last executing test programs: 14.855785432s ago: executing program 5 (id=3518): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'syzkaller0\x00', @random="0100003600"}) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x1e}, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {0x4000000000000000, 0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x4, 0xfffffffffffffffe}, {}, 0x0, 0x6e6bb9, 0x1}, {{@in=@remote, 0xfffffffc, 0x32}, 0x0, @in=@empty, 0x0, 0x0, 0x2, 0x7, 0x200}}, 0xe8) sendmmsg(r1, &(0x7f0000000380), 0x2e9, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a3100000000090003007379"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r2, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)=@newsa={0x138, 0x16, 0x633, 0x0, 0x7fffffff, {{@in6=@private1, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0xa}, {@in=@remote, 0x4d2, 0x32}, @in6=@empty, {}, {0x5, 0x3, 0x0, 0x5}, {0x4}, 0x2, 0x2, 0xa, 0x4, 0x18}, [@algo_crypt={0x48, 0x2, {{'lrw-serpent-avx2\x00'}}}]}, 0x138}}, 0x0) 13.123704379s ago: executing program 5 (id=3527): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_ASSOCIATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)=ANY=[@ANYBLOB='@\x00\x00', @ANYRES16=r1, @ANYBLOB="01002abd7000fddbdf252600000008000300", @ANYRES32=r2, @ANYBLOB='\n\x004'], 0x40}}, 0xc00) 12.911745099s ago: executing program 5 (id=3530): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000940)={{r0, 0xffffffffffffffff}, &(0x7f0000000980), &(0x7f00000009c0)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x15, &(0x7f0000000ac0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffff7}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x54b2ac04}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000bc0)={r3}, 0xc) 12.59159445s ago: executing program 5 (id=3533): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x3, 0xc, &(0x7f0000000a80)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000110b0008850000000500000095"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sched_cls=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b40)={r0, 0x0, 0xd, 0x0, &(0x7f0000000bc0)="dc188619b95d02ff4284860188", 0x0, 0x8001ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 11.621698812s ago: executing program 5 (id=3536): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000001435010026bd0c333c84df250a4022fe", @ANYRES32, @ANYBLOB="140006"], 0x40}, 0x1, 0x0, 0x0, 0x811}, 0x40810) r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000001400090527bd7000fddbdf25021f80cb", @ANYRES32, @ANYBLOB="0800040064010100080008000400000008000200e000000208"], 0x48}, 0x1, 0x0, 0x0, 0x4040014}, 0x80) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="1800"], 0x18}}, 0x0) sendto$inet6(r0, &(0x7f0000000000)='s', 0x10a18, 0x800, 0x0, 0x4b6ae4f95a5de35b) 11.390949577s ago: executing program 5 (id=3538): socket$inet6_sctp(0xa, 0x5, 0x84) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000015c0)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001640)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}, {0xfff1, 0xfff1}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x3, 0x0) sendmsg$nl_route_sched(r3, 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002ec0)='cgroup.controllers\x00', 0x275a, 0x0) socket$xdp(0x2c, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002f00)) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000002f40)={0x0, 0x0, &(0x7f0000002f80)={&(0x7f0000002fc0)=ANY=[@ANYBLOB, @ANYRES32=r5, @ANYBLOB="06001500070000000c00168008000100", @ANYRES64=r4], 0x38}, 0x1, 0x0, 0x0, 0x4080}, 0x10) 8.465694188s ago: executing program 3 (id=3558): r0 = syz_usb_connect(0x0, 0x24, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000340)=[{{&(0x7f0000000900)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000980)=[{&(0x7f00000009c0)="d9ff3c4ae71cd8e0c2f9dae2ee2a68355807299daa97bc2784dbfc8692de61162eea3957", 0x24}], 0x1, 0x0, 0x0, 0x20008000}}], 0x1, 0x8020) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_connect$printer(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x3f0, 0x4, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x6, 0x80, 0x8, "", [{{0x9, 0x4, 0x0, 0xc9, 0x1, 0x7, 0x1, 0x1, 0x3, "", {{{0x9, 0x5, 0x1, 0x2, 0x8, 0x2, 0xa, 0x7f}}, [{{0x9, 0x5, 0x82, 0x2, 0x20, 0x0, 0x1, 0x2}}]}}}]}}]}}, 0x0) 7.840204209s ago: executing program 0 (id=3562): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x20c400, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000380)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, 0x0) 7.21230615s ago: executing program 1 (id=3564): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x3, 0x10, &(0x7f0000000400)=@framed={{0x18, 0x6, 0x0, 0x0, 0x40000}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {}, {0x7, 0x0, 0xb, 0x7}}, @printk]}, &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x8, &(0x7f0000000580)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}]}, &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) 7.031089976s ago: executing program 1 (id=3565): r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010601bc3bd020402012c651e50102"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xc4b2}}, 0x0, 0x0}, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) 6.824198552s ago: executing program 3 (id=3566): syz_usb_connect(0x1, 0x24, &(0x7f0000000580)=ANY=[@ANYBLOB="12011003ece472087d077a6210001704c0e30904250700039ca709d0cc6b0dbc109723708fceef235853c8792593080836d8cbb91e3cf963b41fdc7bf1d7ed3542ef706d94eda4ce5895e1d09efba22442e63343b8213ecae94dfea423d3828af8cdf36481173e65b60ad8865bd0050000007790dcb2990d98b282bed7812713"], 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x41, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000100)={0xf642, 0x20, 0x6, 0x9dfe, 0x11}) write$binfmt_aout(r0, &(0x7f0000000380)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000680)={0x0, 0x0, 0xfffffff9, 0x6, 0x16, "0062007d8200f7ffffff00"}) r1 = syz_open_pts(r0, 0x20000) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f00000006c0)=0x17) 6.265748817s ago: executing program 2 (id=3568): socket(0x10, 0x3, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r1) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x2) sendmsg$SMC_PNETID_GET(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYRES32=r5, @ANYBLOB="01f5050000000000300012800b00010067656e6576650000200002800500040001000000140007"], 0x50}, 0x1, 0x0, 0x0, 0x11}, 0x40004) sendmmsg$inet(r0, &(0x7f0000000280)=[{{&(0x7f00000002c0)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000300)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880) 6.007586091s ago: executing program 0 (id=3569): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYBLOB="0500ffdf0000020000004400000008000300", @ANYRES32=r1, @ANYBLOB="4c0023800500130000000000060016000400000005000e000200000008001a000200000005001e0001000000050005000e00000006001900090000000800150016"], 0x68}}, 0x0) 5.962170576s ago: executing program 2 (id=3570): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r1, 0x0, 0x48001) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xc, 0xe, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='syzkaller\x00'}, 0x94) ioctl$FS_IOC_GETFSUUID(r2, 0x80111500, 0x0) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x288}, 0x1, 0x0, 0x0, 0x800}, 0x0) 5.793303279s ago: executing program 0 (id=3571): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000080)={0x1d, r2, 0x0, {0x2, 0xf0, 0x4}}, 0x18) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f00000000c0)=0x1, 0x4) sendmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000002c0)="050000eb3a49a8", 0x7}], 0x1}}], 0x1, 0x4000041) setsockopt$SO_J1939_FILTER(r1, 0x6b, 0x1, &(0x7f0000000300)=[{0x4, 0x3, {0x0, 0x62da12a15307ded4}, {0x1, 0x1}, 0xfe, 0x2}], 0x20) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=@newtfilter={0x24, 0x11, 0x1, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x74, r2, {0xffff, 0xe}, {0xf, 0xa}, {0x1}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x2004c016}, 0x20000050) 5.428231086s ago: executing program 2 (id=3572): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) prctl$PR_SET_NO_NEW_PRIVS(0x41, 0x1) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000001, 0x401d132, 0xffffffffffffffff, 0x0) unshare(0x2c020400) syz_open_dev$loop(&(0x7f00000000c0), 0x4, 0xc0981) syz_open_dev$dvb_frontend(0x0, 0x0, 0x882) syz_open_dev$vim2m(&(0x7f0000000100), 0x7fff, 0x2) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, 0x0, 0x2002c094) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040000}, 0x0) ioctl$vim2m_VIDIOC_G_FMT(0xffffffffffffffff, 0xc0285628, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000340)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) syz_clone(0x0, &(0x7f0000000380), 0x0, 0x0, 0x0, 0x0) syz_usb_connect$uac1(0x5, 0x81, &(0x7f0000000500)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0x763, 0x2001, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6f, 0x3, 0x1, 0x3, 0x0, 0x5, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x0, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x1, 0x2, 0x6, 0x7}, @as_header={0x7, 0x24, 0x1, 0x6, 0x6, 0x1002}]}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0x2, 0xfc, 0xa, {0x7, 0x25, 0x1, 0x0, 0xe, 0x6}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x1, 0xbf, 0x8, {0x7, 0x25, 0x1, 0x8, 0x5, 0x6}}}}}}}}]}}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000005c0), r0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='blkio.bfq.dequeue\x00', 0x26e1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x8, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="180200000000000000000000000000006a0000005600000095"], 0x0, 0x4}, 0x94) close(r1) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000740)) ioctl$SIOCSIFHWADDR(r1, 0x8b19, &(0x7f0000000780)={'wlan0\x00', @random="7cf1e97c9e4f"}) fstat(r0, &(0x7f00000007c0)) 3.988457006s ago: executing program 4 (id=3575): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000004c0)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000500)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="034888a80100000000001400"], 0xfdef) 3.747666562s ago: executing program 1 (id=3576): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x3, 0x10, &(0x7f0000000400)=@framed={{0x18, 0x6, 0x0, 0x0, 0x40000}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {}, {0x7, 0x0, 0xb, 0x7}}, @printk]}, &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x8, &(0x7f0000000580)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}]}, &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{r0}, 0x0, &(0x7f00000006c0)=r1}, 0x20) 3.677839323s ago: executing program 0 (id=3577): connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4e20, 0xa8000000, @dev={0xfe, 0x80, '\x00', 0x43}, 0x1}, 0x1c) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x300000c, 0x204031, 0xffffffffffffffff, 0xffffd000) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x9, &(0x7f0000000040)=0x4, 0x4) 3.496721593s ago: executing program 3 (id=3578): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000001c0)={'syzkaller0\x00', 0x1}) write$tun(r0, &(0x7f0000000480)=ANY=[], 0xfdef) 3.253335624s ago: executing program 1 (id=3579): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {0xa}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x9}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}, 0x1, 0x0, 0x0, 0x20044000}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="640000000906010800000000000000000600000505000100070000003c0007801800148014000240fc0000000000000000000000000000011800018014000240ff01000000000000000000000000000105000300070000000900020073797a31"], 0x64}}, 0x4800) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r1, &(0x7f0000002f80)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000002f40)={&(0x7f0000002f00)={0x3c, 0x0, 0x2, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x6, 0x11}}}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "bb369fbe0c50474f2b768e279360f359"}]}, 0x3c}, 0x1, 0x0, 0x0, 0x880}, 0x20000000) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000002840)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xffff}, 0x50) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000002c40)=ANY=[@ANYBLOB="5c000000020603000000000000000000ffea000005000100070000000900020073797a300000000014000780080012401b0000000800084000000000050005000000001005000400000000000d000300686173683a6d6163"], 0x5c}}, 0x0) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000028c0)={&(0x7f0000002900)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002940)={0x11, 0x3, &(0x7f0000002a00)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000002a40)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r6, 0x8, &(0x7f0000002a80)={0x0, 0x1}, 0x1}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000002ac0)=@bpf_ext={0x1a, 0xf, &(0x7f0000002b80)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8792}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x85, 0x0, 0x0, 0xb7}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000002c00)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x3a, r6, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r7, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000040601010000000000000000010000050500010007000000e5b8313d5168e287ff1474249a839e2d448342e6f1b190e88642acafdf1e0b482d4031be5ba7b48c2df454732c7158846ade9a8697c7dd58fe112439f86b13bf31e6b92965c439518c9c34eb0ed885f5a1a22788ab0bca77bcc3f8218fef39d0714a79c0303981e91eaff47db43139cb57971fbd7d07"], 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0xc40) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r9, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x70bd28, 0x25dfdbfc, {0x2, 0x20, 0x11, 0xc8, r9}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}, 0x1, 0x0, 0x0, 0x823be637d8173150}, 0x40000c0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=@newlink={0x40, 0x10, 0x503, 0x70bd2a, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2886}, [@IFLA_PHYS_SWITCH_ID={0x17, 0x24, "ccc0feb92c1e993b943f4efd4b367f1d05e5c5"}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x40}}, 0x2400c000) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000002cc0)=@base={0xf, 0x4, 0x4, 0x4, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000002d40)={0x10, 0x2, &(0x7f0000002e00)=@raw=[@generic={0x85, 0x0, 0x0, 0x0, 0x5}, @generic={0x95, 0x0, 0x0, 0x4}], &(0x7f0000002e40)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sk_msg=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000002e80)={@map=r10, r11, 0x7, 0x0, 0x0, @void, @value=0x0}, 0x20) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000009c0)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000020c0)) sendmmsg(r0, &(0x7f0000002740)=[{{&(0x7f00000004c0)=@alg={0x26, 'aead\x00', 0x0, 0x0, 'morus1280\x00'}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000680)="bf5cba09b384ed5e2dae7e9cc840375198f488ba8c26d4f62063f9f79a5d558fe18e0c7f495e3c08be2cb129ed32506de56e9489b39f4cec3c43d4fe0cb30eaef987b50207df1653acecf7b10abb3fdd756b111424eec36c9f0535a6f6450610f0888194825b5a400c482a08f76b700581179792288233fe5226fc6cb5927678544658aadcc544a1e2fe99be4bcbca", 0x8f}, {&(0x7f0000000740)="97235b1b4b9e486f22f63d1bfd3b18b53b4ba4020a69250098f455dadbb9a1fe27e412ada2ef0b30e5f1191e4d84c3d3f28db2ce129084f3a1d961968df0a10fab4b22ae9ff1eccc1872b2f6dbbfb68e794436f2b12e7fd853bfd7151655e2f85d3d11bc066e71a707100d237d831150d6181cfa3bd98ebb7ed8018fcbde78bf92aaacb6397a", 0x86}, {&(0x7f0000000800)="c78696d13e52a6dffcfe52972c7c54f938ff7f5420a2da31fe180e9ea807c136965fc0fc19f5d84f15a162b1d79ed5d0cab6662f1a55440d654cd209", 0x3c}], 0x3, &(0x7f0000000880)=[{0x50, 0x10d, 0xd, "81e8d27bb0f66ec296b5c80dc876e918296c1ae72a90eaceca126574170776e362c993b8362d62770791d009eb67bc1caf2a75fb2890175c00"}, {0x68, 0x108, 0x3, "8589e6ca740c1f71bd1373d0e2e895bdd7736f057856a3aab426b80db63aee50d5cef52660d6fcb761a30a386b706e757ce5c927bc3ab8489a489aba2116ef6ade1f93b1cfa1c305b7dbea76a2d1f2f879009e9c"}, {0x58, 0x110, 0x5, "ce8736f66c94497ba42fb584b1ae88ad3819dc81eff0ec2bd8f319b659951fdf68e7dbddc4c45e96e2d5f3fd3a4f8809378246348a75b13f411214af3d76940a50d4f910ab59"}], 0x110}}, {{&(0x7f0000000a00)=@nfc={0x27, r12, 0x1, 0x5}, 0x80, &(0x7f0000002000)=[{&(0x7f0000000a80)="2fa14bcc724b53c3527844d5", 0xc}, {&(0x7f0000000ac0)="2620e798cb1117c33b3bb080fafecaa7c2cf9f0d67b642e071250019850bf247d2705b176cac324b573a756f906bfa440d867adc892c802bd084fda8f25196ce2a22f4dee7df6adb767ed7ba42474e3b41b58d154d4284879dd92a430f0c7fd07c0d536c0e3a3094f2442d3edfbda3b606c05e5e8dd45cafae0aba7840027fec800cf6f2906e557977631a31d6251bcfd5b552fe6d28108be2cd3f772142377fc018322cbab5e2857edccce89e64d8083511cc34004e8fbaa01e4c704e37342d01b7880fd6060c9f8b0622397052c1fa7d037bf7", 0xd4}, {&(0x7f0000000bc0)="cfd6fa4e4764fefd95b0cb97d576265ed3725d6dae09bbfa7623b480a155", 0x1e}, {&(0x7f0000000c00)="383d1db4ac2bcf9a9239acf6450472caa8e4f55375d4a52073ce28a9ce6170d8bf543188d00f9f2d589a6e74dd326da90f8b7b4426ea58c5513cf8e34b9374acc12ee08b2a64a333c6f559f58c809a43c2864c0b70693aaef7973cdc0977ca39a689e34bd14abd319e0b48454b7ba5fc8f2fa9332e77c89c7fa6824e959e528d94f6c384133507bd91dc14e4e7739ed1bbce7c", 0x93}, {&(0x7f0000000cc0)="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", 0x1000}, {&(0x7f0000001cc0)="94b5440a9aa23ab36169e9eb4395adba6b87bc2ae1562f9828e0b499acaaf8efe8c3daa5e1d6b533707dd4b061eac4b243071b3c58630555bf665a73c16ec813a61747370975764240acf647469b372815a03fee592ab3ad574ee00dc13c05cbd7763e78816cee066894ce221bb891c220419714b3ebe0a8d68d54c83301abc13f62ed277211e3b49136e69f5f6ebff7281f39861e1189cd8756f6013a5e764a5c02a8258e434901234160d1", 0xac}, {&(0x7f0000001d80)="7c591be97000965db9acc98035853b46e3b960630b1f72b4ea85444590fee7ef0460e6c2125f393f086041f649be91f624dcb9dbcf7710f6a36e067afe02ea69e2d1d64f450212dbf9968bbe2d3afd6c61656632f24306ed30e90d91b176168cc404cf7852322ea9dd1c42095acb7d81c3183d86dd84d3eedef1b93400d9faa1ce6c435b9b73", 0x86}, {&(0x7f0000001e40)="2a81aaa96d567e01df66a0155df78779d3913abbc88ffcfd29183f689b8d0c6a177292855f9db991855e4994cfe1b8369828dca34b3106a1044bf26a757b2debda3c27dc77265e2b4245b2ca9236b91a4a24a5278b87519a809a84cd1d5e54c26b57c41c54e2c46f15a01c4e79d7a53440e05e21454f18fc4a3cb7817880f33d2282d128bef17bcea00e0c990adf2867abaae153fc654250a0067411024f2f0000000000000000eb5aeab97416b6ffb919816aa809e2c752044bb4d2de7490eee55791ad802f94db211eb1d457953c4f409f031fddc5195478b6c110bc9b59eb5b5ba15facac105e025013a861d258", 0xef}, {&(0x7f0000001f40)="82357bf8a672ce32a3e3128684d7bd6bc44cc006a8002849ce74df7957f1b27c74c5cedfe2bfbe11ebc9e835076067ec726c59f13c91b36d23d90ad5416ed3015dd51b0c58251941892beafe79e1164cc1884e4420ee65def0d3402aaf9e68afec88c63cd9a1335e810b2e978b7881a5976795549bf8b2c8d18e4393a1946f629e0bb88c0bda0f558e75792c84fd8321ed1f5e4a1aef7288b4", 0x99}], 0x9}}, {{&(0x7f0000002100)=@qipcrtr={0x2a, 0x3, 0x1}, 0x80, &(0x7f00000023c0)=[{&(0x7f0000002180)="829583ef3b1ababb0a9471d8869f8387100f83a507802d2454ac7043162875b42f4528a59607aceef60b8eb16ab54ee819c0d5895b2368d3b5dcc2e0837086de30a1eb9f469bb17045c56272e2a1dab888f2e341c6711c832caa011af30829f2dd386ac73729e87ad6778ed086ba73ed7d71a9aec23a414725f0042ecfd566f06df99ee982e6b640612cc05507b4b35eb1dd5b28539ccf7162a01f0dfed9dd6a9b4a4c9b83ef128c32c0796414d41ad91f13585adf453db808d374df02b5115e", 0xc0}, {&(0x7f0000002240)="60f79252c510f1306d1c50feb80701e7fea9721e903959e95d5631621d255fc4395064eb1e3b65f329b51b516198f8ce1b133e7bf6e0c303b5f63e05d1239b27fe9ca642a71b375c4b4677a86f1747b2d8d10089d05b27e3eab02cd4c4676e30", 0x60}, {&(0x7f00000022c0)="7c77600c2ee8c30a65ab339378434c11d54cfd02a49990931dfa93fb14d1ee", 0x1f}, {&(0x7f0000002300)="da29edc430b2bc36c3", 0x9}, {&(0x7f0000002340)="63d9870b5bff397929e15bf33af39bed248ec321cee07de08e84f70e496fe5ebf7cb040a98874be665c30ab38c81918734dc8eb9fde601c1ca29c1c24c0e584b959344b89074", 0x46}], 0x5, &(0x7f0000002440)=[{0x20, 0x10e, 0x4, "9ea40583319383b09ad660960ca12c"}, {0xa8, 0x11, 0x8001, "d82739c104fbc9f39c5c150915794b7c28b9523323053333cb3b435dbed2b964d7020a019737d2c284d45bd0137969e7e8137d715350fd2b39345464bab91085819557ece0ae5562ce314d81b78676bb03bc52389ef470edc69fdfe70b17d2b6526b64dcdb9925ea9c5c17352958e6558e8f130f0fefff15451d4e4a663789daee4d374bade68520c32984179212fa0510687815"}], 0xc8}}, {{&(0x7f0000002540)=@phonet={0x23, 0xe, 0x0, 0xc}, 0x80, &(0x7f00000025c0), 0x0, &(0x7f0000002fc0)=ANY=[@ANYBLOB="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"/446], 0x140}}], 0x4, 0x0) 3.253134927s ago: executing program 0 (id=3580): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x101b43, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x4) 2.92262459s ago: executing program 2 (id=3581): socket(0x10, 0x3, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r1) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x2) sendmsg$SMC_PNETID_GET(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES32=r5, @ANYBLOB="01f5050000000000300012800b00010067656e6576650000200002800500040001000000140007"], 0x50}, 0x1, 0x0, 0x0, 0x11}, 0x40004) sendmmsg$inet(r0, &(0x7f0000000280)=[{{&(0x7f00000002c0)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000300)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880) 2.593871641s ago: executing program 3 (id=3582): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYBLOB="0500ffdf0000020000004400000008000300", @ANYRES32=r1, @ANYBLOB="4c0023800500130000000000060016000400000005000e000200000008001a000200000005001e0001000000050005000e00000006001900090000000800150016"], 0x68}}, 0x0) 2.490493257s ago: executing program 2 (id=3583): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r1, 0x0, 0x48001) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xc, 0xe, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='syzkaller\x00'}, 0x94) ioctl$FS_IOC_GETFSUUID(r2, 0x80111500, 0x0) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x288}, 0x1, 0x0, 0x0, 0x800}, 0x0) 2.461661475s ago: executing program 1 (id=3584): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x82c03, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000004c0)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) close(r1) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000540)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40004}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000640)={'syzkaller0\x00', @multicast}) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000680)={'syzkaller0\x00', 0x0}) r6 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000002140)=@newtfilter={0xb4c, 0x2c, 0xd3f, 0x10bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xc, 0xfff3}, {}, {0x8, 0x7}}, [@filter_kind_options=@f_basic={{0xa}, {0xb1c, 0x2, [@TCA_BASIC_ACT={0x70, 0x3, [@m_connmark={0x6c, 0x1, 0x0, 0x0, {{0xd}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xffffc700, 0x3, 0x6, 0xf16, 0x3}, 0x3f82}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x2, 0x0, 0x3, 0x4, 0x40}, 0x1000}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}, @TCA_BASIC_CLASSID={0x8, 0x1, {0x3, 0x9}}, @TCA_BASIC_ACT={0xaa0, 0x3, [@m_sample={0xb0, 0x4, 0x0, 0x0, {{0xb}, {0x4}, {0x81, 0x6, "09dc9faff8587ce77b2e04278809409eaadb1549ce770e2466288316d42d53fae78e3bd0ab32dfac807ec6fb3c11d0374ad78010a29a03b9e26b0bdcfa11c3c8749e3a37f2c4b3c0a3bfc9f13eb5d2c49c1787626eb9fff35b4cd22ccc866b59d0b7875109149c5c198b6b92a240f93e6995eaeb03585fbfdd8d6cc3df"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_mirred={0xd0, 0x1, 0x0, 0x0, {{0xb}, {0xa4, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x8001, 0x400, 0x3, 0x2, 0xaa73}, 0x4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x5, 0xff, 0x4, 0x5, 0x8}, 0x1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x31b, 0x6, 0xb}, 0x2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x5, 0x8000, 0x3, 0x5b, 0x1}, 0x1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x7, 0x4, 0x4, 0xb, 0xdc}, 0x2, r3}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}, @m_nat={0x10c, 0x20, 0x0, 0x0, {{0x8}, {0xcc, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0xb5, 0x5, 0xffffffffffffffff, 0x8, 0x8}, @multicast2, @broadcast, 0xffffffff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xa, 0x9, 0x8, 0x8, 0x6}, @rand_addr=0x64010106, @local, 0xff000000}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x1d8, 0x7, 0x3, 0x7, 0x6}, @remote, @remote, 0xff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x4, 0x5, 0x2, 0x5, 0xfffffff8}, @empty, @rand_addr=0x64010100, 0xffffffff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x8000, 0x1c, 0x6, 0x0, 0x2}, @remote, @dev={0xac, 0x14, 0x14, 0x36}, 0xff}}]}, {0x1c, 0x6, "223ba0d4e181ea1fda7b6ccf039098dd91edfb3f1564f358"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_simple={0x810, 0x12, 0x0, 0x0, {{0xb}, {0x4}, {0x7e4, 0x6, "5463094355cf421a310532e19f67fe85f74881073df7703af89b13455dad5bf983d4ab18e7fcfc2468e8f637e657b9e473e1450717a56d6dbd4edf20ca1c7f93fc88b59569a27f0a4886c5ede594a72074f66eab9ccfa24f177a0a80d172c32c33991e7f2d85fbfa62745f1a0e31e9a80a89d0e42c4dba5b56ca287722ca901d9a2ff15ac6c817fef957fb7326f3d10235aae5f13f701b69cd87209c9f2c7675767c5330a830841e37ac3b840e00a4e9d7252d865343324f00fc598cd7400526b4f397cc45aacc2ea51e92d061d902f3f3d0a4298a808920b04ec3fd3aa4252647bb29a375278e4c961664757fa49d1c7d4b479cdaf20b25d708f6248e696f941265912c26ea35e2b1efe45466ed224e45bd94c7a0f173a425bd413db64804ffa06f4124d0ef58b9e4ede8b0452dd0397740078179ca5e3778499009ccf551f989847f97843231e45616487a53d7c0e6315b9b51af1a7a531a57287da41ce9cdf92d0a03f8daeb98b7e861e21de3d759758fce6a4dc9859a8ab373399a9df98dfc3a1e5987f3742974005181543775c9599bb7117c0268ecdf7b411b4da15fa105c642c3822c6b5a7f327a794147aa0695e9db43e41ddc0ef640fce4ae84fa93fbdc1f4e5245da4f509b46d0f6c9daa28e45f508016900c9bd2b66d2cfaaec80b881c0f26f35988ffa0df94eaa083678016aa842f39a3720d5e3e62d6095e10a19be2f94b9109f6e66d6db213d37bee15e8de82579d0c6a644b5eddbfc374dde422d93fea595ef4e0c34552829d84016389298b2720c82360eb928e167585f82d4377745164c5380a100cc19dee6591d39658bba1b51160bb200b023e47fbf154a3a9ef121f134ab584c38c8e5a2a1e1167a3447fb6914e333ca2ebf8f78dc5a2e20a7b66749eded8381eb5a9053816d6e414236fff460327854211b9ed4ca71520e3021b3fc0db172a56826b0f5c1d4977472df92247b83d589b34ceb0573dd9fb36909c9e0173f83555b0a15982d041cccc04c9c0ca0301a7913689a86e675d2809fbbd01967fa21b89f8cc5a0ac222b9e7200638a9e66161aa9987b217dadf4559b517377b96fcd1167f42d057eb930474483d7ec60a06bbf62b362425e73d5f65a2dcf46ff6cc5d7864fb4ff2a40afe6561d7e2eb6a09cd0318fcc4efe87d162350dda0158194c732ea7860575ddcd1cd3513722712a8998255a834d7a6c82cb92b1a55033c8fa9755161106ce05d2de023ee295965968998aee11eaa24250589e04365322f8d11c7a73ec60b1549b36a22080c5816637138bb74fe24d0bf2eed8c66830d9b749c0ce74f35ebafccdee5fdf3b2d4f27089a230d4399c2ba01a1786ab97ebc336b376cd12fc25ee96c6e1db6d34e7aa2f3f68ff5a70f26293e3b26473f113614316bfb68a00f5040108a911cbe3905477663d3ed2e2541b1e86e61f52dcee51d989193eae025271297d0987f6e5086afafc9f5167927987a954f9597c8b13cb13bb190587c3ce5ecb8cafe5c97d00fbc982ba955f9a17fe3c16fd9c55217bdb0ad961edb9803c7fff27aa429a812212efc32a08e3c680f8e9bfdb08d62d791d70165b96391412fd9f96bf00b826bf7787de772524d5ee5103266dca7d4d2e3a38ebec1b3c65100dad5e90a1111b98931b1f9fde2cb4ce2868b127bb96cd4462367032d6a9ea9ff86707da9f3177f3c8cb8f9e4b3f4b37405376cdf81d070d9a774416309b0e57bd93536e973d4cd62f0fd99f6fb490c1d8d0a14248400c13cfd24de511f49297c956a8172263ca043ae685287993c6b81a24e40ab4518cbea77ecde8a83e2effad8265b4df419a951baa74cde7eef5403c6c600d9615f868f0a050bd30bafa62cb546569c32a469e2562a4f192adf63b2b86d5886ce75fecb317437b76ff6a5c3aa81346f3c50f17dd4cb562e99fd16b1bb548dcc18a16181ef3f6427cd93ba2240d6e0818779c377fc9763181ca5efb404cf5499c05181d8bc4f04372751789f94f788835bd68a728074bf4e8e02c5d9d13c0bf6e5126ad3d6a4e0a083e8412ab0a25f64b3dcdeffcfbb8d5db0b818158151022f4e444b4736230d10f5b9c2b847e439aac21667c94240ff3074f35227cc31d33a20c7f6c6330c780de35bfb61b8c4ac34a54a81277311af96a10196346f844247db5615578d6f37c77bf7f6674f90ae1fe67267f3f31210ebcd1da5aafc7a9ec60773d6dcbdf1131d0e414e3d7034e3b7adb0da29820194007b1ad5cf6af06d9edb43da7e13c225b7ba3a30a3c242fe7444077b4641944825e5943757ac18e32a9d0b350f16665e410ebf2429488ced0d3a68281131b8357aa1f52c34b7906c774a39b574b3ae27bc95598bdc6dcecdb13090613d70e7f95a30c8d15b6104d04ed673933b1f16929be791cac4cb4ce1349ef73498d009456fddecf8cfc5ad53ecc78a6db6003574f0eff2e7f20fed420eb2ba3bc4c51e96605d549fd3ebadc0e17f94f90a580002b2f7c6f32dfcb53ce54cd95128782d0a5bd8303e82edcb4066a17990a48f773e19344a011da5ed2d365e5a92a20f8654eabb2f6cfc9ebb702ff0574c0f683575199bb3997edf3264129ad5d5c7da57e80f671b5edc47845968b76eecd74d6052b44aa5976b3aec6293db7c8789e66649bef325bcd3f102ed448d10f2f2331f1ecc08d58e107d0766d843465df0b76344dd3162c2ebef49664f6dc1f732173c8c40294721e17b0e2c9e1bb31c0b9f02c8529cf80b4349c5559c272f5b92b2a79f6850d58c7cdc95740d9fc8f0680676452c98fd4286195918f9d5007923d834301203970e38a6a52fdb668a026a4e644d9096dfa7ecc1"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x1}}}}]}]}}]}, 0xb4c}, 0x1, 0x0, 0x0, 0x10}, 0x8080) 2.410096823s ago: executing program 4 (id=3585): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x41f, 0x0, 0x0, {0xa, 0x0, 0x1}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x3c}, 0x1, 0x0, 0x0, 0x24000010}, 0x24000000) 2.29530083s ago: executing program 3 (id=3586): r0 = openat$dm_control(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$DM_DEV_CREATE(r0, 0xc138fd03, &(0x7f00000001c0)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, {'syz', 0x0, '0\x00'}}}) ioctl$DM_TABLE_LOAD(r0, 0xc138fd09, &(0x7f0000000300)={0x4, 0x0, 0x0, 0x170, 0x138, 0x1, 0x0, 0x0, 0x0, 0x0, @by_name={0x0, {'syz', 0x0, '0\x00'}}, [@linear={0x0, 0x2000, 0x0, 0x38, 'linear\x00', {@ram={'/dev/ram', 0x0}, 0x20, '0'}}]}) ioctl$DM_DEV_SUSPEND(r0, 0xc138fd06, &(0x7f0000000480)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x0, 0x0, 0x0, @by_name={0x0, {'syz', 0x0, '0\x00'}}}) ioctl$DM_TARGET_MSG(r0, 0xc138fd0e, &(0x7f00000005c0)={0x4, 0x0, 0x0, 0x158, 0x138, 0x0, 0x0, 0x0, 0x0, 0x0, @by_name={0x0, {'syz', 0x0, '0\x00'}}, {0x0, @stats_create={'@stats_create ', '-', 0x20, '/1'}}}) mknodat$dm(0xffffff9c, &(0x7f0000000740)='./dm0\x00', 0x6180, r1) r2 = openat$dm_dev(0xffffff9c, &(0x7f0000000780)='./dm0\x00', 0x2, 0x0) pwrite64(r2, &(0x7f00000007c0)="0102030405060708", 0x8, 0x1000) ioctl$DM_DEV_REMOVE(r0, 0xc138fd04, &(0x7f0000000800)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x20000, 0x0, 0x0, @by_name={0x0, {'syz', 0x0, '0\x00'}}}) 2.207432556s ago: executing program 2 (id=3587): r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010601bc3bd020402012c651e50102030109021200017b"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xc4b2}}, 0x0, 0x0}, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) 2.126153012s ago: executing program 4 (id=3588): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000080)={0x1d, r2, 0x0, {0x2, 0xf0, 0x4}}, 0x18) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f00000000c0)=0x1, 0x4) sendmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000002c0)="050000eb3a49a8d1", 0x8}], 0x1}}], 0x1, 0x4000041) setsockopt$SO_J1939_FILTER(r1, 0x6b, 0x1, &(0x7f0000000300)=[{0x4, 0x3, {0x0, 0x62da12a15307ded4}, {0x1, 0x1}, 0xfe, 0x2}], 0x20) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=@newtfilter={0x24, 0x11, 0x1, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x74, r2, {0xffff, 0xe}, {0xf, 0xa}, {0x1}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x2004c016}, 0x20000050) 1.65981012s ago: executing program 1 (id=3589): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) r1 = syz_clone(0x40000080, 0x0, 0x0, &(0x7f0000000040), &(0x7f0000000140), 0x0) prctl$PR_SCHED_CORE(0x3e, 0x8000000000001, r1, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) sendfile(r0, r0, 0x0, 0x20000005) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) userfaultfd(0x801) timer_create(0x0, 0x0, &(0x7f0000000300)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x1c5f1000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$kcm(0x29, 0x5, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000340), 0xffffff6a) 1.647979925s ago: executing program 4 (id=3590): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@ipv6_getaddr={0x2c, 0x16, 0x1, 0x70bd28, 0x25dfdbfe, {0xa, 0x3f, 0x30, 0xc8}, [@IFA_ADDRESS={0x14, 0x1, @ipv4={'\x00', '\xff\xff', @multicast1}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8800}, 0x64040000) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$erofs(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0xc08, &(0x7f0000000140)=ANY=[], 0x3, 0x242, &(0x7f0000000180)="$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") mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x200000f, 0x401d031, 0xffffffffffffffff, 0x0) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000400)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000004c0)=0x8) r1 = getpid() r2 = syz_open_procfs(0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000005c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000600)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000680)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) sendmmsg$unix(r4, &(0x7f0000000700), 0x651, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x1f, 0xc, &(0x7f00000009c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000180100002020692100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000a40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000a80)={r5}, 0xc) r6 = userfaultfd(0x80001) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000ac0)={0xaa, 0x2cc}) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000b00)={{&(0x7f0000010000/0x1000)=nil, 0x1000}, 0x1}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000b40)={r5}, 0xc) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="1b0000000000000000000000070000", @ANYRES32=r2, @ANYBLOB="ddff0000002000004000"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="02000000050000000200"/28], 0x50) chdir(&(0x7f0000000800)='./file0\x00') sendmsg$nl_route(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000008c0)=@ipv6_newrule={0x34, 0x20, 0x2d2c6d60ea1da725, 0x70bd25, 0x25dfdbfd, {0xa, 0x0, 0x0, 0xcd, 0xff, 0x0, 0x0, 0x1, 0x10002}, [@FIB_RULE_POLICY=@FRA_PRIORITY={0x8}, @FIB_RULE_POLICY=@FRA_SUPPRESS_IFGROUP={0x8, 0xd, 0xfffffffa}, @FIB_RULE_POLICY=@FRA_SUPPRESS_IFGROUP={0x8, 0xd, 0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x20008081}, 0x0) 568.125444ms ago: executing program 4 (id=3591): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="04000000040000"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x6, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="18120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7030000f2717ca8bfa400000000000007040000f8ffffffb705000000000000850000001900000095"], &(0x7f0000000ac0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b00)={r1, 0x0, 0xe, 0x0, &(0x7f0000000b80)="f57b0bb7994307a7ac95a7c71016", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 345.285367ms ago: executing program 0 (id=3592): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x3, 0xff) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) r4 = socket$inet(0x2, 0x2, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000100)={0x28, r1, 0x5, 0x0, 0x4, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0xffff8001, 0x36}}}}}, 0x28}}, 0x4000001) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000200)={'wlan0\x00', 0x1}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}]}, 0x28}}, 0x0) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000400)={0x3c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x1}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x1}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x4}]}, 0x3c}}, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x34, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x34}}, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) sendmsg$NL80211_CMD_NOTIFY_RADAR(r0, &(0x7f0000000540)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x801}, 0x20008000) bind$packet(r5, &(0x7f00000005c0)={0x11, 0x300, r3, 0x1, 0x0, 0x6, @random="080211000001"}, 0x14) write(r5, &(0x7f0000000600)="0802110000010802110000000800450000280000000040007ce70a00", 0x1c) r6 = socket(0x10, 0x3, 0x0) write(r6, &(0x7f0000000140)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) 111.822009ms ago: executing program 4 (id=3593): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000001c0)={'syzkaller0\x00', 0x1}) write$tun(r0, &(0x7f0000000480)=ANY=[], 0xfdef) 0s ago: executing program 3 (id=3594): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'syzkaller0\x00', 0x2}) bind$netlink(r0, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffdfffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x81, 0xfffffffb, 0xb}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x28000000}, 0x20040084) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=@newqdisc={0x434, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r5, {0x10}, {}, {0xa, 0xa}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x200000, 0x1, 0x2, 0x9, 0x3, 0x5, 0x5, 0xb762, 0x4, 0x100007, 0x8, 0x10, 0x2, 0x2, 0x8001, 0x1007fc, 0xffff8000, 0x6, 0x403, 0x9, 0x8, 0xfffffff8, 0xd6, 0x4, 0xfffb, 0x40000007, 0x0, 0xfffff4f0, 0x9, 0x1, 0xfffffffc, 0x4, 0x1, 0x6f2151b1, 0x9, 0xc, 0x20001000, 0x4, 0xfffffffe, 0x7, 0x9, 0x99, 0x9, 0x5, 0x6, 0x7, 0xfffffff7, 0x1, 0x2, 0x9, 0x9, 0x1000044, 0x8, 0x8, 0x39e1, 0x4, 0x7ff, 0x8, 0x7, 0x7fbffffe, 0x400, 0x8, 0xfffffa72, 0xcd, 0x4, 0x80000000, 0xc, 0x6, 0x65, 0x91, 0x659, 0x9, 0xf, 0x9, 0xc28, 0x9, 0x7, 0x3, 0x401, 0x3, 0x2, 0xfffffffa, 0x1, 0x10001, 0x3, 0x1, 0x4, 0x7, 0x8, 0x7, 0x1, 0x1, 0x1, 0x4, 0x3c, 0x7, 0x12, 0x8000, 0x1, 0x4dc, 0x80, 0xffffff80, 0x7ffffffc, 0xff, 0x9, 0xa7, 0xf, 0x1, 0x0, 0x3, 0x1001, 0x4, 0x401, 0x400007, 0x80000000, 0xffff, 0x6, 0x5, 0x4f, 0xffffffff, 0x80000000, 0x1966f9ad, 0x200, 0x20200, 0xed5, 0xfffffc00, 0x6, 0x4, 0x8, 0x485e, 0xa85, 0x80000040, 0x2, 0x7, 0x7, 0x102, 0x2d5421e8, 0x7, 0x10000, 0x2, 0x6, 0x1, 0x40000f04, 0x0, 0x2, 0x5, 0xfffffc00, 0x5, 0x8d, 0x4, 0x401, 0x4, 0x9, 0x50200523, 0xfffffffb, 0x1, 0x0, 0x3, 0x8, 0x5, 0x8, 0x3, 0x0, 0x800, 0x2, 0x8, 0x7ff, 0x1, 0xc, 0x6, 0x4, 0x400001, 0xd, 0x1ff, 0xfffff068, 0x3, 0x429, 0x7fff, 0x0, 0x200, 0x10000005, 0x7, 0x2, 0x8, 0x42ba, 0x4, 0x800009, 0x3, 0x8, 0x8, 0x53, 0x6, 0x4, 0x400, 0x8000, 0x0, 0x2c310b1a, 0x9, 0x0, 0x3, 0xcd34, 0x9, 0x81, 0xdf3, 0x2, 0x7, 0x9, 0x40ffb, 0x1ff, 0x8000, 0x3, 0x8, 0x80, 0x6, 0x9a6, 0xe4cb, 0x402, 0x9, 0x1ff, 0x5, 0x9b4, 0x4, 0x6, 0x0, 0x9, 0x0, 0x9, 0x0, 0x4, 0x10, 0x901, 0x5, 0x2, 0x7d, 0x7420, 0x6, 0x6, 0xc, 0x1000, 0x9, 0x9, 0xe6, 0xab, 0x400, 0x7fffffff, 0xed, 0x7ff, 0xd83, 0x68, 0x80000001, 0x6, 0x9fd, 0x10000006, 0x200, 0x4, 0x2]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x40098}, 0x64004010) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=@newqdisc={0x24, 0x29, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r7, {0x10}, {}, {0x5, 0x3}}}, 0x24}, 0x1, 0x0, 0x0, 0x40098}, 0x0) kernel console output (not intermixed with test programs): [ 407.313048][T14263] syz_tun (unregistering): left promiscuous mode [ 407.313146][T14263] bridge0: port 1(syz_tun) entered disabled state [ 407.507559][T14269] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3035'. [ 407.555638][ T5787] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 407.704329][T14279] netlink: 'syz.2.3039': attribute type 39 has an invalid length. [ 407.761444][ T49] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 407.931385][ T141] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 408.014004][ T49] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 408.499013][T14320] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3054'. [ 408.524608][ T49] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 408.544561][T14323] netlink: 'syz.4.3056': attribute type 39 has an invalid length. [ 408.671214][ T49] usb 6-1: Using ep0 maxpacket: 32 [ 408.673303][T14324] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 408.674372][ T49] usb 6-1: New USB device found, idVendor=2040, idProduct=c612, bcdDevice=e5.51 [ 408.675535][ T49] usb 6-1: config 123 interface 0 has no altsetting 0 [ 408.688001][ T49] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 408.688030][ T49] usb 6-1: Product: syz [ 408.688048][ T49] usb 6-1: Manufacturer: syz [ 408.688066][ T49] usb 6-1: SerialNumber: syz [ 408.802156][ T5755] net_ratelimit: 1 callbacks suppressed [ 408.802207][ T5755] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 408.802414][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 408.978049][ T31] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 408.978502][ T31] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 408.995465][ T49] usb 6-1: dvb_usb_v2: found a 'Hauppauge 126xxx' in warm state [ 409.012426][ T49] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 409.025066][ T49] dvbdev: DVB: registering new adapter (Hauppauge 126xxx) [ 409.025125][ T49] usb 6-1: media controller created [ 409.105073][ T49] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 409.186639][T14349] FAULT_INJECTION: forcing a failure. [ 409.186639][T14349] name failslab, interval 1, probability 0, space 0, times 0 [ 409.186684][T14349] CPU: 0 UID: 0 PID: 14349 Comm: syz.3.3063 Tainted: G L syzkaller #0 PREEMPT(full) [ 409.186721][T14349] Tainted: [L]=SOFTLOCKUP [ 409.186731][T14349] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 409.186748][T14349] Call Trace: [ 409.186758][T14349] [ 409.186769][T14349] dump_stack_lvl+0xe8/0x150 [ 409.186816][T14349] should_fail_ex+0x410/0x560 [ 409.186866][T14349] should_failslab+0xa8/0x100 [ 409.186910][T14349] __kmalloc_cache_noprof+0xa3/0x600 [ 409.186945][T14349] ? __raw_spin_lock_init+0x45/0x100 [ 409.186986][T14349] ? __kthread_create_on_node+0x115/0x3d0 [ 409.187029][T14349] ? __kthread_create_on_node+0x115/0x3d0 [ 409.187074][T14349] ? __init_swait_queue_head+0xa8/0x150 [ 409.187110][T14349] ? __pfx_rescuer_thread+0x10/0x10 [ 409.187157][T14349] __kthread_create_on_node+0x115/0x3d0 [ 409.187205][T14349] ? __pfx___kthread_create_on_node+0x10/0x10 [ 409.187246][T14349] ? srso_alias_return_thunk+0x5/0xfbef5 [ 409.187298][T14349] ? __pfx_rescuer_thread+0x10/0x10 [ 409.187348][T14349] ? __pfx_rescuer_thread+0x10/0x10 [ 409.187392][T14349] kthread_create_on_node+0xeb/0x140 [ 409.187443][T14349] ? __pfx_kthread_create_on_node+0x10/0x10 [ 409.187490][T14349] ? __kmalloc_cache_node_noprof+0x1f7/0x620 [ 409.187522][T14349] ? init_rescuer+0x167/0x530 [ 409.187553][T14349] ? init_rescuer+0x167/0x530 [ 409.187595][T14349] init_rescuer+0x312/0x530 [ 409.187633][T14349] ? __pfx_init_rescuer+0x10/0x10 [ 409.187677][T14349] ? srso_alias_return_thunk+0x5/0xfbef5 [ 409.187710][T14349] ? srso_alias_return_thunk+0x5/0xfbef5 [ 409.187753][T14349] __alloc_workqueue+0x1bda/0x1fe0 [ 409.187807][T14349] alloc_workqueue_noprof+0xe3/0x210 [ 409.187837][T14349] ? srso_alias_return_thunk+0x5/0xfbef5 [ 409.187880][T14349] ? __pfx_alloc_workqueue_noprof+0x10/0x10 [ 409.187918][T14349] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 409.187951][T14349] ? srso_alias_return_thunk+0x5/0xfbef5 [ 409.187989][T14349] nci_register_device+0x5c9/0xa00 [ 409.188040][T14349] ? __pfx_nci_register_device+0x10/0x10 [ 409.188079][T14349] ? __raw_spin_lock_init+0x45/0x100 [ 409.188124][T14349] ? srso_alias_return_thunk+0x5/0xfbef5 [ 409.188157][T14349] ? __raw_spin_lock_init+0x45/0x100 [ 409.188202][T14349] ? srso_alias_return_thunk+0x5/0xfbef5 [ 409.188234][T14349] ? __init_waitqueue_head+0xa8/0x150 [ 409.188279][T14349] virtual_ncidev_open+0x129/0x1a0 [ 409.188311][T14349] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 409.188344][T14349] misc_open+0x2d5/0x350 [ 409.188384][T14349] chrdev_open+0x4d9/0x600 [ 409.188425][T14349] ? __pfx_chrdev_open+0x10/0x10 [ 409.188460][T14349] ? srso_alias_return_thunk+0x5/0xfbef5 [ 409.188492][T14349] ? fsnotify_open_perm_and_set_mode+0x135/0x6b0 [ 409.188528][T14349] ? devcgroup_check_permission+0x31/0x8f0 [ 409.188571][T14349] ? __pfx_chrdev_open+0x10/0x10 [ 409.188608][T14349] do_dentry_open+0x80e/0x1360 [ 409.188661][T14349] vfs_open_consume+0x4a/0x350 [ 409.188699][T14349] ? path_openat+0x16e5/0x20f0 [ 409.188729][T14349] path_openat+0x1700/0x20f0 [ 409.188776][T14349] do_file_open+0x23e/0x4a0 [ 409.188810][T14349] ? __pfx_do_file_open+0x10/0x10 [ 409.188864][T14349] ? _raw_spin_unlock+0x28/0x50 [ 409.188888][T14349] ? srso_alias_return_thunk+0x5/0xfbef5 [ 409.188914][T14349] ? alloc_fd+0x6af/0x760 [ 409.188964][T14349] do_sys_openat2+0x115/0x200 [ 409.189003][T14349] ? __pfx_do_sys_openat2+0x10/0x10 [ 409.189041][T14349] ? __x64_sys_clock_gettime+0x238/0x290 [ 409.189083][T14349] ? __pfx___x64_sys_clock_gettime+0x10/0x10 [ 409.189126][T14349] __x64_sys_openat+0x138/0x170 [ 409.189169][T14349] do_syscall_64+0x166/0x520 [ 409.189198][T14349] ? trace_irq_disable+0x3b/0x140 [ 409.189224][T14349] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 409.189256][T14349] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 409.189281][T14349] RIP: 0033:0x7fb113d9f559 [ 409.189304][T14349] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 409.189330][T14349] RSP: 002b:00007fb114b8b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 409.189357][T14349] RAX: ffffffffffffffda RBX: 00007fb114025fa0 RCX: 00007fb113d9f559 [ 409.189375][T14349] RDX: 0000000000000002 RSI: 0000200000000340 RDI: ffffffffffffff9c [ 409.189392][T14349] RBP: 00007fb113e36b20 R08: 0000000000000000 R09: 0000000000000000 [ 409.189408][T14349] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 409.189422][T14349] R13: 00007fb114026038 R14: 00007fb114025fa0 R15: 00007ffd57880f28 [ 409.189461][T14349] [ 409.216212][ T49] usb 6-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 409.216239][ T49] error writing reg: 0xff, val: 0x00 [ 409.243478][ T5763] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 409.329344][T14349] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -ENOMEM [ 409.364912][ T5891] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 409.566207][ T49] dvb_usb_mxl111sf 6-1:123.0: probe with driver dvb_usb_mxl111sf failed with error -22 [ 409.581661][ T49] usb 6-1: USB disconnect, device number 7 [ 409.737895][T14343] syz.4.3059 (14343) used greatest stack depth: 18024 bytes left [ 409.851505][ T5787] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 409.851687][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 409.884757][T14361] netlink: 'syz.4.3071': attribute type 39 has an invalid length. [ 409.999281][T14367] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3070'. [ 410.261300][T14376] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3075'. [ 410.449903][T14378] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 410.840421][T14399] syzkaller0: entered promiscuous mode [ 410.840450][T14399] syzkaller0: entered allmulticast mode [ 410.855335][T14398] netlink: 'syz.5.3084': attribute type 39 has an invalid length. [ 410.879846][T14401] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3087'. [ 410.929228][ T49] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 410.929432][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 411.316057][T14419] loop0: detected capacity change from 0 to 16 [ 411.321431][ T5763] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 411.336805][T14419] erofs (device loop0): invalid ishare xattr prefix id 0 [ 411.470987][ T49] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 411.471332][ T5763] usb 6-1: Using ep0 maxpacket: 32 [ 411.478746][ T5763] usb 6-1: unable to get BOS descriptor or descriptor too short [ 411.478813][ T5763] usb 6-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 411.482391][ T5763] usb 6-1: config 14 has an invalid interface number: 57 but max is 1 [ 411.482424][ T5763] usb 6-1: config 14 has an invalid interface number: 228 but max is 1 [ 411.482450][ T5763] usb 6-1: config 14 has no interface number 0 [ 411.482472][ T5763] usb 6-1: config 14 has no interface number 1 [ 411.482540][ T5763] usb 6-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 411.482571][ T5763] usb 6-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 411.482604][ T5763] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 411.482639][ T5763] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 411.482674][ T5763] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 411.483065][ T5763] usb 6-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 411.483103][ T5763] usb 6-1: config 14 interface 57 has no altsetting 0 [ 411.483128][ T5763] usb 6-1: config 14 interface 228 has no altsetting 0 [ 411.491840][ T5763] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 411.491875][ T5763] usb 6-1: Product: syz [ 411.491894][ T5763] usb 6-1: Manufacturer: syz [ 411.491913][ T5763] usb 6-1: SerialNumber: syz [ 411.697376][ T49] usb 5-1: Using ep0 maxpacket: 32 [ 411.707086][ T49] usb 5-1: New USB device found, idVendor=2040, idProduct=c612, bcdDevice=e5.51 [ 411.731604][ T49] usb 5-1: config 123 interface 0 has no altsetting 0 [ 411.737507][ T49] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 411.737538][ T49] usb 5-1: Product: syz [ 411.737557][ T49] usb 5-1: Manufacturer: syz [ 411.737622][ T49] usb 5-1: SerialNumber: syz [ 411.852057][T14430] netlink: 388 bytes leftover after parsing attributes in process `syz.2.3096'. [ 412.016673][ T5763] legousbtower 6-1:14.57: interrupt endpoints not found [ 412.040060][ T49] usb 5-1: dvb_usb_v2: found a 'Hauppauge 126xxx' in warm state [ 412.054352][ T5787] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 412.054572][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 412.057912][ T49] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 412.058638][ T49] dvbdev: DVB: registering new adapter (Hauppauge 126xxx) [ 412.058740][ T49] usb 5-1: media controller created [ 412.121598][ T49] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 412.316685][ T49] set interface failed [ 412.316760][ T49] usb 5-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 412.316785][ T49] error writing reg: 0xff, val: 0x00 [ 412.335834][ T5763] legousbtower 6-1:14.228: get version request failed: -71 [ 412.336077][ T5763] legousbtower 6-1:14.228: probe with driver legousbtower failed with error -71 [ 412.371966][ T5763] usb 6-1: USB disconnect, device number 8 [ 412.402288][ T5891] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 412.437051][ T49] dvb_usb_mxl111sf 5-1:123.0: probe with driver dvb_usb_mxl111sf failed with error -22 [ 412.452766][ T49] usb 5-1: USB disconnect, device number 8 [ 412.708159][ T3351] nvmet: connect request for invalid subsystem tes! [ 412.712615][T14447] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "tes" [ 412.881222][ C1] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 412.884779][T14458] syzkaller0: entered promiscuous mode [ 412.884802][T14458] syzkaller0: entered allmulticast mode [ 413.321798][T14474] netlink: 388 bytes leftover after parsing attributes in process `syz.1.3110'. [ 413.457325][T14476] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 413.684976][ T5763] usb 3-1: new full-speed USB device number 15 using dummy_hcd [ 413.851502][ T5763] usb 3-1: New USB device found, idVendor=1044, idProduct=7001, bcdDevice= 5.20 [ 413.852787][ T5763] usb 3-1: config 4 has an invalid interface number: 44 but max is 0 [ 413.852820][ T5763] usb 3-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 413.852843][ T5763] usb 3-1: config 4 has no interface number 0 [ 413.852886][ T5763] usb 3-1: config 4 interface 44 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 413.857654][ T5763] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 413.857683][ T5763] usb 3-1: Product: syz [ 413.857701][ T5763] usb 3-1: Manufacturer: syz [ 413.857720][ T5763] usb 3-1: SerialNumber: syz [ 414.140684][ T53] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 414.162625][ T5755] net_ratelimit: 19 callbacks suppressed [ 414.162645][ T5755] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 414.162867][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 414.346056][ T5763] dvb-usb: found a 'Gigabyte U7000' in warm state. [ 414.367191][ T5763] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 414.368417][ T5763] dvbdev: DVB: registering new adapter (Gigabyte U7000) [ 414.368468][ T5763] usb 3-1: media controller created [ 414.394120][ T5763] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 414.455460][ T5763] DVB: Unable to find symbol dib7000p_attach() [ 414.455480][ T5763] dvb-usb: no frontend was attached by 'Gigabyte U7000' [ 414.561273][ T5763] rc_core: IR keymap rc-dib0700-rc5 not found [ 414.561295][ T5763] Registered IR keymap rc-empty [ 414.604929][ T5763] dvb-usb: could not initialize remote control. [ 414.604947][ T5763] dvb-usb: Gigabyte U7000 successfully initialized and connected. [ 414.630779][ T5891] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 414.789055][ T5891] usb 1-1: New USB device found, idVendor=20d6, idProduct=cb17, bcdDevice= 0.00 [ 414.794568][ T5891] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 414.794603][ T5891] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 414.794650][ T5891] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 414.806589][ T5891] usb 1-1: config 0 descriptor?? [ 414.846637][ T5763] usb 3-1: USB disconnect, device number 15 [ 414.876907][ T5763] dvb-usb: Gigabyte U7000 successfully deinitialized and disconnected. [ 415.210918][ T5763] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 415.211181][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 415.258616][ T5891] usbhid 1-1:0.0: can't add hid device: -71 [ 415.258742][ T5891] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 415.277796][ T5891] usb 1-1: USB disconnect, device number 8 [ 415.442173][ T190] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 416.200752][ T5755] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 416.241010][ T5763] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 416.241262][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 416.362453][ T5755] usb 4-1: Using ep0 maxpacket: 32 [ 416.366635][ T5755] usb 4-1: unable to get BOS descriptor or descriptor too short [ 416.366685][ T5755] usb 4-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 416.384439][ T5755] usb 4-1: config 14 has an invalid interface number: 57 but max is 1 [ 416.384470][ T5755] usb 4-1: config 14 has an invalid interface number: 228 but max is 1 [ 416.384495][ T5755] usb 4-1: config 14 has no interface number 0 [ 416.384516][ T5755] usb 4-1: config 14 has no interface number 1 [ 416.384583][ T5755] usb 4-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 416.384612][ T5755] usb 4-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 416.384643][ T5755] usb 4-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 416.384676][ T5755] usb 4-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 416.384710][ T5755] usb 4-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 416.384742][ T5755] usb 4-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 416.384775][ T5755] usb 4-1: config 14 interface 57 has no altsetting 0 [ 416.384803][ T5755] usb 4-1: config 14 interface 228 has no altsetting 0 [ 416.475001][ T5755] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 416.475035][ T5755] usb 4-1: Product: syz [ 416.475053][ T5755] usb 4-1: Manufacturer: syz [ 416.475103][ T5755] usb 4-1: SerialNumber: syz [ 416.478469][T14570] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3148'. [ 416.776566][T14584] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3153'. [ 416.776594][T14584] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3153'. [ 416.809967][T14586] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3154'. [ 416.988415][ T5755] legousbtower 4-1:14.57: interrupt endpoints not found [ 417.219371][ T5755] legousbtower 4-1:14.228: get version request failed: -71 [ 417.219569][ T5755] legousbtower 4-1:14.228: probe with driver legousbtower failed with error -71 [ 417.245371][ T5755] usb 4-1: USB disconnect, device number 8 [ 417.283320][ T5763] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 417.283501][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 417.519995][T14595] 8021q: adding VLAN 0 to HW filter on device bond1 [ 417.553246][T14595] 8021q: adding VLAN 0 to HW filter on device bond2 [ 417.602945][ T49] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 417.700960][ T49] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 417.842718][T14602] loop2: detected capacity change from 0 to 16 [ 417.862770][T14602] erofs (device loop2): invalid ishare xattr prefix id 0 [ 418.321691][ T49] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 418.329032][T14620] ieee802154 phy0 wpan0: encryption failed: -22 [ 418.491329][ T31] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 418.518218][T14627] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3168'. [ 418.917974][T14639] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3171'. [ 418.947655][T14639] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3171'. [ 418.955416][T14629] v: left promiscuous mode [ 418.958014][T14629] v: entered promiscuous mode [ 419.061796][ T5891] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 419.068987][T14629] tipc: Resetting bearer [ 419.089929][T14643] netlink: 27 bytes leftover after parsing attributes in process `syz.1.3176'. [ 419.164426][ T30] kauditd_printk_skb: 175 callbacks suppressed [ 419.164451][ T30] audit: type=1326 audit(1792511109.762:1112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14644 comm="syz.4.3177" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7f03f23030f3 code=0x7ffc0000 [ 419.164584][ T30] audit: type=1326 audit(1792511109.762:1113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14644 comm="syz.4.3177" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03f139f559 code=0x7ffc0000 [ 419.164789][ T30] audit: type=1326 audit(1792511109.762:1114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14644 comm="syz.4.3177" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03f139f559 code=0x7ffc0000 [ 419.167788][ T30] audit: type=1326 audit(1792511109.762:1115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14644 comm="syz.4.3177" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03f139f559 code=0x7ffc0000 [ 419.167957][ T30] audit: type=1326 audit(1792511109.762:1116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14644 comm="syz.4.3177" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7f03f23030f3 code=0x7ffc0000 [ 419.168394][ T30] audit: type=1326 audit(1792511109.762:1118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14644 comm="syz.4.3177" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7f03f23030f3 code=0x7ffc0000 [ 419.168589][ T30] audit: type=1326 audit(1792511109.762:1119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14644 comm="syz.4.3177" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f03f139f559 code=0x7ffc0000 [ 419.169820][ T30] audit: type=1326 audit(1792511109.762:1117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14644 comm="syz.4.3177" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03f139f559 code=0x7ffc0000 [ 419.169988][ T30] audit: type=1326 audit(1792511109.762:1120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14644 comm="syz.4.3177" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7f03f23030f3 code=0x7ffc0000 [ 419.170169][ T30] audit: type=1326 audit(1792511109.762:1121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14644 comm="syz.4.3177" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03f139f559 code=0x7ffc0000 [ 419.192240][T13920] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 419.215178][ T5891] usb 4-1: Using ep0 maxpacket: 32 [ 419.229192][ T5891] usb 4-1: unable to get BOS descriptor or descriptor too short [ 419.229244][ T5891] usb 4-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 419.232426][ T5891] usb 4-1: config 14 has an invalid interface number: 57 but max is 1 [ 419.232454][ T5891] usb 4-1: config 14 has an invalid interface number: 228 but max is 1 [ 419.232478][ T5891] usb 4-1: config 14 has no interface number 0 [ 419.232498][ T5891] usb 4-1: config 14 has no interface number 1 [ 419.232571][ T5891] usb 4-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 419.232600][ T5891] usb 4-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 419.232630][ T5891] usb 4-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 419.232689][ T5891] usb 4-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 419.232723][ T5891] usb 4-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 419.232755][ T5891] usb 4-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 419.232787][ T5891] usb 4-1: config 14 interface 57 has no altsetting 0 [ 419.232810][ T5891] usb 4-1: config 14 interface 228 has no altsetting 0 [ 419.234481][ T5347] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 419.263101][ T5891] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 419.263133][ T5891] usb 4-1: Product: syz [ 419.263151][ T5891] usb 4-1: Manufacturer: syz [ 419.263169][ T5891] usb 4-1: SerialNumber: syz [ 419.381893][ T49] net_ratelimit: 2 callbacks suppressed [ 419.381917][ T49] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 419.382116][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 419.450058][ T146] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 419.525882][T13920] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 419.526230][T13920] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 419.741379][ T5347] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 419.794118][ T5891] legousbtower 4-1:14.57: interrupt endpoints not found [ 419.947875][T14666] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3184'. [ 419.962331][ T5762] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 420.019534][ T5891] legousbtower 4-1:14.228: get version request failed: -71 [ 420.019757][ T5891] legousbtower 4-1:14.228: probe with driver legousbtower failed with error -71 [ 420.045831][ T5891] usb 4-1: USB disconnect, device number 9 [ 420.120990][ T5762] usb 5-1: Using ep0 maxpacket: 16 [ 420.130342][ T5762] usb 5-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice= 0.40 [ 420.192321][ T5762] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 420.192356][ T5762] usb 5-1: Product: syz [ 420.192375][ T5762] usb 5-1: Manufacturer: syz [ 420.192394][ T5762] usb 5-1: SerialNumber: syz [ 420.242977][ T5797] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 420.404057][ T5763] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 420.404258][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 420.481684][ T146] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 420.482043][ T146] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 420.659467][T14679] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3189'. [ 420.692905][ T5762] usb 5-1: 1:1: invalid format type 0x1002 is detected, processed as PCM [ 420.692941][ T5762] usb 5-1: 1:1 : invalid UAC_FORMAT_TYPE desc [ 420.695519][ T5762] usb 5-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 420.914793][ T5762] usb 5-1: USB disconnect, device number 9 [ 420.953270][T14686] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3190'. [ 420.986204][T14686] netlink: 64 bytes leftover after parsing attributes in process `syz.5.3190'. [ 421.085145][T14002] udevd[14002]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 421.110836][ T5763] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 421.272717][ T5763] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.01 [ 421.278438][ T5763] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 421.278500][ T5763] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 421.278531][ T5763] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 421.280281][ T5763] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 421.280310][ T5763] usb 1-1: Product: syz [ 421.280329][ T5763] usb 1-1: Manufacturer: syz [ 421.344975][T14684] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 421.348968][ T5763] garmin_gps 1-1:1.0: Garmin GPS usb/tty converter detected [ 421.384570][ T5763] usb 1-1: Garmin GPS usb/tty converter now attached to ttyUSB0 [ 421.440929][ T5763] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 421.441138][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 421.524193][ T5797] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 421.622743][ T5762] usb 1-1: USB disconnect, device number 9 [ 421.665237][ T5762] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0 [ 421.675493][ T5762] garmin_gps 1-1:1.0: device disconnected [ 421.754010][ T5891] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 421.901233][ T5891] usb 3-1: Using ep0 maxpacket: 32 [ 421.902142][ T5891] usb 3-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73 [ 421.905582][ T5891] usb 3-1: config 0 has an invalid interface number: 119 but max is 0 [ 421.905612][ T5891] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 421.905636][ T5891] usb 3-1: config 0 has no interface number 0 [ 421.905680][ T5891] usb 3-1: config 0 interface 119 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 421.988533][ T5891] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 421.988568][ T5891] usb 3-1: Product: syz [ 421.988587][ T5891] usb 3-1: Manufacturer: syz [ 421.988606][ T5891] usb 3-1: SerialNumber: syz [ 422.033187][ T5891] usb 3-1: config 0 descriptor?? [ 422.104562][ T5891] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.119/input/input10 [ 422.407881][T14700] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3198'. [ 422.457796][T14690] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 422.466510][T14690] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 422.480730][ T5755] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 422.480919][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 422.672074][ T5763] usb 3-1: USB disconnect, device number 16 [ 422.805672][T14712] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3202'. [ 423.225023][T14725] netlink: 'syz.0.3208': attribute type 39 has an invalid length. [ 423.425451][T14729] loop4: detected capacity change from 0 to 4096 [ 423.518813][T14729] ntfs3(loop4): ino=19, mi_enum_attr [ 423.518853][T14729] ntfs3(loop4): Mark volume as dirty due to NTFS errors [ 423.521214][ C0] ip6_tnl_xmit_ctl: 3 callbacks suppressed [ 423.521273][ C0] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 423.537173][ T5763] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 423.772090][T14744] __nla_validate_parse: 4 callbacks suppressed [ 423.772114][T14744] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3218'. [ 423.835509][T14747] netlink: 19 bytes leftover after parsing attributes in process `syz.3.3219'. [ 424.006161][T14754] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3221'. [ 424.320755][ C0] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 424.354168][T14759] netlink: 'syz.5.3224': attribute type 39 has an invalid length. [ 424.561606][ T5891] net_ratelimit: 1 callbacks suppressed [ 424.561636][ T5891] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 424.562689][ T5763] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 424.562871][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 424.625148][T14777] netlink: 27 bytes leftover after parsing attributes in process `syz.3.3232'. [ 424.630662][ T5762] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 424.699035][T14780] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3231'. [ 424.729027][T14780] netlink: 64 bytes leftover after parsing attributes in process `syz.5.3231'. [ 424.791329][ T5762] usb 3-1: Using ep0 maxpacket: 32 [ 424.793966][ T5762] usb 3-1: unable to get BOS descriptor or descriptor too short [ 424.794019][ T5762] usb 3-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 424.796641][ T5762] usb 3-1: config 14 has an invalid interface number: 57 but max is 1 [ 424.796670][ T5762] usb 3-1: config 14 has an invalid interface number: 228 but max is 1 [ 424.796696][ T5762] usb 3-1: config 14 has no interface number 0 [ 424.796718][ T5762] usb 3-1: config 14 has no interface number 1 [ 424.796785][ T5762] usb 3-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 424.796815][ T5762] usb 3-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 424.796847][ T5762] usb 3-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 424.796880][ T5762] usb 3-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 424.796919][ T5762] usb 3-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 424.796952][ T5762] usb 3-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 424.796985][ T5762] usb 3-1: config 14 interface 57 has no altsetting 0 [ 424.797009][ T5762] usb 3-1: config 14 interface 228 has no altsetting 0 [ 424.801400][ T5762] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 424.801428][ T5762] usb 3-1: Product: syz [ 424.801447][ T5762] usb 3-1: Manufacturer: syz [ 424.801465][ T5762] usb 3-1: SerialNumber: syz [ 424.900775][T14786] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 424.901286][T14786] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 424.901552][T14786] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 425.342930][T14793] ip_tables: iptables: counters copy to user failed while replacing table [ 425.482051][ T5762] legousbtower 3-1:14.57: interrupt endpoints not found [ 425.691376][ T5347] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 425.707475][ T5762] legousbtower 3-1:14.228: get version request failed: -71 [ 425.707664][ T5762] legousbtower 3-1:14.228: probe with driver legousbtower failed with error -71 [ 425.771545][ T5762] usb 3-1: USB disconnect, device number 17 [ 425.840663][ T5347] usb 4-1: Using ep0 maxpacket: 32 [ 425.841462][ T5347] usb 4-1: New USB device found, idVendor=2040, idProduct=c612, bcdDevice=e5.51 [ 425.842742][ T5347] usb 4-1: config 123 interface 0 has no altsetting 0 [ 425.846239][ T5347] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 425.846267][ T5347] usb 4-1: Product: syz [ 425.846287][ T5347] usb 4-1: Manufacturer: syz [ 425.846312][ T5347] usb 4-1: SerialNumber: syz [ 426.036318][T14803] netlink: 'syz.5.3243': attribute type 39 has an invalid length. [ 426.109408][ C0] raw-gadget.1 gadget.3: ignoring, device is not running [ 426.124829][ T5347] usb 4-1: dvb_usb_v2: found a 'Hauppauge 126xxx' in warm state [ 426.140915][ T5347] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 426.141265][ T5347] dvbdev: DVB: registering new adapter (Hauppauge 126xxx) [ 426.141320][ T5347] usb 4-1: media controller created [ 426.192804][ T5347] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 426.216582][ T5347] set interface failed [ 426.216607][ T5347] usb 4-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 426.216630][ T5347] error writing reg: 0xff, val: 0x00 [ 426.238527][T14811] netlink: 27 bytes leftover after parsing attributes in process `syz.5.3246'. [ 426.291016][ T5347] dvb_usb_mxl111sf 4-1:123.0: probe with driver dvb_usb_mxl111sf failed with error -22 [ 426.296791][ T5347] usb 4-1: USB disconnect, device number 10 [ 426.624732][T14827] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 426.625197][T14827] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 426.625626][T14827] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 426.662914][T14823] loop4: detected capacity change from 0 to 4096 [ 426.685693][T14831] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3255'. [ 426.720050][T14831] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3255'. [ 426.826365][T14823] ntfs3(loop4): ino=19, mi_enum_attr [ 426.826401][T14823] ntfs3(loop4): Mark volume as dirty due to NTFS errors [ 426.870793][ T5755] usb 6-1: new full-speed USB device number 9 using dummy_hcd [ 427.025270][ T5755] usb 6-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 427.040932][ T5755] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 427.040971][ T5755] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 427.041016][ T5755] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 427.046048][ T5755] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 427.046078][ T5755] usb 6-1: Product: syz [ 427.046096][ T5755] usb 6-1: Manufacturer: syz [ 427.046115][ T5755] usb 6-1: SerialNumber: syz [ 427.078077][ T5755] usb 6-1: config 0 descriptor?? [ 427.078944][T14830] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 427.111064][T14835] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 427.163319][T14835] sch_tbf: peakrate 5 is lower than or equals to rate 8 ! [ 427.221018][ T5755] rc_core: IR keymap rc-streamzap not found [ 427.221040][ T5755] Registered IR keymap rc-empty [ 427.224584][ T5755] rc rc0: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 427.249590][ T5755] input: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input11 [ 427.360827][ T49] usb 6-1: USB disconnect, device number 9 [ 427.694838][T14846] FAULT_INJECTION: forcing a failure. [ 427.694838][T14846] name failslab, interval 1, probability 0, space 0, times 0 [ 427.694883][T14846] CPU: 1 UID: 0 PID: 14846 Comm: syz.2.3261 Tainted: G L syzkaller #0 PREEMPT(full) [ 427.694920][T14846] Tainted: [L]=SOFTLOCKUP [ 427.694931][T14846] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 427.694948][T14846] Call Trace: [ 427.694959][T14846] [ 427.694970][T14846] dump_stack_lvl+0xe8/0x150 [ 427.695017][T14846] should_fail_ex+0x410/0x560 [ 427.695066][T14846] should_failslab+0xa8/0x100 [ 427.695111][T14846] __kmalloc_cache_noprof+0xa3/0x600 [ 427.695146][T14846] ? srso_alias_return_thunk+0x5/0xfbef5 [ 427.695179][T14846] ? p9_fd_create+0x10f/0x430 [ 427.695213][T14846] ? p9_fd_create+0x10f/0x430 [ 427.695248][T14846] ? __kmalloc_cache_noprof+0x321/0x600 [ 427.695287][T14846] p9_fd_create+0x10f/0x430 [ 427.695328][T14846] p9_client_create+0x3e5/0xc60 [ 427.695379][T14846] ? __pfx_p9_client_create+0x10/0x10 [ 427.695439][T14846] ? srso_alias_return_thunk+0x5/0xfbef5 [ 427.695485][T14846] v9fs_session_init+0x46/0xd40 [ 427.695516][T14846] ? __kmalloc_cache_noprof+0x14d/0x600 [ 427.695548][T14846] ? v9fs_get_tree+0xaa/0xac0 [ 427.695584][T14846] ? v9fs_get_tree+0xaa/0xac0 [ 427.695630][T14846] v9fs_get_tree+0xbd/0xac0 [ 427.695668][T14846] ? __pfx_vfs_parse_comma_sep+0x10/0x10 [ 427.695708][T14846] ? __pfx_v9fs_get_tree+0x10/0x10 [ 427.695748][T14846] ? srso_alias_return_thunk+0x5/0xfbef5 [ 427.695786][T14846] ? srso_alias_return_thunk+0x5/0xfbef5 [ 427.695830][T14846] vfs_get_tree+0x92/0x2a0 [ 427.695867][T14846] do_new_mount+0x325/0xb00 [ 427.695913][T14846] ? srso_alias_return_thunk+0x5/0xfbef5 [ 427.695954][T14846] ? __pfx_do_new_mount+0x10/0x10 [ 427.696000][T14846] ? srso_alias_return_thunk+0x5/0xfbef5 [ 427.696034][T14846] ? ns_capable+0x89/0xe0 [ 427.696076][T14846] ? srso_alias_return_thunk+0x5/0xfbef5 [ 427.696109][T14846] ? path_mount+0x647/0x1050 [ 427.696157][T14846] ? srso_alias_return_thunk+0x5/0xfbef5 [ 427.696190][T14846] ? user_path_at+0xd4/0x160 [ 427.696224][T14846] __se_sys_mount+0x31d/0x420 [ 427.696277][T14846] ? __pfx___se_sys_mount+0x10/0x10 [ 427.696330][T14846] ? srso_alias_return_thunk+0x5/0xfbef5 [ 427.696363][T14846] ? __x64_sys_mount+0x20/0xc0 [ 427.696411][T14846] do_syscall_64+0x166/0x520 [ 427.696447][T14846] ? trace_irq_disable+0x3b/0x140 [ 427.696480][T14846] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 427.696516][T14846] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 427.696544][T14846] RIP: 0033:0x7f3a8919f559 [ 427.696569][T14846] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 427.696591][T14846] RSP: 002b:00007f3a8a021028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 427.696620][T14846] RAX: ffffffffffffffda RBX: 00007f3a89425fa0 RCX: 00007f3a8919f559 [ 427.696641][T14846] RDX: 0000200000000080 RSI: 0000200000000000 RDI: 0000000000000000 [ 427.696661][T14846] RBP: 00007f3a89236b20 R08: 0000200000000100 R09: 0000000000000000 [ 427.696681][T14846] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 427.696698][T14846] R13: 00007f3a89426038 R14: 00007f3a89425fa0 R15: 00007ffcd3aa4ed8 [ 427.696742][T14846] [ 427.821177][T14850] netlink: 27 bytes leftover after parsing attributes in process `syz.1.3263'. [ 428.977087][T14883] __nla_validate_parse: 2 callbacks suppressed [ 428.977111][T14883] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3275'. [ 428.985284][T14883] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3275'. [ 429.041084][ T53] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 429.570618][ T5763] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 429.720868][ T5763] usb 6-1: Using ep0 maxpacket: 32 [ 429.727637][ T5763] usb 6-1: unable to get BOS descriptor or descriptor too short [ 429.727691][ T5763] usb 6-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 429.729670][ T5763] usb 6-1: config 14 has an invalid interface number: 57 but max is 1 [ 429.729699][ T5763] usb 6-1: config 14 has an invalid interface number: 228 but max is 1 [ 429.729725][ T5763] usb 6-1: config 14 has no interface number 0 [ 429.729745][ T5763] usb 6-1: config 14 has no interface number 1 [ 429.729814][ T5763] usb 6-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 429.729845][ T5763] usb 6-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 429.729876][ T5763] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 429.729909][ T5763] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 429.729944][ T5763] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 429.731313][ T5763] usb 6-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 429.731350][ T5763] usb 6-1: config 14 interface 57 has no altsetting 0 [ 429.731373][ T5763] usb 6-1: config 14 interface 228 has no altsetting 0 [ 429.750085][ T5763] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 429.750118][ T5763] usb 6-1: Product: syz [ 429.750136][ T5763] usb 6-1: Manufacturer: syz [ 429.750183][ T5763] usb 6-1: SerialNumber: syz [ 429.940904][T14914] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3288'. [ 430.234412][ T5763] legousbtower 6-1:14.57: interrupt endpoints not found [ 430.455517][ T5763] legousbtower 6-1:14.228: get version request failed: -71 [ 430.455710][ T5763] legousbtower 6-1:14.228: probe with driver legousbtower failed with error -71 [ 430.471933][ T5763] usb 6-1: USB disconnect, device number 10 [ 430.504498][T14002] udevd[14002]: setting owner of /dev/bus/usb/006/010 to uid=0, gid=0 failed: No such file or directory [ 430.617021][T14937] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3294'. [ 430.637872][T14937] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3294'. [ 430.945099][T14936] loop0: detected capacity change from 0 to 32768 [ 430.960009][T14936] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.3297 (14936) [ 430.988853][T14936] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 430.988891][T14936] BTRFS info (device loop0): using sha256 checksum algorithm [ 431.119792][T14936] BTRFS info (device loop0): rebuilding free space tree [ 431.179508][T14936] BTRFS info (device loop0): enabling ssd optimizations [ 431.179541][T14936] BTRFS info (device loop0): using spread ssd allocation scheme [ 431.179563][T14936] BTRFS info (device loop0): turning on async discard [ 431.179583][T14936] BTRFS info (device loop0): enabling free space tree [ 431.179603][T14936] BTRFS info (device loop0): force clearing of disk cache [ 431.383855][T14963] netlink: 'syz.5.3302': attribute type 39 has an invalid length. [ 431.601150][ C0] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 432.240724][ C0] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 432.241294][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 432.830679][ T5762] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 432.871539][T13920] BTRFS info (device loop0): qgroup scan completed (inconsistency flag cleared) [ 432.980793][ T5762] usb 4-1: Using ep0 maxpacket: 32 [ 432.983510][ T5762] usb 4-1: unable to get BOS descriptor or descriptor too short [ 432.983561][ T5762] usb 4-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 432.984829][ T5762] usb 4-1: config 14 has an invalid interface number: 57 but max is 1 [ 432.984850][ T5762] usb 4-1: config 14 has an invalid interface number: 228 but max is 1 [ 432.984869][ T5762] usb 4-1: config 14 has no interface number 0 [ 432.984884][ T5762] usb 4-1: config 14 has no interface number 1 [ 432.984933][ T5762] usb 4-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 432.984954][ T5762] usb 4-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 432.984977][ T5762] usb 4-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 432.985001][ T5762] usb 4-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 432.985025][ T5762] usb 4-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 432.985049][ T5762] usb 4-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 432.985072][ T5762] usb 4-1: config 14 interface 57 has no altsetting 0 [ 432.985089][ T5762] usb 4-1: config 14 interface 228 has no altsetting 0 [ 432.987219][ T5762] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 432.987239][ T5762] usb 4-1: Product: syz [ 432.987252][ T5762] usb 4-1: Manufacturer: syz [ 432.987265][ T5762] usb 4-1: SerialNumber: syz [ 433.014722][ T5347] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 433.204318][ T5347] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 433.206366][ T5347] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 433.206397][ T5347] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 433.206420][ T5347] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 433.206523][ T5347] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 433.206555][ T5347] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 433.209484][ T5347] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 433.209517][ T5347] usb 6-1: Product: syz [ 433.209586][ T5347] usb 6-1: Manufacturer: syz [ 433.304822][ T5347] cdc_wdm 6-1:1.0: skipping garbage [ 433.304848][ T5347] cdc_wdm 6-1:1.0: skipping garbage [ 433.323952][ T5347] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 433.323976][ T5347] cdc_wdm 6-1:1.0: Unknown control protocol [ 433.464079][ T5628] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 433.506941][ T5762] legousbtower 4-1:14.57: interrupt endpoints not found [ 433.588378][ T5347] usb 6-1: USB disconnect, device number 11 [ 433.726279][ T5762] legousbtower 4-1:14.228: get version request failed: -71 [ 433.726478][ T5762] legousbtower 4-1:14.228: probe with driver legousbtower failed with error -71 [ 433.773048][ T5762] usb 4-1: USB disconnect, device number 11 [ 434.011194][T15011] bond2: entered allmulticast mode [ 434.299276][T15018] rxe_eth0 speed is unknown, defaulting to 1000 [ 434.351083][ T5762] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 434.488742][T15031] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3333'. [ 434.501665][ T5762] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 434.503513][ T5762] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 434.510361][ T5762] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 434.510396][ T5762] usb 1-1: Product: syz [ 434.510414][ T5762] usb 1-1: Manufacturer: syz [ 434.510433][ T5762] usb 1-1: SerialNumber: syz [ 434.560235][T15031] geneve2: entered promiscuous mode [ 434.783058][T15034] FAULT_INJECTION: forcing a failure. [ 434.783058][T15034] name failslab, interval 1, probability 0, space 0, times 0 [ 434.783106][T15034] CPU: 0 UID: 0 PID: 15034 Comm: syz.5.3332 Tainted: G L syzkaller #0 PREEMPT(full) [ 434.783143][T15034] Tainted: [L]=SOFTLOCKUP [ 434.783154][T15034] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 434.783174][T15034] Call Trace: [ 434.783184][T15034] [ 434.783196][T15034] dump_stack_lvl+0xe8/0x150 [ 434.783245][T15034] should_fail_ex+0x410/0x560 [ 434.783296][T15034] should_failslab+0xa8/0x100 [ 434.783339][T15034] __kmalloc_node_track_caller_noprof+0xfb/0x720 [ 434.783378][T15034] ? __kthread_create_on_node+0x1b3/0x3d0 [ 434.783421][T15034] ? __kthread_create_on_node+0x1b3/0x3d0 [ 434.783476][T15034] kvasprintf+0xeb/0x1a0 [ 434.783509][T15034] ? __pfx_kvasprintf+0x10/0x10 [ 434.783541][T15034] ? __kmalloc_cache_noprof+0x14d/0x600 [ 434.783573][T15034] ? __kthread_create_on_node+0x115/0x3d0 [ 434.783615][T15034] ? __kthread_create_on_node+0x115/0x3d0 [ 434.783668][T15034] __kthread_create_on_node+0x1b3/0x3d0 [ 434.783716][T15034] ? __pfx___kthread_create_on_node+0x10/0x10 [ 434.783759][T15034] ? srso_alias_return_thunk+0x5/0xfbef5 [ 434.783811][T15034] ? __pfx_rescuer_thread+0x10/0x10 [ 434.783862][T15034] ? __pfx_rescuer_thread+0x10/0x10 [ 434.783908][T15034] kthread_create_on_node+0xeb/0x140 [ 434.783960][T15034] ? __pfx_kthread_create_on_node+0x10/0x10 [ 434.784009][T15034] ? __kmalloc_cache_node_noprof+0x1f7/0x620 [ 434.784042][T15034] ? init_rescuer+0x167/0x530 [ 434.784073][T15034] ? init_rescuer+0x167/0x530 [ 434.784116][T15034] init_rescuer+0x312/0x530 [ 434.784155][T15034] ? __pfx_init_rescuer+0x10/0x10 [ 434.784198][T15034] ? srso_alias_return_thunk+0x5/0xfbef5 [ 434.784233][T15034] ? srso_alias_return_thunk+0x5/0xfbef5 [ 434.784276][T15034] __alloc_workqueue+0x1bda/0x1fe0 [ 434.784329][T15034] alloc_workqueue_noprof+0xe3/0x210 [ 434.784363][T15034] ? is_dynamic_key+0xd4/0x1c0 [ 434.784393][T15034] ? __pfx_alloc_workqueue_noprof+0x10/0x10 [ 434.784420][T15034] ? srso_alias_return_thunk+0x5/0xfbef5 [ 434.784461][T15034] ? srso_alias_return_thunk+0x5/0xfbef5 [ 434.784491][T15034] ? ceph_msgpool_init+0xdd/0x1c0 [ 434.784538][T15034] ceph_osdc_init+0x62d/0x900 [ 434.784589][T15034] ceph_create_client+0x246/0x310 [ 434.784626][T15034] ceph_get_tree+0x1ca/0x1a40 [ 434.784665][T15034] ? srso_alias_return_thunk+0x5/0xfbef5 [ 434.784698][T15034] ? apparmor_capable+0x126/0x170 [ 434.784735][T15034] ? srso_alias_return_thunk+0x5/0xfbef5 [ 434.784774][T15034] vfs_get_tree+0x92/0x2a0 [ 434.784811][T15034] do_new_mount+0x325/0xb00 [ 434.784862][T15034] ? srso_alias_return_thunk+0x5/0xfbef5 [ 434.784902][T15034] ? __pfx_do_new_mount+0x10/0x10 [ 434.784948][T15034] ? srso_alias_return_thunk+0x5/0xfbef5 [ 434.784980][T15034] ? ns_capable+0x89/0xe0 [ 434.785019][T15034] ? srso_alias_return_thunk+0x5/0xfbef5 [ 434.785051][T15034] ? path_mount+0x647/0x1050 [ 434.785096][T15034] ? srso_alias_return_thunk+0x5/0xfbef5 [ 434.785128][T15034] ? user_path_at+0xd4/0x160 [ 434.785160][T15034] __se_sys_mount+0x31d/0x420 [ 434.785212][T15034] ? __pfx___se_sys_mount+0x10/0x10 [ 434.785263][T15034] ? srso_alias_return_thunk+0x5/0xfbef5 [ 434.785296][T15034] ? __x64_sys_mount+0x20/0xc0 [ 434.785345][T15034] do_syscall_64+0x166/0x520 [ 434.785381][T15034] ? trace_irq_disable+0x3b/0x140 [ 434.785413][T15034] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 434.785450][T15034] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 434.785477][T15034] RIP: 0033:0x7f881359f559 [ 434.785504][T15034] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 434.785527][T15034] RSP: 002b:00007f8814521028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 434.785556][T15034] RAX: ffffffffffffffda RBX: 00007f8813825fa0 RCX: 00007f881359f559 [ 434.785576][T15034] RDX: 0000200000000640 RSI: 0000200000000600 RDI: 00002000000005c0 [ 434.785597][T15034] RBP: 00007f8813636b20 R08: 0000000000000000 R09: 0000000000000000 [ 434.785615][T15034] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 434.785632][T15034] R13: 00007f8813826038 R14: 00007f8813825fa0 R15: 00007fffeb8ce4a8 [ 434.785676][T15034] [ 435.011240][T15034] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -ENOMEM [ 435.083367][ T5762] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 10 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 435.258060][ T5762] usb 1-1: USB disconnect, device number 10 [ 435.279267][ T5762] usblp0: removed [ 435.466021][ T5629] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 435.468156][ T5629] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 435.469465][ T5629] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 435.494708][ T5629] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 435.514164][ T5629] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 435.628711][T15044] net_ratelimit: 742 callbacks suppressed [ 435.628738][T15044] ip_tables: iptables: counters copy to user failed while replacing table [ 436.546522][ T30] kauditd_printk_skb: 185 callbacks suppressed [ 436.546546][ T30] audit: type=1326 audit(1792511127.141:1307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15080 comm="syz.3.3347" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7fb114b930f3 code=0x7ffc0000 [ 436.546603][ T30] audit: type=1326 audit(1792511127.141:1308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15080 comm="syz.3.3347" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb113d9f559 code=0x7ffc0000 [ 436.546658][ T30] audit: type=1326 audit(1792511127.141:1309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15080 comm="syz.3.3347" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb113d9f559 code=0x7ffc0000 [ 436.582331][ T30] audit: type=1326 audit(1792511127.151:1310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15080 comm="syz.3.3347" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb113d9f559 code=0x7ffc0000 [ 436.582391][ T30] audit: type=1326 audit(1792511127.151:1312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15080 comm="syz.3.3347" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7fb114b930f3 code=0x7ffc0000 [ 436.582444][ T30] audit: type=1326 audit(1792511127.151:1313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15080 comm="syz.3.3347" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fb113d9f559 code=0x7ffc0000 [ 436.582498][ T30] audit: type=1326 audit(1792511127.151:1311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15080 comm="syz.3.3347" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7fb114b930f3 code=0x7ffc0000 [ 436.582550][ T30] audit: type=1326 audit(1792511127.151:1314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15080 comm="syz.3.3347" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb113d9f559 code=0x7ffc0000 [ 436.592583][ T30] audit: type=1326 audit(1792511127.181:1315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15080 comm="syz.3.3347" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7fb114b930f3 code=0x7ffc0000 [ 436.592640][ T30] audit: type=1326 audit(1792511127.181:1316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15080 comm="syz.3.3347" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb113d9f559 code=0x7ffc0000 [ 436.741850][ C1] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 436.982802][T15094] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3349'. [ 437.280305][T15094] tipc: Resetting bearer [ 437.320149][T15094] bond1: left promiscuous mode [ 437.326860][ T5347] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 437.351257][T15094] bond2: left promiscuous mode [ 437.353343][T15094] bond3: left promiscuous mode [ 437.371697][ T5762] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 437.532257][ T5762] usb 4-1: Using ep0 maxpacket: 16 [ 437.616519][ T53] Bluetooth: hci6: command tx timeout [ 437.653743][ T5762] usb 4-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice= 0.40 [ 437.782127][T15107] IPVS: ip_vs_add_dest(): server weight less than zero [ 438.699493][ T5762] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 438.699520][ T5762] usb 4-1: Product: syz [ 438.699533][ T5762] usb 4-1: Manufacturer: syz [ 438.699547][ T5762] usb 4-1: SerialNumber: syz [ 438.841993][ T5347] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 439.055442][T15041] rxe_eth0 speed is unknown, defaulting to 1000 [ 439.283432][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.283499][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 439.414168][ T5762] usb 4-1: 1:1: invalid format type 0x1002 is detected, processed as PCM [ 439.414196][ T5762] usb 4-1: 1:1 : invalid UAC_FORMAT_TYPE desc [ 439.418361][ T5762] usb 4-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 439.668393][ T5762] usb 4-1: USB disconnect, device number 12 [ 439.686434][ T53] Bluetooth: hci6: command tx timeout [ 439.769497][T15116] loop2: detected capacity change from 0 to 16 [ 439.800911][T15116] erofs (device loop2): invalid ishare xattr prefix id 0 [ 439.966605][T14002] udevd[14002]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 441.196201][T15144] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3364'. [ 441.376623][T15041] bridge0: port 1(bridge_slave_0) entered blocking state [ 441.380177][T15041] bridge0: port 1(bridge_slave_0) entered disabled state [ 441.380344][T15041] bridge_slave_0: entered allmulticast mode [ 441.415011][T15041] bridge_slave_0: entered promiscuous mode [ 441.433369][T15041] bridge0: port 2(bridge_slave_1) entered blocking state [ 441.440849][T15041] bridge0: port 2(bridge_slave_1) entered disabled state [ 441.441045][T15041] bridge_slave_1: entered allmulticast mode [ 441.455338][T15041] bridge_slave_1: entered promiscuous mode [ 441.480941][ T5347] usb 3-1: new full-speed USB device number 18 using dummy_hcd [ 441.593922][T15041] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 441.614343][T15041] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 441.633628][ T5347] usb 3-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 441.637044][ T5347] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 441.637080][ T5347] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 441.637113][ T5347] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 441.654562][ T5347] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 441.654592][ T5347] usb 3-1: Product: syz [ 441.654611][ T5347] usb 3-1: Manufacturer: syz [ 441.654628][ T5347] usb 3-1: SerialNumber: syz [ 441.672334][ T5347] usb 3-1: config 0 descriptor?? [ 441.695579][T15147] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 441.751735][ T30] kauditd_printk_skb: 285 callbacks suppressed [ 441.751758][ T30] audit: type=1326 audit(1792511132.351:1602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15155 comm="syz.4.3369" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7f03f23030f3 code=0x7ffc0000 [ 441.751890][ T30] audit: type=1326 audit(1792511132.351:1603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15155 comm="syz.4.3369" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03f139f559 code=0x7ffc0000 [ 441.754857][T15041] team0: Port device team_slave_0 added [ 441.757326][ T30] audit: type=1326 audit(1792511132.351:1604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15155 comm="syz.4.3369" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03f139f559 code=0x7ffc0000 [ 441.758462][T15041] team0: Port device team_slave_1 added [ 441.760810][ T53] Bluetooth: hci6: command tx timeout [ 441.802978][ T30] audit: type=1326 audit(1792511132.391:1605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15155 comm="syz.4.3369" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03f139f559 code=0x7ffc0000 [ 441.803047][ T30] audit: type=1326 audit(1792511132.391:1606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15155 comm="syz.4.3369" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7f03f23030f3 code=0x7ffc0000 [ 441.803100][ T30] audit: type=1326 audit(1792511132.391:1607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15155 comm="syz.4.3369" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03f139f559 code=0x7ffc0000 [ 441.818056][ T30] audit: type=1326 audit(1792511132.411:1608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15155 comm="syz.4.3369" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7f03f23030f3 code=0x7ffc0000 [ 441.818119][ T30] audit: type=1326 audit(1792511132.411:1609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15155 comm="syz.4.3369" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f03f139f559 code=0x7ffc0000 [ 441.874487][ T30] audit: type=1326 audit(1792511132.471:1610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15155 comm="syz.4.3369" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7f03f23030f3 code=0x7ffc0000 [ 441.876400][ T30] audit: type=1326 audit(1792511132.471:1611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15155 comm="syz.4.3369" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03f139f559 code=0x7ffc0000 [ 442.119262][T15041] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 442.119285][T15041] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 442.119317][T15041] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 442.179385][T15041] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 442.179406][T15041] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 442.179439][T15041] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 442.244642][ T5347] rc_core: IR keymap rc-streamzap not found [ 442.244663][ T5347] Registered IR keymap rc-empty [ 442.253737][ T5347] rc rc0: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 442.278381][ T5347] input: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input12 [ 442.392720][ T5347] usb 3-1: USB disconnect, device number 18 [ 442.583374][T15041] hsr_slave_0: entered promiscuous mode [ 442.586139][T15041] hsr_slave_1: entered promiscuous mode [ 442.592669][T15041] debugfs: 'hsr0' already exists in 'hsr' [ 442.592692][T15041] Cannot create hsr debugfs directory [ 442.780666][ T5762] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 442.931043][ T5762] usb 5-1: Using ep0 maxpacket: 16 [ 442.936268][ T5762] usb 5-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice= 0.40 [ 443.010959][ T5762] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 443.010985][ T5762] usb 5-1: Product: syz [ 443.011027][ T5762] usb 5-1: Manufacturer: syz [ 443.011047][ T5762] usb 5-1: SerialNumber: syz [ 443.597226][T15187] FAULT_INJECTION: forcing a failure. [ 443.597226][T15187] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 443.597271][T15187] CPU: 1 UID: 0 PID: 15187 Comm: syz.3.3377 Tainted: G L syzkaller #0 PREEMPT(full) [ 443.597307][T15187] Tainted: [L]=SOFTLOCKUP [ 443.597323][T15187] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 443.597338][T15187] Call Trace: [ 443.597348][T15187] [ 443.597359][T15187] dump_stack_lvl+0xe8/0x150 [ 443.597395][T15187] should_fail_ex+0x410/0x560 [ 443.597442][T15187] _copy_from_iter+0x1d3/0x1660 [ 443.597486][T15187] ? __alloc_skb+0x27a/0x7a0 [ 443.597511][T15187] ? srso_alias_return_thunk+0x5/0xfbef5 [ 443.597545][T15187] ? srso_alias_return_thunk+0x5/0xfbef5 [ 443.597572][T15187] ? __alloc_skb+0x27a/0x7a0 [ 443.597593][T15187] ? srso_alias_return_thunk+0x5/0xfbef5 [ 443.597627][T15187] ? __pfx__copy_from_iter+0x10/0x10 [ 443.597666][T15187] ? kmem_cache_alloc_node_noprof+0x1f9/0x610 [ 443.597694][T15187] ? __alloc_skb+0x27a/0x7a0 [ 443.597717][T15187] ? __alloc_skb+0x27a/0x7a0 [ 443.597743][T15187] ? netlink_sendmsg+0x6b8/0xba0 [ 443.597774][T15187] ? srso_alias_return_thunk+0x5/0xfbef5 [ 443.597807][T15187] ? skb_put+0x112/0x210 [ 443.597840][T15187] netlink_sendmsg+0x722/0xba0 [ 443.597888][T15187] ? __pfx_netlink_sendmsg+0x10/0x10 [ 443.597920][T15187] ? srso_alias_return_thunk+0x5/0xfbef5 [ 443.597948][T15187] ? aa_sock_msg_perm+0x144/0x210 [ 443.597981][T15187] ? srso_alias_return_thunk+0x5/0xfbef5 [ 443.598013][T15187] ? apparmor_socket_sendmsg+0x98/0x360 [ 443.598049][T15187] ? srso_alias_return_thunk+0x5/0xfbef5 [ 443.598078][T15187] ? __pfx_netlink_sendmsg+0x10/0x10 [ 443.598105][T15187] sock_sendmsg_nosec+0x13a/0x180 [ 443.598150][T15187] ____sys_sendmsg+0x54e/0x850 [ 443.598190][T15187] ? __pfx_____sys_sendmsg+0x10/0x10 [ 443.598223][T15187] ? srso_alias_return_thunk+0x5/0xfbef5 [ 443.598255][T15187] ? srso_alias_return_thunk+0x5/0xfbef5 [ 443.598278][T15187] ? import_iovec+0x73/0xa0 [ 443.598310][T15187] ___sys_sendmsg+0x2a5/0x360 [ 443.598345][T15187] ? __lock_acquire+0x747/0x2de0 [ 443.598382][T15187] ? __pfx____sys_sendmsg+0x10/0x10 [ 443.598447][T15187] ? srso_alias_return_thunk+0x5/0xfbef5 [ 443.598477][T15187] ? __fget_files+0x3a2/0x420 [ 443.598504][T15187] ? __fget_files+0x2a/0x420 [ 443.598543][T15187] __x64_sys_sendmsg+0x1b1/0x290 [ 443.598577][T15187] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 443.598624][T15187] do_syscall_64+0x166/0x520 [ 443.598658][T15187] ? trace_irq_disable+0x3b/0x140 [ 443.598690][T15187] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 443.598725][T15187] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 443.598751][T15187] RIP: 0033:0x7fb113d9f559 [ 443.598771][T15187] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 443.598788][T15187] RSP: 002b:00007fb114b8b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 443.598812][T15187] RAX: ffffffffffffffda RBX: 00007fb114025fa0 RCX: 00007fb113d9f559 [ 443.598833][T15187] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 443.598851][T15187] RBP: 00007fb113e36b20 R08: 0000000000000000 R09: 0000000000000000 [ 443.598869][T15187] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 443.598886][T15187] R13: 00007fb114026038 R14: 00007fb114025fa0 R15: 00007ffd57880f28 [ 443.598928][T15187] [ 443.814981][ T5755] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 443.843804][ T53] Bluetooth: hci6: command tx timeout [ 443.909568][ T49] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 444.030345][ T5755] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 444.041400][ T5755] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 444.041431][ T5755] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 444.041455][ T5755] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 444.041506][ T5755] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 444.041536][ T5755] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 444.049292][ T5755] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 444.049334][ T5755] usb 6-1: Product: syz [ 444.049352][ T5755] usb 6-1: Manufacturer: syz [ 444.122954][ T49] usb 3-1: New USB device found, idVendor=104f, idProduct=0004, bcdDevice= 1.00 [ 444.141962][ T49] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 12336, setting to 1024 [ 444.142054][ T49] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024 [ 444.191091][ T49] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 444.191126][ T49] usb 3-1: Product: syz [ 444.191162][ T49] usb 3-1: Manufacturer: syz [ 444.219158][ T5755] cdc_wdm 6-1:1.0: skipping garbage [ 444.219181][ T5755] cdc_wdm 6-1:1.0: skipping garbage [ 444.241364][ T5755] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 444.241388][ T5755] cdc_wdm 6-1:1.0: Unknown control protocol [ 444.279130][T15186] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 444.297945][ T49] iuu_phoenix 3-1:1.0: iuu_phoenix converter detected [ 444.307021][ T5762] usb 5-1: 1:1: invalid format type 0x1002 is detected, processed as PCM [ 444.307053][ T5762] usb 5-1: 1:1 : invalid UAC_FORMAT_TYPE desc [ 444.325592][ T5762] usb 5-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 444.374781][ T49] usb 3-1: iuu_phoenix converter now attached to ttyUSB0 [ 444.375885][ T5755] usb 6-1: USB disconnect, device number 12 [ 444.797452][ T5762] usb 5-1: USB disconnect, device number 10 [ 444.958865][T15041] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 445.243478][ T5797] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 445.337654][T14002] udevd[14002]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 445.402058][ T5797] usb 4-1: Using ep0 maxpacket: 8 [ 445.403750][ T5797] usb 4-1: New USB device found, idVendor=03f0, idProduct=0004, bcdDevice= 0.40 [ 445.408428][ T5797] usb 4-1: config 1 interface 0 altsetting 201 bulk endpoint 0x1 has invalid maxpacket 8 [ 445.408468][ T5797] usb 4-1: config 1 interface 0 altsetting 201 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 445.408503][ T5797] usb 4-1: config 1 interface 0 has no altsetting 0 [ 445.496769][ T5797] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 445.496804][ T5797] usb 4-1: Product: syz [ 445.496822][ T5797] usb 4-1: Manufacturer: syz [ 445.496840][ T5797] usb 4-1: SerialNumber: syz [ 445.549504][T15189] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 445.555005][T15189] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 445.728671][ T5347] usb 3-1: USB disconnect, device number 19 [ 445.778559][ T5347] iuu_phoenix ttyUSB0: iuu_phoenix converter now disconnected from ttyUSB0 [ 445.807116][ T5347] iuu_phoenix 3-1:1.0: device disconnected [ 445.889761][ T5797] usblp0: Disabling reads from problematic bidirectional printer [ 445.910154][ T5797] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 13 if 0 alt 201 proto 1 vid 0x03F0 pid 0x0004 [ 445.938251][ T5797] usb 4-1: USB disconnect, device number 13 [ 445.960267][ T5797] usblp0: removed [ 446.004974][T15041] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 446.212463][T15195] netlink: 'syz.4.3383': attribute type 1 has an invalid length. [ 446.253319][T15041] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 446.331709][T15195] bond3: entered promiscuous mode [ 446.336349][T15195] 8021q: adding VLAN 0 to HW filter on device bond3 [ 446.570840][ T5797] usb 1-1: new full-speed USB device number 11 using dummy_hcd [ 446.722439][ T5797] usb 1-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 446.724141][ T5797] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 446.724167][ T5797] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 446.724190][ T5797] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 446.729810][ T5797] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 446.729832][ T5797] usb 1-1: Product: syz [ 446.729846][ T5797] usb 1-1: Manufacturer: syz [ 446.729860][ T5797] usb 1-1: SerialNumber: syz [ 446.857743][ T5797] usb 1-1: config 0 descriptor?? [ 446.861389][T15200] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 446.960838][ C0] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 446.961133][ C0] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 447.233853][ T5797] rc_core: IR keymap rc-streamzap not found [ 447.233871][ T5797] Registered IR keymap rc-empty [ 447.234843][ T5797] rc rc0: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 447.269912][ T5797] input: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input13 [ 447.342632][ T5797] usb 1-1: USB disconnect, device number 11 [ 448.323855][T15041] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 448.421421][T15041] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 448.426852][T15041] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 448.472338][T15041] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 448.480850][ T5763] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 448.491668][T15041] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 448.620235][T15041] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 448.624280][T15041] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 448.678216][ T5763] usb 3-1: Using ep0 maxpacket: 16 [ 448.678910][ T5763] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 448.680231][ T5763] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 448.680282][ T5763] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 448.680344][ T5763] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 448.735846][ T5763] usb 3-1: config 0 descriptor?? [ 448.750044][ T5763] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 448.803737][T15041] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 448.880954][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 448.947319][T15237] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3396'. [ 449.254581][T15246] netlink: 'syz.3.3398': attribute type 1 has an invalid length. [ 449.384291][T15246] bond6: entered promiscuous mode [ 449.385510][T15246] 8021q: adding VLAN 0 to HW filter on device bond6 [ 449.481091][T15041] 8021q: adding VLAN 0 to HW filter on device bond0 [ 449.555434][T15041] 8021q: adding VLAN 0 to HW filter on device team0 [ 449.586714][T15254] IPv6: addrconf: prefix option has invalid lifetime [ 449.586720][ T141] bridge0: port 1(bridge_slave_0) entered blocking state [ 449.586825][ T141] bridge0: port 1(bridge_slave_0) entered forwarding state [ 449.630991][T13374] bridge0: port 2(bridge_slave_1) entered blocking state [ 449.631104][T13374] bridge0: port 2(bridge_slave_1) entered forwarding state [ 449.838368][T15262] geneve2: entered promiscuous mode [ 450.221646][T15276] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3409'. [ 450.372507][T15268] rxe_eth0 speed is unknown, defaulting to 1000 [ 452.939783][ T5755] usb 3-1: USB disconnect, device number 20 [ 453.312661][T15295] syzkaller0: entered promiscuous mode [ 453.312693][T15295] syzkaller0: entered allmulticast mode [ 453.761563][ T5755] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 453.924047][ T5755] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 453.927975][ T5755] usb 3-1: config index 0 descriptor too short (expected 23569, got 27) [ 453.928035][ T5755] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 453.949052][ T5755] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 453.949086][ T5755] usb 3-1: Manufacturer: syz [ 453.984887][ T5755] usb 3-1: config 0 descriptor?? [ 454.114693][ T5755] rc_core: IR keymap rc-hauppauge not found [ 454.114710][ T5755] Registered IR keymap rc-empty [ 454.115916][ T5755] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 454.117905][ T5755] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input14 [ 454.220997][ T5755] usb 3-1: USB disconnect, device number 21 [ 456.503082][T15041] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 456.934097][T15041] veth0_vlan: entered promiscuous mode [ 456.997855][T15041] veth1_vlan: entered promiscuous mode [ 457.189004][T15041] veth0_macvtap: entered promiscuous mode [ 457.254685][T15041] veth1_macvtap: entered promiscuous mode [ 457.379188][T15041] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 457.440026][T15041] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 457.560789][ T3403] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 457.563083][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 457.563133][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 457.563175][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 458.175830][ T31] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 458.175857][ T31] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 458.301607][ T3403] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 458.301635][ T3403] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 458.662112][ T5762] Process accounting resumed [ 458.800866][T15388] Process accounting resumed [ 459.012220][T15398] loop1: detected capacity change from 0 to 16 [ 459.023157][T15398] erofs (device loop1): invalid ishare xattr prefix id 0 [ 459.447366][T15408] FAULT_INJECTION: forcing a failure. [ 459.447366][T15408] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 459.447413][T15408] CPU: 1 UID: 0 PID: 15408 Comm: syz.3.3438 Tainted: G L syzkaller #0 PREEMPT(full) [ 459.447454][T15408] Tainted: [L]=SOFTLOCKUP [ 459.447465][T15408] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 459.447482][T15408] Call Trace: [ 459.447494][T15408] [ 459.447506][T15408] dump_stack_lvl+0xe8/0x150 [ 459.447553][T15408] should_fail_ex+0x410/0x560 [ 459.447603][T15408] _copy_to_user+0x31/0xb0 [ 459.447635][T15408] put_timespec64+0xc8/0x130 [ 459.447674][T15408] ? __pfx_put_timespec64+0x10/0x10 [ 459.447712][T15408] ? fdget+0x1b7/0x250 [ 459.447749][T15408] __x64_sys_clock_gettime+0x22a/0x290 [ 459.447799][T15408] ? __pfx___x64_sys_clock_gettime+0x10/0x10 [ 459.447866][T15408] do_syscall_64+0x166/0x520 [ 459.447903][T15408] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 459.447931][T15408] ? srso_alias_return_thunk+0x5/0xfbef5 [ 459.447971][T15408] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 459.448000][T15408] RIP: 0033:0x7fb114b930f3 [ 459.448025][T15408] Code: b6 4d 24 48 f7 e2 4c 01 c0 48 83 d2 00 48 0f ad d0 48 d3 ea f6 c1 40 48 0f 44 d0 e9 32 ff ff ff 48 63 ff b8 e4 00 00 00 0f 05 44 4c 8d 25 ec 8f ff ff e9 f4 fa ff ff 4c 89 45 d0 31 c0 49 81 [ 459.448048][T15408] RSP: 002b:00007fb111ff5fb0 EFLAGS: 00000293 ORIG_RAX: 00000000000000e4 [ 459.448078][T15408] RAX: ffffffffffffffda RBX: 7fffffffffffffff RCX: 00007fb114b930f3 [ 459.448100][T15408] RDX: 00007fb113ebea80 RSI: 00007fb111ff60b0 RDI: 0000000000000001 [ 459.448120][T15408] RBP: 00007fb111ff6030 R08: 0000000000000000 R09: 3fffffffffffffff [ 459.448140][T15408] R10: 4000000000000000 R11: 0000000000000293 R12: 00007fb114b8c000 [ 459.448159][T15408] R13: 0000000000000010 R14: 00007fb114b8c038 R15: 0000000000015c28 [ 459.448206][T15408] [ 459.518352][T15410] syzkaller0: entered promiscuous mode [ 459.518387][T15410] syzkaller0: entered allmulticast mode [ 460.809669][T15434] netlink: 64 bytes leftover after parsing attributes in process `syz.5.3447'. [ 461.260774][T15441] syzkaller0: entered promiscuous mode [ 461.260946][T15441] syzkaller0: entered allmulticast mode [ 461.312081][T15441] netlink: 220 bytes leftover after parsing attributes in process `syz.1.3450'. [ 461.312109][T15441] tc_dump_action: action bad kind [ 462.241431][ T5629] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 462.244280][T15456] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3455'. [ 462.249460][ T5629] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 462.256285][ T5629] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 462.270239][ T5629] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 462.284579][ T5629] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 462.547221][ T30] kauditd_printk_skb: 187 callbacks suppressed [ 462.547246][ T30] audit: type=1326 audit(1792511153.141:1799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15471 comm="syz.4.3460" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7f03f23030f3 code=0x7ffc0000 [ 462.547482][ T30] audit: type=1326 audit(1792511153.141:1800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15471 comm="syz.4.3460" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03f139f559 code=0x7ffc0000 [ 462.547541][ T30] audit: type=1326 audit(1792511153.141:1801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15471 comm="syz.4.3460" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03f139f559 code=0x7ffc0000 [ 462.583693][ T30] audit: type=1326 audit(1792511153.151:1802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15471 comm="syz.4.3460" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03f139f559 code=0x7ffc0000 [ 462.583761][ T30] audit: type=1326 audit(1792511153.151:1803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15471 comm="syz.4.3460" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7f03f23030f3 code=0x7ffc0000 [ 462.583813][ T30] audit: type=1326 audit(1792511153.151:1804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15471 comm="syz.4.3460" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03f139f559 code=0x7ffc0000 [ 462.583865][ T30] audit: type=1326 audit(1792511153.151:1805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15471 comm="syz.4.3460" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7f03f23030f3 code=0x7ffc0000 [ 462.583919][ T30] audit: type=1326 audit(1792511153.151:1806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15471 comm="syz.4.3460" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f03f139f559 code=0x7ffc0000 [ 462.583973][ T30] audit: type=1326 audit(1792511153.151:1807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15471 comm="syz.4.3460" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7f03f23030f3 code=0x7ffc0000 [ 462.584024][ T30] audit: type=1326 audit(1792511153.151:1808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15471 comm="syz.4.3460" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03f139f559 code=0x7ffc0000 [ 463.271131][ T5787] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 463.424521][ T5787] usb 5-1: Using ep0 maxpacket: 16 [ 463.429820][ T5787] usb 5-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice= 0.40 [ 463.503660][ T5787] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 463.503688][ T5787] usb 5-1: Product: syz [ 463.503702][ T5787] usb 5-1: Manufacturer: syz [ 463.503716][ T5787] usb 5-1: SerialNumber: syz [ 463.889894][T15458] rxe_eth0 speed is unknown, defaulting to 1000 [ 464.329824][ T5629] Bluetooth: hci4: command tx timeout [ 464.554798][ T5787] usb 5-1: 1:1: invalid format type 0x1002 is detected, processed as PCM [ 464.554836][ T5787] usb 5-1: 1:1 : invalid UAC_FORMAT_TYPE desc [ 464.574305][ T5787] usb 5-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 464.627751][T15503] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3468'. [ 464.668855][T15504] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3469'. [ 464.979153][ T5787] usb 5-1: USB disconnect, device number 11 [ 465.259513][T15513] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3471'. [ 465.278050][T15379] udevd[15379]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 465.322178][T15511] netlink: 576 bytes leftover after parsing attributes in process `syz.2.3472'. [ 465.500769][ T5787] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 465.613057][ T5797] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 465.656732][ T5787] usb 5-1: Using ep0 maxpacket: 8 [ 465.659076][ T5787] usb 5-1: New USB device found, idVendor=03f0, idProduct=0004, bcdDevice= 0.40 [ 465.664838][ T5787] usb 5-1: config 1 interface 0 altsetting 201 bulk endpoint 0x1 has invalid maxpacket 8 [ 465.664875][ T5787] usb 5-1: config 1 interface 0 altsetting 201 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 465.664908][ T5787] usb 5-1: config 1 interface 0 has no altsetting 0 [ 465.682324][ T5787] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 465.682365][ T5787] usb 5-1: Product: syz [ 465.682384][ T5787] usb 5-1: Manufacturer: syz [ 465.682402][ T5787] usb 5-1: SerialNumber: syz [ 465.730940][T15507] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 465.731106][T15507] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 465.770677][ T5797] usb 1-1: device descriptor read/64, error -71 [ 465.971132][ T5787] usblp0: Disabling reads from problematic bidirectional printer [ 465.980092][ T5787] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 12 if 0 alt 201 proto 1 vid 0x03F0 pid 0x0004 [ 465.989651][ T5787] usb 5-1: USB disconnect, device number 12 [ 466.000287][ T5787] usblp0: removed [ 466.033557][ T5797] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 466.162242][ T5797] usb 1-1: device descriptor read/64, error -71 [ 466.272341][ T5797] usb usb1-port1: attempt power cycle [ 466.396828][T15535] syzkaller0: entered promiscuous mode [ 466.396857][T15535] syzkaller0: entered allmulticast mode [ 466.411033][ T5629] Bluetooth: hci4: command tx timeout [ 466.610759][ T5797] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 466.634712][ T5797] usb 1-1: device descriptor read/8, error -71 [ 466.717555][T15458] bridge0: port 1(bridge_slave_0) entered blocking state [ 466.717673][T15458] bridge0: port 1(bridge_slave_0) entered disabled state [ 466.717857][T15458] bridge_slave_0: entered allmulticast mode [ 466.729012][T15458] bridge_slave_0: entered promiscuous mode [ 466.736353][T15458] bridge0: port 2(bridge_slave_1) entered blocking state [ 466.736579][T15458] bridge0: port 2(bridge_slave_1) entered disabled state [ 466.736765][T15458] bridge_slave_1: entered allmulticast mode [ 466.741196][T15458] bridge_slave_1: entered promiscuous mode [ 466.857286][T15537] loop1: detected capacity change from 0 to 32768 [ 466.874705][T15537] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.3477 (15537) [ 466.893935][ T5797] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 466.916975][T15537] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 466.917008][T15537] BTRFS info (device loop1): using sha256 checksum algorithm [ 466.943644][ T5797] usb 1-1: device descriptor read/8, error -71 [ 466.997039][T15458] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 467.043162][T15458] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 467.053752][ T5797] usb usb1-port1: unable to enumerate USB device [ 467.161524][T15537] BTRFS info (device loop1): rebuilding free space tree [ 467.227423][T15537] BTRFS info (device loop1): enabling ssd optimizations [ 467.227449][T15537] BTRFS info (device loop1): using spread ssd allocation scheme [ 467.227465][T15537] BTRFS info (device loop1): turning on async discard [ 467.227479][T15537] BTRFS info (device loop1): enabling free space tree [ 467.227494][T15537] BTRFS info (device loop1): force clearing of disk cache [ 467.233649][T15458] team0: Port device team_slave_0 added [ 467.258697][T15458] team0: Port device team_slave_1 added [ 467.280675][T15567] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3481'. [ 467.488056][T15458] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 467.488077][T15458] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 467.488112][T15458] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 467.503697][T15458] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 467.503718][T15458] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 467.503750][T15458] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 467.844062][T15458] hsr_slave_0: entered promiscuous mode [ 467.849402][T15458] hsr_slave_1: entered promiscuous mode [ 467.853399][T15458] debugfs: 'hsr0' already exists in 'hsr' [ 467.853428][T15458] Cannot create hsr debugfs directory [ 468.001157][ T49] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 468.076156][T15537] BTRFS info (device loop1): balance: start -d -m [ 468.077686][T15537] BTRFS info (device loop1): relocating block group 6881280 flags data|metadata [ 468.184354][ T49] usb 3-1: New USB device found, idVendor=20d6, idProduct=cb17, bcdDevice= 0.00 [ 468.186507][ T49] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 468.186544][ T49] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 468.186592][ T49] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 468.213570][ T49] usb 3-1: config 0 descriptor?? [ 468.430119][T15537] BTRFS info (device loop1): relocating block group 5242880 flags data|metadata [ 468.481901][ T5629] Bluetooth: hci4: command tx timeout [ 468.692887][ T49] usbhid 3-1:0.0: can't add hid device: -71 [ 468.693016][ T49] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 468.716074][ T49] usb 3-1: USB disconnect, device number 22 [ 468.834682][ T31] BTRFS info (device loop1): qgroup scan completed (inconsistency flag cleared) [ 469.011058][T15458] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 469.097337][T15537] BTRFS info (device loop1): found 14 extents, stage: move data extents [ 469.192694][T15458] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 469.344154][T15537] BTRFS info (device loop1): found 1 extents, stage: update data pointers [ 469.361721][ C1] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 469.403680][T15458] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 469.468034][T15600] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3493'. [ 469.545599][T15458] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 469.581695][T15537] BTRFS info (device loop1): balance: ended with status: 0 [ 469.659219][T15041] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 470.084199][T15616] syzkaller0: entered promiscuous mode [ 470.084230][T15616] syzkaller0: entered allmulticast mode [ 470.280894][ T49] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 470.282788][T15458] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 470.322656][T15458] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 470.323812][T15458] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 470.392096][T15458] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 470.443838][ T49] usb 1-1: Using ep0 maxpacket: 32 [ 470.454078][ T49] usb 1-1: New USB device found, idVendor=2040, idProduct=c612, bcdDevice=e5.51 [ 470.454132][ T49] usb 1-1: no configurations [ 470.454148][ T49] usb 1-1: can't read configurations, error -22 [ 470.503552][T15458] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 470.509197][T15458] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 470.525946][T15458] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 470.540064][T15458] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 470.561296][ T5629] Bluetooth: hci4: command tx timeout [ 470.580675][ T49] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 470.718622][T15634] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3502'. [ 470.731002][ T49] usb 1-1: Using ep0 maxpacket: 32 [ 470.731826][ T49] usb 1-1: New USB device found, idVendor=2040, idProduct=c612, bcdDevice=e5.51 [ 470.731885][ T49] usb 1-1: no configurations [ 470.731902][ T49] usb 1-1: can't read configurations, error -22 [ 470.732507][ T49] usb usb1-port1: attempt power cycle [ 470.892807][T15639] netlink: 59 bytes leftover after parsing attributes in process `syz.5.3506'. [ 470.932330][T15458] 8021q: adding VLAN 0 to HW filter on device bond0 [ 470.969866][T15458] 8021q: adding VLAN 0 to HW filter on device team0 [ 471.000031][T13201] bridge0: port 1(bridge_slave_0) entered blocking state [ 471.000146][T13201] bridge0: port 1(bridge_slave_0) entered forwarding state [ 471.035364][T13201] bridge0: port 2(bridge_slave_1) entered blocking state [ 471.035519][T13201] bridge0: port 2(bridge_slave_1) entered forwarding state [ 471.056021][T15642] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3508'. [ 471.090752][ T49] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 471.111866][ T49] usb 1-1: Using ep0 maxpacket: 32 [ 471.112805][ T49] usb 1-1: New USB device found, idVendor=2040, idProduct=c612, bcdDevice=e5.51 [ 471.112860][ T49] usb 1-1: no configurations [ 471.112876][ T49] usb 1-1: can't read configurations, error -22 [ 471.135352][T15644] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3509'. [ 471.253581][ T49] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 471.286679][ T49] usb 1-1: Using ep0 maxpacket: 32 [ 471.287647][ T49] usb 1-1: New USB device found, idVendor=2040, idProduct=c612, bcdDevice=e5.51 [ 471.287697][ T49] usb 1-1: no configurations [ 471.287713][ T49] usb 1-1: can't read configurations, error -22 [ 471.288220][ T49] usb usb1-port1: unable to enumerate USB device [ 471.586145][T15658] netlink: 76 bytes leftover after parsing attributes in process `syz.1.3514'. [ 471.690905][ T5762] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 471.850870][ T5762] usb 3-1: Using ep0 maxpacket: 32 [ 471.854076][ T5762] usb 3-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73 [ 471.855385][ T5762] usb 3-1: config 0 has an invalid interface number: 119 but max is 0 [ 471.855413][ T5762] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 471.855437][ T5762] usb 3-1: config 0 has no interface number 0 [ 471.855479][ T5762] usb 3-1: config 0 interface 119 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 471.857991][ T5762] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 471.858020][ T5762] usb 3-1: Product: syz [ 471.858039][ T5762] usb 3-1: Manufacturer: syz [ 471.858058][ T5762] usb 3-1: SerialNumber: syz [ 472.007889][T15668] IPVS: ip_vs_add_dest(): server weight less than zero [ 472.138112][ T30] kauditd_printk_skb: 220 callbacks suppressed [ 472.138164][ T30] audit: type=1326 audit(1792511162.571:2029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15661 comm="syz.4.3516" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7f03f23030f3 code=0x7ffc0000 [ 472.138549][ T30] audit: type=1326 audit(1792511162.571:2030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15661 comm="syz.4.3516" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03f139f559 code=0x7ffc0000 [ 472.139174][ T30] audit: type=1326 audit(1792511162.571:2031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15661 comm="syz.4.3516" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03f139f559 code=0x7ffc0000 [ 472.139590][ T30] audit: type=1326 audit(1792511162.571:2032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15661 comm="syz.4.3516" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7f03f23030f3 code=0x7ffc0000 [ 472.140165][ T30] audit: type=1326 audit(1792511162.571:2033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15661 comm="syz.4.3516" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f03f135fd8e code=0x7ffc0000 [ 472.177214][ T30] audit: type=1326 audit(1792511162.571:2034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15661 comm="syz.4.3516" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7f03f23030f3 code=0x7ffc0000 [ 472.180157][ T30] audit: type=1326 audit(1792511162.581:2035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15661 comm="syz.4.3516" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03f139f559 code=0x7ffc0000 [ 472.215258][ T30] audit: type=1326 audit(1792511162.581:2036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15661 comm="syz.4.3516" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03f139f559 code=0x7ffc0000 [ 472.293127][ T30] audit: type=1326 audit(1792511162.581:2037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15661 comm="syz.4.3516" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7f03f23030f3 code=0x7ffc0000 [ 472.293789][ T30] audit: type=1326 audit(1792511162.581:2038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15661 comm="syz.4.3516" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f03f139f559 code=0x7ffc0000 [ 472.424309][ T5762] usb 3-1: config 0 descriptor?? [ 472.436515][ T5762] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.119/input/input15 [ 472.604878][T15672] netlink: 64 bytes leftover after parsing attributes in process `syz.5.3518'. [ 472.922617][T15677] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 472.923369][T15677] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 473.008462][T15654] netlink: 96 bytes leftover after parsing attributes in process `syz.2.3513'. [ 473.200386][T15674] tipc: Started in network mode [ 473.200427][T15674] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 473.226072][T15684] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3523'. [ 473.265069][T15674] tipc: New replicast peer: 2001:0000:0000:0000:0000:0000:0000:0002 [ 473.265368][T15674] tipc: Enabled bearer , priority 10 [ 473.358288][T15690] netlink: 59 bytes leftover after parsing attributes in process `syz.0.3521'. [ 473.412841][T15458] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 473.431640][ T5762] usb 3-1: USB disconnect, device number 23 [ 473.587727][T15692] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3524'. [ 473.650902][T15458] veth0_vlan: entered promiscuous mode [ 473.681756][T15458] veth1_vlan: entered promiscuous mode [ 473.765142][T15458] veth0_macvtap: entered promiscuous mode [ 473.790125][T15702] netlink: 76 bytes leftover after parsing attributes in process `syz.0.3529'. [ 473.800071][T15458] veth1_macvtap: entered promiscuous mode [ 473.836480][T15458] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 473.856461][T15458] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 473.954115][T13201] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 474.023653][ T3403] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 474.024795][ T3403] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 474.024934][ T3403] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 474.159695][ T3351] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 474.159717][ T3351] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 474.344297][T15716] IPVS: ip_vs_add_dest(): server weight less than zero [ 474.642217][ T5755] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 475.073976][T15719] netlink: 59 bytes leftover after parsing attributes in process `syz.5.3536'. [ 475.097065][ T5347] tipc: Node number set to 1 [ 475.099714][ T3341] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 475.099735][ T3341] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 475.120812][ C0] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 475.160742][ T5755] usb 3-1: Using ep0 maxpacket: 32 [ 475.165442][ T5755] usb 3-1: New USB device found, idVendor=2040, idProduct=c612, bcdDevice=e5.51 [ 475.165490][ T5755] usb 3-1: no configurations [ 475.165505][ T5755] usb 3-1: can't read configurations, error -22 [ 475.214413][T15723] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3537'. [ 475.301613][ T5755] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 475.410733][ T49] usb 1-1: new full-speed USB device number 20 using dummy_hcd [ 475.450621][ T5755] usb 3-1: Using ep0 maxpacket: 32 [ 475.451252][ T5755] usb 3-1: New USB device found, idVendor=2040, idProduct=c612, bcdDevice=e5.51 [ 475.451300][ T5755] usb 3-1: no configurations [ 475.451316][ T5755] usb 3-1: can't read configurations, error -22 [ 475.451770][ T5755] usb usb3-port1: attempt power cycle [ 475.540842][ T49] usb 1-1: device descriptor read/64, error -71 [ 475.768768][ T53] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 475.770785][ T53] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 475.778924][ T53] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 475.791270][ T53] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 475.792197][ T53] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 475.795009][ T5755] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 475.795171][ T49] usb 1-1: new full-speed USB device number 21 using dummy_hcd [ 475.830143][ T5755] usb 3-1: Using ep0 maxpacket: 32 [ 475.838446][ T5755] usb 3-1: New USB device found, idVendor=2040, idProduct=c612, bcdDevice=e5.51 [ 475.838488][ T5755] usb 3-1: no configurations [ 475.838500][ T5755] usb 3-1: can't read configurations, error -22 [ 475.950671][ T49] usb 1-1: device descriptor read/64, error -71 [ 475.967176][ T5755] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 475.982129][ T5755] usb 3-1: Using ep0 maxpacket: 32 [ 475.983892][ T5755] usb 3-1: New USB device found, idVendor=2040, idProduct=c612, bcdDevice=e5.51 [ 475.983939][ T5755] usb 3-1: no configurations [ 475.983953][ T5755] usb 3-1: can't read configurations, error -22 [ 475.984291][ T5755] usb usb3-port1: unable to enumerate USB device [ 475.987327][T15745] netlink: 76 bytes leftover after parsing attributes in process `syz.3.3544'. [ 476.060974][ T49] usb usb1-port1: attempt power cycle [ 476.420881][ T49] usb 1-1: new full-speed USB device number 22 using dummy_hcd [ 476.443448][ T49] usb 1-1: device descriptor read/8, error -71 [ 476.608076][T15741] rxe_eth0 speed is unknown, defaulting to 1000 [ 476.690699][ T49] usb 1-1: new full-speed USB device number 23 using dummy_hcd [ 476.721808][ T49] usb 1-1: device descriptor read/8, error -71 [ 476.831080][ T49] usb usb1-port1: unable to enumerate USB device [ 476.990856][ T5755] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 477.041260][ C0] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 477.123436][T15769] netlink: 59 bytes leftover after parsing attributes in process `syz.1.3551'. [ 477.150737][ T5755] usb 5-1: Using ep0 maxpacket: 16 [ 477.167252][ T30] kauditd_printk_skb: 235 callbacks suppressed [ 477.167266][ T30] audit: type=1326 audit(1792511167.751:2274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15760 comm="syz.4.3549" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f03f139f1eb code=0x7ffc0000 [ 477.167308][ T30] audit: type=1326 audit(1792511167.761:2275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15760 comm="syz.4.3549" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f03f139f1eb code=0x7ffc0000 [ 477.174802][ T5755] usb 5-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice= 0.40 [ 477.227001][ T30] audit: type=1326 audit(1792511167.821:2276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15760 comm="syz.4.3549" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f03f139f1eb code=0x7ffc0000 [ 477.267284][ T30] audit: type=1326 audit(1792511167.861:2277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15760 comm="syz.4.3549" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f03f139f1eb code=0x7ffc0000 [ 477.267420][ T30] audit: type=1326 audit(1792511167.861:2278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15760 comm="syz.4.3549" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f03f139f1eb code=0x7ffc0000 [ 477.269790][ T30] audit: type=1326 audit(1792511167.861:2279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15760 comm="syz.4.3549" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f03f139f1eb code=0x7ffc0000 [ 477.295551][ T30] audit: type=1326 audit(1792511167.891:2280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15760 comm="syz.4.3549" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f03f139f1eb code=0x7ffc0000 [ 477.321678][ T30] audit: type=1326 audit(1792511167.921:2281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15760 comm="syz.4.3549" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f03f139f1eb code=0x7ffc0000 [ 477.371641][ T30] audit: type=1326 audit(1792511167.951:2282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15760 comm="syz.4.3549" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f03f139f1eb code=0x7ffc0000 [ 477.397539][ T30] audit: type=1326 audit(1792511167.971:2283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15760 comm="syz.4.3549" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f03f139f1eb code=0x7ffc0000 [ 477.449191][ T5755] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 477.449220][ T5755] usb 5-1: Product: syz [ 477.449238][ T5755] usb 5-1: Manufacturer: syz [ 477.449257][ T5755] usb 5-1: SerialNumber: syz [ 477.921296][ T5629] Bluetooth: hci5: command tx timeout [ 477.986503][ T5755] usb 5-1: 1:1: invalid format type 0x1002 is detected, processed as PCM [ 477.986535][ T5755] usb 5-1: 1:1 : invalid UAC_FORMAT_TYPE desc [ 477.988042][ T5755] usb 5-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 478.121306][T15785] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3555'. [ 478.145298][ T5755] usb 5-1: USB disconnect, device number 13 [ 478.239340][T15515] udevd[15515]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 478.374382][T15741] bridge0: port 1(bridge_slave_0) entered blocking state [ 478.376249][T15741] bridge0: port 1(bridge_slave_0) entered disabled state [ 478.377366][T15741] bridge_slave_0: entered allmulticast mode [ 478.403450][T15741] bridge_slave_0: entered promiscuous mode [ 478.417715][T15741] bridge0: port 2(bridge_slave_1) entered blocking state [ 478.419081][T15741] bridge0: port 2(bridge_slave_1) entered disabled state [ 478.419219][T15741] bridge_slave_1: entered allmulticast mode [ 478.448419][T15741] bridge_slave_1: entered promiscuous mode [ 478.621942][T15741] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 478.634689][T15741] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 478.810432][T15741] team0: Port device team_slave_0 added [ 478.810775][ T5762] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 478.824261][T15741] team0: Port device team_slave_1 added [ 478.963552][T15741] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 478.963568][T15741] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 478.963591][T15741] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 478.965195][T15741] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 478.965206][T15741] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 478.965229][T15741] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 478.970760][ T5762] usb 4-1: Using ep0 maxpacket: 8 [ 478.982000][ T5762] usb 4-1: New USB device found, idVendor=03f0, idProduct=0004, bcdDevice= 0.40 [ 478.992975][ T5762] usb 4-1: config 1 interface 0 altsetting 201 bulk endpoint 0x1 has invalid maxpacket 8 [ 478.993007][ T5762] usb 4-1: config 1 interface 0 altsetting 201 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 478.993039][ T5762] usb 4-1: config 1 interface 0 has no altsetting 0 [ 479.000750][ T5762] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 479.000777][ T5762] usb 4-1: Product: syz [ 479.000795][ T5762] usb 4-1: Manufacturer: syz [ 479.000812][ T5762] usb 4-1: SerialNumber: syz [ 479.008182][T15794] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 479.008356][T15794] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 479.236631][ T5762] usblp0: Disabling reads from problematic bidirectional printer [ 479.241604][ T5762] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 14 if 0 alt 201 proto 1 vid 0x03F0 pid 0x0004 [ 479.253416][ T5762] usb 4-1: USB disconnect, device number 14 [ 479.282023][ T5762] usblp0: removed [ 479.310405][T15806] netlink: 59 bytes leftover after parsing attributes in process `syz.1.3563'. [ 479.345529][T15741] hsr_slave_0: entered promiscuous mode [ 479.359458][T15741] hsr_slave_1: entered promiscuous mode [ 479.360060][T15741] debugfs: 'hsr0' already exists in 'hsr' [ 479.360082][T15741] Cannot create hsr debugfs directory [ 479.933288][ T49] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 480.002719][ T5629] Bluetooth: hci5: command tx timeout [ 480.056825][T15815] netlink: 'syz.2.3567': attribute type 1 has an invalid length. [ 480.090865][ T49] usb 2-1: Using ep0 maxpacket: 32 [ 480.091623][ T49] usb 2-1: New USB device found, idVendor=2040, idProduct=c612, bcdDevice=e5.51 [ 480.091667][ T49] usb 2-1: no configurations [ 480.091683][ T49] usb 2-1: can't read configurations, error -22 [ 480.178060][T15741] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 480.178104][T15741] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 480.221647][ T49] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 480.222414][ T5762] usb 4-1: new low-speed USB device number 15 using dummy_hcd [ 480.353516][T15741] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 480.353561][T15741] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 480.374482][ T49] usb 2-1: Using ep0 maxpacket: 32 [ 480.398600][ T49] usb 2-1: New USB device found, idVendor=2040, idProduct=c612, bcdDevice=e5.51 [ 480.398649][ T49] usb 2-1: no configurations [ 480.398665][ T49] usb 2-1: can't read configurations, error -22 [ 480.399496][ T49] usb usb2-port1: attempt power cycle [ 480.565938][T15741] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 480.565983][T15741] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 480.743651][T15741] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 480.743696][T15741] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 480.772523][ T49] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 480.802961][ T49] usb 2-1: Using ep0 maxpacket: 32 [ 480.804632][ T49] usb 2-1: New USB device found, idVendor=2040, idProduct=c612, bcdDevice=e5.51 [ 480.805247][ T49] usb 2-1: no configurations [ 480.805264][ T49] usb 2-1: can't read configurations, error -22 [ 480.931415][ T49] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 480.952743][ T49] usb 2-1: Using ep0 maxpacket: 32 [ 480.953498][ T49] usb 2-1: New USB device found, idVendor=2040, idProduct=c612, bcdDevice=e5.51 [ 480.953543][ T49] usb 2-1: no configurations [ 480.953558][ T49] usb 2-1: can't read configurations, error -22 [ 480.953802][ T49] usb usb2-port1: unable to enumerate USB device [ 481.071813][T13920] bridge_slave_1: left allmulticast mode [ 481.071905][T13920] bridge_slave_1: left promiscuous mode [ 481.073115][T13920] bridge0: port 2(bridge_slave_1) entered disabled state [ 481.101934][T15829] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3571'. [ 481.126203][T13920] bridge_slave_0: left allmulticast mode [ 481.126227][T13920] bridge_slave_0: left promiscuous mode [ 481.126518][T13920] bridge0: port 1(bridge_slave_0) entered disabled state [ 481.841157][ T5797] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 481.990930][ T5797] usb 3-1: Using ep0 maxpacket: 16 [ 482.000034][ T5797] usb 3-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice= 0.40 [ 482.049434][ T5797] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 482.049518][ T5797] usb 3-1: Product: syz [ 482.049537][ T5797] usb 3-1: Manufacturer: syz [ 482.049556][ T5797] usb 3-1: SerialNumber: syz [ 482.080902][ T5629] Bluetooth: hci5: command tx timeout [ 482.186848][T13920] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 482.202935][T13920] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 482.208054][T13920] bond0 (unregistering): (slave syzkaller0): Releasing backup interface [ 482.209978][T13920] tipc: Resetting bearer [ 482.276361][T13920] tipc: Resetting bearer [ 482.277119][T13920] bond0 (unregistering): Released all slaves [ 482.305937][ T30] kauditd_printk_skb: 220 callbacks suppressed [ 482.305955][ T30] audit: type=1326 audit(1792511172.901:2504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15833 comm="syz.2.3572" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7f3a8a0290f3 code=0x7ffc0000 [ 482.307540][ T30] audit: type=1326 audit(1792511172.901:2505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15833 comm="syz.2.3572" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a8919f559 code=0x7ffc0000 [ 482.309294][ T30] audit: type=1326 audit(1792511172.901:2506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15833 comm="syz.2.3572" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a8919f559 code=0x7ffc0000 [ 482.337451][T13920] bond1 (unregistering): Released all slaves [ 482.376088][ T30] audit: type=1326 audit(1792511172.941:2507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15833 comm="syz.2.3572" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a8919f559 code=0x7ffc0000 [ 482.376150][ T30] audit: type=1326 audit(1792511172.941:2508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15833 comm="syz.2.3572" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7f3a8a0290f3 code=0x7ffc0000 [ 482.376204][ T30] audit: type=1326 audit(1792511172.961:2509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15833 comm="syz.2.3572" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7f3a8a0290f3 code=0x7ffc0000 [ 482.376256][ T30] audit: type=1326 audit(1792511172.971:2510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15833 comm="syz.2.3572" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a8919f559 code=0x7ffc0000 [ 482.376308][ T30] audit: type=1326 audit(1792511172.971:2511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15833 comm="syz.2.3572" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f3a8915fd8e code=0x7ffc0000 [ 482.434830][ T30] audit: type=1326 audit(1792511173.031:2512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15833 comm="syz.2.3572" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7f3a8a0290f3 code=0x7ffc0000 [ 482.434890][ T30] audit: type=1326 audit(1792511173.031:2513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15833 comm="syz.2.3572" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a8919f559 code=0x7ffc0000 [ 482.435029][T13920] bond2 (unregistering): Released all slaves [ 482.676440][T13920] bond3 (unregistering): Released all slaves [ 483.129063][ T5762] usb 4-1: unable to get BOS descriptor or descriptor too short [ 483.129106][ T5762] usb 4-1: New USB device found, idVendor=077d, idProduct=627a, bcdDevice= 0.10 [ 483.129140][ T5762] usb 4-1: too many configurations: 227, using maximum allowed: 8 [ 483.130375][ T5762] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 483.130405][ T5762] usb 4-1: can't read configurations, error -71 [ 483.341125][T13920] tipc: Disabling bearer [ 483.377547][T13920] tipc: Left network mode [ 483.396142][T13920] IPVS: stopping master sync thread 6242 ... [ 483.410601][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 483.471103][T13920] IPVS: stopping backup sync thread 11411 ... [ 483.513860][ T5797] usb 3-1: 1:1: invalid format type 0x1002 is detected, processed as PCM [ 483.513887][ T5797] usb 3-1: 1:1 : invalid UAC_FORMAT_TYPE desc [ 483.514670][ T5797] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 483.676637][ T5797] usb 3-1: USB disconnect, device number 28 [ 483.839394][T15792] udevd[15792]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 484.123865][T15741] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 484.161375][ T53] Bluetooth: hci5: command tx timeout [ 484.179443][T15741] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 484.212626][T13920] batman_adv: batadv0: Interface deactivated: macvlan2 [ 484.234166][T13920] batman_adv: batadv0: Removing interface: macvlan2 [ 484.306821][T15741] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 484.329133][T15741] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 484.366737][T15741] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 484.404318][T15741] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 484.444194][T15741] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 484.488233][T15741] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 484.525256][T15872] syzkaller0: entered promiscuous mode [ 484.525279][T15872] syzkaller0: entered allmulticast mode [ 484.733035][T15886] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3588'. [ 484.879405][T15878] block device autoloading is deprecated and will be removed. [ 484.914449][T15871] device-mapper: ioctl: device has been removed from the dev hash table. [ 485.000719][ T5797] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 485.021639][T13920] hsr_slave_0: left promiscuous mode [ 485.046641][T13920] hsr_slave_1: left promiscuous mode [ 485.051443][T13920] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 485.051476][T13920] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 485.078751][T13920] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 485.078774][T13920] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 485.150815][ T5797] usb 3-1: Using ep0 maxpacket: 32 [ 485.154737][ T5797] usb 3-1: New USB device found, idVendor=2040, idProduct=c612, bcdDevice=e5.51 [ 485.157389][ T5797] usb 3-1: config 123 has an invalid descriptor of length 0, skipping remainder of the config [ 485.157416][ T5797] usb 3-1: config 123 has 0 interfaces, different from the descriptor's value: 1 [ 485.159638][T13920] veth1_macvtap: left promiscuous mode [ 485.159697][T13920] veth0_macvtap: left promiscuous mode [ 485.211692][ T5797] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 485.211722][ T5797] usb 3-1: Product: syz [ 485.211740][ T5797] usb 3-1: Manufacturer: syz [ 485.211759][ T5797] usb 3-1: SerialNumber: syz [ 485.218301][T13920] veth1_vlan: left promiscuous mode [ 485.218374][T13920] v: left promiscuous mode [ 485.263582][T15891] loop4: detected capacity change from 0 to 16 [ 485.288834][T15891] erofs (device loop4): invalid ishare xattr prefix id 0 [ 485.843998][ T5629] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 486.880661][T15909] ------------[ cut here ]------------ [ 486.880679][T15909] sp->magic != HWSIM_STA_MAGIC [ 486.880690][T15909] WARNING: drivers/net/wireless/virtual/mac80211_hwsim_main.c:258 at mac80211_hwsim_tx+0x1cec/0x2580, CPU#1: syz.0.3592/15909 [ 486.904086][T15909] Modules linked in: [ 486.907994][T15909] CPU: 1 UID: 0 PID: 15909 Comm: syz.0.3592 Tainted: G L syzkaller #0 PREEMPT(full) [ 486.918946][T15909] Tainted: [L]=SOFTLOCKUP [ 486.923283][T15909] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 486.933425][T15909] RIP: 0010:mac80211_hwsim_tx+0x1cec/0x2580 [ 486.939360][T15909] Code: e8 03 42 0f b6 04 20 84 c0 0f 85 ee 07 00 00 45 0f b6 8d 59 08 00 00 4c 89 ee 67 48 0f b9 3a e9 dc f4 ff ff e8 a5 59 8a fa 90 <0f> 0b 90 e9 3f f5 ff ff e8 97 59 8a fa 90 0f 0b 90 48 8b 7c 24 20 [ 486.958990][T15909] RSP: 0018:ffffc9000353eb80 EFLAGS: 00010287 [ 486.965098][T15909] RAX: ffffffff873dcb8b RBX: 0000000000000000 RCX: 0000000000080000 [ 486.973091][T15909] RDX: ffffc90013e63000 RSI: 0000000000000195 RDI: 0000000000000196 [ 486.981100][T15909] RBP: ffffc9000353ed10 R08: ffff88807650d3cf R09: ffff88807650d3c0 [ 486.989075][T15909] R10: dffffc0000000000 R11: ffffffff873daea0 R12: dffffc0000000000 [ 486.997067][T15909] R13: 00000000ffffffff R14: 0000000000000000 R15: 1ffff920006a7dbc [ 487.005058][T15909] FS: 00007f085bc046c0(0000) GS:ffff888123bbb000(0000) knlGS:0000000000000000 [ 487.014030][T15909] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 487.020640][T15909] CR2: 0000000000000008 CR3: 0000000078847000 CR4: 0000000000350ef0 [ 487.028614][T15909] Call Trace: [ 487.031910][T15909] [ 487.034842][T15909] ? __pfx_mac80211_hwsim_tx+0x10/0x10 [ 487.040321][T15909] ? srso_alias_return_thunk+0x5/0xfbef5 [ 487.046000][T15909] ieee80211_tx_frags+0x3df/0x890 [ 487.051070][T15909] ? __pfx_ieee80211_tx_frags+0x10/0x10 [ 487.056600][T15909] ? srso_alias_return_thunk+0x5/0xfbef5 [ 487.062273][T15909] __ieee80211_xmit_fast+0xabf/0x2160 [ 487.067636][T15909] ? srso_alias_return_thunk+0x5/0xfbef5 [ 487.073299][T15909] ? __flow_hash_from_keys+0x431/0x6c0 [ 487.078748][T15909] ? cfg80211_classify8021d+0x67e/0x1220 [ 487.084407][T15909] ? srso_alias_return_thunk+0x5/0xfbef5 [ 487.090052][T15909] ? __pfx___ieee80211_xmit_fast+0x10/0x10 [ 487.095897][T15909] ? srso_alias_return_thunk+0x5/0xfbef5 [ 487.101554][T15909] ? srso_alias_return_thunk+0x5/0xfbef5 [ 487.107176][T15909] ? ieee80211_downgrade_queue+0x432/0x5b0 [ 487.113023][T15909] ? ieee80211_mesh_xmit_fast+0x902/0xe20 [ 487.118743][T15909] ieee80211_mesh_xmit_fast+0xa6d/0xe20 [ 487.124332][T15909] ? lock_acquire+0x115/0x350 [ 487.129000][T15909] ? __pfx_ieee80211_mesh_xmit_fast+0x10/0x10 [ 487.135119][T15909] ? __ieee80211_subif_start_xmit+0x2e6/0x1770 [ 487.141316][T15909] __ieee80211_subif_start_xmit+0x706/0x1770 [ 487.147308][T15909] ? sock_alloc_send_pskb+0x95e/0xa70 [ 487.152714][T15909] ? __pfx___ieee80211_subif_start_xmit+0x10/0x10 [ 487.159129][T15909] ? vfs_write+0x612/0xba0 [ 487.163572][T15909] ? ksys_write+0x150/0x270 [ 487.168060][T15909] ? do_syscall_64+0x166/0x520 [ 487.172847][T15909] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 487.178911][T15909] ieee80211_subif_start_xmit+0xf1/0x570 [ 487.184590][T15909] ? __pfx_ieee80211_subif_start_xmit+0x10/0x10 [ 487.190849][T15909] ? netif_skb_features+0x8ba/0xf20 [ 487.196074][T15909] ? __pfx_netif_skb_features+0x10/0x10 [ 487.201641][T15909] ? __lock_acquire+0x747/0x2de0 [ 487.206575][T15909] dev_hard_start_xmit+0x2cd/0x830 [ 487.211731][T15909] __dev_queue_xmit+0x14d1/0x3920 [ 487.216745][T15909] ? srso_alias_return_thunk+0x5/0xfbef5 [ 487.222434][T15909] ? __dev_queue_xmit+0x29b/0x3920 [ 487.227550][T15909] ? srso_alias_return_thunk+0x5/0xfbef5 [ 487.233206][T15909] ? _copy_from_iter+0x20a/0x1660 [ 487.238224][T15909] ? skb_set_owner_w+0x263/0x3d0 [ 487.243191][T15909] ? __pfx___dev_queue_xmit+0x10/0x10 [ 487.248563][T15909] ? __pfx__copy_from_iter+0x10/0x10 [ 487.253914][T15909] ? __pfx_packet_parse_headers+0x10/0x10 [ 487.259628][T15909] ? srso_alias_return_thunk+0x5/0xfbef5 [ 487.265281][T15909] ? packet_xmit+0x68/0x330 [ 487.269769][T15909] ? skb_put+0x112/0x210 [ 487.274059][T15909] packet_sendmsg+0x3f11/0x51a0 [ 487.278906][T15909] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 487.284339][T15909] ? srso_alias_return_thunk+0x5/0xfbef5 [ 487.289960][T15909] ? lock_acquire+0x115/0x350 [ 487.294663][T15909] ? srso_alias_return_thunk+0x5/0xfbef5 [ 487.300288][T15909] ? aa_file_perm+0x18b/0x15f0 [ 487.305074][T15909] ? __pfx_packet_sendmsg+0x10/0x10 [ 487.310256][T15909] ? aa_sk_perm+0x713/0x900 [ 487.314792][T15909] ? __pfx_aa_sk_perm+0x10/0x10 [ 487.319637][T15909] ? srso_alias_return_thunk+0x5/0xfbef5 [ 487.325300][T15909] ? srso_alias_return_thunk+0x5/0xfbef5 [ 487.330956][T15909] ? aa_sock_msg_perm+0x144/0x210 [ 487.335967][T15909] ? srso_alias_return_thunk+0x5/0xfbef5 [ 487.341617][T15909] ? apparmor_socket_sendmsg+0x98/0x360 [ 487.347158][T15909] ? srso_alias_return_thunk+0x5/0xfbef5 [ 487.352835][T15909] ? __pfx_packet_sendmsg+0x10/0x10 [ 487.358021][T15909] sock_sendmsg_nosec+0x13a/0x180 [ 487.363083][T15909] sock_write_iter+0x2de/0x3e0 [ 487.367856][T15909] ? __pfx_sock_write_iter+0x10/0x10 [ 487.373198][T15909] ? srso_alias_return_thunk+0x5/0xfbef5 [ 487.378817][T15909] ? security_file_permission+0x75/0x260 [ 487.384528][T15909] vfs_write+0x612/0xba0 [ 487.388772][T15909] ? __pfx_vfs_write+0x10/0x10 [ 487.393561][T15909] ? srso_alias_return_thunk+0x5/0xfbef5 [ 487.399212][T15909] ? __fget_files+0x3a2/0x420 [ 487.403907][T15909] ? __fget_files+0x2a/0x420 [ 487.408487][T15909] ? srso_alias_return_thunk+0x5/0xfbef5 [ 487.414137][T15909] ? fdget+0x1ac/0x250 [ 487.418192][T15909] ? srso_alias_return_thunk+0x5/0xfbef5 [ 487.423848][T15909] ksys_write+0x150/0x270 [ 487.428166][T15909] ? __pfx_ksys_write+0x10/0x10 [ 487.433046][T15909] do_syscall_64+0x166/0x520 [ 487.437625][T15909] ? trace_irq_disable+0x3b/0x140 [ 487.442677][T15909] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 487.448737][T15909] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 487.454657][T15909] RIP: 0033:0x7f085ad9f559 [ 487.459057][T15909] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 487.478679][T15909] RSP: 002b:00007f085bc04028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 487.487113][T15909] RAX: ffffffffffffffda RBX: 00007f085b026360 RCX: 00007f085ad9f559 [ 487.495109][T15909] RDX: 000000000000001c RSI: 0000200000000600 RDI: 0000000000000006 [ 487.503096][T15909] RBP: 00007f085ae36b20 R08: 0000000000000000 R09: 0000000000000000 [ 487.511082][T15909] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 487.519034][T15909] R13: 00007f085b0263f8 R14: 00007f085b026360 R15: 00007ffe96f75148 [ 487.527058][T15909] [ 487.530060][T15909] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 487.537319][T15909] CPU: 1 UID: 0 PID: 15909 Comm: syz.0.3592 Tainted: G L syzkaller #0 PREEMPT(full) [ 487.548240][T15909] Tainted: [L]=SOFTLOCKUP [ 487.552559][T15909] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 487.562592][T15909] Call Trace: [ 487.565850][T15909] [ 487.568757][T15909] vpanic+0x56d/0xa60 [ 487.572733][T15909] ? __pfx__printk+0x10/0x10 [ 487.577329][T15909] ? __pfx_vpanic+0x10/0x10 [ 487.581846][T15909] ? is_bpf_text_address+0x292/0x2b0 [ 487.587122][T15909] ? is_bpf_text_address+0x26/0x2b0 [ 487.592319][T15909] panic+0xc5/0xd0 [ 487.596037][T15909] ? __pfx_panic+0x10/0x10 [ 487.600460][T15909] __warn+0x315/0x4c0 [ 487.604442][T15909] ? mac80211_hwsim_tx+0x1cec/0x2580 [ 487.609744][T15909] ? mac80211_hwsim_tx+0x1cec/0x2580 [ 487.615038][T15909] __report_bug+0x276/0x570 [ 487.619533][T15909] ? srso_alias_return_thunk+0x5/0xfbef5 [ 487.625157][T15909] ? mac80211_hwsim_tx+0x1cec/0x2580 [ 487.630437][T15909] ? __pfx___report_bug+0x10/0x10 [ 487.635459][T15909] ? srso_alias_return_thunk+0x5/0xfbef5 [ 487.641078][T15909] ? ieee80211_encrypt_tx_skb+0x2fc/0x3f0 [ 487.646792][T15909] ? mac80211_hwsim_tx+0x1cec/0x2580 [ 487.652073][T15909] report_bug+0x16b/0x220 [ 487.656394][T15909] ? mac80211_hwsim_tx+0x1cec/0x2580 [ 487.661670][T15909] ? mac80211_hwsim_tx+0x1cee/0x2580 [ 487.666963][T15909] handle_bug+0x9c/0x200 [ 487.671200][T15909] exc_invalid_op+0x1a/0x50 [ 487.675699][T15909] asm_exc_invalid_op+0x1a/0x20 [ 487.680535][T15909] RIP: 0010:mac80211_hwsim_tx+0x1cec/0x2580 [ 487.686441][T15909] Code: e8 03 42 0f b6 04 20 84 c0 0f 85 ee 07 00 00 45 0f b6 8d 59 08 00 00 4c 89 ee 67 48 0f b9 3a e9 dc f4 ff ff e8 a5 59 8a fa 90 <0f> 0b 90 e9 3f f5 ff ff e8 97 59 8a fa 90 0f 0b 90 48 8b 7c 24 20 [ 487.706027][T15909] RSP: 0018:ffffc9000353eb80 EFLAGS: 00010287 [ 487.712097][T15909] RAX: ffffffff873dcb8b RBX: 0000000000000000 RCX: 0000000000080000 [ 487.720049][T15909] RDX: ffffc90013e63000 RSI: 0000000000000195 RDI: 0000000000000196 [ 487.728019][T15909] RBP: ffffc9000353ed10 R08: ffff88807650d3cf R09: ffff88807650d3c0 [ 487.735973][T15909] R10: dffffc0000000000 R11: ffffffff873daea0 R12: dffffc0000000000 [ 487.743927][T15909] R13: 00000000ffffffff R14: 0000000000000000 R15: 1ffff920006a7dbc [ 487.751890][T15909] ? __pfx_mac80211_hwsim_tx+0x10/0x10 [ 487.757365][T15909] ? mac80211_hwsim_tx+0x1ceb/0x2580 [ 487.762671][T15909] ? __pfx_mac80211_hwsim_tx+0x10/0x10 [ 487.768127][T15909] ? srso_alias_return_thunk+0x5/0xfbef5 [ 487.773766][T15909] ieee80211_tx_frags+0x3df/0x890 [ 487.778792][T15909] ? __pfx_ieee80211_tx_frags+0x10/0x10 [ 487.784322][T15909] ? srso_alias_return_thunk+0x5/0xfbef5 [ 487.789974][T15909] __ieee80211_xmit_fast+0xabf/0x2160 [ 487.795335][T15909] ? srso_alias_return_thunk+0x5/0xfbef5 [ 487.800971][T15909] ? __flow_hash_from_keys+0x431/0x6c0 [ 487.806418][T15909] ? cfg80211_classify8021d+0x67e/0x1220 [ 487.812039][T15909] ? srso_alias_return_thunk+0x5/0xfbef5 [ 487.817683][T15909] ? __pfx___ieee80211_xmit_fast+0x10/0x10 [ 487.823489][T15909] ? srso_alias_return_thunk+0x5/0xfbef5 [ 487.829109][T15909] ? srso_alias_return_thunk+0x5/0xfbef5 [ 487.834725][T15909] ? ieee80211_downgrade_queue+0x432/0x5b0 [ 487.840528][T15909] ? ieee80211_mesh_xmit_fast+0x902/0xe20 [ 487.846267][T15909] ieee80211_mesh_xmit_fast+0xa6d/0xe20 [ 487.851812][T15909] ? lock_acquire+0x115/0x350 [ 487.856482][T15909] ? __pfx_ieee80211_mesh_xmit_fast+0x10/0x10 [ 487.862553][T15909] ? __ieee80211_subif_start_xmit+0x2e6/0x1770 [ 487.868692][T15909] __ieee80211_subif_start_xmit+0x706/0x1770 [ 487.874691][T15909] ? sock_alloc_send_pskb+0x95e/0xa70 [ 487.880071][T15909] ? __pfx___ieee80211_subif_start_xmit+0x10/0x10 [ 487.886468][T15909] ? vfs_write+0x612/0xba0 [ 487.890868][T15909] ? ksys_write+0x150/0x270 [ 487.895354][T15909] ? do_syscall_64+0x166/0x520 [ 487.900124][T15909] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 487.906182][T15909] ieee80211_subif_start_xmit+0xf1/0x570 [ 487.911804][T15909] ? __pfx_ieee80211_subif_start_xmit+0x10/0x10 [ 487.918027][T15909] ? netif_skb_features+0x8ba/0xf20 [ 487.923225][T15909] ? __pfx_netif_skb_features+0x10/0x10 [ 487.928776][T15909] ? __lock_acquire+0x747/0x2de0 [ 487.933713][T15909] dev_hard_start_xmit+0x2cd/0x830 [ 487.938829][T15909] __dev_queue_xmit+0x14d1/0x3920 [ 487.943840][T15909] ? srso_alias_return_thunk+0x5/0xfbef5 [ 487.949490][T15909] ? __dev_queue_xmit+0x29b/0x3920 [ 487.954626][T15909] ? srso_alias_return_thunk+0x5/0xfbef5 [ 487.960248][T15909] ? _copy_from_iter+0x20a/0x1660 [ 487.965267][T15909] ? skb_set_owner_w+0x263/0x3d0 [ 487.970196][T15909] ? __pfx___dev_queue_xmit+0x10/0x10 [ 487.975562][T15909] ? __pfx__copy_from_iter+0x10/0x10 [ 487.980856][T15909] ? __pfx_packet_parse_headers+0x10/0x10 [ 487.986566][T15909] ? srso_alias_return_thunk+0x5/0xfbef5 [ 487.992185][T15909] ? packet_xmit+0x68/0x330 [ 487.996674][T15909] ? skb_put+0x112/0x210 [ 488.000903][T15909] packet_sendmsg+0x3f11/0x51a0 [ 488.005748][T15909] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 488.011131][T15909] ? srso_alias_return_thunk+0x5/0xfbef5 [ 488.016761][T15909] ? lock_acquire+0x115/0x350 [ 488.021429][T15909] ? srso_alias_return_thunk+0x5/0xfbef5 [ 488.027051][T15909] ? aa_file_perm+0x18b/0x15f0 [ 488.031804][T15909] ? __pfx_packet_sendmsg+0x10/0x10 [ 488.036982][T15909] ? aa_sk_perm+0x713/0x900 [ 488.041487][T15909] ? __pfx_aa_sk_perm+0x10/0x10 [ 488.046328][T15909] ? srso_alias_return_thunk+0x5/0xfbef5 [ 488.051950][T15909] ? srso_alias_return_thunk+0x5/0xfbef5 [ 488.057569][T15909] ? aa_sock_msg_perm+0x144/0x210 [ 488.062579][T15909] ? srso_alias_return_thunk+0x5/0xfbef5 [ 488.068199][T15909] ? apparmor_socket_sendmsg+0x98/0x360 [ 488.073735][T15909] ? srso_alias_return_thunk+0x5/0xfbef5 [ 488.079361][T15909] ? __pfx_packet_sendmsg+0x10/0x10 [ 488.084541][T15909] sock_sendmsg_nosec+0x13a/0x180 [ 488.089562][T15909] sock_write_iter+0x2de/0x3e0 [ 488.094319][T15909] ? __pfx_sock_write_iter+0x10/0x10 [ 488.099606][T15909] ? srso_alias_return_thunk+0x5/0xfbef5 [ 488.105223][T15909] ? security_file_permission+0x75/0x260 [ 488.110857][T15909] vfs_write+0x612/0xba0 [ 488.115094][T15909] ? __pfx_vfs_write+0x10/0x10 [ 488.119843][T15909] ? srso_alias_return_thunk+0x5/0xfbef5 [ 488.125461][T15909] ? __fget_files+0x3a2/0x420 [ 488.130121][T15909] ? __fget_files+0x2a/0x420 [ 488.134696][T15909] ? srso_alias_return_thunk+0x5/0xfbef5 [ 488.140315][T15909] ? fdget+0x1ac/0x250 [ 488.144368][T15909] ? srso_alias_return_thunk+0x5/0xfbef5 [ 488.149989][T15909] ksys_write+0x150/0x270 [ 488.154304][T15909] ? __pfx_ksys_write+0x10/0x10 [ 488.159150][T15909] do_syscall_64+0x166/0x520 [ 488.163730][T15909] ? trace_irq_disable+0x3b/0x140 [ 488.168744][T15909] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 488.174797][T15909] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 488.180675][T15909] RIP: 0033:0x7f085ad9f559 [ 488.185090][T15909] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 488.204676][T15909] RSP: 002b:00007f085bc04028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 488.213072][T15909] RAX: ffffffffffffffda RBX: 00007f085b026360 RCX: 00007f085ad9f559 [ 488.221066][T15909] RDX: 000000000000001c RSI: 0000200000000600 RDI: 0000000000000006 [ 488.229017][T15909] RBP: 00007f085ae36b20 R08: 0000000000000000 R09: 0000000000000000 [ 488.236985][T15909] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 488.244941][T15909] R13: 00007f085b0263f8 R14: 00007f085b026360 R15: 00007ffe96f75148 [ 488.252912][T15909] [ 488.256118][T15909] Kernel Offset: disabled [ 488.260424][T15909] Rebooting in 86400 seconds..