregistering): Released all slaves [ 817.821282][ T6061] netdevice_event(NETDEV_UNREGISTER) for ffff888059d1e000 on ffff888033674000 start [ 817.853484][ T6061] netdevice_event(NETDEV_UNREGISTER) for ffff888059d1e000 on ffff888033674000 end [ 818.161262][ T6036] netdevice_event(NETDEV_UNREGISTER) for ffff888059d1e000 on ffff888033674000 start [ 818.162760][ T50] bond1 (unregistering): Released all slaves [ 818.171178][ T6036] netdevice_event(NETDEV_UNREGISTER) for ffff888059d1e000 on ffff888033674000 end [ 818.310335][ T6036] netdevice_event(NETDEV_UNREGISTER) for ffff888059d1e000 on ffff888033674000 start [ 818.311865][ T50] bond2 (unregistering): Released all slaves [ 818.328490][ T5894] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 818.338158][ T6036] netdevice_event(NETDEV_UNREGISTER) for ffff888059d1e000 on ffff888033674000 end [ 818.442016][ T9] usb 4-1: device descriptor read/all, error -71 [ 818.489103][ T5894] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 818.508458][ T50] : left promiscuous mode [ 818.522444][ T5894] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 818.575190][ T5894] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 818.601778][ T6036] netdevice_event(NETDEV_UNREGISTER) for ffff888059d1e000 on ffff888033674000 start [ 818.648883][ T5894] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 818.677864][ T6036] netdevice_event(NETDEV_UNREGISTER) for ffff888059d1e000 on ffff888033674000 end [ 818.695811][T18907] pimreg: entered allmulticast mode [ 818.704079][ T5894] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 818.726953][ T50] tipc: Left network mode [ 818.738603][ T6036] netdevice_event(NETDEV_UNREGISTER) for ffff888059d1e000 on ffff888033674000 start [ 818.738935][ T5894] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 818.757841][ T6036] netdevice_event(NETDEV_UNREGISTER) for ffff888059d1e000 on ffff888033674000 end [ 818.780543][ T5894] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 818.788740][ T5894] usb 1-1: Product: syz [ 818.792911][ T5894] usb 1-1: Manufacturer: syz [ 818.814912][ T5894] cdc_wdm 1-1:1.0: skipping garbage [ 818.820276][ T5894] cdc_wdm 1-1:1.0: skipping garbage [ 818.906952][ T5894] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 818.912894][ T5894] cdc_wdm 1-1:1.0: Unknown control protocol [ 818.923864][ T5901] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 819.236016][ T9] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 819.677785][T15282] netdevice_event(NETDEV_UNREGISTER) for ffff888059d1e000 on ffff888033674000 start [ 819.702642][T15282] netdevice_event(NETDEV_UNREGISTER) for ffff888059d1e000 on ffff888033674000 end [ 819.704901][ T5971] usb 1-1: USB disconnect, device number 24 [ 819.712353][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 819.724645][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 819.730738][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 819.740864][T18901] cdc_wdm 1-1:1.0: Tx URB error: -19 [ 819.756096][ T9] usb 4-1: device descriptor read/64, error -71 [ 819.781894][ T5901] usb 5-1: config 0 has an invalid interface number: 182 but max is 1 [ 819.794203][ T1000] netdevice_event(NETDEV_UNREGISTER) for ffff888059d1e000 on ffff888033674000 start [ 819.798340][ T5901] usb 5-1: config 0 has no interface number 1 [ 819.812184][ T5901] usb 5-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice=9c.af [ 819.812835][ T1000] netdevice_event(NETDEV_UNREGISTER) for ffff888059d1e000 on ffff888033674000 end [ 819.833107][ T5901] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 819.858756][ T5901] usb 5-1: config 0 descriptor?? [ 819.935888][ T9] usb usb4-port1: attempt power cycle [ 820.040433][ T4243] netdevice_event(NETDEV_UNREGISTER) for ffff888059d1e000 on ffff888033674000 start [ 820.064230][ T4243] netdevice_event(NETDEV_UNREGISTER) for ffff888059d1e000 on ffff888033674000 end [ 820.461835][ T9] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 820.696480][ T9] usb 4-1: device descriptor read/8, error -71 [ 820.984388][ T9] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 821.015264][T18921] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4232'. [ 821.046176][ T9] usb 4-1: device descriptor read/8, error -71 [ 821.158089][ T50] hsr_slave_0: left promiscuous mode [ 821.165056][ T9] usb usb4-port1: unable to enumerate USB device [ 821.177167][ T50] hsr_slave_1: left promiscuous mode [ 821.198302][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 821.206694][ T50] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 821.215105][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 821.222804][ T50] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 821.239651][ T50] veth1_macvtap: left promiscuous mode [ 821.246150][ T50] veth0_macvtap: left promiscuous mode [ 821.252207][ T50] veth1_vlan: left promiscuous mode [ 821.258008][ T50] veth0_vlan: left promiscuous mode [ 821.453537][ T6053] netdevice_event(NETDEV_UNREGISTER) for ffff888059d1e000 on ffff888033674000 start [ 821.478793][ T6053] netdevice_event(NETDEV_UNREGISTER) for ffff888059d1e000 on ffff888033674000 end [ 821.493483][ T1000] netdevice_event(NETDEV_UNREGISTER) for ffff888059d1e000 on ffff888033674000 start [ 821.517863][ T1000] netdevice_event(NETDEV_UNREGISTER) for ffff888059d1e000 on ffff888033674000 end [ 821.576841][ T1000] netdevice_event(NETDEV_UNREGISTER) for ffff888059d1e000 on ffff888033674000 start [ 821.604541][ T1000] netdevice_event(NETDEV_UNREGISTER) for ffff888059d1e000 on ffff888033674000 end [ 821.752171][ T6053] netdevice_event(NETDEV_UNREGISTER) for ffff888059d1e000 on ffff888033674000 start [ 821.767838][ T6053] netdevice_event(NETDEV_UNREGISTER) for ffff888059d1e000 on ffff888033674000 end [ 821.791208][ T6061] netdevice_event(NETDEV_UNREGISTER) for ffff888059d1e000 on ffff888033674000 start [ 821.936381][ T6516] usb 5-1: USB disconnect, device number 12 [ 821.944035][ T6061] netdevice_event(NETDEV_UNREGISTER) for ffff888059d1e000 on ffff888033674000 end [ 821.960041][ T6061] netdevice_event(NETDEV_UNREGISTER) for ffff888059d1e000 on ffff888033674000 start [ 821.996321][ T6061] netdevice_event(NETDEV_UNREGISTER) for ffff888059d1e000 on ffff888033674000 end [ 822.065030][ T6061] netdevice_event(NETDEV_UNREGISTER) for ffff888059d1e000 on ffff888033674000 start [ 822.088960][ T6061] netdevice_event(NETDEV_UNREGISTER) for ffff888059d1e000 on ffff888033674000 end [ 822.164943][ T6061] netdevice_event(NETDEV_UNREGISTER) for ffff888059d1e000 on ffff888033674000 start [ 822.180355][ T6061] netdevice_event(NETDEV_UNREGISTER) for ffff888059d1e000 on ffff888033674000 end [ 822.234649][ T6061] netdevice_event(NETDEV_UNREGISTER) for ffff888059d1e000 on ffff888033674000 start [ 822.263805][ T6061] netdevice_event(NETDEV_UNREGISTER) for ffff888059d1e000 on ffff888033674000 end [ 822.294044][ T6061] netdevice_event(NETDEV_UNREGISTER) for ffff888059d1e000 on ffff888033674000 start [ 822.305854][ T6061] netdevice_event(NETDEV_UNREGISTER) for ffff888059d1e000 on ffff888033674000 end [ 822.322930][ T6061] netdevice_event(NETDEV_UNREGISTER) for ffff888059d1e000 on ffff888033674000 start [ 822.344307][ T6061] netdevice_event(NETDEV_UNREGISTER) for ffff888059d1e000 on ffff888033674000 end [ 822.368276][ T6061] netdevice_event(NETDEV_UNREGISTER) for ffff888059d1e000 on ffff888033674000 start [ 822.392031][ T6061] netdevice_event(NETDEV_UNREGISTER) for ffff888059d1e000 on ffff888033674000 end [ 822.427256][ T6061] netdevice_event(NETDEV_UNREGISTER) for ffff888059d1e000 on ffff888033674000 start [ 822.437190][ T6061] netdevice_event(NETDEV_UNREGISTER) for ffff888059d1e000 on ffff888033674000 end [ 822.466740][ T6061] netdevice_event(NETDEV_UNREGISTER) for ffff888059d1e000 on ffff888033674000 start [ 822.495552][ T6061] netdevice_event(NETDEV_UNREGISTER) for ffff888059d1e000 on ffff888033674000 end [ 822.532549][ T6061] netdevice_event(NETDEV_UNREGISTER) for ffff888059d1e000 on ffff888033674000 start [ 822.561468][ T6061] netdevice_event(NETDEV_UNREGISTER) for ffff888059d1e000 on ffff888033674000 end [ 822.577886][ T6061] netdevice_event(NETDEV_UNREGISTER) for ffff888059d1e000 on ffff888033674000 start [ 822.603933][ T6061] netdevice_event(NETDEV_UNREGISTER) for ffff888059d1e000 on ffff888033674000 end [ 822.630387][ T6061] netdevice_event(NETDEV_UNREGISTER) for ffff888059d1e000 on ffff888033674000 start [ 822.642289][ T6061] netdevice_event(NETDEV_UNREGISTER) for ffff888059d1e000 on ffff888033674000 end [ 822.665397][ T6061] netdevice_event(NETDEV_UNREGISTER) for ffff888059d1e000 on ffff888033674000 start [ 822.687909][ T6061] netdevice_event(NETDEV_UNREGISTER) for ffff888059d1e000 on ffff888033674000 end [ 822.769608][ T6061] netdevice_event(NETDEV_UNREGISTER) for ffff888059d1e000 on ffff888033674000 start [ 822.794291][ T6061] netdevice_event(NETDEV_UNREGISTER) for ffff888059d1e000 on ffff888033674000 end [ 822.806473][T18949] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4241'. [ 822.818178][T18949] openvswitch: netlink: Message has 8 unknown bytes. [ 822.848285][T16848] netdevice_event(NETDEV_UNREGISTER) for ffff888059d1e000 on ffff888033674000 start [ 822.896183][T16848] netdevice_event(NETDEV_UNREGISTER) for ffff888059d1e000 on ffff888033674000 end [ 822.928284][ T30] audit: type=1800 audit(1765361657.133:1848): pid=18937 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.4237" name="bus" dev="ramfs" ino=47764 res=0 errno=0 [ 822.997841][ T1000] netdevice_event(NETDEV_UNREGISTER) for ffff888059d1e000 on ffff888033674000 start [ 823.025974][T18950] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4241'. [ 823.046599][ T1000] netdevice_event(NETDEV_UNREGISTER) for ffff888059d1e000 on ffff888033674000 end [ 823.108137][ T1000] netdevice_event(NETDEV_UNREGISTER) for ffff888059d1e000 on ffff888033674000 start [ 823.161296][ T1000] netdevice_event(NETDEV_UNREGISTER) for ffff888059d1e000 on ffff888033674000 end [ 823.206115][T15487] netdevice_event(NETDEV_UNREGISTER) for ffff888059d1e000 on ffff888033674000 start [ 823.221858][T15487] netdevice_event(NETDEV_UNREGISTER) for ffff888059d1e000 on ffff888033674000 end [ 823.245288][T15487] netdevice_event(NETDEV_UNREGISTER) for ffff888059d1e000 on ffff888033674000 start [ 823.259221][ T50] team0 (unregistering): Port device team_slave_1 removed [ 823.267374][T18931] loop3: detected capacity change from 0 to 32768 [ 823.274031][T15487] netdevice_event(NETDEV_UNREGISTER) for ffff888059d1e000 on ffff888033674000 end [ 823.295751][T18931] (syz.3.4234,18931,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 823.334277][T18931] (syz.3.4234,18931,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 823.372543][T15487] netdevice_event(NETDEV_UNREGISTER) for ffff888059d1e000 on ffff888033674000 start [ 823.397799][T15487] netdevice_event(NETDEV_UNREGISTER) for ffff888059d1e000 on ffff888033674000 end [ 823.420974][T18957] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4243'. [ 823.430577][T18931] JBD2: Ignoring recovery information on journal [ 823.440447][ T4243] netdevice_event(NETDEV_UNREGISTER) for ffff888059d1e000 on ffff888033674000 start [ 823.452020][ T50] team0 (unregistering): Port device team_slave_0 removed [ 823.468614][ T4243] netdevice_event(NETDEV_UNREGISTER) for ffff888059d1e000 on ffff888033674000 end [ 823.486828][T14002] netdevice_event(NETDEV_UNREGISTER) on ffff888033674000 start [ 823.493466][T18931] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 823.520893][T14002] smc: removing ib device !yz! [ 823.780669][T14018] ocfs2: Unmounting device (7,3) on (node local) [ 824.253908][T18646] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 824.286254][T18965] fuse: Invalid rootmode [ 824.414558][T18646] usb 4-1: device descriptor read/64, error -71 [ 824.692143][T18969] loop4: detected capacity change from 0 to 32768 [ 824.700647][T18969] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.4247 (18969) [ 824.719461][T18969] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 824.729777][T18969] BTRFS info (device loop4): using sha256 (sha256-lib) checksum algorithm [ 824.795377][T18646] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 824.934271][T18969] BTRFS info (device loop4): enabling ssd optimizations [ 824.943920][T18969] BTRFS info (device loop4): turning on async discard [ 824.953871][T18969] BTRFS info (device loop4): enabling free space tree [ 824.962386][T18646] usb 4-1: device descriptor read/64, error -71 [ 825.092996][T15307] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 825.115978][T18646] usb usb4-port1: attempt power cycle [ 825.484065][T18646] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 825.525912][T18646] usb 4-1: device descriptor read/8, error -71 [ 825.824062][T18646] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 825.864551][T18646] usb 4-1: device descriptor read/8, error -71 [ 825.993886][ T5894] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 825.994889][T18646] usb usb4-port1: unable to enumerate USB device [ 826.183871][ T5894] usb 5-1: Using ep0 maxpacket: 8 [ 826.192988][ T5894] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 826.213832][ T5894] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 827.007087][ T5894] pvrusb2: Hardware description: Terratec Grabster AV400 [ 827.014250][ T5894] pvrusb2: ********** [ 827.023608][ T5894] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 827.034134][ T5894] pvrusb2: Important functionality might not be entirely working. [ 827.041958][ T5894] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 827.053364][ T5894] pvrusb2: ********** [ 827.175875][ T2345] pvrusb2: Invalid write control endpoint [ 827.193457][ T30] audit: type=1800 audit(1765361661.393:1849): pid=19003 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.4252" name="bus" dev="ramfs" ino=47891 res=0 errno=0 [ 827.351258][T19013] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4256'. [ 827.505943][ T2345] pvrusb2: Invalid write control endpoint [ 827.511993][ T2345] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 827.559322][ T2345] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 827.727358][T19017] loop3: detected capacity change from 0 to 32768 [ 827.746385][ T2345] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 827.757676][T19017] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.4259 (19017) [ 827.801284][ T2345] pvrusb2: Device being rendered inoperable [ 827.813831][T19017] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 827.825040][T19017] BTRFS info (device loop3): using sha256 (sha256-lib) checksum algorithm [ 827.852724][T19019] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4258'. [ 827.864095][ T2345] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 827.871598][ T2345] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 827.907851][T19019] openvswitch: netlink: Message has 8 unknown bytes. [ 827.922305][ T2345] pvrusb2: Attached sub-driver cx25840 [ 827.929620][ T2345] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 827.940433][ T2345] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 827.978073][ T5836] usb 5-1: USB disconnect, device number 13 [ 828.036523][T19019] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4258'. [ 828.103934][T19017] BTRFS info (device loop3): enabling ssd optimizations [ 828.110989][T19017] BTRFS info (device loop3): turning on async discard [ 828.118137][T19017] BTRFS info (device loop3): enabling free space tree [ 828.994648][T14002] netdevice_event(NETDEV_UNREGISTER) on ffff888033674000 end [ 829.044373][T14018] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 829.318078][T19044] tipc: Enabling of bearer rejected, already enabled [ 829.481665][T19053] loop4: detected capacity change from 0 to 256 [ 829.506041][T19053] vfat: Unknown parameter 'uni_xl1' [ 830.639259][ T50] IPVS: stop unused estimator thread 0... [ 830.648245][T19066] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4268'. [ 831.041188][T19074] loop4: detected capacity change from 0 to 32768 [ 831.049235][T19074] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.4271 (19074) [ 831.064681][T19074] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 831.075081][T19074] BTRFS info (device loop4): using sha256 (sha256-lib) checksum algorithm [ 831.086205][ T24] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 831.276246][T19074] BTRFS info (device loop4): enabling ssd optimizations [ 831.283274][T19074] BTRFS info (device loop4): turning on async discard [ 831.290135][T19074] BTRFS info (device loop4): enabling free space tree [ 831.333858][ T24] usb 4-1: Using ep0 maxpacket: 8 [ 831.365046][T15307] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 831.380578][ T24] usb 4-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 831.419155][ T24] usb 4-1: config 6 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 831.463817][ T24] usb 4-1: config 6 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 831.512045][ T24] usb 4-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 831.562761][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 831.613504][ T24] usb 4-1: Product: syz [ 831.618519][T19100] sysfs: cannot create duplicate filename '/class/ieee80211/1ùà^!‚lü1Ü*ø$pOcÚÉ”ÎÜr$åG—•µt:‹uÂ' [ 831.632234][T19100] CPU: 0 UID: 0 PID: 19100 Comm: syz.0.4276 Tainted: G L syzkaller #0 PREEMPT(full) [ 831.632263][T19100] Tainted: [L]=SOFTLOCKUP [ 831.632269][T19100] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 831.632281][T19100] Call Trace: [ 831.632288][T19100] [ 831.632296][T19100] dump_stack_lvl+0x189/0x250 [ 831.632326][T19100] ? __pfx_dump_stack_lvl+0x10/0x10 [ 831.632346][T19100] ? __pfx__printk+0x10/0x10 [ 831.632376][T19100] ? kernfs_path_from_node+0x2f/0x290 [ 831.632394][T19100] ? kernfs_path_from_node+0x250/0x290 [ 831.632411][T19100] ? kernfs_path_from_node+0x2f/0x290 [ 831.632431][T19100] sysfs_warn_dup+0x8e/0xa0 [ 831.632449][T19100] sysfs_do_create_link_sd+0xc0/0x110 [ 831.632471][T19100] device_add_class_symlinks+0x1cf/0x240 [ 831.632498][T19100] device_add+0x475/0xb80 [ 831.632526][T19100] wiphy_register+0x1d2e/0x2d20 [ 831.632562][T19100] ? __pfx_wiphy_register+0x10/0x10 [ 831.632583][T19100] ? minstrel_ht_alloc+0x6e0/0x7e0 [ 831.632633][T19100] ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0 [ 831.632664][T19100] ieee80211_register_hw+0x34a7/0x4110 [ 831.632694][T19100] ? ieee80211_register_hw+0x13f1/0x4110 [ 831.632725][T19100] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 831.632741][T19100] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 831.632772][T19100] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 831.632796][T19100] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 831.632828][T19100] ? __hrtimer_setup+0x181/0x200 [ 831.632849][T19100] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 831.632870][T19100] mac80211_hwsim_new_radio+0x2f76/0x5320 [ 831.632933][T19100] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 831.632956][T19100] ? __kmalloc_node_track_caller_noprof+0x594/0x820 [ 831.632977][T19100] ? kstrndup+0xbf/0x160 [ 831.633008][T19100] hwsim_new_radio_nl+0xf5b/0x1bd0 [ 831.633039][T19100] ? __pfx___nla_validate_parse+0x10/0x10 [ 831.633080][T19100] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 831.633110][T19100] ? rcu_is_watching+0x15/0xb0 [ 831.633136][T19100] ? __nla_parse+0x40/0x60 [ 831.633155][T19100] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 831.633188][T19100] genl_family_rcv_msg_doit+0x215/0x300 [ 831.633220][T19100] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 831.633257][T19100] ? bpf_lsm_capable+0x9/0x20 [ 831.633277][T19100] ? security_capable+0x7e/0x2e0 [ 831.633301][T19100] genl_rcv_msg+0x60e/0x790 [ 831.633332][T19100] ? __pfx_genl_rcv_msg+0x10/0x10 [ 831.633354][T19100] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 831.633393][T19100] netlink_rcv_skb+0x208/0x470 [ 831.633414][T19100] ? __pfx_genl_rcv_msg+0x10/0x10 [ 831.633439][T19100] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 831.633479][T19100] ? down_read+0x274/0x2e0 [ 831.633495][T19100] ? genl_rcv+0xd/0x40 [ 831.633520][T19100] genl_rcv+0x28/0x40 [ 831.633540][T19100] netlink_unicast+0x82f/0x9e0 [ 831.633567][T19100] ? __pfx_netlink_unicast+0x10/0x10 [ 831.633587][T19100] ? netlink_sendmsg+0x642/0xb30 [ 831.633605][T19100] ? skb_put+0x11b/0x210 [ 831.633626][T19100] netlink_sendmsg+0x805/0xb30 [ 831.633644][T19100] ? aa_sk_perm+0x15f/0x920 [ 831.633670][T19100] ? __pfx_netlink_sendmsg+0x10/0x10 [ 831.633693][T19100] ? tomoyo_socket_sendmsg_permission+0x1e1/0x300 [ 831.633723][T19100] ? __pfx_netlink_sendmsg+0x10/0x10 [ 831.633740][T19100] sock_sendmsg_nosec+0x18f/0x1d0 [ 831.633762][T19100] ____sys_sendmsg+0x577/0x880 [ 831.633786][T19100] ? __pfx_____sys_sendmsg+0x10/0x10 [ 831.633814][T19100] ? import_iovec+0x74/0xa0 [ 831.633836][T19100] ___sys_sendmsg+0x21f/0x2a0 [ 831.633855][T19100] ? __pfx____sys_sendmsg+0x10/0x10 [ 831.633877][T19100] ? futex_wake+0x4b2/0x560 [ 831.633931][T19100] ? __fget_files+0x2a/0x420 [ 831.633953][T19100] ? __fget_files+0x3a0/0x420 [ 831.633983][T19100] __x64_sys_sendmsg+0x19b/0x260 [ 831.634003][T19100] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 831.634035][T19100] ? do_syscall_64+0xbe/0xf80 [ 831.634053][T19100] do_syscall_64+0xfa/0xf80 [ 831.634069][T19100] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 831.634085][T19100] ? clear_bhb_loop+0x60/0xb0 [ 831.634106][T19100] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 831.634121][T19100] RIP: 0033:0x7f756238f749 [ 831.634137][T19100] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 831.634151][T19100] RSP: 002b:00007f7563159038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 831.634168][T19100] RAX: ffffffffffffffda RBX: 00007f75625e6180 RCX: 00007f756238f749 [ 831.634181][T19100] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000007 [ 831.634192][T19100] RBP: 00007f7562413f91 R08: 0000000000000000 R09: 0000000000000000 [ 831.634202][T19100] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 831.634211][T19100] R13: 00007f75625e6218 R14: 00007f75625e6180 R15: 00007ffe009e2be8 [ 831.634241][T19100] [ 832.113969][ T24] usb 4-1: Manufacturer: syz [ 832.118698][ T24] usb 4-1: SerialNumber: syz [ 832.540827][ T24] hso 4-1:6.0: Can't find BULK IN endpoint [ 832.561556][ T30] audit: type=1800 audit(1765361666.763:1850): pid=19075 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.4270" name="bus" dev="ramfs" ino=48686 res=0 errno=0 [ 832.652437][T19105] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4277'. [ 832.701756][T19105] openvswitch: netlink: Port 262144 exceeds max allowable 65535 [ 832.708417][ T24] usb 4-1: USB disconnect, device number 24 [ 832.801052][T19106] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4277'. [ 833.347685][T19117] loop3: detected capacity change from 0 to 256 [ 833.360598][T19117] vfat: Unknown parameter 'uni_xl1' [ 833.927670][T19132] vivid-000: ================= START STATUS ================= [ 833.945443][T19132] vivid-000: Radio HW Seek Mode: Bounded [ 833.953203][T19132] vivid-000: Radio Programmable HW Seek: false [ 834.041416][T19136] No control pipe specified [ 834.932613][T19132] vivid-000: RDS Rx I/O Mode: Block I/O [ 834.940183][T19132] vivid-000: Generate RBDS Instead of RDS: false [ 834.946633][T19132] vivid-000: RDS Reception: true [ 834.951700][T19132] vivid-000: RDS Program Type: 0 inactive [ 834.957626][T19132] vivid-000: RDS PS Name: inactive [ 834.967325][T19132] vivid-000: RDS Radio Text: inactive [ 834.972829][T19132] vivid-000: RDS Traffic Announcement: false inactive [ 835.213813][T19132] vivid-000: RDS Traffic Program: false inactive [ 835.220247][T19132] vivid-000: RDS Music: false inactive [ 835.550872][T19132] vivid-000: ================== END STATUS ================== [ 835.788047][T19149] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4293'. [ 835.883196][T19154] debugfs: '1ùà^!‚lü1Ü*ø$pOcÚÉ”ÎÜr$åG—•µt:‹uÂ' already exists in 'ieee80211' [ 837.377210][T19174] loop0: detected capacity change from 0 to 256 [ 837.394805][T19174] vfat: Unknown parameter 'uni_xl1' [ 837.677040][T19180] tipc: Enabling of bearer rejected, already enabled [ 838.386001][ T5971] usb 3-1: new full-speed USB device number 21 using dummy_hcd [ 838.549036][ T5971] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 838.581996][ T5971] usb 3-1: config 0 interface 0 has no altsetting 0 [ 838.784602][ T5971] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 839.553282][ T5971] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 839.589412][ T5971] usb 3-1: Product: syz [ 839.593589][ T5971] usb 3-1: Manufacturer: syz [ 839.638830][ T5971] usb 3-1: SerialNumber: syz [ 839.665620][ T5971] usb 3-1: config 0 descriptor?? [ 839.683456][ T5971] usb 3-1: selecting invalid altsetting 0 [ 840.880966][T19215] debugfs: '1ùà^!‚lü1Ü*ø$pOcÚÉ”ÎÜr$åG—•µt:‹uÂ' already exists in 'ieee80211' [ 842.350806][ T5950] usb 3-1: USB disconnect, device number 21 [ 842.697699][T19244] kvm: pic: level sensitive irq not supported [ 842.697998][T19244] kvm: pic: single mode not supported [ 843.714057][T18646] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 843.905689][T18646] usb 5-1: config 0 has an invalid interface number: 182 but max is 1 [ 843.933818][T18646] usb 5-1: config 0 has no interface number 1 [ 843.950428][T18646] usb 5-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice=9c.af [ 843.984955][T18646] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 844.012079][T18646] usb 5-1: config 0 descriptor?? [ 847.683358][ T5901] usb 5-1: USB disconnect, device number 14 [ 849.040656][T19315] kthread_run failed with err -4 [ 849.942263][T19328] vivid-001: ================= START STATUS ================= [ 849.983421][T19328] vivid-001: Radio HW Seek Mode: Bounded [ 850.002461][T19328] vivid-001: Radio Programmable HW Seek: false [ 850.029174][T19328] vivid-001: RDS Rx I/O Mode: Block I/O [ 850.065409][T19328] vivid-001: Generate RBDS Instead of RDS: false [ 850.294380][T19328] vivid-001: RDS Reception: true [ 850.563768][T19328] vivid-001: RDS Program Type: 0 inactive [ 850.591287][T19328] vivid-001: RDS PS Name: inactive [ 850.620079][T19328] vivid-001: RDS Radio Text: inactive [ 850.639436][T19328] vivid-001: RDS Traffic Announcement: false inactive [ 850.663119][T19328] vivid-001: RDS Traffic Program: false inactive [ 850.694030][T19328] vivid-001: RDS Music: false inactive [ 850.701669][T19328] vivid-001: ================== END STATUS ================== [ 850.890283][T19339] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4352'. [ 851.404912][T19343] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4352'. [ 851.415249][T19339] openvswitch: netlink: Key type 796 is out of range max 32 [ 853.043193][T19359] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4357'. [ 854.589424][T19378] vivid-000: ================= START STATUS ================= [ 854.658895][T19378] vivid-000: Radio HW Seek Mode: Bounded [ 854.696724][T19378] vivid-000: Radio Programmable HW Seek: false [ 855.507351][T19378] vivid-000: RDS Rx I/O Mode: Block I/O [ 855.535094][T19378] vivid-000: Generate RBDS Instead of RDS: false [ 855.541656][T19378] vivid-000: RDS Reception: true [ 855.552087][T19378] vivid-000: RDS Program Type: 0 inactive [ 855.561440][T19378] vivid-000: RDS PS Name: inactive [ 855.573271][T19378] vivid-000: RDS Radio Text: inactive [ 855.640735][T19378] vivid-000: RDS Traffic Announcement: false inactive [ 855.648275][T19378] vivid-000: RDS Traffic Program: false inactive [ 856.108435][T19378] vivid-000: RDS Music: false inactive [ 856.140260][T19378] vivid-000: ================== END STATUS ================== [ 857.503464][T19417] comedi comedi3: comedi_config --init_data is deprecated [ 857.591970][T19414] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4370'. [ 859.463882][T19429] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 859.473228][T19429] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 859.483558][T19429] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 861.969775][T19450] xt_hashlimit: max too large, truncated to 1048576 [ 863.022192][T19466] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4383'. [ 863.558116][ T9] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 863.753970][ T9] usb 6-1: Using ep0 maxpacket: 8 [ 863.770209][ T9] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 863.809071][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 863.902731][ T9] pvrusb2: Hardware description: Terratec Grabster AV400 [ 864.333981][ T5821] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 864.508614][ T5821] usb 4-1: Using ep0 maxpacket: 8 [ 864.575198][ T5821] usb 4-1: config index 0 descriptor too short (expected 30, got 18) [ 864.676402][ T5821] usb 4-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 864.727478][ T5821] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 864.765863][ T5821] usb 4-1: Product: syz [ 864.786503][ T5821] usb 4-1: Manufacturer: syz [ 864.812562][ T5821] usb 4-1: SerialNumber: syz [ 864.851074][ T5821] usb 4-1: config 0 descriptor?? [ 864.882202][ T5821] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 864.902111][ T5821] usb 4-1: setting power ON [ 864.919145][ T5821] dvb-usb: bulk message failed: -22 (2/0) [ 865.016892][ T5821] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 865.058313][ T5821] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 865.121435][ T5821] usb 4-1: media controller created [ 865.489686][ T5821] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 865.494665][ T9] pvrusb2: ********** [ 865.524665][ T9] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 865.544026][ T9] pvrusb2: Important functionality might not be entirely working. [ 865.552307][ T9] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 865.565497][ T9] pvrusb2: ********** [ 865.612849][ T2345] pvrusb2: Invalid write control endpoint [ 865.701788][ T5821] usb 4-1: selecting invalid altsetting 6 [ 865.855592][ T5821] usb 4-1: digital interface selection failed (-22) [ 865.864416][ T5821] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 865.864671][ T9] usb 6-1: USB disconnect, device number 8 [ 865.894227][ T5821] usb 4-1: setting power OFF [ 865.926921][ T5821] dvb-usb: bulk message failed: -22 (2/0) [ 865.952282][ T5821] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 865.967495][ T2345] pvrusb2: Invalid write control endpoint [ 865.973260][ T2345] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 865.995693][ T5821] (NULL device *): no alternate interface [ 866.021477][ T2345] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 866.036426][ T2345] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 866.054973][ T2345] pvrusb2: Device being rendered inoperable [ 866.062723][ T5821] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 866.078679][ T5821] usb 4-1: USB disconnect, device number 25 [ 866.108455][ T2345] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 866.132830][ T2345] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b) [ 866.159056][ T2345] pvrusb2: Attached sub-driver cx25840 [ 866.167265][ T2345] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 866.177711][ T2345] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 868.883217][T19521] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4397'. [ 870.037467][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.043875][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 872.785642][T19559] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4409'. [ 872.926801][T19550] tipc: Enabling of bearer rejected, already enabled [ 875.667878][T19597] tipc: Resetting bearer [ 875.710650][T19597] comedi comedi3: comedi_config --init_data is deprecated [ 875.731671][T19596] tipc: Resetting bearer [ 876.776423][T16848] tipc: Resetting bearer [ 876.983199][T19609] tipc: Enabling of bearer rejected, already enabled [ 877.046922][T19611] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4424'. [ 877.645253][ T794] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 877.817158][ T794] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 877.850811][ T794] usb 4-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 877.877715][ T794] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 877.905052][ T794] usb 4-1: config 0 descriptor?? [ 878.326008][ T794] lenovo 0003:17EF:6047.0004: item fetching failed at offset 3/5 [ 878.345765][ T794] lenovo 0003:17EF:6047.0004: hid_parse failed [ 878.352055][ T794] lenovo 0003:17EF:6047.0004: probe with driver lenovo failed with error -22 [ 879.692382][T19653] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4437'. [ 880.696179][T16562] usb 4-1: USB disconnect, device number 26 [ 881.103931][T19666] netlink: 'syz.2.4441': attribute type 29 has an invalid length. [ 881.111889][T19666] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4441'. [ 881.568997][T19666] netlink: 'syz.2.4441': attribute type 2 has an invalid length. [ 884.225476][T19708] netlink: 32 bytes leftover after parsing attributes in process `syz.5.4452'. [ 884.575169][ T794] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 884.776710][ T794] usb 5-1: config 0 has an invalid interface number: 249 but max is 0 [ 884.816831][ T794] usb 5-1: config 0 has no interface number 0 [ 884.827200][ T794] usb 5-1: config 0 interface 249 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0 [ 884.829100][T19718] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4454'. [ 884.865717][T19718] openvswitch: netlink: Key type 796 is out of range max 32 [ 884.891134][ T794] usb 5-1: config 0 interface 249 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 0 [ 884.970949][ T794] usb 5-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=be.87 [ 885.056468][ T794] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 885.081720][T19720] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4454'. [ 885.429287][ T794] usb 5-1: config 0 descriptor?? [ 885.497713][ T794] port100 5-1:0.249: NFC: Could not find bulk-in or bulk-out endpoint [ 886.344906][T19737] tipc: Enabling of bearer rejected, failed to enable media [ 886.385141][T19737] syzkaller0: entered promiscuous mode [ 886.399604][T19737] syzkaller0: entered allmulticast mode [ 886.455175][ T5971] usb 5-1: USB disconnect, device number 15 [ 893.271442][T19828] netlink: 'syz.3.4485': attribute type 29 has an invalid length. [ 893.281468][T19828] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4485'. [ 893.803979][ T24] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 893.878717][T19828] netlink: 'syz.3.4485': attribute type 2 has an invalid length. [ 894.003780][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 894.024018][ T24] usb 3-1: config 0 has an invalid interface number: 196 but max is 0 [ 894.060735][ T24] usb 3-1: config 0 has no interface number 0 [ 894.099276][ T24] usb 3-1: config 0 interface 196 has no altsetting 0 [ 894.248023][ T24] usb 3-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 894.257167][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 894.265310][ T24] usb 3-1: Product: syz [ 894.269598][ T24] usb 3-1: Manufacturer: syz [ 894.274484][ T24] usb 3-1: SerialNumber: syz [ 894.899738][ T24] usb 3-1: config 0 descriptor?? [ 895.074616][T19828] : entered promiscuous mode [ 895.533104][T19824] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 895.575033][T19824] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 895.708179][T19824] team_slave_0: entered promiscuous mode [ 895.714290][T19824] team_slave_1: entered promiscuous mode [ 895.801338][T19824] vlan2: entered promiscuous mode [ 895.963696][T19824] team0: entered promiscuous mode [ 896.361025][ T24] ipheth 3-1:0.196: Unable to find endpoints [ 896.404750][ T24] usb 3-1: USB disconnect, device number 22 [ 897.099555][T19856] md: could not open device unknown-block(0,0). [ 897.147938][T19856] md: md_import_device returned -6 [ 898.084230][ T9] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 898.313046][ T9] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 898.335441][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 898.336722][T19884] pimreg: entered allmulticast mode [ 898.367826][ T9] usb 1-1: config 0 descriptor?? [ 898.506017][ T9] cp210x 1-1:0.0: cp210x converter detected [ 898.766593][ T9] cp210x 1-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 898.787167][ T9] cp210x 1-1:0.0: querying part number failed [ 898.819178][ T9] usb 1-1: cp210x converter now attached to ttyUSB0 [ 898.856518][ T9] usb 1-1: USB disconnect, device number 25 [ 898.920189][ T9] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 898.936807][ T9] cp210x 1-1:0.0: device disconnected [ 898.972082][T19890] vivid-000: ================= START STATUS ================= [ 898.993632][T19890] vivid-000: Radio HW Seek Mode: Bounded [ 899.023755][T19890] vivid-000: Radio Programmable HW Seek: false [ 899.040600][T19890] vivid-000: RDS Rx I/O Mode: Block I/O [ 899.046902][T19890] vivid-000: Generate RBDS Instead of RDS: false [ 899.053656][T19890] vivid-000: RDS Reception: true [ 899.058815][T19890] vivid-000: RDS Program Type: 0 inactive [ 899.064978][T19890] vivid-000: RDS PS Name: inactive [ 899.070741][T19890] vivid-000: RDS Radio Text: inactive [ 899.076862][T19890] vivid-000: RDS Traffic Announcement: false inactive [ 899.083881][T19890] vivid-000: RDS Traffic Program: false inactive [ 899.090543][T19890] vivid-000: RDS Music: false inactive [ 899.096434][T19890] vivid-000: ================== END STATUS ================== [ 899.666364][ T30] audit: type=1804 audit(1765361733.873:1851): pid=19896 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.4508" name="/newroot/223/bus/file0" dev="overlay" ino=1174 res=1 errno=0 [ 899.986686][T19906] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4509'. [ 900.109035][T19908] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4509'. [ 900.185149][T19908] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 900.206048][T19908] gretap1: entered promiscuous mode [ 900.211467][T19908] gretap1: entered allmulticast mode [ 902.350985][T19919] loop4: detected capacity change from 0 to 256 [ 902.371482][T19919] vfat: Unknown parameter 'uni_xl1' [ 902.676634][T19926] netlink: 'syz.5.4516': attribute type 1 has an invalid length. [ 902.805771][T19926] 8021q: adding VLAN 0 to HW filter on device bond1 [ 902.874052][T19926] netlink: 'syz.5.4516': attribute type 10 has an invalid length. [ 902.916358][T19926] netlink: 40 bytes leftover after parsing attributes in process `syz.5.4516'. [ 902.969124][T19930] bond1: (slave veth15): Enslaving as an active interface with a down link [ 903.017985][T19931] bond1: (slave dummy0): making interface the new active one [ 903.035874][T19931] dummy0: entered promiscuous mode [ 903.045703][T19935] vivid-004: ================= START STATUS ================= [ 903.059772][T19931] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 903.068961][T19935] vivid-004: Radio HW Seek Mode: Bounded [ 903.079075][T19935] vivid-004: Radio Programmable HW Seek: false [ 903.092353][T19935] vivid-004: RDS Rx I/O Mode: Block I/O [ 903.102493][T19935] vivid-004: Generate RBDS Instead of RDS: false [ 903.109959][T19935] vivid-004: RDS Reception: true [ 903.115416][T19935] vivid-004: RDS Program Type: 0 inactive [ 903.121438][T19935] vivid-004: RDS PS Name: inactive [ 903.146413][T19935] vivid-004: RDS Radio Text: inactive [ 903.163234][T19935] vivid-004: RDS Traffic Announcement: false inactive [ 903.170599][T19935] vivid-004: RDS Traffic Program: false inactive [ 903.177529][T19935] vivid-004: RDS Music: false inactive [ 903.183323][T19935] vivid-004: ================== END STATUS ================== [ 903.554691][T19926] bond1: (slave dummy0): Releasing active interface [ 903.672286][ T30] audit: type=1804 audit(1765361737.873:1852): pid=19940 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.4521" name="/newroot/226/bus/file0" dev="overlay" ino=1198 res=1 errno=0 [ 903.788202][T19945] pimreg: entered allmulticast mode [ 907.642628][T19971] loop4: detected capacity change from 0 to 256 [ 907.676983][T19971] vfat: Unknown parameter 'uni_xl1' [ 907.784301][ T5821] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 907.965214][ T5821] usb 6-1: config 0 has an invalid interface number: 182 but max is 1 [ 907.973429][ T5821] usb 6-1: config 0 has no interface number 1 [ 908.170706][ T5821] usb 6-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice=9c.af [ 908.179956][ T5821] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 908.983910][ T5821] usb 6-1: config 0 descriptor?? [ 911.284620][ T5887] usb 6-1: USB disconnect, device number 9 [ 912.167615][T20005] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 912.292526][T20005] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 912.454938][T18626] udevd[18626]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.182/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 912.483197][T20005] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 915.744960][ T24] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 916.004091][T20047] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048) [ 916.546283][ T24] usb 4-1: config 0 has an invalid interface number: 182 but max is 1 [ 916.633912][ T24] usb 4-1: config 0 has no interface number 1 [ 916.775870][ T24] usb 4-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice=9c.af [ 916.874495][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 917.122950][ T24] usb 4-1: config 0 descriptor?? [ 918.839600][ T24] usb 4-1: USB disconnect, device number 27 [ 919.727811][T20065] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 919.736774][T20065] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 919.746223][T20065] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 924.713325][ T9307] IPVS: starting estimator thread 0... [ 924.855189][T20118] IPVS: using max 27 ests per chain, 64800 per kthread [ 927.038937][T20139] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4580'. [ 931.478330][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.484783][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.763780][ T5880] usb 3-1: new full-speed USB device number 23 using dummy_hcd [ 932.774241][ T5880] usb 3-1: no configurations [ 932.784590][ T5880] usb 3-1: can't read configurations, error -22 [ 932.954366][ T5880] usb 3-1: new full-speed USB device number 24 using dummy_hcd [ 933.296513][ T5880] usb 3-1: no configurations [ 933.301159][ T5880] usb 3-1: can't read configurations, error -22 [ 933.314814][ T5880] usb usb3-port1: attempt power cycle [ 934.130580][ T5880] usb 3-1: new full-speed USB device number 25 using dummy_hcd [ 934.155102][ T5880] usb 3-1: no configurations [ 934.164488][ T5880] usb 3-1: can't read configurations, error -22 [ 934.324130][ T5880] usb 3-1: new full-speed USB device number 26 using dummy_hcd [ 935.148823][ T5880] usb 3-1: device descriptor read/8, error -71 [ 935.324098][ T5880] usb usb3-port1: unable to enumerate USB device [ 936.279509][T20213] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4596'. [ 937.421935][T20226] syz.5.4609 (20226): drop_caches: 2 [ 937.600440][T20226] syz.5.4609 (20226): drop_caches: 2 [ 938.653835][ T5880] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 938.943884][ T5880] usb 5-1: Using ep0 maxpacket: 8 [ 938.951182][ T5880] usb 5-1: no configurations [ 938.961645][ T5880] usb 5-1: can't read configurations, error -22 [ 939.033825][ T5901] usb 3-1: new full-speed USB device number 27 using dummy_hcd [ 939.564511][ T5880] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 939.763883][ T5880] usb 5-1: Using ep0 maxpacket: 8 [ 939.813575][ T5880] usb 5-1: no configurations [ 939.864799][ T5880] usb 5-1: can't read configurations, error -22 [ 939.871327][ T5901] usb 3-1: no configurations [ 939.962570][ T5901] usb 3-1: can't read configurations, error -22 [ 939.983910][ T5880] usb usb5-port1: attempt power cycle [ 940.211837][T20250] comedi comedi3: comedi_config --init_data is deprecated [ 941.172595][ T5901] usb 3-1: new full-speed USB device number 28 using dummy_hcd [ 941.213939][ T5880] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 941.764111][ T5880] usb 5-1: device descriptor read/8, error -71 [ 941.849409][ T5901] usb 3-1: device descriptor read/all, error -71 [ 941.885672][ T5901] usb usb3-port1: attempt power cycle [ 941.971080][T20263] tipc: Resetting bearer [ 944.003896][T20279] digital: digital_start_poll: Unknown protocol [ 946.807487][T16562] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 946.902525][ C1] raw-gadget.0 gadget.5: ignoring, device is not running [ 947.379757][ T52] Bluetooth: hci4: unexpected event for opcode 0x0c7b [ 947.483855][T16562] usb 6-1: device descriptor read/64, error -32 [ 947.746536][T16562] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 947.957072][T20323] syzkaller0: entered promiscuous mode [ 947.965439][T16562] usb 6-1: Using ep0 maxpacket: 8 [ 947.971071][T20323] syzkaller0: entered allmulticast mode [ 947.987183][T16562] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 947.997512][T16562] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 948.044718][T16562] pvrusb2: Hardware description: Terratec Grabster AV400 [ 948.209559][T16562] pvrusb2: ********** [ 948.213623][T16562] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 948.777979][T16562] pvrusb2: Important functionality might not be entirely working. [ 948.900116][T16562] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 948.918234][T16562] pvrusb2: ********** [ 948.978452][ T2345] pvrusb2: Invalid write control endpoint [ 949.215147][ T2345] pvrusb2: Invalid write control endpoint [ 949.253299][ T2345] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 949.317498][ T2345] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 949.368399][ T2345] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 949.443718][ T2345] pvrusb2: Device being rendered inoperable [ 949.478311][ T2345] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 949.511069][T20345] input: syz1 as /devices/virtual/input/input7 [ 949.542699][ T2345] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b) [ 949.618075][ T2345] pvrusb2: Attached sub-driver cx25840 [ 949.658267][ T2345] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 949.721661][ T2345] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 952.328530][ T52] Bluetooth: hci4: unexpected event for opcode 0x0c7b [ 953.754228][T18646] usb 6-1: USB disconnect, device number 11 [ 954.123539][T20370] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048) [ 954.200434][T20372] netlink: 'syz.5.4643': attribute type 1 has an invalid length. [ 954.270336][T20372] 8021q: adding VLAN 0 to HW filter on device bond2 [ 954.297943][T20374] dummy0: left promiscuous mode [ 954.508812][T20372] bond2 (unregistering): Released all slaves [ 954.721944][T20380] syzkaller0: entered promiscuous mode [ 954.733776][T20380] syzkaller0: entered allmulticast mode [ 954.764157][ T52] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 955.726713][T20393] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4650'. [ 955.737197][T20393] openvswitch: netlink: Key type 796 is out of range max 32 [ 955.907715][T20397] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4650'. [ 956.873321][T20407] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048) [ 956.934951][ T5880] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 957.103774][ T5880] usb 4-1: Using ep0 maxpacket: 8 [ 957.156013][ T5880] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 957.254983][ T5880] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 957.668554][ T5880] pvrusb2: Hardware description: Terratec Grabster AV400 [ 957.773102][ T5880] pvrusb2: ********** [ 957.848842][ T5880] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 957.911096][ T5880] pvrusb2: Important functionality might not be entirely working. [ 957.987916][ T5880] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 958.016682][ T5880] pvrusb2: ********** [ 958.024679][ T2345] pvrusb2: Invalid write control endpoint [ 958.141542][T20422] input: syz1 as /devices/virtual/input/input8 [ 958.164276][T20420] lo: entered allmulticast mode [ 958.222502][ T2345] pvrusb2: Invalid write control endpoint [ 958.240291][ T2345] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 958.263445][ T2345] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 958.291758][ T2345] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 958.317151][ T2345] pvrusb2: Device being rendered inoperable [ 958.330863][ T2345] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 958.348526][ T2345] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b) [ 958.381029][ T2345] pvrusb2: Attached sub-driver cx25840 [ 958.392224][ T2345] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 958.415492][ T2345] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 959.056152][ T52] Bluetooth: hci3: Invalid handle: 0x20c9 > 0x0eff [ 960.337147][T20447] evm: overlay not supported [ 960.985032][ T9] usb 4-1: USB disconnect, device number 28 [ 961.163014][T20455] netlink: 'syz.3.4669': attribute type 29 has an invalid length. [ 961.188838][T20455] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4669'. [ 961.205330][T20456] netlink: 48 bytes leftover after parsing attributes in process `syz.4.4668'. [ 961.228072][T20455] netlink: 'syz.3.4669': attribute type 2 has an invalid length. [ 961.345797][T20460] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4668'. [ 962.077280][T20466] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4671'. [ 962.227316][T20472] comedi comedi3: comedi_config --init_data is deprecated [ 963.809837][T20489] lo speed is unknown, defaulting to 1000 [ 963.968173][T20489] lo speed is unknown, defaulting to 1000 [ 964.842084][T20503] netlink: 'syz.4.4682': attribute type 29 has an invalid length. [ 964.850913][T20503] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4682'. [ 964.932479][T20504] netlink: 'syz.4.4682': attribute type 2 has an invalid length. [ 965.396123][T20511] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4685'. [ 965.405375][T20511] openvswitch: netlink: Key type 796 is out of range max 32 [ 965.435977][T20511] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4685'. [ 965.471328][T20515] comedi comedi3: comedi_config --init_data is deprecated [ 965.861317][T20516] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4685'. [ 965.973176][T20504] : entered promiscuous mode [ 967.655969][ T30] audit: type=1800 audit(1765361801.853:1853): pid=20546 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.4694" name="bus" dev="overlay" ino=1945 res=0 errno=0 [ 968.438833][T20549] comedi comedi3: comedi_config --init_data is deprecated [ 968.496108][T20553] netlink: 'syz.2.4698': attribute type 1 has an invalid length. [ 969.124667][T20573] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4704'. [ 969.157924][T20573] openvswitch: netlink: Key type 796 is out of range max 32 [ 969.192916][T20573] netlink: 48 bytes leftover after parsing attributes in process `syz.4.4704'. [ 969.292417][T20574] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4704'. [ 969.607895][T20582] lo speed is unknown, defaulting to 1000 [ 969.828045][T20582] lo speed is unknown, defaulting to 1000 [ 972.304633][T20612] netlink: 'syz.0.4712': attribute type 29 has an invalid length. [ 972.316488][T20612] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4712'. [ 972.439254][T20612] netlink: 'syz.0.4712': attribute type 2 has an invalid length. [ 974.967378][T20647] tipc: Resetting bearer [ 974.988794][T20651] comedi comedi3: comedi_config --init_data is deprecated [ 975.465458][T20645] tipc: Resetting bearer [ 976.243238][ T6036] tipc: Resetting bearer [ 977.194116][ T5887] usb 6-1: new full-speed USB device number 12 using dummy_hcd [ 977.535677][ T5887] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 977.576713][T20695] ubi: mtd0 is already attached to ubi31 [ 977.585412][ T5887] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 977.594930][T20693] comedi comedi3: comedi_config --init_data is deprecated [ 978.073601][ T5887] usb 6-1: New USB device found, idVendor=077d, idProduct=0410, bcdDevice=ec.c1 [ 978.103821][ T5887] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 978.123158][ T5887] usb 6-1: Product: syz [ 978.133787][ T5887] usb 6-1: Manufacturer: syz [ 978.163420][ T5887] usb 6-1: SerialNumber: syz [ 978.190744][ T5887] usb 6-1: config 0 descriptor?? [ 978.451039][ T5887] usb 6-1: USB disconnect, device number 12 [ 979.247348][T18646] usb 4-1: new full-speed USB device number 29 using dummy_hcd [ 980.266628][T18646] usb 4-1: config 8 has an invalid interface number: 223 but max is 0 [ 980.275832][T18646] usb 4-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 980.286911][T18646] usb 4-1: config 8 has no interface number 0 [ 980.293083][T18646] usb 4-1: config 8 interface 223 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 980.544155][T18646] usb 4-1: config 8 interface 223 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 980.560045][T18646] usb 4-1: New USB device found, idVendor=a6da, idProduct=7458, bcdDevice=2d.4d [ 980.572264][T18646] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 980.580560][T18646] usb 4-1: Product: syz [ 980.594185][T20736] sysfs: cannot create duplicate filename '/class/ieee80211/1ùà^!‚lü1Ü*ø$pOcÚÉ”ÎÜr$åG—•µt:‹uÂ' [ 980.611975][T18646] usb 4-1: Manufacturer: syz [ 980.626378][T18646] usb 4-1: SerialNumber: syz [ 980.657253][T20736] CPU: 0 UID: 0 PID: 20736 Comm: syz.5.4750 Tainted: G L syzkaller #0 PREEMPT(full) [ 980.657279][T20736] Tainted: [L]=SOFTLOCKUP [ 980.657283][T20736] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 980.657294][T20736] Call Trace: [ 980.657300][T20736] [ 980.657308][T20736] dump_stack_lvl+0x189/0x250 [ 980.657341][T20736] ? __pfx_dump_stack_lvl+0x10/0x10 [ 980.657359][T20736] ? __pfx__printk+0x10/0x10 [ 980.657383][T20736] ? kernfs_path_from_node+0x2f/0x290 [ 980.657397][T20736] ? kernfs_path_from_node+0x250/0x290 [ 980.657410][T20736] ? kernfs_path_from_node+0x2f/0x290 [ 980.657428][T20736] sysfs_warn_dup+0x8e/0xa0 [ 980.657443][T20736] sysfs_do_create_link_sd+0xc0/0x110 [ 980.657459][T20736] device_add_class_symlinks+0x1cf/0x240 [ 980.657481][T20736] device_add+0x475/0xb80 [ 980.657501][T20736] wiphy_register+0x1d2e/0x2d20 [ 980.657534][T20736] ? __pfx_wiphy_register+0x10/0x10 [ 980.657552][T20736] ? minstrel_ht_alloc+0x6e0/0x7e0 [ 980.657574][T20736] ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0 [ 980.657598][T20736] ieee80211_register_hw+0x34a7/0x4110 [ 980.657624][T20736] ? ieee80211_register_hw+0x13f1/0x4110 [ 980.657645][T20736] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 980.657658][T20736] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 980.657681][T20736] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 980.657699][T20736] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 980.657723][T20736] ? __hrtimer_setup+0x181/0x200 [ 980.657739][T20736] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 980.657755][T20736] mac80211_hwsim_new_radio+0x2f76/0x5320 [ 980.657798][T20736] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 980.657814][T20736] ? __kmalloc_node_track_caller_noprof+0x594/0x820 [ 980.657831][T20736] ? kstrndup+0xbf/0x160 [ 980.657855][T20736] hwsim_new_radio_nl+0xf5b/0x1bd0 [ 980.657879][T20736] ? __pfx___nla_validate_parse+0x10/0x10 [ 980.657910][T20736] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 980.657933][T20736] ? rcu_is_watching+0x15/0xb0 [ 980.657952][T20736] ? __nla_parse+0x40/0x60 [ 980.657967][T20736] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 980.657993][T20736] genl_family_rcv_msg_doit+0x215/0x300 [ 980.658016][T20736] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 980.658045][T20736] ? bpf_lsm_capable+0x9/0x20 [ 980.658060][T20736] ? security_capable+0x7e/0x2e0 [ 980.658078][T20736] genl_rcv_msg+0x60e/0x790 [ 980.658101][T20736] ? __pfx_genl_rcv_msg+0x10/0x10 [ 980.658118][T20736] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 980.658148][T20736] netlink_rcv_skb+0x208/0x470 [ 980.658165][T20736] ? __pfx_genl_rcv_msg+0x10/0x10 [ 980.658183][T20736] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 980.658213][T20736] ? down_read+0x274/0x2e0 [ 980.658225][T20736] ? genl_rcv+0xd/0x40 [ 980.658243][T20736] genl_rcv+0x28/0x40 [ 980.658259][T20736] netlink_unicast+0x82f/0x9e0 [ 980.658280][T20736] ? __pfx_netlink_unicast+0x10/0x10 [ 980.658295][T20736] ? netlink_sendmsg+0x642/0xb30 [ 980.658308][T20736] ? skb_put+0x11b/0x210 [ 980.658329][T20736] netlink_sendmsg+0x805/0xb30 [ 980.658343][T20736] ? aa_sk_perm+0x15f/0x920 [ 980.658364][T20736] ? __pfx_netlink_sendmsg+0x10/0x10 [ 980.658381][T20736] ? tomoyo_socket_sendmsg_permission+0x1e1/0x300 [ 980.658405][T20736] ? __pfx_netlink_sendmsg+0x10/0x10 [ 980.658420][T20736] sock_sendmsg_nosec+0x18f/0x1d0 [ 980.658440][T20736] ____sys_sendmsg+0x577/0x880 [ 980.658463][T20736] ? __pfx_____sys_sendmsg+0x10/0x10 [ 980.658485][T20736] ? import_iovec+0x74/0xa0 [ 980.658501][T20736] ___sys_sendmsg+0x21f/0x2a0 [ 980.658517][T20736] ? __pfx____sys_sendmsg+0x10/0x10 [ 980.658537][T20736] ? futex_wake+0x4b2/0x560 [ 980.658576][T20736] ? __fget_files+0x2a/0x420 [ 980.658592][T20736] ? __fget_files+0x3a0/0x420 [ 980.658616][T20736] __x64_sys_sendmsg+0x19b/0x260 [ 980.658633][T20736] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 980.658661][T20736] ? do_syscall_64+0xbe/0xf80 [ 980.658677][T20736] do_syscall_64+0xfa/0xf80 [ 980.658691][T20736] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 980.658703][T20736] ? clear_bhb_loop+0x60/0xb0 [ 980.658719][T20736] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 980.658731][T20736] RIP: 0033:0x7f0f4db8f749 [ 980.658746][T20736] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 980.658757][T20736] RSP: 002b:00007f0f4ea0b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 980.658772][T20736] RAX: ffffffffffffffda RBX: 00007f0f4dde6180 RCX: 00007f0f4db8f749 [ 980.658782][T20736] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000005 [ 980.658790][T20736] RBP: 00007f0f4dc13f91 R08: 0000000000000000 R09: 0000000000000000 [ 980.658797][T20736] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 980.658805][T20736] R13: 00007f0f4dde6218 R14: 00007f0f4dde6180 R15: 00007ffc640bedd8 [ 980.658830][T20736] [ 981.452012][T20743] comedi comedi3: comedi_config --init_data is deprecated [ 981.773150][T18646] usb 4-1: USB disconnect, device number 29 [ 982.934978][T20765] ubi: mtd0 is already attached to ubi31 [ 984.193767][ T9] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 984.402368][ T9] usb 3-1: config index 0 descriptor too short (expected 23569, got 27) [ 984.428193][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 984.446828][ T9] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 984.479988][ T9] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 984.489970][ T9] usb 3-1: Manufacturer: syz [ 984.527032][ T9] usb 3-1: config 0 descriptor?? [ 984.663781][ T9] rc_core: IR keymap rc-hauppauge not found [ 984.676973][ T9] Registered IR keymap rc-empty [ 984.691192][ T9] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 984.712441][ T9] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input9 [ 984.839735][T20789] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 984.901819][T20789] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 985.163705][ T794] usb 3-1: USB disconnect, device number 30 [ 985.313179][T20799] sysfs: cannot create duplicate filename '/class/ieee80211/1ùà^!‚lü1Ü*ø$pOcÚÉ”ÎÜr$åG—•µt:‹uÂ' [ 985.324535][T20799] CPU: 1 UID: 0 PID: 20799 Comm: syz.5.4766 Tainted: G L syzkaller #0 PREEMPT(full) [ 985.324562][T20799] Tainted: [L]=SOFTLOCKUP [ 985.324568][T20799] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 985.324579][T20799] Call Trace: [ 985.324587][T20799] [ 985.324594][T20799] dump_stack_lvl+0x189/0x250 [ 985.324620][T20799] ? __pfx_dump_stack_lvl+0x10/0x10 [ 985.324641][T20799] ? __pfx__printk+0x10/0x10 [ 985.324669][T20799] ? kernfs_path_from_node+0x2f/0x290 [ 985.324686][T20799] ? kernfs_path_from_node+0x250/0x290 [ 985.324700][T20799] ? kernfs_path_from_node+0x2f/0x290 [ 985.324718][T20799] sysfs_warn_dup+0x8e/0xa0 [ 985.324733][T20799] sysfs_do_create_link_sd+0xc0/0x110 [ 985.324753][T20799] device_add_class_symlinks+0x1cf/0x240 [ 985.324778][T20799] device_add+0x475/0xb80 [ 985.324801][T20799] wiphy_register+0x1d2e/0x2d20 [ 985.324834][T20799] ? __pfx_wiphy_register+0x10/0x10 [ 985.324856][T20799] ? minstrel_ht_alloc+0x6e0/0x7e0 [ 985.324880][T20799] ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0 [ 985.324911][T20799] ieee80211_register_hw+0x34a7/0x4110 [ 985.324948][T20799] ? ieee80211_register_hw+0x13f1/0x4110 [ 985.324978][T20799] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 985.324995][T20799] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 985.325021][T20799] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 985.325039][T20799] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 985.325069][T20799] ? __hrtimer_setup+0x181/0x200 [ 985.325086][T20799] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 985.325107][T20799] mac80211_hwsim_new_radio+0x2f76/0x5320 [ 985.325163][T20799] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 985.325185][T20799] ? __kmalloc_node_track_caller_noprof+0x594/0x820 [ 985.325206][T20799] ? kstrndup+0xbf/0x160 [ 985.325245][T20799] hwsim_new_radio_nl+0xf5b/0x1bd0 [ 985.325277][T20799] ? __pfx___nla_validate_parse+0x10/0x10 [ 985.325317][T20799] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 985.325347][T20799] ? rcu_is_watching+0x15/0xb0 [ 985.325374][T20799] ? __nla_parse+0x40/0x60 [ 985.325393][T20799] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 985.325427][T20799] genl_family_rcv_msg_doit+0x215/0x300 [ 985.325458][T20799] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 985.325493][T20799] ? bpf_lsm_capable+0x9/0x20 [ 985.325510][T20799] ? security_capable+0x7e/0x2e0 [ 985.325533][T20799] genl_rcv_msg+0x60e/0x790 [ 985.325560][T20799] ? __pfx_genl_rcv_msg+0x10/0x10 [ 985.325583][T20799] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 985.325628][T20799] netlink_rcv_skb+0x208/0x470 [ 985.325650][T20799] ? __pfx_genl_rcv_msg+0x10/0x10 [ 985.325674][T20799] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 985.325714][T20799] ? down_read+0x274/0x2e0 [ 985.325730][T20799] ? genl_rcv+0xd/0x40 [ 985.325755][T20799] genl_rcv+0x28/0x40 [ 985.325776][T20799] netlink_unicast+0x82f/0x9e0 [ 985.325804][T20799] ? __pfx_netlink_unicast+0x10/0x10 [ 985.325824][T20799] ? netlink_sendmsg+0x642/0xb30 [ 985.325841][T20799] ? skb_put+0x11b/0x210 [ 985.325863][T20799] netlink_sendmsg+0x805/0xb30 [ 985.325880][T20799] ? aa_sk_perm+0x15f/0x920 [ 985.325904][T20799] ? __pfx_netlink_sendmsg+0x10/0x10 [ 985.325926][T20799] ? tomoyo_socket_sendmsg_permission+0x1e1/0x300 [ 985.325955][T20799] ? __pfx_netlink_sendmsg+0x10/0x10 [ 985.325972][T20799] sock_sendmsg_nosec+0x18f/0x1d0 [ 985.325996][T20799] ____sys_sendmsg+0x577/0x880 [ 985.326024][T20799] ? __pfx_____sys_sendmsg+0x10/0x10 [ 985.326054][T20799] ? import_iovec+0x74/0xa0 [ 985.326077][T20799] ___sys_sendmsg+0x21f/0x2a0 [ 985.326099][T20799] ? __pfx____sys_sendmsg+0x10/0x10 [ 985.326126][T20799] ? futex_wake+0x4b2/0x560 [ 985.326176][T20799] ? __fget_files+0x2a/0x420 [ 985.326197][T20799] ? __fget_files+0x3a0/0x420 [ 985.326236][T20799] __x64_sys_sendmsg+0x19b/0x260 [ 985.326259][T20799] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 985.326296][T20799] ? do_syscall_64+0xbe/0xf80 [ 985.326319][T20799] do_syscall_64+0xfa/0xf80 [ 985.326337][T20799] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 985.326355][T20799] ? clear_bhb_loop+0x60/0xb0 [ 985.326375][T20799] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 985.326392][T20799] RIP: 0033:0x7f0f4db8f749 [ 985.326408][T20799] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 985.326423][T20799] RSP: 002b:00007f0f4ea0b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 985.326441][T20799] RAX: ffffffffffffffda RBX: 00007f0f4dde6180 RCX: 00007f0f4db8f749 [ 985.326454][T20799] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000005 [ 985.326464][T20799] RBP: 00007f0f4dc13f91 R08: 0000000000000000 R09: 0000000000000000 [ 985.326474][T20799] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 985.326484][T20799] R13: 00007f0f4dde6218 R14: 00007f0f4dde6180 R15: 00007ffc640bedd8 [ 985.326516][T20799] [ 986.176357][T20802] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4767'. [ 986.612225][T20809] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4769'. [ 987.014272][T20810] netlink: 'syz.4.4769': attribute type 1 has an invalid length. [ 987.042398][T20810] netlink: 'syz.4.4769': attribute type 2 has an invalid length. [ 987.094046][T20807] comedi comedi3: comedi_config --init_data is deprecated [ 987.923766][T18646] usb 3-1: new full-speed USB device number 31 using dummy_hcd [ 988.096943][T18646] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 988.146572][T18646] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 988.173539][T18646] usb 3-1: New USB device found, idVendor=077d, idProduct=0410, bcdDevice=ec.c1 [ 988.186779][T18646] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 988.210855][T18646] usb 3-1: Product: syz [ 988.223226][T18646] usb 3-1: Manufacturer: syz [ 988.234540][T18646] usb 3-1: SerialNumber: syz [ 988.269382][T18646] usb 3-1: config 0 descriptor?? [ 988.522357][T18646] usb 3-1: USB disconnect, device number 31 [ 989.251172][T20840] ubi: mtd0 is already attached to ubi31 [ 990.223863][ T9] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 990.395615][ T9] usb 5-1: config index 0 descriptor too short (expected 23569, got 27) [ 990.414688][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 990.449715][ T9] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 990.467251][ T9] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 990.493926][ T9] usb 5-1: Manufacturer: syz [ 990.518440][ T9] usb 5-1: config 0 descriptor?? [ 990.633755][ T9] rc_core: IR keymap rc-hauppauge not found [ 990.642710][ T9] Registered IR keymap rc-empty [ 990.670704][ T9] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 990.692955][ T9] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input10 [ 990.823216][T20860] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 990.844723][T20860] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 992.389050][T18646] usb 5-1: USB disconnect, device number 20 [ 992.639950][T20878] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4785'. [ 993.113152][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.120043][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.471860][T20881] syz.5.4789 (20881): drop_caches: 2 [ 993.477550][T20881] syz.5.4789 (20881): drop_caches: 2 [ 994.961965][T20889] ubi: mtd0 is already attached to ubi31 [ 995.562519][T20904] comedi comedi3: comedi_config --init_data is deprecated [ 995.702248][T20907] netlink: 111 bytes leftover after parsing attributes in process `syz.3.4795'. [ 995.792427][T20907] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4795'. [ 997.697211][T20921] syz.4.4801 (20921): drop_caches: 2 [ 997.702825][T20921] syz.4.4801 (20921): drop_caches: 2 [ 998.034613][T20929] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 999.920628][T20947] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4807'. [ 1002.225501][T20965] syz.3.4813 (20965): drop_caches: 2 [ 1002.235114][T20965] syz.3.4813 (20965): drop_caches: 2 [ 1002.323082][T20960] kthread_run failed with err -4 [ 1005.081187][T21010] syz.5.4825 (21010): drop_caches: 2 [ 1005.087086][T21010] syz.5.4825 (21010): drop_caches: 2 [ 1007.456016][T21034] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 1008.906485][T21050] ubi: mtd0 is already attached to ubi31 [ 1009.689128][T21055] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4838'. [ 1009.960224][T21060] syz.2.4839 (21060): drop_caches: 2 [ 1009.966088][T21060] syz.2.4839 (21060): drop_caches: 2 [ 1011.654214][T21079] netlink: 'syz.3.4846': attribute type 1 has an invalid length. [ 1011.788549][T21079] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1011.852798][T21081] macvlan3: entered promiscuous mode [ 1011.858412][T21081] macvlan3: entered allmulticast mode [ 1011.865606][T21081] bond3: entered allmulticast mode [ 1011.871138][T21081] bond3: entered promiscuous mode [ 1011.878322][T21081] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 1011.902540][T21081] team0: Port device macvlan3 added [ 1013.915435][T21117] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4857'. [ 1014.286842][T21116] netlink: 'syz.5.4857': attribute type 1 has an invalid length. [ 1014.294637][T21116] netlink: 'syz.5.4857': attribute type 2 has an invalid length. [ 1014.729093][T21129] netlink: 'syz.5.4860': attribute type 1 has an invalid length. [ 1014.888342][T21129] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1014.982756][T21132] macvlan2: entered promiscuous mode [ 1015.007750][T21132] macvlan2: entered allmulticast mode [ 1015.036302][T21132] bond2: entered allmulticast mode [ 1015.057391][T21132] bond2: entered promiscuous mode [ 1015.080350][T21132] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1015.099530][T21137] netlink: 'syz.3.4862': attribute type 1 has an invalid length. [ 1015.111970][T21132] team0: Port device macvlan2 added [ 1015.272509][T21137] bond4: entered promiscuous mode [ 1015.349316][T21137] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1015.830890][T21141] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1015.838390][T21141] bond4: (slave vcan1): The slave device specified does not support setting the MAC address [ 1015.849686][T21141] bond4: (slave vcan1): Setting fail_over_mac to active for active-backup mode [ 1016.486463][T21141] bond4: (slave vcan1): making interface the new active one [ 1016.503887][T21141] vcan1: entered promiscuous mode [ 1016.510777][T21141] bond4: (slave vcan1): Enslaving as an active interface with an up link [ 1017.094685][T21162] netlink: 'syz.5.4871': attribute type 1 has an invalid length. [ 1017.207911][T21162] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1017.851363][T21165] bond3: (slave dummy0): making interface the new active one [ 1017.991016][T21165] bond3: (slave dummy0): Enslaving as an active interface with an up link [ 1018.516242][T21179] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4874'. [ 1019.360549][T21178] netlink: 'syz.5.4874': attribute type 1 has an invalid length. [ 1019.368401][T21178] netlink: 'syz.5.4874': attribute type 2 has an invalid length. [ 1021.374057][ T9] usb 6-1: new full-speed USB device number 13 using dummy_hcd [ 1021.467680][T21210] netlink: 'syz.3.4883': attribute type 1 has an invalid length. [ 1021.537944][T21210] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1021.564640][T21210] bond5: (slave dummy0): making interface the new active one [ 1021.573581][T21210] bond5: (slave dummy0): Enslaving as an active interface with an up link [ 1021.617185][ T9] usb 6-1: config 8 has an invalid interface number: 223 but max is 0 [ 1021.643763][ T9] usb 6-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 1021.710573][T21216] netlink: 35 bytes leftover after parsing attributes in process `syz.4.4882'. [ 1021.723830][ T9] usb 6-1: config 8 has no interface number 0 [ 1021.731864][ T9] usb 6-1: config 8 interface 223 altsetting 0 endpoint 0x7 has invalid maxpacket 512, setting to 64 [ 1021.738194][ T30] audit: type=1326 audit(1765361855.923:1854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21213 comm="syz.2.4884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5485d8f749 code=0x7ffc0000 [ 1021.743614][ T9] usb 6-1: config 8 interface 223 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1021.795333][ T9] usb 6-1: New USB device found, idVendor=a6da, idProduct=7458, bcdDevice=2d.4d [ 1021.834721][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1021.859335][ T9] usb 6-1: Product: syz [ 1021.864756][ T9] usb 6-1: Manufacturer: syz [ 1021.869441][ T30] audit: type=1326 audit(1765361855.933:1855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21213 comm="syz.2.4884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5485d8f749 code=0x7ffc0000 [ 1022.140641][ T9] usb 6-1: SerialNumber: syz [ 1022.490468][ T9] usb 6-1: USB disconnect, device number 13 [ 1025.675806][T21249] netlink: 'syz.0.4895': attribute type 1 has an invalid length. [ 1026.876185][T21249] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1027.033794][ T5836] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 1027.203878][ T5836] usb 5-1: Using ep0 maxpacket: 8 [ 1027.224908][ T5836] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 1027.246503][ T5836] usb 5-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 1027.263725][ T5836] usb 5-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 1027.282079][ T5836] usb 5-1: Product: syz [ 1027.286805][ T5836] usb 5-1: Manufacturer: syz [ 1027.291409][ T5836] usb 5-1: SerialNumber: syz [ 1027.537352][ T5836] usb 5-1: palm_os_3_probe - error -32 getting connection information [ 1027.559752][ T5836] visor 5-1:1.0: probe with driver visor failed with error -32 [ 1027.585091][ T5836] usb 5-1: USB disconnect, device number 21 [ 1028.279641][ T9] usb 6-1: new full-speed USB device number 14 using dummy_hcd [ 1028.703360][ T9] usb 6-1: config 8 has an invalid interface number: 223 but max is 0 [ 1028.711900][ T9] usb 6-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 1028.752740][ T9] usb 6-1: config 8 has no interface number 0 [ 1028.783833][ T9] usb 6-1: config 8 interface 223 altsetting 0 endpoint 0x7 has invalid maxpacket 512, setting to 64 [ 1028.868213][ T9] usb 6-1: config 8 interface 223 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1028.942182][ T9] usb 6-1: New USB device found, idVendor=a6da, idProduct=7458, bcdDevice=2d.4d [ 1028.979381][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1029.003686][ T9] usb 6-1: Product: syz [ 1029.008024][ T9] usb 6-1: Manufacturer: syz [ 1029.020264][ T9] usb 6-1: SerialNumber: syz [ 1029.139126][T21290] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4906'. [ 1029.161673][T21290] openvswitch: netlink: Key type 796 is out of range max 32 [ 1029.193925][T21292] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4906'. [ 1029.250340][ T30] audit: type=1326 audit(1765361863.453:1856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21275 comm="syz.0.4901" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f756238f749 code=0x0 [ 1029.269099][ T9] usb 6-1: USB disconnect, device number 14 [ 1029.301279][T21294] netlink: 'syz.2.4907': attribute type 1 has an invalid length. [ 1029.341569][T21292] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4906'. [ 1029.372025][T21280] Bluetooth: MGMT ver 1.23 [ 1029.401426][T21294] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1029.413194][T21284] random: crng reseeded on system resumption [ 1029.449584][T21298] bond3: (slave dummy0): making interface the new active one [ 1029.473465][T21298] bond3: (slave dummy0): Enslaving as an active interface with an up link [ 1031.520702][ T794] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 1031.703716][ T794] usb 4-1: Using ep0 maxpacket: 8 [ 1031.728384][ T794] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 1031.783860][ T794] usb 4-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 1031.813921][ T794] usb 4-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 1031.841315][ T794] usb 4-1: Product: syz [ 1031.856124][ T794] usb 4-1: Manufacturer: syz [ 1031.900678][ T794] usb 4-1: SerialNumber: syz [ 1031.950046][ T1000] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1032.176763][ T794] usb 4-1: palm_os_3_probe - error -32 getting connection information [ 1032.196986][ T1000] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1032.214710][ T794] visor 4-1:1.0: probe with driver visor failed with error -32 [ 1032.264070][ T794] usb 4-1: USB disconnect, device number 30 [ 1032.395847][ T1000] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1032.531862][ T1000] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1032.682305][T21328] netlink: 'syz.0.4918': attribute type 1 has an invalid length. [ 1032.794510][ T52] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci5/hci5:201' [ 1032.804593][ T52] CPU: 0 UID: 0 PID: 52 Comm: kworker/u9:0 Tainted: G L syzkaller #0 PREEMPT(full) [ 1032.804623][ T52] Tainted: [L]=SOFTLOCKUP [ 1032.804629][ T52] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1032.804642][ T52] Workqueue: hci5 hci_rx_work [ 1032.804665][ T52] Call Trace: [ 1032.804672][ T52] [ 1032.804680][ T52] dump_stack_lvl+0x189/0x250 [ 1032.804710][ T52] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1032.804731][ T52] ? __pfx__printk+0x10/0x10 [ 1032.804761][ T52] ? kernfs_path_from_node+0x250/0x290 [ 1032.804781][ T52] ? kernfs_path_from_node+0x2f/0x290 [ 1032.804803][ T52] sysfs_create_dir_ns+0x259/0x280 [ 1032.804825][ T52] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 1032.804846][ T52] ? do_raw_spin_unlock+0x122/0x240 [ 1032.804874][ T52] kobject_add_internal+0x6ab/0xcc0 [ 1032.804904][ T52] kobject_add+0x155/0x220 [ 1032.804936][ T52] ? __pfx_kobject_add+0x10/0x10 [ 1032.804957][ T52] ? _raw_spin_unlock+0x3f/0x50 [ 1032.804985][ T52] ? get_device_parent+0x366/0x3a0 [ 1032.805013][ T52] device_add+0x408/0xb80 [ 1032.805040][ T52] hci_conn_add_sysfs+0xd5/0x210 [ 1032.805070][ T52] le_conn_complete_evt+0xf1d/0x1420 [ 1032.805102][ T52] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 1032.805121][ T52] ? __mutex_unlock_slowpath+0x1a1/0x730 [ 1032.805138][ T52] ? __asan_memcpy+0x40/0x70 [ 1032.805159][ T52] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1032.805175][ T52] ? skb_pull_data+0xfb/0x200 [ 1032.805200][ T52] hci_le_enh_conn_complete_evt+0x189/0x4a0 [ 1032.805224][ T52] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 1032.805250][ T52] hci_event_packet+0x78f/0x1260 [ 1032.805271][ T52] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 1032.805295][ T52] ? __pfx_hci_event_packet+0x10/0x10 [ 1032.805317][ T52] ? kcov_remote_start+0x4d3/0x7f0 [ 1032.805340][ T52] ? lockdep_hardirqs_on+0x98/0x140 [ 1032.805362][ T52] ? hci_send_to_monitor+0xe2/0x590 [ 1032.805389][ T52] hci_rx_work+0x3ee/0x1060 [ 1032.805420][ T52] ? process_one_work+0x868/0x15a0 [ 1032.805438][ T52] process_one_work+0x93a/0x15a0 [ 1032.805480][ T52] ? __pfx_process_one_work+0x10/0x10 [ 1032.805508][ T52] ? assign_work+0x3c7/0x5b0 [ 1032.805532][ T52] worker_thread+0x9b0/0xee0 [ 1032.805577][ T52] kthread+0x711/0x8a0 [ 1032.805603][ T52] ? __pfx_worker_thread+0x10/0x10 [ 1032.805627][ T52] ? __pfx_kthread+0x10/0x10 [ 1032.805651][ T52] ? _raw_spin_unlock_irq+0x23/0x50 [ 1032.805675][ T52] ? lockdep_hardirqs_on+0x98/0x140 [ 1032.805689][ T52] ? __pfx_kthread+0x10/0x10 [ 1032.805713][ T52] ret_from_fork+0x599/0xb30 [ 1032.805735][ T52] ? __pfx_ret_from_fork+0x10/0x10 [ 1032.805764][ T52] ? __switch_to_asm+0x39/0x70 [ 1032.805785][ T52] ? __switch_to_asm+0x33/0x70 [ 1032.805806][ T52] ? __pfx_kthread+0x10/0x10 [ 1032.805829][ T52] ret_from_fork_asm+0x1a/0x30 [ 1032.805870][ T52] [ 1032.805900][ T52] kobject: kobject_add_internal failed for hci5:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 1033.103143][ T52] Bluetooth: hci5: failed to register connection device [ 1033.115143][T21328] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1033.168502][ T5147] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1033.190438][ T5147] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1033.199649][ T5147] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1033.209471][ T5147] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1033.222944][ T5147] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1033.239085][T21331] bond2: (slave dummy0): making interface the new active one [ 1033.257804][T21331] bond2: (slave dummy0): Enslaving as an active interface with an up link [ 1033.655411][ T1000] bridge_slave_1: left allmulticast mode [ 1033.685900][ T1000] bridge_slave_1: left promiscuous mode [ 1033.731104][ T1000] bridge0: port 2(bridge_slave_1) entered disabled state [ 1033.757080][T21352] kvm: pic: non byte read [ 1033.766867][ T1000] bridge_slave_0: left allmulticast mode [ 1033.779088][ T1000] bridge_slave_0: left promiscuous mode [ 1033.792385][ T1000] bridge0: port 1(bridge_slave_0) entered disabled state [ 1035.314117][ T52] Bluetooth: hci0: command tx timeout [ 1035.801387][ T1000] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1035.814552][ T1000] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1035.825643][ T1000] bond0 (unregistering): Released all slaves [ 1036.493532][ T1000] bond1 (unregistering): Released all slaves [ 1036.584213][T21339] lo speed is unknown, defaulting to 1000 [ 1036.598382][T21334] lo speed is unknown, defaulting to 1000 [ 1036.639916][T21339] lo speed is unknown, defaulting to 1000 [ 1036.658182][ T1000] : left promiscuous mode [ 1036.746290][T21334] lo speed is unknown, defaulting to 1000 [ 1036.840373][T21391] netlink: 'syz.0.4931': attribute type 1 has an invalid length. [ 1036.905165][ T1000] tipc: Disabling bearer [ 1036.934756][ T1000] tipc: Left network mode [ 1037.195285][T21393] bond2: (slave dummy0): Releasing active interface [ 1037.317538][T21391] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1037.393783][ T52] Bluetooth: hci0: command tx timeout [ 1037.677123][ T1000] hsr_slave_0: left promiscuous mode [ 1037.683008][ T1000] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1037.692154][ T1000] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1037.700587][ T1000] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1037.711454][ T1000] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1037.749576][ T1000] veth1_macvtap: left promiscuous mode [ 1037.755648][ T1000] veth0_macvtap: left promiscuous mode [ 1037.783803][ T1000] veth1_vlan: left promiscuous mode [ 1037.805485][ T1000] veth0_vlan: left promiscuous mode [ 1038.111177][ T1000] pimreg (unregistering): left allmulticast mode [ 1038.966651][ T1000] team_slave_1 (unregistering): left promiscuous mode [ 1038.986577][ T1000] team0 (unregistering): Port device team_slave_1 removed [ 1039.148616][ T1000] team_slave_0 (unregistering): left promiscuous mode [ 1039.157684][ T1000] team0 (unregistering): Port device team_slave_0 removed [ 1039.475301][ T52] Bluetooth: hci0: command tx timeout [ 1039.750087][ T1000] lo (unregistering): left allmulticast mode [ 1039.782385][T21430] tipc: Started in network mode [ 1039.787542][T21430] tipc: Node identity 766eb5f29373, cluster identity 4711 [ 1039.796243][T21430] tipc: Enabled bearer , priority 0 [ 1039.803286][T21431] syzkaller0: entered promiscuous mode [ 1039.810540][T21431] syzkaller0: entered allmulticast mode [ 1039.820408][T21435] tipc: Resetting bearer [ 1039.869856][T21428] tipc: Resetting bearer [ 1039.939779][T21428] tipc: Disabling bearer [ 1039.968556][T21334] chnl_net:caif_netlink_parms(): no params data found [ 1040.190732][T21458] netlink: 'syz.0.4945': attribute type 1 has an invalid length. [ 1040.435453][T21458] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1040.447485][T21470] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4947'. [ 1040.469087][T21462] bond4: (slave dummy0): making interface the new active one [ 1040.479707][T21462] bond4: (slave dummy0): Enslaving as an active interface with an up link [ 1040.523202][T21470] hsr_slave_0: left promiscuous mode [ 1040.576284][T21334] bridge0: port 1(bridge_slave_0) entered blocking state [ 1040.585191][T21334] bridge0: port 1(bridge_slave_0) entered disabled state [ 1040.592478][T21334] bridge_slave_0: entered allmulticast mode [ 1040.613303][T21334] bridge_slave_0: entered promiscuous mode [ 1040.627934][T21334] bridge0: port 2(bridge_slave_1) entered blocking state [ 1040.636028][T21334] bridge0: port 2(bridge_slave_1) entered disabled state [ 1040.643384][T21334] bridge_slave_1: entered allmulticast mode [ 1040.651794][T21334] bridge_slave_1: entered promiscuous mode [ 1040.712292][T21334] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1040.731228][T21334] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1040.782976][T21334] team0: Port device team_slave_0 added [ 1040.793306][T21334] team0: Port device team_slave_1 added [ 1040.803825][ T9] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 1040.867310][T21334] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1040.878136][T21334] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1040.905863][T21334] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1040.921757][T21334] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1040.928911][T21334] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1040.983786][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 1040.993396][ T9] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 1040.996132][T21334] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1041.011760][ T9] usb 1-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 1041.036466][ T9] usb 1-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 1041.056283][ T9] usb 1-1: Product: syz [ 1041.065105][ T9] usb 1-1: Manufacturer: syz [ 1041.073209][ T9] usb 1-1: SerialNumber: syz [ 1041.130392][T21334] hsr_slave_0: entered promiscuous mode [ 1041.142497][T21334] hsr_slave_1: entered promiscuous mode [ 1041.310669][ T9] usb 1-1: palm_os_3_probe - error -32 getting connection information [ 1041.334388][ T9] visor 1-1:1.0: probe with driver visor failed with error -32 [ 1041.363170][ T52] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 1041.377415][ T52] CPU: 1 UID: 0 PID: 52 Comm: kworker/u9:0 Tainted: G L syzkaller #0 PREEMPT(full) [ 1041.377445][ T52] Tainted: [L]=SOFTLOCKUP [ 1041.377452][ T52] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1041.377465][ T52] Workqueue: hci3 hci_rx_work [ 1041.377488][ T52] Call Trace: [ 1041.377496][ T52] [ 1041.377505][ T52] dump_stack_lvl+0x189/0x250 [ 1041.377533][ T52] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1041.377556][ T52] ? __pfx__printk+0x10/0x10 [ 1041.377588][ T52] ? kernfs_path_from_node+0x250/0x290 [ 1041.377607][ T52] ? kernfs_path_from_node+0x2f/0x290 [ 1041.377631][ T52] sysfs_create_dir_ns+0x259/0x280 [ 1041.377654][ T52] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 1041.377675][ T52] ? do_raw_spin_unlock+0x122/0x240 [ 1041.377705][ T52] kobject_add_internal+0x6ab/0xcc0 [ 1041.377736][ T52] kobject_add+0x155/0x220 [ 1041.377762][ T52] ? __pfx_kobject_add+0x10/0x10 [ 1041.377783][ T52] ? _raw_spin_unlock+0x28/0x50 [ 1041.377811][ T52] ? get_device_parent+0x366/0x3a0 [ 1041.377840][ T52] device_add+0x408/0xb80 [ 1041.377869][ T52] hci_conn_add_sysfs+0xd5/0x210 [ 1041.377899][ T52] le_conn_complete_evt+0xf1d/0x1420 [ 1041.377932][ T52] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 1041.377953][ T52] ? __mutex_unlock_slowpath+0x1a1/0x730 [ 1041.377971][ T52] ? __asan_memcpy+0x40/0x70 [ 1041.377994][ T52] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1041.378012][ T52] ? skb_pull_data+0xfb/0x200 [ 1041.378039][ T52] hci_le_enh_conn_complete_evt+0x189/0x4a0 [ 1041.378062][ T52] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 1041.378089][ T52] hci_event_packet+0x78f/0x1260 [ 1041.378110][ T52] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 1041.378134][ T52] ? __pfx_hci_event_packet+0x10/0x10 [ 1041.378156][ T52] ? kcov_remote_start+0x4d3/0x7f0 [ 1041.378179][ T52] ? lockdep_hardirqs_on+0x98/0x140 [ 1041.378200][ T52] ? hci_send_to_monitor+0xe2/0x590 [ 1041.378225][ T52] hci_rx_work+0x3ee/0x1060 [ 1041.378255][ T52] ? process_one_work+0x868/0x15a0 [ 1041.378273][ T52] process_one_work+0x93a/0x15a0 [ 1041.378315][ T52] ? __pfx_process_one_work+0x10/0x10 [ 1041.378344][ T52] ? assign_work+0x3c7/0x5b0 [ 1041.378374][ T52] worker_thread+0x9b0/0xee0 [ 1041.378421][ T52] kthread+0x711/0x8a0 [ 1041.378449][ T52] ? __pfx_worker_thread+0x10/0x10 [ 1041.378469][ T52] ? __pfx_kthread+0x10/0x10 [ 1041.378494][ T52] ? _raw_spin_unlock_irq+0x23/0x50 [ 1041.378518][ T52] ? lockdep_hardirqs_on+0x98/0x140 [ 1041.378534][ T52] ? __pfx_kthread+0x10/0x10 [ 1041.378558][ T52] ret_from_fork+0x599/0xb30 [ 1041.378579][ T52] ? __pfx_ret_from_fork+0x10/0x10 [ 1041.378609][ T52] ? __switch_to_asm+0x39/0x70 [ 1041.378630][ T52] ? __switch_to_asm+0x33/0x70 [ 1041.378650][ T52] ? __pfx_kthread+0x10/0x10 [ 1041.378674][ T52] ret_from_fork_asm+0x1a/0x30 [ 1041.378715][ T52] [ 1041.378742][ T52] kobject: kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 1041.385470][ T9] usb 1-1: USB disconnect, device number 26 [ 1041.389897][ T52] Bluetooth: hci3: failed to register connection device [ 1041.556137][ T5147] Bluetooth: hci0: command tx timeout [ 1042.361223][T21506] tipc: Enabled bearer , priority 0 [ 1042.383386][T21506] syzkaller0: entered promiscuous mode [ 1042.399036][T21506] syzkaller0: entered allmulticast mode [ 1042.419753][T21334] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1042.476672][T21334] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1042.534950][T21506] tipc: Resetting bearer [ 1042.554508][T21334] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1042.601029][T21505] tipc: Resetting bearer [ 1042.665174][T21505] tipc: Disabling bearer [ 1042.756476][T21334] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1043.276742][T21527] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048) [ 1043.802600][T21334] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1043.901680][T21334] 8021q: adding VLAN 0 to HW filter on device team0 [ 1043.944268][T21531] netlink: 'syz.5.4958': attribute type 1 has an invalid length. [ 1044.923762][ T52] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:201' [ 1044.929189][T21531] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1044.935186][ T52] CPU: 0 UID: 0 PID: 52 Comm: kworker/u9:0 Tainted: G L syzkaller #0 PREEMPT(full) [ 1044.935214][ T52] Tainted: [L]=SOFTLOCKUP [ 1044.935221][ T52] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1044.935234][ T52] Workqueue: hci4 hci_rx_work [ 1044.935256][ T52] Call Trace: [ 1044.935263][ T52] [ 1044.935272][ T52] dump_stack_lvl+0x189/0x250 [ 1044.935299][ T52] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1044.935319][ T52] ? __pfx__printk+0x10/0x10 [ 1044.935350][ T52] ? kernfs_path_from_node+0x250/0x290 [ 1044.935368][ T52] ? kernfs_path_from_node+0x2f/0x290 [ 1044.935391][ T52] sysfs_create_dir_ns+0x259/0x280 [ 1044.935412][ T52] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 1044.935432][ T52] ? do_raw_spin_unlock+0x122/0x240 [ 1044.935461][ T52] kobject_add_internal+0x6ab/0xcc0 [ 1044.935491][ T52] kobject_add+0x155/0x220 [ 1044.935515][ T52] ? __pfx_kobject_add+0x10/0x10 [ 1044.935537][ T52] ? _raw_spin_unlock+0x28/0x50 [ 1044.935563][ T52] ? get_device_parent+0x366/0x3a0 [ 1044.935590][ T52] device_add+0x408/0xb80 [ 1044.935617][ T52] hci_conn_add_sysfs+0xd5/0x210 [ 1044.935645][ T52] le_conn_complete_evt+0xf1d/0x1420 [ 1044.935676][ T52] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 1044.935696][ T52] ? __mutex_unlock_slowpath+0x1a1/0x730 [ 1044.935712][ T52] ? __asan_memcpy+0x40/0x70 [ 1044.935734][ T52] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1044.935751][ T52] ? skb_pull_data+0xfb/0x200 [ 1044.935776][ T52] hci_le_enh_conn_complete_evt+0x189/0x4a0 [ 1044.935798][ T52] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 1044.935824][ T52] hci_event_packet+0x78f/0x1260 [ 1044.935845][ T52] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 1044.935867][ T52] ? __pfx_hci_event_packet+0x10/0x10 [ 1044.935888][ T52] ? kcov_remote_start+0x4d3/0x7f0 [ 1044.935910][ T52] ? lockdep_hardirqs_on+0x98/0x140 [ 1044.935930][ T52] ? hci_send_to_monitor+0xe2/0x590 [ 1044.935954][ T52] hci_rx_work+0x3ee/0x1060 [ 1044.935982][ T52] ? process_one_work+0x868/0x15a0 [ 1044.935999][ T52] process_one_work+0x93a/0x15a0 [ 1044.936039][ T52] ? __pfx_process_one_work+0x10/0x10 [ 1044.936065][ T52] ? assign_work+0x3c7/0x5b0 [ 1044.936088][ T52] worker_thread+0x9b0/0xee0 [ 1044.936138][ T52] kthread+0x711/0x8a0 [ 1044.936162][ T52] ? __pfx_worker_thread+0x10/0x10 [ 1044.936181][ T52] ? __pfx_kthread+0x10/0x10 [ 1044.936205][ T52] ? _raw_spin_unlock_irq+0x23/0x50 [ 1044.936229][ T52] ? lockdep_hardirqs_on+0x98/0x140 [ 1044.936244][ T52] ? __pfx_kthread+0x10/0x10 [ 1044.936267][ T52] ret_from_fork+0x599/0xb30 [ 1044.936288][ T52] ? __pfx_ret_from_fork+0x10/0x10 [ 1044.936317][ T52] ? __switch_to_asm+0x39/0x70 [ 1044.936337][ T52] ? __switch_to_asm+0x33/0x70 [ 1044.936356][ T52] ? __pfx_kthread+0x10/0x10 [ 1044.936379][ T52] ret_from_fork_asm+0x1a/0x30 [ 1044.936417][ T52] [ 1044.936792][ T52] kobject: kobject_add_internal failed for hci4:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 1045.391985][ T52] Bluetooth: hci4: failed to register connection device [ 1045.440538][T21539] bond3: (slave dummy0): Releasing active interface [ 1045.632054][T21539] bond4: (slave dummy0): making interface the new active one [ 1045.651234][T21539] bond4: (slave dummy0): Enslaving as an active interface with an up link [ 1045.673891][ T9] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 1046.228984][ T9] usb 4-1: config 0 has an invalid interface number: 182 but max is 1 [ 1046.247002][ T6061] bridge0: port 1(bridge_slave_0) entered blocking state [ 1046.253046][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1046.254226][ T6061] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1046.405290][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 1046.412501][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1046.559317][ T9] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1047.546648][ T9] usb 4-1: config 0 has no interface number 0 [ 1047.562972][ T9] usb 4-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice=9c.af [ 1047.572575][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1047.592514][ T9] usb 4-1: config 0 descriptor?? [ 1048.203222][T21334] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1048.221034][T21564] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 1048.276511][T21334] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1048.301775][ T9] usb 4-1: USB disconnect, device number 31 [ 1050.047770][T21577] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048) [ 1051.246189][T21585] tipc: Resetting bearer [ 1051.275137][T21585] comedi comedi3: comedi_config --init_data is deprecated [ 1052.010652][ T52] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 1052.044395][T21584] tipc: Resetting bearer [ 1052.220108][T21599] netlink: 'syz.0.4974': attribute type 1 has an invalid length. [ 1052.235102][T21334] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1052.589277][T18646] usb 4-1: new full-speed USB device number 32 using dummy_hcd [ 1052.746612][T21599] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1052.778971][T21605] bond4: (slave dummy0): Releasing active interface [ 1052.814389][T21605] bond5: (slave dummy0): making interface the new active one [ 1052.851696][T21605] bond5: (slave dummy0): Enslaving as an active interface with an up link [ 1052.871552][ T1000] tipc: Resetting bearer [ 1052.880061][T18646] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1052.900599][T18646] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1052.926707][T18646] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1052.963410][T18646] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1052.999442][T18646] usb 4-1: Product: syz [ 1053.013466][T18646] usb 4-1: Manufacturer: syz [ 1053.030490][T18646] usb 4-1: SerialNumber: syz [ 1053.053155][T18646] usb 4-1: config 0 descriptor?? [ 1053.073236][T18646] usb 4-1: selecting invalid altsetting 0 [ 1053.614236][ T5836] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 1054.187664][T21334] veth0_vlan: entered promiscuous mode [ 1054.235621][T21334] veth1_vlan: entered promiscuous mode [ 1054.297357][T21334] veth0_macvtap: entered promiscuous mode [ 1054.308597][T21334] veth1_macvtap: entered promiscuous mode [ 1054.347095][T21334] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1054.347918][ T5836] usb 3-1: config 0 has an invalid interface number: 182 but max is 1 [ 1054.364344][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.364398][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.378877][T21334] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1054.415548][T21627] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3494536612 (27956292896 ns) > initial count (3818115376 ns). Using initial count to start timer. [ 1054.419176][ T5836] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1054.444789][ T5836] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1054.459942][ T5836] usb 3-1: config 0 has no interface number 0 [ 1054.466253][ T5836] usb 3-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice=9c.af [ 1054.475031][ T6037] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1054.475635][ T5836] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1054.511639][ T6037] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1054.517123][ T5836] usb 3-1: config 0 descriptor?? [ 1054.628004][ T6037] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1054.684243][ T6037] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1054.785990][ T794] usb 3-1: USB disconnect, device number 32 [ 1054.905028][T14046] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1054.914141][T14046] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1055.308865][ T5901] usb 4-1: USB disconnect, device number 32 [ 1055.626664][T18397] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1055.714592][T18397] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1057.288035][T21655] netlink: 'syz.5.4986': attribute type 1 has an invalid length. [ 1057.477877][T21655] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1057.556107][T21658] bond4: (slave dummy0): Releasing active interface [ 1057.583211][T21658] bond5: (slave dummy0): making interface the new active one [ 1057.615131][T21658] bond5: (slave dummy0): Enslaving as an active interface with an up link [ 1057.758405][T21662] lo speed is unknown, defaulting to 1000 [ 1057.788952][T21662] lo speed is unknown, defaulting to 1000 [ 1059.064416][ T5880] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 1059.707628][ T5880] usb 3-1: config 0 has an invalid interface number: 182 but max is 1 [ 1059.766693][ T5880] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1059.815849][ T5880] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1059.839852][ T5880] usb 3-1: config 0 has no interface number 0 [ 1059.887289][ T5880] usb 3-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice=9c.af [ 1059.908210][ T5880] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1059.943432][ T5880] usb 3-1: config 0 descriptor?? [ 1060.190657][ T5880] usb 3-1: USB disconnect, device number 33 [ 1060.749665][T21700] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048) [ 1062.182745][T21718] netlink: 'syz.2.5001': attribute type 1 has an invalid length. [ 1062.205955][T21719] tipc: Resetting bearer [ 1062.242334][T21719] comedi comedi3: comedi_config --init_data is deprecated [ 1062.685191][T21723] bond3: (slave dummy0): Releasing active interface [ 1064.130421][T21718] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1064.366787][T21713] tipc: Resetting bearer [ 1064.633892][ T5901] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 1065.103715][ T5901] usb 3-1: Using ep0 maxpacket: 32 [ 1065.172513][ T5901] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 1065.193233][ T5901] usb 3-1: config 0 has no interface number 0 [ 1065.243047][ T5901] usb 3-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 1065.256783][ T6066] tipc: Resetting bearer [ 1065.314393][T21757] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input11 [ 1065.330029][ T5901] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1065.397793][ T5901] usb 3-1: Product: syz [ 1065.430955][ T5901] usb 3-1: Manufacturer: syz [ 1065.458706][ T5901] usb 3-1: SerialNumber: syz [ 1065.534626][ T5901] usb 3-1: config 0 descriptor?? [ 1065.586422][ T5901] usb 3-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 1065.694848][ T5901] usb 3-1: selecting invalid altsetting 1 [ 1065.728982][ T5901] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 1065.805755][ T5901] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1065.878622][ T5901] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 1065.940914][ T5901] usb 3-1: media controller created [ 1065.996727][ T5901] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1066.161713][ T5901] usb 3-1: dvb_usb_ce6230: usb_control_msg() failed=-32 [ 1066.205580][ T5901] zl10353_read_register: readreg error (reg=127, ret==-32) [ 1066.256430][ T5901] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 1066.280566][T21776] pimreg: entered allmulticast mode [ 1067.058017][ T5901] usb 3-1: USB disconnect, device number 34 [ 1069.129851][T21798] netlink: 'syz.2.5012': attribute type 1 has an invalid length. [ 1069.233286][T21798] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1069.316216][T21805] comedi comedi3: comedi_config --init_data is deprecated [ 1070.396774][T21801] bond5: (slave dummy0): making interface the new active one [ 1070.589222][T21801] bond5: (slave dummy0): Enslaving as an active interface with an up link [ 1070.633379][T21803] tipc: Resetting bearer [ 1070.802369][T21803] tipc: Resetting bearer [ 1071.625945][T21557] tipc: Resetting bearer [ 1071.688515][T21833] tipc: Enabling of bearer rejected, already enabled [ 1071.767622][T21832] : renamed from bridge_slave_0 (while UP) [ 1074.672714][T21866] netlink: 'syz.2.5026': attribute type 1 has an invalid length. [ 1074.785490][T21866] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1074.848926][T21868] bond5: (slave dummy0): Releasing active interface [ 1074.894546][T21868] bond6: (slave dummy0): making interface the new active one [ 1074.911447][T21868] bond6: (slave dummy0): Enslaving as an active interface with an up link [ 1075.184501][T21874] comedi comedi3: comedi_config --init_data is deprecated [ 1075.714807][T21880] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5028'. [ 1075.725586][T21880] openvswitch: netlink: Key type 796 is out of range max 32 [ 1075.814973][T21882] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5028'. [ 1076.295653][T21888] binder: 21887:21888 ioctl c0306201 200000000200 returned -14 [ 1078.611241][T21913] netlink: 'syz.0.5037': attribute type 1 has an invalid length. [ 1078.669761][T21913] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1078.741458][T21917] bond5: (slave dummy0): Releasing active interface [ 1078.850787][T21917] bond6: (slave dummy0): making interface the new active one [ 1079.003035][T21917] bond6: (slave dummy0): Enslaving as an active interface with an up link [ 1079.798353][T21926] : renamed from bridge_slave_0 (while UP) [ 1082.073944][ T52] Bluetooth: hci5: Ignoring HCI_Connection_Complete for existing connection [ 1082.238565][T21955] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 1083.773275][T21967] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5049'. [ 1086.135734][T21983] netlink: 620 bytes leftover after parsing attributes in process `syz.2.5055'. [ 1086.568088][ T5147] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 1087.509333][T21996] loop6: detected capacity change from 0 to 2640 [ 1087.552472][T21970] Buffer I/O error on dev loop6, logical block 0, async page read [ 1087.575812][T21970] Buffer I/O error on dev loop6, logical block 0, async page read [ 1087.806862][T21970] Buffer I/O error on dev loop6, logical block 0, async page read [ 1087.946942][T21970] Buffer I/O error on dev loop6, logical block 0, async page read [ 1088.323759][T21970] Buffer I/O error on dev loop6, logical block 0, async page read [ 1088.335580][T21970] Buffer I/O error on dev loop6, logical block 0, async page read [ 1088.396594][T21970] Buffer I/O error on dev loop6, logical block 0, async page read [ 1088.408649][T21970] Buffer I/O error on dev loop6, logical block 0, async page read [ 1088.420648][T21970] ldm_validate_partition_table(): Disk read failed. [ 1088.436038][T21970] Buffer I/O error on dev loop6, logical block 0, async page read [ 1088.456766][T21970] Buffer I/O error on dev loop6, logical block 0, async page read [ 1088.467227][T21970] Dev loop6: unable to read RDB block 0 [ 1088.474998][T21970] loop6: unable to read partition table [ 1089.123803][T21996] ldm_validate_partition_table(): Disk read failed. [ 1089.215194][T21996] Dev loop6: unable to read RDB block 0 [ 1089.283992][T21996] loop6: unable to read partition table [ 1089.295063][T21996] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 1089.373255][T22028] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5066'. [ 1089.389850][T22028] openvswitch: netlink: Key type 796 is out of range max 32 [ 1089.544448][T22031] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5066'. [ 1091.538785][T22031] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5066'. [ 1091.852680][T22044] netlink: 620 bytes leftover after parsing attributes in process `syz.6.5069'. [ 1093.512376][ T5147] Bluetooth: hci4: Ignoring HCI_Connection_Complete for existing connection [ 1095.409631][T22077] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048) [ 1095.572946][T22090] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5081'. [ 1095.608365][T22090] openvswitch: netlink: Key type 796 is out of range max 32 [ 1095.622731][T22084] : renamed from bridge_slave_0 (while UP) [ 1095.631032][T22090] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5081'. [ 1095.711631][T22092] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5081'. [ 1098.005284][ T52] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 1099.067526][T22129] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5091'. [ 1099.112470][T22130] netlink: 'syz.2.5092': attribute type 1 has an invalid length. [ 1099.213207][T22130] bond7: entered promiscuous mode [ 1099.228453][T22130] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1099.283018][T22133] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1099.305977][T22133] bond7: (slave vcan1): The slave device specified does not support setting the MAC address [ 1099.325459][T22133] bond7: (slave vcan1): Setting fail_over_mac to active for active-backup mode [ 1099.362343][T22133] bond7: (slave vcan1): making interface the new active one [ 1099.371349][T22133] vcan1: entered promiscuous mode [ 1099.393118][T22133] bond7: (slave vcan1): Enslaving as an active interface with an up link [ 1099.658713][T22137] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5093'. [ 1099.676737][T22137] openvswitch: netlink: Key type 796 is out of range max 32 [ 1099.707147][T22137] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5093'. [ 1099.797997][T22143] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5093'. [ 1100.009392][T22145] : renamed from bridge_slave_0 (while UP) [ 1100.474673][T22150] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5096'. [ 1100.744167][T22152] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 1103.152551][T22182] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1103.582027][ T30] audit: type=1326 audit(1765361937.353:1857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22177 comm="syz.3.5105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51d798f749 code=0x7ffc0000 [ 1103.767543][ T30] audit: type=1326 audit(1765361937.353:1858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22177 comm="syz.3.5105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51d798f749 code=0x7ffc0000 [ 1103.852637][ T30] audit: type=1326 audit(1765361937.363:1859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22177 comm="syz.3.5105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f51d798f749 code=0x7ffc0000 [ 1103.942986][T22194] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5107'. [ 1105.008156][T22200] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5110'. [ 1105.017235][T22200] openvswitch: netlink: Key type 796 is out of range max 32 [ 1105.179409][T22206] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5110'. [ 1211.143583][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 1211.150555][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P22211/1:b..l P12/1:b..l [ 1211.160014][ C1] rcu: (detected by 1, t=10502 jiffies, g=106261, q=629 ncpus=2) [ 1211.167802][ C1] task:kworker/u8:0 state:R running task stack:21144 pid:12 tgid:12 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 1211.182546][ C1] Workqueue: bat_events batadv_iv_send_outstanding_bat_ogm_packet [ 1211.190357][ C1] Call Trace: [ 1211.193625][ C1] [ 1211.196550][ C1] __schedule+0x14bc/0x5000 [ 1211.201054][ C1] ? __pfx___schedule+0x10/0x10 [ 1211.205884][ C1] ? do_raw_spin_lock+0x121/0x290 [ 1211.210892][ C1] ? preempt_schedule_irq+0xaa/0x150 [ 1211.216163][ C1] preempt_schedule_irq+0xb5/0x150 [ 1211.221247][ C1] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 1211.226947][ C1] ? rcu_irq_exit_check_preempt+0xdf/0x210 [ 1211.232758][ C1] irqentry_exit+0x5d8/0x660 [ 1211.237330][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1211.243285][ C1] RIP: 0010:lock_acquire+0x16c/0x340 [ 1211.248546][ C1] Code: 00 00 00 00 9c 8f 44 24 30 f7 44 24 30 00 02 00 00 0f 85 cd 00 00 00 f7 44 24 08 00 02 00 00 74 01 fb 65 48 8b 05 94 41 e0 10 <48> 3b 44 24 58 0f 85 e5 00 00 00 48 83 c4 60 5b 41 5c 41 5d 41 5e [ 1211.268131][ C1] RSP: 0018:ffffc900001174d8 EFLAGS: 00000206 [ 1211.274174][ C1] RAX: 3416a27d754ecc00 RBX: 0000000000000000 RCX: 3416a27d754ecc00 [ 1211.282120][ C1] RDX: 00000000ed16361f RSI: ffffffff8d97865c RDI: ffffffff8bc07c60 [ 1211.290064][ C1] RBP: ffffffff81743f85 R08: ffffffff81743f85 R09: ffffffff8df41a60 [ 1211.298013][ C1] R10: ffffc90000117698 R11: ffffffff81ada810 R12: 0000000000000002 [ 1211.305964][ C1] R13: ffffffff8df41a60 R14: 0000000000000000 R15: 0000000000000246 [ 1211.313915][ C1] ? unwind_next_frame+0xa5/0x2390 [ 1211.319004][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1211.325146][ C1] ? unwind_next_frame+0xa5/0x2390 [ 1211.330266][ C1] ? unwind_next_frame+0xa5/0x2390 [ 1211.335355][ C1] ? kasan_save_track+0x3e/0x80 [ 1211.340185][ C1] ? unwind_next_frame+0xa5/0x2390 [ 1211.345270][ C1] unwind_next_frame+0xc2/0x2390 [ 1211.350190][ C1] ? unwind_next_frame+0xa5/0x2390 [ 1211.355278][ C1] ? unwind_next_frame+0xa5/0x2390 [ 1211.360368][ C1] ? stack_trace_save+0x9c/0xe0 [ 1211.365194][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1211.371322][ C1] arch_stack_walk+0x11c/0x150 [ 1211.376089][ C1] ? kasan_save_track+0x3e/0x80 [ 1211.380917][ C1] stack_trace_save+0x9c/0xe0 [ 1211.385569][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 1211.390920][ C1] kasan_save_track+0x3e/0x80 [ 1211.395571][ C1] ? kasan_save_track+0x3e/0x80 [ 1211.400422][ C1] kasan_save_free_info+0x46/0x50 [ 1211.405425][ C1] __kasan_slab_free+0x5c/0x80 [ 1211.410161][ C1] kmem_cache_free+0x197/0x620 [ 1211.414899][ C1] ? batadv_forw_packet_free+0x65/0x1f0 [ 1211.420423][ C1] batadv_forw_packet_free+0x65/0x1f0 [ 1211.425770][ C1] ? process_one_work+0x868/0x15a0 [ 1211.430869][ C1] process_one_work+0x93a/0x15a0 [ 1211.435796][ C1] ? __pfx_process_one_work+0x10/0x10 [ 1211.441147][ C1] ? assign_work+0x3c7/0x5b0 [ 1211.445717][ C1] worker_thread+0x9b0/0xee0 [ 1211.450294][ C1] kthread+0x711/0x8a0 [ 1211.454341][ C1] ? __pfx_worker_thread+0x10/0x10 [ 1211.459430][ C1] ? __pfx_kthread+0x10/0x10 [ 1211.463998][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 1211.469174][ C1] ? lockdep_hardirqs_on+0x98/0x140 [ 1211.474345][ C1] ? __pfx_kthread+0x10/0x10 [ 1211.478915][ C1] ret_from_fork+0x599/0xb30 [ 1211.483482][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 1211.488574][ C1] ? __switch_to_asm+0x39/0x70 [ 1211.493344][ C1] ? __switch_to_asm+0x33/0x70 [ 1211.498088][ C1] ? __pfx_kthread+0x10/0x10 [ 1211.502658][ C1] ret_from_fork_asm+0x1a/0x30 [ 1211.507407][ C1] [ 1211.510406][ C1] task:modprobe state:R running task stack:24312 pid:22211 tgid:22211 ppid:4243 task_flags:0x40000c flags:0x00080001 [ 1211.523849][ C1] Call Trace: [ 1211.527371][ C1] [ 1211.530287][ C1] __schedule+0x14bc/0x5000 [ 1211.534790][ C1] ? __lock_acquire+0x6b6/0x2cf0 [ 1211.539703][ C1] ? __pfx___schedule+0x10/0x10 [ 1211.544535][ C1] ? __lock_acquire+0x6b6/0x2cf0 [ 1211.549454][ C1] ? preempt_schedule_irq+0xaa/0x150 [ 1211.554715][ C1] preempt_schedule_irq+0xb5/0x150 [ 1211.559801][ C1] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 1211.565499][ C1] ? rcu_irq_exit_check_preempt+0xdf/0x210 [ 1211.571281][ C1] irqentry_exit+0x5d8/0x660 [ 1211.575845][ C1] ? rcu_is_watching+0x15/0xb0 [ 1211.580586][ C1] asm_sysvec_reschedule_ipi+0x1a/0x20 [ 1211.586018][ C1] RIP: 0010:rcu_is_watching+0x0/0xb0 [ 1211.591279][ C1] Code: c7 c7 a0 69 f4 8d e8 cf 09 20 03 eb cc 66 66 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1e fa 41 57 41 56 53 65 ff 05 d0 1d d7 10 e8 5b 0b b4 09 89 [ 1211.610858][ C1] RSP: 0018:ffffc90004d5f868 EFLAGS: 00000202 [ 1211.616903][ C1] RAX: ffffffff81d0f47e RBX: 0000000000000000 RCX: 0000000000000000 [ 1211.624852][ C1] RDX: ffff888026d83d00 RSI: 0000000000000001 RDI: 0000000000000000 [ 1211.632801][ C1] RBP: 0000000000000001 R08: ffffffff81d0f2a6 R09: ffffffff8df41a60 [ 1211.640751][ C1] R10: ffffc90004d5f958 R11: ffffffff81ada810 R12: 00000000000014f6 [ 1211.648701][ C1] R13: dffffc0000000000 R14: 00007fd7780e66c5 R15: 0000000000000000 [ 1211.656656][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1211.662787][ C1] ? is_bpf_text_address+0x26/0x2b0 [ 1211.667958][ C1] ? is_bpf_text_address+0x1fe/0x2b0 [ 1211.673221][ C1] is_bpf_text_address+0x207/0x2b0 [ 1211.678308][ C1] ? is_bpf_text_address+0x26/0x2b0 [ 1211.683481][ C1] kernel_text_address+0xa5/0xe0 [ 1211.688397][ C1] __kernel_text_address+0xd/0x40 [ 1211.693399][ C1] unwind_get_return_address+0x4d/0x90 [ 1211.698836][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1211.704964][ C1] arch_stack_walk+0xfc/0x150 [ 1211.709623][ C1] stack_trace_save+0x9c/0xe0 [ 1211.714272][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 1211.719622][ C1] ? __lock_acquire+0x6b6/0x2cf0 [ 1211.724536][ C1] kasan_save_track+0x3e/0x80 [ 1211.729191][ C1] ? kasan_save_track+0x3e/0x80 [ 1211.734018][ C1] ? kasan_save_free_info+0x46/0x50 [ 1211.739216][ C1] ? __kasan_slab_free+0x5c/0x80 [ 1211.744137][ C1] ? kmem_cache_free+0x197/0x620 [ 1211.749052][ C1] ? do_exit+0x67f/0x2310 [ 1211.753359][ C1] ? do_group_exit+0x21c/0x2d0 [ 1211.758098][ C1] ? __x64_sys_exit_group+0x3f/0x40 [ 1211.763272][ C1] ? x64_sys_call+0x2210/0x2210 [ 1211.768099][ C1] ? do_syscall_64+0xfa/0xf80 [ 1211.772749][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1211.778818][ C1] kasan_save_free_info+0x46/0x50 [ 1211.783823][ C1] __kasan_slab_free+0x5c/0x80 [ 1211.788563][ C1] kmem_cache_free+0x197/0x620 [ 1211.793303][ C1] ? do_exit+0x67f/0x2310 [ 1211.797613][ C1] do_exit+0x67f/0x2310 [ 1211.801752][ C1] ? __pfx_do_exit+0x10/0x10 [ 1211.806325][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 1211.811516][ C1] ? lockdep_hardirqs_on+0x98/0x140 [ 1211.816687][ C1] do_group_exit+0x21c/0x2d0 [ 1211.821258][ C1] __x64_sys_exit_group+0x3f/0x40 [ 1211.826260][ C1] x64_sys_call+0x2210/0x2210 [ 1211.830917][ C1] do_syscall_64+0xfa/0xf80 [ 1211.835396][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1211.841453][ C1] ? clear_bhb_loop+0x60/0xb0 [ 1211.846111][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1211.851980][ C1] RIP: 0033:0x7fd7780e66c5 [ 1211.856370][ C1] RSP: 002b:00007ffce4847d78 EFLAGS: 00000206 ORIG_RAX: 00000000000000e7 [ 1211.864760][ C1] RAX: ffffffffffffffda RBX: 00007fd7781e7fe8 RCX: 00007fd7780e66c5 [ 1211.872705][ C1] RDX: 00000000000000e7 RSI: ffffffffffffff88 RDI: 0000000000000001 [ 1211.880654][ C1] RBP: 0000000000000001 R08: 00007ffce4847d08 R09: 0000000000000000 [ 1211.888605][ C1] R10: 00007ffce4847ba0 R11: 0000000000000206 R12: 0000000000000000 [ 1211.896553][ C1] R13: 0000000000000001 R14: 00007fd7781e6680 R15: 00007fd7781e8000 [ 1211.904511][ C1] [ 1211.907508][ C1] rcu: rcu_preempt kthread starved for 10577 jiffies! g106261 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 1211.918760][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 1211.928704][ C1] rcu: RCU grace-period kthread stack dump: [ 1211.934569][ C1] task:rcu_preempt state:R running task stack:27600 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 1211.948019][ C1] Call Trace: [ 1211.951281][ C1] [ 1211.954196][ C1] __schedule+0x14bc/0x5000 [ 1211.958692][ C1] ? lockdep_hardirqs_on+0x98/0x140 [ 1211.963867][ C1] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 1211.969737][ C1] ? __pfx___schedule+0x10/0x10 [ 1211.974574][ C1] ? schedule+0x91/0x360 [ 1211.978795][ C1] schedule+0x165/0x360 [ 1211.982929][ C1] schedule_timeout+0x12b/0x270 [ 1211.987756][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 1211.993104][ C1] ? __pfx_process_timeout+0x10/0x10 [ 1211.998370][ C1] ? prepare_to_swait_event+0x341/0x380 [ 1212.003899][ C1] rcu_gp_fqs_loop+0x301/0x1540 [ 1212.008731][ C1] ? __pfx_rcu_gp_init+0x10/0x10 [ 1212.013644][ C1] ? lockdep_hardirqs_on+0x98/0x140 [ 1212.018837][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 1212.024096][ C1] ? _raw_spin_unlock_irq+0x2e/0x50 [ 1212.029274][ C1] ? finish_swait+0xcd/0x1f0 [ 1212.033841][ C1] rcu_gp_kthread+0x99/0x390 [ 1212.038410][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1212.043589][ C1] ? __kthread_parkme+0x7b/0x200 [ 1212.048523][ C1] ? __kthread_parkme+0x1a1/0x200 [ 1212.053529][ C1] kthread+0x711/0x8a0 [ 1212.057582][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1212.062756][ C1] ? __pfx_kthread+0x10/0x10 [ 1212.067327][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 1212.072503][ C1] ? lockdep_hardirqs_on+0x98/0x140 [ 1212.077682][ C1] ? __pfx_kthread+0x10/0x10 [ 1212.082249][ C1] ret_from_fork+0x599/0xb30 [ 1212.086815][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 1212.091914][ C1] ? __switch_to_asm+0x39/0x70 [ 1212.096654][ C1] ? __switch_to_asm+0x33/0x70 [ 1212.101394][ C1] ? __pfx_kthread+0x10/0x10 [ 1212.105969][ C1] ret_from_fork_asm+0x1a/0x30 [ 1212.110721][ C1] [ 1212.113717][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 1212.120012][ C1] Sending NMI from CPU 1 to CPUs 0: [ 1212.125200][ C0] NMI backtrace for cpu 0 [ 1212.125216][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Tainted: G L syzkaller #0 PREEMPT(full) [ 1212.125237][ C0] Tainted: [L]=SOFTLOCKUP [ 1212.125244][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1212.125254][ C0] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 1212.125272][ C0] Code: 13 ee 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 73 c0 0c 00 f3 0f 1e fa fb f4 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 1212.125296][ C0] RSP: 0018:ffffffff8dc07d80 EFLAGS: 000002c6 [ 1212.125311][ C0] RAX: 8b22de2fad317400 RBX: ffffffff8197971a RCX: 8b22de2fad317400 [ 1212.125323][ C0] RDX: 0000000000000001 RSI: ffffffff8d791c9e RDI: ffffffff8bc07c60 [ 1212.125334][ C0] RBP: ffffffff8dc07ea8 R08: ffff8880b86336db R09: 1ffff110170c66db [ 1212.125346][ C0] R10: dffffc0000000000 R11: ffffed10170c66dc R12: ffffffff8f820770 [ 1212.125358][ C0] R13: 1ffffffff1b92a68 R14: 0000000000000000 R15: 0000000000000000 [ 1212.125369][ C0] FS: 0000000000000000(0000) GS:ffff888125e34000(0000) knlGS:0000000000000000 [ 1212.125382][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1212.125394][ C0] CR2: 0000000000000002 CR3: 000000000dd3a000 CR4: 00000000003526f0 [ 1212.125407][ C0] Call Trace: [ 1212.125415][ C0] [ 1212.125421][ C0] default_idle+0x13/0x20 [ 1212.125438][ C0] default_idle_call+0x73/0xb0 [ 1212.125455][ C0] do_idle+0x1ea/0x520 [ 1212.125473][ C0] ? irqentry_exit+0x5ba/0x660 [ 1212.125490][ C0] ? __pfx_do_idle+0x10/0x10 [ 1212.125514][ C0] cpu_startup_entry+0x44/0x60 [ 1212.125531][ C0] rest_init+0x2de/0x300 [ 1212.125551][ C0] start_kernel+0x3a7/0x400 [ 1212.125579][ C0] x86_64_start_reservations+0x24/0x30 [ 1212.125596][ C0] x86_64_start_kernel+0x143/0x1c0 [ 1212.125613][ C0] common_startup_64+0x13e/0x147 [ 1212.125640][ C0]