last executing test programs: 3m2.590838557s ago: executing program 1 (id=505): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1c0000004b0c0100040000000400000000150000", @ANYRES32=0x1, @ANYBLOB='@\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="02000000040000000400"/28], 0x50) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd630080fc00082c00db5b6861589bcfe8875a060300000023000000000000000000000000ac1414aa"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9febdeff18000000000000000c0000000c00000002000000000000000000000d008000000000"], 0x0, 0x26}, 0x28) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0x12, &(0x7f0000000100)=0xc, 0x4) bind$packet(r1, &(0x7f00000001c0)={0x11, 0x11, 0x0, 0x1, 0xf, 0x6, @broadcast}, 0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}, {}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000100)='syzkaller\x00', 0x8, 0x4a, &(0x7f00000003c0)=""/74, 0x40f00, 0x23, '\x00', 0x0, 0x0, r0, 0x488, 0x0, 0x0, 0x10, &(0x7f0000000480)={0x6, 0x4101, 0x18c9d50d, 0x3}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000240)={'syztnl1\x00', &(0x7f00000001c0)={'syztnl2\x00', 0x0, 0x4, 0x1, 0x0, 0x16e, 0x8, @dev={0xfe, 0x80, '\x00', 0x35}, @private1, 0x7, 0x6, 0x1, 0x80000001}}) bpf$TOKEN_CREATE(0x24, &(0x7f0000000280)={0x0, r0}, 0x8) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0xffffffff, 0x0, 0x0, 0x41100, 0x8, '\x00', r2, 0x25, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r4 = syz_init_net_socket$llc(0x1a, 0x802, 0x0) r5 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r5, 0x84, 0x12, 0x0, &(0x7f0000000200)) r6 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000140), 0xa040, 0x0) ioctl$F2FS_IOC_GET_COMPRESS_OPTION(r6, 0x8002f515, &(0x7f0000000180)) bind$llc(r4, &(0x7f0000000000)={0x1a, 0x0, 0x1, 0x3, 0x3, 0x4a}, 0x10) close(r4) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000800000000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000010000000850000000f00000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r7}, 0x18) inotify_add_watch(0xffffffffffffffff, 0x0, 0x210000a6) r8 = openat$smackfs_cipso(0xffffffffffffff9c, &(0x7f0000000000)='/sys/fs/smackfs/cipso\x00', 0x2, 0x0) write$smackfs_cipso(r8, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0xf5ffffff, &(0x7f0000000000)='%', 0x0, 0xd01, 0xbe02, 0x0, 0x0, 0x0, 0x0, 0x2, 0x31}, 0x48) 3m2.310668455s ago: executing program 1 (id=507): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x28, r2, 0x1, 0x70bd28, 0x25dfdbff, {}, [@TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xf}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x8001}, 0x20000040) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r3) syz_emit_ethernet(0x4e, &(0x7f00000003c0)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd318", 0x18, 0x6, 0x0, @private1={0xfc, 0x1, '\x00', 0x2}, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@generic={0xfe, 0x2}, @generic={0x8, 0x2}]}}}}}}}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) sendmsg$NFT_BATCH(r4, &(0x7f0000000200)={0x0, 0x14, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d65b"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x68}, 0x1, 0x0, 0x0, 0x24000840}, 0x40) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) ioctl$sock_ifreq(0xffffffffffffffff, 0x8913, &(0x7f0000000080)={'veth0_to_team\x00', @ifru_mtu=0x4}) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$KVM_HYPERV_EVENTFD(r7, 0x4048aec9, &(0x7f0000000080)={0x2, 0xffffffffffffffff, 0x2}) r8 = dup3(r5, r0, 0x0) r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000005c0)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r9, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r9, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000800)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000880)={@flat=@handle={0x73682a85, 0x10a, 0x1}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x66646185, 0x5, 0x1}}, &(0x7f0000000240)={0x0, 0x18, 0x40}}, 0x1400}], 0x0, 0x0, 0x0}) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r7, &(0x7f0000000480)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0x18, 0x1411, 0x1, 0x70bd28, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x5}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 3m0.63580795s ago: executing program 1 (id=514): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000080)={0x1c, r1, 0x1, 0x0, 0xffffffff, {{0x2}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) (fail_nth: 6) 3m0.138227303s ago: executing program 1 (id=516): pipe(&(0x7f00000000c0)) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000000080)=ANY=[@ANYBLOB="00020201"], 0x18) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c010000190001000000000000000000e0000001000000000000000000000000fe8000000000000000000000000000aa4e220000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000104000000000000feffffffffffffff030000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000008400050020010000000000000000000000000000000000002b00000000000000000000000000000000000000000500000000000002000700000000000000000000000000e00000020000000000000000000000004000000033"], 0x13c}}, 0x20040880) sendmmsg$inet6(r0, &(0x7f0000000280)=[{{&(0x7f0000000200)={0xa, 0x4e20, 0x4d7, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3}, 0x1c, &(0x7f0000000900)=[{&(0x7f00000009c0)='u', 0x1}], 0x1}}, {{&(0x7f0000000140)={0xa, 0x4e21, 0x800, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000ac0)="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", 0x1000}], 0x1}}], 0x2, 0x4c040) 2m58.807520023s ago: executing program 1 (id=520): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48) socket$alg(0x26, 0x5, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$ax25(0x3, 0x5, 0xc5) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sched_getscheduler(r2) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x6, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000000c0), 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000500)='rcu_utilization\x00', r5}, 0x18) syz_emit_ethernet(0x64, 0x0, 0x0) shmget(0x1, 0x4000, 0x200, &(0x7f0000ffb000/0x4000)=nil) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x4ffe2, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_GET(r6, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16, @ANYBLOB="01000000000000000000540000000e0001006e657464657673796d0000000f0002006e657464657673696d3000000800010070636900110002003030303a30303a31302e3000000000"], 0x50}, 0x1, 0x0, 0x0, 0x24000000}, 0x40010) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f00000002c0)={0x2, @pix_mp={0xfffffffc, 0x493, 0x3234564e, 0x9, 0x1, [{0x8, 0x2}, {0xff, 0x76c88}, {0x76cb03cd}, {0x5, 0x7}, {0x7, 0x7e1}, {0x10000}, {0x1, 0x6}, {0x1, 0x1}], 0x7, 0x7}}) ioctl$SIOCAX25ADDUID(r1, 0x89e1, &(0x7f0000000240)={0x3, @null}) r7 = socket(0xa, 0x5, 0x0) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{0x402, 0x3, 0xf9, 0x66dd}, {0x3, 0x4, 0x47, 0x617}, {0x6, 0xb, 0x6, 0x9}]}, 0x10) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16, @ANYBLOB="01000000000000000000220000000a0001007770616e3000000005002000000004000500200000000000050020000000000009001f"], 0x44}, 0x1, 0x0, 0x0, 0x880}, 0x44) 2m57.360207318s ago: executing program 1 (id=524): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="38000000031401002abd70a3b7dbdf250900020073797a3000000000080041007278650014003300626f6e643000"], 0x38}, 0x1, 0x0, 0x0, 0x4000840}, 0x2400c000) r1 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r1, 0x84, 0x85, &(0x7f0000000ac0), 0x90) (async) writev(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="48ec7abfbf6f37505920202168eae51a26", 0x11}, {&(0x7f0000000100)="b3cb4bbef0e5b2b2e92a7a52affa06a0375732a1c38f2a48f11c0cf3e22604112eea", 0x22}, {&(0x7f0000000140)="013dac337953d342a2e226256d9ffb22f1ba93c967ce564bf1804f0b0790b751993db8e513386daad48f478de6c8ae6c6ddff239bef62a1672649b779dceb051b95605193bce342123d4aef8dacb786a333e1e132910efd07816ee77d0184c49255467720fee75be04ec25cdfd79cd5c182e4f3fa88d47a4f70f5ab7d89d28fcf815b947eb33413d5ab26668f9db4c6ced4b138d380713629db081fddd615a70272c6e7b133b2d", 0xa7}, {&(0x7f0000000200)="32fb9d7038567d52506addd0c798bd469ab08e800368", 0x16}], 0x4) 2m41.466911754s ago: executing program 32 (id=524): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="38000000031401002abd70a3b7dbdf250900020073797a3000000000080041007278650014003300626f6e643000"], 0x38}, 0x1, 0x0, 0x0, 0x4000840}, 0x2400c000) r1 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r1, 0x84, 0x85, &(0x7f0000000ac0), 0x90) (async) writev(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="48ec7abfbf6f37505920202168eae51a26", 0x11}, {&(0x7f0000000100)="b3cb4bbef0e5b2b2e92a7a52affa06a0375732a1c38f2a48f11c0cf3e22604112eea", 0x22}, {&(0x7f0000000140)="013dac337953d342a2e226256d9ffb22f1ba93c967ce564bf1804f0b0790b751993db8e513386daad48f478de6c8ae6c6ddff239bef62a1672649b779dceb051b95605193bce342123d4aef8dacb786a333e1e132910efd07816ee77d0184c49255467720fee75be04ec25cdfd79cd5c182e4f3fa88d47a4f70f5ab7d89d28fcf815b947eb33413d5ab26668f9db4c6ced4b138d380713629db081fddd615a70272c6e7b133b2d", 0xa7}, {&(0x7f0000000200)="32fb9d7038567d52506addd0c798bd469ab08e800368", 0x16}], 0x4) 8.013936857s ago: executing program 5 (id=1612): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000002600), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)={&(0x7f0000000300)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1], 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000) 7.904242319s ago: executing program 5 (id=1615): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000a8f4dd086d0492082a6d0000000109021b0001000000000904"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000001100)={0x34, &(0x7f0000000ec0)={0x40, 0x16}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000540)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x85, 0x3, "9339d4"}}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000cc0)={0x44, &(0x7f0000000500)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) 4.792279454s ago: executing program 5 (id=1651): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100004c9e581045058080010001020301090212000100000000090402"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 1.871648161s ago: executing program 3 (id=1685): setsockopt$MRT_ADD_MFC(0xffffffffffffffff, 0x0, 0xcc, &(0x7f0000000200)={@empty, @private, 0x0, "606b177019716ea6ff1f4d7ed79c31e2e0f1da00000000230000002000", 0x3e1c}, 0x3c) setsockopt$MRT_ADD_MFC(0xffffffffffffffff, 0x0, 0xcc, &(0x7f0000000180)={@private, @multicast2, 0x0, "941621a61c5815f4678d8fd4a8e14b0447113c694d1fd55708018620fd419884"}, 0x3c) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000300)={0x0, 0x19, &(0x7f0000000240)={&(0x7f00000000c0)=@migrate={0x154, 0x21, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}, [@encap={0x1c, 0x4, {0x0, 0x0, 0x0, @in=@multicast2}}, @migrate={0xe8}]}, 0x154}}, 0x0) 1.717343497s ago: executing program 3 (id=1688): syz_usb_connect(0x0, 0x24, &(0x7f0000000540)={{0x12, 0x1, 0x300, 0xa6, 0x67, 0x5e, 0x40, 0x19d2, 0x1125, 0x81f1, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x8c, 0x8, 0xc0, 0x6, [{{0x9, 0x4, 0x16, 0x4, 0x0, 0x2, 0x6, 0x0, 0xd}}]}}]}}, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0}) 1.651575145s ago: executing program 4 (id=1689): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000040000000030a01010000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a300000000050000000060a010400000000000000000100000028000480240001800b00010072656a6563740000140002800800014000000000050002000000000008000b40000000000900010073797a300000000014000000110001"], 0xd8}}, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@local, @empty, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "a24b9f", 0x8, 0x11, 0x0, @remote, @local, {[], {0x0, 0x4e22, 0x8}}}}}}, 0x0) 1.546378207s ago: executing program 2 (id=1691): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000540)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x80, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x54, 0x4, 0x0, 0x1, [{0x50, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x40, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0x2c, 0x3, "9ac420002e61afb9fdd672bad09dfb78c7699c74e891a0c7fffffffffffffff50000000000000000"}, @NFTA_TARGET_NAME={0xe, 0x1, 'IDLETIMER\x00'}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa8}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) 1.471211832s ago: executing program 4 (id=1693): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='rdma.current\x00', 0x275a, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a32000000006c000000"], 0xe0}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r1, @ANYBLOB="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"], 0x270}, 0x1, 0x0, 0x0, 0x8015}, 0x4) 1.324195864s ago: executing program 0 (id=1694): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_REVISION={0x5}]}, 0x58}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x1c, 0x3, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x10) 1.249569715s ago: executing program 2 (id=1695): mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000800), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006380)={0x2020, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f0000004380)="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", 0x2000, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x90, 0x0, 0x4000000000000, {0x0, 0x200000000, 0x20000000, 0x4, 0x6, 0x0, {0x0, 0x10001, 0x0, 0xd, 0x0, 0x100, 0x10000, 0x2, 0x0, 0x0, 0xfffffffc, r2, 0x0, 0x7}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000004300)={0x50, 0x0, r1, {0x7, 0x26, 0x8, 0xfffffffff303ca46, 0x8, 0xfffc, 0x6, 0x5d3186cc, 0x0, 0x0, 0x6, 0x10001}}, 0x50) creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) syz_fuse_handle_req(r0, &(0x7f0000008400)="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", 0x2000, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000e00)={0xa0, 0x0, 0x16c, {{0xfffffffffffffffe, 0x0, 0x4, 0x0, 0xfffffffb, 0x3, {0x0, 0x7fff, 0x5, 0xffff, 0x4, 0x4, 0x40, 0x9, 0x0, 0x8000, 0x0, r2, 0xee01, 0xd8, 0x400000}}, {0x0, 0x4}}}, 0x0, 0x0}) 1.202183938s ago: executing program 4 (id=1696): r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f00000002c0)={0x0, 0x4533, 0x10100, 0x0, 0x3e1, 0x0, r1}, 0x0, &(0x7f0000000340)=0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x51) r4 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x48100) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r4, 0x40045532, &(0x7f0000000000)=0x7) syz_open_dev$sndpcmp(&(0x7f0000000b00), 0x0, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000440), 0x0, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r5, 0xffffffffffffffff, 0x0) 1.025750173s ago: executing program 0 (id=1697): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_REQ_SET_REG(r0, 0x0, 0x40000) 1.023893151s ago: executing program 2 (id=1698): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x8, 0x10012, r0, 0x0) 953.627987ms ago: executing program 3 (id=1699): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000340)="d1", 0x1, 0x8000, 0x0, 0x0) write$binfmt_aout(r0, 0x0, 0xfdef) sendto$inet6(r0, &(0x7f0000000080)="c62ef5d642787b4ea89f2287cb409353", 0x10, 0x8040, 0x0, 0x0) write$binfmt_elf64(r0, 0x0, 0x78) 828.550576ms ago: executing program 0 (id=1700): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv4_newrule={0x24, 0x20, 0x301, 0x70bd2a, 0x25dfdbff, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, [@FRA_GENERIC_POLICY=@FRA_SPORT_RANGE={0x8, 0x17, {0x4e20, 0x4e20}}]}, 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x3c, 0x68, 0x1, 0x0, 0x25dfdbfd, {0x2}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0x4}, @NHA_ENCAP={0xc, 0x8, 0x0, 0x1, @LWTUNNEL_IP6_HOPLIMIT={0x5, 0x4, 0x1}}, @NHA_ID={0x8, 0x6, 0xf2}, @NHA_OIF={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4402}, 0x0) 826.780928ms ago: executing program 5 (id=1701): sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)={0x14, 0x7, 0xa, 0x101, 0x0, 0x0, {0x1e}}, 0x14}, 0x1, 0x0, 0x0, 0x14}, 0x4008850) r0 = syz_io_uring_setup(0x16d2, &(0x7f00000000c0)={0x0, 0x0, 0x10100}, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB='6'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, 0x0) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 737.663224ms ago: executing program 0 (id=1702): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0xc00, 0x1400}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0x2}]}}}]}, 0x3c}}, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) r4 = socket$pppoe(0x18, 0x1, 0x0) syz_open_dev$usbfs(0x0, 0x800000001fe, 0x82) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, &(0x7f0000000540)={0x23, 0x1, 0x2, 0x2001, 0x0, 0xffffffff, 0x0}) connect$pppoe(r4, &(0x7f0000000040)={0x18, 0x0, {0x3, @random="00ff00", 'bond0\x00'}}, 0x1e) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, 0x0, 0xc000) 737.194454ms ago: executing program 3 (id=1703): openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000080)=0x1) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7f, 0x2) openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) syz_open_dev$vim2m(&(0x7f00000001c0), 0x10000800, 0x2) pselect6(0x40, &(0x7f0000000180)={0xfc, 0x7, 0x0, 0x3, 0x0, 0x0, 0x1, 0x100000001}, 0x0, 0x0, 0x0, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r2, 0xffffffffffffffff, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) prctl$PR_GET_TIMERSLACK(0x1e) openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x442c00, 0x0) 736.682168ms ago: executing program 2 (id=1704): r0 = epoll_create1(0x0) r1 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, 0xffffffffffffffff, &(0x7f00000000c0)={0x10000001}) close(0x4) 577.73559ms ago: executing program 5 (id=1705): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000540)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x80, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x54, 0x4, 0x0, 0x1, [{0x50, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x40, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0x2c, 0x3, "9ac420002e61afb9fdd672bad09dfb78c7699c74e891a0c7fffffffffffffff50000000000000000"}, @NFTA_TARGET_NAME={0xe, 0x1, 'IDLETIMER\x00'}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa8}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) 519.102571ms ago: executing program 2 (id=1706): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='rdma.current\x00', 0x275a, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a32000000006c000000"], 0xe0}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r1, @ANYBLOB="000000000000000010010c8013000c800ca3488008000000000000000800038064001d80050006000000000014000500714abbd2547de97cbbf6efb226f19bf90d0002003a288e5e5b5b5a40000000006000078014000400293a02149f3b75a67093c28fd6f55a2314000400e48f01e49713f0c2d839f940d9f088d8050006000000003bd00002006272696467655f736c6176655f30000007000200293a00000500060000000000080001000000000018002580140004004d2906d0880fc8acc30fe2020f9849675000028004000500a1085e7df341b9dc3d8008a2fe5bdaad140004009c7e472c916020fe41bcc5aa8f56c9471400050080ab8be51421cfa3c9e5cbfe8217e0af0800010000000000080001000000000060001a803f0003"], 0x270}, 0x1, 0x0, 0x0, 0x8015}, 0x4) 493.58581ms ago: executing program 0 (id=1707): r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x23b, &(0x7f0000000380)={0x0, 0x61f0, 0x10100, 0x2, 0x2ea}, &(0x7f0000000100)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r1, 0x0, 0x0, 0x0, {0x80f0}, 0x3}) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) recvmmsg(r5, &(0x7f0000000dc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) shutdown(r5, 0x0) 438.344717ms ago: executing program 3 (id=1708): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_MSRS_cpu(r2, 0xc008ae88, &(0x7f00000000c0)={0x1, 0x0, [{0x1a0}]}) 329.391772ms ago: executing program 5 (id=1709): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], 0x0, 0x0, 0x0, 0x0, 0x1e00, 0x2c}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x801, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x5d281, 0x10000}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r0}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000040}, 0xbd9155af21ef1cc6) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000900)={'bridge0\x00', @remote}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x89a1, &(0x7f0000000900)={'bridge0\x00', @broadcast}) 285.358591ms ago: executing program 3 (id=1710): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=@setlink={0x3c, 0x13, 0x1, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xa, r2}, @IFLA_ALT_IFNAME={0x14, 0x35, 'dummy0\x00'}]}, 0x3c}}, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r3, 0x8922, &(0x7f0000000080)={'dummy0\x00'}) ioctl$SIOCSIFMTU(r3, 0x8922, &(0x7f0000000000)={'batadv_slave_0\x00', 0x800}) 271.592545ms ago: executing program 2 (id=1711): syz_usb_connect(0x0, 0x24, 0x0, 0x0) r0 = socket(0x28, 0x5, 0x0) r1 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r1, 0x4) connect$vsock_stream(r0, &(0x7f0000000080), 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x2}, 0x94) close(r2) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x18, 0x6, &(0x7f00000001c0)=ANY=[@ANYBLOB="180000000000000000000000ffffff80e500020000000000c500fcff000000007f00feffd100000095"], &(0x7f00000000c0)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffff6f}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='virtio_transport_alloc_pkt\x00', r2}, 0x18) sendmmsg(r0, &(0x7f0000000b40)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000380)="1b", 0x40000}], 0x1}}], 0x1, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x43}, 0x94) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0xf5ffffff, &(0x7f0000000000)='%', 0x0, 0xd01, 0xbe02, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 262.168714ms ago: executing program 0 (id=1712): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100004c9e581045058080010001020301090212000100000000090402"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 199.462024ms ago: executing program 4 (id=1713): openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x1c79, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 10.795565ms ago: executing program 4 (id=1714): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000180)=@gcm_128={{0x303}, "6be200", "16549f18408d640d012ebcc31bd9870b", '\x00', "4f5b22bc20c62b22"}, 0x28) sendto$inet6(r0, 0x0, 0x0, 0x8000, 0x0, 0x0) write$binfmt_aout(r0, 0x0, 0xfdef) sendto$inet6(r0, &(0x7f0000000080)="c62ef5d642787b4ea89f2287cb409353", 0x10, 0x8040, 0x0, 0x0) write$binfmt_elf64(r0, 0x0, 0x78) 0s ago: executing program 4 (id=1715): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_FRAME(r3, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)={0x20, r4, 0x1, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000082}, 0x4000000) kernel console output (not intermixed with test programs): name failslab, interval 1, probability 0, space 0, times 0 [ 319.792364][ T7762] CPU: 0 UID: 0 PID: 7762 Comm: syz.0.488 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 319.792395][ T7762] Tainted: [L]=SOFTLOCKUP [ 319.792403][ T7762] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 319.792416][ T7762] Call Trace: [ 319.792424][ T7762] [ 319.792434][ T7762] dump_stack_lvl+0xe8/0x150 [ 319.792471][ T7762] should_fail_ex+0x46c/0x600 [ 319.792508][ T7762] should_failslab+0xa8/0x100 [ 319.792533][ T7762] __kmalloc_node_noprof+0xe7/0x820 [ 319.792569][ T7762] ? qdisc_alloc+0x92/0x910 [ 319.792601][ T7762] qdisc_alloc+0x92/0x910 [ 319.792632][ T7762] ? rt_read_unlock+0x16e/0x220 [ 319.792669][ T7762] qdisc_create+0x12c/0xea0 [ 319.792701][ T7762] tc_modify_qdisc+0x1547/0x2020 [ 319.792738][ T7762] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 319.792780][ T7762] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 319.792814][ T7762] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 319.792835][ T7762] rtnetlink_rcv_msg+0x77c/0xb70 [ 319.792866][ T7762] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 319.792890][ T7762] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 319.792912][ T7762] ? ref_tracker_free+0x61e/0x7c0 [ 319.792945][ T7762] ? __asan_memcpy+0x40/0x70 [ 319.792975][ T7762] ? __pfx_ref_tracker_free+0x10/0x10 [ 319.793019][ T7762] netlink_rcv_skb+0x208/0x470 [ 319.793051][ T7762] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 319.793079][ T7762] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 319.793123][ T7762] ? netlink_deliver_tap+0x2e/0x1b0 [ 319.793164][ T7762] netlink_unicast+0x846/0xa10 [ 319.793201][ T7762] ? __pfx_netlink_unicast+0x10/0x10 [ 319.793235][ T7762] ? __alloc_skb+0x198/0x3a0 [ 319.793261][ T7762] ? netlink_sendmsg+0x642/0xb30 [ 319.793289][ T7762] ? skb_put+0x11b/0x210 [ 319.793319][ T7762] netlink_sendmsg+0x805/0xb30 [ 319.793348][ T7762] ? unwind_next_frame+0xa5/0x23d0 [ 319.793390][ T7762] ? __pfx_netlink_sendmsg+0x10/0x10 [ 319.793430][ T7762] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 319.793462][ T7762] ? __pfx_netlink_sendmsg+0x10/0x10 [ 319.793494][ T7762] __sock_sendmsg+0x21c/0x270 [ 319.793534][ T7762] ____sys_sendmsg+0x534/0x810 [ 319.793570][ T7762] ? __pfx_____sys_sendmsg+0x10/0x10 [ 319.793611][ T7762] ? import_iovec+0x74/0xa0 [ 319.793637][ T7762] ___sys_sendmsg+0x21f/0x2a0 [ 319.793670][ T7762] ? __pfx____sys_sendmsg+0x10/0x10 [ 319.793705][ T7762] ? kstrtouint+0x6e/0xe0 [ 319.793766][ T7762] ? __fget_files+0x2a/0x420 [ 319.793789][ T7762] ? __fget_files+0x3a6/0x420 [ 319.793825][ T7762] __sys_sendmmsg+0x22d/0x430 [ 319.793861][ T7762] ? __pfx___sys_sendmmsg+0x10/0x10 [ 319.793924][ T7762] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 319.793972][ T7762] ? ksys_write+0x230/0x260 [ 319.794009][ T7762] ? __pfx_ksys_write+0x10/0x10 [ 319.794050][ T7762] __x64_sys_sendmmsg+0xa0/0xc0 [ 319.794083][ T7762] do_syscall_64+0xec/0xf80 [ 319.794105][ T7762] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 319.794127][ T7762] ? trace_irq_disable+0x37/0x100 [ 319.794151][ T7762] ? clear_bhb_loop+0x60/0xb0 [ 319.794179][ T7762] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 319.794202][ T7762] RIP: 0033:0x7f7bf55af749 [ 319.794227][ T7762] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 319.794247][ T7762] RSP: 002b:00007f7bf3816038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 319.794271][ T7762] RAX: ffffffffffffffda RBX: 00007f7bf5805fa0 RCX: 00007f7bf55af749 [ 319.794287][ T7762] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000004 [ 319.794302][ T7762] RBP: 00007f7bf3816090 R08: 0000000000000000 R09: 0000000000000000 [ 319.794316][ T7762] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 319.794328][ T7762] R13: 00007f7bf5806038 R14: 00007f7bf5805fa0 R15: 00007ffccb3c3b98 [ 319.794365][ T7762] [ 321.076672][ T31] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 321.669093][ T7781] netlink: 20 bytes leftover after parsing attributes in process `syz.2.495'. [ 321.684747][ T5886] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 322.733486][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 322.733563][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 322.751635][ T5980] usb 2-1: dvb_usb_v2: Did not find the firmware file 'dvb-usb-terratec-h7-az6007.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 322.751755][ T5980] dvb_usb_az6007 2-1:0.0: probe with driver dvb_usb_az6007 failed with error -110 [ 322.754704][ T31] usb 1-1: Using ep0 maxpacket: 32 [ 322.797892][ T31] usb 1-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 322.797925][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 322.797946][ T31] usb 1-1: Product: syz [ 322.797961][ T31] usb 1-1: Manufacturer: syz [ 322.797976][ T31] usb 1-1: SerialNumber: syz [ 322.803685][ T31] usb 1-1: config 0 descriptor?? [ 322.809455][ T31] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 322.868295][ T5886] usb 4-1: config 0 has an invalid interface number: 119 but max is 0 [ 322.868325][ T5886] usb 4-1: config 0 has no interface number 0 [ 322.868378][ T5886] usb 4-1: config 0 interface 119 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 322.868401][ T5886] usb 4-1: config 0 interface 119 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 322.868428][ T5886] usb 4-1: config 0 interface 119 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 322.868453][ T5886] usb 4-1: config 0 interface 119 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 322.872489][ T5980] usb 2-1: USB disconnect, device number 9 [ 322.924806][ T5886] usb 4-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73 [ 322.924840][ T5886] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 322.924861][ T5886] usb 4-1: Product: syz [ 322.924875][ T5886] usb 4-1: Manufacturer: syz [ 322.924889][ T5886] usb 4-1: SerialNumber: syz [ 323.016935][ T5886] usb 4-1: config 0 descriptor?? [ 323.132838][ T5886] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.119/input/input15 [ 323.241178][ T7774] fuse: Unknown parameter 'rooR©8Ÿˆtmode' [ 323.354877][ T5886] usb 4-1: USB disconnect, device number 7 [ 324.050196][ T7800] FAULT_INJECTION: forcing a failure. [ 324.050196][ T7800] name failslab, interval 1, probability 0, space 0, times 0 [ 324.050244][ T7800] CPU: 0 UID: 0 PID: 7800 Comm: syz.3.500 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 324.050276][ T7800] Tainted: [L]=SOFTLOCKUP [ 324.050284][ T7800] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 324.050298][ T7800] Call Trace: [ 324.050307][ T7800] [ 324.050317][ T7800] dump_stack_lvl+0xe8/0x150 [ 324.050354][ T7800] should_fail_ex+0x46c/0x600 [ 324.050390][ T7800] ? ima_inode_get+0xea/0x4d0 [ 324.050424][ T7800] should_failslab+0xa8/0x100 [ 324.050449][ T7800] ? ima_inode_get+0xea/0x4d0 [ 324.050480][ T7800] kmem_cache_alloc_noprof+0x84/0x6c0 [ 324.050520][ T7800] ima_inode_get+0xea/0x4d0 [ 324.050559][ T7800] process_measurement+0x3f7/0x1a80 [ 324.050613][ T7800] ? __pfx_process_measurement+0x10/0x10 [ 324.050650][ T7800] ? _parse_integer_limit+0x1ae/0x1f0 [ 324.050718][ T7800] ? get_pid_task+0x20/0x1f0 [ 324.050769][ T7800] ima_file_mmap+0x1a6/0x1f0 [ 324.050806][ T7800] ? __pfx_ima_file_mmap+0x10/0x10 [ 324.050853][ T7800] security_mmap_file+0x7a4/0xa60 [ 324.050890][ T7800] vm_mmap_pgoff+0x129/0x4d0 [ 324.050934][ T7800] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 324.050970][ T7800] ? __fget_files+0x2a/0x420 [ 324.050994][ T7800] ? __fget_files+0x3a6/0x420 [ 324.051017][ T7800] ? __fget_files+0x2a/0x420 [ 324.051046][ T7800] ksys_mmap_pgoff+0x4e9/0x720 [ 324.051081][ T7800] ? __x64_sys_mmap+0x7f/0x140 [ 324.051112][ T7800] do_syscall_64+0xec/0xf80 [ 324.051134][ T7800] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 324.051156][ T7800] ? trace_irq_disable+0x37/0x100 [ 324.051181][ T7800] ? clear_bhb_loop+0x60/0xb0 [ 324.051210][ T7800] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 324.051234][ T7800] RIP: 0033:0x7ff4a188f749 [ 324.051254][ T7800] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 324.051274][ T7800] RSP: 002b:00007ff49faee038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 324.051298][ T7800] RAX: ffffffffffffffda RBX: 00007ff4a1ae5fa0 RCX: 00007ff4a188f749 [ 324.051314][ T7800] RDX: 00000000027fffff RSI: 0000000000600000 RDI: 0000200000000000 [ 324.051329][ T7800] RBP: 00007ff49faee090 R08: 0000000000000003 R09: 0000000000003000 [ 324.051343][ T7800] R10: 0000000004002011 R11: 0000000000000246 R12: 0000000000000001 [ 324.051356][ T7800] R13: 00007ff4a1ae6038 R14: 00007ff4a1ae5fa0 R15: 00007ffd500b0278 [ 324.051393][ T7800] [ 324.746078][ T7810] QAT: Invalid ioctl -2147289835 [ 324.839341][ T7812] netlink: 20 bytes leftover after parsing attributes in process `syz.2.506'. [ 325.046203][ T7815] netlink: 8 bytes leftover after parsing attributes in process `syz.1.507'. [ 325.046245][ T7815] netlink: 8 bytes leftover after parsing attributes in process `syz.1.507'. [ 325.162441][ T7818] binder: 7814:7818 ioctl c0306201 2000000003c0 returned -14 [ 325.172782][ T7818] binder: 7814:7818 ioctl c0306201 2000000001c0 returned -14 [ 326.038181][ T31] gspca_stk1135: reg_w 0x2ff err -110 [ 326.039257][ T31] gspca_stk1135: serial bus timeout: status=0x00 [ 326.039272][ T31] gspca_stk1135: Sensor write failed [ 326.039301][ T31] gspca_stk1135: serial bus timeout: status=0x00 [ 326.039311][ T31] gspca_stk1135: Sensor write failed [ 326.039339][ T31] gspca_stk1135: serial bus timeout: status=0x00 [ 326.039348][ T31] gspca_stk1135: Sensor read failed [ 326.039376][ T31] gspca_stk1135: serial bus timeout: status=0x00 [ 326.039385][ T31] gspca_stk1135: Sensor read failed [ 326.039391][ T31] gspca_stk1135: Detected sensor type unknown (0x0) [ 326.039428][ T31] gspca_stk1135: serial bus timeout: status=0x00 [ 326.039437][ T31] gspca_stk1135: Sensor read failed [ 326.039466][ T31] gspca_stk1135: serial bus timeout: status=0x00 [ 326.039474][ T31] gspca_stk1135: Sensor read failed [ 326.039510][ T31] gspca_stk1135: serial bus timeout: status=0x00 [ 326.039519][ T31] gspca_stk1135: Sensor write failed [ 326.039547][ T31] gspca_stk1135: serial bus timeout: status=0x00 [ 326.039555][ T31] gspca_stk1135: Sensor write failed [ 326.039644][ T31] stk1135 1-1:0.0: probe with driver stk1135 failed with error -110 [ 326.412732][ T5995] usb 1-1: USB disconnect, device number 11 [ 326.744791][ T31] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 326.924944][ T31] usb 4-1: config 0 has an invalid interface number: 119 but max is 0 [ 326.924977][ T31] usb 4-1: config 0 has no interface number 0 [ 326.925025][ T31] usb 4-1: config 0 interface 119 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 326.925050][ T31] usb 4-1: config 0 interface 119 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 326.925078][ T31] usb 4-1: config 0 interface 119 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 326.925102][ T31] usb 4-1: config 0 interface 119 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 326.930150][ T31] usb 4-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73 [ 326.930183][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 326.930206][ T31] usb 4-1: Product: syz [ 326.930221][ T31] usb 4-1: Manufacturer: syz [ 326.930237][ T31] usb 4-1: SerialNumber: syz [ 327.506869][ T31] usb 4-1: config 0 descriptor?? [ 327.560579][ T31] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.119/input/input16 [ 327.979591][ T7851] fuse: Unknown parameter 'rooR©8Ÿˆtmode' [ 328.077765][ T31] usb 4-1: USB disconnect, device number 8 [ 328.530374][ T7859] Bluetooth: hci0: invalid length 0, exp 2 for type 13 [ 328.530797][ T7859] FAULT_INJECTION: forcing a failure. [ 328.530797][ T7859] name failslab, interval 1, probability 0, space 0, times 0 [ 328.530833][ T7859] CPU: 1 UID: 0 PID: 7859 Comm: syz.2.519 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 328.530863][ T7859] Tainted: [L]=SOFTLOCKUP [ 328.530870][ T7859] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 328.530883][ T7859] Call Trace: [ 328.530891][ T7859] [ 328.530900][ T7859] dump_stack_lvl+0xe8/0x150 [ 328.530938][ T7859] should_fail_ex+0x46c/0x600 [ 328.530974][ T7859] ? __alloc_skb+0x1dc/0x3a0 [ 328.530998][ T7859] should_failslab+0xa8/0x100 [ 328.531021][ T7859] ? __alloc_skb+0x1dc/0x3a0 [ 328.531043][ T7859] kmem_cache_alloc_node_noprof+0x8b/0x6f0 [ 328.531077][ T7859] ? lockdep_hardirqs_on+0x7b/0x110 [ 328.531102][ T7859] ? __alloc_skb+0x198/0x3a0 [ 328.531128][ T7859] __alloc_skb+0x1dc/0x3a0 [ 328.531158][ T7859] mgmt_cmd_status+0x41/0x500 [ 328.531197][ T7859] hci_mgmt_cmd+0xa14/0xfa0 [ 328.531235][ T7859] ? mutex_lock_nested+0x154/0x1d0 [ 328.531271][ T7859] hci_sock_sendmsg+0x6d7/0xf30 [ 328.531304][ T7859] ? tomoyo_socket_sendmsg_permission+0x1e1/0x300 [ 328.531332][ T7859] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 328.531381][ T7859] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 328.531412][ T7859] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 328.531445][ T7859] __sock_sendmsg+0x21c/0x270 [ 328.531483][ T7859] sock_write_iter+0x27f/0x370 [ 328.531518][ T7859] ? __pfx_sock_write_iter+0x10/0x10 [ 328.531579][ T7859] vfs_write+0x5d5/0xb40 [ 328.531618][ T7859] ? __pfx_sock_write_iter+0x10/0x10 [ 328.531651][ T7859] ? __pfx_vfs_write+0x10/0x10 [ 328.531697][ T7859] ? __fget_files+0x2a/0x420 [ 328.531733][ T7859] ksys_write+0x14b/0x260 [ 328.531767][ T7859] ? __pfx_ksys_write+0x10/0x10 [ 328.531815][ T7859] do_syscall_64+0xec/0xf80 [ 328.531837][ T7859] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 328.531859][ T7859] ? trace_irq_disable+0x37/0x100 [ 328.531882][ T7859] ? clear_bhb_loop+0x60/0xb0 [ 328.531909][ T7859] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 328.531931][ T7859] RIP: 0033:0x7fedd5c4f749 [ 328.531950][ T7859] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 328.531971][ T7859] RSP: 002b:00007fedd3eb6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 328.531994][ T7859] RAX: ffffffffffffffda RBX: 00007fedd5ea5fa0 RCX: 00007fedd5c4f749 [ 328.532010][ T7859] RDX: 000000000000000d RSI: 0000200000000000 RDI: 000000000000000f [ 328.532023][ T7859] RBP: 00007fedd3eb6090 R08: 0000000000000000 R09: 0000000000000000 [ 328.532037][ T7859] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 328.532050][ T7859] R13: 00007fedd5ea6038 R14: 00007fedd5ea5fa0 R15: 00007ffcd2f25898 [ 328.532093][ T7859] [ 332.898823][ T7870] infiniband syz0: set active [ 332.901824][ T7870] infiniband syz0: added bond0 [ 333.332349][ T7870] RDS/IB: syz0: added [ 333.333304][ T7870] smc: adding ib device syz0 with port count 1 [ 333.333619][ T7870] smc: ib device syz0 port 1 has no pnetid [ 334.484766][ T31] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 334.634755][ T31] usb 4-1: Using ep0 maxpacket: 32 [ 334.652542][ T31] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 334.652570][ T31] usb 4-1: config 0 has no interfaces? [ 334.652603][ T31] usb 4-1: New USB device found, idVendor=9022, idProduct=d662, bcdDevice=b3.0e [ 334.652629][ T31] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 334.705402][ T31] usb 4-1: config 0 descriptor?? [ 334.839903][ T7914] wg2: entered promiscuous mode [ 334.839931][ T7914] wg2: entered allmulticast mode [ 334.913856][ T5980] usb 4-1: USB disconnect, device number 9 [ 336.304836][ T866] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 336.479840][ T866] usb 1-1: Using ep0 maxpacket: 8 [ 336.491095][ T866] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0099, bcdDevice=95.0d [ 336.491197][ T866] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 336.491266][ T866] usb 1-1: Product: syz [ 336.491307][ T866] usb 1-1: Manufacturer: syz [ 336.491487][ T866] usb 1-1: SerialNumber: syz [ 336.627761][ T866] usb 1-1: config 0 descriptor?? [ 336.848501][ T866] usb 1-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 336.850859][ T866] dvb_usb_af9015 1-1:0.0: probe with driver dvb_usb_af9015 failed with error -22 [ 336.863155][ T866] usb 1-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 336.863456][ T866] dvb_usb_af9035 1-1:0.0: probe with driver dvb_usb_af9035 failed with error -22 [ 336.896081][ T866] usb 1-1: USB disconnect, device number 12 [ 337.727589][ T7945] FAULT_INJECTION: forcing a failure. [ 337.727589][ T7945] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 337.727633][ T7945] CPU: 1 UID: 0 PID: 7945 Comm: syz.3.543 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 337.727664][ T7945] Tainted: [L]=SOFTLOCKUP [ 337.727672][ T7945] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 337.727697][ T7945] Call Trace: [ 337.727705][ T7945] [ 337.727715][ T7945] dump_stack_lvl+0xe8/0x150 [ 337.727753][ T7945] should_fail_ex+0x46c/0x600 [ 337.727790][ T7945] _copy_from_user+0x2d/0xb0 [ 337.727814][ T7945] __sys_bpf+0x1e3/0x860 [ 337.727844][ T7945] ? __pfx___sys_bpf+0x10/0x10 [ 337.727868][ T7945] ? rt_mutex_slowunlock+0x1be/0x2e0 [ 337.727916][ T7945] ? ksys_write+0x230/0x260 [ 337.727954][ T7945] ? __pfx_ksys_write+0x10/0x10 [ 337.727995][ T7945] __x64_sys_bpf+0x7c/0x90 [ 337.728020][ T7945] do_syscall_64+0xec/0xf80 [ 337.728042][ T7945] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 337.728064][ T7945] ? trace_irq_disable+0x37/0x100 [ 337.728088][ T7945] ? clear_bhb_loop+0x60/0xb0 [ 337.728116][ T7945] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 337.728139][ T7945] RIP: 0033:0x7ff4a188f749 [ 337.728159][ T7945] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 337.728179][ T7945] RSP: 002b:00007ff49faac038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 337.728201][ T7945] RAX: ffffffffffffffda RBX: 00007ff4a1ae6180 RCX: 00007ff4a188f749 [ 337.728218][ T7945] RDX: 0000000000000038 RSI: 0000200000000000 RDI: 000000000000001b [ 337.728232][ T7945] RBP: 00007ff49faac090 R08: 0000000000000000 R09: 0000000000000000 [ 337.728246][ T7945] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 337.728259][ T7945] R13: 00007ff4a1ae6218 R14: 00007ff4a1ae6180 R15: 00007ffd500b0278 [ 337.728293][ T7945] [ 339.083300][ T7952] netlink: 64 bytes leftover after parsing attributes in process `syz.4.542'. [ 340.041053][ T7959] netlink: 12 bytes leftover after parsing attributes in process `syz.2.545'. [ 340.208409][ T7962] netlink: 28 bytes leftover after parsing attributes in process `syz.4.547'. [ 340.208447][ T7962] netlink: 'syz.4.547': attribute type 7 has an invalid length. [ 340.208462][ T7962] netlink: 'syz.4.547': attribute type 8 has an invalid length. [ 340.208475][ T7962] netlink: 4 bytes leftover after parsing attributes in process `syz.4.547'. [ 343.444883][ T5888] usb 1-1: new full-speed USB device number 13 using dummy_hcd [ 343.617578][ T5888] usb 1-1: config 0 has an invalid interface number: 119 but max is 0 [ 343.617600][ T5888] usb 1-1: config 0 has no interface number 0 [ 343.617633][ T5888] usb 1-1: config 0 interface 119 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 343.617649][ T5888] usb 1-1: config 0 interface 119 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 343.617668][ T5888] usb 1-1: config 0 interface 119 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 343.617685][ T5888] usb 1-1: config 0 interface 119 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 343.621185][ T5888] usb 1-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73 [ 343.621211][ T5888] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 343.621226][ T5888] usb 1-1: Product: syz [ 343.621237][ T5888] usb 1-1: Manufacturer: syz [ 343.621248][ T5888] usb 1-1: SerialNumber: syz [ 343.795072][ T5888] usb 1-1: config 0 descriptor?? [ 343.828206][ T5888] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.119/input/input17 [ 344.054469][ T7984] fuse: Unknown parameter 'rooR©8Ÿˆtmode' [ 344.147414][ T7361] usb 1-1: USB disconnect, device number 13 [ 344.294387][ T7986] program syz.4.555 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 345.837406][ T7995] syz.2.558 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 345.841682][ T38] kauditd_printk_skb: 119 callbacks suppressed [ 345.841701][ T38] audit: type=1326 audit(1767379306.134:232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7994 comm="syz.2.558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedd5c4f749 code=0x7ffc0000 [ 345.844437][ T38] audit: type=1326 audit(1767379306.134:233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7994 comm="syz.2.558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedd5c4f749 code=0x7ffc0000 [ 345.849800][ T7998] netlink: 64 bytes leftover after parsing attributes in process `syz.4.557'. [ 345.953401][ T38] audit: type=1326 audit(1767379306.134:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7994 comm="syz.2.558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=444 compat=0 ip=0x7fedd5c4f749 code=0x7ffc0000 [ 345.992681][ T38] audit: type=1326 audit(1767379306.284:235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7994 comm="syz.2.558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedd5c4f749 code=0x7ffc0000 [ 346.023390][ T38] audit: type=1326 audit(1767379306.314:236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7994 comm="syz.2.558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedd5c4f749 code=0x7ffc0000 [ 346.079598][ T38] audit: type=1326 audit(1767379306.364:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7994 comm="syz.2.558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fedd5c4f749 code=0x7ffc0000 [ 346.098211][ T38] audit: type=1326 audit(1767379306.374:238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7994 comm="syz.2.558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedd5c4f749 code=0x7ffc0000 [ 346.098317][ T38] audit: type=1326 audit(1767379306.374:239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7994 comm="syz.2.558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedd5c4f749 code=0x7ffc0000 [ 346.098685][ T38] audit: type=1326 audit(1767379306.384:240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7994 comm="syz.2.558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7fedd5c4f749 code=0x7ffc0000 [ 346.123966][ T5995] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 346.228671][ T38] audit: type=1326 audit(1767379306.514:241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7994 comm="syz.2.558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedd5c4f749 code=0x7ffc0000 [ 346.324401][ T7995] overlayfs: failed to resolve './file0': -2 [ 346.383864][ T7999] program syz.2.558 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 346.556592][ T5995] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 346.556678][ T5995] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 346.556770][ T5995] usb 4-1: Product: syz [ 346.556842][ T5995] usb 4-1: Manufacturer: syz [ 346.556858][ T5995] usb 4-1: SerialNumber: syz [ 346.938675][ T5995] usb 4-1: can't set config #1, error -71 [ 346.963851][ T5995] usb 4-1: USB disconnect, device number 10 [ 348.711232][ T5803] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 348.722714][ T5803] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 348.733108][ T5803] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 348.738622][ T5803] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 348.741674][ T5803] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 349.624921][ T6617] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 349.786828][ T6617] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 349.786859][ T6617] usb 1-1: config 1 has an invalid descriptor of length 48, skipping remainder of the config [ 349.786881][ T6617] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 349.786937][ T6617] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 48, changing to 9 [ 349.786965][ T6617] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8240, setting to 1024 [ 349.789214][ T6617] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 349.789242][ T6617] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 349.789263][ T6617] usb 1-1: Product: syz [ 349.789278][ T6617] usb 1-1: Manufacturer: syz [ 349.879297][ T6617] cdc_wdm 1-1:1.0: skipping garbage [ 349.879320][ T6617] cdc_wdm 1-1:1.0: skipping garbage [ 349.896750][ T6617] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 349.896785][ T6617] cdc_wdm 1-1:1.0: Unknown control protocol [ 352.007432][ T5813] Bluetooth: hci5: command tx timeout [ 353.336275][ T5975] usb 1-1: USB disconnect, device number 14 [ 354.064848][ T5813] Bluetooth: hci5: command tx timeout [ 354.741379][ T8045] FAULT_INJECTION: forcing a failure. [ 354.741379][ T8045] name failslab, interval 1, probability 0, space 0, times 0 [ 354.741421][ T8045] CPU: 1 UID: 0 PID: 8045 Comm: syz.0.573 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 354.741454][ T8045] Tainted: [L]=SOFTLOCKUP [ 354.741462][ T8045] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 354.741476][ T8045] Call Trace: [ 354.741485][ T8045] [ 354.741495][ T8045] dump_stack_lvl+0xe8/0x150 [ 354.741531][ T8045] should_fail_ex+0x46c/0x600 [ 354.741567][ T8045] ? skb_clone+0x212/0x3a0 [ 354.741596][ T8045] should_failslab+0xa8/0x100 [ 354.741619][ T8045] ? skb_clone+0x212/0x3a0 [ 354.741646][ T8045] kmem_cache_alloc_noprof+0x84/0x6c0 [ 354.741678][ T8045] ? safesetid_security_capable+0xa9/0x1a0 [ 354.741728][ T8045] skb_clone+0x212/0x3a0 [ 354.741757][ T8045] ? nfnetlink_rcv+0x4ba/0x2590 [ 354.741788][ T8045] nfnetlink_rcv+0x4ec/0x2590 [ 354.741818][ T8045] ? __local_bh_enable_ip+0x1af/0x2c0 [ 354.741852][ T8045] ? __dev_queue_xmit+0x253/0x3210 [ 354.741886][ T8045] ? __dev_queue_xmit+0x196a/0x3210 [ 354.741916][ T8045] ? netlink_unicast+0x811/0xa10 [ 354.741940][ T8045] ? netlink_sendmsg+0x805/0xb30 [ 354.741969][ T8045] ? __sock_sendmsg+0x21c/0x270 [ 354.742005][ T8045] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 354.742038][ T8045] ? __dev_queue_xmit+0x253/0x3210 [ 354.742074][ T8045] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 354.742119][ T8045] ? ref_tracker_free+0x61e/0x7c0 [ 354.742153][ T8045] ? __asan_memcpy+0x40/0x70 [ 354.742203][ T8045] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 354.742227][ T8045] ? lockdep_hardirqs_on+0x7b/0x110 [ 354.742249][ T8045] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 354.742272][ T8045] ? rcu_preempt_deferred_qs_irqrestore+0x7b9/0xbc0 [ 354.742334][ T8045] netlink_unicast+0x846/0xa10 [ 354.742371][ T8045] ? __pfx_netlink_unicast+0x10/0x10 [ 354.742397][ T8045] ? __alloc_skb+0x198/0x3a0 [ 354.742423][ T8045] ? netlink_sendmsg+0x642/0xb30 [ 354.742453][ T8045] ? skb_put+0x11b/0x210 [ 354.742483][ T8045] netlink_sendmsg+0x805/0xb30 [ 354.742525][ T8045] ? __pfx_netlink_sendmsg+0x10/0x10 [ 354.742566][ T8045] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 354.742598][ T8045] ? __pfx_netlink_sendmsg+0x10/0x10 [ 354.742631][ T8045] __sock_sendmsg+0x21c/0x270 [ 354.742669][ T8045] ____sys_sendmsg+0x508/0x810 [ 354.742705][ T8045] ? __pfx_____sys_sendmsg+0x10/0x10 [ 354.742748][ T8045] ? import_iovec+0x74/0xa0 [ 354.742775][ T8045] ___sys_sendmsg+0x21f/0x2a0 [ 354.742808][ T8045] ? __pfx____sys_sendmsg+0x10/0x10 [ 354.742877][ T8045] ? __fget_files+0x2a/0x420 [ 354.742902][ T8045] ? __fget_files+0x3a6/0x420 [ 354.742938][ T8045] __x64_sys_sendmsg+0x1a1/0x260 [ 354.742971][ T8045] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 354.743011][ T8045] ? __pfx_ksys_write+0x10/0x10 [ 354.743057][ T8045] do_syscall_64+0xec/0xf80 [ 354.743080][ T8045] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 354.743102][ T8045] ? trace_irq_disable+0x37/0x100 [ 354.743126][ T8045] ? clear_bhb_loop+0x60/0xb0 [ 354.743154][ T8045] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 354.743176][ T8045] RIP: 0033:0x7f7bf55af749 [ 354.743196][ T8045] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 354.743216][ T8045] RSP: 002b:00007f7bf3816038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 354.743240][ T8045] RAX: ffffffffffffffda RBX: 00007f7bf5805fa0 RCX: 00007f7bf55af749 [ 354.743257][ T8045] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000003 [ 354.743271][ T8045] RBP: 00007f7bf3816090 R08: 0000000000000000 R09: 0000000000000000 [ 354.743285][ T8045] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 354.743298][ T8045] R13: 00007f7bf5806038 R14: 00007f7bf5805fa0 R15: 00007ffccb3c3b98 [ 354.743334][ T8045] [ 356.451691][ T5813] Bluetooth: hci5: command tx timeout [ 357.416112][ T5989] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 357.898250][ T5989] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 358.422476][ T5989] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 358.464699][ T5813] Bluetooth: hci5: command tx timeout [ 359.220455][ T5989] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 359.313789][ T8059] FAULT_INJECTION: forcing a failure. [ 359.313789][ T8059] name failslab, interval 1, probability 0, space 0, times 0 [ 359.313830][ T8059] CPU: 1 UID: 0 PID: 8059 Comm: syz.3.577 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 359.313860][ T8059] Tainted: [L]=SOFTLOCKUP [ 359.313868][ T8059] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 359.313881][ T8059] Call Trace: [ 359.313890][ T8059] [ 359.313899][ T8059] dump_stack_lvl+0xe8/0x150 [ 359.313935][ T8059] should_fail_ex+0x46c/0x600 [ 359.313970][ T8059] ? skb_clone+0x212/0x3a0 [ 359.314000][ T8059] should_failslab+0xa8/0x100 [ 359.314023][ T8059] ? skb_clone+0x212/0x3a0 [ 359.314048][ T8059] kmem_cache_alloc_noprof+0x84/0x6c0 [ 359.314086][ T8059] ? safesetid_security_capable+0xa9/0x1a0 [ 359.314125][ T8059] skb_clone+0x212/0x3a0 [ 359.314153][ T8059] ? nfnetlink_rcv+0x4ba/0x2590 [ 359.314180][ T8059] nfnetlink_rcv+0x4ec/0x2590 [ 359.314209][ T8059] ? __local_bh_enable_ip+0x1af/0x2c0 [ 359.314242][ T8059] ? __dev_queue_xmit+0x253/0x3210 [ 359.314275][ T8059] ? __dev_queue_xmit+0x196a/0x3210 [ 359.314305][ T8059] ? netlink_unicast+0x811/0xa10 [ 359.314329][ T8059] ? netlink_sendmsg+0x805/0xb30 [ 359.314359][ T8059] ? __sock_sendmsg+0x21c/0x270 [ 359.314396][ T8059] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 359.314428][ T8059] ? __dev_queue_xmit+0x253/0x3210 [ 359.314463][ T8059] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 359.314507][ T8059] ? ref_tracker_free+0x61e/0x7c0 [ 359.314540][ T8059] ? __asan_memcpy+0x40/0x70 [ 359.314573][ T8059] ? __pfx_ref_tracker_free+0x10/0x10 [ 359.314621][ T8059] ? skb_clone+0x246/0x3a0 [ 359.314654][ T8059] ? __netlink_deliver_tap+0x807/0x850 [ 359.314683][ T8059] ? netlink_deliver_tap+0x2e/0x1b0 [ 359.314729][ T8059] netlink_unicast+0x846/0xa10 [ 359.314764][ T8059] ? __pfx_netlink_unicast+0x10/0x10 [ 359.314789][ T8059] ? __alloc_skb+0x198/0x3a0 [ 359.314814][ T8059] ? netlink_sendmsg+0x642/0xb30 [ 359.314841][ T8059] ? skb_put+0x11b/0x210 [ 359.314870][ T8059] netlink_sendmsg+0x805/0xb30 [ 359.314910][ T8059] ? __pfx_netlink_sendmsg+0x10/0x10 [ 359.314951][ T8059] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 359.314982][ T8059] ? __pfx_netlink_sendmsg+0x10/0x10 [ 359.315014][ T8059] __sock_sendmsg+0x21c/0x270 [ 359.315052][ T8059] ____sys_sendmsg+0x508/0x810 [ 359.315096][ T8059] ? __pfx_____sys_sendmsg+0x10/0x10 [ 359.315135][ T8059] ? import_iovec+0x74/0xa0 [ 359.315161][ T8059] ___sys_sendmsg+0x21f/0x2a0 [ 359.315193][ T8059] ? __pfx____sys_sendmsg+0x10/0x10 [ 359.315262][ T8059] ? __fget_files+0x2a/0x420 [ 359.315284][ T8059] ? __fget_files+0x3a6/0x420 [ 359.315320][ T8059] __x64_sys_sendmsg+0x1a1/0x260 [ 359.315351][ T8059] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 359.315391][ T8059] ? __pfx_ksys_write+0x10/0x10 [ 359.315436][ T8059] do_syscall_64+0xec/0xf80 [ 359.315457][ T8059] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 359.315479][ T8059] ? trace_irq_disable+0x37/0x100 [ 359.315503][ T8059] ? clear_bhb_loop+0x60/0xb0 [ 359.315530][ T8059] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 359.315551][ T8059] RIP: 0033:0x7ff4a188f749 [ 359.315570][ T8059] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 359.315589][ T8059] RSP: 002b:00007ff49faee038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 359.315612][ T8059] RAX: ffffffffffffffda RBX: 00007ff4a1ae5fa0 RCX: 00007ff4a188f749 [ 359.315627][ T8059] RDX: 0000000004000000 RSI: 0000200000000300 RDI: 0000000000000003 [ 359.315641][ T8059] RBP: 00007ff49faee090 R08: 0000000000000000 R09: 0000000000000000 [ 359.315655][ T8059] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 359.315667][ T8059] R13: 00007ff4a1ae6038 R14: 00007ff4a1ae5fa0 R15: 00007ffd500b0278 [ 359.315702][ T8059] [ 360.073949][ T8013] chnl_net:caif_netlink_parms(): no params data found [ 360.826352][ T5980] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 361.989452][ T5980] usb 1-1: config 0 has an invalid descriptor of length 141, skipping remainder of the config [ 361.989484][ T5980] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 361.996214][ T5980] usb 1-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 361.996245][ T5980] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 361.996268][ T5980] usb 1-1: Product: syz [ 361.996284][ T5980] usb 1-1: Manufacturer: syz [ 361.996299][ T5980] usb 1-1: SerialNumber: syz [ 362.055791][ T5980] usb 1-1: config 0 descriptor?? [ 364.195236][ T805] usb 1-1: USB disconnect, device number 15 [ 364.394461][ T8013] bridge0: port 1(bridge_slave_0) entered blocking state [ 364.403225][ T8013] bridge0: port 1(bridge_slave_0) entered disabled state [ 364.403606][ T8013] bridge_slave_0: entered allmulticast mode [ 364.431986][ T8013] bridge_slave_0: entered promiscuous mode [ 365.469785][ T8013] bridge0: port 2(bridge_slave_1) entered blocking state [ 365.489448][ T8103] netlink: 16 bytes leftover after parsing attributes in process `syz.2.588'. [ 365.504946][ T8013] bridge0: port 2(bridge_slave_1) entered disabled state [ 365.505210][ T8013] bridge_slave_1: entered allmulticast mode [ 365.507479][ T8013] bridge_slave_1: entered promiscuous mode [ 365.526131][ T5989] bridge_slave_1: left allmulticast mode [ 365.526743][ T5989] bridge_slave_1: left promiscuous mode [ 365.532402][ T5989] bridge0: port 2(bridge_slave_1) entered disabled state [ 365.718588][ T5989] ªªªªªC: left allmulticast mode [ 365.718612][ T5989] ªªªªªC: left promiscuous mode [ 365.718801][ T5989] bridge0: port 1(ªªªªªC) entered disabled state [ 368.056674][ T8118] fuse: Bad value for 'fd' [ 373.041012][ T8144] Driver unsupported XDP return value 0 on prog (id 138) dev N/A, expect packet loss! [ 373.867770][ T8152] 9p: Bad value for 'wfdno' [ 373.971210][ T8154] fuse: Bad value for 'fd' [ 374.245281][ T5993] smc: removing ib device syz0 [ 374.266087][ T5989] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 374.361902][ T5989] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 374.531801][ T5989] bond0 (unregistering): Released all slaves [ 375.344225][ T8013] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 375.388028][ T8013] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 375.435065][ T31] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 375.495389][ T38] kauditd_printk_skb: 2 callbacks suppressed [ 375.495411][ T38] audit: type=1800 audit(1767379335.744:244): pid=8167 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.3.608" name="bus" dev="overlay" ino=734 res=0 errno=0 [ 375.646742][ T31] usb 3-1: New USB device found, idVendor=2c42, idProduct=16f8, bcdDevice=30.20 [ 375.646777][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 375.646799][ T31] usb 3-1: Product: syz [ 375.646815][ T31] usb 3-1: Manufacturer: syz [ 375.646830][ T31] usb 3-1: SerialNumber: syz [ 375.699959][ T31] usb 3-1: config 0 descriptor?? [ 377.098482][ T8179] veth1_to_team: entered promiscuous mode [ 377.111903][ T8013] team0: Port device team_slave_0 added [ 377.164346][ T8013] team0: Port device team_slave_1 added [ 377.170472][ T6908] usb 3-1: USB disconnect, device number 13 [ 377.183449][ T8164] veth1_to_team: left promiscuous mode [ 377.195640][ T6908] f81534a_ctrl 3-1:0.0: failed to set register 0x116: -19 [ 377.195668][ T6908] f81534a_ctrl 3-1:0.0: failed to enable ports: -19 [ 380.522185][ T10] usb 1-1: new full-speed USB device number 16 using dummy_hcd [ 380.725034][ T10] usb 1-1: device descriptor read/64, error -71 [ 381.027594][ T10] usb 1-1: new full-speed USB device number 17 using dummy_hcd [ 381.278368][ T10] usb 1-1: device descriptor read/64, error -71 [ 381.414971][ T10] usb usb1-port1: attempt power cycle [ 381.883186][ T8013] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 381.883204][ T8013] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 381.883226][ T8013] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 381.995775][ T8013] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 381.995796][ T8013] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 381.995826][ T8013] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 382.685964][ T8224] FAULT_INJECTION: forcing a failure. [ 382.685964][ T8224] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 382.686024][ T8224] CPU: 0 UID: 0 PID: 8224 Comm: syz.0.625 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 382.686055][ T8224] Tainted: [L]=SOFTLOCKUP [ 382.686063][ T8224] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 382.686081][ T8224] Call Trace: [ 382.686093][ T8224] [ 382.686103][ T8224] dump_stack_lvl+0xe8/0x150 [ 382.686141][ T8224] should_fail_ex+0x46c/0x600 [ 382.686177][ T8224] copy_fpstate_to_sigframe+0xa60/0xcc0 [ 382.686228][ T8224] ? __pfx_copy_fpstate_to_sigframe+0x10/0x10 [ 382.686264][ T8224] ? irqentry_exit+0x5dd/0x660 [ 382.686310][ T8224] ? fpu__alloc_mathframe+0xad/0x130 [ 382.686334][ T8224] get_sigframe+0x58d/0x7d0 [ 382.686375][ T8224] ? __pfx_get_sigframe+0x10/0x10 [ 382.686416][ T8224] ? rt_mutex_slowunlock+0x493/0x8a0 [ 382.686446][ T8224] ? reacquire_held_locks+0x104/0x190 [ 382.686480][ T8224] ? rt_spin_lock+0x1c1/0x3e0 [ 382.686516][ T8224] x64_setup_rt_frame+0x15c/0xd40 [ 382.686550][ T8224] ? rt_spin_unlock+0x150/0x200 [ 382.686585][ T8224] ? rt_spin_unlock+0x161/0x200 [ 382.686617][ T8224] ? get_signal+0x1121/0x1310 [ 382.686651][ T8224] ? __pfx_x64_setup_rt_frame+0x10/0x10 [ 382.686698][ T8224] arch_do_signal_or_restart+0x3d6/0x7a0 [ 382.686738][ T8224] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 382.686795][ T8224] exit_to_user_mode_loop+0x87/0x4e0 [ 382.686828][ T8224] ? rcu_is_watching+0x15/0xb0 [ 382.686851][ T8224] do_syscall_64+0x2b7/0xf80 [ 382.686874][ T8224] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 382.686896][ T8224] ? clear_bhb_loop+0x60/0xb0 [ 382.686923][ T8224] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 382.686945][ T8224] RIP: 0033:0x7f7bf55ae1ff [ 382.686965][ T8224] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 382.686984][ T8224] RSP: 002b:00007f7bf3816030 EFLAGS: 00000293 [ 382.687004][ T8224] RAX: 0000000000000001 RBX: 0000000000000007 RCX: 00007f7bf55ae1ff [ 382.687019][ T8224] RDX: 0000000000000001 RSI: 00007f7bf3816090 RDI: 0000000000000007 [ 382.687032][ T8224] RBP: 00007f7bf3816090 R08: 0000000000000000 R09: 00007f7bf3815df7 [ 382.687046][ T8224] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000006 [ 382.687059][ T8224] R13: 00007f7bf5806038 R14: 00007f7bf5805fa0 R15: 00007ffccb3c3b98 [ 382.687094][ T8224] [ 383.034722][ T10] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 383.394662][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 383.413750][ T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 383.413778][ T10] usb 3-1: config 0 has no interfaces? [ 383.413810][ T10] usb 3-1: New USB device found, idVendor=9022, idProduct=d662, bcdDevice=b3.0e [ 383.413834][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 383.706759][ T10] usb 3-1: config 0 descriptor?? [ 383.742715][ T8013] hsr_slave_0: entered promiscuous mode [ 383.744439][ T8013] hsr_slave_1: entered promiscuous mode [ 384.461469][ T8240] qnx6: unable to read the first superblock [ 385.583937][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 385.584014][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 385.671719][ T8239] FAULT_INJECTION: forcing a failure. [ 385.671719][ T8239] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 385.671761][ T8239] CPU: 1 UID: 0 PID: 8239 Comm: syz.4.629 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 385.671791][ T8239] Tainted: [L]=SOFTLOCKUP [ 385.671800][ T8239] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 385.671813][ T8239] Call Trace: [ 385.671822][ T8239] [ 385.671831][ T8239] dump_stack_lvl+0xe8/0x150 [ 385.671868][ T8239] should_fail_ex+0x46c/0x600 [ 385.671903][ T8239] _copy_to_iter+0x404/0x1790 [ 385.671936][ T8239] ? __asan_memcpy+0x40/0x70 [ 385.671967][ T8239] ? __seq_puts+0xd9/0x130 [ 385.672013][ T8239] ? __pfx__copy_to_iter+0x10/0x10 [ 385.672055][ T8239] ? fput+0xa0/0xd0 [ 385.672077][ T8239] ? __pfx_pidfd_show_fdinfo+0x10/0x10 [ 385.672103][ T8239] ? seq_show+0x5c7/0x720 [ 385.672140][ T8239] seq_read_iter+0xbf6/0xe20 [ 385.672203][ T8239] seq_read+0x36c/0x480 [ 385.672245][ T8239] ? __pfx_seq_read+0x10/0x10 [ 385.672291][ T8239] ? rw_verify_area+0x2ac/0x4e0 [ 385.672328][ T8239] vfs_readv+0x5b3/0x850 [ 385.672351][ T8239] ? __pfx_seq_read+0x10/0x10 [ 385.672386][ T8239] ? __pfx_vfs_readv+0x10/0x10 [ 385.672424][ T8239] ? __fget_files+0x2a/0x420 [ 385.672454][ T8239] ? __fget_files+0x3a6/0x420 [ 385.672476][ T8239] ? __fget_files+0x2a/0x420 [ 385.672510][ T8239] __x64_sys_preadv+0x19a/0x2a0 [ 385.672547][ T8239] ? __pfx___x64_sys_preadv+0x10/0x10 [ 385.672596][ T8239] do_syscall_64+0xec/0xf80 [ 385.672619][ T8239] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 385.672641][ T8239] ? trace_irq_disable+0x37/0x100 [ 385.672665][ T8239] ? clear_bhb_loop+0x60/0xb0 [ 385.672693][ T8239] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 385.672714][ T8239] RIP: 0033:0x7fd75d31f749 [ 385.672734][ T8239] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 385.672752][ T8239] RSP: 002b:00007fd75b586038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 385.672775][ T8239] RAX: ffffffffffffffda RBX: 00007fd75d575fa0 RCX: 00007fd75d31f749 [ 385.672791][ T8239] RDX: 0000000000000001 RSI: 0000200000000640 RDI: 0000000000000004 [ 385.672804][ T8239] RBP: 00007fd75b586090 R08: 0000000000000000 R09: 0000000000000000 [ 385.672818][ T8239] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 385.672831][ T8239] R13: 00007fd75d576038 R14: 00007fd75d575fa0 R15: 00007ffdb0eab018 [ 385.672867][ T8239] [ 385.804301][ T31] usb 3-1: USB disconnect, device number 14 [ 386.252241][ T8252] FAULT_INJECTION: forcing a failure. [ 386.252241][ T8252] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 386.252283][ T8252] CPU: 0 UID: 0 PID: 8252 Comm: syz.2.633 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 386.252313][ T8252] Tainted: [L]=SOFTLOCKUP [ 386.252321][ T8252] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 386.252334][ T8252] Call Trace: [ 386.252343][ T8252] [ 386.252352][ T8252] dump_stack_lvl+0xe8/0x150 [ 386.252389][ T8252] should_fail_ex+0x46c/0x600 [ 386.252433][ T8252] _copy_to_user+0x31/0xb0 [ 386.252458][ T8252] simple_read_from_buffer+0xe1/0x170 [ 386.252487][ T8252] proc_fail_nth_read+0x1b6/0x220 [ 386.252525][ T8252] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 386.252561][ T8252] ? rw_verify_area+0x2ac/0x4e0 [ 386.252592][ T8252] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 386.252628][ T8252] vfs_read+0x206/0xa30 [ 386.252668][ T8252] ? __pfx_vfs_read+0x10/0x10 [ 386.252702][ T8252] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 386.252727][ T8252] ? lockdep_hardirqs_on+0x7b/0x110 [ 386.252753][ T8252] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 386.252776][ T8252] ? mutex_lock_nested+0x154/0x1d0 [ 386.252804][ T8252] ? fdget_pos+0x253/0x320 [ 386.252838][ T8252] ksys_read+0x14b/0x260 [ 386.252887][ T8252] ? __pfx_ksys_read+0x10/0x10 [ 386.252931][ T8252] do_syscall_64+0xec/0xf80 [ 386.252951][ T8252] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 386.252973][ T8252] ? trace_irq_disable+0x37/0x100 [ 386.252997][ T8252] ? clear_bhb_loop+0x60/0xb0 [ 386.253025][ T8252] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 386.253046][ T8252] RIP: 0033:0x7fedd5c4e15c [ 386.253067][ T8252] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 386.253086][ T8252] RSP: 002b:00007fedd3eb6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 386.253110][ T8252] RAX: ffffffffffffffda RBX: 00007fedd5ea5fa0 RCX: 00007fedd5c4e15c [ 386.253125][ T8252] RDX: 000000000000000f RSI: 00007fedd3eb60a0 RDI: 0000000000000010 [ 386.253139][ T8252] RBP: 00007fedd3eb6090 R08: 0000000000000000 R09: 0000000000000000 [ 386.253152][ T8252] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 386.253165][ T8252] R13: 00007fedd5ea6038 R14: 00007fedd5ea5fa0 R15: 00007ffcd2f25898 [ 386.253202][ T8252] [ 386.726253][ T8245] 8021q: adding VLAN 0 to HW filter on device bond1 [ 386.937805][ T8260] netlink: 388 bytes leftover after parsing attributes in process `syz.3.634'. [ 390.420740][ T8288] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 390.571205][ T8303] FAULT_INJECTION: forcing a failure. [ 390.571205][ T8303] name failslab, interval 1, probability 0, space 0, times 0 [ 390.571245][ T8303] CPU: 0 UID: 0 PID: 8303 Comm: syz.0.645 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 390.571273][ T8303] Tainted: [L]=SOFTLOCKUP [ 390.571279][ T8303] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 390.571293][ T8303] Call Trace: [ 390.571300][ T8303] [ 390.571309][ T8303] dump_stack_lvl+0xe8/0x150 [ 390.571342][ T8303] should_fail_ex+0x46c/0x600 [ 390.571369][ T8303] ? skb_clone+0x212/0x3a0 [ 390.571391][ T8303] should_failslab+0xa8/0x100 [ 390.571409][ T8303] ? skb_clone+0x212/0x3a0 [ 390.571429][ T8303] kmem_cache_alloc_noprof+0x84/0x6c0 [ 390.571453][ T8303] ? __netlink_lookup+0xbd/0x8a0 [ 390.571485][ T8303] skb_clone+0x212/0x3a0 [ 390.571511][ T8303] __netlink_deliver_tap+0x404/0x850 [ 390.571545][ T8303] ? netlink_deliver_tap+0x2e/0x1b0 [ 390.571570][ T8303] netlink_deliver_tap+0x19c/0x1b0 [ 390.571595][ T8303] netlink_unicast+0x811/0xa10 [ 390.571624][ T8303] ? __pfx_netlink_unicast+0x10/0x10 [ 390.571644][ T8303] ? __alloc_skb+0x198/0x3a0 [ 390.571662][ T8303] ? netlink_sendmsg+0x642/0xb30 [ 390.571696][ T8303] netlink_sendmsg+0x805/0xb30 [ 390.571726][ T8303] ? __pfx_netlink_sendmsg+0x10/0x10 [ 390.571756][ T8303] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 390.571780][ T8303] ? __pfx_netlink_sendmsg+0x10/0x10 [ 390.571805][ T8303] __sock_sendmsg+0x21c/0x270 [ 390.571836][ T8303] ____sys_sendmsg+0x508/0x810 [ 390.571873][ T8303] ? __pfx_____sys_sendmsg+0x10/0x10 [ 390.571902][ T8303] ? import_iovec+0x74/0xa0 [ 390.571923][ T8303] ___sys_sendmsg+0x21f/0x2a0 [ 390.571947][ T8303] ? __pfx____sys_sendmsg+0x10/0x10 [ 390.572000][ T8303] ? __fget_files+0x2a/0x420 [ 390.572019][ T8303] ? __fget_files+0x3a6/0x420 [ 390.572046][ T8303] __x64_sys_sendmsg+0x1a1/0x260 [ 390.572071][ T8303] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 390.572107][ T8303] ? __pfx_ksys_write+0x10/0x10 [ 390.572145][ T8303] do_syscall_64+0xec/0xf80 [ 390.572163][ T8303] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 390.572181][ T8303] ? trace_irq_disable+0x37/0x100 [ 390.572200][ T8303] ? clear_bhb_loop+0x60/0xb0 [ 390.572225][ T8303] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 390.572247][ T8303] RIP: 0033:0x7f7bf55af749 [ 390.572263][ T8303] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 390.572278][ T8303] RSP: 002b:00007f7bf3816038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 390.572296][ T8303] RAX: ffffffffffffffda RBX: 00007f7bf5805fa0 RCX: 00007f7bf55af749 [ 390.572308][ T8303] RDX: 0000000000040000 RSI: 0000200000000100 RDI: 0000000000000003 [ 390.572319][ T8303] RBP: 00007f7bf3816090 R08: 0000000000000000 R09: 0000000000000000 [ 390.572330][ T8303] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 390.572340][ T8303] R13: 00007f7bf5806038 R14: 00007f7bf5805fa0 R15: 00007ffccb3c3b98 [ 390.572366][ T8303] [ 390.572564][ T8303] netlink: 20 bytes leftover after parsing attributes in process `syz.0.645'. [ 391.848429][ T8326] FAULT_INJECTION: forcing a failure. [ 391.848429][ T8326] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 391.848499][ T8326] CPU: 1 UID: 0 PID: 8326 Comm: syz.3.649 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 391.848530][ T8326] Tainted: [L]=SOFTLOCKUP [ 391.848539][ T8326] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 391.848553][ T8326] Call Trace: [ 391.848562][ T8326] [ 391.848572][ T8326] dump_stack_lvl+0xe8/0x150 [ 391.848609][ T8326] should_fail_ex+0x46c/0x600 [ 391.848645][ T8326] _copy_from_user+0x2d/0xb0 [ 391.848694][ T8326] ucma_write+0x161/0x2f0 [ 391.848726][ T8326] ? __pfx_ucma_write+0x10/0x10 [ 391.848756][ T8326] ? rw_verify_area+0x25b/0x4e0 [ 391.848789][ T8326] ? __pfx_ucma_write+0x10/0x10 [ 391.848818][ T8326] vfs_write+0x287/0xb40 [ 391.848859][ T8326] ? __pfx_vfs_write+0x10/0x10 [ 391.848894][ T8326] ? __fget_files+0x2a/0x420 [ 391.848921][ T8326] ? __fget_files+0x2a/0x420 [ 391.848945][ T8326] ? __fget_files+0x3a6/0x420 [ 391.848968][ T8326] ? __fget_files+0x2a/0x420 [ 391.849002][ T8326] ksys_write+0x14b/0x260 [ 391.849044][ T8326] ? __pfx_ksys_write+0x10/0x10 [ 391.849089][ T8326] do_syscall_64+0xec/0xf80 [ 391.849111][ T8326] ? rcu_is_watching+0x15/0xb0 [ 391.849131][ T8326] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 391.849154][ T8326] ? clear_bhb_loop+0x60/0xb0 [ 391.849182][ T8326] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 391.849204][ T8326] RIP: 0033:0x7ff4a188f749 [ 391.849224][ T8326] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 391.849243][ T8326] RSP: 002b:00007ff49faac038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 391.849267][ T8326] RAX: ffffffffffffffda RBX: 00007ff4a1ae6180 RCX: 00007ff4a188f749 [ 391.849284][ T8326] RDX: 0000000000000018 RSI: 0000200000000240 RDI: 0000000000000006 [ 391.849298][ T8326] RBP: 00007ff49faac090 R08: 0000000000000000 R09: 0000000000000000 [ 391.849312][ T8326] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 391.849325][ T8326] R13: 00007ff4a1ae6218 R14: 00007ff4a1ae6180 R15: 00007ffd500b0278 [ 391.849361][ T8326] [ 393.676061][ T866] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 393.998323][ T866] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 393.998362][ T866] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 393.998407][ T866] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 393.998430][ T866] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 394.079557][ T8341] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 394.132423][ T866] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 394.347458][ T8333] netlink: 20 bytes leftover after parsing attributes in process `syz.2.652'. [ 394.847991][ T38] audit: type=1804 audit(1767379355.144:245): pid=8362 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz.2.657" name="/newroot/121/file1" dev="fuse" ino=1 res=1 errno=0 [ 394.901002][ T5989] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 394.903674][ T5989] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 394.953796][ T5989] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 394.953820][ T5989] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 396.103060][ T38] audit: type=1800 audit(1767379356.364:246): pid=8362 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.2.657" name="/" dev="fuse" ino=1 res=0 errno=0 [ 396.173397][ T866] usb 4-1: USB disconnect, device number 11 [ 396.191467][ T5989] veth1_macvtap: left promiscuous mode [ 396.428078][ T5989] veth0_macvtap: left promiscuous mode [ 396.487830][ T5989] veth1_vlan: left promiscuous mode [ 396.488530][ T5989] veth0_vlan: left promiscuous mode [ 398.272335][ T8393] netlink: 64 bytes leftover after parsing attributes in process `syz.3.668'. [ 398.344710][ T866] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 398.496230][ T866] usb 1-1: Using ep0 maxpacket: 32 [ 398.498463][ T866] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 398.498493][ T866] usb 1-1: config 0 has no interface number 0 [ 398.498546][ T866] usb 1-1: config 0 interface 184 has no altsetting 0 [ 398.501147][ T866] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 398.501180][ T866] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 398.501200][ T866] usb 1-1: Product: syz [ 398.501211][ T866] usb 1-1: Manufacturer: syz [ 398.501221][ T866] usb 1-1: SerialNumber: syz [ 398.508902][ T866] usb 1-1: config 0 descriptor?? [ 398.591770][ T866] smsc75xx v1.0.0 [ 399.406853][ T866] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 399.406886][ T866] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 399.406906][ T866] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 399.408033][ T866] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -32 [ 400.132855][ T8396] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 400.133515][ T8396] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 400.635550][ T5989] team0 (unregistering): Port device team_slave_1 removed [ 400.865277][ T5989] team0 (unregistering): Port device team_slave_0 removed [ 401.407235][ T5975] usb 1-1: USB disconnect, device number 19 [ 401.501491][ T8400] openvswitch: netlink: Flow actions attr not present in new flow. [ 401.862829][ T8402] netlink: 4 bytes leftover after parsing attributes in process `syz.0.669'. [ 404.838188][ T8387] gretap1: entered allmulticast mode [ 404.856241][ T8408] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 405.019517][ T8416] netlink: 4 bytes leftover after parsing attributes in process `syz.0.675'. [ 405.248509][ T8422] bridge0: port 3(syz_tun) entered blocking state [ 405.248647][ T8422] bridge0: port 3(syz_tun) entered disabled state [ 405.249477][ T8422] syz_tun: entered allmulticast mode [ 405.262452][ T8422] syz_tun: entered promiscuous mode [ 405.328220][ T8422] bridge0: port 3(syz_tun) entered blocking state [ 405.328361][ T8422] bridge0: port 3(syz_tun) entered listening state [ 405.610512][ T8434] netlink: 12 bytes leftover after parsing attributes in process `syz.4.680'. [ 406.346594][ T8448] syzkaller0: entered promiscuous mode [ 406.346622][ T8448] syzkaller0: entered allmulticast mode [ 406.454806][ T866] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 406.544777][ T5887] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 406.644076][ T866] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 406.644107][ T866] usb 3-1: config 0 has no interfaces? [ 406.644140][ T866] usb 3-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 406.644166][ T866] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 406.704736][ T5887] usb 4-1: Using ep0 maxpacket: 8 [ 406.707073][ T5887] usb 4-1: config 0 has no interfaces? [ 406.711331][ T5887] usb 4-1: New USB device found, idVendor=12d1, idProduct=fae2, bcdDevice=70.8b [ 406.711363][ T5887] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 406.711384][ T5887] usb 4-1: Product: syz [ 406.711400][ T5887] usb 4-1: Manufacturer: syz [ 406.711415][ T5887] usb 4-1: SerialNumber: syz [ 406.727632][ T866] usb 3-1: config 0 descriptor?? [ 406.749097][ T5887] usb 4-1: config 0 descriptor?? [ 406.850542][ T5803] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 406.878343][ T5803] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 406.881423][ T5803] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 406.882759][ T5803] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 406.884316][ T5803] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 406.956765][ T31] usb 4-1: USB disconnect, device number 12 [ 408.443191][ T38] audit: type=1326 audit(1767379368.734:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8490 comm="syz.3.695" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff4a188f749 code=0x0 [ 408.808677][ T8504] netlink: 380 bytes leftover after parsing attributes in process `syz.0.697'. [ 408.808727][ T8504] netlink: 24 bytes leftover after parsing attributes in process `syz.0.697'. [ 408.809322][ T8504] netlink: 500 bytes leftover after parsing attributes in process `syz.0.697'. [ 409.027776][ T8509] vlan3: entered promiscuous mode [ 409.028007][ T8509] vlan3: entered allmulticast mode [ 409.028024][ T8509] hsr_slave_1: entered allmulticast mode [ 409.104827][ T5813] Bluetooth: hci1: command tx timeout [ 409.122397][ T8509] netlink: 4 bytes leftover after parsing attributes in process `syz.4.698'. [ 409.212602][ T866] usb 3-1: USB disconnect, device number 15 [ 409.236042][ T8516] binder_alloc: 8515: pid 8515 spamming oneway? 1 buffers allocated for a total size of 4096 [ 409.236669][ T8516] binder_alloc: 8515: pid 8515 spamming oneway? 2 buffers allocated for a total size of 5120 [ 410.949766][ T8454] chnl_net:caif_netlink_parms(): no params data found [ 411.149687][ T8550] netlink: 'syz.0.710': attribute type 27 has an invalid length. [ 411.185925][ T5813] Bluetooth: hci1: command tx timeout [ 411.398376][ T8549] tipc: Started in network mode [ 411.398413][ T8549] tipc: Node identity 32173be70ec7, cluster identity 4711 [ 411.425988][ T8549] tipc: Enabled bearer , priority 0 [ 411.520802][ T8560] netlink: 'syz.3.708': attribute type 10 has an invalid length. [ 411.878467][ T8550] bridge0: port 2(bridge_slave_1) entered disabled state [ 411.882003][ T8550] bridge0: port 1(bridge_slave_0) entered disabled state [ 412.626484][ T8550] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 412.652034][ T8550] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 413.266315][ T5813] Bluetooth: hci1: command tx timeout [ 413.474417][ T5989] bridge_slave_1: left allmulticast mode [ 413.474451][ T5989] bridge_slave_1: left promiscuous mode [ 413.477161][ T5989] bridge0: port 2(bridge_slave_1) entered disabled state [ 413.558138][ T5989] bridge_slave_0: left allmulticast mode [ 413.558173][ T5989] bridge_slave_0: left promiscuous mode [ 413.558556][ T5989] bridge0: port 1(bridge_slave_0) entered disabled state [ 414.069509][ T5989] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 414.165551][ T5989] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 414.247907][ T5989] bond0 (unregistering): Released all slaves [ 414.317411][ T8557] bridge_slave_0: left allmulticast mode [ 414.317443][ T8557] bridge_slave_0: left promiscuous mode [ 414.317688][ T8557] bridge0: port 1(bridge_slave_0) entered disabled state [ 414.470148][ T8557] bridge_slave_1: left allmulticast mode [ 414.470172][ T8557] bridge_slave_1: left promiscuous mode [ 414.470368][ T8557] bridge0: port 2(bridge_slave_1) entered disabled state [ 414.625900][ T8557] bond0: (slave bond_slave_0): Releasing backup interface [ 414.685766][ T8557] bond0: (slave bond_slave_1): Releasing backup interface [ 414.779137][ T8557] team0: Port device team_slave_0 removed [ 414.820062][ T8557] team0: Port device team_slave_1 removed [ 414.820865][ T8557] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 414.820892][ T8557] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 414.889664][ T8557] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 414.889688][ T8557] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 415.029463][ T8557] team0: Port device geneve0 removed [ 415.046645][ T8552] tipc: Enabling of bearer rejected, already enabled [ 415.066727][ T8560] 8021q: adding VLAN 0 to HW filter on device bond0 [ 415.070754][ T8560] team0: Port device bond0 added [ 415.117652][ T8544] tipc: Disabling bearer [ 415.261132][ T5805] tipc: Node number set to 1020279783 [ 415.308503][ T5950] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 415.344681][ T5813] Bluetooth: hci1: command tx timeout [ 415.382182][ T8595] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 415.382269][ T8596] bridge0: entered allmulticast mode [ 415.483263][ T8597] bridge_slave_1: left allmulticast mode [ 415.483389][ T8597] bridge_slave_1: left promiscuous mode [ 415.499379][ T8597] bridge0: port 2(bridge_slave_1) entered disabled state [ 415.580950][ T8597] bridge_slave_0: left allmulticast mode [ 415.580984][ T8597] bridge_slave_0: left promiscuous mode [ 415.581253][ T8597] bridge0: port 1(bridge_slave_0) entered disabled state [ 416.147800][ T3561] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 416.213314][ T3561] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 416.390580][ T5989] hsr_slave_0: left promiscuous mode [ 416.425325][ T5989] hsr_slave_1: left promiscuous mode [ 416.426691][ T5989] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 416.475636][ T5989] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 417.185433][ T5887] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 417.306115][ T5989] team0 (unregistering): Port device team_slave_1 removed [ 417.360372][ T5887] usb 4-1: config 0 has no interfaces? [ 417.371214][ T5887] usb 4-1: New USB device found, idVendor=19d2, idProduct=1275, bcdDevice= 7.84 [ 417.371247][ T5887] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 417.371268][ T5887] usb 4-1: Product: syz [ 417.371283][ T5887] usb 4-1: Manufacturer: syz [ 417.371297][ T5887] usb 4-1: SerialNumber: syz [ 417.409355][ T5887] usb 4-1: config 0 descriptor?? [ 417.476952][ T38] audit: type=1326 audit(1767379377.774:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8636 comm="syz.0.736" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7bf55af749 code=0x0 [ 417.555451][ T5989] team0 (unregistering): Port device team_slave_0 removed [ 417.626818][ T8638] overlayfs: failed to clone upperpath [ 417.867024][ T8643] openvswitch: netlink: Key type 314 is out of range max 32 [ 418.289067][ T3561] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 418.414400][ T8641] batman_adv: batadv0: Adding interface: dummy0 [ 418.414422][ T8641] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 418.414452][ T8641] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 418.469688][ T31] usb 4-1: USB disconnect, device number 13 [ 418.747951][ T8454] bridge0: port 1(bridge_slave_0) entered blocking state [ 418.748171][ T8454] bridge0: port 1(bridge_slave_0) entered disabled state [ 418.748376][ T8454] bridge_slave_0: entered allmulticast mode [ 418.750809][ T8454] bridge_slave_0: entered promiscuous mode [ 418.776134][ T8454] bridge0: port 2(bridge_slave_1) entered blocking state [ 418.777171][ T8454] bridge0: port 2(bridge_slave_1) entered disabled state [ 418.777416][ T8454] bridge_slave_1: entered allmulticast mode [ 418.780178][ T8454] bridge_slave_1: entered promiscuous mode [ 419.232774][ T8454] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 419.325188][ T8454] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 419.331738][ T8664] netlink: 'syz.2.749': attribute type 10 has an invalid length. [ 419.463465][ T31] IPVS: starting estimator thread 0... [ 419.503773][ T5813] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:201' [ 419.503804][ T5813] CPU: 0 UID: 0 PID: 5813 Comm: kworker/u9:7 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 419.503842][ T5813] Tainted: [L]=SOFTLOCKUP [ 419.503850][ T5813] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 419.503865][ T5813] Workqueue: hci4 hci_rx_work [ 419.503895][ T5813] Call Trace: [ 419.503905][ T5813] [ 419.503914][ T5813] dump_stack_lvl+0xe8/0x150 [ 419.503947][ T5813] sysfs_create_dir_ns+0x259/0x280 [ 419.503988][ T5813] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 419.504017][ T5813] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 419.504049][ T5813] ? rt_spin_unlock+0x161/0x200 [ 419.504076][ T5813] kobject_add_internal+0x6b1/0xcd0 [ 419.504109][ T5813] kobject_add+0x155/0x220 [ 419.504137][ T5813] ? __pfx_kobject_add+0x10/0x10 [ 419.504167][ T5813] ? get_device_parent+0x370/0x3a0 [ 419.504195][ T5813] device_add+0x408/0xb80 [ 419.504221][ T5813] hci_conn_add_sysfs+0xd5/0x210 [ 419.504258][ T5813] le_conn_complete_evt+0xf1d/0x1420 [ 419.504296][ T5813] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 419.504323][ T5813] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 419.504346][ T5813] ? lockdep_hardirqs_on+0x7b/0x110 [ 419.504369][ T5813] ? skb_pull_data+0xfb/0x200 [ 419.504406][ T5813] hci_le_conn_complete_evt+0x187/0x480 [ 419.504440][ T5813] hci_event_packet+0x78f/0x1260 [ 419.504477][ T5813] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 419.504504][ T5813] ? __pfx_hci_event_packet+0x10/0x10 [ 419.504538][ T5813] ? rt_spin_unlock+0x150/0x200 [ 419.504575][ T5813] ? hci_send_to_monitor+0xe2/0x590 [ 419.504607][ T5813] hci_rx_work+0x3ee/0x1060 [ 419.504634][ T5813] ? process_scheduled_works+0x9ef/0x1770 [ 419.504662][ T5813] process_scheduled_works+0xad1/0x1770 [ 419.504716][ T5813] ? __pfx_process_scheduled_works+0x10/0x10 [ 419.504740][ T5813] ? do_raw_spin_lock+0x121/0x290 [ 419.504780][ T5813] worker_thread+0x8a0/0xda0 [ 419.504827][ T5813] kthread+0x711/0x8a0 [ 419.504859][ T5813] ? __pfx_worker_thread+0x10/0x10 [ 419.504882][ T5813] ? __pfx_kthread+0x10/0x10 [ 419.504907][ T5813] ? rt_spin_unlock+0x150/0x200 [ 419.504940][ T5813] ? rt_spin_unlock+0x161/0x200 [ 419.504974][ T5813] ? __pfx_kthread+0x10/0x10 [ 419.505006][ T5813] ret_from_fork+0x510/0xa50 [ 419.505033][ T5813] ? __pfx_ret_from_fork+0x10/0x10 [ 419.505054][ T5813] ? __switch_to+0xc9e/0x1480 [ 419.505090][ T5813] ? __pfx_kthread+0x10/0x10 [ 419.505118][ T5813] ret_from_fork_asm+0x1a/0x30 [ 419.505166][ T5813] [ 419.515650][ T5813] kobject: kobject_add_internal failed for hci4:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 419.515794][ T5813] Bluetooth: hci4: failed to register connection device [ 419.608757][ T8670] IPVS: using max 9 ests per chain, 21600 per kthread [ 419.701103][ T8664] bond0: (slave wlan1): Opening slave failed [ 420.380123][ T8454] team0: Port device team_slave_0 added [ 420.415689][ T8454] team0: Port device team_slave_1 added [ 420.939411][ T8454] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 420.939426][ T8454] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 420.939446][ T8454] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 420.997197][ T8454] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 420.997217][ T8454] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 420.997248][ T8454] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 421.175413][ T8717] netlink: 8 bytes leftover after parsing attributes in process `syz.3.763'. [ 421.447725][ T5887] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 421.497906][ T5887] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz1] on syz0 [ 421.632096][ T8454] hsr_slave_0: entered promiscuous mode [ 421.637823][ T8454] hsr_slave_1: entered promiscuous mode [ 421.646778][ T7361] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 421.796572][ T7361] usb 4-1: config 0 has no interfaces? [ 421.797792][ T7361] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 421.797821][ T7361] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 421.797843][ T7361] usb 4-1: SerialNumber: syz [ 421.829706][ T7361] usb 4-1: config 0 descriptor?? [ 421.845043][ T8733] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 422.286367][ T8748] dlm: plock device version mismatch: kernel (1.2.0), user (0.0.0) [ 422.434214][ T8752] netlink: 24 bytes leftover after parsing attributes in process `syz.2.773'. [ 422.854875][ T10] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 423.004664][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 423.007149][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 423.007184][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 423.007221][ T10] usb 3-1: New USB device found, idVendor=046a, idProduct=0027, bcdDevice= 0.00 [ 423.007238][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 423.011702][ T10] usb 3-1: config 0 descriptor?? [ 423.441997][ T10] cherry 0003:046A:0027.0005: unknown main item tag 0x6 [ 423.442306][ T10] cherry 0003:046A:0027.0005: reserved main item tag 0xe [ 423.442340][ T10] cherry 0003:046A:0027.0005: invalid report_count 42693 [ 423.442358][ T10] cherry 0003:046A:0027.0005: item 0 2 1 9 parsing failed [ 423.443244][ T10] cherry 0003:046A:0027.0005: probe with driver cherry failed with error -22 [ 423.672271][ T10] usb 3-1: USB disconnect, device number 16 [ 423.737673][ T8775] fuse: Bad value for 'fd' [ 424.422692][ T5887] usb 4-1: USB disconnect, device number 14 [ 424.694103][ T8454] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 425.269701][ T8454] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 425.379089][ T8454] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 425.454765][ T8454] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 426.144980][ T5813] Bluetooth: hci4: command 0x0406 tx timeout [ 426.579385][ T8454] 8021q: adding VLAN 0 to HW filter on device bond0 [ 426.671166][ T5813] Bluetooth: hci2: unexpected event for opcode 0x200b [ 426.729701][ T8454] 8021q: adding VLAN 0 to HW filter on device team0 [ 426.752722][ T8851] netlink: 8 bytes leftover after parsing attributes in process `syz.3.795'. [ 426.752760][ T8851] netlink: 'syz.3.795': attribute type 5 has an invalid length. [ 426.752776][ T8851] netlink: 28 bytes leftover after parsing attributes in process `syz.3.795'. [ 426.865529][ T8851] geneve2: entered promiscuous mode [ 426.865561][ T8851] geneve2: entered allmulticast mode [ 426.983653][ T8858] batman_adv: batadv0: Removing interface: dummy0 [ 427.031519][ T8860] netlink: 76 bytes leftover after parsing attributes in process `syz.0.797'. [ 427.056310][ T8858] bond0: (slave bond_slave_0): Releasing backup interface [ 427.095582][ T8858] bond0: (slave bond_slave_1): Releasing backup interface [ 427.189031][ T8858] team0: Port device team_slave_0 removed [ 427.210852][ T8858] team0: Port device team_slave_1 removed [ 427.211292][ T8858] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 427.254685][ T7361] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 427.259123][ T8858] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 427.312222][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 427.312521][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 427.376455][ T3507] bridge0: port 2(bridge_slave_1) entered blocking state [ 427.376683][ T3507] bridge0: port 2(bridge_slave_1) entered forwarding state [ 427.426527][ T7361] usb 3-1: Using ep0 maxpacket: 8 [ 427.431227][ T7361] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 427.431281][ T7361] usb 3-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 427.431305][ T7361] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 427.477036][ T7361] usb 3-1: config 0 descriptor?? [ 427.497661][ T7361] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 428.154937][ T6617] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 428.277837][ T8892] warning: `syz.4.806' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 428.307255][ T6617] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 428.307293][ T6617] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 428.307341][ T6617] usb 4-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 428.307367][ T6617] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 428.360677][ T6617] usb 4-1: config 0 descriptor?? [ 428.884803][ T6617] hid-steam 0003:28DE:1142.0006: unknown main item tag 0x0 [ 428.884846][ T6617] hid-steam 0003:28DE:1142.0006: unknown main item tag 0x0 [ 428.884874][ T6617] hid-steam 0003:28DE:1142.0006: unknown main item tag 0x0 [ 428.884901][ T6617] hid-steam 0003:28DE:1142.0006: unknown main item tag 0x0 [ 428.884928][ T6617] hid-steam 0003:28DE:1142.0006: unknown main item tag 0x0 [ 428.935319][ T6617] hid-steam 0003:28DE:1142.0006: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.3-1/input0 [ 428.966869][ T31] usb 3-1: USB disconnect, device number 17 [ 429.034949][ T6617] usb 4-1: USB disconnect, device number 15 [ 429.153281][ T8906] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 429.229345][ T8454] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 429.352240][ T8903] fido_id[8903]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 429.909859][ T5165] udevd[5165]: worker [5931] terminated by signal 33 (Unknown signal 33) [ 429.909916][ T5165] udevd[5165]: worker [5931] failed while handling '/devices/virtual/block/loop2' [ 430.020892][ T8934] netlink: 48 bytes leftover after parsing attributes in process `syz.2.814'. [ 430.196607][ T8454] veth0_vlan: entered promiscuous mode [ 430.247993][ T8454] veth1_vlan: entered promiscuous mode [ 430.366107][ T8454] veth0_macvtap: entered promiscuous mode [ 430.382701][ T8454] veth1_macvtap: entered promiscuous mode [ 430.440314][ T8454] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 430.489049][ T8454] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 430.518258][ T5993] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 430.518525][ T5993] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 430.518581][ T5993] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 430.518620][ T5993] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 431.166163][ T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 431.166187][ T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 431.397639][ T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 431.397662][ T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 432.238531][ T5805] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 432.385076][ T5805] usb 6-1: Using ep0 maxpacket: 8 [ 432.391598][ T5805] usb 6-1: config 0 has an invalid interface number: 31 but max is 0 [ 432.391628][ T5805] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 432.391648][ T5805] usb 6-1: config 0 has no interface number 0 [ 432.403972][ T5805] usb 6-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 432.404075][ T5805] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 432.404159][ T5805] usb 6-1: Product: syz [ 432.404201][ T5805] usb 6-1: Manufacturer: syz [ 432.404236][ T5805] usb 6-1: SerialNumber: syz [ 432.473904][ T5805] usb 6-1: config 0 descriptor?? [ 432.508452][ T5805] uvcvideo 6-1:0.31: probe with driver uvcvideo failed with error -22 [ 432.717200][ T5887] usb 6-1: USB disconnect, device number 2 [ 432.819859][ T8960] infiniband syz1: set down [ 432.834719][ T8960] infiniband syz1: added syz_tun [ 432.908410][ T9018] vlan2: entered promiscuous mode [ 432.908436][ T9018] hsr_slave_1: entered promiscuous mode [ 432.908743][ T9018] vlan2: entered allmulticast mode [ 432.939634][ T9018] netlink: 4 bytes leftover after parsing attributes in process `syz.3.844'. [ 432.997159][ T8960] RDS/IB: syz1: added [ 432.997223][ T8960] smc: adding ib device syz1 with port count 1 [ 432.997242][ T8960] smc: ib device syz1 port 1 has no pnetid [ 433.053196][ T5813] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201' [ 433.053228][ T5813] CPU: 1 UID: 0 PID: 5813 Comm: kworker/u9:7 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 433.053259][ T5813] Tainted: [L]=SOFTLOCKUP [ 433.053267][ T5813] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 433.053284][ T5813] Workqueue: hci2 hci_rx_work [ 433.053309][ T5813] Call Trace: [ 433.053319][ T5813] [ 433.053331][ T5813] dump_stack_lvl+0xe8/0x150 [ 433.053366][ T5813] sysfs_create_dir_ns+0x259/0x280 [ 433.053401][ T5813] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 433.053434][ T5813] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 433.053473][ T5813] ? rt_spin_unlock+0x161/0x200 [ 433.053508][ T5813] kobject_add_internal+0x6b1/0xcd0 [ 433.053547][ T5813] kobject_add+0x155/0x220 [ 433.053580][ T5813] ? __pfx_kobject_add+0x10/0x10 [ 433.053616][ T5813] ? get_device_parent+0x370/0x3a0 [ 433.053647][ T5813] device_add+0x408/0xb80 [ 433.053676][ T5813] hci_conn_add_sysfs+0xd5/0x210 [ 433.053724][ T5813] le_conn_complete_evt+0xf1d/0x1420 [ 433.053776][ T5813] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 433.053808][ T5813] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 433.053832][ T5813] ? lockdep_hardirqs_on+0x7b/0x110 [ 433.053857][ T5813] ? skb_pull_data+0xfb/0x200 [ 433.053898][ T5813] hci_le_conn_complete_evt+0x187/0x480 [ 433.053935][ T5813] hci_event_packet+0x78f/0x1260 [ 433.053975][ T5813] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 433.054005][ T5813] ? __pfx_hci_event_packet+0x10/0x10 [ 433.054042][ T5813] ? rt_spin_unlock+0x150/0x200 [ 433.054084][ T5813] ? hci_send_to_monitor+0xe2/0x590 [ 433.054118][ T5813] hci_rx_work+0x3ee/0x1060 [ 433.054149][ T5813] ? process_scheduled_works+0x9ef/0x1770 [ 433.054179][ T5813] process_scheduled_works+0xad1/0x1770 [ 433.054239][ T5813] ? __pfx_process_scheduled_works+0x10/0x10 [ 433.054263][ T5813] ? do_raw_spin_lock+0x121/0x290 [ 433.054310][ T5813] worker_thread+0x8a0/0xda0 [ 433.054369][ T5813] kthread+0x711/0x8a0 [ 433.054405][ T5813] ? __pfx_worker_thread+0x10/0x10 [ 433.054432][ T5813] ? __pfx_kthread+0x10/0x10 [ 433.054462][ T5813] ? rt_spin_unlock+0x150/0x200 [ 433.054498][ T5813] ? rt_spin_unlock+0x161/0x200 [ 433.054525][ T5813] ? __pfx_kthread+0x10/0x10 [ 433.054556][ T5813] ret_from_fork+0x510/0xa50 [ 433.054584][ T5813] ? __pfx_ret_from_fork+0x10/0x10 [ 433.054606][ T5813] ? __switch_to+0xc9e/0x1480 [ 433.054646][ T5813] ? __pfx_kthread+0x10/0x10 [ 433.054680][ T5813] ret_from_fork_asm+0x1a/0x30 [ 433.054733][ T5813] [ 433.074686][ T5813] kobject: kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 433.074749][ T5813] Bluetooth: hci2: failed to register connection device [ 433.844824][ T5887] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 433.998396][ T5887] usb 6-1: unable to get BOS descriptor or descriptor too short [ 434.000356][ T5887] usb 6-1: config 4 has an invalid interface number: 31 but max is 0 [ 434.000383][ T5887] usb 6-1: config 4 has no interface number 0 [ 434.000417][ T5887] usb 6-1: config 4 interface 31 has no altsetting 0 [ 434.004133][ T5887] usb 6-1: New USB device found, idVendor=045b, idProduct=0212, bcdDevice=6c.f3 [ 434.004163][ T5887] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 434.004184][ T5887] usb 6-1: Product: syz [ 434.004199][ T5887] usb 6-1: Manufacturer: syz [ 434.004214][ T5887] usb 6-1: SerialNumber: syz [ 434.336150][ T5887] hub 6-1:4.31: bad descriptor, ignoring hub [ 434.336193][ T5887] hub 6-1:4.31: probe with driver hub failed with error -5 [ 434.340716][ T5887] upd78f0730 6-1:4.31: upd78f0730 converter detected [ 434.378479][ T5887] usb 6-1: upd78f0730 converter now attached to ttyUSB0 [ 434.456740][ T5887] usb 6-1: USB disconnect, device number 3 [ 434.586918][ T5887] upd78f0730 ttyUSB0: upd78f0730 converter now disconnected from ttyUSB0 [ 434.592962][ T5887] upd78f0730 6-1:4.31: device disconnected [ 434.887286][ T10] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 435.035100][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 435.037377][ T10] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 435.037441][ T10] usb 4-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 435.037459][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 435.055039][ T10] usb 4-1: config 0 descriptor?? [ 435.090428][ T10] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 435.164826][ T805] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 435.314670][ T805] usb 6-1: Using ep0 maxpacket: 8 [ 435.317040][ T805] usb 6-1: config 0 has an invalid interface number: 177 but max is 0 [ 435.317069][ T805] usb 6-1: config 0 has no interface number 0 [ 435.320341][ T805] usb 6-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 3.01 [ 435.320372][ T805] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 435.320394][ T805] usb 6-1: Product: syz [ 435.320409][ T805] usb 6-1: Manufacturer: syz [ 435.320423][ T805] usb 6-1: SerialNumber: syz [ 435.392901][ T5803] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 435.393230][ T805] usb 6-1: config 0 descriptor?? [ 435.612589][ T805] usb 6-1: USB disconnect, device number 4 [ 435.825778][ C0] bridge0: port 3(syz_tun) entered learning state [ 436.499644][ T10] gspca_vc032x: reg_w err -71 [ 436.499748][ T10] vc032x 4-1:0.0: probe with driver vc032x failed with error -71 [ 436.544187][ T10] usb 4-1: USB disconnect, device number 16 [ 437.655313][ T9090] overlayfs: failed to clone upperpath [ 438.413049][ T9110] overlayfs: failed to resolve './file0': -2 [ 439.551056][ T9139] netlink: 'syz.0.888': attribute type 2 has an invalid length. [ 439.584735][ T5803] Bluetooth: hci2: command 0x0406 tx timeout [ 440.614057][ T9170] netlink: 4 bytes leftover after parsing attributes in process `syz.5.900'. [ 440.847378][ T5813] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 440.847410][ T5813] CPU: 1 UID: 0 PID: 5813 Comm: kworker/u9:7 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 440.847441][ T5813] Tainted: [L]=SOFTLOCKUP [ 440.847449][ T5813] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 440.847463][ T5813] Workqueue: hci3 hci_rx_work [ 440.847488][ T5813] Call Trace: [ 440.847497][ T5813] [ 440.847507][ T5813] dump_stack_lvl+0xe8/0x150 [ 440.847544][ T5813] sysfs_create_dir_ns+0x259/0x280 [ 440.847579][ T5813] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 440.847613][ T5813] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 440.847653][ T5813] ? rt_spin_unlock+0x161/0x200 [ 440.847689][ T5813] kobject_add_internal+0x6b1/0xcd0 [ 440.847727][ T5813] kobject_add+0x155/0x220 [ 440.847757][ T5813] ? __pfx_kobject_add+0x10/0x10 [ 440.847790][ T5813] ? get_device_parent+0x370/0x3a0 [ 440.847821][ T5813] device_add+0x408/0xb80 [ 440.847848][ T5813] hci_conn_add_sysfs+0xd5/0x210 [ 440.847889][ T5813] le_conn_complete_evt+0xf1d/0x1420 [ 440.847928][ T5813] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 440.847954][ T5813] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 440.847975][ T5813] ? lockdep_hardirqs_on+0x7b/0x110 [ 440.847998][ T5813] ? skb_pull_data+0xfb/0x200 [ 440.848037][ T5813] hci_le_conn_complete_evt+0x187/0x480 [ 440.848072][ T5813] hci_event_packet+0x78f/0x1260 [ 440.848125][ T5813] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 440.848155][ T5813] ? __pfx_hci_event_packet+0x10/0x10 [ 440.848191][ T5813] ? rt_spin_unlock+0x150/0x200 [ 440.848234][ T5813] ? hci_send_to_monitor+0xe2/0x590 [ 440.848269][ T5813] hci_rx_work+0x3ee/0x1060 [ 440.848300][ T5813] ? process_scheduled_works+0x9ef/0x1770 [ 440.848329][ T5813] process_scheduled_works+0xad1/0x1770 [ 440.848385][ T5813] ? __pfx_process_scheduled_works+0x10/0x10 [ 440.848409][ T5813] ? do_raw_spin_lock+0x121/0x290 [ 440.848456][ T5813] worker_thread+0x8a0/0xda0 [ 440.848514][ T5813] kthread+0x711/0x8a0 [ 440.848551][ T5813] ? __pfx_worker_thread+0x10/0x10 [ 440.848577][ T5813] ? __pfx_kthread+0x10/0x10 [ 440.848606][ T5813] ? rt_spin_unlock+0x150/0x200 [ 440.848643][ T5813] ? rt_spin_unlock+0x161/0x200 [ 440.848671][ T5813] ? __pfx_kthread+0x10/0x10 [ 440.848705][ T5813] ret_from_fork+0x510/0xa50 [ 440.848734][ T5813] ? __pfx_ret_from_fork+0x10/0x10 [ 440.848758][ T5813] ? __switch_to+0xc9e/0x1480 [ 440.848799][ T5813] ? __pfx_kthread+0x10/0x10 [ 440.848835][ T5813] ret_from_fork_asm+0x1a/0x30 [ 440.848890][ T5813] [ 440.848922][ T5813] kobject: kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 440.848960][ T5813] Bluetooth: hci3: failed to register connection device [ 441.261063][ T9178] fuse: Bad value for 'fd' [ 441.878013][ T10] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 441.912683][ T10] hid-generic 0000:0000:0000.0007: hidraw0: HID v0.00 Device [syz1] on syz0 [ 442.060353][ T9194] fido_id[9194]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 442.718904][ T10] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 442.742026][ T10] hid-generic 0000:0000:0000.0008: hidraw0: HID v0.00 Device [syz1] on syz0 [ 443.004728][ T805] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 443.178404][ T805] usb 4-1: config 0 has no interfaces? [ 443.180728][ T805] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 443.180760][ T805] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 443.180781][ T805] usb 4-1: SerialNumber: syz [ 443.191284][ T805] usb 4-1: config 0 descriptor?? [ 443.417570][ T805] usb 4-1: USB disconnect, device number 17 [ 445.231664][ T9301] overlayfs: failed to clone upperpath [ 445.354804][ T31] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 445.523249][ T31] usb 6-1: Using ep0 maxpacket: 32 [ 445.533669][ T31] usb 6-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 445.533720][ T31] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 445.533741][ T31] usb 6-1: Product: syz [ 445.533756][ T31] usb 6-1: Manufacturer: syz [ 445.533771][ T31] usb 6-1: SerialNumber: syz [ 445.557751][ T31] usb 6-1: config 0 descriptor?? [ 445.603392][ T31] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 445.794355][ T9321] binder: 9320:9321 ioctl c018620b 200000000340 returned -14 [ 446.042260][ T9327] overlayfs: failed to clone upperpath [ 446.412360][ T9336] bridge0: port 3(syz_tun) entered disabled state [ 446.412622][ T9336] bridge0: port 2(bridge_slave_1) entered disabled state [ 446.413246][ T9336] bridge0: port 1(bridge_slave_0) entered disabled state [ 446.439279][ T9336] bridge0: entered allmulticast mode [ 446.456514][ T9336] syz_tun: left allmulticast mode [ 446.456543][ T9336] syz_tun: left promiscuous mode [ 446.456806][ T9336] bridge0: port 3(syz_tun) entered disabled state [ 446.540408][ T9336] bridge_slave_1: left allmulticast mode [ 446.540441][ T9336] bridge_slave_1: left promiscuous mode [ 446.540718][ T9336] bridge0: port 2(bridge_slave_1) entered disabled state [ 446.637099][ T9336] bridge_slave_0: left allmulticast mode [ 446.637133][ T9336] bridge_slave_0: left promiscuous mode [ 446.637388][ T9336] bridge0: port 1(bridge_slave_0) entered disabled state [ 446.682958][ T9342] fuse: Bad value for 'fd' [ 448.375083][ T5803] Bluetooth: hci3: command 0x0406 tx timeout [ 449.277179][ T31] gspca_stk1135: reg_w 0x353 err -71 [ 449.281227][ T31] gspca_stk1135: serial bus timeout: status=0x00 [ 449.281246][ T31] gspca_stk1135: Sensor write failed [ 449.281283][ T31] gspca_stk1135: serial bus timeout: status=0x00 [ 449.281295][ T31] gspca_stk1135: Sensor write failed [ 449.281332][ T31] gspca_stk1135: serial bus timeout: status=0x00 [ 449.281343][ T31] gspca_stk1135: Sensor read failed [ 449.281379][ T31] gspca_stk1135: serial bus timeout: status=0x00 [ 449.281390][ T31] gspca_stk1135: Sensor read failed [ 449.281397][ T31] gspca_stk1135: Detected sensor type unknown (0x0) [ 449.281440][ T31] gspca_stk1135: serial bus timeout: status=0x00 [ 449.281451][ T31] gspca_stk1135: Sensor read failed [ 449.281487][ T31] gspca_stk1135: serial bus timeout: status=0x00 [ 449.281497][ T31] gspca_stk1135: Sensor read failed [ 449.281534][ T31] gspca_stk1135: serial bus timeout: status=0x00 [ 449.281553][ T31] gspca_stk1135: Sensor write failed [ 449.281589][ T31] gspca_stk1135: serial bus timeout: status=0x00 [ 449.281599][ T31] gspca_stk1135: Sensor write failed [ 449.281695][ T31] stk1135 6-1:0.0: probe with driver stk1135 failed with error -71 [ 449.401663][ T31] usb 6-1: USB disconnect, device number 5 [ 449.810998][ T9396] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode [ 449.884280][ T9396] netlink: 'syz.3.995': attribute type 10 has an invalid length. [ 449.884323][ T9396] mac80211_hwsim hwsim5 wlan1: left allmulticast mode [ 449.913810][ T9396] bond0: (slave wlan1): Opening slave failed [ 449.931108][ T9398] netlink: 212348 bytes leftover after parsing attributes in process `syz.5.996'. [ 449.931307][ T9398] netlink: ct family unspecified [ 450.259673][ T9414] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1004'. [ 450.527891][ T9423] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1007'. [ 450.561107][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 450.838978][ T866] IPVS: starting estimator thread 0... [ 450.924828][ T9438] IPVS: using max 8 ests per chain, 19200 per kthread [ 451.302576][ T9459] netlink: 'syz.2.1019': attribute type 2 has an invalid length. [ 451.524137][ T9465] tipc: Started in network mode [ 451.524173][ T9465] tipc: Node identity ac14142f, cluster identity 4711 [ 451.565052][ T9465] tipc: New replicast peer: 0.0.0.0 [ 451.569016][ T9465] tipc: Enabled bearer , priority 10 [ 451.579398][ T9468] bridge0: port 2(bridge_slave_1) entered disabled state [ 451.634615][ T6908] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 451.647936][ T9468] bridge0: port 1(bridge_slave_0) entered disabled state [ 451.671422][ T9468] bridge0: entered allmulticast mode [ 451.691786][ T9469] netlink: 64 bytes leftover after parsing attributes in process `syz.5.1022'. [ 451.785815][ T6908] usb 3-1: Using ep0 maxpacket: 8 [ 451.795306][ T6908] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 451.795387][ T6908] usb 3-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 451.795454][ T6908] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 451.802705][ T9476] tipc: Started in network mode [ 451.802729][ T9476] tipc: Node identity 84e, cluster identity 4711 [ 451.802743][ T9476] tipc: Node number set to 2126 [ 451.840908][ T6908] usb 3-1: config 0 descriptor?? [ 451.930191][ T6908] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 452.024248][ T38] audit: type=1326 audit(1767379412.314:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9480 comm="syz.4.1026" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd75d31f749 code=0x0 [ 452.574929][ T805] tipc: Node number set to 2886997039 [ 452.864012][ T9507] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1038'. [ 452.918992][ T9507] Dead loop on virtual device ipvlan1, fix it urgently! [ 453.078680][ T6908] gspca_vc032x: reg_w err -71 [ 453.078785][ T6908] vc032x 3-1:0.0: probe with driver vc032x failed with error -71 [ 453.102763][ T6908] usb 3-1: USB disconnect, device number 18 [ 453.231823][ T9515] netlink: 'syz.4.1042': attribute type 10 has an invalid length. [ 453.276955][ T9515] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 453.450651][ T9507] syz.3.1038 (9507) used greatest stack depth: 15640 bytes left [ 453.578537][ T38] audit: type=1326 audit(1767379413.874:250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9528 comm="syz.4.1049" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd75d31f749 code=0x0 [ 454.426372][ T9571] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1065'. [ 454.662529][ T9571] vxlan0: entered promiscuous mode [ 454.688637][ T5993] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 454.689096][ T5993] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 454.689152][ T5993] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 454.689193][ T5993] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 454.787821][ T9586] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1071'. [ 455.243788][ T9610] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1080'. [ 455.377231][ T5813] Bluetooth: hci4: unexpected event for opcode 0x0c03 [ 455.481482][ T9618] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1085'. [ 455.981908][ T805] Dead loop on virtual device ipvlan1, fix it urgently! [ 456.050337][ T9638] bridge0: entered allmulticast mode [ 456.253762][ T9649] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1095'. [ 456.318300][ T9655] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1099'. [ 456.509047][ T805] Dead loop on virtual device ipvlan1, fix it urgently! [ 456.732313][ T9669] netlink: 'syz.2.1105': attribute type 1 has an invalid length. [ 456.863681][ T9675] overlayfs: failed to clone upperpath [ 457.192388][ T9692] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1115'. [ 457.323993][ T9693] bridge0: port 2(bridge_slave_1) entered disabled state [ 457.346220][ T9693] bridge0: port 1(bridge_slave_0) entered disabled state [ 457.368951][ T9693] bridge0: entered allmulticast mode [ 457.414745][ T9697] bridge_slave_1: left allmulticast mode [ 457.414776][ T9697] bridge_slave_1: left promiscuous mode [ 457.415024][ T9697] bridge0: port 2(bridge_slave_1) entered disabled state [ 457.518568][ T9697] bridge_slave_0: left allmulticast mode [ 457.518602][ T9697] bridge_slave_0: left promiscuous mode [ 457.518854][ T9697] bridge0: port 1(bridge_slave_0) entered disabled state [ 458.337080][ T31] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 458.474824][ T31] usb 6-1: device descriptor read/64, error -71 [ 458.509394][ T9746] 9pnet: p9_errstr2errno: server reported unknown error [ 458.564787][ T6617] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 458.714767][ T31] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 458.714767][ T6617] usb 3-1: Using ep0 maxpacket: 16 [ 458.722516][ T6617] usb 3-1: config 0 has no interfaces? [ 458.722557][ T6617] usb 3-1: New USB device found, idVendor=0404, idProduct=00df, bcdDevice= 0.00 [ 458.722581][ T6617] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 458.764173][ T6617] usb 3-1: config 0 descriptor?? [ 458.844838][ T31] usb 6-1: device descriptor read/64, error -71 [ 458.981171][ T31] usb usb6-port1: attempt power cycle [ 458.990746][ T5887] usb 3-1: USB disconnect, device number 19 [ 459.314711][ T31] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 459.335592][ T31] usb 6-1: device descriptor read/8, error -71 [ 459.584142][ T31] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 459.605299][ T31] usb 6-1: device descriptor read/8, error -71 [ 459.715061][ T31] usb usb6-port1: unable to enumerate USB device [ 459.857018][ T9783] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1154'. [ 459.877402][ T9783] vxlan0: entered promiscuous mode [ 459.879457][ T5950] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 459.879827][ T5950] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 459.879870][ T5950] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 459.879908][ T5950] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 460.188457][ T9787] team0: Port device bond0 removed [ 460.279754][ T31] Dead loop on virtual device ipvlan1, fix it urgently! [ 461.215299][ T6908] Dead loop on virtual device ipvlan1, fix it urgently! [ 461.435496][ T38] audit: type=1326 audit(1767379421.734:251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9820 comm="syz.4.1170" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd75d31f749 code=0x0 [ 461.524717][ T6617] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 461.674753][ T6617] usb 6-1: Using ep0 maxpacket: 8 [ 461.677076][ T6617] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 461.677136][ T6617] usb 6-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 461.677162][ T6617] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 461.727236][ T6617] usb 6-1: config 0 descriptor?? [ 461.749952][ T6617] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 461.810929][ T9834] syzkaller1: entered promiscuous mode [ 461.810958][ T9834] syzkaller1: entered allmulticast mode [ 462.316292][ T5813] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 462.316326][ T5813] CPU: 1 UID: 0 PID: 5813 Comm: kworker/u9:7 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 462.316359][ T5813] Tainted: [L]=SOFTLOCKUP [ 462.316368][ T5813] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 462.316384][ T5813] Workqueue: hci3 hci_rx_work [ 462.316410][ T5813] Call Trace: [ 462.316418][ T5813] [ 462.316429][ T5813] dump_stack_lvl+0xe8/0x150 [ 462.316464][ T5813] sysfs_create_dir_ns+0x259/0x280 [ 462.316501][ T5813] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 462.316547][ T5813] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 462.316586][ T5813] ? rt_spin_unlock+0x161/0x200 [ 462.316622][ T5813] kobject_add_internal+0x6b1/0xcd0 [ 462.316659][ T5813] kobject_add+0x155/0x220 [ 462.316692][ T5813] ? __pfx_kobject_add+0x10/0x10 [ 462.316729][ T5813] ? get_device_parent+0x370/0x3a0 [ 462.316760][ T5813] device_add+0x408/0xb80 [ 462.316790][ T5813] hci_conn_add_sysfs+0xd5/0x210 [ 462.316831][ T5813] le_conn_complete_evt+0xf1d/0x1420 [ 462.316874][ T5813] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 462.316905][ T5813] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 462.316930][ T5813] ? lockdep_hardirqs_on+0x7b/0x110 [ 462.316955][ T5813] ? skb_pull_data+0xfb/0x200 [ 462.316995][ T5813] hci_le_conn_complete_evt+0x187/0x480 [ 462.317034][ T5813] hci_event_packet+0x78f/0x1260 [ 462.317078][ T5813] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 462.317108][ T5813] ? __pfx_hci_event_packet+0x10/0x10 [ 462.317143][ T5813] ? rt_spin_unlock+0x150/0x200 [ 462.317187][ T5813] ? hci_send_to_monitor+0xe2/0x590 [ 462.317224][ T5813] hci_rx_work+0x3ee/0x1060 [ 462.317248][ T5813] ? preempt_schedule_thunk+0x16/0x30 [ 462.317276][ T5813] ? process_scheduled_works+0x9ef/0x1770 [ 462.317305][ T5813] process_scheduled_works+0xad1/0x1770 [ 462.317367][ T5813] ? __pfx_process_scheduled_works+0x10/0x10 [ 462.317390][ T5813] ? do_raw_spin_lock+0x121/0x290 [ 462.317436][ T5813] worker_thread+0x8a0/0xda0 [ 462.317495][ T5813] kthread+0x711/0x8a0 [ 462.317534][ T5813] ? __pfx_worker_thread+0x10/0x10 [ 462.317556][ T5813] ? __pfx_kthread+0x10/0x10 [ 462.317580][ T5813] ? rt_spin_unlock+0x150/0x200 [ 462.317612][ T5813] ? rt_spin_unlock+0x161/0x200 [ 462.317634][ T5813] ? __pfx_kthread+0x10/0x10 [ 462.317662][ T5813] ret_from_fork+0x510/0xa50 [ 462.317684][ T5813] ? __pfx_ret_from_fork+0x10/0x10 [ 462.317702][ T5813] ? __switch_to+0xc9e/0x1480 [ 462.317736][ T5813] ? __pfx_kthread+0x10/0x10 [ 462.317761][ T5813] ret_from_fork_asm+0x1a/0x30 [ 462.317807][ T5813] [ 462.317834][ T5813] kobject: kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 462.317868][ T5813] Bluetooth: hci3: failed to register connection device [ 462.761662][ T6617] gspca_vc032x: reg_r err -32 [ 462.761762][ T6617] vc032x 6-1:0.0: probe with driver vc032x failed with error -32 [ 462.807500][ T6617] usb 6-1: USB disconnect, device number 10 [ 462.995539][ T9855] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 463.063054][ T9855] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 463.144811][ T866] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 463.303342][ T866] usb 3-1: Using ep0 maxpacket: 32 [ 463.314664][ T866] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 463.314692][ T866] usb 3-1: config 0 has no interfaces? [ 463.340130][ T866] usb 3-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 463.340161][ T866] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 463.340183][ T866] usb 3-1: Product: syz [ 463.340199][ T866] usb 3-1: Manufacturer: syz [ 463.340215][ T866] usb 3-1: SerialNumber: syz [ 463.386899][ T866] usb 3-1: config 0 descriptor?? [ 463.495959][ T38] audit: type=1326 audit(1767379423.774:252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9869 comm="syz.4.1190" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd75d31f749 code=0x0 [ 463.633309][ T805] usb 3-1: USB disconnect, device number 20 [ 463.825656][ T5975] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 463.994713][ T5975] usb 6-1: Using ep0 maxpacket: 32 [ 464.001296][ T5975] usb 6-1: config 0 has an invalid interface number: 132 but max is 0 [ 464.001327][ T5975] usb 6-1: config 0 has no interface number 0 [ 464.001407][ T5975] usb 6-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 464.007025][ T5975] usb 6-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 464.007065][ T5975] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 464.007086][ T5975] usb 6-1: Product: syz [ 464.007102][ T5975] usb 6-1: Manufacturer: syz [ 464.007116][ T5975] usb 6-1: SerialNumber: syz [ 464.069470][ T5975] usb 6-1: config 0 descriptor?? [ 464.108346][ T5975] em28xx 6-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 464.108385][ T5975] em28xx 6-1:0.132: Video interface 132 found: [ 464.490827][ T5975] em28xx 6-1:0.132: unknown em28xx chip ID (0) [ 464.572233][ T5975] em28xx 6-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 464.572268][ T5975] em28xx 6-1:0.132: board has no eeprom [ 464.625147][ T5975] em28xx 6-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 464.625185][ T5975] em28xx 6-1:0.132: analog set to bulk mode. [ 464.683999][ T805] em28xx 6-1:0.132: Registering V4L2 extension [ 464.699177][ T5975] usb 6-1: USB disconnect, device number 11 [ 464.701473][ T5975] em28xx 6-1:0.132: Disconnecting em28xx [ 465.081077][ T9904] netlink: 'syz.4.1200': attribute type 3 has an invalid length. [ 465.271211][ T805] em28xx 6-1:0.132: Config register raw data: 0xffffffed [ 465.271239][ T805] em28xx 6-1:0.132: AC97 chip type couldn't be determined [ 465.271254][ T805] em28xx 6-1:0.132: No AC97 audio processor [ 465.340367][ T805] usb 6-1: Decoder not found [ 465.340398][ T805] em28xx 6-1:0.132: failed to create media graph [ 465.340483][ T805] em28xx 6-1:0.132: V4L2 device video103 deregistered [ 465.392642][ T805] em28xx 6-1:0.132: Remote control support is not available for this card. [ 465.392987][ T5975] em28xx 6-1:0.132: Closing input extension [ 465.473473][ T5975] em28xx 6-1:0.132: Freeing device [ 465.585096][ T9914] bridge0: entered promiscuous mode [ 465.585125][ T9914] bridge0: entered allmulticast mode [ 465.640754][ T9918] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 465.640791][ T9918] overlayfs: failed to set xattr on upper [ 465.640800][ T9918] overlayfs: ...falling back to redirect_dir=nofollow. [ 465.640810][ T9918] overlayfs: ...falling back to index=off. [ 465.640818][ T9918] overlayfs: ...falling back to uuid=null. [ 466.131309][ T9928] bond1: (slave veth3): Enslaving as an active interface with an up link [ 466.409075][ T9953] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1215'. [ 466.996646][ T9977] rdma_rxe: rxe_newlink: failed to add syz_tun [ 467.050673][ T9982] netlink: 64 bytes leftover after parsing attributes in process `syz.5.1226'. [ 467.470921][ T805] IPVS: starting estimator thread 0... [ 467.556205][ T9997] IPVS: using max 8 ests per chain, 19200 per kthread [ 467.655740][T10004] bridge0: left allmulticast mode [ 468.131786][T10021] bridge0: left allmulticast mode [ 468.291004][T10024] bridge0: port 1(syz_tun) entered blocking state [ 468.304728][T10024] bridge0: port 1(syz_tun) entered disabled state [ 468.304987][T10024] syz_tun: entered allmulticast mode [ 468.307632][T10024] syz_tun: entered promiscuous mode [ 468.711583][ T5813] Bluetooth: hci3: command 0x0406 tx timeout [ 468.986866][T10056] overlayfs: failed to clone upperpath [ 469.425514][T10077] rdma_rxe: rxe_newlink: failed to add syz_tun [ 469.572846][T10084] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1267'. [ 469.982677][T10092] bridge0: left promiscuous mode [ 472.422198][ T38] audit: type=1800 audit(1767379432.714:253): pid=10132 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.0.1286" name="SYSV798dd814" dev="tmpfs" ino=0 res=0 errno=0 [ 472.464875][ T5803] Bluetooth: hci1: command tx timeout [ 474.116565][T10163] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 476.006668][T10200] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 476.264646][ T7361] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 476.434674][ T7361] usb 3-1: Using ep0 maxpacket: 16 [ 476.437608][ T7361] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 476.437635][ T7361] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 476.437655][ T7361] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 476.444176][ T7361] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 476.444209][ T7361] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 476.444231][ T7361] usb 3-1: Product: syz [ 476.444246][ T7361] usb 3-1: Manufacturer: syz [ 476.444262][ T7361] usb 3-1: SerialNumber: syz [ 476.513416][T10200] tipc: Enabled bearer , priority 10 [ 476.899695][ T7361] usb 3-1: 0:2 : does not exist [ 477.126094][ T7361] usb 3-1: 1:0: failed to get current value for ch 0 (-22) [ 477.227833][ T7361] usb 3-1: USB disconnect, device number 21 [ 477.575478][T10226] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1319'. [ 479.463967][T10255] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1333'. [ 479.838702][T10265] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1336'. [ 481.253849][T10285] binder: BINDER_SET_CONTEXT_MGR already set [ 481.253864][T10285] binder: 10282:10285 ioctl 4018620d 200000000040 returned -16 [ 481.731042][T10296] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1349'. [ 481.829047][T10100] Set syz1 is full, maxelem 65536 reached [ 481.951803][ T5803] Bluetooth: hci4: unexpected event for opcode 0x0c03 [ 482.207187][T10309] lo: entered promiscuous mode [ 482.222212][T10309] tunl0: entered promiscuous mode [ 482.300274][T10309] gre0: entered promiscuous mode [ 482.425571][T10309] gretap0: entered promiscuous mode [ 482.756637][T10309] erspan0: entered promiscuous mode [ 482.812965][T10309] ip_vti0: entered promiscuous mode [ 482.939915][T10309] ip6_vti0: entered promiscuous mode [ 483.018075][T10332] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1364'. [ 483.025087][T10309] sit0: entered promiscuous mode [ 483.080859][T10309] ip6tnl0: entered promiscuous mode [ 483.131366][T10309] ip6gre0: entered promiscuous mode [ 483.588258][T10309] ip6gretap0: entered promiscuous mode [ 483.651261][T10309] vcan0: entered promiscuous mode [ 483.754282][T10309] bond0: entered promiscuous mode [ 483.754309][T10309] bond_slave_0: entered promiscuous mode [ 483.784944][T10309] bond_slave_1: entered promiscuous mode [ 483.833323][T10309] team0: entered promiscuous mode [ 483.833350][T10309] team_slave_0: entered promiscuous mode [ 483.833607][T10309] team_slave_1: entered promiscuous mode [ 483.871248][T10309] dummy0: entered promiscuous mode [ 484.044966][T10309] nlmon0: entered promiscuous mode [ 484.053760][T10309] caif0: entered promiscuous mode [ 484.054412][T10309] batadv0: entered promiscuous mode [ 484.096876][T10309] vxcan0: entered promiscuous mode [ 484.116760][T10309] vxcan1: entered promiscuous mode [ 484.119912][T10309] veth0: entered promiscuous mode [ 484.150549][T10309] veth1: entered promiscuous mode [ 484.314841][T10309] wg0: entered promiscuous mode [ 484.438285][T10309] wg1: entered promiscuous mode [ 484.535151][T10309] wg2: entered promiscuous mode [ 484.566605][T10309] veth0_to_bridge: entered promiscuous mode [ 484.591522][T10309] bridge_slave_0: entered promiscuous mode [ 484.621694][T10309] veth1_to_bridge: entered promiscuous mode [ 484.657535][T10309] bridge_slave_1: entered promiscuous mode [ 484.701530][T10309] veth0_to_bond: entered promiscuous mode [ 484.747321][T10309] veth1_to_bond: entered promiscuous mode [ 484.798095][T10309] veth0_to_team: entered promiscuous mode [ 484.844257][T10309] veth1_to_team: entered promiscuous mode [ 484.906346][T10309] veth0_to_batadv: entered promiscuous mode [ 484.936764][T10309] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 484.937691][T10309] batadv_slave_0: entered promiscuous mode [ 484.986004][T10309] veth1_to_batadv: entered promiscuous mode [ 485.009184][T10309] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 485.010088][T10309] batadv_slave_1: entered promiscuous mode [ 485.051101][T10309] xfrm0: entered promiscuous mode [ 485.079930][T10309] veth0_to_hsr: entered promiscuous mode [ 485.167793][T10309] veth1_to_hsr: entered promiscuous mode [ 485.240178][T10309] hsr0: entered promiscuous mode [ 485.283238][T10309] veth1_virt_wifi: entered promiscuous mode [ 485.301955][T10309] veth0_virt_wifi: entered promiscuous mode [ 485.355737][T10309] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 485.473515][T10309] vlan0: entered promiscuous mode [ 485.473932][T10309] vlan1: entered promiscuous mode [ 485.514709][T10309] macvlan0: entered promiscuous mode [ 485.564907][T10309] macvlan1: entered promiscuous mode [ 485.580776][T10309] ipvlan0: entered promiscuous mode [ 485.580930][T10309] ipvlan1: entered promiscuous mode [ 485.714765][T10309] macvtap0: entered promiscuous mode [ 485.731408][T10309] macsec0: entered promiscuous mode [ 485.845032][T10309] geneve0: entered promiscuous mode [ 485.926453][T10309] geneve1: entered promiscuous mode [ 486.014853][T10309] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 486.114976][T10309] netdevsim netdevsim5 netdevsim1: entered promiscuous mode [ 486.194825][T10309] netdevsim netdevsim5 netdevsim2: entered promiscuous mode [ 486.255176][T10309] netdevsim netdevsim5 netdevsim3: entered promiscuous mode [ 486.264192][T10309] mac80211_hwsim hwsim13 wlan0: entered promiscuous mode [ 486.264347][T10309] mac80211_hwsim hwsim14 wlan1: entered promiscuous mode [ 486.351826][T10309] bridge0: entered promiscuous mode [ 486.390864][ T58] netdevsim netdevsim5 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 486.390903][ T58] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 486.391174][ T58] netdevsim netdevsim5 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 486.391205][ T58] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 486.391244][ T58] netdevsim netdevsim5 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 486.391272][ T58] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 486.391310][ T58] netdevsim netdevsim5 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 486.391337][ T58] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 486.572146][T10384] netlink: 128124 bytes leftover after parsing attributes in process `syz.5.1385'. [ 486.981026][T10401] Dead loop on virtual device ipvlan1, fix it urgently! [ 487.493856][T10401] syz.3.1394 (10401) used greatest stack depth: 14640 bytes left [ 488.391512][T10458] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1420'. [ 488.416436][T10458] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1420'. [ 489.024782][ T5805] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 489.185302][ T5805] usb 6-1: Using ep0 maxpacket: 16 [ 489.187353][ T5805] usb 6-1: config 0 has an invalid interface number: 2 but max is 0 [ 489.187381][ T5805] usb 6-1: config 0 has no interface number 0 [ 489.189856][ T5805] usb 6-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 0.01 [ 489.189894][ T5805] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 489.189916][ T5805] usb 6-1: Product: syz [ 489.189931][ T5805] usb 6-1: Manufacturer: syz [ 489.189947][ T5805] usb 6-1: SerialNumber: syz [ 489.307001][ T5805] usb 6-1: config 0 descriptor?? [ 489.348005][ T5805] gspca_main: xirlink-cit-2.14.0 probing 0545:8080 [ 489.829401][T10521] trusted_key: encrypted_key: insufficient parameters specified [ 490.544029][T10546] trusted_key: encrypted_key: insufficient parameters specified [ 491.232767][T10576] trusted_key: encrypted_key: insufficient parameters specified [ 491.944465][ T5805] gspca_xirlink_cit: Failed to write a register (index 0x042F, value 0x15, error -71) [ 491.945066][ T5805] gspca_xirlink_cit: Failed to write a register (index 0x0439, value 0x2B, error -71) [ 491.945489][ T5805] gspca_xirlink_cit: Failed to write a register (index 0x043A, value 0x26, error -71) [ 491.945901][ T5805] gspca_xirlink_cit: Failed to write a register (index 0x0438, value 0x08, error -71) [ 491.946311][ T5805] gspca_xirlink_cit: Failed to write a register (index 0x042B, value 0x1E, error -71) [ 491.946832][ T5805] gspca_xirlink_cit: Failed to write a register (index 0x042C, value 0x41, error -71) [ 491.947272][ T5805] gspca_xirlink_cit: Failed to write a register (index 0x0100, value 0xC0, error -71) [ 491.965717][ T5805] input: xirlink-cit as /devices/platform/dummy_hcd.5/usb6/6-1/input/input18 [ 492.110951][ T5805] usb 6-1: USB disconnect, device number 12 [ 493.550162][T10686] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1520'. [ 493.944716][ T5805] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 494.095465][ T5805] usb 6-1: Using ep0 maxpacket: 32 [ 494.097633][ T5805] usb 6-1: config 0 has an invalid interface number: 51 but max is 0 [ 494.097660][ T5805] usb 6-1: config 0 has no interface number 0 [ 494.100344][ T5805] usb 6-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 494.100373][ T5805] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 494.100393][ T5805] usb 6-1: Product: syz [ 494.100408][ T5805] usb 6-1: Manufacturer: syz [ 494.100423][ T5805] usb 6-1: SerialNumber: syz [ 494.111335][ T5805] usb 6-1: config 0 descriptor?? [ 494.169877][ T5805] quatech2 6-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 494.395640][ T5805] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 494.527757][ C1] usb 6-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 494.538728][ T5805] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 494.591974][ T5805] usb 6-1: USB disconnect, device number 13 [ 494.632756][ T5805] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 494.660357][ T5805] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 494.661456][ T5805] quatech2 6-1:0.51: device disconnected [ 494.844748][ T6617] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 494.994674][ T6617] usb 3-1: Using ep0 maxpacket: 8 [ 495.000202][ T6617] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 495.000268][ T6617] usb 3-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 495.000293][ T6617] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 495.066801][ T6617] usb 3-1: config 0 descriptor?? [ 495.088162][ T6617] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 495.705837][ T6617] gspca_vc032x: reg_r err -32 [ 495.705939][ T6617] vc032x 3-1:0.0: probe with driver vc032x failed with error -32 [ 495.942768][T10753] bridge0: left promiscuous mode [ 496.036290][T10758] netlink: 8704 bytes leftover after parsing attributes in process `syz.0.1554'. [ 496.702262][T10783] random: crng reseeded on system resumption [ 496.952857][T10792] bridge0: entered allmulticast mode [ 497.623456][ T6617] usb 3-1: USB disconnect, device number 22 [ 498.563837][T10859] mac80211_hwsim hwsim11 syzkaller0: entered promiscuous mode [ 498.563870][T10859] mac80211_hwsim hwsim11 syzkaller0: entered allmulticast mode [ 499.046044][T10876] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1609'. [ 499.585385][ T31] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 499.734604][ T31] usb 6-1: Using ep0 maxpacket: 8 [ 499.737135][ T31] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 499.737193][ T31] usb 6-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 499.737218][ T31] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 499.784216][ T31] usb 6-1: config 0 descriptor?? [ 499.852980][ T31] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 499.947328][T10893] netlink: 199100 bytes leftover after parsing attributes in process `syz.0.1616'. [ 500.008389][ T31] gspca_vc032x: reg_r err -32 [ 500.008469][ T31] vc032x 6-1:0.0: probe with driver vc032x failed with error -32 [ 500.744443][T10921] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1626'. [ 502.343704][ T31] Dead loop on virtual device ipvlan1, fix it urgently! [ 502.381818][T10980] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1648'. [ 502.382256][ T6617] usb 6-1: USB disconnect, device number 14 [ 502.814934][ T31] Dead loop on virtual device ipvlan1, fix it urgently! [ 502.874800][ T5805] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 503.025492][ T5805] usb 6-1: Using ep0 maxpacket: 16 [ 503.027920][ T5805] usb 6-1: config 0 has an invalid interface number: 2 but max is 0 [ 503.027947][ T5805] usb 6-1: config 0 has no interface number 0 [ 503.031903][ T5805] usb 6-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 0.01 [ 503.031925][ T5805] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 503.031939][ T5805] usb 6-1: Product: syz [ 503.031950][ T5805] usb 6-1: Manufacturer: syz [ 503.031960][ T5805] usb 6-1: SerialNumber: syz [ 503.043112][ T5805] usb 6-1: config 0 descriptor?? [ 503.103310][ T5805] gspca_main: xirlink-cit-2.14.0 probing 0545:8080 [ 503.872108][T11019] bridge0: entered allmulticast mode [ 503.919925][ T6617] Dead loop on virtual device ipvlan1, fix it urgently! [ 504.168901][T11022] netlink: 1433 bytes leftover after parsing attributes in process `syz.3.1667'. [ 504.168933][T11022] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1667'. [ 504.168985][T11022] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1667'. [ 504.624587][ T5803] Bluetooth: hci3: command 0x0406 tx timeout [ 504.865365][ T6617] Dead loop on virtual device ipvlan1, fix it urgently! [ 504.878119][T11044] netlink: zone id is out of range [ 504.879439][T11044] netlink: zone id is out of range [ 504.879472][T11044] netlink: zone id is out of range [ 504.879494][T11044] netlink: zone id is out of range [ 504.880779][T11044] netlink: zone id is out of range [ 504.881650][T11044] netlink: zone id is out of range [ 505.298424][T11058] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1682'. [ 505.507090][T11065] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1686'. [ 505.507119][T11065] nbd: must specify at least one socket [ 505.759571][ T5805] gspca_xirlink_cit: Failed to write a register (index 0x042F, value 0x15, error -71) [ 505.759991][ T5805] gspca_xirlink_cit: Failed to write a register (index 0x0439, value 0x2B, error -71) [ 505.760421][ T5805] gspca_xirlink_cit: Failed to write a register (index 0x043A, value 0x26, error -71) [ 505.760827][ T5805] gspca_xirlink_cit: Failed to write a register (index 0x0438, value 0x08, error -71) [ 505.761259][ T5805] gspca_xirlink_cit: Failed to write a register (index 0x042B, value 0x1E, error -71) [ 505.761662][ T5805] gspca_xirlink_cit: Failed to write a register (index 0x042C, value 0x41, error -71) [ 505.763495][ T5805] gspca_xirlink_cit: Failed to write a register (index 0x0100, value 0xC0, error -71) [ 505.771658][ T5805] input: xirlink-cit as /devices/platform/dummy_hcd.5/usb6/6-1/input/input19 [ 505.884937][ T5805] usb 6-1: USB disconnect, device number 15 [ 505.892900][T11079] netlink: 'syz.4.1693': attribute type 12 has an invalid length. [ 505.892925][T11079] netlink: 'syz.4.1693': attribute type 29 has an invalid length. [ 505.892940][T11079] netlink: 148 bytes leftover after parsing attributes in process `syz.4.1693'. [ 505.892986][T11079] netlink: 59 bytes leftover after parsing attributes in process `syz.4.1693'. [ 506.061165][T11084] fuse: Unknown parameter 'group_id00000000000000000000' [ 506.547262][T11100] netlink: 'syz.0.1702': attribute type 10 has an invalid length. [ 506.550056][T11100] bond0: (slave wlan1): Opening slave failed [ 506.707236][ T5803] Bluetooth: hci3: command 0x0406 tx timeout [ 506.940380][T11115] bridge0: entered allmulticast mode [ 506.941547][T11115] syz_tun: left allmulticast mode [ 506.941821][T11115] bridge0: port 1(syz_tun) entered disabled state [ 507.277580][T11117] BUG: sleeping function called from invalid context at kernel/locking/spinlock_rt.c:48 [ 507.277599][T11117] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 11117, name: syz.2.1711 [ 507.277612][T11117] preempt_count: 2, expected: 0 [ 507.277620][T11117] RCU nest depth: 1, expected: 1 [ 507.277632][T11117] 3 locks held by syz.2.1711/11117: [ 507.277641][T11117] #0: ffff888038572e58 (sk_lock-AF_VSOCK){+.+.}-{0:0}, at: vsock_connectible_sendmsg+0x189/0x1040 [ 507.277702][T11117] #1: ffffffff8d5ae940 (rcu_read_lock){....}-{1:3}, at: bpf_trace_run9+0x1ec/0x510 [ 507.277742][T11117] #2: ffff8880b883fe88 (&s->lock_key#14){+.+.}-{3:3}, at: ___slab_alloc+0x12f/0x13e0 [ 507.277784][T11117] Preemption disabled at: [ 507.277789][T11117] [] count_memcg_events+0x68/0x240 [ 507.277819][T11117] CPU: 0 UID: 0 PID: 11117 Comm: syz.2.1711 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 507.277842][T11117] Tainted: [L]=SOFTLOCKUP [ 507.277847][T11117] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 507.277858][T11117] Call Trace: [ 507.277864][T11117] [ 507.277871][T11117] dump_stack_lvl+0xe8/0x150 [ 507.277896][T11117] __might_resched+0x32a/0x480 [ 507.277914][T11117] ? count_memcg_events+0x68/0x240 [ 507.277936][T11117] rt_spin_lock+0xc7/0x3e0 [ 507.277960][T11117] ? __pfx_rt_spin_lock+0x10/0x10 [ 507.277981][T11117] ? __lock_acquire+0x6b6/0x2cf0 [ 507.278005][T11117] ? __lock_acquire+0x6b6/0x2cf0 [ 507.278030][T11117] ___slab_alloc+0x12f/0x13e0 [ 507.278050][T11117] ? unwind_next_frame+0xa5/0x23d0 [ 507.278070][T11117] ? lock_acquire+0x107/0x340 [ 507.278090][T11117] ? __bpf_stream_push_str+0xa8/0x2b0 [ 507.278109][T11117] __slab_alloc+0xc6/0x1f0 [ 507.278126][T11117] ? __bpf_stream_push_str+0xa8/0x2b0 [ 507.278143][T11117] kmalloc_nolock_noprof+0x1be/0x440 [ 507.278167][T11117] ? __bpf_stream_push_str+0xa8/0x2b0 [ 507.278185][T11117] __bpf_stream_push_str+0xa8/0x2b0 [ 507.278199][T11117] ? __asan_memcpy+0x40/0x70 [ 507.278221][T11117] ? __pfx___bpf_stream_push_str+0x10/0x10 [ 507.278245][T11117] bpf_stream_stage_printk+0x14e/0x1c0 [ 507.278259][T11117] ? __pfx_find_from_stack_cb+0x10/0x10 [ 507.278280][T11117] ? arch_bpf_stack_walk+0x112/0x170 [ 507.278307][T11117] ? __pfx_bpf_stream_stage_printk+0x10/0x10 [ 507.278343][T11117] bpf_prog_report_may_goto_violation+0xc4/0x190 [ 507.278360][T11117] ? __pfx_bpf_prog_report_may_goto_violation+0x10/0x10 [ 507.278376][T11117] ? irqentry_exit+0x5dd/0x660 [ 507.278391][T11117] ? trace_irq_disable+0x37/0x100 [ 507.278412][T11117] ? read_tsc+0x9/0x20 [ 507.278429][T11117] bpf_check_timed_may_goto+0xaa/0xb0 [ 507.278487][T11117] arch_bpf_timed_may_goto+0x21/0x40 [ 507.278515][T11117] bpf_prog_262a74d054ad2993+0x53/0x5f [ 507.278540][T11117] bpf_trace_run9+0x2de/0x510 [ 507.278569][T11117] ? bpf_trace_run9+0x1ec/0x510 [ 507.278597][T11117] ? __pfx_bpf_trace_run9+0x10/0x10 [ 507.278621][T11117] ? _copy_from_iter+0x215/0x1630 [ 507.278671][T11117] ? __pfx__copy_from_iter+0x10/0x10 [ 507.278714][T11117] __bpf_trace_virtio_transport_alloc_pkt+0x2d7/0x340 [ 507.278758][T11117] ? __pfx___bpf_trace_virtio_transport_alloc_pkt+0x10/0x10 [ 507.278793][T11117] ? skb_copy_datagram_from_iter_full+0x122/0x170 [ 507.278832][T11117] virtio_transport_alloc_skb+0x10af/0x1110 [ 507.278869][T11117] ? __pfx_virtio_transport_alloc_skb+0x10/0x10 [ 507.278894][T11117] ? __local_bh_enable_ip+0x1af/0x2c0 [ 507.278913][T11117] ? lockdep_hardirqs_on+0x7b/0x110 [ 507.278932][T11117] virtio_transport_send_pkt_info+0x694/0x10b0 [ 507.278956][T11117] ? virtio_transport_send_pkt_info+0x1ea/0x10b0 [ 507.278988][T11117] ? virtio_transport_seqpacket_enqueue+0xba/0x1f0 [ 507.279009][T11117] virtio_transport_seqpacket_enqueue+0x166/0x1f0 [ 507.279028][T11117] ? reacquire_held_locks+0x104/0x190 [ 507.279055][T11117] ? __pfx_virtio_transport_seqpacket_enqueue+0x10/0x10 [ 507.279080][T11117] ? rt_spin_unlock+0x150/0x200 [ 507.279105][T11117] ? rt_spin_unlock+0x161/0x200 [ 507.279129][T11117] vsock_connectible_sendmsg+0xabf/0x1040 [ 507.279169][T11117] ? __pfx_vsock_connectible_sendmsg+0x10/0x10 [ 507.279198][T11117] ? __pfx_woken_wake_function+0x10/0x10 [ 507.279221][T11117] ? finish_task_switch+0x23d/0x940 [ 507.279249][T11117] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 507.279271][T11117] ? __pfx_vsock_connectible_sendmsg+0x10/0x10 [ 507.279298][T11117] __sock_sendmsg+0x21c/0x270 [ 507.279332][T11117] ____sys_sendmsg+0x534/0x810 [ 507.279358][T11117] ? __pfx_____sys_sendmsg+0x10/0x10 [ 507.279386][T11117] ? import_iovec+0x74/0xa0 [ 507.279405][T11117] ___sys_sendmsg+0x21f/0x2a0 [ 507.279427][T11117] ? __pfx____sys_sendmsg+0x10/0x10 [ 507.279451][T11117] ? preempt_schedule_common+0x83/0xd0 [ 507.279478][T11117] ? preempt_schedule_thunk+0x16/0x30 [ 507.279516][T11117] ? __fget_files+0x2a/0x420 [ 507.279550][T11117] ? __fget_files+0x3a6/0x420 [ 507.279587][T11117] __sys_sendmmsg+0x22d/0x430 [ 507.279624][T11117] ? __pfx___sys_sendmmsg+0x10/0x10 [ 507.279651][T11117] ? do_futex+0x395/0x420 [ 507.279721][T11117] ? rcu_is_watching+0x15/0xb0 [ 507.279753][T11117] __x64_sys_sendmmsg+0xa0/0xc0 [ 507.279786][T11117] do_syscall_64+0xec/0xf80 [ 507.279809][T11117] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 507.279832][T11117] ? trace_irq_disable+0x37/0x100 [ 507.279856][T11117] ? clear_bhb_loop+0x60/0xb0 [ 507.279876][T11117] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 507.279892][T11117] RIP: 0033:0x7fedd5c4f749 [ 507.279907][T11117] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 507.279921][T11117] RSP: 002b:00007fedd3eb6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 507.279938][T11117] RAX: ffffffffffffffda RBX: 00007fedd5ea5fa0 RCX: 00007fedd5c4f749 [ 507.279966][T11117] RDX: 0000000000000001 RSI: 0000200000000b40 RDI: 0000000000000003 [ 507.279976][T11117] RBP: 00007fedd5cd3f91 R08: 0000000000000000 R09: 0000000000000000 [ 507.279986][T11117] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 507.280005][T11117] R13: 00007fedd5ea6038 R14: 00007fedd5ea5fa0 R15: 00007ffcd2f25898 [ 507.280040][T11117] [ 508.471342][T11117] BUG: sleeping function called from invalid context at kernel/locking/spinlock_rt.c:48 [ 508.471361][T11117] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 11117, name: syz.2.1711 [ 508.471375][T11117] preempt_count: 2, expected: 0 [ 508.471383][T11117] RCU nest depth: 1, expected: 1 [ 508.471390][T11117] 3 locks held by syz.2.1711/11117: [ 508.471400][T11117] #0: ffff888038572e58 (sk_lock-AF_VSOCK){+.+.}-{0:0}, at: vsock_connectible_sendmsg+0x189/0x1040 [ 508.471459][T11117] #1: ffffffff8d5ae940 (rcu_read_lock){....}-{1:3}, at: bpf_trace_run9+0x1ec/0x510 [ 508.471499][T11117] #2: ffff8880b883fe88 (&s->lock_key#14){+.+.}-{3:3}, at: ___slab_alloc+0x12f/0x13e0 [ 508.471542][T11117] Preemption disabled at: [ 508.471546][T11117] [] count_memcg_events+0x68/0x240 [ 508.471576][T11117] CPU: 0 UID: 0 PID: 11117 Comm: syz.2.1711 Tainted: G W L syzkaller #0 PREEMPT_{RT,(full)} [ 508.471599][T11117] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 508.471605][T11117] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 508.471616][T11117] Call Trace: [ 508.471622][T11117] [ 508.471629][T11117] dump_stack_lvl+0xe8/0x150 [ 508.471653][T11117] __might_resched+0x32a/0x480 [ 508.471672][T11117] ? count_memcg_events+0x68/0x240 [ 508.471694][T11117] rt_spin_lock+0xc7/0x3e0 [ 508.471720][T11117] ? __pfx_rt_spin_lock+0x10/0x10 [ 508.471740][T11117] ? __lock_acquire+0x6b6/0x2cf0 [ 508.471765][T11117] ? __lock_acquire+0x6b6/0x2cf0 [ 508.471789][T11117] ___slab_alloc+0x12f/0x13e0 [ 508.471810][T11117] ? unwind_next_frame+0xa5/0x23d0 [ 508.471831][T11117] ? lock_acquire+0x107/0x340 [ 508.471851][T11117] ? __bpf_stream_push_str+0xa8/0x2b0 [ 508.471871][T11117] __slab_alloc+0xc6/0x1f0 [ 508.471888][T11117] ? __bpf_stream_push_str+0xa8/0x2b0 [ 508.471905][T11117] kmalloc_nolock_noprof+0x1be/0x440 [ 508.471928][T11117] ? __bpf_stream_push_str+0xa8/0x2b0 [ 508.471947][T11117] __bpf_stream_push_str+0xa8/0x2b0 [ 508.471961][T11117] ? __asan_memcpy+0x40/0x70 [ 508.471984][T11117] ? __pfx___bpf_stream_push_str+0x10/0x10 [ 508.472007][T11117] bpf_stream_stage_printk+0x14e/0x1c0 [ 508.472021][T11117] ? __pfx_find_from_stack_cb+0x10/0x10 [ 508.472041][T11117] ? arch_bpf_stack_walk+0x112/0x170 [ 508.472068][T11117] ? __pfx_bpf_stream_stage_printk+0x10/0x10 [ 508.472097][T11117] bpf_prog_report_may_goto_violation+0xc4/0x190 [ 508.472114][T11117] ? __pfx_bpf_prog_report_may_goto_violation+0x10/0x10 [ 508.472129][T11117] ? irqentry_exit+0x5dd/0x660 [ 508.472144][T11117] ? trace_irq_disable+0x37/0x100 [ 508.472165][T11117] ? read_tsc+0x9/0x20 [ 508.472184][T11117] bpf_check_timed_may_goto+0xaa/0xb0 [ 508.472232][T11117] arch_bpf_timed_may_goto+0x21/0x40 [ 508.472262][T11117] bpf_prog_262a74d054ad2993+0x53/0x5f [ 508.472286][T11117] bpf_trace_run9+0x2de/0x510 [ 508.472316][T11117] ? bpf_trace_run9+0x1ec/0x510 [ 508.472346][T11117] ? __pfx_bpf_trace_run9+0x10/0x10 [ 508.472363][T11117] ? _copy_from_iter+0x215/0x1630 [ 508.472396][T11117] ? __pfx__copy_from_iter+0x10/0x10 [ 508.472426][T11117] __bpf_trace_virtio_transport_alloc_pkt+0x2d7/0x340 [ 508.472461][T11117] ? __pfx___bpf_trace_virtio_transport_alloc_pkt+0x10/0x10 [ 508.472494][T11117] ? skb_copy_datagram_from_iter_full+0x122/0x170 [ 508.472534][T11117] virtio_transport_alloc_skb+0x10af/0x1110 [ 508.472570][T11117] ? __pfx_virtio_transport_alloc_skb+0x10/0x10 [ 508.472592][T11117] ? queue_work_on+0x159/0x1c0 [ 508.472614][T11117] ? vsock_loopback_send_pkt+0x40/0x120 [ 508.472640][T11117] virtio_transport_send_pkt_info+0x694/0x10b0 [ 508.472676][T11117] ? virtio_transport_seqpacket_enqueue+0xba/0x1f0 [ 508.472697][T11117] virtio_transport_seqpacket_enqueue+0x166/0x1f0 [ 508.472717][T11117] ? reacquire_held_locks+0x104/0x190 [ 508.472744][T11117] ? __pfx_virtio_transport_seqpacket_enqueue+0x10/0x10 [ 508.472768][T11117] ? rt_spin_unlock+0x150/0x200 [ 508.472793][T11117] ? rt_spin_unlock+0x161/0x200 [ 508.472817][T11117] vsock_connectible_sendmsg+0xabf/0x1040 [ 508.472858][T11117] ? __pfx_vsock_connectible_sendmsg+0x10/0x10 [ 508.472886][T11117] ? __pfx_woken_wake_function+0x10/0x10 [ 508.472909][T11117] ? finish_task_switch+0x23d/0x940 [ 508.472938][T11117] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 508.472959][T11117] ? __pfx_vsock_connectible_sendmsg+0x10/0x10 [ 508.472986][T11117] __sock_sendmsg+0x21c/0x270 [ 508.473014][T11117] ____sys_sendmsg+0x534/0x810 [ 508.473040][T11117] ? __pfx_____sys_sendmsg+0x10/0x10 [ 508.473068][T11117] ? import_iovec+0x74/0xa0 [ 508.473086][T11117] ___sys_sendmsg+0x21f/0x2a0 [ 508.473108][T11117] ? __pfx____sys_sendmsg+0x10/0x10 [ 508.473131][T11117] ? preempt_schedule_common+0x83/0xd0 [ 508.473157][T11117] ? preempt_schedule_thunk+0x16/0x30 [ 508.473197][T11117] ? __fget_files+0x2a/0x420 [ 508.473214][T11117] ? __fget_files+0x3a6/0x420 [ 508.473246][T11117] __sys_sendmmsg+0x22d/0x430 [ 508.473271][T11117] ? __pfx___sys_sendmmsg+0x10/0x10 [ 508.473291][T11117] ? do_futex+0x395/0x420 [ 508.473339][T11117] ? rcu_is_watching+0x15/0xb0 [ 508.473361][T11117] __x64_sys_sendmmsg+0xa0/0xc0 [ 508.473410][T11117] do_syscall_64+0xec/0xf80 [ 508.473444][T11117] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 508.473467][T11117] ? trace_irq_disable+0x37/0x100 [ 508.473493][T11117] ? clear_bhb_loop+0x60/0xb0 [ 508.473514][T11117] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 508.473530][T11117] RIP: 0033:0x7fedd5c4f749 [ 508.473545][T11117] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 508.473559][T11117] RSP: 002b:00007fedd3eb6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 508.473576][T11117] RAX: ffffffffffffffda RBX: 00007fedd5ea5fa0 RCX: 00007fedd5c4f749 [ 508.473588][T11117] RDX: 0000000000000001 RSI: 0000200000000b40 RDI: 0000000000000003 [ 508.473598][T11117] RBP: 00007fedd5cd3f91 R08: 0000000000000000 R09: 0000000000000000 [ 508.473607][T11117] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 508.473617][T11117] R13: 00007fedd5ea6038 R14: 00007fedd5ea5fa0 R15: 00007ffcd2f25898 [ 508.473643][T11117] [ 508.901576][T11120] batman_adv: batadv0: Adding interface: dummy0 [ 508.901631][T11120] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 508.990351][T11120] batman_adv: batadv0: Interface activated: dummy0 [ 509.146647][T11124] net_ratelimit: 5 callbacks suppressed [ 509.146785][T11124] batadv0: mtu less than device minimum [ 509.172639][T11124] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 509.191690][T11124] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 509.208117][T11124] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 509.213604][T11124] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 509.241558][T11124] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 509.257700][T11124] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 509.263153][T11124] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 509.289937][T11124] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 509.306164][T11124] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 511.990714][ T1318] ieee802154 phy1 wpan1: encryption failed: -22