last executing test programs: 2m36.718131445s ago: executing program 0 (id=65): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000100)=[@in6={0xa, 0x4e21, 0x5, @private2, 0xffff7830}], 0x1c) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000140), 0x4) listen(r0, 0x2) accept4$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote}, &(0x7f0000001900)=0x1c, 0x0) 2m35.703990534s ago: executing program 0 (id=72): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000180), 0x0) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000000)=@in={0x2, 0x4e22, @loopback}, 0x10, &(0x7f0000000080)=[{&(0x7f00000001c0)}], 0x1, &(0x7f00000001c0)=ANY=[@ANYBLOB="14000000840000000500000010000000010000002c0000008400000001000000db02020009000000ce09000081000000040000000000000004000000", @ANYRES32=0x0], 0x40, 0x48001}], 0x1, 0x40) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, &(0x7f0000000540)={{}, {0x18}, 0x0, 0xbf}) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') syz_io_uring_setup(0x7d3f, &(0x7f0000000540)={0x0, 0xcf0b, 0x8000, 0x3, 0x11}, 0x0, &(0x7f0000000080)=0x0, 0x0) syz_io_uring_submit(0x0, r1, 0x0, &(0x7f0000000280)=@IORING_OP_WRITE={0x17, 0x1, 0x6000, @fd_index=0x4, 0x4, 0x0, 0x0, 0x4, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) syz_genetlink_get_family_id$ipvs(&(0x7f0000000200), 0xffffffffffffffff) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r2 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) ioctl$DVB_DEMUX_DMX_SET_FILTER(r2, 0x403c6f2b, &(0x7f0000001e40)={0x4, {"0dbad96fff01000008ff002084000100", "3dfab043e15fad27a639f105b5e9f977", "a7c980420000000000000000fd4a70f3"}, 0x40008, 0x5}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, 0x0) preadv(r2, &(0x7f0000000480)=[{&(0x7f0000000180)=""/1, 0x1}], 0x1, 0x1, 0xa) ioctl$DVB_DEMUX_DMX_REMOVE_PID(r2, 0x40026f34, &(0x7f0000000100)) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000080)={0x8, 0x6, 0x2}, 0x10) r6 = socket(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@newqdisc={0x40, 0x24, 0xf0b, 0xffffffff, 0x25dfdbff, {0x60, 0x0, 0x0, r8, {0x0, 0x3}, {0xffff, 0xffff}, {0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_ORPHAN_MASK={0x8, 0xa, 0xffffffa4}, @TCA_FQ_FLOW_REFILL_DELAY={0x8, 0x9, 0x6}]}}]}, 0x40}}, 0x4040) r9 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000380)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r10, @ANYBLOB="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"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4) 2m34.177077466s ago: executing program 0 (id=78): syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) socket$kcm(0x1e, 0x5, 0x0) socket$tipc(0x1e, 0x5, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000020)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000030)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000050)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000070)) socket$kcm(0x1e, 0x4, 0x0) socket$kcm(0x1e, 0x4, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000090)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000a0)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000b0)) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000004c0)={'bond0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010001d0025bd7000fadbdf2500000000", @ANYRES32=r2, @ANYBLOB="138000002b9201002400128009000100626f6e6400000000140002800800", @ANYRES16=r0], 0x44}, 0x1, 0x0, 0x0, 0x40448e0}, 0x0) 2m33.619793194s ago: executing program 0 (id=82): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000100)=[@in6={0xa, 0x4e21, 0x5, @private2, 0xffff7830}], 0x1c) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000140), 0x4) listen(r0, 0x2) accept4$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote}, &(0x7f0000001900)=0x1c, 0x0) 2m32.618984956s ago: executing program 0 (id=87): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x9}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) openat$drirender128(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) sendmmsg$inet6(r0, &(0x7f0000000480)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x50000000}, 0x1c, &(0x7f0000000680)}}], 0x1, 0x80) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f00000002c0)=ANY=[@ANYBLOB="12e01b3989dd"], 0x1000f) 2m32.373878797s ago: executing program 0 (id=88): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x4, 0xfffffffffffffffb}, {0x0, 0x3fffffffffffff, 0x200000000000000}, 0xfffffffe}}, 0xb8}, 0x1, 0x0, 0x0, 0x4000015}, 0x2c000010) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xc4, 0x19, 0x1, 0xfffffffe, 0x400000, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x8, 0xfffffffffffffffb, 0x0, 0xfffffffffffffffb}, {0x0, 0x0, 0x200000000000000}}, [@mark={0xc, 0x15, {0x35075a, 0x10}}]}, 0xc4}, 0x1, 0x0, 0x0, 0x40100}, 0x2c000010) r2 = getpid() sched_setattr(r2, &(0x7f0000000340)={0x38, 0x0, 0x1000002d, 0x12000, 0x299c0, 0x7, 0x395400000000000, 0xfc5, 0x3, 0x5507}, 0x0) ptrace$getregset(0x4204, r2, 0x201, &(0x7f0000000580)={&(0x7f0000000440)=""/27, 0x1b}) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100004b41460860163209ea800102030109021e0001000000000904"], 0x0) r4 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) openat$rtc(0xffffff9c, &(0x7f0000000140), 0x0, 0x0) r5 = socket(0x10, 0x2, 0x0) write(r5, &(0x7f0000000480)="1c0000001a009b8a140000003bffffff8000000081ff000000000000", 0x1c) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r6 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) ioctl$USBDEVFS_CLAIMINTERFACE(r6, 0x8004550f, &(0x7f0000000200)=0x4) ioctl$I2C_SMBUS(r4, 0x720, &(0x7f00000000c0)={0x0, 0xb, 0x6, &(0x7f0000000080)={0x2, "f70ee65261614b1f4c81b8384514a26a62fc2dbc1acb09bb337e117893548884ee"}}) openat$ttynull(0xffffff9c, &(0x7f0000000100), 0x200, 0x0) r7 = syz_open_dev$dvb_dvr(&(0x7f0000000400), 0x3, 0x42000) r8 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) close(r9) close_range(r7, r8, 0x0) syz_usb_control_io$sierra_net(r3, &(0x7f0000000380)={0xc, &(0x7f0000000240)={0x0, 0xf, 0xc1, {0xc1, 0xb, "73f5f661245b241abb3d47545fd1187d0906155c2cfd6dc8f516d386d66518ea96bbb5a252cd94971bfd12b74f76bbc3798f92dd5ce6788d5971b92991a1d01c47aa135b2a9de47040cde311bbe62372abf33480de786fc32f95a0deabfa934ef700bda1e3256936dbd8ecafbc97d9ec1e938bc29d841141f75b04b85178d2ff8836172948a8c6f47c03c3e6ef1667aa0f61468c2ec67b51052017cc9b3432f405621bfc728ff2ced8131b442f68a4dde02f854410c500322b95b692842627"}}, &(0x7f0000000340)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x3409}}}, &(0x7f0000000b00)={0x10, &(0x7f00000003c0)={0x20, 0xf}, &(0x7f0000000680)={0xa1, 0x1, 0x400, "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"}, &(0x7f0000000ac0)={0x21, 0x0, 0x2, "cb36"}}) setsockopt$inet_opts(r5, 0x0, 0x0, &(0x7f0000000b40)="63c18752044483decef41595b24c5a6889117c50d49fc2427b9e9c3bfda7d11c30f1da76b23ebdb28cf6da1c622264126706f4a8fd7c2a3f7ca74bf62dcf2a4b7ab2f1f11ea0607efcf971f1c4b78471f3ceb6284845715bb2f2ac0a7ff43aa07d8b58fa697acbc75c466aa3c9a5b2797fa95176e2f4d657b1ece49575d75b57a0ff372eff2a2126db9ed18c0efa184528c0bb25788c9e", 0x97) 2m17.256796793s ago: executing program 32 (id=88): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x4, 0xfffffffffffffffb}, {0x0, 0x3fffffffffffff, 0x200000000000000}, 0xfffffffe}}, 0xb8}, 0x1, 0x0, 0x0, 0x4000015}, 0x2c000010) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xc4, 0x19, 0x1, 0xfffffffe, 0x400000, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x8, 0xfffffffffffffffb, 0x0, 0xfffffffffffffffb}, {0x0, 0x0, 0x200000000000000}}, [@mark={0xc, 0x15, {0x35075a, 0x10}}]}, 0xc4}, 0x1, 0x0, 0x0, 0x40100}, 0x2c000010) r2 = getpid() sched_setattr(r2, &(0x7f0000000340)={0x38, 0x0, 0x1000002d, 0x12000, 0x299c0, 0x7, 0x395400000000000, 0xfc5, 0x3, 0x5507}, 0x0) ptrace$getregset(0x4204, r2, 0x201, &(0x7f0000000580)={&(0x7f0000000440)=""/27, 0x1b}) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100004b41460860163209ea800102030109021e0001000000000904"], 0x0) r4 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) openat$rtc(0xffffff9c, &(0x7f0000000140), 0x0, 0x0) r5 = socket(0x10, 0x2, 0x0) write(r5, &(0x7f0000000480)="1c0000001a009b8a140000003bffffff8000000081ff000000000000", 0x1c) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r6 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) ioctl$USBDEVFS_CLAIMINTERFACE(r6, 0x8004550f, &(0x7f0000000200)=0x4) ioctl$I2C_SMBUS(r4, 0x720, &(0x7f00000000c0)={0x0, 0xb, 0x6, &(0x7f0000000080)={0x2, "f70ee65261614b1f4c81b8384514a26a62fc2dbc1acb09bb337e117893548884ee"}}) openat$ttynull(0xffffff9c, &(0x7f0000000100), 0x200, 0x0) r7 = syz_open_dev$dvb_dvr(&(0x7f0000000400), 0x3, 0x42000) r8 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) close(r9) close_range(r7, r8, 0x0) syz_usb_control_io$sierra_net(r3, &(0x7f0000000380)={0xc, &(0x7f0000000240)={0x0, 0xf, 0xc1, {0xc1, 0xb, "73f5f661245b241abb3d47545fd1187d0906155c2cfd6dc8f516d386d66518ea96bbb5a252cd94971bfd12b74f76bbc3798f92dd5ce6788d5971b92991a1d01c47aa135b2a9de47040cde311bbe62372abf33480de786fc32f95a0deabfa934ef700bda1e3256936dbd8ecafbc97d9ec1e938bc29d841141f75b04b85178d2ff8836172948a8c6f47c03c3e6ef1667aa0f61468c2ec67b51052017cc9b3432f405621bfc728ff2ced8131b442f68a4dde02f854410c500322b95b692842627"}}, &(0x7f0000000340)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x3409}}}, &(0x7f0000000b00)={0x10, &(0x7f00000003c0)={0x20, 0xf}, &(0x7f0000000680)={0xa1, 0x1, 0x400, "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"}, &(0x7f0000000ac0)={0x21, 0x0, 0x2, "cb36"}}) setsockopt$inet_opts(r5, 0x0, 0x0, &(0x7f0000000b40)="63c18752044483decef41595b24c5a6889117c50d49fc2427b9e9c3bfda7d11c30f1da76b23ebdb28cf6da1c622264126706f4a8fd7c2a3f7ca74bf62dcf2a4b7ab2f1f11ea0607efcf971f1c4b78471f3ceb6284845715bb2f2ac0a7ff43aa07d8b58fa697acbc75c466aa3c9a5b2797fa95176e2f4d657b1ece49575d75b57a0ff372eff2a2126db9ed18c0efa184528c0bb25788c9e", 0x97) 4.09025076s ago: executing program 4 (id=1925): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x9102}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4102}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5, 0x1, 0x5, 0xd, 0xd9, 0x10}, {0x0, 0x2, 0x5, 0x3, 0x1}, 0x2, 0x5, 0x8d0}}, @TCA_TBF_BURST={0x8, 0x6, 0x10001}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfe, {0x0, 0x0, 0x0, r8, {0x0, 0x5}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1, 0x2}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40040e0}, 0x0) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200affd14120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 3.79104267s ago: executing program 1 (id=1929): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0xe) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000003300)={0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffffffffffff, 0x4}, 0x38) 3.670013991s ago: executing program 1 (id=1930): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000002900)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_BSS(r0, &(0x7f0000002a00)={0x0, 0x0, &(0x7f00000029c0)={&(0x7f0000000240)={0x24, r1, 0xbb34a96d50fa80b5, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_BSS_SHORT_PREAMBLE={0x5, 0x1d, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40001}, 0x40004) 1.827577548s ago: executing program 1 (id=1934): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="142089e9"], 0x14}, 0x1, 0x0, 0x0, 0x2804d}, 0x80) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000000)={r2, @in={{0x2, 0x4e24, @empty}}, 0x27c0}, 0x90) 1.794301864s ago: executing program 3 (id=1935): sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[], 0x60}}, 0x0) 1.682220796s ago: executing program 4 (id=1937): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r2, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r2, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) shutdown(r2, 0x1) sendmsg$TIPC_NL_BEARER_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x14, 0x0, 0x1, 0x70bd36, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x48c05}, 0x4040140) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0xffffffffffffffff, 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), r3) 1.652625523s ago: executing program 3 (id=1938): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmmsg$inet(r1, &(0x7f0000002b40)=[{{&(0x7f0000000000)={0x2, 0x4e20, @remote}, 0x10, &(0x7f00000007c0)=[{&(0x7f0000000380)="6819", 0x2}], 0x1}}, {{&(0x7f0000000280)={0x2, 0x4e26, @local}, 0x10, &(0x7f00000002c0)=[{0x0}], 0x1}}], 0x2, 0x2000c044) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f00000003c0)="a687337c", 0x4, 0x24000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x9}, 0x1c) 1.601493753s ago: executing program 4 (id=1939): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000000)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01080fcad18a4a8bb2630b00000008000300", @ANYRES32=r1, @ANYBLOB="050008000200000030005080110001004abee33908f8eef16f162471f4000000040006000400060008000700010000000800070000000000"], 0x54}}, 0x0) 1.452917886s ago: executing program 3 (id=1942): bind$alg(0xffffffffffffffff, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000340)=[{0x0, 0x0, &(0x7f0000000000)=[{0x0}, {0x0}], 0x2, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000300)=[{0x0}], 0x1}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000280)=[{{0x0, 0x0, &(0x7f00000001c0)=[{0x0}], 0x1}, 0x9}], 0x1, 0x10100, 0x0) r0 = socket(0x10, 0xa, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, 0x0, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x14) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) listen(r1, 0x3) socket$unix(0x1, 0x5, 0x0) accept4$tipc(r1, 0x0, 0x0, 0x800) bind$tipc(0xffffffffffffffff, 0x0, 0x0) r3 = socket$tipc(0x1e, 0x5, 0x0) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000240), 0x10) ioctl$int_in(r1, 0x5421, &(0x7f0000000280)=0x521f) sendmsg$tipc(r3, &(0x7f00000002c0)={&(0x7f0000000080)=@nameseq={0x1e, 0x2, 0x0, {0x41}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x480c0}, 0x0) accept4(r1, 0x0, 0x0, 0x400000000080800) 1.446510213s ago: executing program 4 (id=1943): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) recvmmsg(r0, &(0x7f0000000480)=[{{0x0, 0x0, 0x0}, 0x4}], 0x2f, 0x0, 0x0) r1 = socket(0x11, 0x3, 0x0) setsockopt(r1, 0x107, 0xf, &(0x7f0000000100)="00008634", 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'geneve0\x00', 0x0}) sendmsg(r1, &(0x7f0000000100)={&(0x7f0000000040)=@ll={0x11, 0x3, r2, 0x1, 0xe5, 0x6, @broadcast}, 0x80, &(0x7f0000000240)=[{&(0x7f00000003c0)="020195ff002d3922ff65b4355e953d23d254f00000000000", 0x18}, {&(0x7f00000001c0)="2cf2565b0e508224b706a643e98dc932f5fc6d8e51626cdbf9ff02dbb8b2d2ca2be0dfa8f2a777f680c590257a0641579678f72a6ff270a8989633cbe781bf372d4a0e61", 0xff87}], 0x2}, 0x44000) 1.078305692s ago: executing program 1 (id=1947): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b40)=[{0x0, 0x24}], 0x1, 0x0, 0x0, 0x20000000}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, 0x0) bind$can_j1939(r1, &(0x7f00000000c0), 0x18) connect$can_j1939(r1, &(0x7f0000000140), 0x18) writev(r1, &(0x7f0000000400), 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) r2 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x24, r2, 0x5, 0x0, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x408d1}, 0x40800) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="8c000000", @ANYRES16=r4, @ANYBLOB="010025bd7000fddbdf252100000008000300", @ANYRES32=r5, @ANYBLOB="14002c"], 0x8c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 1.032867669s ago: executing program 2 (id=1948): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = gettid() sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x1c, 0x27, 0x1, 0x78bd25, 0x25dfdbfd, {0xf}, [@typed={0x8, 0x1, 0x0, 0x0, @pid=r1}]}, 0x1c}}, 0x24000010) 882.155321ms ago: executing program 2 (id=1950): syz_open_procfs$namespace(0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x180, 0x0) close(r1) socket$inet_smc(0x2b, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x7ffff, {0x0, 0x0, 0x0, r3, {0x0, 0xffe0}, {0xb, 0xb}, {0x0, 0x1}}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x2}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x404c800}, 0x400c000) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r5) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) 792.632399ms ago: executing program 1 (id=1951): socket$nl_generic(0x10, 0x3, 0x10) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000001300)=ANY=[@ANYBLOB="5800000002060108000000000000000005000003050005000a000000050001000700000005000400000000000900020073797a310000000014000300686173683a69702c706f72742c6970000c00078008000640000000002c925c9c9e83066f48a7d3861f2cb94c2fb818b093e2b3c12db9"], 0x58}, 0x1, 0x0, 0x0, 0x90}, 0x40c0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) 700.824037ms ago: executing program 5 (id=1953): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000000)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01080fcad18a4a8bb2630b00000008000300", @ANYRES32=r1, @ANYBLOB="050008000200000030005080110001004abee33908f8eef16f162471f4000000040006000400060008000700010000000800070000000000"], 0x54}}, 0x0) 663.757769ms ago: executing program 2 (id=1954): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=@setlink={0x30, 0x13, 0x8, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x410, 0x52000}, [@IFLA_LINKMODE={0x5, 0x11, 0x7}, @IFLA_NET_NS_FD={0x8, 0x1c, r0}]}, 0x30}}, 0x4) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 630.547056ms ago: executing program 1 (id=1955): r0 = socket(0xa, 0x3, 0xff) sendmsg$inet6(r0, &(0x7f0000001c00)={&(0x7f0000000140)={0xa, 0x6, 0x3, @mcast2}, 0x1c, &(0x7f0000000440)=[{&(0x7f0000000240)="6797f04cdb6f2b8ff1c922acb0da67dc3bf442976fc916d4a50f5d1ae7453eddc232ca4c6ae6c56d", 0x28}], 0x1}, 0x30008b08) 556.632401ms ago: executing program 5 (id=1956): close(0x3) 554.574901ms ago: executing program 2 (id=1957): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x4800, 0x0, 0x0, 0x7fff}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x1018}}, 0x8014) 493.912783ms ago: executing program 5 (id=1958): sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000001800010400000000000000000a400000fe0200010000000014000500fe80000000000000000000000000000208000400", @ANYRES32=0x2], 0x60}}, 0x0) 492.578744ms ago: executing program 3 (id=1959): openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x3}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x4, 0x7fffffffffffffff, 0x0, 0x1000, 0xc, 0x215}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r3) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r5) r6 = socket$unix(0x1, 0x5, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r9, {0x0, 0xd}, {0xffff, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_pfifo={{0xa}, {0x8, 0x2, 0x3}}]}, 0x38}}, 0x4890) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0xb}, {0xffff, 0xffff}, {0xffff, 0xfffc}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0x7, 0x8005, 0x5, 0xfffffdff, 0x4006}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x9, 0x9, 0x5, 0x96, 0xfff, 0xc}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x240080c1}, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 411.107369ms ago: executing program 2 (id=1960): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x9102}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4102}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5, 0x1, 0x5, 0xd, 0xd9, 0x10}, {0x0, 0x2, 0x5, 0x3, 0x1}, 0x2, 0x5, 0x8d0}}, @TCA_TBF_BURST={0x8, 0x6, 0x10001}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfe, {0x0, 0x0, 0x0, r9, {0x0, 0x5}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1, 0x2}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40040e0}, 0x0) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r7, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200affd14120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 409.711387ms ago: executing program 4 (id=1961): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b40)=[{0x0, 0x24}], 0x1, 0x0, 0x0, 0x20000000}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, 0x0) bind$can_j1939(r1, &(0x7f00000000c0), 0x18) connect$can_j1939(r1, &(0x7f0000000140), 0x18) writev(r1, &(0x7f0000000400), 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x24, 0x0, 0x5, 0x0, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x408d1}, 0x40800) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r2) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="8c000000", @ANYRES16=r3, @ANYBLOB="010025bd7000fddbdf252100000008000300", @ANYRES32=r4, @ANYBLOB="14002c"], 0x8c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 317.022215ms ago: executing program 4 (id=1962): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xca71d000) socket$xdp(0x2c, 0x3, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4001}) r1 = socket$inet(0x2, 0x2, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, 0x0) write$tun(r0, 0x0, 0x4a) socket$rds(0x15, 0x5, 0x0) r2 = socket(0x15, 0x5, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, 0x0, 0x4084) getsockopt(r2, 0x200000000114, 0x2713, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) bind$can_raw(r2, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa0806000108000604"], 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 306.345385ms ago: executing program 3 (id=1963): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r2, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r2, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) shutdown(r2, 0x1) sendmsg$TIPC_NL_BEARER_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x14, 0x0, 0x1, 0x70bd36, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x48c05}, 0x4040140) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0xffffffffffffffff, 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), r3) 281.526731ms ago: executing program 5 (id=1964): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmmsg$inet(r1, &(0x7f0000002b40)=[{{&(0x7f0000000000)={0x2, 0x4e20, @remote}, 0x10, &(0x7f00000007c0)=[{&(0x7f0000000380)="6819", 0x2}], 0x1}}, {{&(0x7f0000000280)={0x2, 0x4e26, @local}, 0x10, &(0x7f00000002c0)=[{0x0}], 0x1}}], 0x2, 0x2000c044) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f00000003c0)="a687337c", 0x4, 0x24000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x9}, 0x1c) 134.104274ms ago: executing program 3 (id=1965): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x4, 0x6, 0x2, 0x4, {0xa, 0x4e20, 0xf5, @mcast2}}}, 0x80, 0x0}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000000)="d800000010008104685fa3aa7143a0f8c81ded0b25000000e8fe09a118001500060014ea000000120800030043000040a8002b000a", 0x35}], 0x1}, 0x20000880) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0xfe33) 131.648982ms ago: executing program 5 (id=1966): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000000)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16, @ANYBLOB="01080fcad18a4a8bb2630b00000008000300", @ANYRES32=r1, @ANYBLOB="050008000200000030005080110001004abee33908f8eef16f162471f4000000040006000400060008000700010000000800070000000000"], 0x54}}, 0x0) 2.094774ms ago: executing program 2 (id=1967): socket$nl_generic(0x10, 0x3, 0x10) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000001300)=ANY=[@ANYBLOB="5800000002060108000000000000000005000003050005000a000000050001000700000005000400000000000900020073797a310000000014000300686173683a69702c706f72742c6970000c00078008000640000000002c925c9c9e83066f48a7d3861f2cb94c2fb818b093e2b3c12db9"], 0x58}, 0x1, 0x0, 0x0, 0x90}, 0x40c0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) 0s ago: executing program 5 (id=1968): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=@setlink={0x30, 0x13, 0x8, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x410, 0x52000}, [@IFLA_LINKMODE={0x5, 0x11, 0x7}, @IFLA_NET_NS_FD={0x8, 0x1c, r0}]}, 0x30}}, 0x4) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.97' (ED25519) to the list of known hosts. [ 76.085556][ T5602] cgroup: Unknown subsys name 'net' [ 76.251303][ T5602] cgroup: Unknown subsys name 'cpuset' [ 76.260032][ T5602] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 77.891896][ T5602] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 80.170247][ T5616] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 80.193163][ T5623] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 80.201154][ T5623] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 80.209586][ T5623] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 80.217188][ T5624] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 80.218603][ T5623] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 80.226524][ T5624] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 80.234430][ T5623] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 80.242867][ T5624] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 80.249000][ T5623] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 80.263161][ T5623] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 80.268430][ T5627] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 80.271602][ T5623] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 80.278411][ T5627] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 80.285629][ T5623] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 80.293292][ T5627] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 80.301478][ T5623] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 80.310312][ T5612] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 80.315596][ T5623] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 80.321664][ T5612] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 80.327773][ T5623] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 80.341640][ T5612] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 80.341685][ T4932] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 80.358125][ T5623] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 80.367246][ T5612] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 81.344385][ T5630] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.352889][ T5630] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.360565][ T5630] bridge_slave_0: entered allmulticast mode [ 81.368095][ T5630] bridge_slave_0: entered promiscuous mode [ 81.410657][ T5630] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.417988][ T5630] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.425610][ T5630] bridge_slave_1: entered allmulticast mode [ 81.432964][ T5630] bridge_slave_1: entered promiscuous mode [ 81.581974][ T5630] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.607716][ T5628] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.614961][ T5628] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.623180][ T5628] bridge_slave_0: entered allmulticast mode [ 81.630747][ T5628] bridge_slave_0: entered promiscuous mode [ 81.651027][ T5630] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.681281][ T5628] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.689022][ T5628] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.696394][ T5628] bridge_slave_1: entered allmulticast mode [ 81.703815][ T5628] bridge_slave_1: entered promiscuous mode [ 81.711012][ T5629] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.718176][ T5629] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.725315][ T5629] bridge_slave_0: entered allmulticast mode [ 81.732589][ T5629] bridge_slave_0: entered promiscuous mode [ 81.776642][ T5629] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.784256][ T5629] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.791864][ T5629] bridge_slave_1: entered allmulticast mode [ 81.799441][ T5629] bridge_slave_1: entered promiscuous mode [ 81.821794][ T5631] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.829173][ T5631] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.836771][ T5631] bridge_slave_0: entered allmulticast mode [ 81.844292][ T5631] bridge_slave_0: entered promiscuous mode [ 81.875564][ T5630] team0: Port device team_slave_0 added [ 81.887234][ T5631] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.894821][ T5631] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.903277][ T5631] bridge_slave_1: entered allmulticast mode [ 81.910904][ T5631] bridge_slave_1: entered promiscuous mode [ 81.920501][ T5628] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.941739][ T5630] team0: Port device team_slave_1 added [ 81.971832][ T5628] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.983741][ T5629] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.037159][ T5629] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.066604][ T5632] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.074358][ T5632] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.082075][ T5632] bridge_slave_0: entered allmulticast mode [ 82.089613][ T5632] bridge_slave_0: entered promiscuous mode [ 82.099914][ T5631] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.130724][ T5630] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.138006][ T5630] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.164879][ T5630] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.177181][ T5632] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.184410][ T5632] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.191907][ T5632] bridge_slave_1: entered allmulticast mode [ 82.199205][ T5632] bridge_slave_1: entered promiscuous mode [ 82.212258][ T5631] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.235644][ T5628] team0: Port device team_slave_0 added [ 82.243530][ T5629] team0: Port device team_slave_0 added [ 82.250315][ T5630] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.257296][ T5630] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.283765][ T5630] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.317191][ T5628] team0: Port device team_slave_1 added [ 82.324889][ T5629] team0: Port device team_slave_1 added [ 82.349494][ T5631] team0: Port device team_slave_0 added [ 82.369077][ T5623] Bluetooth: hci3: command tx timeout [ 82.369081][ T5618] Bluetooth: hci0: command tx timeout [ 82.369337][ T4932] Bluetooth: hci1: command tx timeout [ 82.401217][ T5632] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.412715][ T5631] team0: Port device team_slave_1 added [ 82.431258][ T5628] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.438294][ T5628] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.464519][ T4932] Bluetooth: hci2: command tx timeout [ 82.465022][ T5628] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.470621][ T4932] Bluetooth: hci4: command tx timeout [ 82.490134][ T5629] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.497132][ T5629] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.523755][ T5629] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.537426][ T5632] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.566270][ T5628] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.573753][ T5628] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.600355][ T5628] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.612161][ T5629] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.619178][ T5629] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.645377][ T5629] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.712311][ T5631] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.719558][ T5631] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.745641][ T5631] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.762384][ T5630] hsr_slave_0: entered promiscuous mode [ 82.768982][ T5630] hsr_slave_1: entered promiscuous mode [ 82.781035][ T5632] team0: Port device team_slave_0 added [ 82.787422][ T5631] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.794606][ T5631] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.820842][ T5631] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.851028][ T5632] team0: Port device team_slave_1 added [ 82.882835][ T5628] hsr_slave_0: entered promiscuous mode [ 82.889303][ T5628] hsr_slave_1: entered promiscuous mode [ 82.895460][ T5628] debugfs: 'hsr0' already exists in 'hsr' [ 82.901581][ T5628] Cannot create hsr debugfs directory [ 82.968251][ T5629] hsr_slave_0: entered promiscuous mode [ 82.974683][ T5629] hsr_slave_1: entered promiscuous mode [ 82.981634][ T5629] debugfs: 'hsr0' already exists in 'hsr' [ 82.987440][ T5629] Cannot create hsr debugfs directory [ 83.010030][ T5631] hsr_slave_0: entered promiscuous mode [ 83.016465][ T5631] hsr_slave_1: entered promiscuous mode [ 83.023412][ T5631] debugfs: 'hsr0' already exists in 'hsr' [ 83.029323][ T5631] Cannot create hsr debugfs directory [ 83.064332][ T5632] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.071910][ T5632] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.098212][ T5632] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.139039][ T5632] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.146123][ T5632] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.172354][ T5632] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.368141][ T5632] hsr_slave_0: entered promiscuous mode [ 83.374535][ T5632] hsr_slave_1: entered promiscuous mode [ 83.380911][ T5632] debugfs: 'hsr0' already exists in 'hsr' [ 83.386646][ T5632] Cannot create hsr debugfs directory [ 83.731426][ T5630] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 83.744379][ T5630] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 83.753037][ T5630] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 83.764212][ T5630] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 83.785063][ T5630] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 83.795589][ T5630] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 83.812977][ T5630] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 83.823468][ T5630] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 83.891119][ T5628] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 83.901431][ T5628] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 83.910470][ T5628] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 83.922248][ T5628] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 83.930534][ T5628] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 83.942075][ T5628] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 83.950212][ T5628] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 83.961191][ T5628] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 84.049911][ T5629] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 84.060822][ T5629] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 84.082579][ T5629] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 84.092520][ T5629] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 84.106226][ T5629] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 84.118644][ T5629] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 84.127501][ T5629] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 84.138284][ T5629] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 84.246171][ T5631] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 84.257405][ T5631] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 84.266971][ T5631] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 84.278709][ T5631] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 84.286926][ T5631] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 84.300839][ T5631] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 84.309122][ T5631] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 84.320257][ T5631] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 84.423869][ T5630] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.441717][ T5632] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 84.448706][ T5618] Bluetooth: hci1: command tx timeout [ 84.449621][ T4932] Bluetooth: hci3: command tx timeout [ 84.454408][ T5623] Bluetooth: hci0: command tx timeout [ 84.469725][ T5632] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 84.485629][ T5632] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 84.496399][ T5632] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 84.515427][ T5632] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 84.527327][ T5632] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 84.534838][ T4932] Bluetooth: hci4: command tx timeout [ 84.534872][ T4932] Bluetooth: hci2: command tx timeout [ 84.549322][ T5632] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 84.559038][ T5632] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 84.594290][ T5630] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.645299][ T1152] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.652886][ T1152] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.690909][ T1152] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.698204][ T1152] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.738479][ T5628] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.804133][ T5629] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.851699][ T5628] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.885492][ T5631] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.894368][ T5629] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.904322][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.911520][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.944752][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.952700][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.963100][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.970324][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.996824][ T5631] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.013684][ T1035] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.020851][ T1035] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.044060][ T5632] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.060661][ T1121] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.067916][ T1121] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.128049][ T5630] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.144938][ T1152] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.152212][ T1152] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.198616][ T5632] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.237309][ T1121] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.244456][ T1121] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.284769][ T1035] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.291935][ T1035] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.363851][ T5630] veth0_vlan: entered promiscuous mode [ 85.416967][ T5630] veth1_vlan: entered promiscuous mode [ 85.432095][ T5629] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.483846][ T5628] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.510742][ T5631] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.596052][ T5630] veth0_macvtap: entered promiscuous mode [ 85.630493][ T5630] veth1_macvtap: entered promiscuous mode [ 85.651614][ T5628] veth0_vlan: entered promiscuous mode [ 85.662494][ T5632] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.679108][ T5629] veth0_vlan: entered promiscuous mode [ 85.713572][ T5628] veth1_vlan: entered promiscuous mode [ 85.723341][ T5631] veth0_vlan: entered promiscuous mode [ 85.734307][ T5629] veth1_vlan: entered promiscuous mode [ 85.765505][ T5630] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.775338][ T5631] veth1_vlan: entered promiscuous mode [ 85.800141][ T5630] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.905492][ T5628] veth0_macvtap: entered promiscuous mode [ 85.942052][ T5629] veth0_macvtap: entered promiscuous mode [ 85.961648][ T5628] veth1_macvtap: entered promiscuous mode [ 85.985252][ T5629] veth1_macvtap: entered promiscuous mode [ 85.994983][ T1035] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.034602][ T5632] veth0_vlan: entered promiscuous mode [ 86.056140][ T5631] veth0_macvtap: entered promiscuous mode [ 86.077436][ T5628] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.081501][ T79] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.093505][ T1121] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.096703][ T79] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.115499][ T5631] veth1_macvtap: entered promiscuous mode [ 86.123955][ T5632] veth1_vlan: entered promiscuous mode [ 86.163136][ T5628] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.176799][ T5629] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.221432][ T5629] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.230246][ T79] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.239742][ T5631] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.242146][ T79] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.260049][ T36] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.300107][ T1035] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.326237][ T5631] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.387069][ T5630] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 86.403005][ T1035] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.413042][ T1035] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.463560][ T5630] ebtables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 86.486616][ T5632] veth0_macvtap: entered promiscuous mode [ 86.496137][ T5630] arp_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 86.509689][ T5630] ip_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 86.528616][ T5618] Bluetooth: hci1: command tx timeout [ 86.532413][ T5630] ip6_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 86.534373][ T4932] Bluetooth: hci0: command tx timeout [ 86.545811][ T5623] Bluetooth: hci3: command tx timeout [ 86.561619][ T36] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.608889][ T4932] Bluetooth: hci4: command tx timeout [ 86.614779][ T5623] Bluetooth: hci2: command tx timeout [ 86.652677][ T5632] veth1_macvtap: entered promiscuous mode [ 86.660658][ T79] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.672771][ T79] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.715783][ T1121] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.727388][ T1121] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.738182][ T1035] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.807305][ T5632] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.845809][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.856002][ T1035] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.862600][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.886728][ T5632] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.917404][ T1035] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.926346][ T1035] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.940129][ T1121] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.008241][ T79] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.034775][ T79] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.115154][ T79] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.123920][ T3297] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.147807][ T79] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.291494][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.322717][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.568836][ T3297] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.615128][ T3297] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.755383][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.779020][ T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.784579][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.969813][ T36] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.023930][ T36] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.065973][ T36] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.078886][ T30] audit: type=1326 audit(1787204016.199:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5729 comm="syz.1.7" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf70bf0ec code=0x0 [ 88.216836][ T5732] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3'. [ 88.330827][ T3297] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.376786][ T3297] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.532222][ T1035] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.608586][ T5623] Bluetooth: hci3: command tx timeout [ 88.615849][ T4932] Bluetooth: hci0: command tx timeout [ 88.621367][ T5618] Bluetooth: hci1: command tx timeout [ 88.692541][ T5623] Bluetooth: hci2: command tx timeout [ 88.698499][ T4932] Bluetooth: hci4: command tx timeout [ 88.788257][ T5676] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 88.905994][ T30] audit: type=1326 audit(1787204017.039:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5739 comm="syz.3.9" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f490ec code=0x0 [ 88.988456][ T5676] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 89.007335][ T5738] syzkaller0: entered promiscuous mode [ 89.040512][ T5738] syzkaller0: entered allmulticast mode [ 89.088782][ T5676] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.126698][ T5676] usb 3-1: Product: syz [ 89.143255][ T5676] usb 3-1: Manufacturer: syz [ 89.156212][ T5676] usb 3-1: SerialNumber: syz [ 89.195008][ T30] audit: type=1804 audit(1787204017.329:4): pid=5742 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.9" name="/newroot/1/file1" dev="fuse" ino=1 res=1 errno=0 [ 89.250010][ T5747] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10'. [ 89.286453][ T5747] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10'. [ 89.322502][ T5742] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9'. [ 89.341610][ T5747] netlink: 'syz.1.10': attribute type 11 has an invalid length. [ 89.370218][ T5675] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 89.417104][ T5747] netlink: 'syz.1.10': attribute type 13 has an invalid length. [ 89.595085][ T5747] Zero length message leads to an empty skb [ 90.233775][ T5757] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(12) [ 90.240584][ T5757] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 90.294365][ T5757] vhci_hcd vhci_hcd.0: Device attached [ 90.447913][ T5675] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 90.467451][ T5675] ath9k_htc: Failed to initialize the device [ 90.517823][ T5690] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 90.537907][ T5764] netlink: 12 bytes leftover after parsing attributes in process `syz.0.13'. [ 90.556455][ T5703] usb 39-1: new high-speed USB device number 2 using vhci_hcd [ 90.580931][ T5764] netlink: 20 bytes leftover after parsing attributes in process `syz.0.13'. [ 90.611525][ T5675] usb 3-1: ath9k_htc: USB layer deinitialized [ 90.718377][ T5690] usb 4-1: New USB device found, idVendor=05f3, idProduct=0240, bcdDevice=1b.24 [ 90.742803][ T5690] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 90.791522][ T5690] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 90.821838][ T5690] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.843812][ T5690] usb 4-1: Product: syz [ 90.859355][ T5690] usb 4-1: Manufacturer: syz [ 90.877809][ T5690] usb 4-1: SerialNumber: syz [ 90.916212][ T5690] usb 4-1: config 0 descriptor?? [ 90.946406][ T5758] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 91.223802][ T24] usb 3-1: USB disconnect, device number 2 [ 91.308272][ T5759] vhci_hcd: connection reset by peer [ 91.315080][ T5690] powermate: unknown product id 0240 [ 91.348313][ T5690] powermate: Expected payload of 3--6 bytes, found 64 bytes! [ 91.387143][ T36] vhci_hcd vhci_hcd.3: stop threads [ 91.421938][ T36] vhci_hcd vhci_hcd.3: release socket [ 91.468998][ T5690] input: Griffin SoundKnob as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input5 [ 91.472799][ T36] vhci_hcd vhci_hcd.3: disconnect device [ 91.615015][ C0] powermate: config urb returned -71 [ 91.620862][ C0] powermate: config urb returned -71 [ 91.626735][ C0] powermate: config urb returned -71 [ 91.632563][ C0] powermate: config urb returned -71 [ 91.644010][ T5690] usb 4-1: USB disconnect, device number 2 [ 91.650315][ C0] powermate 4-1:0.0: powermate_irq - usb_submit_urb failed with result: -19 [ 91.652461][ T5768] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 91.960488][ T5774] netlink: 4 bytes leftover after parsing attributes in process `syz.1.16'. [ 92.066129][ T29] cfg80211: failed to load regulatory.db [ 92.087786][ T5775] netlink: 4 bytes leftover after parsing attributes in process `syz.1.16'. [ 92.415079][ T5690] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 92.587664][ T5690] usb 2-1: Using ep0 maxpacket: 8 [ 92.612205][ T5690] usb 2-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 92.663996][ T5690] usb 2-1: config index 0 descriptor too short (expected 30, got 18) [ 92.701480][ T5690] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.737949][ T5690] usb 2-1: Product: syz [ 92.744872][ T5690] usb 2-1: Manufacturer: syz [ 92.759087][ T5690] usb 2-1: SerialNumber: syz [ 92.783251][ T5690] usb 2-1: config 0 descriptor?? [ 92.828216][ T5690] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 92.861225][ T5690] usb 2-1: setting power ON [ 92.882974][ T5690] dvb-usb: bulk message failed: -22 (2/0) [ 92.960173][ T5690] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 92.987836][ T5690] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 92.997529][ T5690] usb 2-1: media controller created [ 93.034530][ T5690] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 93.108900][ T5690] usb 2-1: selecting invalid altsetting 6 [ 93.115123][ T5690] usb 2-1: digital interface selection failed (-22) [ 93.125269][ T5690] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 93.125293][ T5775] dvb-usb: bulk message failed: -22 (3/0) [ 93.145597][ T5690] usb 2-1: setting power OFF [ 93.170407][ T5690] dvb-usb: bulk message failed: -22 (2/0) [ 93.186515][ T5775] dvb-usb: bulk message failed: -22 (3/0) [ 93.192813][ T5690] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 93.203668][ T5690] (NULL device *): no alternate interface [ 93.278238][ T29] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 93.357347][ T5788] capability: warning: `syz.2.20' uses 32-bit capabilities (legacy support in use) [ 93.459346][ T29] usb 1-1: Using ep0 maxpacket: 8 [ 93.474351][ T29] usb 1-1: New USB device found, idVendor=0e41, idProduct=4249, bcdDevice= 0.40 [ 93.506867][ T29] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 93.546664][ T29] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 93.585904][ T29] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.622159][ T29] usb 1-1: Product: syz [ 93.643769][ T29] usb 1-1: Manufacturer: syz [ 93.677867][ T29] usb 1-1: SerialNumber: syz [ 93.695956][ T30] audit: type=1326 audit(1787204021.809:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5787 comm="syz.2.20" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f480ec code=0x7ffc0000 [ 93.773531][ T30] audit: type=1326 audit(1787204021.809:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5787 comm="syz.2.20" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=292 compat=1 ip=0xf7f480ec code=0x7ffc0000 [ 93.824534][ T30] audit: type=1326 audit(1787204021.809:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5787 comm="syz.2.20" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f480ec code=0x7ffc0000 [ 93.872350][ T30] audit: type=1326 audit(1787204021.819:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5787 comm="syz.2.20" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=317 compat=1 ip=0xf7f480ec code=0x7ffc0000 [ 93.913842][ T30] audit: type=1326 audit(1787204021.859:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5787 comm="syz.2.20" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f480ec code=0x7ffc0000 [ 93.977194][ T30] audit: type=1326 audit(1787204021.859:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5787 comm="syz.2.20" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf7f480ec code=0x7ffc0000 [ 94.025231][ T30] audit: type=1326 audit(1787204021.879:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5787 comm="syz.2.20" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f480ec code=0x7ffc0000 [ 94.080722][ T30] audit: type=1326 audit(1787204021.899:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5787 comm="syz.2.20" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f480ec code=0x7ffc0000 [ 94.183066][ T29] usb 1-1: unit 0 not found! [ 94.254071][ T5798] netlink: 'syz.4.22': attribute type 10 has an invalid length. [ 94.332135][ T5798] team0: Port device veth1_to_hsr added [ 94.357898][ T29] usb 1-1: USB disconnect, device number 2 [ 94.525184][ T5615] udevd[5615]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 95.040699][ T5807] bridge_slave_1: left allmulticast mode [ 95.050793][ T5807] bridge_slave_1: left promiscuous mode [ 95.064899][ T5807] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.113427][ T5807] bridge_slave_0: left allmulticast mode [ 95.133992][ T5807] bridge_slave_0: left promiscuous mode [ 95.153051][ T5807] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.246501][ T5815] netlink: 8 bytes leftover after parsing attributes in process `syz.4.28'. [ 95.259356][ T5815] netlink: 4 bytes leftover after parsing attributes in process `syz.4.28'. [ 95.268247][ T5815] netlink: 'syz.4.28': attribute type 11 has an invalid length. [ 95.296454][ T5815] netlink: 'syz.4.28': attribute type 13 has an invalid length. [ 95.469389][ T5690] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 95.544647][ T5690] usb 2-1: USB disconnect, device number 2 [ 95.603461][ T30] audit: type=1326 audit(1787204023.739:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5823 comm="syz.2.31" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f480ec code=0x0 [ 95.737937][ T5703] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 95.880339][ T30] audit: type=1804 audit(1787204024.019:14): pid=5830 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.31" name="/newroot/5/file1" dev="fuse" ino=1 res=1 errno=0 [ 96.082037][ T5830] netlink: 8 bytes leftover after parsing attributes in process `syz.2.31'. [ 96.568949][ T187] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 96.740125][ T187] usb 4-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=a4.8f [ 96.772998][ T187] usb 4-1: config 0 has an invalid descriptor of length 222, skipping remainder of the config [ 96.807763][ T187] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xDC, changing to 0x8C [ 96.849761][ T187] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8C has invalid maxpacket 8118, setting to 64 [ 96.870828][ T187] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 96.916024][ T187] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.945436][ T187] usb 4-1: Product: syz [ 96.953898][ T187] usb 4-1: Manufacturer: syz [ 96.969668][ T187] usb 4-1: SerialNumber: syz [ 96.974903][ T5849] netlink: 'syz.2.38': attribute type 10 has an invalid length. [ 96.994585][ T187] usb 4-1: config 0 descriptor?? [ 97.018174][ T5843] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 97.051122][ T5849] team0: Port device veth1_to_hsr added [ 97.247796][ T187] rc_core: IR keymap rc-xbox-dvd not found [ 97.247829][ T4943] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 97.266512][ T187] Registered IR keymap rc-empty [ 97.296947][ T187] rc rc0: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 97.349284][ T187] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input6 [ 97.375691][ T187] usb 4-1: USB disconnect, device number 3 [ 97.381793][ C0] xbox_remote 4-1:0.0: xbox_remote_irq_in: usb_submit_urb()=-19 [ 97.427838][ T4943] usb 2-1: Using ep0 maxpacket: 8 [ 97.447410][ T4943] usb 2-1: New USB device found, idVendor=0e41, idProduct=4249, bcdDevice= 0.40 [ 97.468902][ T4943] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 97.480378][ T4943] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 97.497881][ T4943] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.506223][ T4943] usb 2-1: Product: syz [ 97.510598][ T4943] usb 2-1: Manufacturer: syz [ 97.517546][ T4943] usb 2-1: SerialNumber: syz [ 97.750137][ T4943] usb 2-1: unit 0 not found! [ 97.888854][ T5860] bridge_slave_1: left allmulticast mode [ 97.913331][ T4943] usb 2-1: USB disconnect, device number 4 [ 97.939471][ T5860] bridge_slave_1: left promiscuous mode [ 97.964527][ T5860] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.070662][ T5860] bridge_slave_0: left allmulticast mode [ 98.082400][ T5860] bridge_slave_0: left promiscuous mode [ 98.094727][ T5860] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.124556][ T5766] udevd[5766]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 98.314916][ T5866] netlink: 4 bytes leftover after parsing attributes in process `syz.4.43'. [ 98.356502][ T5866] netlink: 4 bytes leftover after parsing attributes in process `syz.4.43'. [ 98.521417][ T5863] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 98.553217][ T5865] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 98.588627][ T5870] netlink: 28 bytes leftover after parsing attributes in process `syz.1.44'. [ 98.619000][ T5874] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 98.657705][ T4943] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 98.838441][ T4943] usb 5-1: Using ep0 maxpacket: 8 [ 98.857861][ T4943] usb 5-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 98.873196][ T4943] usb 5-1: config index 0 descriptor too short (expected 30, got 18) [ 98.888676][ T4943] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.897002][ T4943] usb 5-1: Product: syz [ 98.902441][ T4943] usb 5-1: Manufacturer: syz [ 98.907224][ T4943] usb 5-1: SerialNumber: syz [ 98.918694][ T4943] usb 5-1: config 0 descriptor?? [ 98.934846][ T4943] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 98.943265][ T4943] usb 5-1: setting power ON [ 98.953336][ T4943] dvb-usb: bulk message failed: -22 (2/0) [ 98.988314][ T4943] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 99.004079][ T4943] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 99.011858][ T187] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 99.024094][ T4943] usb 5-1: media controller created [ 99.062774][ T4943] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 99.152290][ T4943] usb 5-1: selecting invalid altsetting 6 [ 99.170896][ T4943] usb 5-1: digital interface selection failed (-22) [ 99.187771][ T4943] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 99.198514][ T187] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 99.204345][ T4943] usb 5-1: setting power OFF [ 99.218298][ T5881] dvb-usb: bulk message failed: -22 (3/0) [ 99.234517][ T4943] dvb-usb: bulk message failed: -22 (2/0) [ 99.241187][ T187] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.245454][ T5881] dvb-usb: bulk message failed: -22 (3/0) [ 99.250637][ T187] usb 2-1: Product: syz [ 99.255134][ T4943] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 99.264020][ T187] usb 2-1: Manufacturer: syz [ 99.276522][ T4943] (NULL device *): no alternate interface [ 99.284473][ T187] usb 2-1: SerialNumber: syz [ 99.369782][ T10] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 99.830485][ T5890] netlink: 8 bytes leftover after parsing attributes in process `syz.0.50'. [ 99.842634][ T5890] netlink: 4 bytes leftover after parsing attributes in process `syz.0.50'. [ 99.851644][ T5890] netlink: 'syz.0.50': attribute type 11 has an invalid length. [ 99.860279][ T5890] netlink: 'syz.0.50': attribute type 13 has an invalid length. [ 100.359000][ T24] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 100.448937][ T10] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 100.459738][ T10] ath9k_htc: Failed to initialize the device [ 100.505898][ T10] usb 2-1: ath9k_htc: USB layer deinitialized [ 100.549452][ T24] usb 4-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=a4.8f [ 100.567146][ T24] usb 4-1: config 0 has an invalid descriptor of length 222, skipping remainder of the config [ 100.580473][ T24] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xDC, changing to 0x8C [ 100.594906][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8C has invalid maxpacket 8118, setting to 64 [ 100.607923][ T24] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 100.629415][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.638393][ T24] usb 4-1: Product: syz [ 100.643171][ T24] usb 4-1: Manufacturer: syz [ 100.650685][ T24] usb 4-1: SerialNumber: syz [ 100.665240][ T24] usb 4-1: config 0 descriptor?? [ 100.675634][ T5896] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 100.799109][ T24] rc_core: IR keymap rc-xbox-dvd not found [ 100.806421][ T24] Registered IR keymap rc-empty [ 100.827958][ T24] rc rc0: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 100.843468][ T24] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input7 [ 100.917216][ T24] usb 4-1: USB disconnect, device number 4 [ 100.923297][ C1] xbox_remote 4-1:0.0: xbox_remote_irq_in: usb_submit_urb()=-19 [ 101.295458][ T4943] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 101.295921][ T5902] netlink: 8 bytes leftover after parsing attributes in process `syz.2.64'. [ 101.317653][ T5902] bond0: Unable to set peer notification delay as MII monitoring is disabled [ 101.341243][ T4943] usb 5-1: USB disconnect, device number 2 [ 101.423195][ T5903] netlink: 'syz.0.53': attribute type 10 has an invalid length. [ 101.433243][ T5905] bridge_slave_1: left allmulticast mode [ 101.443037][ T5905] bridge_slave_1: left promiscuous mode [ 101.449810][ T5905] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.485057][ T5905] bridge_slave_0: left allmulticast mode [ 101.504204][ T5905] bridge_slave_0: left promiscuous mode [ 101.512055][ T5905] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.707478][ T5909] FAULT_INJECTION: forcing a failure. [ 101.707478][ T5909] name failslab, interval 1, probability 0, space 0, times 1 [ 101.736926][ T29] usb 2-1: USB disconnect, device number 5 [ 101.752682][ T5909] CPU: 0 UID: 0 PID: 5909 Comm: syz.3.56 Not tainted syzkaller #0 PREEMPT(full) [ 101.752711][ T5909] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 101.752722][ T5909] Call Trace: [ 101.752729][ T5909] [ 101.752737][ T5909] dump_stack_lvl+0xe8/0x150 [ 101.752768][ T5909] should_fail_ex+0x410/0x560 [ 101.752784][ T5909] should_failslab+0xa8/0x100 [ 101.752802][ T5909] __kmalloc_cache_noprof+0xa8/0x660 [ 101.752818][ T5909] ? snd_seq_port_connect+0x6b/0x3a0 [ 101.752834][ T5909] ? snd_seq_port_connect+0x6b/0x3a0 [ 101.752852][ T5909] snd_seq_port_connect+0x6b/0x3a0 [ 101.752866][ T5909] ? snd_seq_port_use_ptr+0x29/0x260 [ 101.752880][ T5909] ? snd_seq_port_use_ptr+0x29/0x260 [ 101.752898][ T5909] ? snd_seq_port_use_ptr+0x229/0x260 [ 101.752914][ T5909] snd_seq_ioctl_subscribe_port+0x351/0x790 [ 101.752939][ T5909] ? __pfx_snd_seq_ioctl_subscribe_port+0x10/0x10 [ 101.752956][ T5909] ? clientptr+0x17/0x160 [ 101.752969][ T5909] ? clientptr+0x17/0x160 [ 101.752981][ T5909] ? clientptr+0x17/0x160 [ 101.752999][ T5909] snd_seq_oss_midi_open+0x513/0x830 [ 101.753016][ T5909] ? __pfx_snd_seq_oss_midi_open+0x10/0x10 [ 101.753034][ T5909] ? rcu_is_watching+0x16/0xb0 [ 101.753048][ T5909] ? __kasan_kmalloc+0x93/0xb0 [ 101.753067][ T5909] snd_seq_oss_synth_setup_midi+0x12d/0x530 [ 101.753087][ T5909] snd_seq_oss_open+0x94f/0xf40 [ 101.753107][ T5909] ? __pfx_snd_seq_oss_open+0x10/0x10 [ 101.753142][ T5909] ? rcu_is_watching+0x16/0xb0 [ 101.753153][ T5909] ? trace_contention_end+0x3d/0x140 [ 101.753177][ T5909] ? __pfx___mutex_lock+0x10/0x10 [ 101.753191][ T5909] ? __pfx_snd_seq_oss_event_input+0x10/0x10 [ 101.753201][ T5909] ? __pfx_free_devinfo+0x10/0x10 [ 101.753211][ T5909] ? do_raw_spin_unlock+0xf5/0x200 [ 101.753226][ T5909] ? soundcore_open+0x2da/0x490 [ 101.753239][ T5909] odev_open+0x67/0xa0 [ 101.753255][ T5909] chrdev_open+0x4d9/0x600 [ 101.753271][ T5909] ? __pfx_chrdev_open+0x10/0x10 [ 101.753285][ T5909] ? fsnotify_open_perm_and_set_mode+0x135/0x6b0 [ 101.753303][ T5909] ? __pfx_chrdev_open+0x10/0x10 [ 101.753316][ T5909] do_dentry_open+0x816/0x1380 [ 101.753338][ T5909] vfs_open+0x3b/0x340 [ 101.753351][ T5909] ? path_openat+0x1428/0x1d60 [ 101.753365][ T5909] path_openat+0x1443/0x1d60 [ 101.753389][ T5909] do_file_open+0x23e/0x4a0 [ 101.753412][ T5909] ? __pfx_do_file_open+0x10/0x10 [ 101.753437][ T5909] ? _raw_spin_unlock+0x28/0x50 [ 101.753451][ T5909] ? alloc_fd+0x651/0x6c0 [ 101.753473][ T5909] do_sys_openat2+0x115/0x200 [ 101.753487][ T5909] ? __fget_files+0x3a2/0x420 [ 101.753498][ T5909] ? __pfx_do_sys_openat2+0x10/0x10 [ 101.753514][ T5909] ? fput+0xa0/0xd0 [ 101.753529][ T5909] ? ksys_write+0x242/0x270 [ 101.753543][ T5909] __ia32_compat_sys_openat+0x131/0x160 [ 101.753562][ T5909] __do_fast_syscall_32+0x27a/0x6a0 [ 101.753575][ T5909] ? do_fast_syscall_32+0x33/0x70 [ 101.753585][ T5909] ? asm_int80_emulation+0x1a/0x20 [ 101.753596][ T5909] ? do_int80_emulation+0x299/0x500 [ 101.753606][ T5909] ? trace_irq_disable+0x3b/0x140 [ 101.753622][ T5909] do_fast_syscall_32+0x33/0x70 [ 101.753633][ T5909] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 101.753647][ T5909] RIP: 0023:0xf7f490ec [ 101.753659][ T5909] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 101.753668][ T5909] RSP: 002b:00000000f540650c EFLAGS: 00000206 ORIG_RAX: 0000000000000127 [ 101.753681][ T5909] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000080000000 [ 101.753689][ T5909] RDX: 0000000000080383 RSI: 0000000000000000 RDI: 0000000000000000 [ 101.753696][ T5909] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 101.753702][ T5909] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 101.753709][ T5909] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 101.753729][ T5909] [ 102.181657][ T5903] team0: Port device veth1_to_hsr added [ 102.509706][ T5703] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 102.606533][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 102.606551][ T30] audit: type=1326 audit(1787204030.739:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5912 comm="syz.3.57" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f490ec code=0x7ffc0000 [ 102.670278][ T30] audit: type=1326 audit(1787204030.779:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5912 comm="syz.3.57" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f490ec code=0x7ffc0000 [ 102.699285][ T5703] usb 3-1: Using ep0 maxpacket: 8 [ 102.728619][ T5703] usb 3-1: New USB device found, idVendor=0e41, idProduct=4249, bcdDevice= 0.40 [ 102.753914][ T5703] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 102.759016][ T5920] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 102.781028][ T5703] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 102.790762][ T5924] vivid-008: disconnect [ 102.815043][ T5703] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.842565][ T5703] usb 3-1: Product: syz [ 102.852355][ T5703] usb 3-1: Manufacturer: syz [ 102.867090][ T5703] usb 3-1: SerialNumber: syz [ 102.890704][ T5920] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 102.961289][ T5926] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 103.147034][ T5703] usb 3-1: unit 0 not found! [ 103.322074][ T5916] vivid-008: reconnect [ 103.381602][ T5703] usb 3-1: USB disconnect, device number 3 [ 103.550170][ T5766] udevd[5766]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 103.979168][ T187] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 104.015038][ T5941] netlink: 8 bytes leftover after parsing attributes in process `syz.2.67'. [ 104.024297][ T5941] bond0: Unable to set peer notification delay as MII monitoring is disabled [ 104.144626][ T187] usb 5-1: unable to get BOS descriptor or descriptor too short [ 104.179704][ T187] usb 5-1: New USB device found, idVendor=174f, idProduct=8acf, bcdDevice=39.f4 [ 104.196790][ T187] usb 5-1: config 63 has an invalid interface number: 66 but max is 0 [ 104.210299][ T187] usb 5-1: config 63 contains an unexpected descriptor of type 0x2, skipping [ 104.220451][ T187] usb 5-1: config 63 has an invalid descriptor of length 9, skipping remainder of the config [ 104.247610][ T187] usb 5-1: config 63 has no interface number 0 [ 104.261429][ T187] usb 5-1: config 63 interface 66 has no altsetting 0 [ 104.271587][ T187] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.287781][ T187] usb 5-1: Product: syz [ 104.293153][ T187] usb 5-1: Manufacturer: syz [ 104.298174][ T187] usb 5-1: SerialNumber: syz [ 104.402616][ T5683] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 104.533463][ T187] uvcvideo 5-1:63.66: Found UVC 0.07 device syz (174f:8acf) [ 104.541567][ T187] uvcvideo 5-1:63.66: No valid video chain found. [ 104.566464][ T187] usb 5-1: USB disconnect, device number 3 [ 104.568413][ T5683] usb 3-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=a4.8f [ 104.599743][ T5683] usb 3-1: config 0 has an invalid descriptor of length 222, skipping remainder of the config [ 104.634855][ T5683] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xDC, changing to 0x8C [ 104.662213][ T5683] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8C has invalid maxpacket 8118, setting to 64 [ 104.678409][ T4943] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 104.715911][ T5683] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 104.750387][ T5683] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.759790][ T5683] usb 3-1: Product: syz [ 104.773099][ T5683] usb 3-1: Manufacturer: syz [ 104.785617][ T5683] usb 3-1: SerialNumber: syz [ 104.809554][ T5683] usb 3-1: config 0 descriptor?? [ 104.830738][ T5945] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 104.847801][ T4943] usb 2-1: Using ep0 maxpacket: 16 [ 104.858947][ T4943] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= f.89 [ 104.887362][ T4943] usb 2-1: config 0 has no interfaces? [ 104.898465][ T4943] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 104.923379][ T4943] usb 2-1: SerialNumber: syz [ 104.949885][ T4943] usb 2-1: config 0 descriptor?? [ 104.968069][ T5683] rc_core: IR keymap rc-xbox-dvd not found [ 104.977274][ T5683] Registered IR keymap rc-empty [ 104.990684][ T5683] rc rc0: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 105.038833][ T5683] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input9 [ 105.128090][ T187] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 105.137316][ T5683] usb 3-1: USB disconnect, device number 4 [ 105.143341][ C1] xbox_remote 3-1:0.0: xbox_remote_irq_in: usb_submit_urb()=-19 [ 105.185723][ T5957] netlink: 'syz.0.72': attribute type 12 has an invalid length. [ 105.225139][ T4943] usb 2-1: USB disconnect, device number 6 [ 105.271101][ T5957] netlink: 'syz.0.72': attribute type 29 has an invalid length. [ 105.285138][ T5957] netlink: 148 bytes leftover after parsing attributes in process `syz.0.72'. [ 105.322669][ T5957] netlink: 59 bytes leftover after parsing attributes in process `syz.0.72'. [ 105.358501][ T187] usb 5-1: New USB device found, idVendor=0471, idProduct=0307, bcdDevice=e4.df [ 105.381270][ T187] usb 5-1: config 63 has an invalid interface number: 66 but max is 0 [ 105.396940][ T187] usb 5-1: config 63 contains an unexpected descriptor of type 0x2, skipping [ 105.425892][ T187] usb 5-1: config 63 has an invalid descriptor of length 0, skipping remainder of the config [ 105.452515][ T187] usb 5-1: config 63 has 2 interfaces, different from the descriptor's value: 1 [ 105.473455][ T187] usb 5-1: config 63 has no interface number 1 [ 105.505840][ T187] usb 5-1: config 63 interface 66 has no altsetting 0 [ 105.532376][ T187] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.766512][ T187] usb 5-1: string descriptor 0 read error: -71 [ 105.785830][ T187] uvcvideo 5-1:63.66: Found UVC 0.07 device (0471:0307) [ 105.825696][ T187] uvcvideo 5-1:63.66: No valid video chain found. [ 105.889479][ T187] pwc: Philips PCVC675K (Vesta) USB webcam detected. [ 105.913131][ T187] pwc: send_video_command error -71 [ 105.940573][ T187] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 105.969174][ T187] Philips webcam 5-1:63.0: probe with driver Philips webcam failed with error -71 [ 106.010153][ T187] usb 5-1: USB disconnect, device number 4 [ 106.180714][ T5965] FAULT_INJECTION: forcing a failure. [ 106.180714][ T5965] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 106.222388][ T5965] CPU: 1 UID: 0 PID: 5965 Comm: syz.1.76 Not tainted syzkaller #0 PREEMPT(full) [ 106.222415][ T5965] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 106.222426][ T5965] Call Trace: [ 106.222434][ T5965] [ 106.222442][ T5965] dump_stack_lvl+0xe8/0x150 [ 106.222474][ T5965] should_fail_ex+0x410/0x560 [ 106.222499][ T5965] _copy_from_user+0x2d/0xb0 [ 106.222524][ T5965] get_compat_msghdr+0xb3/0x4c0 [ 106.222546][ T5965] ? __pfx_get_compat_msghdr+0x10/0x10 [ 106.222570][ T5965] ? kfree+0x4d/0x640 [ 106.222598][ T5965] ___sys_recvmsg+0x1db/0x5a0 [ 106.222633][ T5965] ? __pfx____sys_recvmsg+0x10/0x10 [ 106.222670][ T5965] ? __fget_files+0x2a/0x420 [ 106.222719][ T5965] do_recvmmsg+0x38b/0x7f0 [ 106.222756][ T5965] ? __pfx_do_recvmmsg+0x10/0x10 [ 106.222795][ T5965] ? __mutex_unlock_slowpath+0x731/0x900 [ 106.222836][ T5965] __sys_recvmmsg+0x1a5/0x290 [ 106.222865][ T5965] ? __pfx___sys_recvmmsg+0x10/0x10 [ 106.222892][ T5965] ? ksys_write+0x242/0x270 [ 106.222918][ T5965] __ia32_compat_sys_recvmmsg_time32+0xbf/0xe0 [ 106.222943][ T5965] __do_fast_syscall_32+0x27a/0x6a0 [ 106.222964][ T5965] ? do_fast_syscall_32+0x33/0x70 [ 106.222982][ T5965] ? asm_int80_emulation+0x1a/0x20 [ 106.222999][ T5965] ? do_int80_emulation+0x299/0x500 [ 106.223016][ T5965] ? trace_irq_disable+0x3b/0x140 [ 106.223045][ T5965] do_fast_syscall_32+0x33/0x70 [ 106.223062][ T5965] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 106.223084][ T5965] RIP: 0023:0xf70bf0ec [ 106.223101][ T5965] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 106.223114][ T5965] RSP: 002b:00000000f54ad50c EFLAGS: 00000206 ORIG_RAX: 0000000000000151 [ 106.223133][ T5965] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000d80 [ 106.223146][ T5965] RDX: 00000000000001e9 RSI: 0000000000010162 RDI: 0000000000000000 [ 106.223158][ T5965] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 106.223169][ T5965] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 106.223179][ T5965] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 106.223205][ T5965] [ 106.507763][ T5970] netlink: 8 bytes leftover after parsing attributes in process `syz.0.78'. [ 106.550425][ T5970] bond0: Unable to set peer notification delay as MII monitoring is disabled [ 106.579117][ T5974] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 106.596816][ T5974] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 106.747668][ T4943] usb 3-1: new low-speed USB device number 5 using dummy_hcd [ 106.927673][ T187] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 107.071395][ T5990] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 107.088461][ T187] usb 4-1: Using ep0 maxpacket: 8 [ 107.096761][ T187] usb 4-1: New USB device found, idVendor=0e41, idProduct=4249, bcdDevice= 0.40 [ 107.111391][ T5990] netlink: 80 bytes leftover after parsing attributes in process `syz.4.84'. [ 107.133645][ T187] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 107.147197][ T187] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 107.177760][ T187] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.196044][ T187] usb 4-1: Product: syz [ 107.202292][ T187] usb 4-1: Manufacturer: syz [ 107.218061][ T187] usb 4-1: SerialNumber: syz [ 107.410518][ T30] audit: type=1326 audit(1787204035.549:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5994 comm="syz.1.85" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bf0ec code=0x7ffc0000 [ 107.483225][ T5995] netlink: 'syz.1.85': attribute type 9 has an invalid length. [ 107.490933][ T187] usb 4-1: unit 0 not found! [ 107.513473][ T30] audit: type=1326 audit(1787204035.569:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5994 comm="syz.1.85" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bf0ec code=0x7ffc0000 [ 107.601159][ T30] audit: type=1326 audit(1787204035.579:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5994 comm="syz.1.85" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bf0ec code=0x7ffc0000 [ 107.709930][ T30] audit: type=1326 audit(1787204035.579:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5994 comm="syz.1.85" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bf0ec code=0x7ffc0000 [ 107.736593][ T187] usb 4-1: USB disconnect, device number 5 [ 107.810457][ T30] audit: type=1326 audit(1787204035.579:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5994 comm="syz.1.85" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=288 compat=1 ip=0xf70bf0ec code=0x7ffc0000 [ 107.875504][ T30] audit: type=1326 audit(1787204035.589:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5994 comm="syz.1.85" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bf0ec code=0x7ffc0000 [ 107.957547][ T30] audit: type=1326 audit(1787204035.589:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5994 comm="syz.1.85" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bf0ec code=0x7ffc0000 [ 108.013399][ T5766] udevd[5766]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 108.052088][ T30] audit: type=1326 audit(1787204035.589:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5994 comm="syz.1.85" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bf0ec code=0x7ffc0000 [ 108.092062][ T6003] netlink: 4 bytes leftover after parsing attributes in process `syz.0.88'. [ 108.126007][ T30] audit: type=1326 audit(1787204035.589:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5994 comm="syz.1.85" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bf0ec code=0x7ffc0000 [ 108.150612][ T5743] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 108.185307][ T6003] netlink: 4 bytes leftover after parsing attributes in process `syz.0.88'. [ 108.217139][ T30] audit: type=1326 audit(1787204035.589:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5994 comm="syz.1.85" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf70bf0ec code=0x7ffc0000 [ 108.308938][ T30] audit: type=1326 audit(1787204035.589:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5994 comm="syz.1.85" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bf0ec code=0x7ffc0000 [ 108.338362][ T5743] usb 3-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=a4.8f [ 108.367429][ T5743] usb 3-1: config 0 has an invalid descriptor of length 222, skipping remainder of the config [ 108.387678][ T5743] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xDC, changing to 0x8C [ 108.403337][ T30] audit: type=1326 audit(1787204035.589:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5994 comm="syz.1.85" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bf0ec code=0x7ffc0000 [ 108.407627][ T5743] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8C has invalid maxpacket 8118, setting to 64 [ 108.447995][ T6007] netlink: 4 bytes leftover after parsing attributes in process `syz.3.90'. [ 108.457813][ T30] audit: type=1326 audit(1787204035.599:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5994 comm="syz.1.85" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bf0ec code=0x7ffc0000 [ 108.467702][ T5743] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 108.507680][ T29] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 108.543052][ T5743] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.551920][ T5743] usb 3-1: Product: syz [ 108.561644][ T5743] usb 3-1: Manufacturer: syz [ 108.567953][ T5743] usb 3-1: SerialNumber: syz [ 108.604447][ T5743] usb 3-1: config 0 descriptor?? [ 108.629111][ T5999] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 108.677703][ T29] usb 1-1: Using ep0 maxpacket: 8 [ 108.683791][ T29] usb 1-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 108.695857][ T6007] netlink: 4 bytes leftover after parsing attributes in process `syz.3.90'. [ 108.700736][ T29] usb 1-1: config index 0 descriptor too short (expected 30, got 18) [ 108.729217][ T29] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.737888][ T29] usb 1-1: Product: syz [ 108.748973][ T29] usb 1-1: Manufacturer: syz [ 108.758782][ T29] usb 1-1: SerialNumber: syz [ 108.779622][ T29] usb 1-1: config 0 descriptor?? [ 108.790707][ T5743] rc_core: IR keymap rc-xbox-dvd not found [ 108.812922][ T29] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 108.826370][ T5743] Registered IR keymap rc-empty [ 108.836743][ T5743] rc rc0: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 108.848155][ T29] usb 1-1: setting power ON [ 108.858112][ T29] dvb-usb: bulk message failed: -22 (2/0) [ 108.875835][ T5743] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input10 [ 108.902331][ T6007] veth1_macvtap: left promiscuous mode [ 108.920523][ T29] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 108.970114][ T29] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 108.990697][ T29] usb 1-1: media controller created [ 109.013499][ C1] xbox_remote 3-1:0.0: xbox_remote_irq_in: usb_submit_urb()=-19 [ 109.026342][ T5743] usb 3-1: USB disconnect, device number 6 [ 109.101802][ T6017] dvb-usb: bulk message failed: -22 (3/0) [ 109.134024][ T29] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 109.160000][ T6017] dvb-usb: bulk message failed: -22 (3/0) [ 109.223453][ T29] usb 1-1: selecting invalid altsetting 6 [ 109.239010][ T29] usb 1-1: digital interface selection failed (-22) [ 109.247224][ T29] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 109.269475][ T29] usb 1-1: setting power OFF [ 109.285236][ T29] dvb-usb: bulk message failed: -22 (2/0) [ 109.325445][ T29] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 109.352108][ T29] (NULL device *): no alternate interface [ 109.763085][ T6020] netlink: 8 bytes leftover after parsing attributes in process `syz.3.92'. [ 109.794667][ T6024] FAULT_INJECTION: forcing a failure. [ 109.794667][ T6024] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 109.798416][ T6020] bond0: Unable to set peer notification delay as MII monitoring is disabled [ 109.840436][ T6024] CPU: 0 UID: 0 PID: 6024 Comm: syz.2.94 Not tainted syzkaller #0 PREEMPT(full) [ 109.840463][ T6024] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 109.840478][ T6024] Call Trace: [ 109.840486][ T6024] [ 109.840494][ T6024] dump_stack_lvl+0xe8/0x150 [ 109.840526][ T6024] should_fail_ex+0x410/0x560 [ 109.840553][ T6024] _copy_from_iter+0x1d3/0x1660 [ 109.840584][ T6024] ? rcu_is_watching+0x16/0xb0 [ 109.840603][ T6024] ? __pfx__copy_from_iter+0x10/0x10 [ 109.840620][ T6024] ? trace_kmalloc+0x2a/0xf0 [ 109.840647][ T6024] ? __kmalloc_noprof+0x39a/0x720 [ 109.840670][ T6024] ? vfs_write+0x22b/0xba0 [ 109.840687][ T6024] ? __kmalloc_noprof+0x1af/0x720 [ 109.840710][ T6024] ? kernfs_fop_write_iter+0x157/0x540 [ 109.840743][ T6024] kernfs_fop_write_iter+0x19a/0x540 [ 109.840783][ T6024] vfs_write+0x612/0xba0 [ 109.840812][ T6024] ? __pfx_vfs_write+0x10/0x10 [ 109.840844][ T6024] ? __fget_files+0x2a/0x420 [ 109.840871][ T6024] ksys_write+0x150/0x270 [ 109.840894][ T6024] ? __pfx_ksys_write+0x10/0x10 [ 109.840924][ T6024] __do_fast_syscall_32+0x27a/0x6a0 [ 109.840945][ T6024] ? do_fast_syscall_32+0x33/0x70 [ 109.840963][ T6024] ? asm_int80_emulation+0x1a/0x20 [ 109.840981][ T6024] ? do_int80_emulation+0x299/0x500 [ 109.840998][ T6024] ? trace_irq_disable+0x3b/0x140 [ 109.841036][ T6024] do_fast_syscall_32+0x33/0x70 [ 109.841056][ T6024] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 109.841078][ T6024] RIP: 0023:0xf7f480ec [ 109.841096][ T6024] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 109.841111][ T6024] RSP: 002b:00000000f540650c EFLAGS: 00000206 ORIG_RAX: 0000000000000004 [ 109.841131][ T6024] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000080 [ 109.841143][ T6024] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 109.841153][ T6024] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 109.841163][ T6024] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 109.841173][ T6024] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 109.841202][ T6024] [ 110.131657][ T187] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 110.267671][ T187] usb 2-1: device descriptor read/64, error -71 [ 110.507659][ T187] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 110.648945][ T187] usb 2-1: device descriptor read/64, error -71 [ 110.772034][ T187] usb usb2-port1: attempt power cycle [ 111.117706][ T187] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 111.148489][ T187] usb 2-1: device descriptor read/8, error -71 [ 111.251047][ T6057] netlink: 32 bytes leftover after parsing attributes in process `syz.3.104'. [ 111.294643][ T6055] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 111.314172][ T6055] batadv_slave_1: entered promiscuous mode [ 111.346171][ T6060] FAULT_INJECTION: forcing a failure. [ 111.346171][ T6060] name failslab, interval 1, probability 0, space 0, times 0 [ 111.378046][ T6060] CPU: 0 UID: 0 PID: 6060 Comm: syz.2.105 Not tainted syzkaller #0 PREEMPT(full) [ 111.378075][ T6060] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 111.378086][ T6060] Call Trace: [ 111.378093][ T6060] [ 111.378102][ T6060] dump_stack_lvl+0xe8/0x150 [ 111.378135][ T6060] should_fail_ex+0x410/0x560 [ 111.378158][ T6060] ? __se_sys_add_key+0x289/0x420 [ 111.378184][ T6060] should_failslab+0xa8/0x100 [ 111.378216][ T6060] __kvmalloc_node_noprof+0x176/0x870 [ 111.378249][ T6060] ? __se_sys_add_key+0x289/0x420 [ 111.378281][ T6060] __se_sys_add_key+0x289/0x420 [ 111.378310][ T6060] ? __pfx___se_sys_add_key+0x10/0x10 [ 111.378334][ T6060] ? ksys_write+0x242/0x270 [ 111.378363][ T6060] ? __ia32_sys_add_key+0x20/0xc0 [ 111.378391][ T6060] __do_fast_syscall_32+0x27a/0x6a0 [ 111.378413][ T6060] ? do_fast_syscall_32+0x33/0x70 [ 111.378431][ T6060] ? asm_int80_emulation+0x1a/0x20 [ 111.378449][ T6060] ? do_int80_emulation+0x299/0x500 [ 111.378467][ T6060] ? trace_irq_disable+0x3b/0x140 [ 111.378496][ T6060] do_fast_syscall_32+0x33/0x70 [ 111.378515][ T6060] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 111.378538][ T6060] RIP: 0023:0xf7f480ec [ 111.378556][ T6060] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 111.378571][ T6060] RSP: 002b:00000000f540650c EFLAGS: 00000206 ORIG_RAX: 000000000000011e [ 111.378592][ T6060] RAX: ffffffffffffffda RBX: 0000000080000000 RCX: 0000000000000000 [ 111.378606][ T6060] RDX: 0000000080000200 RSI: 0000000000000559 RDI: 00000000ffffffff [ 111.378618][ T6060] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 111.378629][ T6060] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 111.378639][ T6060] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 111.378677][ T6060] [ 111.778191][ T187] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 111.811283][ T187] usb 2-1: device descriptor read/8, error -71 [ 111.928616][ T187] usb usb2-port1: unable to enumerate USB device [ 111.995310][ T6068] FAULT_INJECTION: forcing a failure. [ 111.995310][ T6068] name failslab, interval 1, probability 0, space 0, times 0 [ 112.008535][ T6068] CPU: 1 UID: 0 PID: 6068 Comm: syz.2.106 Not tainted syzkaller #0 PREEMPT(full) [ 112.008562][ T6068] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 112.008574][ T6068] Call Trace: [ 112.008580][ T6068] [ 112.008588][ T6068] dump_stack_lvl+0xe8/0x150 [ 112.008622][ T6068] should_fail_ex+0x410/0x560 [ 112.008648][ T6068] should_failslab+0xa8/0x100 [ 112.008680][ T6068] kmem_cache_alloc_lru_noprof+0xa7/0x5f0 [ 112.008707][ T6068] ? __d_alloc+0x37/0x6f0 [ 112.008724][ T6068] ? __d_alloc+0x37/0x6f0 [ 112.008749][ T6068] __d_alloc+0x37/0x6f0 [ 112.008774][ T6068] d_alloc_pseudo+0x21/0xc0 [ 112.008794][ T6068] alloc_path_pseudo+0x107/0x220 [ 112.008825][ T6068] ? __pfx_alloc_path_pseudo+0x10/0x10 [ 112.008852][ T6068] ? errseq_sample+0x40/0x70 [ 112.008883][ T6068] alloc_file_pseudo+0xa8/0x1e0 [ 112.008912][ T6068] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 112.008935][ T6068] ? _raw_spin_unlock_irq_enable+0x4f/0xa0 [ 112.008965][ T6068] ? pidfs_register_pid_gfp+0x7e/0x1c0 [ 112.008998][ T6068] sock_alloc_file+0xb8/0x2e0 [ 112.009023][ T6068] __sys_socketpair+0x386/0x560 [ 112.009050][ T6068] __ia32_sys_socketpair+0x9a/0xb0 [ 112.009076][ T6068] __do_fast_syscall_32+0x27a/0x6a0 [ 112.009095][ T6068] ? do_fast_syscall_32+0x33/0x70 [ 112.009112][ T6068] ? asm_int80_emulation+0x1a/0x20 [ 112.009129][ T6068] ? do_int80_emulation+0x299/0x500 [ 112.009146][ T6068] ? trace_irq_disable+0x3b/0x140 [ 112.009174][ T6068] do_fast_syscall_32+0x33/0x70 [ 112.009192][ T6068] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 112.009214][ T6068] RIP: 0023:0xf7f480ec [ 112.009233][ T6068] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 112.009247][ T6068] RSP: 002b:00000000f540650c EFLAGS: 00000206 ORIG_RAX: 0000000000000168 [ 112.009268][ T6068] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 0000000000000005 [ 112.009281][ T6068] RDX: 0000000000000000 RSI: 0000000080000080 RDI: 0000000000000000 [ 112.009302][ T6068] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 112.009313][ T6068] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 112.009324][ T6068] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 112.009351][ T6068] [ 112.457944][ T6072] netlink: 8 bytes leftover after parsing attributes in process `syz.4.107'. [ 112.495784][ T6072] bond0: Unable to set peer notification delay as MII monitoring is disabled [ 112.608108][ T6080] binder: 6077:6080 ioctl 40186f02 80000240 returned -22 [ 112.792186][ T6088] fuse: Bad value for 'fd' [ 114.528020][ T6146] netlink: 92 bytes leftover after parsing attributes in process `syz.3.139'. [ 114.748747][ T6152] syzkaller0: entered promiscuous mode [ 114.754433][ T6152] syzkaller0: entered allmulticast mode [ 115.235676][ T6171] netlink: 392 bytes leftover after parsing attributes in process `syz.4.151'. [ 115.442674][ T6185] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 116.127531][ T6210] netlink: 4 bytes leftover after parsing attributes in process `syz.3.169'. [ 116.504691][ T6230] syz.4.176 uses obsolete (PF_INET,SOCK_PACKET) [ 116.543234][ T6232] netlink: 24 bytes leftover after parsing attributes in process `syz.2.179'. [ 116.830309][ T6246] netlink: 8 bytes leftover after parsing attributes in process `syz.1.183'. [ 116.869581][ T6246] netlink: 4 bytes leftover after parsing attributes in process `syz.1.183'. [ 117.124819][ T6254] syzkaller0: entered promiscuous mode [ 117.131653][ T6254] syzkaller0: entered allmulticast mode [ 117.965811][ T6281] netlink: 4 bytes leftover after parsing attributes in process `syz.1.197'. [ 119.279536][ T6293] netlink: 36 bytes leftover after parsing attributes in process `syz.4.200'. [ 119.772862][ T6309] netlink: 12 bytes leftover after parsing attributes in process `syz.3.208'. [ 120.203607][ T6331] netlink: 8 bytes leftover after parsing attributes in process `syz.4.216'. [ 120.214165][ T6331] netlink: 4 bytes leftover after parsing attributes in process `syz.4.216'. [ 120.223357][ T6331] netlink: 'syz.4.216': attribute type 12 has an invalid length. [ 120.232415][ T6331] netlink: 'syz.4.216': attribute type 14 has an invalid length. [ 120.926872][ T6349] netlink: 8 bytes leftover after parsing attributes in process `syz.3.234'. [ 120.957510][ T6349] netlink: 4 bytes leftover after parsing attributes in process `syz.3.234'. [ 121.581283][ T6371] syzkaller0: entered promiscuous mode [ 121.586946][ T6371] syzkaller0: entered allmulticast mode [ 122.280151][ T6377] netlink: 4 bytes leftover after parsing attributes in process `syz.1.229'. [ 122.290050][ T6377] bridge_slave_1: left allmulticast mode [ 122.295766][ T6377] bridge_slave_1: left promiscuous mode [ 122.347218][ T6377] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.362349][ T6377] bridge_slave_0: left allmulticast mode [ 122.371755][ T6377] bridge_slave_0: left promiscuous mode [ 122.378265][ T6377] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.805762][ T6401] syzkaller1: entered promiscuous mode [ 122.811570][ T6401] syzkaller1: entered allmulticast mode [ 123.295298][ T4932] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 123.307919][ T4932] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 123.317057][ T4932] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 123.325392][ T4932] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 123.336482][ T4932] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 123.639167][ T6419] netlink: 4 bytes leftover after parsing attributes in process `syz.4.253'. [ 124.244824][ T6413] bridge0: port 1(bridge_slave_0) entered blocking state [ 124.265968][ T6413] bridge0: port 1(bridge_slave_0) entered disabled state [ 124.282582][ T6413] bridge_slave_0: entered allmulticast mode [ 124.297932][ T6413] bridge_slave_0: entered promiscuous mode [ 124.308803][ T6413] bridge0: port 2(bridge_slave_1) entered blocking state [ 124.328025][ T6413] bridge0: port 2(bridge_slave_1) entered disabled state [ 124.335491][ T6413] bridge_slave_1: entered allmulticast mode [ 124.351365][ T6413] bridge_slave_1: entered promiscuous mode [ 124.496064][ T6413] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 124.510593][ T6413] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 124.584465][ T6413] team0: Port device team_slave_0 added [ 124.601261][ T6413] team0: Port device team_slave_1 added [ 124.642399][ T6413] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 124.652526][ T6413] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 124.681298][ T6413] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 124.701436][ T6413] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 124.709994][ T6413] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 124.768807][ T6413] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 124.990486][ T6413] hsr_slave_0: entered promiscuous mode [ 124.997219][ T6413] hsr_slave_1: entered promiscuous mode [ 125.003848][ T6413] debugfs: 'hsr0' already exists in 'hsr' [ 125.011514][ T6413] Cannot create hsr debugfs directory [ 125.270182][ T6413] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 125.281035][ T6413] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 125.289391][ T6413] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 125.301860][ T6413] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 125.311348][ T6413] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 125.322820][ T6413] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 125.333569][ T6413] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 125.344201][ T6413] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 125.407783][ T5623] Bluetooth: hci5: command tx timeout [ 125.470722][ T6413] 8021q: adding VLAN 0 to HW filter on device bond0 [ 125.504029][ T6413] 8021q: adding VLAN 0 to HW filter on device team0 [ 125.519957][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 125.527405][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 125.554075][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 125.561392][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 125.701942][ T6413] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 125.788841][ T6413] veth0_vlan: entered promiscuous mode [ 125.851127][ T6413] veth1_vlan: entered promiscuous mode [ 125.950501][ T6413] veth0_macvtap: entered promiscuous mode [ 126.011649][ T6413] veth1_macvtap: entered promiscuous mode [ 126.074675][ T6413] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 126.145582][ T6413] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 126.202042][ T12] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.557462][ T6505] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 126.574529][ T6505] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 126.755483][ T1152] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 126.786472][ T1152] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 126.878712][ T12] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.913775][ T12] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.922872][ T1035] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 126.943202][ T1035] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 126.954874][ T12] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.991030][ T6525] netlink: 'syz.3.294': attribute type 4 has an invalid length. [ 127.000634][ T1152] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.033059][ T1152] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.057674][ T1035] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.067277][ T1035] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.489730][ T5623] Bluetooth: hci5: command tx timeout [ 129.182293][ T6618] tls_set_device_offload_rx: netdev not found [ 129.568943][ T5623] Bluetooth: hci5: command tx timeout [ 129.660806][ T30] kauditd_printk_skb: 72 callbacks suppressed [ 129.660828][ T30] audit: type=1800 audit(1787204057.799:112): pid=6625 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.334" name="memory.events" dev="tmpfs" ino=399 res=0 errno=0 [ 130.308689][ T6659] netlink: 4 bytes leftover after parsing attributes in process `syz.5.350'. [ 130.373388][ T6659] bridge_slave_1: left allmulticast mode [ 130.379841][ T6659] bridge_slave_1: left promiscuous mode [ 130.394718][ T6659] bridge0: port 2(bridge_slave_1) entered disabled state [ 130.464015][ T6659] bridge_slave_0: left allmulticast mode [ 130.481050][ T6659] bridge_slave_0: left promiscuous mode [ 130.500919][ T6659] bridge0: port 1(bridge_slave_0) entered disabled state [ 130.828846][ T6683] netlink: 8 bytes leftover after parsing attributes in process `syz.3.361'. [ 131.648530][ T5623] Bluetooth: hci5: command tx timeout [ 133.010811][ T1308] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.020198][ T1308] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.304236][ T6738] syzkaller0: entered promiscuous mode [ 133.317914][ T6738] syzkaller0: entered allmulticast mode [ 133.340954][ T6738] tipc: Started in network mode [ 133.347188][ T6738] tipc: Node identity 8ea36b8e708c, cluster identity 4711 [ 133.362463][ T6738] tipc: Enabled bearer , priority 0 [ 133.393649][ T6737] tipc: Resetting bearer [ 133.483670][ T6737] tipc: Disabling bearer [ 133.745307][ T6757] netlink: 8 bytes leftover after parsing attributes in process `syz.4.392'. [ 133.950144][ T6757] bond0: option arp_all_targets: invalid value (909127728) [ 134.143635][ T6770] netlink: 8 bytes leftover after parsing attributes in process `syz.2.397'. [ 134.368876][ T6772] syzkaller0: entered promiscuous mode [ 134.374664][ T6772] syzkaller0: entered allmulticast mode [ 137.285554][ T6855] netlink: 8 bytes leftover after parsing attributes in process `syz.3.430'. [ 137.621937][ T6864] syzkaller0: entered promiscuous mode [ 137.627877][ T6864] syzkaller0: entered allmulticast mode [ 138.586784][ T6890] netlink: 8 bytes leftover after parsing attributes in process `syz.4.442'. [ 139.587198][ T6895] netlink: 8 bytes leftover after parsing attributes in process `syz.4.444'. [ 140.360057][ T6919] netlink: 8 bytes leftover after parsing attributes in process `syz.3.454'. [ 140.481234][ T6922] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 140.492994][ T6925] netlink: 8 bytes leftover after parsing attributes in process `syz.3.457'. [ 140.638022][ T6926] syzkaller0: entered promiscuous mode [ 140.643684][ T6926] syzkaller0: entered allmulticast mode [ 141.430066][ T6947] netlink: 8 bytes leftover after parsing attributes in process `syz.1.465'. [ 141.802955][ T6956] netlink: 8 bytes leftover after parsing attributes in process `syz.5.469'. [ 142.725696][ T6970] netlink: 24 bytes leftover after parsing attributes in process `syz.4.475'. [ 143.282337][ T6989] netlink: 28 bytes leftover after parsing attributes in process `syz.3.483'. [ 143.284088][ T6987] syzkaller0: entered promiscuous mode [ 143.302614][ T6987] syzkaller0: entered allmulticast mode [ 143.392108][ T6993] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 143.490878][ T6997] netlink: 8 bytes leftover after parsing attributes in process `syz.2.487'. [ 143.624689][ T7002] netlink: 8 bytes leftover after parsing attributes in process `syz.3.489'. [ 143.721531][ T7007] netlink: 8 bytes leftover after parsing attributes in process `syz.3.491'. [ 144.051723][ T7023] netlink: 8 bytes leftover after parsing attributes in process `syz.3.498'. [ 144.160271][ T7030] netlink: 8 bytes leftover after parsing attributes in process `syz.4.501'. [ 144.716184][ T7055] netlink: 8 bytes leftover after parsing attributes in process `syz.2.513'. [ 144.865012][ T7061] netlink: 12 bytes leftover after parsing attributes in process `syz.2.515'. [ 145.455428][ T7092] netlink: 76 bytes leftover after parsing attributes in process `syz.5.528'. [ 146.399143][ T7131] syzkaller0: entered promiscuous mode [ 146.411283][ T7131] syzkaller0: entered allmulticast mode [ 146.445732][ T7131] tipc: Enabled bearer , priority 0 [ 146.485742][ T7131] tipc: Resetting bearer [ 146.504183][ T7130] tipc: Resetting bearer [ 146.531934][ T7130] tipc: Disabling bearer [ 147.736285][ T7195] __nla_validate_parse: 3 callbacks suppressed [ 147.736305][ T7195] netlink: 4 bytes leftover after parsing attributes in process `syz.5.577'. [ 148.298449][ T7215] netlink: 28 bytes leftover after parsing attributes in process `syz.2.585'. [ 149.734625][ T7270] warning: `syz.3.610' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 150.241058][ T7290] netlink: 4 bytes leftover after parsing attributes in process `syz.3.620'. [ 150.524010][ T7303] netlink: 4 bytes leftover after parsing attributes in process `syz.5.626'. [ 150.980912][ T7320] netlink: 28 bytes leftover after parsing attributes in process `syz.3.632'. [ 151.631946][ T7356] netlink: 28 bytes leftover after parsing attributes in process `syz.1.635'. [ 151.708858][ T7360] netlink: 4 bytes leftover after parsing attributes in process `syz.3.651'. [ 151.721843][ T7360] netlink: 277 bytes leftover after parsing attributes in process `syz.3.651'. [ 151.731283][ T7360] netlink: 277 bytes leftover after parsing attributes in process `syz.3.651'. [ 151.769807][ T7360] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 152.406878][ T7384] syzkaller0: entered promiscuous mode [ 152.412630][ T7384] syzkaller0: entered allmulticast mode [ 152.430811][ T7388] syzkaller0: entered promiscuous mode [ 152.440570][ T7388] syzkaller0: entered allmulticast mode [ 152.461133][ T7388] tipc: Started in network mode [ 152.472769][ T7388] tipc: Node identity 1ea7eba084cb, cluster identity 4711 [ 152.489421][ T7388] tipc: Enabled bearer , priority 0 [ 152.516838][ T7386] tipc: Resetting bearer [ 152.579125][ T7386] tipc: Disabling bearer [ 152.662035][ T7397] netlink: 8 bytes leftover after parsing attributes in process `syz.5.670'. [ 152.794463][ T7404] netlink: 136 bytes leftover after parsing attributes in process `syz.3.673'. [ 153.227381][ T7425] netlink: 8 bytes leftover after parsing attributes in process `syz.1.682'. [ 153.415100][ T7431] syzkaller0: entered promiscuous mode [ 153.422110][ T7431] syzkaller0: entered allmulticast mode [ 153.914741][ T7452] netlink: 28 bytes leftover after parsing attributes in process `syz.3.695'. [ 153.930133][ T7453] netlink: 8 bytes leftover after parsing attributes in process `syz.2.696'. [ 154.084689][ T7458] syzkaller0: entered promiscuous mode [ 154.097715][ T7458] syzkaller0: entered allmulticast mode [ 154.366674][ T7471] netlink: 8 bytes leftover after parsing attributes in process `syz.5.705'. [ 154.523378][ T7477] netlink: 28 bytes leftover after parsing attributes in process `syz.2.708'. [ 154.918401][ T7495] netlink: 8 bytes leftover after parsing attributes in process `syz.2.717'. [ 155.115081][ T7505] syzkaller0: entered promiscuous mode [ 155.120941][ T7505] syzkaller0: entered allmulticast mode [ 155.665629][ T7527] netlink: 24 bytes leftover after parsing attributes in process `syz.4.731'. [ 155.820042][ T7530] syzkaller0: entered promiscuous mode [ 155.837611][ T7530] syzkaller0: entered allmulticast mode [ 155.983308][ T7541] netlink: 8 bytes leftover after parsing attributes in process `syz.3.736'. [ 156.465701][ T7559] netlink: 12 bytes leftover after parsing attributes in process `syz.2.745'. [ 156.656896][ T7568] netlink: zone id is out of range [ 156.662707][ T7568] netlink: zone id is out of range [ 156.681285][ T7568] netlink: zone id is out of range [ 156.692455][ T7568] netlink: zone id is out of range [ 156.699988][ T7568] netlink: zone id is out of range [ 156.705864][ T7568] netlink: zone id is out of range [ 156.711618][ T7568] netlink: zone id is out of range [ 156.735776][ T7568] netlink: zone id is out of range [ 156.749037][ T7568] netlink: zone id is out of range [ 158.003177][ T7616] syzkaller0: entered promiscuous mode [ 158.021569][ T7616] syzkaller0: entered allmulticast mode [ 158.038179][ T7616] tipc: Enabled bearer , priority 0 [ 158.082747][ T7616] tipc: Resetting bearer [ 158.102244][ T7615] tipc: Resetting bearer [ 158.144258][ T7615] tipc: Disabling bearer [ 158.414620][ T7631] __nla_validate_parse: 2 callbacks suppressed [ 158.414640][ T7631] netlink: 12 bytes leftover after parsing attributes in process `syz.5.776'. [ 159.011796][ T7655] syzkaller0: entered promiscuous mode [ 159.017647][ T7655] syzkaller0: entered allmulticast mode [ 159.127772][ T7661] netlink: 4 bytes leftover after parsing attributes in process `syz.2.788'. [ 159.601884][ T7683] netlink: 136 bytes leftover after parsing attributes in process `syz.4.796'. [ 159.636233][ T7683] net_ratelimit: 1 callbacks suppressed [ 159.636252][ T7683] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 159.884007][ T7691] syzkaller0: entered promiscuous mode [ 159.898952][ T7691] syzkaller0: entered allmulticast mode [ 159.930295][ T7696] tipc: Enabled bearer , priority 0 [ 159.944138][ T7693] syzkaller0: entered promiscuous mode [ 159.951744][ T7693] syzkaller0: entered allmulticast mode [ 159.968627][ T7693] tipc: Started in network mode [ 159.973843][ T7693] tipc: Node identity 020a83311391, cluster identity 4711 [ 159.982624][ T7693] tipc: Enabled bearer , priority 0 [ 160.003159][ T7691] tipc: Resetting bearer [ 160.023958][ T7693] tipc: Resetting bearer [ 160.044250][ T7689] tipc: Resetting bearer [ 160.070573][ T7689] tipc: Disabling bearer [ 160.084708][ T7692] tipc: Resetting bearer [ 160.112183][ T7692] tipc: Disabling bearer [ 160.145877][ T7700] syzkaller0: entered promiscuous mode [ 160.154693][ T7700] syzkaller0: entered allmulticast mode [ 160.399638][ T7710] netlink: 32 bytes leftover after parsing attributes in process `syz.4.809'. [ 160.423659][ T7710] netlink: 32 bytes leftover after parsing attributes in process `syz.4.809'. [ 160.746652][ T7726] netlink: 4 bytes leftover after parsing attributes in process `syz.4.816'. [ 160.790174][ T7726] netlink: 4 bytes leftover after parsing attributes in process `syz.4.816'. [ 160.801912][ T7729] syzkaller0: entered promiscuous mode [ 160.802946][ T7731] netlink: 28 bytes leftover after parsing attributes in process `syz.5.818'. [ 160.809988][ T7729] syzkaller0: entered allmulticast mode [ 160.842214][ T7729] tipc: Started in network mode [ 160.847385][ T7729] tipc: Node identity d63ae043d8fa, cluster identity 4711 [ 160.857859][ T7729] tipc: Enabled bearer , priority 0 [ 160.891048][ T7729] tipc: Resetting bearer [ 160.906449][ T7727] tipc: Resetting bearer [ 160.940585][ T7727] tipc: Disabling bearer [ 160.947213][ T7733] netlink: 8 bytes leftover after parsing attributes in process `syz.1.806'. [ 161.463811][ T7756] netlink: 8 bytes leftover after parsing attributes in process `syz.3.830'. [ 162.011658][ T7780] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 162.047375][ C1] vcan0: j1939_tp_rxtimer: 0xffff888055ad4000: rx timeout, send abort [ 162.060822][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888055ad4000: 0x20000: (3) A timeout occurred and this is the connection abort to close the session. [ 162.589286][ T7804] syzkaller0: entered promiscuous mode [ 162.607179][ T7804] syzkaller0: entered allmulticast mode [ 162.630136][ T7804] tipc: Enabled bearer , priority 0 [ 162.648964][ T7804] tipc: Resetting bearer [ 162.690578][ T7803] tipc: Resetting bearer [ 162.741583][ T7803] tipc: Disabling bearer [ 163.987577][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880326fac00: rx timeout, send abort [ 163.996712][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff8880326fac00: 0x20000: (3) A timeout occurred and this is the connection abort to close the session. [ 166.503954][ T7985] TCP: tcp_parse_options: Illegal window scaling value 81 > 14 received [ 166.674934][ T7991] syzkaller0: entered promiscuous mode [ 166.681236][ T7991] syzkaller0: entered allmulticast mode [ 166.701432][ T7991] tipc: Enabled bearer , priority 0 [ 166.741095][ T7991] tipc: Resetting bearer [ 166.753423][ T7988] tipc: Resetting bearer [ 166.793132][ T7988] tipc: Disabling bearer [ 167.118477][ T8011] __nla_validate_parse: 9 callbacks suppressed [ 167.118496][ T8011] netlink: 8 bytes leftover after parsing attributes in process `syz.3.928'. [ 167.134696][ T8011] netlink: 12 bytes leftover after parsing attributes in process `syz.3.928'. [ 167.422575][ T8022] netlink: 8 bytes leftover after parsing attributes in process `syz.3.932'. [ 167.792245][ T8039] netlink: 8 bytes leftover after parsing attributes in process `syz.4.940'. [ 167.801892][ T8039] netlink: 4 bytes leftover after parsing attributes in process `syz.4.940'. [ 168.797443][ T8078] syzkaller0: entered promiscuous mode [ 168.818367][ T8078] syzkaller0: entered allmulticast mode [ 168.864288][ T8078] tipc: Enabled bearer , priority 0 [ 168.911837][ T8078] tipc: Resetting bearer [ 169.017018][ T8077] tipc: Resetting bearer [ 169.123579][ T8077] tipc: Disabling bearer [ 169.643866][ T8117] syzkaller0: entered promiscuous mode [ 169.651171][ T8117] syzkaller0: entered allmulticast mode [ 171.063694][ T8178] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 171.095765][ T8177] syzkaller0: entered promiscuous mode [ 171.104015][ T8177] syzkaller0: entered allmulticast mode [ 171.122617][ T8177] tipc: Enabled bearer , priority 0 [ 171.136160][ T8177] tipc: Resetting bearer [ 171.145478][ T8176] tipc: Resetting bearer [ 171.223091][ T8176] tipc: Disabling bearer [ 172.332000][ T8230] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1024'. [ 172.526271][ T8234] syzkaller0: entered promiscuous mode [ 172.534015][ T8234] syzkaller0: entered allmulticast mode [ 172.552510][ T8234] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1026'. [ 172.563260][ T8234] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1026'. [ 172.574114][ T8234] unsupported nlmsg_type 40 [ 172.591350][ T8234] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 173.844611][ T8295] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1054'. [ 175.130072][ T8340] syzkaller0: entered promiscuous mode [ 175.152458][ T8340] syzkaller0: entered allmulticast mode [ 176.127476][ T8388] syzkaller0: entered promiscuous mode [ 176.142965][ T8388] syzkaller0: entered allmulticast mode [ 176.152710][ T8388] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1098'. [ 176.162082][ T8388] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1098'. [ 176.779828][ T8415] syzkaller0: entered promiscuous mode [ 176.809799][ T8415] syzkaller0: entered allmulticast mode [ 176.845856][ T8417] netlink: 64 bytes leftover after parsing attributes in process `syz.5.1112'. [ 176.863387][ T8417] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1112'. [ 176.957884][ T8422] syzkaller0: entered promiscuous mode [ 176.964055][ T8422] syzkaller0: entered allmulticast mode [ 177.657179][ T8455] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1130'. [ 177.955755][ T8466] syzkaller0: entered promiscuous mode [ 177.970524][ T8466] syzkaller0: entered allmulticast mode [ 177.984838][ T8466] netlink: 64 bytes leftover after parsing attributes in process `syz.5.1135'. [ 177.994647][ T8466] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1135'. [ 178.355701][ T8482] netlink: 'syz.3.1142': attribute type 17 has an invalid length. [ 178.379707][ T8482] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1142'. [ 178.379853][ T8483] syzkaller0: entered promiscuous mode [ 178.395071][ T8483] syzkaller0: entered allmulticast mode [ 178.405374][ T8482] bond0: option all_slaves_active: invalid value (8) [ 178.443764][ T8483] tipc: Enabled bearer , priority 0 [ 178.485666][ T8483] tipc: Resetting bearer [ 178.506650][ T8481] tipc: Resetting bearer [ 178.566918][ T8481] tipc: Disabling bearer [ 178.911344][ T8501] syzkaller0: entered promiscuous mode [ 178.922001][ T8501] syzkaller0: entered allmulticast mode [ 178.961491][ T8501] netlink: 64 bytes leftover after parsing attributes in process `syz.5.1150'. [ 178.972899][ T8501] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1150'. [ 179.500979][ T8525] syzkaller0: entered promiscuous mode [ 179.506946][ T8525] syzkaller0: entered allmulticast mode [ 180.747339][ T8568] syzkaller0: entered promiscuous mode [ 180.753148][ T8568] syzkaller0: entered allmulticast mode [ 181.074437][ T8580] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1180'. [ 181.091784][ T8580] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1180'. [ 182.311520][ T8630] netlink: 'syz.5.1206': attribute type 2 has an invalid length. [ 182.350650][ T8630] : entered promiscuous mode [ 182.571886][ T8640] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 183.302623][ T8671] syzkaller0: entered promiscuous mode [ 183.310913][ T8671] syzkaller0: entered allmulticast mode [ 183.322889][ T8671] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1223'. [ 183.335437][ T8671] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1223'. [ 183.467267][ T8674] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 184.180824][ T8698] syzkaller0: entered promiscuous mode [ 184.196480][ T8698] syzkaller0: entered allmulticast mode [ 184.244742][ T8698] tipc: Enabled bearer , priority 0 [ 184.282162][ T8698] tipc: Resetting bearer [ 184.294455][ T8697] tipc: Resetting bearer [ 184.337370][ T8697] tipc: Disabling bearer [ 184.395004][ T8703] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 184.405626][ T9] bond_slave_0: entered promiscuous mode [ 184.413610][ T9] bond_slave_1: entered promiscuous mode [ 184.764793][ T8724] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1245'. [ 185.337451][ T8737] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1250'. [ 185.521632][ T8744] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1253'. [ 185.622490][ T8746] syzkaller0: entered promiscuous mode [ 185.628758][ T8746] syzkaller0: entered allmulticast mode [ 186.446062][ T8772] syzkaller0: entered promiscuous mode [ 186.454490][ T8772] syzkaller0: entered allmulticast mode [ 186.616051][ T8777] syzkaller0: entered promiscuous mode [ 186.625668][ T8777] syzkaller0: entered allmulticast mode [ 187.100204][ T8796] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1275'. [ 187.452255][ T8807] syzkaller0: entered promiscuous mode [ 187.466290][ T8807] syzkaller0: entered allmulticast mode [ 187.874206][ T8823] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1288'. [ 187.902307][ T8825] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1287'. [ 187.949628][ T8825] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1287'. [ 188.215808][ T8839] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1294'. [ 188.446152][ T8845] ipip0: entered promiscuous mode [ 188.605469][ T8855] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1301'. [ 189.062689][ T8874] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1308'. [ 189.210729][ T8880] syzkaller0: entered promiscuous mode [ 189.219926][ T8880] syzkaller0: entered allmulticast mode [ 189.278727][ T8882] syzkaller0: entered promiscuous mode [ 189.284430][ T8882] syzkaller0: entered allmulticast mode [ 189.874049][ T8910] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1326'. [ 189.892629][ T8909] syzkaller1: entered promiscuous mode [ 189.899210][ T8909] syzkaller1: entered allmulticast mode [ 189.965025][ T8912] syzkaller0: entered promiscuous mode [ 189.974998][ T8912] syzkaller0: entered allmulticast mode [ 190.405212][ T8932] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1334'. [ 190.738211][ T8947] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1338'. [ 190.894302][ T8952] syzkaller0: entered promiscuous mode [ 190.901259][ T8952] syzkaller0: entered allmulticast mode [ 191.054625][ T8960] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1345'. [ 191.767384][ T8988] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1358'. [ 191.987239][ T8995] syzkaller0: entered promiscuous mode [ 191.995259][ T8995] syzkaller0: entered allmulticast mode [ 192.334826][ T9005] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 192.352538][ T9005] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 192.368802][ T9005] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 192.461625][ T9013] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1366'. [ 192.613167][ T9017] syzkaller0: entered promiscuous mode [ 192.623401][ T9017] syzkaller0: entered allmulticast mode [ 192.630292][ T9020] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1370'. [ 193.092878][ T9040] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1379'. [ 193.523630][ T9052] syzkaller0: entered promiscuous mode [ 193.535673][ T9052] syzkaller0: entered allmulticast mode [ 194.369401][ T9096] netlink: 112 bytes leftover after parsing attributes in process `syz.5.1403'. [ 194.454440][ T1308] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.461107][ T1308] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.595807][ T9077] syzkaller0: entered promiscuous mode [ 194.602877][ T9077] syzkaller0: entered allmulticast mode [ 194.782283][ T9101] syzkaller0: entered promiscuous mode [ 194.793948][ T9101] syzkaller0: entered allmulticast mode [ 197.848227][ T4983] udevd[4983]: worker [5615] /devices/platform/dummy_hcd.0/usb1/1-1 is taking a long time [ 199.605194][ T9140] syzkaller0: entered promiscuous mode [ 199.625841][ T9140] syzkaller0: entered allmulticast mode [ 199.823495][ T9143] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 199.825501][ T9151] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1421'. [ 199.843776][ T9143] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 199.856978][ T9143] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 200.217281][ T9157] syzkaller0: entered promiscuous mode [ 200.235526][ T9157] syzkaller0: entered allmulticast mode [ 200.523723][ T9166] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1431'. [ 201.084461][ T9188] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1439'. [ 201.248478][ T9191] syzkaller0: entered promiscuous mode [ 201.277731][ T9191] syzkaller0: entered allmulticast mode [ 201.308153][ T9192] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1440'. [ 201.328209][ T9192] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1440'. [ 202.177912][ T9225] syzkaller0: entered promiscuous mode [ 202.197690][ T9225] syzkaller0: entered allmulticast mode [ 202.271420][ T9227] syzkaller0: entered promiscuous mode [ 202.279829][ T9227] syzkaller0: entered allmulticast mode [ 202.294153][ T9227] netlink: 64 bytes leftover after parsing attributes in process `syz.5.1458'. [ 202.318892][ T9227] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1458'. [ 202.814225][ T9241] syzkaller0: entered promiscuous mode [ 202.821848][ T9241] syzkaller0: entered allmulticast mode [ 203.366250][ T9245] syzkaller0: tun_chr_ioctl cmd 62724 [ 203.563893][ T9282] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1474'. [ 203.579202][ T9282] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1474'. [ 204.125349][ T9291] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1478'. [ 205.961847][ T9277] syzkaller0: entered promiscuous mode [ 205.969081][ T9277] syzkaller0: entered allmulticast mode [ 206.028647][ T9278] syzkaller0: entered promiscuous mode [ 206.035025][ T9278] syzkaller0: entered allmulticast mode [ 206.051619][ T9281] syzkaller0: entered promiscuous mode [ 206.059731][ T9281] syzkaller0: entered allmulticast mode [ 206.773563][ T5623] Bluetooth: hci1: command 0x0406 tx timeout [ 206.780922][ T5624] Bluetooth: hci3: command 0x0406 tx timeout [ 206.787092][ T5624] Bluetooth: hci4: command 0x0406 tx timeout [ 206.794970][ T5618] Bluetooth: hci2: command 0x0406 tx timeout [ 206.798051][ T5627] Bluetooth: hci0: command 0x0406 tx timeout [ 211.463163][ T9347] syzkaller0: entered promiscuous mode [ 211.472016][ T9347] syzkaller0: entered allmulticast mode [ 213.930946][ T9381] syzkaller0: entered promiscuous mode [ 213.940376][ T9381] syzkaller0: entered allmulticast mode [ 214.006006][ T9383] syzkaller0: entered promiscuous mode [ 214.017359][ T9383] syzkaller0: entered allmulticast mode [ 214.035107][ T9383] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1512'. [ 214.061101][ T9383] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1512'. [ 214.126572][ T9385] syzkaller0: entered promiscuous mode [ 214.134548][ T9385] syzkaller0: entered allmulticast mode [ 214.692457][ T9413] syzkaller0: entered promiscuous mode [ 214.709344][ T9413] syzkaller0: entered allmulticast mode [ 214.961438][ T9420] syzkaller0: entered promiscuous mode [ 214.972155][ T9420] syzkaller0: entered allmulticast mode [ 215.278650][ T9425] syzkaller0: entered promiscuous mode [ 215.526161][ T9425] syzkaller0: entered allmulticast mode [ 215.566493][ T9444] syzkaller0: entered promiscuous mode [ 215.590297][ T9444] syzkaller0: entered allmulticast mode [ 215.994254][ T9460] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1547'. [ 216.006273][ T9460] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1547'. [ 216.309587][ T9471] netlink: 136 bytes leftover after parsing attributes in process `syz.1.1551'. [ 216.324135][ T9471] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 216.472219][ T9475] syzkaller0: entered promiscuous mode [ 216.480524][ T9475] syzkaller0: entered allmulticast mode [ 216.494790][ T9475] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1553'. [ 216.518456][ T9475] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1553'. [ 216.776832][ T9489] geneve2: entered promiscuous mode [ 217.084434][ T9498] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1563'. [ 217.273549][ T9503] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 217.503966][ T9508] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1567'. [ 217.547989][ T9508] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1567'. [ 218.248023][ T9536] openvswitch: netlink: Message has 8 unknown bytes. [ 219.438888][ T9580] syzkaller0: entered promiscuous mode [ 219.461570][ T9580] syzkaller0: entered allmulticast mode [ 220.267255][ T9611] syzkaller0: entered promiscuous mode [ 220.275716][ T9611] syzkaller0: entered allmulticast mode [ 220.746688][ T9630] netlink: 'syz.2.1624': attribute type 11 has an invalid length. [ 221.172448][ T9641] syzkaller0: entered promiscuous mode [ 221.182206][ T9641] syzkaller0: entered allmulticast mode [ 222.090852][ T9674] syzkaller0: entered promiscuous mode [ 222.097037][ T9674] syzkaller0: entered allmulticast mode [ 225.720034][ T9738] __nla_validate_parse: 3 callbacks suppressed [ 225.720055][ T9738] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1671'. [ 225.935300][ T9747] syzkaller0: entered promiscuous mode [ 225.941409][ T9747] syzkaller0: entered allmulticast mode [ 226.491536][ T9767] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1679'. [ 226.545246][ T9767] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1679'. [ 228.365210][ T9774] tipc: Enabling of bearer rejected, failed to enable media [ 228.804496][ T9800] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1697'. [ 228.814759][ T9800] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1697'. [ 229.109904][ T9807] syzkaller0: entered promiscuous mode [ 229.117390][ T9807] syzkaller0: entered allmulticast mode [ 229.630656][ T9828] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1706'. [ 229.687608][ T9835] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1709'. [ 231.514908][ T9822] syzkaller0: entered promiscuous mode [ 231.521103][ T9822] syzkaller0: entered allmulticast mode [ 231.529599][ T9825] tipc: Enabled bearer , priority 0 [ 231.558303][ T9836] tipc: Resetting bearer [ 231.671768][ T9840] syzkaller0: entered promiscuous mode [ 231.678118][ T9840] syzkaller0: entered allmulticast mode [ 231.714264][ T9820] tipc: Resetting bearer [ 231.755961][ T9820] tipc: Disabling bearer [ 231.846202][ T9848] netlink: 84 bytes leftover after parsing attributes in process `syz.1.1712'. [ 232.007066][ T9854] openvswitch: netlink: Message has 8 unknown bytes. [ 233.154841][ T9868] netlink: 92 bytes leftover after parsing attributes in process `syz.3.1720'. [ 233.781377][ T9870] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1721'. [ 234.136310][ T9842] syzkaller0: entered promiscuous mode [ 234.143024][ T9842] syzkaller0: entered allmulticast mode [ 234.418648][ T9880] syzkaller0: entered promiscuous mode [ 234.424550][ T9880] syzkaller0: entered allmulticast mode [ 234.441324][ T9880] tipc: Enabled bearer , priority 0 [ 234.620072][ T9880] tipc: Resetting bearer [ 234.713990][ T9878] tipc: Resetting bearer [ 234.736771][ T9878] tipc: Disabling bearer [ 234.742305][ T9891] vxcan1: tx drop: invalid da for name 0x0000000001000000 [ 234.765912][ T9894] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1732'. [ 234.989642][ T9902] netlink: 92 bytes leftover after parsing attributes in process `syz.5.1734'. [ 235.038007][ T9904] syzkaller0: entered promiscuous mode [ 235.057597][ T9904] syzkaller0: entered allmulticast mode [ 235.134033][ T9910] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 235.259928][ T9915] netlink: 84 bytes leftover after parsing attributes in process `syz.3.1740'. [ 235.485147][ T9923] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1744'. [ 235.660228][ T9927] syzkaller0: entered promiscuous mode [ 235.684120][ T9927] syzkaller0: entered allmulticast mode [ 235.713421][ T9927] tipc: Enabled bearer , priority 0 [ 235.748345][ T9932] netlink: 92 bytes leftover after parsing attributes in process `syz.3.1749'. [ 235.772215][ T9927] tipc: Resetting bearer [ 235.798355][ T9924] tipc: Resetting bearer [ 235.862792][ T9924] tipc: Disabling bearer [ 235.955608][ T9942] netlink: 84 bytes leftover after parsing attributes in process `syz.3.1754'. [ 236.798809][ T9976] syzkaller0: entered promiscuous mode [ 236.817765][ T9976] syzkaller0: entered allmulticast mode [ 236.865092][ T9976] tipc: Enabled bearer , priority 0 [ 236.923687][ T9976] tipc: Resetting bearer [ 236.987113][ T9974] tipc: Resetting bearer [ 237.041583][ T9974] tipc: Disabling bearer [ 237.954721][T10020] syzkaller0: entered promiscuous mode [ 237.961251][T10020] syzkaller0: entered allmulticast mode [ 237.990479][T10020] tipc: Enabled bearer , priority 0 [ 238.034459][T10020] tipc: Resetting bearer [ 238.051983][T10019] tipc: Resetting bearer [ 238.077275][T10019] tipc: Disabling bearer [ 238.510345][T10040] syzkaller0: entered promiscuous mode [ 238.516154][T10040] syzkaller0: entered allmulticast mode [ 239.242399][T10064] openvswitch: netlink: Message has 8 unknown bytes. [ 241.332296][T10053] syzkaller0: entered promiscuous mode [ 241.337938][T10053] syzkaller0: entered allmulticast mode [ 241.429411][T10071] tipc: Enabling of bearer rejected, failed to enable media [ 243.730788][T10120] openvswitch: netlink: Message has 8 unknown bytes. [ 243.765478][T10117] syzkaller0: entered promiscuous mode [ 243.784624][T10117] syzkaller0: entered allmulticast mode [ 244.033035][T10132] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1823'. [ 246.048016][T10123] tipc: Enabled bearer , priority 0 [ 246.056150][T10138] tipc: Resetting bearer [ 246.074007][T10121] tipc: Disabling bearer [ 246.360032][T10167] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1834'. [ 246.429914][T10172] netlink: 88 bytes leftover after parsing attributes in process `syz.2.1836'. [ 246.613687][T10173] syzkaller0: entered promiscuous mode [ 246.619507][T10173] syzkaller0: entered allmulticast mode [ 247.732875][ T50] Bluetooth: hci5: command 0x0406 tx timeout [ 248.746878][T10201] syzkaller0: entered promiscuous mode [ 248.752699][T10201] syzkaller0: entered allmulticast mode [ 249.000513][T10210] netlink: 88 bytes leftover after parsing attributes in process `syz.3.1849'. [ 249.201004][T10219] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1855'. [ 249.510128][T10235] netlink: 'syz.1.1851': attribute type 13 has an invalid length. [ 249.510838][T10232] syzkaller0: entered promiscuous mode [ 249.530394][T10232] syzkaller0: entered allmulticast mode [ 249.665827][T10239] syzkaller0: entered promiscuous mode [ 249.672074][T10239] syzkaller0: entered allmulticast mode [ 249.884676][T10248] netlink: 88 bytes leftover after parsing attributes in process `syz.2.1865'. [ 249.917003][T10241] syzkaller0: entered promiscuous mode [ 249.923207][T10241] syzkaller0: entered allmulticast mode [ 251.516118][T10297] netlink: 72 bytes leftover after parsing attributes in process `syz.5.1885'. [ 251.829860][T10305] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1889'. [ 251.841457][T10305] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1889'. [ 251.851328][T10305] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1889'. [ 253.024327][T10320] syzkaller0: entered promiscuous mode [ 253.036584][T10320] syzkaller0: entered allmulticast mode [ 253.064628][T10325] netlink: 'syz.3.1897': attribute type 21 has an invalid length. [ 253.073144][T10325] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1897'. [ 253.082801][T10325] bond0: option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 253.444182][T10344] netlink: 92 bytes leftover after parsing attributes in process `syz.1.1904'. [ 253.791660][T10351] netlink: 'syz.3.1906': attribute type 4 has an invalid length. [ 255.585623][T10366] tipc: Enabled bearer , priority 0 [ 255.625121][T10361] tipc: Resetting bearer [ 255.860895][T10360] tipc: Disabling bearer [ 255.893191][ T1308] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.899823][ T1308] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.006151][T10387] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1920'. [ 256.238048][T10395] syzkaller0: entered promiscuous mode [ 256.258642][T10395] syzkaller0: entered allmulticast mode [ 258.417398][T10421] tipc: Enabling of bearer rejected, failed to enable media [ 259.164665][T10461] tipc: Enabled bearer , priority 0 [ 259.188121][T10461] tipc: Resetting bearer [ 259.214047][T10460] tipc: Disabling bearer [ 259.354199][T10463] netlink: 92 bytes leftover after parsing attributes in process `syz.1.1947'. [ 259.455826][T10469] syzkaller0: entered promiscuous mode [ 259.461604][T10469] syzkaller0: entered allmulticast mode [ 259.491826][T10469] tipc: Enabled bearer , priority 0 [ 259.503602][T10468] tipc: Resetting bearer [ 259.541402][T10468] tipc: Disabling bearer [ 259.793609][T10483] netlink: 4096 bytes leftover after parsing attributes in process `syz.2.1957'. [ 259.912547][T10487] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1958'. [ 259.938943][T10486] tipc: Enabling of bearer rejected, failed to enable media [ 259.966463][T10491] netlink: 92 bytes leftover after parsing attributes in process `syz.4.1961'. [ 260.296592][T10502] C: renamed from veth1_to_team (while UP) [ 260.350522][T10502] netlink: 'syz.3.1965': attribute type 1 has an invalid length. [ 260.373170][ T31] INFO: task kworker/1:1:29 blocked for more than 143 seconds. [ 260.398086][T10502] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1965'. [ 260.401994][ T31] Not tainted syzkaller #0 [ 260.427607][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 260.446470][T10502] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 260.458450][ T31] task:kworker/1:1 state:D stack:21536 pid:29 tgid:29 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 260.527649][ T31] Workqueue: usb_hub_wq hub_event [ 260.541413][ T31] Call Trace: [ 260.546356][ T31] [ 260.554660][ T31] __schedule+0x17d4/0x5630 [ 260.570523][ T31] ? __lock_acquire+0x683/0x2cf0 [ 260.580551][ T31] ? bus_for_each_drv+0x258/0x2f0 [ 260.594559][ T31] ? __device_attach+0x2c4/0x450 [ 260.600282][ T31] ? usb_set_configuration+0x1ad8/0x2180 [ 260.606095][ T31] ? really_probe+0x254/0xae0 [ 260.617727][ T31] ? __driver_probe_device+0x1e8/0x360 [ 260.623296][ T31] ? driver_probe_device+0x4f/0x240 [ 260.630266][ T31] ? __device_attach_driver+0x270/0x410 [ 260.647695][ T31] ? device_initial_probe+0xa1/0xd0 [ 260.653322][ T31] ? device_add+0x7d7/0xb80 [ 260.658404][ T31] ? register_lock_class+0x31/0x2e0 [ 260.663939][ T31] ? __pfx___schedule+0x10/0x10 [ 260.677423][ T31] ? schedule+0x90/0x2b0 [ 260.681953][ T31] schedule+0x164/0x2b0 [ 260.686956][ T31] schedule_timeout+0xc0/0x2c0 [ 260.692289][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 260.698138][ T31] ? do_raw_spin_lock+0x12b/0x2f0 [ 260.707976][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 260.714822][ T31] ? wait_for_completion+0x272/0x5e0 [ 260.720446][ T31] wait_for_completion+0x2ca/0x5e0 [ 260.726382][ T31] ? __pfx_wait_for_completion+0x10/0x10 [ 260.733169][ T31] ? kobject_put+0x50f/0x550 [ 260.738066][ T31] i2c_del_adapter+0x281/0x430 [ 260.743108][ T31] ? __pfx_i2c_del_adapter+0x10/0x10 [ 260.748694][ T31] ? kfree+0x4d/0x640 [ 260.752861][ T31] dvb_usb_i2c_exit+0x64/0xb0 [ 260.757985][ T31] dvb_usb_device_exit+0x1cb/0x350 [ 260.763237][ T31] ? __pfx_dvb_usb_device_exit+0x10/0x10 [ 260.771436][ T31] ? do_raw_spin_lock+0x12b/0x2f0 [ 260.776630][ T31] cxusb_probe+0x60f/0x710 [ 260.781216][ T31] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 260.787251][ T31] ? __pfx_cxusb_probe+0x10/0x10 [ 260.792480][ T31] ? __pm_runtime_set_status+0x994/0xc80 [ 260.799396][ T31] usb_probe_interface+0x653/0xc60 [ 260.804814][ T31] ? __pfx_usb_probe_interface+0x10/0x10 [ 260.810569][ T31] really_probe+0x254/0xae0 [ 260.815123][ T31] __driver_probe_device+0x1e8/0x360 [ 260.820901][ T31] driver_probe_device+0x4f/0x240 [ 260.826067][ T31] __device_attach_driver+0x270/0x410 [ 260.831620][ T31] bus_for_each_drv+0x258/0x2f0 [ 260.836577][ T31] ? __pfx___device_attach_driver+0x10/0x10 [ 260.842689][ T31] ? __pfx_bus_for_each_drv+0x10/0x10 [ 260.848769][ T31] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 260.854652][ T31] __device_attach+0x2c4/0x450 [ 260.859570][ T31] ? __pfx___device_attach+0x10/0x10 [ 260.865264][ T31] ? do_raw_spin_unlock+0xf5/0x200 [ 260.871849][ T31] ? _raw_spin_unlock+0x28/0x50 [ 260.876866][ T31] device_initial_probe+0xa1/0xd0 [ 260.882184][ T31] bus_probe_device+0x12a/0x220 [ 260.887403][ T31] device_add+0x7d7/0xb80 [ 260.891837][ T31] usb_set_configuration+0x1ad8/0x2180 [ 260.897368][ T31] usb_generic_driver_probe+0x8d/0x150 [ 260.903065][ T31] usb_probe_device+0x1c3/0x3b0 [ 260.908367][ T31] ? __pfx_usb_probe_device+0x10/0x10 [ 260.913813][ T31] really_probe+0x254/0xae0 [ 260.918496][ T31] __driver_probe_device+0x1e8/0x360 [ 260.923904][ T31] driver_probe_device+0x4f/0x240 [ 260.929194][ T31] __device_attach_driver+0x270/0x410 [ 260.934788][ T31] bus_for_each_drv+0x258/0x2f0 [ 260.940148][ T31] ? __pfx___device_attach_driver+0x10/0x10 [ 260.946182][ T31] ? __pfx_bus_for_each_drv+0x10/0x10 [ 260.951626][ T31] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 260.957620][ T31] __device_attach+0x2c4/0x450 [ 260.962458][ T31] ? __pfx___device_attach+0x10/0x10 [ 260.967894][ T31] ? do_raw_spin_unlock+0xf5/0x200 [ 260.974154][ T31] ? _raw_spin_unlock+0x28/0x50 [ 260.979244][ T31] device_initial_probe+0xa1/0xd0 [ 260.984442][ T31] bus_probe_device+0x12a/0x220 [ 260.989494][ T31] device_add+0x7d7/0xb80 [ 260.993961][ T31] usb_new_device+0x9aa/0x1690 [ 260.998804][ T31] ? __pfx_usb_new_device+0x10/0x10 [ 261.004231][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 261.012191][ T31] hub_event+0x28e8/0x4d30 [ 261.017408][ T31] ? __pfx_hub_event+0x10/0x10 [ 261.023200][ T31] ? process_scheduled_works+0xa1a/0x14c0 [ 261.029223][ T31] ? rcu_is_watching+0x16/0xb0 [ 261.034164][ T31] ? process_scheduled_works+0xa1a/0x14c0 [ 261.040805][ T31] process_scheduled_works+0xa88/0x14c0 [ 261.046754][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 261.053282][ T31] ? assign_work+0x3cf/0x5d0 [ 261.058066][ T31] worker_thread+0xa47/0xfb0 [ 261.062709][ T31] ? __kthread_parkme+0x71/0x1f0 [ 261.067858][ T31] kthread+0x38b/0x480 [ 261.071992][ T31] ? __pfx_worker_thread+0x10/0x10 [ 261.078406][ T31] ? __pfx_kthread+0x10/0x10 [ 261.083176][ T31] ret_from_fork+0x514/0xb70 [ 261.088002][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 261.093176][ T31] ? __switch_to+0xc89/0x1420 [ 261.098036][ T31] ? __pfx_kthread+0x10/0x10 [ 261.102734][ T31] ret_from_fork_asm+0x1a/0x30 [ 261.107600][ T31] [ 261.110984][ T31] INFO: task syz.0.88:6003 blocked for more than 144 seconds. [ 261.118874][ T31] Not tainted syzkaller #0 [ 261.123855][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 261.133408][ T31] task:syz.0.88 state:D stack:25640 pid:6003 tgid:6002 ppid:5629 task_flags:0x400140 flags:0x08080002 [ 261.146116][ T31] Call Trace: [ 261.149612][ T31] [ 261.152628][ T31] __schedule+0x17d4/0x5630 [ 261.157343][ T31] ? __pfx___schedule+0x10/0x10 [ 261.162438][ T31] ? schedule+0x90/0x2b0 [ 261.166754][ T31] schedule+0x164/0x2b0 [ 261.171071][ T31] schedule_preempt_disabled+0x13/0x30 [ 261.176802][ T31] __mutex_lock+0x7c1/0x1550 [ 261.183672][ T31] ? __mutex_lock+0x5d4/0x1550 [ 261.188709][ T31] ? usbdev_open+0x151/0x770 [ 261.193383][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 261.198670][ T31] ? bus_find_device+0x27d/0x2d0 [ 261.203891][ T31] ? __pfx_bus_find_device+0x10/0x10 [ 261.209439][ T31] ? usbdev_open+0xa7/0x770 [ 261.214106][ T31] ? usbdev_open+0xa7/0x770 [ 261.218855][ T31] usbdev_open+0x151/0x770 [ 261.223329][ T31] ? __pfx_usbdev_open+0x10/0x10 [ 261.228814][ T31] ? do_raw_spin_unlock+0xf5/0x200 [ 261.234050][ T31] chrdev_open+0x4d9/0x600 [ 261.238725][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 261.243914][ T31] ? fsnotify_open_perm_and_set_mode+0x135/0x6b0 [ 261.250698][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 261.255776][ T31] do_dentry_open+0x816/0x1380 [ 261.260818][ T31] vfs_open+0x3b/0x340 [ 261.265123][ T31] ? path_openat+0x1428/0x1d60 [ 261.270586][ T31] path_openat+0x1443/0x1d60 [ 261.275595][ T31] do_file_open+0x23e/0x4a0 [ 261.281978][ T31] ? __pfx_do_file_open+0x10/0x10 [ 261.287287][ T31] ? _raw_spin_unlock+0x28/0x50 [ 261.292248][ T31] ? alloc_fd+0x651/0x6c0 [ 261.296623][ T31] do_sys_openat2+0x115/0x200 [ 261.301463][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 261.306802][ T31] ? rcu_is_watching+0x16/0xb0 [ 261.311649][ T31] __ia32_compat_sys_openat+0x131/0x160 [ 261.317572][ T31] do_int80_emulation+0x198/0x500 [ 261.322718][ T31] ? trace_irq_disable+0x3b/0x140 [ 261.330758][ T31] ? asm_int80_emulation+0x1a/0x20 [ 261.336337][ T31] ? clear_bhb_loop+0x70/0xc0 [ 261.341171][ T31] ? clear_bhb_loop+0x70/0xc0 [ 261.345973][ T31] asm_int80_emulation+0x1a/0x20 [ 261.351315][ T31] RIP: 0023:0xf71774eb [ 261.355433][ T31] RSP: 002b:00000000f543603c EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 261.364195][ T31] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000f5436100 [ 261.372467][ T31] RDX: 000000000000a401 RSI: 0000000000000000 RDI: 0000000000000000 [ 261.380513][ T31] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 261.390540][ T31] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 261.398619][ T31] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 261.406647][ T31] [ 261.409803][ T31] [ 261.409803][ T31] Showing all locks held in the system: [ 261.417744][ T31] locks held by kworker/1:1/29: 5, on CPU#1: [ 261.423942][ T31] #0: ffff88802069a540 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0xa1a/0x14c0 [ 261.435687][ T31] #1: ffffc90000a47c40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0xa1a/0x14c0 [ 261.447886][ T31] #2: ffff88802aaca1d8 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4d30 [ 261.456834][ T31] #3: ffff88807b6c51d8 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450 [ 261.466247][ T31] #4: ffff88807872c1a0 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450 [ 261.476022][ T31] locks held by khungtaskd/31: 1, last CPU#1: [ 261.482494][ T31] #0: ffffffff8eb5a0e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 261.499254][ T31] locks held by kworker/u8:7/1042: 2, last CPU#1: [ 261.506059][ T31] #0: ffff8880b873b2e0 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2d/0x160 [ 261.516850][ T31] #1: ffffc9000527fc40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa1a/0x14c0 [ 261.532282][ T31] locks held by getty/5368: 2, on CPU#0: [ 261.538280][ T31] #0: ffff888033dd70a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 261.548746][ T31] #1: ffffc9000322b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 261.559247][ T31] locks held by udevd/5615: 4, on CPU#1: [ 261.565164][ T31] #0: ffff8880269bc3f8 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xa4/0xca0 [ 261.574343][ T31] #1: ffff888056cd6c80 (&of->mutex#2){+.+.}-{4:4}, at: kernfs_seq_start+0x5d/0x420 [ 261.584158][ T31] #2: ffff88802b251d28 (kn->active#29){++++}-{0:0}, at: kernfs_seq_start+0xb2/0x420 [ 261.595198][ T31] #3: ffff88807b6c51d8 (&dev->mutex){....}-{4:4}, at: manufacturer_show+0x26/0xa0 [ 261.604856][ T31] locks held by syz.0.88/6003: 1, on CPU#1: [ 261.611105][ T31] #0: ffff88802aaca1d8 (&dev->mutex){....}-{4:4}, at: usbdev_open+0x151/0x770 [ 261.620205][ T31] locks held by kworker/u8:12/7971: 3, on CPU#1: [ 261.626567][ T31] #0: ffff88801b06c140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xa1a/0x14c0 [ 261.638553][ T31] #1: ffffc9001edb7c40 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0xa1a/0x14c0 [ 261.649984][ T31] #2: ffffffff9002cfc0 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 261.660216][ T31] locks held by syz.4.1962/10495: 2, on CPU#0: [ 261.666630][ T31] #0: ffffffff9002cfc0 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 261.675943][ T31] #1: ffffffff8eb603e8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2d0/0x770 [ 261.687264][ T31] [ 261.691815][ T31] ============================================= [ 261.691815][ T31] [ 261.700782][ T31] NMI backtrace for cpu 0 [ 261.700803][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 261.700818][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 261.700825][ T31] Call Trace: [ 261.700830][ T31] [ 261.700835][ T31] dump_stack_lvl+0xe8/0x150 [ 261.700857][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 261.700872][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 261.700889][ T31] nmi_trigger_cpumask_backtrace+0x17d/0x390 [ 261.700905][ T31] sys_info+0x135/0x170 [ 261.700917][ T31] watchdog+0xfd7/0x1030 [ 261.700934][ T31] ? watchdog+0x1c7/0x1030 [ 261.700950][ T31] kthread+0x38b/0x480 [ 261.700965][ T31] ? __pfx_watchdog+0x10/0x10 [ 261.700977][ T31] ? __pfx_kthread+0x10/0x10 [ 261.700992][ T31] ret_from_fork+0x514/0xb70 [ 261.701008][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 261.701025][ T31] ? __switch_to+0xc89/0x1420 [ 261.701040][ T31] ? __pfx_kthread+0x10/0x10 [ 261.701055][ T31] ret_from_fork_asm+0x1a/0x30 [ 261.701078][ T31] [ 261.701082][ T31] Sending NMI from CPU 0 to CPUs 1: [ 261.818076][ C1] NMI backtrace for cpu 1 [ 261.818096][ C1] CPU: 1 UID: 0 PID: 7971 Comm: kworker/u8:12 Not tainted syzkaller #0 PREEMPT(full) [ 261.818118][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 261.818130][ C1] Workqueue: bat_events batadv_iv_send_outstanding_bat_ogm_packet [ 261.818164][ C1] RIP: 0010:lock_release+0x44/0x3c0 [ 261.818191][ C1] Code: 8b 05 18 d8 cb 11 48 89 44 24 28 0f 1f 44 00 00 65 8b 05 17 d8 cb 11 83 f8 08 0f 83 56 02 00 00 89 c0 48 0f a3 05 fc 11 b5 0e <73> 0d e8 45 fa 08 00 84 c0 0f 84 94 02 00 00 83 3d f6 42 b5 0e 00 [ 261.818206][ C1] RSP: 0018:ffffc9001edb7878 EFLAGS: 00000297 [ 261.818221][ C1] RAX: 0000000000000001 RBX: 0000000000000244 RCX: ffff88807acaddc0 [ 261.818235][ C1] RDX: 0000000000000000 RSI: ffffffff8b9c5dd4 RDI: ffffffff8eb5a0e0 [ 261.818247][ C1] RBP: ffffc9001edb7a40 R08: ffffffff8b9c5dd4 R09: 0000000000000000 [ 261.818259][ C1] R10: 0000000000000000 R11: ffffffff8eb5a0e0 R12: ffff888056ed7980 [ 261.818271][ C1] R13: ffffffff8b9c5dd4 R14: ffffffff8eb5a0e0 R15: dffffc0000000000 [ 261.818284][ C1] FS: 0000000000000000(0000) GS:ffff888125036000(0000) knlGS:0000000000000000 [ 261.818299][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 261.818312][ C1] CR2: 0000000033922ff8 CR3: 000000007482a000 CR4: 00000000003526f0 [ 261.818329][ C1] Call Trace: [ 261.818336][ C1] [ 261.818344][ C1] ? batadv_iv_ogm_schedule+0x464/0xff0 [ 261.818371][ C1] batadv_iv_ogm_schedule+0x73f/0xff0 [ 261.818398][ C1] ? batadv_iv_ogm_schedule+0x464/0xff0 [ 261.818423][ C1] ? __pfx_batadv_iv_ogm_schedule+0x10/0x10 [ 261.818445][ C1] ? batadv_skb_head_push+0x187/0x200 [ 261.818482][ C1] ? batadv_send_skb_packet+0x40e/0x650 [ 261.818512][ C1] batadv_iv_send_outstanding_bat_ogm_packet+0x67a/0x790 [ 261.818542][ C1] ? process_scheduled_works+0xa1a/0x14c0 [ 261.818561][ C1] process_scheduled_works+0xa88/0x14c0 [ 261.818592][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 261.818613][ C1] ? assign_work+0x3cf/0x5d0 [ 261.818634][ C1] worker_thread+0xa47/0xfb0 [ 261.818659][ C1] ? __kthread_parkme+0x71/0x1f0 [ 261.818687][ C1] kthread+0x38b/0x480 [ 261.818710][ C1] ? __pfx_worker_thread+0x10/0x10 [ 261.818728][ C1] ? __pfx_kthread+0x10/0x10 [ 261.818751][ C1] ret_from_fork+0x514/0xb70 [ 261.818776][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 261.818798][ C1] ? load_gs_index+0x97/0xc0 [ 261.818817][ C1] ? __switch_to+0xc89/0x1420 [ 261.818838][ C1] ? __pfx_kthread+0x10/0x10 [ 261.818861][ C1] ret_from_fork_asm+0x1a/0x30 [ 261.818893][ C1] [ 262.088598][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 262.095835][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 262.105315][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 262.116513][ T31] Call Trace: [ 262.120124][ T31] [ 262.123361][ T31] vpanic+0x56d/0xa60 [ 262.128116][ T31] ? __pfx___schedule+0x10/0x10 [ 262.133972][ T31] ? __pfx_vpanic+0x10/0x10 [ 262.139707][ T31] ? nmi_trigger_cpumask_backtrace+0x20a/0x390 [ 262.146616][ T31] panic+0xc5/0xd0 [ 262.150925][ T31] ? __pfx_panic+0x10/0x10 [ 262.156164][ T31] ? preempt_schedule_common+0x7f/0xd0 [ 262.161844][ T31] ? preempt_schedule_thunk+0x16/0x40 [ 262.167510][ T31] ? nmi_trigger_cpumask_backtrace+0x31a/0x390 [ 262.174056][ T31] ? nmi_trigger_cpumask_backtrace+0x31f/0x390 [ 262.180606][ T31] watchdog+0x1030/0x1030 [ 262.185406][ T31] ? watchdog+0x1c7/0x1030 [ 262.190400][ T31] kthread+0x38b/0x480 [ 262.194608][ T31] ? __pfx_watchdog+0x10/0x10 [ 262.199485][ T31] ? __pfx_kthread+0x10/0x10 [ 262.204750][ T31] ret_from_fork+0x514/0xb70 [ 262.209990][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 262.215399][ T31] ? __switch_to+0xc89/0x1420 [ 262.221064][ T31] ? __pfx_kthread+0x10/0x10 [ 262.225686][ T31] ret_from_fork_asm+0x1a/0x30 [ 262.230576][ T31] [ 262.234512][ T31] Kernel Offset: disabled [ 262.239191][ T31] Rebooting in 86400 seconds..