last executing test programs: 7.411219374s ago: executing program 2 (id=1172): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket(0xa, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f00000007c0)={r5, 0xffff8001}, &(0x7f0000000800)=0x8) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r3) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r2, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x30, r6, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x400) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="0100ebce", @ANYRES16=r8, @ANYBLOB="00012cbd700002000000020020000800610054000000080061"], 0x24}}, 0x4000) sendmsg$NL80211_CMD_SET_COALESCE(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000040)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="0100140000307e0000000200000008000300", @ANYRES32=r9], 0x28}, 0x1, 0x700, 0x0, 0x17000000}, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r2, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r8, 0x100, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7, 0x69}}}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x28}}, 0x10000804) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0xfff8}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x7, 0xfff, 0x7f, 0x1, 0x5}, 0xffffff80, 0x1, 0x5af3, 0x6, 0x8, 0x16, 0x2, 0xe, 0x3, 0x331799a0, {0xd, 0xe9, 0x40, 0x3, 0x2, 0x5}}}}]}, 0x78}}, 0x4c050) r10 = syz_usb_connect$hid(0x0, 0x94, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0xb05, 0x1866, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x90, 0x8, "", [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0xeffd, 0x3, 0x1, {0x22, 0x8}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x9, 0x1, 0x88}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r10, 0x0, 0x0) syz_usb_control_io$hid(r10, &(0x7f00000003c0)={0x24, 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="00221b"], 0x0}, 0x0) r11 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000006100)='cmdline\x00') read$FUSE(r11, &(0x7f0000000680)={0x2020}, 0x2020) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001400)=@newtfilter={0x3c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0xfff3, 0xc}, {0x0, 0xfff3}, {0x9, 0xfff1}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0x9, 0x9}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20041006}, 0x0) 6.383235206s ago: executing program 0 (id=1174): prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0x1000, &(0x7f00000000c0)='/dev/input/event#\x00') prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x1000)=nil, 0x1000, &(0x7f0000000340)='cbc(cast6)\x00') r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0xb05, 0x1abe, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xe8, 0xb, "", [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x7ffd, 0x0, 0x1, {0x22, 0x1e3}}, {{{0x9, 0x5, 0x81, 0x3, 0x38d707d343173689, 0x5, 0xa, 0x70}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac3(0xffffffffffffffff, 0x0, &(0x7f0000000440)={0x24, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="20699a10eec11dbef48203020000000000"], &(0x7f0000000000)={0x20, 0x83, 0x1, "d2"}, 0x0, 0x0}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000740), 0x80, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x38) r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f0000000040)={0x4, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042", 0xffffffffffffffff}) r5 = socket(0x2, 0x80805, 0x0) getsockopt$bt_hci(r5, 0x84, 0x1, &(0x7f0000000000)=""/4102, &(0x7f0000001040)=0x1006) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r5, 0x89f6, &(0x7f00000002c0)={'sit0\x00', &(0x7f0000000280)={@private=0xa010101, 0x0, 0x0, 0x20, 0x0, [{@local}, {@multicast1}]}}) ioctl$SYNC_IOC_MERGE(r4, 0xc0303e03, &(0x7f00000001c0)={"0080bced01eb0100000000000000000700000000000000c900"}) r6 = epoll_create1(0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x64, &(0x7f0000000180)={&(0x7f0000000480)={0x1d8, 0x1, 0x107, 0x70bd27, 0xff7ffdfe, {0x13, 0x7c}}, 0x1d8}, 0x1, 0x0, 0x0, 0x4048011}, 0xc0d4) r8 = socket$packet(0x11, 0x2, 0x300) r9 = accept4$packet(r8, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000200)=0x14, 0xc0000) setsockopt$packet_tx_ring(r9, 0x107, 0xd, &(0x7f0000000240)=@req3={0xc88, 0x7fff, 0x80800033, 0x7fff, 0xffffffff, 0x1, 0x3}, 0x1c) setsockopt$packet_tx_ring(r8, 0x107, 0xd, &(0x7f0000000000)=@req3={0xe, 0x7, 0x8, 0xfce, 0x8, 0x4, 0x6}, 0x1c) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r1, &(0x7f0000000080)={0x10000004}) ioctl$TCXONC(r1, 0x540a, 0x2) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_clone3(&(0x7f0000000080)={0x10881d600, 0x0, 0x0, 0x0, {0x33}, 0x0, 0x49, 0x0, 0x0}, 0x58) r10 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000080)=ANY=[@ANYBLOB="240000001d00075f12f5f5000000000007000000", @ANYRES32=r11, @ANYBLOB='\x00\x00g\x00\b\x00\b'], 0x24}, 0x1, 0x0, 0x0, 0x4008004}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 5.673632408s ago: executing program 2 (id=1178): r0 = syz_usb_connect$cdc_ncm(0x2, 0x92, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902800002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a000000072414060005001524120004a317a88b045e4f01a607c0ffcb7e392a08241c0200bed49f090581030002f800000904010000020d00000904010113020d0000090582020002000000090503020002"], 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="05000000040000000400000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x1, 0x17, &(0x7f00000007c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1ffffc}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0x6, 0x9, 0x0, 0x6, 0xfffffff7}, {0x4, 0x0, 0x0, 0x6}}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x4, 0x1, 0xa, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffffff7}, {0x14}}], {{0x5, 0x1, 0x5, 0x3}, {0x5, 0x0, 0xb, 0x3, 0x0, 0x2, 0xfffffff7}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={0x1}, 0x4) syz_usb_connect$uac2(0x0, 0x7b, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x1235, 0x8002, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x69, 0x3, 0x1, 0xd5, 0xe0, 0x6, {0x8, 0xb, 0x1, 0x1, 0x1, 0x0, 0x20, 0x3}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x2, 0x4, 0x9, 0x5}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x1, 0x1, 0x8, {0x8, 0x25, 0x1, 0x0, 0x33, 0x5, 0x8}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x8, 0x8, 0x3, {0x8, 0x25, 0x1, 0x3, 0xf, 0x0, 0x8000}}}}}}}}]}}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000240)}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000004000000000000000300000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b700576aa7ce00009500000000000000000000002f12000000000000000000006fc692525dd5bb96599a9313a31019dbd80aa8fa5f2ce6689d85d45dd9b5c015fb47fb4368ac6cf7eae47f64a648008462e7d646e3994c132568b1ae7856d31afa6247580c8c650b6639207f6df2165de4f07d3db41b3e"], &(0x7f0000000100)='GPL\x00', 0xff, 0x0, 0x0, 0x0, 0x64, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xfffffffffffffe3e) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000600)={0x44, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = syz_usb_connect(0x5, 0x27, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000b75c7f40470501026411010203010902120001000000000904"], 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r4, 0xc01c5868, &(0x7f0000000740)={r4, &(0x7f00000008c0)='\x00', 0x22400, &(0x7f0000000680)={@align=0xa, {0x7fff, 0x3090, 0x9, 0xac}}, 0x4, &(0x7f00000006c0)={@_ha_fsid}, &(0x7f0000000700)=0xe}) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001", @ANYRESHEX=r3], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) syz_usb_control_io$uac3(r3, &(0x7f0000000540)={0xc, &(0x7f00000003c0)={0x40, 0xb, 0xbd, {0xbd, 0xb, "676201cda423c104fd3fed41561c671cee758d8a7b36e33874425500167547ca5f1f88eb336f9c7d02768512f8d70d2d8a76ed2bdb4ee4d4c218c789365140f9eb2f388c6e13cfd5906b6fa2530698798b42e73aa373267185566769e40f8556aacd37a214ad0405e799128f6b45cb626df6bfdc0f10f81deec4abc8decfc356f302e5ba6c94c2882426b6b1428e97437583284b00a6b26b58677833327f1157aee2b736cc664a0df11a2790f1cf9ebabc16ca6278950f78e0f121"}}, &(0x7f00000004c0)={0x0, 0x3, 0x49, @string={0x49, 0x3, "d413aa2542ff8dc425a411ec4d3e9fc2bad579e9af4477b7fea0e532128c05806ffc3013ae84911046b40056e38df00ef7b4994e1f17e74b09e785f2cfc72f1b81d86be64886a9"}}}, &(0x7f0000000880)={0x24, &(0x7f0000000580)={0x40, 0x9, 0x31, "e9b252928b05ff5721b447a501f1348ef3fc65a0b616803da0401afc80b0216e3211e047c49ca84b6a11cd568ff08feae8"}, &(0x7f00000005c0)={0x0, 0xa, 0x1, 0x4c}, &(0x7f0000000640)={0x0, 0x8, 0x1, 0x3f}, &(0x7f0000000680)={0x20, 0x81, 0x3, "4f18fd"}, &(0x7f00000006c0)={0x20, 0x82, 0x2, "f81d"}, &(0x7f0000000700)=ANY=[@ANYBLOB="078303000000908120"], &(0x7f0000000740)={0x20, 0x84, 0x2, "b27d"}, &(0x7f0000000780)={0x20, 0x85, 0x3, "699792"}}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) ioctl$TUNSETLINK(r5, 0x400454cd, 0x20) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='net/dev_mcast\x00') pread64(r6, &(0x7f0000003b00)=""/195, 0xc3, 0x591f) r7 = socket$inet_sctp(0x2, 0x5, 0x84) r8 = socket(0xa, 0x5, 0x0) r9 = dup(r8) r10 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r10, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r9, 0x84, 0x7c, &(0x7f00000001c0)={r11, 0x2, 0x4}, &(0x7f0000000200)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r7, 0x84, 0xa, &(0x7f00000002c0)={0x8cc, 0xfff8, 0xa, 0x6, 0x7, 0x401, 0xfffffffb, 0xb9a, r11}, 0x20) 4.881144396s ago: executing program 4 (id=1182): r0 = socket$inet6(0xa, 0x3, 0x8) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000001440)={'bridge0\x00', 0x0}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_open_dev$I2C(0x0, 0x1, 0x50b003) ioctl$I2C_RDWR(r2, 0x707, 0x0) socket$kcm(0xa, 0x0, 0x87) r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0xa, 0x2) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000280)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f00000001c0)='dctcp', 0x5) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0xe, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0xa2}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x40000, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0x3, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x6, 0x6b7, 0x80, 0x0, 0x1, 0x91b1}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000400}, 0x24000000) sendto$inet(r4, &(0x7f0000000900)="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", 0x1a1, 0x12, 0x0, 0x0) recvfrom$inet(r4, &(0x7f0000000080), 0xffffffffffffffa9, 0xc9100120, 0x0, 0x1500) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r1) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv4_newaddr={0x20, 0x14, 0x503, 0x70bd28, 0x0, {0x2, 0x18, 0x0, 0x0, r8}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50}, 0x0) 4.70869937s ago: executing program 4 (id=1185): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xd, 0xf}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r5) syz_emit_ethernet(0x2e, &(0x7f0000000000)={@link_local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x67, 0x0, 0x0, 0x11, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x3f}}, {0x0, 0xe21, 0xc, 0x0, @gue={{0x1, 0x1, 0x0, 0x2, 0x0, @void}}}}}}}, 0x0) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) r6 = socket$kcm(0x11, 0x3, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) r9 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x22d00, 0x0) ioctl$FS_IOC_FSGETXATTR(r9, 0x4004743d, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x1, &(0x7f0000000600)=0x0) io_submit(r11, 0x1, &(0x7f00000008c0)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x7fff, r10, &(0x7f0000000140)="b7", 0x1, 0x0, 0x0, 0x2}]) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) syz_usb_connect$uac1(0x3, 0x88, &(0x7f0000000340)=ANY=[@ANYBLOB="12010002000000108205eb004000010203010902760003010150d70904000000010100000a240102000a0002010209040100000102000009040101010102000009050109ff030b01050725010008ff7f0904020000010200000904020101010220000f2402020000000500ff5c4541cc3707240100fc00000905820940"], 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001300)=@newtfilter={0xe8c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r12, {0x1, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xe58, 0x2, [@TCA_MATCHALL_ACT={0xe54, 0x2, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x2, 0x9, 0x20000000, 0x6}, 0x1, 0xfb}, [{0x2, 0x9c, 0x81, 0x5, 0x2, 0x7}, {0x0, 0x6, 0x4, 0x10000, 0xfffffffd, 0x81}, {0x1, 0x1, 0x8, 0x101, 0x3}, {0x3, 0x3, 0x0, 0x7, 0x5, 0x4}, {0xf, 0x7, 0x9, 0x51, 0x8}, {0x3, 0x8004, 0xc, 0x101, 0x3, 0x84b5}, {0x9c, 0x4, 0x9, 0x2, 0x487, 0x8}, {0x1, 0x10000, 0x5, 0x4, 0x3, 0x8000}, {0x7, 0x9, 0x1ff, 0x8, 0x2, 0x7fff}, {0x439356e7, 0x609, 0x16, 0xfffffffc, 0x10000, 0x6}, {0x5, 0x3, 0x8, 0x3, 0x400000, 0xffffffff}, {0x5, 0x0, 0x7, 0x7, 0x8, 0x5}, {0x5, 0x1d4, 0x2, 0x5, 0xfffff000, 0x7}, {0x768d, 0xcd, 0x8, 0x7, 0x5, 0x9}, {0x1, 0xfffffffb, 0x6, 0x5, 0x7ff, 0x6}, {0x240, 0x6, 0xfffffffe, 0x6, 0x2}, {0xfffff9fd, 0x49, 0xa5f, 0xa, 0x5, 0x2}, {0x6, 0x9, 0x167, 0x2, 0x71, 0xa2}, {0x140, 0x2, 0xc, 0x8, 0x87}, {0x5, 0xa, 0x2, 0x4, 0x3, 0x2000}, {0x32d, 0x8, 0x7fff, 0x4, 0x8, 0x9}, {0x6, 0x200, 0x58fe, 0x7ff, 0x4, 0x3}, {0x101, 0xd, 0x101, 0x200001, 0x3, 0x8}, {0x0, 0x3, 0x1ff, 0x7437ec78, 0x2, 0x9}, {0xffffffff, 0x1, 0x9, 0x0, 0x1, 0x4}, {0xc, 0xe, 0x0, 0x3, 0x8, 0x81}, {0x3, 0x3, 0x6, 0xe, 0x0, 0x80}, {0xd, 0x0, 0x803, 0x0, 0x80000000, 0x2}, {0x4, 0xb, 0x6c5f1878, 0x57c4, 0x8, 0x25ff}, {0x4, 0xd, 0x1fadd976, 0x3071, 0x0, 0x1}, {0x5, 0x800, 0x3, 0x3, 0x3, 0x9}, {0x9, 0x1ff, 0x1000, 0x9c, 0x1, 0x5}, {0x9, 0xd76, 0x6, 0xdc2, 0xa16a, 0x2}, {0x1ff, 0x5, 0x7, 0x2, 0x2, 0x1}, {0x1, 0x32158140, 0x0, 0x8, 0x6, 0x7}, {0xb, 0x4, 0x9000, 0x5, 0x2, 0x7f}, {0x3, 0x2ec74d53, 0x0, 0x0, 0x8, 0x2}, {0x5, 0xfff, 0xffffff13, 0x6, 0x2, 0x6}, {0x1, 0x6, 0x3, 0x4, 0xffb, 0x8}, {0x6, 0x6, 0x1ff, 0x8, 0x7ff, 0x8001}, {0x4, 0xffffffff, 0x0, 0xfffff740, 0x4, 0x4}, {0xffff, 0x5, 0x7, 0xac, 0x8000000f}, {0x5, 0x3, 0x6, 0x1000, 0x4, 0x8001}, {0xd, 0x3, 0x80000000, 0x0, 0xffffff81, 0x7ff}, {0xfffffffb, 0x2, 0x1ff, 0x5d, 0xffff8001, 0x800000}, {0x9, 0x6, 0x7ffc, 0x9, 0x500}, {0x1, 0xffffffff, 0x834, 0x7, 0x0, 0x3}, {0x7fff, 0x6, 0x0, 0x2002, 0x2, 0x8}, {0xf61, 0x101, 0x9, 0x2, 0x80000000, 0x7fff}, {0xc7, 0x1, 0x8, 0x2, 0xffff, 0x20000000}, {0x0, 0x5, 0x1, 0xffff, 0x3, 0x3}, {0x8, 0x10001, 0x9f98, 0x1, 0x9, 0x66a}, {0xfff, 0x6, 0x8, 0xb2f3, 0x0, 0x7f}, {0x8, 0x6, 0x7f, 0x5, 0x3, 0xb}, {0x4, 0x4b, 0x0, 0x1, 0x7f, 0x7fffffff}, {0xfff, 0x47e4, 0x1, 0xffffffff, 0x80000001, 0x9}, {0x3, 0x2, 0x7, 0x6, 0x8, 0xe5}, {0x9, 0x9, 0x1, 0x9, 0x0, 0x2}, {0x8, 0x80000001, 0x7fff, 0xb2d9, 0xfffffffe, 0x8}, {0x80000001, 0x8, 0x5202, 0x2, 0x53ce, 0x3}, {0x6, 0x7, 0x8, 0x8, 0x7f, 0x80000000}, {0xfffffff9, 0x9, 0x6, 0x6, 0x9, 0x3}, {0xfffffffd, 0x8, 0x6, 0x5, 0x3, 0x8f}, {0x741, 0x0, 0x9, 0x7fffffff, 0x2, 0x200}, {0x401, 0x2, 0x8, 0x4, 0x4, 0xc6e9}, {0x200, 0x2d73, 0x400, 0x5, 0x9f17, 0xffffff7f}, {0x2, 0x401, 0x2b00, 0xfffff57b, 0xfffffc00, 0xd}, {0x3, 0x4, 0x80000001, 0x9, 0x5, 0x100}, {0x5, 0x4, 0x401, 0x0, 0x1, 0x9}, {0x8, 0x4, 0x1, 0x2, 0x10, 0x1}, {0xff, 0x8, 0x6, 0x5, 0xff, 0x5}, {0x2, 0xb15ce2d, 0x80000001, 0xbeab, 0x8, 0x5}, {0x3, 0x8, 0x3, 0x7, 0x8, 0x4}, {0xfff, 0x9, 0x6, 0x3, 0x100, 0x57}, {0x9, 0x5, 0x4, 0x3, 0xa, 0x2}, {0xb3, 0xe, 0x3, 0x7e8, 0x7, 0x9}, {0x400000ff, 0x7, 0x5, 0x10001, 0x6, 0x6}, {0x2, 0x8f, 0x9, 0xffffff46, 0x4, 0x88000000}, {0x9, 0x2, 0xfffffffc, 0x1, 0xd50, 0x61a6}, {0xd203, 0x7, 0x1, 0x10000, 0x43, 0x1ff}, {0x1004, 0x3ff, 0xffffffff, 0x1, 0x5, 0x100}, {0x1ff, 0x3, 0x7ff, 0xfffffff8, 0x1ff, 0xfffffffc}, {0x7, 0x9, 0x3ff, 0x1, 0x7, 0x7}, {0x0, 0x6, 0x0, 0x9, 0xffff0001, 0xcca}, {0x7, 0x1, 0xfffffff1, 0x3ff, 0x100, 0x4}, {0x3, 0x9, 0x0, 0xed4, 0x4, 0x6}, {0x9, 0x7, 0x8001, 0x7, 0x7, 0x2}, {0x3, 0xfff, 0x9, 0x5, 0xb5, 0x3}, {0x0, 0x1, 0x1, 0x5, 0xffffff01, 0xfff}, {0x7, 0x5, 0x2, 0xa5f, 0x0, 0xfffff9de}, {0x5, 0xffffffff, 0xe6b, 0xb, 0xb, 0x4}, {0x1d, 0xffffff10, 0x1, 0x2, 0xff, 0x52e2}, {0x0, 0x9, 0x0, 0x7, 0xdb, 0x5}, {0x7, 0x400, 0x9, 0x8, 0xa, 0x100}, {0x81, 0x5, 0x988, 0x0, 0x0, 0x7}, {0xdc03, 0x7, 0x402c, 0x8, 0xfffffff9, 0x2}, {0x2000a, 0xfffffffe, 0x1, 0x1ff, 0x1ff, 0xc1b7}, {0xa24b, 0x947d, 0x40, 0x4, 0x9, 0x2}, {0x9, 0x401, 0xa89, 0x5ef, 0x9, 0x8}, {0x4, 0x7fff, 0x0, 0x4, 0x7fffffff}, {0x3, 0xb8c, 0x6, 0x21761f6a, 0x1, 0x4}, {0xfff, 0xda, 0x1d, 0x4, 0x8, 0x2}, {0x8, 0x10, 0x100, 0x0, 0xfffffff7, 0xc}, {0xfffff000, 0x8, 0xe96, 0x9, 0x9, 0x34b0}, {0x4, 0x8, 0x8, 0x3, 0x6cf0, 0x1}, {0x3, 0x3, 0x7, 0x5, 0xbe, 0x81}, {0x4, 0x800, 0x4000, 0x5, 0x8, 0xfa2f}, {0x3, 0x8d, 0x81, 0x2, 0xd99d, 0x6}, {0x9, 0x1002002, 0x6, 0x4, 0xf, 0x5}, {0x100, 0x1, 0x2, 0xffffffff, 0x9, 0x74}, {0x4, 0x4, 0x8, 0x1, 0x0, 0x3}, {0x2, 0xfffffffb, 0xffffffff, 0x62f, 0x401, 0x30564e0}, {0x9a2f, 0x800, 0x8, 0x1, 0x7}, {0x20000009, 0x2, 0x800, 0x200, 0x9, 0x3}, {0x47, 0x6, 0x8936, 0xdcb, 0x8, 0x2}, {0x6, 0x80000000, 0x8, 0xe, 0xfffffffa, 0x8de3}, {0x0, 0x9, 0x8, 0xfff, 0x6, 0x1ff}, {0x8195, 0x2, 0x1000}, {0x1, 0x50, 0xff, 0x9e0f, 0x5, 0x6}, {0x7fff, 0x6, 0x0, 0x5, 0x8000, 0x3}, {0x4, 0x9, 0xa, 0x6, 0x7, 0xe77}, {0x1, 0x5e12, 0x3, 0xfffffffa, 0x2, 0x80000001}, {0xffffff8c, 0x2, 0x1, 0x1, 0x10, 0x5}, {0x6, 0x7, 0x104, 0x78d, 0xffffcff9, 0x9}, {0x1, 0xe, 0x7, 0x2, 0x2, 0x207f}, {0x10, 0x5, 0xfffffffa, 0xff, 0x80000, 0x3}, {0x1, 0x7ff, 0x696e, 0xa, 0x49d, 0xb}, {0x9bf4, 0x0, 0x5, 0x3, 0x3, 0x1000}], [{0x1, 0x1}, {0x2}, {0x5}, {0x2}, {0x2, 0x745e81639ff0f356}, {0x4, 0x1}, {0x5}, {0x3, 0x1}, {0x3}, {0x2}, {0x3}, {0x4}, {}, {0x2}, {0x2}, {}, {0x3, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x2}, {0x5}, {0x2}, {0x1, 0x1}, {0x1}, {0x1, 0x1}, {0x5}, {0x4}, {0x3, 0x1}, {0x5, 0x1}, {}, {0x4, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x5}, {0xa}, {0x3}, {0x3}, {0x2, 0x1}, {0x3}, {0x4, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x2}, {0x4}, {0x4, 0x1}, {0x4, 0x1}, {0x4}, {0x2}, {0x2, 0x1}, {0x5, 0x3}, {0x4, 0x1}, {0x1}, {0x4}, {0x0, 0x1}, {0x2}, {0x1, 0x1}, {0x3, 0x1}, {0x5}, {0x3, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {}, {0x2, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x3}, {0x6}, {0xa}, {0x3, 0x1}, {}, {0x2, 0x1}, {0x1}, {0x4}, {0x5}, {0x3}, {0x3, 0x1}, {0x4}, {0x0, 0x1}, {0x5, 0x1}, {0x6}, {0x2}, {0xb82e57098c7a44ef}, {0x3, 0x1}, {0x1}, {0x0, 0x1}, {0x5}, {0x4, 0x1}, {0x5}, {0x0, 0x1}, {0x4}, {0x4}, {0x0, 0x1}, {0x2}, {0x4, 0x1}, {0x1}, {0x1, 0x1}, {0x4}, {0x3}, {0x1}, {}, {0x4, 0x1}, {0x3}, {0x3}, {0x1}, {0x5}, {0x3, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {}, {0x4}, {0x4, 0x1}, {0x1}, {0x5, 0x1}, {0x4}, {0x0, 0x1}, {0x3}, {0x1}, {0x2, 0x1}, {0x4}], 0x1}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0xe8c}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$kcm(r6, &(0x7f0000002900)={&(0x7f0000000500)=@xdp={0x2c, 0x8, r4, 0x109}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000380)="da", 0x14}], 0x1}, 0x20000885) 3.249815531s ago: executing program 0 (id=1190): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000480)=ANY=[@ANYBLOB="400000000102010200000000000000000200000106000740000400002400018014000180080001"], 0x40}, 0x1, 0x0, 0x0, 0x20049804}, 0x200000c4) r1 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r1, 0xc1205531, &(0x7f0000000340)={0x0, 0x80006, 0x1, 0x2, '\x00', '\x00', '\x00', 0x7, 0x0, 0x2000100, 0x0, "a900"}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'\x00', 0x5}) ioctl$TUNSETPERSIST(r3, 0x400454c9, 0x7) ioctl$TUNSETPERSIST(r3, 0x400454cb, 0x1) ioctl$TUNSETPERSIST(r3, 0x400454cb, 0x0) syz_open_dev$usbfs(0x0, 0xd37, 0x10180) fstat(r1, &(0x7f0000000100)) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'macvlan0\x00', 0x0}) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x1b, &(0x7f0000000040), &(0x7f00000000c0)=0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r4, @ANYBLOB="00001700000000001c0037800b0001006970768a616e08000c0002800600010000000000050027"], 0x44}, 0x1, 0x0, 0x0, 0x4008010}, 0x0) r5 = socket(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f0000000000), 0x4000000000001f2, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) r6 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r6, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r6, 0x0) r7 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r7, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) recvfrom(r7, 0x0, 0x0, 0x10041, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000000)) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$sock_buf(r8, 0x1, 0x6, &(0x7f0000000740)=""/4096, &(0x7f0000000040)=0x1000) 2.67023905s ago: executing program 0 (id=1192): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB="240000000104010200000180002000000100000008000540efffffff0500010001"], 0x24}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)={0x24, 0x1, 0x4, 0x101, 0x0, 0x0, {0x5}, [@NFULA_CFG_CMD={0x5, 0x1, 0x2}, @NFULA_CFG_FLAGS={0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x31}, 0x20008888) open(&(0x7f00000000c0)='./file0\x00', 0x108242, 0x78e22799f4a46f8e) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) lsetxattr(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)=@known='security.apparmor\x00', 0x0, 0x0, 0x1) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="7b05000000000000611078000000000007060000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x3c) lgetxattr(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)=@known='security.apparmor\x00', 0x0, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e1f, @multicast1}, 0xfffffffffffffd6e) close_range(r1, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) rseq(&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x3}, 0x20, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) mlock2(&(0x7f0000549000/0x1000)=nil, 0x1000, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r2 = openat$pfkey(0xffffff9c, 0x0, 0x40400, 0x0) ioctl$UFFDIO_ZEROPAGE(r2, 0xc020aa04, &(0x7f0000000140)={{&(0x7f000087a000/0x2000)=nil, 0x2000}, 0x1}) syz_io_uring_setup(0x29d7, &(0x7f0000000540)={0x0, 0x8550, 0xc00, 0x1, 0x11, 0x0, r2}, 0x0, &(0x7f00000001c0), &(0x7f0000000080)) write$apparmor_exec(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="65c34c57e79e6bbae6c72d15d825e96163202e00"], 0x7) r3 = socket(0x1e, 0x1, 0x0) clock_gettime(0x0, &(0x7f00000002c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000001c0)={0x1, 0x8000000000000001, 0x8000000000000000, 0x8000, 0x2, 0x4f8a, 0x401, 0x8}, &(0x7f0000000200)={0x3, 0x7fffffffffffffff, 0x0, 0x100, 0x4, 0x2, 0x4, 0x2}, 0x0, &(0x7f0000000300)={r4, r5+60000000}, 0x0) sendmmsg$sock(r3, &(0x7f0000000600)=[{{&(0x7f0000000000)=@tipc=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1000000}}, {{&(0x7f0000000080)=@tipc=@name={0x1e, 0x2, 0x1, {{0x1, 0x4}, 0x10000000}}, 0x80, 0x0}}], 0x2, 0x0) 2.364778405s ago: executing program 4 (id=1194): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0xa, 0x204031, 0xffffffffffffffff, 0x42792000) r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x2000002, 0x1) syz_usb_disconnect(r0) openat$snapshot(0xffffff9c, &(0x7f0000000000), 0x400, 0x0) syz_usb_connect$uac3(0x5, 0x80, &(0x7f0000000500)=ANY=[], 0x0) ioctl$EVIOCRMFF(r0, 0x83c0550b, 0x0) 2.219361317s ago: executing program 1 (id=1195): r0 = socket$inet6(0xa, 0x3, 0x8) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000001440)={'bridge0\x00', 0x0}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_open_dev$I2C(0x0, 0x1, 0x50b003) ioctl$I2C_RDWR(r2, 0x707, 0x0) socket$kcm(0xa, 0x0, 0x87) r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0xa, 0x2) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000280)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f00000001c0)='dctcp', 0x5) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0xe, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0xa2}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x40000, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0x3, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x6, 0x6b7, 0x80, 0x0, 0x1, 0x91b1}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000400}, 0x24000000) sendto$inet(r4, &(0x7f0000000900)="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", 0x1a1, 0x12, 0x0, 0x0) recvfrom$inet(r4, &(0x7f0000000080), 0xffffffffffffffa9, 0xc9100120, 0x0, 0x1500) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r1) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv4_newaddr={0x20, 0x14, 0x503, 0x70bd28, 0x0, {0x2, 0x18, 0x0, 0x0, r8}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50}, 0x0) 2.118500955s ago: executing program 3 (id=1196): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="60000000100005040100000000000000000000000003000000000000000000000a00030076657468300000003400128009000100766574680000000024000280200001"], 0x60}}, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f00000001c0)='veno', 0x4) r0 = syz_io_uring_setup(0xd3a, &(0x7f0000000b00)={0x0, 0x2, 0x3010, 0x2, 0x3}, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f00000006c0)=@IORING_OP_TIMEOUT={0xb, 0x24, 0x0, 0x0, 0x21, &(0x7f00000001c0), 0x1, 0x40}) syz_io_uring_setup(0xf00, &(0x7f00000003c0)={0x0, 0x0, 0x1000, 0x1000000, 0x2a, 0x0, r0}, &(0x7f0000000380)=0x0, &(0x7f00000002c0), &(0x7f0000000080)) syz_ublk_add_dev(r0, r4, r2, r3, &(0x7f0000000540)={0x2e, 0xcb8045a30b577d09, 0x300, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x3, 0xc2f, 0x0, 0x0, 0x1000, 0xe, 0x0, 0x0, 0x108}}}, &(0x7f0000000340)) openat$binfmt(0xffffff9c, 0x0, 0x41, 0x1ff) timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x2}, &(0x7f0000000b80)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r5, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r6 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) preadv(r6, &(0x7f0000002740)=[{&(0x7f0000001540)=""/4096, 0x1000}], 0x20, 0x4, 0xa) fallocate(0xffffffffffffffff, 0x0, 0x2000, 0x18003) r7 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r9, 0x0, 0x0) setreuid(0xee00, r8) r10 = socket$netlink(0x10, 0x3, 0x4) writev(r10, &(0x7f0000000000)=[{&(0x7f0000000440)="580000001400192340834b80040d8c560a067fbc45ff810500400100070058000b480400945f640094272d7061d328b92d0000000000008000f0fffeffe809000000fff5dd00000010000100040808004149004001040800", 0x58}], 0x1) 1.995439618s ago: executing program 1 (id=1197): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9c0000001900000129bd7000fedbdf250a9f80defd01000000020000600016805c000200210a04050210050000000000000000000000000000000000fe8000000000000000000000000000aafe8000000000000000000000000000bb00000000000000000000000000000001fe8000000000000000000000000000bb08001700ff070000080006003d090000050014000700000008000300", @ANYRES32=0x0, @ANYBLOB="a478de8e1344190f685754088cff449bed3dffb13442883a4877dbea5a0a9eff2c73610eb3607f3eb90000000000000000000096a24cdc963b0c1b9d4f47b6a98b6763f38d94acca9ea6028781fda7b60d380a255ddbf80094807653a79f5dc75fa9957022403f02d11ebe7cb8c5300008892aa7b6059bc50a32ae584c3158972941fd4402a04cd4a8163403a76dcc5f1f78fab3709f1937b9d394d4c658b239120324ea760c8d8f564272b2b314c02915e152590fca6daa1ab7f39c2781b2082e8cc865fb62e06b2b0127307956e5e9d29c034210c8cc4ac1c2a20efb697cf8f4e4eddab11d5f0210cbbe1b"], 0x9c}, 0x1, 0x0, 0x0, 0x4}, 0x200008c1) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x40141, 0x0) ioctl$TIOCPKT(r1, 0x5420, &(0x7f0000000140)=0x3) ioctl$TIOCSSOFTCAR(r1, 0x541a, &(0x7f0000000040)=0x3) r2 = dup(r0) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000600)={'geneve1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_START_AP(r6, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f00000000c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010027bd7000fddbdf250f00000008000300", @ANYRES32=0x0, @ANYBLOB="28007f00bd06080211000001821a06050305000000ffffffffffff0694003889165d804400000000"], 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x20040000) setsockopt$packet_int(r3, 0x107, 0xb, &(0x7f0000000000)=0x40, 0x4) shmctl$IPC_RMID(0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) sendto$packet(r3, &(0x7f0000000040)="8a39604a9c52c429be837505a69f010a114530df1d5f040c5e5e7c14aa7054127e2732b42e397684e11a266399acef602b20ee5158e8e20f7f59c10cf7b3af545cbf69fa8b0b2128a80ff5fcf7a4e715176f48e99881354fd74142960c63ea49d7737f7272c1779d20a941361f3a3fc901024a1e11dc179c9c362b3196748c47272a981dfa9bbbd6e4b59aef0539e243bf609d37238abc4c8e6545669aef9d7228f6b606ab295917075c90687d62de1a1bc200"/190, 0xbe, 0x0, &(0x7f0000000540)={0xc9, 0x2, r4, 0x1, 0x9}, 0x12) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000180)={{'fd', 0x3d, r7}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) unshare(0x26020480) umount2(&(0x7f0000000080)='./file0\x00', 0x4) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000080)="5c00000013006bec9e3be35c6e17aa31076b876c1d0000007ea60864160af36507001ac00400000208000c00ba7d32beef0300010004000000eab556a705251e618294ff0051f6f383c9f4d4938037e786a6d0000300000000000200", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) write$UHID_INPUT(r2, &(0x7f0000001980)={0x9, {"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", 0x1000}}, 0x1006) r9 = syz_open_dev$dvb_frontend(&(0x7f00000002c0), 0x0, 0x40402) ioctl$FE_GET_PROPERTY(r9, 0x80086f53, &(0x7f0000000000)={0x3, &(0x7f0000000400)=[{0x8, '\x00', @data=0x8b, 0xffff16c8}, {0x41, '\x00', @buffer={"107daa325c86e611d4de6a61f1f6c501cad20e9710b73995706d5d37980bb86e", 0x20}, 0x7f}, {0x15, '\x00', @st={0x4, [{0x3, @svalue=0x101}, {0x2, @svalue=0x6}, {0x3, @svalue=0xffffffff80000000}, {0x3, @svalue=0x1}]}, 0x3}]}) setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f0000000180)={0x1, 0x1, 0x5, 0x6, @vifc_lcl_addr=@local, @loopback}, 0x10) 1.988994252s ago: executing program 2 (id=1198): openat$sequencer2(0xffffffffffffff9c, &(0x7f00000002c0), 0xde641, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000004c0)={0x1, 0x0, [{0x40000022, 0x0, 0x8000}]}) io_uring_setup(0x4835, &(0x7f0000000300)={0x0, 0x934e, 0x1000, 0x2, 0x4e}) openat$vicodec1(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_dev$vim2m(0x0, 0x3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x8c0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) fanotify_init(0x200, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) r3 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000400)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup(r8) syz_ublk_setup_queues(r9, r7, &(0x7f0000000180)={0x0, 0x101, 0x800, 0x103, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x2100, 0x10000004, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xa10b, 0x4, 0xfffffffe, 0x142, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf90e, 0x0, 0x0, 0x1f0, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8dd0, 0x0, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, 0x0, '\x00', {0x2, 0x0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x2, 0x0, 0x0, &(0x7f00000002c0)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) request_key(&(0x7f0000000200)='keyring\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f0000000280)='/dev/sequencer2\x00', 0xfffffffffffffffd) sendfile64(0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xc24) 1.911705015s ago: executing program 4 (id=1199): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090d2000000000f0ff000700000008000300", @ANYRES32=r2, @ANYBLOB="0800051d000000001400060076657468115f746f5f7465616d0000000400cc0008000500090000001400040073"], 0x58}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000400)=ANY=[@ANYBLOB="24000000ea5eab90b9c1d5cc267a64731fbb29caaef4c2f3ffb49aa8fbd0f1578f8950357d30f4661b0a436298e8d6abe0d9ca0fea84034f5ee305ea6eedd83b75ee1b2c621beefab8368f95ef784c5cc36bfda6670cb12277325232", @ANYRES16=r4, @ANYBLOB="05002cbd7000000000000600000008000300", @ANYRES32=r2, @ANYBLOB="0800050008000000"], 0x24}}, 0x40010) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) r6 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'ip_vti0\x00', 0x0}) prctl$PR_SET_NAME(0xf, &(0x7f0000000100)='\n\xa1&\xf2\nl\x01\xd335\xa4\xb9>L\xd6Z8\x987\xee\x83\x7ffn{\vM\xfe\x00\xca\x11@\xb5\x02\xbf\xf8*\x03Q\\*\xfapG8%}+(V\x8c\xa0\x8d\xdf\n\xe7\xcaJg\x8b\xc3\xafH\xf0\x1d\x82M\x9e \x88`3\xcd\xd9\xbcW\xfe\xa9\xaa\xdcxV?\xd9(\xcf\x86\xb5\xf92\x1c\x1a\xe5}\x1f\xfb\x96\x9e\xc7\ad\xd2;\x94\xe7\xea\xc0\x1ew\xeds;\xb3') sendto$packet(r5, &(0x7f0000000100)='O', 0x5c8, 0x0, &(0x7f0000000080)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @broadcast}, 0x14) 1.890025742s ago: executing program 0 (id=1200): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000100000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x10000) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[], 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x44, 0x2c, 0xf3f, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xb, 0xfff3}, {0x7, 0xfff3}, {0xb, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x14, 0x2, [@TCA_BASIC_EMATCHES={0x10, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8}, @TCA_EMATCH_TREE_LIST={0x4}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000001100000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a03000000000000000000050000000900010073797a30000000000900030073797a300000000008000c40000000032800048008000240000000120800014000000000140004"], 0xa4}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)={0x14, 0x21, 0x503, 0x0, 0x0, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x14008010) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) r2 = socket$inet6_sctp(0xa, 0x4, 0x84) r3 = socket$inet(0xa, 0x801, 0x84) connect$inet(r3, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r3, 0x8) r4 = accept4(r3, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000000)={0x9, 0x0, 0x5, 0xfbffffff}, 0x10) sendto$inet6(r4, &(0x7f0000000200)='x', 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f0000000180)={0x0, 0x2}, 0x8) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f00000003c0), 0x8) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f00000000c0)={0x0, 0x401, 0x3, 0x4, 0x9, 0x2}, &(0x7f0000000200)=0x14) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f0000000340)={r5, @in6={{0xa, 0x4e24, 0x4, @private0, 0x2}}}, &(0x7f0000000400)=0x84) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000280)={0x897, 0x1, 0x1e7}) r7 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FD_FRAMES(r7, 0x65, 0x5, &(0x7f0000000040)=0x1, 0x4) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000300)={'lo\x00', 0x0}) sendmsg$can_raw(r7, &(0x7f0000000000)={&(0x7f0000000580)={0x1d, r8}, 0x10, &(0x7f00000003c0)={&(0x7f0000000400)=@canfd={{0x4, 0x1, 0x1, 0x1}, 0x37, 0x2, 0x0, 0x0, "cca6f1e10194fd9304e8689818861d84be21875faed70061c5322a4ca458f0f2e584421bc2541407c3498de2c8afc31232034c834cdc4586231d4cd77cc6c6ad"}, 0x48}, 0x2, 0x0, 0x0, 0x20000004}, 0x10004010) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000111100000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a03000000000000000000050000000900010073797a300000000009"], 0xa4}}, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000000)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x3, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}], {0x14}}, 0x7c}, 0x1, 0x0, 0x0, 0x4c841}, 0x802) 1.665897049s ago: executing program 3 (id=1201): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) mkdirat(0xffffffffffffffff, 0x0, 0x1) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010025bd7000fcdbdf2503000000180001801400020073797a5f74756e00000000000000000005000200030000000500050000030000050003"], 0x44}, 0x1, 0x0, 0x0, 0x20009085}, 0x40040c4) 1.596559301s ago: executing program 4 (id=1202): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000480)=ANY=[@ANYBLOB="400000000102010200000000000000000200000106000740000400002400018014000180080001"], 0x40}, 0x1, 0x0, 0x0, 0x20049804}, 0x200000c4) r1 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'\x00', 0x5}) ioctl$TUNSETPERSIST(r3, 0x400454c9, 0x7) ioctl$TUNSETPERSIST(r3, 0x400454cb, 0x1) ioctl$TUNSETPERSIST(r3, 0x400454cb, 0x0) syz_open_dev$usbfs(0x0, 0xd37, 0x10180) fstat(r1, &(0x7f0000000100)) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'macvlan0\x00', 0x0}) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x1b, &(0x7f0000000040), &(0x7f00000000c0)=0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r4, @ANYBLOB="00001700000000001c0037800b0001006970768a616e08000c0002800600010000000000050027"], 0x44}, 0x1, 0x0, 0x0, 0x4008010}, 0x0) r5 = socket(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f0000000000), 0x4000000000001f2, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) r6 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r6, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r6, 0x0) r7 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r7, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) recvfrom(r7, 0x0, 0x0, 0x10041, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000000)) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$sock_buf(r8, 0x1, 0x6, &(0x7f0000000740)=""/4096, &(0x7f0000000040)=0x1000) 1.513913556s ago: executing program 0 (id=1203): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000000080)="e4195fa81ab26668348a75de6bf835b7d24af0eb8b5b0aaa16d6f051cf5c31a5c542e34dea73f3ba63bd6764cf6a0da7812143cab293248994784dc11e72eed43b9960e65918c65429a2fdd997849b0c47ef24fedd53f3c29acd44ccb677eba2ec0de25259b863ee9136b3863fe296c40c6fbfdebfcb111a90dea5aa48a7ef9b4801236df3fc7ba48d7653d0e6b000c565f7ea9199dea947db23777c8078a609870dd19c169db571d4", 0xa9, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback, 0x5}, 0x1c) r1 = fsopen(&(0x7f0000000240)='smb3\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f00000000c0)='ver\x00\x00', &(0x7f0000000000)='-\xf2B\xd3\xd1]\xc4\x85mB \x9a,\x03\xe9\x1e\xfb\x88\xd8g\x1f\xe2\xfaWy\xf8\x82\xe3\x8b\x05 2\"/\x9b\xad>\xe54Z \xd2\b\x00\x00\x00\x06Yc\xdfIGB\xb1*0\xd0\xe2\x91\x92\xe3\xd4V&\x03\x00c\xc6\x12\xbbk\xe5\xe5\xd3A\xedk!\x1dO\x8dw\xeb\xec\xd8\r\xe5\xeb\xb6z\x81\xaa\xbb\xf4\b\xaa\x89\x0f\"\xf5\xb0R\xe3L\xc6L\a\xf1\xb0\x1e\x04|Zu\bWG4\x0e\b&\xde\xba\xb2\x1d\xe1J5\xae\x9a{\xaa[G\r5\xd2\x19\x14H\x92\x98\x15#;\\\xd26\x84', 0x0) recvmmsg(r0, &(0x7f0000007f80)=[{{0x0, 0x0, 0x0}, 0x10000}], 0x1, 0x40000023, 0x0) landlock_restrict_self(0xffffffffffffffff, 0xc) 1.470629092s ago: executing program 3 (id=1204): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20000076) socket$netlink(0x10, 0x3, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$alg(0x26, 0x5, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0xb04, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) writev(r0, &(0x7f00000006c0)=[{0x0}, {0x0}, {&(0x7f0000000700)}], 0x3) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r5, r4, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x2100, 0x10000004, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1, 0xfffffffe, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x20200, 0x0, 0x1f0, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5880, 0x8200, 0x2, 0x367, 0x0, r0}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, r6, 0xc0107520, 0x0, 0x0, 0x0, 0x2000000, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) inotify_add_watch(0xffffffffffffffff, 0x0, 0x27000351) 1.132943915s ago: executing program 4 (id=1205): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) bind$can_j1939(r0, &(0x7f0000000100)={0x1d, r1, 0x102030405060708, {}, 0xfe}, 0x18) connect$can_j1939(r0, &(0x7f0000000180)={0x1d, r1, 0x0, {0x0, 0xee}, 0xff}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) r2 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000540)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$printer(r2, 0x0, &(0x7f0000000780)={0xfc78, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x20, 0x1, 0x1, 0x1}, 0x0}) removexattr(&(0x7f0000000180)='./cgroup.cpu/cgroup.procs\x00', &(0x7f00000001c0)=@known='system.posix_acl_access\x00') sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x8c, 0x0, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vlan0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'tunl0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'dvmrp1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'macsec0\x00'}]}, 0x8c}}, 0x90) syz_usb_control_io$cdc_ecm(r2, 0x0, &(0x7f0000000280)={0x1c, &(0x7f0000000140)=ANY=[], 0x0, 0x0}) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r3, 0x5b03, 0x0) 975.322703ms ago: executing program 1 (id=1206): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000c00), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000b80)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380), 0x106}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x6, &(0x7f0000000100), 0x111, 0x9}}, 0x20) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)}, {&(0x7f0000000100)="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", 0xff}], 0x2) 916.400915ms ago: executing program 1 (id=1207): r0 = socket$inet6(0xa, 0x3, 0x8) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000001440)={'bridge0\x00', 0x0}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_open_dev$I2C(0x0, 0x1, 0x50b003) ioctl$I2C_RDWR(r2, 0x707, 0x0) socket$kcm(0xa, 0x0, 0x87) r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0xa, 0x2) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000280)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f00000001c0)='dctcp', 0x5) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0xe, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0xa2}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x40000, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0x3, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x6, 0x6b7, 0x80, 0x0, 0x1, 0x91b1}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000400}, 0x24000000) sendto$inet(r4, &(0x7f0000000900)="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", 0x1a1, 0x12, 0x0, 0x0) recvfrom$inet(r4, &(0x7f0000000080), 0xffffffffffffffa9, 0xc9100120, 0x0, 0x1500) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r1) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv4_newaddr={0x20, 0x14, 0x503, 0x70bd28, 0x0, {0x2, 0x18, 0x0, 0x0, r8}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50}, 0x0) 834.641662ms ago: executing program 2 (id=1208): syz_80211_join_ibss(&(0x7f0000000040)='wlan1\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x1) (fail_nth: 25) 672.213569ms ago: executing program 1 (id=1209): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x4000, 0x1}, 0x10) (async) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x4000, 0x1}, 0x10) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x101801, 0x0) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x101801, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xfec00000, 0x1000, &(0x7f0000719000/0x1000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = syz_open_dev$loop(&(0x7f000000d940), 0x4, 0x40) ioctl$LOOP_GET_STATUS(r3, 0x4c03, 0x0) (async) ioctl$LOOP_GET_STATUS(r3, 0x4c03, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000005280)=@newtaction={0x48, 0x5a, 0x1, 0xfffffffc, 0x25dfdbfa, {0x2}, [{0x34, 0x1, [@m_skbedit={0x30, 0x1, 0x0, 0x0, {{0xc}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x3, 0x1}}}}]}]}, 0x48}}, 0x8080) 588.60472ms ago: executing program 3 (id=1210): socket$packet(0x11, 0xa, 0x300) syz_emit_ethernet(0x36, &(0x7f0000000180)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2, 0xf4ff}}}}}}, 0x0) 484.03541ms ago: executing program 0 (id=1211): mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'netdevsim0\x00', &(0x7f0000000400)=@ethtool_flash={0x51, 0x0, '.\x00'}}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20040800}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = memfd_create(&(0x7f0000000000)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x2) syz_usb_connect(0x2, 0x2d, &(0x7f0000000380)=ANY=[@ANYBLOB="120100000c9768405e0483020b9901e4020109021b000100000000090400ff0160291d000905", @ANYRES8=r4, @ANYBLOB="50a0"], 0x0) r5 = syz_open_dev$audion(&(0x7f00000002c0), 0x3, 0x1) write$P9_RVERSION(r5, &(0x7f0000002200)=ANY=[], 0xfffffcd9) close_range(r3, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f0000000040)={0x80}, 0x4) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x1, 0x5, &(0x7f0000000000)=0x1) r6 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_RUN(r6, 0xae80, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000300)={0x1, &(0x7f00000000c0)=[{0x3, 0x0, 0x0, 0x7ffc1ffb}]}) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000140)={{0x1, 0x1, 0x18, r2, {0x1}}, './file0\x00'}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) socket$packet(0x11, 0x3, 0x300) madvise(&(0x7f0000000000/0x600000)=nil, 0x600707, 0x18) 299.035563ms ago: executing program 2 (id=1212): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090d2000000000f0ff000700000008000300", @ANYRES32=r2, @ANYBLOB="0800051d000000001400060076657468115f746f5f7465616d0000000400cc0008000500090000001400040073"], 0x58}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000400)=ANY=[@ANYBLOB="24000000ea5eab90b9c1d5cc267a64731fbb29caaef4c2f3ffb49aa8fbd0f1578f8950357d30f4661b0a436298e8d6abe0d9ca0fea84034f5ee305ea6eedd83b75ee1b2c621beefab8368f95ef784c5cc36bfda6670cb12277325232", @ANYRES16=r4, @ANYBLOB="05002cbd7000000000000600000008000300", @ANYRES32=r2, @ANYBLOB="0800050008000000"], 0x24}}, 0x40010) r5 = socket$packet(0x11, 0x3, 0x300) r6 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'ip_vti0\x00', 0x0}) prctl$PR_SET_NAME(0xf, &(0x7f0000000100)='\n\xa1&\xf2\nl\x01\xd335\xa4\xb9>L\xd6Z8\x987\xee\x83\x7ffn{\vM\xfe\x00\xca\x11@\xb5\x02\xbf\xf8*\x03Q\\*\xfapG8%}+(V\x8c\xa0\x8d\xdf\n\xe7\xcaJg\x8b\xc3\xafH\xf0\x1d\x82M\x9e \x88`3\xcd\xd9\xbcW\xfe\xa9\xaa\xdcxV?\xd9(\xcf\x86\xb5\xf92\x1c\x1a\xe5}\x1f\xfb\x96\x9e\xc7\ad\xd2;\x94\xe7\xea\xc0\x1ew\xeds;\xb3') sendto$packet(r5, &(0x7f0000000100)='O', 0x5c8, 0x0, &(0x7f0000000080)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @broadcast}, 0x14) 224.166885ms ago: executing program 1 (id=1213): socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f00000003c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x4, 0x0, 0x806, 0x5, 0xffffffff}, 0x0) fcntl$notify(0xffffffffffffffff, 0x402, 0x5) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000060a0b0400000000000000000200fffe540004802800018007000100637400001c0002800800014000000002080002400000001405000300010000002800018007000100637400001c0002800800024000000011080004400000000c05000300010000000900010073797a30000000000900020073797a320000000014000000110001"], 0xa8}, 0x1, 0x0, 0x0, 0x840}, 0x0) close(r0) bpf$MAP_CREATE(0x1101000000000000, &(0x7f0000000540)=@base={0x5, 0x80, 0x1a00, 0xf7, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffe}, 0x50) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001300)=ANY=[@ANYBLOB="300000003f000701feffffff0093f300017c0000040042800c000180441086277c6f13000c0002"], 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 210.596865ms ago: executing program 3 (id=1214): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000003b40)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0xffffffd1, &(0x7f0000000840)={0x1, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000055090100000000009500000000000000b7020000000000007baaf8ff00000000b5090800000000007baaf0ff00000000bf8700000000000007070000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018280000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004600000076000000bf98000000000000b5080000000000008500000007000000ce0000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 53.567481ms ago: executing program 2 (id=1215): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1, 0x5, 0x9fd, 0x84, 0x105}, 0x50) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x6c, r0, 0x0, 0xc00}, 0x38) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb4b, 0x9, 0x8, 0x0, 0x400003}, 0x0) getdents(0xffffffffffffffff, &(0x7f0000000380)=""/55, 0x37) io_setup(0x7, &(0x7f0000000080)=0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) io_submit(r1, 0x1, &(0x7f0000001540)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x16, r2, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x3}]) r3 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x101000) ioctl$IOC_PR_REGISTER(r3, 0x401870c8, 0x0) setsockopt$sock_int(r2, 0x1, 0x7, &(0x7f0000000040)=0x9, 0x4) r4 = syz_clone(0x200, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) wait4(r4, 0x0, 0x80000000, &(0x7f0000000040)) r5 = syz_open_procfs(r4, &(0x7f0000000000)='net/fib_trie\x00') r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) ioctl$TUNSETQUEUE(r6, 0x400454d9, &(0x7f0000000480)={'veth1\x00', 0x400}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r7) socket$nl_route(0x10, 0x3, 0x0) r8 = syz_usb_connect(0x3, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040e60405000001010203010902200001010080320904000002080650000705810200020007050202"], 0x0) syz_usb_control_io$printer(r8, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r9 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201100100000008d80402f0000000000001090224000100002000092108001201222800090581032000000bfb"], 0x0) syz_usb_control_io$hid(r9, 0x0, 0x0) syz_usb_control_io(r9, &(0x7f0000000040)={0x2c, &(0x7f00000001c0)={0x0, 0x21, 0x28, {0x28, 0x11, "f70ba381030000000000000000cb4fdca0560f920d54f365c5b1d43ee44fbf6fc93f0808251f"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) wait4(r4, 0x0, 0x1, &(0x7f0000000140)) write$cgroup_int(r6, &(0x7f00000000c0)=0x7, 0x12) pread64(r5, &(0x7f0000000480)=""/154, 0x9a, 0xe4) 0s ago: executing program 3 (id=1216): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000b40)={0x14, 0x1a, 0x1, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r1, @ANYBLOB="2a003300d0000000080211000000080211000000fffffffffffff00f04"], 0x50}, 0x1, 0x0, 0x0, 0xc0}, 0x0) kernel console output (not intermixed with test programs): ed USB device number 41 using dummy_hcd [ 238.258823][ T8689] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 238.269232][ T8689] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 238.280977][ T5697] usbhid 5-1:0.0: can't add hid device: -32 [ 238.294275][ T5697] usbhid 5-1:0.0: probe with driver usbhid failed with error -32 [ 238.325386][ T5697] usb 5-1: USB disconnect, device number 43 [ 238.368084][ T10] usb 1-1: device descriptor read/64, error -71 [ 238.398472][ T8708] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3303861288 (422894244864 ns) > initial count (241705619456 ns). Using initial count to start timer. [ 238.608078][ T10] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 238.653468][ T8712] syzkaller1: entered promiscuous mode [ 238.668104][ T8712] syzkaller1: entered allmulticast mode [ 238.778044][ T10] usb 1-1: device descriptor read/64, error -71 [ 238.888496][ T10] usb usb1-port1: attempt power cycle [ 238.962818][ T8715] netlink: 9144 bytes leftover after parsing attributes in process `syz.3.939'. [ 239.199375][ T5675] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 239.238087][ T5697] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 239.248279][ T10] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 239.279561][ T10] usb 1-1: device descriptor read/8, error -71 [ 239.378174][ T5675] usb 5-1: Using ep0 maxpacket: 16 [ 239.399031][ T5675] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 239.409029][ T5697] usb 4-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 239.422133][ T5675] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 239.423907][ T5697] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 239.446812][ T5697] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 239.452388][ T5675] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 239.458303][ T5697] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 239.484026][ T5697] usb 4-1: config 0 descriptor?? [ 239.492701][ T5675] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 239.508125][ T5675] usb 5-1: Product: syz [ 239.518021][ T5675] usb 5-1: Manufacturer: syz [ 239.528248][ T5675] usb 5-1: SerialNumber: syz [ 239.538255][ T10] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 239.550429][ T5675] usb 5-1: config 0 descriptor?? [ 239.573011][ T5675] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 239.588123][ T10] usb 1-1: device descriptor read/8, error -71 [ 239.600390][ T5675] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class) [ 239.698422][ T10] usb usb1-port1: unable to enumerate USB device [ 239.731784][ T8715] team0: Port device vxlan0 added [ 239.738186][ T12] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 239.763905][ T12] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 239.764728][ T5697] usbhid 4-1:0.0: can't add hid device: -71 [ 239.774893][ T12] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 239.793557][ T12] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 239.800095][ T5697] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 239.833562][ T5697] usb 4-1: USB disconnect, device number 33 [ 239.914734][ T5728] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 239.931167][ T5728] usb 2-1: unit 3 not found! [ 240.054840][ T8720] netlink: 16 bytes leftover after parsing attributes in process `syz.1.942'. [ 240.076073][ T5728] usb 2-1: USB disconnect, device number 42 [ 240.155554][ T7180] udevd[7180]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 240.206373][ T8723] input: syz1 as /devices/virtual/input/input27 [ 240.215061][ T5675] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 240.222456][ T5675] em28xx 5-1:0.0: Config register raw data: 0xfffffffb [ 240.237917][ T5675] em28xx 5-1:0.0: AC97 chip type couldn't be determined [ 240.248712][ T5675] em28xx 5-1:0.0: No AC97 audio processor [ 240.414833][ T8731] netlink: 'syz.1.945': attribute type 11 has an invalid length. [ 240.567899][ T13] ip6_tunnel: syztnl0 xmit: Local address not yet configured! [ 240.725440][ T8742] netlink: 12 bytes leftover after parsing attributes in process `syz.1.948'. [ 240.735524][ T8742] netlink: 8 bytes leftover after parsing attributes in process `syz.1.948'. [ 240.761735][ T8742] tun0: tun_chr_ioctl cmd 1074025675 [ 240.770345][ T8742] tun0: persist enabled [ 240.783439][ T8742] netlink: 'syz.1.948': attribute type 1 has an invalid length. [ 240.794123][ T8742] netlink: 'syz.1.948': attribute type 2 has an invalid length. [ 240.818282][ T10] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 240.972969][ T8745] netlink: 28 bytes leftover after parsing attributes in process `syz.4.940'. [ 241.002046][ T10] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 241.058622][ T10] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 241.103536][ T10] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 241.161787][ T8750] netlink: 'syz.1.951': attribute type 21 has an invalid length. [ 241.165114][ T10] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 241.181996][ T10] usb 4-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 241.214181][ T8750] netlink: 132 bytes leftover after parsing attributes in process `syz.1.951'. [ 241.264907][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 241.319959][ T10] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 241.330255][ T10] usb 4-1: invalid MIDI out EP 0 [ 241.524953][ T8754] netlink: 12 bytes leftover after parsing attributes in process `syz.1.952'. [ 241.949644][ T8754] syzkaller1: entered promiscuous mode [ 241.959970][ T8754] syzkaller1: entered allmulticast mode [ 241.989806][ T10] snd-usb-audio 4-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 242.045578][ T5697] usb 5-1: USB disconnect, device number 44 [ 242.064686][ T5697] em28xx 5-1:0.0: Disconnecting em28xx [ 242.081699][ T29] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 242.115409][ T5697] em28xx: Freeing device [ 242.120212][ T5728] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 242.161981][ T8772] netlink: 9144 bytes leftover after parsing attributes in process `syz.4.956'. [ 242.248814][ T29] usb 3-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 242.261409][ T29] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE8, changing to 0x88 [ 242.284292][ T29] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 242.299027][ T29] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 242.309402][ T5728] usb 1-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 242.320129][ T29] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 242.338106][ T5728] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE8, changing to 0x88 [ 242.373583][ T5728] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 242.392562][ T29] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 242.405736][ T29] usb 3-1: Product: syz [ 242.411935][ T5728] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 242.424452][ T29] usb 3-1: Manufacturer: syz [ 242.431467][ T29] usb 3-1: SerialNumber: syz [ 242.437105][ T5728] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 242.455697][ T29] usb 3-1: config 0 descriptor?? [ 242.471340][ T29] iguanair 3-1:0.0: probe with driver iguanair failed with error -12 [ 242.497774][ T5728] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 242.508264][ T5697] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 242.541533][ T5728] usb 1-1: Product: syz [ 242.551945][ T5728] usb 1-1: Manufacturer: syz [ 242.562250][ T5728] usb 1-1: SerialNumber: syz [ 242.597351][ T5728] usb 1-1: config 0 descriptor?? [ 242.625721][ T5728] iguanair 1-1:0.0: probe with driver iguanair failed with error -12 [ 242.670550][ T5697] usb 5-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 242.697082][ T5697] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 242.706062][ T10] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 242.741392][ T5697] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 242.758949][ T5697] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 242.772936][ T10] hid-generic 0000:0000:0000.0016: hidraw0: HID v0.00 Device [syz1] on syz0 [ 242.811108][ T8779] udevd[8779]: failed to execute '/lib/udev/fido_id' 'fido_id': No such file or directory [ 242.821867][ T5697] usb 5-1: config 0 descriptor?? [ 243.039841][ T10] usb 1-1: USB disconnect, device number 45 [ 243.117366][ T5697] usbhid 5-1:0.0: can't add hid device: -71 [ 243.139858][ T5697] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 243.178624][ T5697] usb 5-1: USB disconnect, device number 45 [ 243.262236][ T5728] usb 3-1: USB disconnect, device number 43 [ 243.371760][ T8775] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 243.669211][ T8787] netlink: 'syz.1.958': attribute type 11 has an invalid length. [ 243.741517][ T8790] netlink: 12 bytes leftover after parsing attributes in process `syz.0.959'. [ 243.839613][ T8792] FAULT_INJECTION: forcing a failure. [ 243.839613][ T8792] name failslab, interval 1, probability 0, space 0, times 0 [ 243.839676][ T8790] netlink: 8 bytes leftover after parsing attributes in process `syz.0.959'. [ 243.876672][ T8792] CPU: 0 UID: 0 PID: 8792 Comm: syz.4.960 Tainted: G L syzkaller #0 PREEMPT(full) [ 243.876703][ T8792] Tainted: [L]=SOFTLOCKUP [ 243.876710][ T8792] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 243.876726][ T8792] Call Trace: [ 243.876733][ T8792] [ 243.876743][ T8792] dump_stack_lvl+0xe8/0x150 [ 243.876770][ T8792] should_fail_ex+0x410/0x560 [ 243.876793][ T8792] should_failslab+0xa8/0x100 [ 243.876817][ T8792] __kmalloc_noprof+0xfe/0x720 [ 243.876836][ T8792] ? pcpu_alloc_noprof+0xde2/0x1900 [ 243.876858][ T8792] ? fib_create_info+0x16fe/0x3170 [ 243.876875][ T8792] ? fib_create_info+0x16fe/0x3170 [ 243.878305][ T8792] fib_create_info+0x16fe/0x3170 [ 243.878442][ T8792] fib_table_insert+0xcb/0x1b10 [ 243.878474][ T8792] ? do_raw_spin_unlock+0xf5/0x200 [ 243.878499][ T8792] ? fib_new_table+0x39f/0x3f0 [ 243.878528][ T8792] inet_rtm_newroute+0x14f/0x250 [ 243.878555][ T8792] ? __local_bh_enable_ip+0xd6/0x140 [ 243.878576][ T8792] ? __dev_queue_xmit+0x29b/0x3820 [ 243.878605][ T8792] ? __pfx_inet_rtm_newroute+0x10/0x10 [ 243.878653][ T8792] ? __pfx_inet_rtm_newroute+0x10/0x10 [ 243.878681][ T8792] rtnetlink_rcv_msg+0x802/0xc00 [ 243.878708][ T8792] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 243.878730][ T8792] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 243.878748][ T8792] ? ref_tracker_free+0x689/0x830 [ 243.878776][ T8792] ? __pfx_ref_tracker_free+0x10/0x10 [ 243.878801][ T8792] ? __asan_memcpy+0x40/0x70 [ 243.878822][ T8792] ? __skb_clone+0x5c/0x6c0 [ 243.878848][ T8792] netlink_rcv_skb+0x226/0x4a0 [ 243.878872][ T8792] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 243.878893][ T8792] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 243.878926][ T8792] ? netlink_deliver_tap+0x2e/0x1b0 [ 243.878953][ T8792] ? netlink_deliver_tap+0x2e/0x1b0 [ 243.878986][ T8792] netlink_unicast+0x7bd/0x940 [ 243.879022][ T8792] netlink_sendmsg+0x813/0xb40 [ 243.879059][ T8792] ? __pfx_netlink_sendmsg+0x10/0x10 [ 243.879090][ T8792] ? aa_sock_msg_perm+0xf6/0x1c0 [ 243.879121][ T8792] ? __pfx_netlink_sendmsg+0x10/0x10 [ 243.879148][ T8792] sock_sendmsg_nosec+0x13a/0x180 [ 243.879171][ T8792] ____sys_sendmsg+0x54e/0x850 [ 243.879203][ T8792] ? __pfx_____sys_sendmsg+0x10/0x10 [ 243.879244][ T8792] ___sys_sendmsg+0x2a5/0x360 [ 243.879269][ T8792] ? __lock_acquire+0x683/0x2cf0 [ 243.879301][ T8792] ? __pfx____sys_sendmsg+0x10/0x10 [ 243.879326][ T8792] ? get_pid_task+0x20/0x1f0 [ 243.879404][ T8792] ? get_pid_task+0x20/0x1f0 [ 243.879428][ T8792] ? get_pid_task+0x20/0x1f0 [ 243.879484][ T8792] ? __fget_files+0x2a/0x420 [ 243.879509][ T8792] ? __fget_files+0x3a2/0x420 [ 243.879545][ T8792] __sys_sendmsg+0x177/0x240 [ 243.879573][ T8792] ? __pfx___sys_sendmsg+0x10/0x10 [ 243.879617][ T8792] __do_fast_syscall_32+0x27a/0x6a0 [ 243.879641][ T8792] ? do_fast_syscall_32+0x33/0x70 [ 243.879660][ T8792] ? asm_int80_emulation+0x1a/0x20 [ 243.879679][ T8792] ? do_int80_emulation+0x299/0x500 [ 243.879698][ T8792] ? trace_irq_disable+0x3b/0x140 [ 243.879728][ T8792] do_fast_syscall_32+0x33/0x70 [ 243.879749][ T8792] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 243.879773][ T8792] RIP: 0023:0xf701f0ec [ 243.879791][ T8792] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 243.879808][ T8792] RSP: 002b:00000000f540d50c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 243.879829][ T8792] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000000 [ 243.879932][ T8792] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 243.879944][ T8792] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 243.879955][ T8792] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 243.879967][ T8792] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 243.879996][ T8792] [ 244.493062][ T5728] usb 4-1: USB disconnect, device number 34 [ 244.514429][ T8797] tun0: tun_chr_ioctl cmd 1074025675 [ 244.528815][ T8797] tun0: persist enabled [ 244.533438][ T8793] netlink: 'syz.0.959': attribute type 1 has an invalid length. [ 244.543722][ T8793] netlink: 'syz.0.959': attribute type 2 has an invalid length. [ 244.628412][ C0] ip6_tunnel: syztnl0 xmit: Local address not yet configured! [ 244.668123][ T10] usb 3-1: new full-speed USB device number 44 using dummy_hcd [ 244.808676][ T10] usb 3-1: device descriptor read/64, error -71 [ 244.969061][ T5728] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 244.998912][ T9] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 245.058177][ T10] usb 3-1: new full-speed USB device number 45 using dummy_hcd [ 245.128917][ T5728] usb 4-1: New USB device found, idVendor=0425, idProduct=0000, bcdDevice= 0.00 [ 245.142168][ T5728] usb 4-1: no configurations [ 245.150575][ T5728] usb 4-1: can't read configurations, error -22 [ 245.158113][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 245.164772][ T9] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 245.176085][ T9] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 245.189986][ T10] usb 3-1: device descriptor read/64, error -71 [ 245.197162][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 245.198116][ T5697] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 245.212639][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.226128][ T9] usb 1-1: Product: syz [ 245.231233][ T9] usb 1-1: Manufacturer: syz [ 245.236027][ T9] usb 1-1: SerialNumber: syz [ 245.244051][ T9] usb 1-1: config 0 descriptor?? [ 245.255903][ T9] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 245.278027][ T9] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 245.288586][ T5728] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 245.310220][ T10] usb usb3-port1: attempt power cycle [ 245.334011][ T8814] netlink: 4 bytes leftover after parsing attributes in process `syz.1.969'. [ 245.381603][ T5697] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 245.394266][ T5697] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 245.409251][ T5697] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 245.419877][ T5697] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 245.440692][ T5697] usb 5-1: config 0 descriptor?? [ 245.470996][ T5728] usb 4-1: New USB device found, idVendor=0425, idProduct=0000, bcdDevice= 0.00 [ 245.498380][ T5728] usb 4-1: no configurations [ 245.503572][ T5728] usb 4-1: can't read configurations, error -22 [ 245.525857][ T5728] usb usb4-port1: attempt power cycle [ 245.648060][ T10] usb 3-1: new full-speed USB device number 46 using dummy_hcd [ 245.690106][ T10] usb 3-1: device descriptor read/8, error -71 [ 245.872220][ T9] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 245.880962][ T9] em28xx 1-1:0.0: Config register raw data: 0xfffffffb [ 245.888114][ T5728] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 245.916222][ T9] em28xx 1-1:0.0: AC97 chip type couldn't be determined [ 245.917031][ T5728] usb 4-1: New USB device found, idVendor=0425, idProduct=0000, bcdDevice= 0.00 [ 245.938849][ T5697] pyra 0003:1E7D:2CF6.0017: unknown main item tag 0x0 [ 245.945948][ T5697] pyra 0003:1E7D:2CF6.0017: unknown main item tag 0x0 [ 245.947598][ T10] usb 3-1: new full-speed USB device number 47 using dummy_hcd [ 245.960491][ T5728] usb 4-1: no configurations [ 245.960513][ T5728] usb 4-1: can't read configurations, error -22 [ 245.961437][ T5697] pyra 0003:1E7D:2CF6.0017: item fetching failed at offset 2/7 [ 245.977307][ T9] em28xx 1-1:0.0: No AC97 audio processor [ 245.981689][ T5697] pyra 0003:1E7D:2CF6.0017: parse failed [ 245.993140][ T5697] pyra 0003:1E7D:2CF6.0017: probe with driver pyra failed with error -22 [ 246.018832][ T10] usb 3-1: device descriptor read/8, error -71 [ 246.085795][ T9] usb 5-1: USB disconnect, device number 46 [ 246.088061][ T5728] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 246.139763][ T5728] usb 4-1: New USB device found, idVendor=0425, idProduct=0000, bcdDevice= 0.00 [ 246.148646][ T10] usb usb3-port1: unable to enumerate USB device [ 246.168047][ T5728] usb 4-1: no configurations [ 246.175126][ T5728] usb 4-1: can't read configurations, error -22 [ 246.191500][ T5728] usb usb4-port1: unable to enumerate USB device [ 246.323109][ T8824] netlink: 9144 bytes leftover after parsing attributes in process `syz.1.971'. [ 246.643503][ T8825] netlink: 28 bytes leftover after parsing attributes in process `syz.0.966'. [ 246.909241][ T10] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 246.935914][ T5728] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 246.962866][ T5728] hid-generic 0000:0000:0000.0018: hidraw0: HID v0.00 Device [syz1] on syz0 [ 246.977104][ T8834] udevd[8834]: failed to execute '/lib/udev/fido_id' 'fido_id': No such file or directory [ 247.069087][ T10] usb 5-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 247.081096][ T10] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE8, changing to 0x88 [ 247.094603][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 247.107522][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 247.119028][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 247.132835][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 247.141980][ T10] usb 5-1: Product: syz [ 247.146175][ T10] usb 5-1: Manufacturer: syz [ 247.151118][ T10] usb 5-1: SerialNumber: syz [ 247.160337][ T10] usb 5-1: config 0 descriptor?? [ 247.171791][ T10] iguanair 5-1:0.0: probe with driver iguanair failed with error -12 [ 247.175158][ T8835] netlink: 20 bytes leftover after parsing attributes in process `syz.1.974'. [ 247.443013][ T8838] netlink: 'syz.2.975': attribute type 11 has an invalid length. [ 247.524498][ T8838] 8021q: adding VLAN 0 to HW filter on device bond0 [ 247.542845][ T8838] 8021q: adding VLAN 0 to HW filter on device team0 [ 247.555502][ T8838] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 247.610178][ T5675] usb 5-1: USB disconnect, device number 47 [ 247.643263][ T8838] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 247.666476][ T8838] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 247.682352][ T8838] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 247.705802][ T8838] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 247.726274][ T8838] veth1_vlan: left promiscuous mode [ 247.756387][ T8838] veth0_vlan: left promiscuous mode [ 247.771188][ T5683] usb 1-1: USB disconnect, device number 46 [ 247.788869][ T8838] veth0_vlan: entered promiscuous mode [ 247.802594][ T5683] em28xx 1-1:0.0: Disconnecting em28xx [ 247.847402][ T8838] veth1_vlan: entered promiscuous mode [ 247.854056][ T5683] em28xx: Freeing device [ 247.910113][ T8838] veth1_macvtap: left promiscuous mode [ 247.958736][ T8838] veth0_macvtap: left promiscuous mode [ 247.987873][ T8838] veth0_macvtap: entered promiscuous mode [ 248.019061][ T8838] veth1_macvtap: entered promiscuous mode [ 248.064079][ T8838] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 248.120413][ T8838] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 248.142897][ T8838] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 248.169985][ T8838] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 248.220977][ T8838] 8021q: adding VLAN 0 to HW filter on device bond1 [ 248.250934][ T8838] 8021q: adding VLAN 0 to HW filter on device bond2 [ 248.326548][ T8838] 8021q: adding VLAN 0 to HW filter on device bond3 [ 248.380691][ T63] bridge0: port 1(bridge_slave_0) entered blocking state [ 248.387893][ T63] bridge0: port 1(bridge_slave_0) entered forwarding state [ 248.430824][ T63] bridge0: port 2(bridge_slave_1) entered blocking state [ 248.438341][ T63] bridge0: port 2(bridge_slave_1) entered forwarding state [ 248.515697][ T63] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 248.524792][ T63] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.576865][ T8862] netlink: 12 bytes leftover after parsing attributes in process `syz.2.981'. [ 248.589563][ T8862] netlink: 8 bytes leftover after parsing attributes in process `syz.2.981'. [ 248.701760][ T8862] tun0: tun_chr_ioctl cmd 1074025675 [ 248.721216][ T8862] tun0: persist disabled [ 248.731139][ T8862] netlink: 'syz.2.981': attribute type 1 has an invalid length. [ 248.742828][ T8862] netlink: 'syz.2.981': attribute type 2 has an invalid length. [ 248.759100][ T1171] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 248.773767][ T1171] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.788878][ T1171] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 248.800801][ T1171] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.828147][ T63] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 248.849246][ T63] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.180854][ T9] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 249.224489][ T9] hid-generic 0000:0000:0000.0019: hidraw0: HID v0.00 Device [syz1] on syz0 [ 249.274876][ T8884] udevd[8884]: failed to execute '/lib/udev/fido_id' 'fido_id': No such file or directory [ 249.374910][ T8885] ALSA: mixer_oss: invalid OSS volume '' [ 249.378631][ T5728] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 249.448192][ T5697] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 249.548115][ T5728] usb 4-1: Using ep0 maxpacket: 16 [ 249.562315][ T5728] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 249.596335][ T5728] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 249.611687][ T5697] usb 3-1: Using ep0 maxpacket: 32 [ 249.622711][ T5728] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 249.623543][ T5697] usb 3-1: New USB device found, idVendor=090c, idProduct=1132, bcdDevice=5c.3f [ 249.652064][ T5728] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 249.660333][ T5728] usb 4-1: Product: syz [ 249.664540][ T5728] usb 4-1: Manufacturer: syz [ 249.669821][ T5728] usb 4-1: SerialNumber: syz [ 249.676281][ T5697] usb 3-1: config 12 has an invalid interface number: 179 but max is 3 [ 249.693603][ T5697] usb 3-1: config 12 has an invalid interface number: 74 but max is 3 [ 249.702208][ T5728] usb 4-1: config 0 descriptor?? [ 249.707443][ T5697] usb 3-1: config 12 has an invalid interface number: 63 but max is 3 [ 249.720707][ T5728] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 249.730328][ T5728] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 249.737135][ T8893] netlink: 20 bytes leftover after parsing attributes in process `syz.1.987'. [ 249.737417][ T5697] usb 3-1: config 12 has an invalid interface number: 205 but max is 3 [ 249.757037][ T5697] usb 3-1: config 12 has no interface number 0 [ 249.763693][ T5697] usb 3-1: config 12 has no interface number 1 [ 249.770159][ T5697] usb 3-1: config 12 has no interface number 2 [ 249.776451][ T5697] usb 3-1: config 12 has no interface number 3 [ 249.782884][ T5697] usb 3-1: config 12 interface 179 altsetting 4 has a duplicate endpoint with address 0xB, skipping [ 249.788200][ T9] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 249.796305][ T5697] usb 3-1: config 12 interface 179 altsetting 4 endpoint 0x9 has invalid maxpacket 1023, setting to 64 [ 249.817057][ T5697] usb 3-1: config 12 interface 179 altsetting 4 has a duplicate endpoint with address 0xB, skipping [ 249.830484][ T5697] usb 3-1: config 12 interface 179 altsetting 4 has a duplicate endpoint with address 0xE, skipping [ 249.842250][ T5697] usb 3-1: config 12 interface 179 altsetting 4 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 249.853565][ T5697] usb 3-1: config 12 interface 179 altsetting 4 has a duplicate endpoint with address 0x9, skipping [ 249.864409][ T5697] usb 3-1: config 12 interface 179 altsetting 4 has a duplicate endpoint with address 0x3, skipping [ 249.875645][ T5697] usb 3-1: config 12 interface 179 altsetting 4 bulk endpoint 0x8 has invalid maxpacket 16 [ 249.878103][ T5675] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 249.886275][ T5697] usb 3-1: config 12 interface 74 altsetting 3 has a duplicate endpoint with address 0x3, skipping [ 249.906587][ T5697] usb 3-1: config 12 interface 74 altsetting 3 endpoint 0x1 has invalid wMaxPacketSize 0 [ 249.920236][ T5697] usb 3-1: config 12 interface 74 altsetting 3 has an invalid descriptor for endpoint zero, skipping [ 249.931910][ T5697] usb 3-1: config 12 interface 74 altsetting 3 endpoint 0xC has invalid maxpacket 1024, setting to 64 [ 249.944199][ T5697] usb 3-1: config 12 interface 74 altsetting 3 has an invalid descriptor for endpoint zero, skipping [ 249.955008][ T9] usb 1-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 249.955581][ T5697] usb 3-1: config 12 interface 74 altsetting 3 has a duplicate endpoint with address 0xB, skipping [ 249.979216][ T5697] usb 3-1: config 12 interface 74 altsetting 3 has a duplicate endpoint with address 0x9, skipping [ 249.979364][ T9] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE8, changing to 0x88 [ 249.999558][ T5697] usb 3-1: config 12 interface 74 altsetting 3 has a duplicate endpoint with address 0xB, skipping [ 250.008683][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 250.018756][ T5697] usb 3-1: config 12 interface 74 altsetting 3 has a duplicate endpoint with address 0xD, skipping [ 250.029381][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 250.041798][ T5697] usb 3-1: config 12 interface 74 altsetting 3 has a duplicate endpoint with address 0xB, skipping [ 250.050272][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 250.061435][ T5697] usb 3-1: config 12 interface 74 altsetting 3 endpoint 0x2 has invalid maxpacket 1023, setting to 64 [ 250.070832][ T5675] usb 5-1: New USB device found, idVendor=0425, idProduct=0000, bcdDevice= 0.00 [ 250.082359][ T5697] usb 3-1: config 12 interface 74 altsetting 3 has a duplicate endpoint with address 0x8, skipping [ 250.110387][ T5697] usb 3-1: config 12 interface 74 altsetting 3 has a duplicate endpoint with address 0x3, skipping [ 250.110536][ T5675] usb 5-1: no configurations [ 250.123599][ T5697] usb 3-1: config 12 interface 74 altsetting 3 has a duplicate endpoint with address 0xB, skipping [ 250.138968][ T5675] usb 5-1: can't read configurations, error -22 [ 250.139628][ T5697] usb 3-1: config 12 interface 74 altsetting 3 has a duplicate endpoint with address 0xE, skipping [ 250.151729][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 250.161719][ T5697] usb 3-1: config 12 interface 63 altsetting 11 has a duplicate endpoint with address 0xB, skipping [ 250.176991][ T5697] usb 3-1: config 12 interface 63 altsetting 11 has a duplicate endpoint with address 0x3, skipping [ 250.178449][ T9] usb 1-1: Product: syz [ 250.188657][ T5697] usb 3-1: config 12 interface 63 altsetting 11 has a duplicate endpoint with address 0xD, skipping [ 250.205435][ T5697] usb 3-1: config 12 interface 63 altsetting 11 has a duplicate endpoint with address 0x1, skipping [ 250.208071][ T9] usb 1-1: Manufacturer: syz [ 250.222734][ T5697] usb 3-1: config 12 interface 63 altsetting 11 has a duplicate endpoint with address 0x6, skipping [ 250.231301][ T9] usb 1-1: SerialNumber: syz [ 250.248935][ T5697] usb 3-1: config 12 interface 63 altsetting 11 has a duplicate endpoint with address 0x6, skipping [ 250.263832][ T5697] usb 3-1: config 12 interface 63 altsetting 11 has a duplicate endpoint with address 0xE, skipping [ 250.265236][ T9] usb 1-1: config 0 descriptor?? [ 250.280246][ T5697] usb 3-1: config 12 interface 63 altsetting 11 has a duplicate endpoint with address 0x9, skipping [ 250.288125][ T5675] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 250.292875][ T5697] usb 3-1: config 12 interface 179 has no altsetting 0 [ 250.309222][ T5697] usb 3-1: config 12 interface 74 has no altsetting 0 [ 250.314152][ T9] iguanair 1-1:0.0: probe with driver iguanair failed with error -12 [ 250.316164][ T5697] usb 3-1: config 12 interface 63 has no altsetting 0 [ 250.352486][ T5728] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 250.367618][ T5728] em28xx 4-1:0.0: Config register raw data: 0xfffffffb [ 250.376513][ T5728] em28xx 4-1:0.0: AC97 chip type couldn't be determined [ 250.385247][ T5728] em28xx 4-1:0.0: No AC97 audio processor [ 250.400201][ T5697] usb 3-1: config 12 interface 205 has no altsetting 0 [ 250.413617][ T5697] usb 3-1: Dual-Role OTG device on HNP port [ 250.422851][ T5697] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 250.432902][ T5697] usb 3-1: Product: 露妳벉ì à·²í‚ˆâŒ´í¦ï±›î­¦çš›ï¸›åƒ˜å±¹ì¾¾â¥êž”쓃ᡂ阷ꓳì‡î„«é—¦æ¿Ÿí‘Ȣ晀≖븿êºá·”㓱㛠쪤蜭좄䗯á®å‚—⩸댷ℵé¼ê‘˜ã£êŽ¢ï¨â—˜Ú–롲踙è²ä…„â¡å±€æµç–°è£œã°†ï‡ªï´ªäœ»ç’¶âˆ°æ»¾ïƒ‚춸୨é¡ê‹ åž»ê‡•à¹íŸªè†¯æ”®éƒ®å¤“깽✆徑ﮮê쓷밷é㵀龓೪౥﫡톂ä‡äµƒëŽ å†¯ë´¤î”‹ëµ‚ [ 250.458860][ T5675] usb 5-1: New USB device found, idVendor=0425, idProduct=0000, bcdDevice= 0.00 [ 250.476391][ T5697] usb 3-1: Manufacturer: í¶ë”©ìŠå‰³í„Šï’…ãŽî·í˜·â²»åŒ·ì«‰è”³æ¿¢áŽ­è“´ì ©à¿¤í‹²ã«žè¿’虣ᰇ颠嫂âºæ¶¦ã Ží’´å¡Žì»„鵅ﲞ細ê‚幄拖ì˜âª¥â¨‹âœè¨–ⓖິ蜲䶧뽷 [ 250.476492][ T5697] usb 3-1: SerialNumber: ﷺ艎씚ࢲ醛ⵠⰱ僭ᲆ喛뿯눑넃ꜯ૥à³ï¬ë™Ÿì†ƒâ‹šã­Žæ±–䅽ಯ⫶䵷맙랫턹ኻ妔谈衫垱︖갯㸘î³æšâ®’䟨Þ쟻嚛䘇ꥃì‰ä­©åŠµì³›à«žï•‰èž¾í‰ì˜°æ„µé¾©î„¥ç­â˜–à¢¦î„„è©¦ï©‡îˆ [ 250.484160][ T8883] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 250.528989][ T5675] usb 5-1: no configurations [ 250.534951][ T5675] usb 5-1: can't read configurations, error -22 [ 250.544573][ T5675] usb usb5-port1: attempt power cycle [ 250.572425][ T8898] netlink: 12 bytes leftover after parsing attributes in process `syz.1.994'. [ 250.590417][ T8898] netlink: 8 bytes leftover after parsing attributes in process `syz.1.994'. [ 250.617677][ T8898] tun1: tun_chr_ioctl cmd 1074025675 [ 250.623428][ T8898] tun1: persist disabled [ 250.643607][ T8898] netlink: 'syz.1.994': attribute type 1 has an invalid length. [ 250.652144][ T8898] netlink: 'syz.1.994': attribute type 2 has an invalid length. [ 250.814587][ T10] usb 1-1: USB disconnect, device number 47 [ 250.853700][ T5697] usb-storage 3-1:12.179: USB Mass Storage device detected [ 250.888166][ T5675] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 250.912618][ T5697] usb-storage 3-1:12.179: Quirks match for vid 090c pid 1132: 10 [ 250.922414][ T5675] usb 5-1: New USB device found, idVendor=0425, idProduct=0000, bcdDevice= 0.00 [ 250.931715][ T5675] usb 5-1: no configurations [ 250.936341][ T5675] usb 5-1: can't read configurations, error -22 [ 250.996236][ T5697] usb-storage 3-1:12.74: USB Mass Storage device detected [ 251.013056][ T5697] usb-storage 3-1:12.74: Quirks match for vid 090c pid 1132: 10 [ 251.081619][ T5675] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 251.085373][ T5697] usb-storage 3-1:12.63: USB Mass Storage device detected [ 251.107411][ T8909] netlink: 28 bytes leftover after parsing attributes in process `syz.3.986'. [ 251.121955][ T5697] usb-storage 3-1:12.63: Quirks match for vid 090c pid 1132: 10 [ 251.130720][ T5675] usb 5-1: New USB device found, idVendor=0425, idProduct=0000, bcdDevice= 0.00 [ 251.130764][ T5675] usb 5-1: no configurations [ 251.130777][ T5675] usb 5-1: can't read configurations, error -22 [ 251.131255][ T5675] usb usb5-port1: unable to enumerate USB device [ 251.216824][ T5697] usb-storage 3-1:12.205: USB Mass Storage device detected [ 251.245851][ T5697] usb-storage 3-1:12.205: Quirks match for vid 090c pid 1132: 10 [ 251.319096][ T5697] usb 3-1: USB disconnect, device number 48 [ 252.211212][ T5675] usb 4-1: USB disconnect, device number 39 [ 252.230507][ T5675] em28xx 4-1:0.0: Disconnecting em28xx [ 252.255993][ T5675] em28xx: Freeing device [ 252.753198][ T9] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 252.795454][ T9] hid-generic 0000:0000:0000.001A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 252.809761][ T8943] udevd[8943]: failed to execute '/lib/udev/fido_id' 'fido_id': No such file or directory [ 253.028395][ T5675] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 253.108322][ C0] ip6_tunnel: syztnl0 xmit: Local address not yet configured! [ 253.154891][ T8944] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1004'. [ 253.208057][ T5675] usb 1-1: Using ep0 maxpacket: 32 [ 253.214076][ T5675] usb 1-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 253.245503][ T5675] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 253.254047][ T5675] usb 1-1: Product: syz [ 253.264130][ T5675] usb 1-1: Manufacturer: syz [ 253.274900][ T5675] usb 1-1: SerialNumber: syz [ 253.293827][ T5675] usb 1-1: config 0 descriptor?? [ 253.313524][ T5675] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 253.498312][ T5697] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 253.572502][ T8950] netlink: 'syz.4.1008': attribute type 13 has an invalid length. [ 253.669972][ T5697] usb 2-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 253.692104][ T5697] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE8, changing to 0x88 [ 253.711261][ T5697] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 253.723476][ T5697] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 253.733991][ T5697] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 253.752094][ T5697] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 253.768304][ T5697] usb 2-1: Product: syz [ 253.775029][ T5697] usb 2-1: Manufacturer: syz [ 253.788417][ T5697] usb 2-1: SerialNumber: syz [ 253.803647][ T5697] usb 2-1: config 0 descriptor?? [ 253.814547][ T8957] syzkaller0: entered promiscuous mode [ 253.824438][ T5697] iguanair 2-1:0.0: probe with driver iguanair failed with error -12 [ 253.834266][ T8957] syzkaller0: entered allmulticast mode [ 253.872279][ T8950] tipc: Enabled bearer , priority 0 [ 253.881269][ T8949] tipc: Resetting bearer [ 253.932241][ T8949] tipc: Disabling bearer [ 254.161607][ T5697] usb 2-1: USB disconnect, device number 43 [ 254.538065][ T5728] usb 5-1: new low-speed USB device number 52 using dummy_hcd [ 254.698809][ T5728] usb 5-1: New USB device found, idVendor=1b1c, idProduct=1c1f, bcdDevice= 0.00 [ 254.727421][ T5728] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 254.745639][ T5728] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 254.762653][ T5728] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 254.785593][ T5728] usb 5-1: config 0 descriptor?? [ 254.805678][ T5728] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 254.815490][ T8971] netlink: 9144 bytes leftover after parsing attributes in process `syz.2.1014'. [ 255.068261][ T5675] gspca_ov534_9: reg_r err -110 [ 255.098134][ T10] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 255.258599][ T10] usb 3-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 255.292387][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 255.314073][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 255.335159][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 255.343614][ T5675] gspca_ov534_9: Unknown sensor 0000 [ 255.343673][ T5675] ov534_9 1-1:0.0: probe with driver ov534_9 failed with error -22 [ 255.365764][ T10] usb 3-1: config 0 descriptor?? [ 255.408934][ T5675] usb 5-1: USB disconnect, device number 52 [ 255.529929][ T5728] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 255.549081][ T9] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 255.588643][ T9] hid-generic 0000:0000:0000.001B: hidraw0: HID v0.00 Device [syz1] on syz0 [ 255.614340][ T8992] udevd[8992]: failed to execute '/lib/udev/fido_id' 'fido_id': No such file or directory [ 255.669968][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.676793][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.708816][ T5728] usb 2-1: New USB device found, idVendor=0425, idProduct=0000, bcdDevice= 0.00 [ 255.722223][ T5728] usb 2-1: no configurations [ 255.726926][ T5728] usb 2-1: can't read configurations, error -22 [ 255.766768][ T29] usb 1-1: USB disconnect, device number 48 [ 255.854985][ T10] usbhid 3-1:0.0: can't add hid device: -71 [ 255.864151][ T10] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 255.868156][ T5728] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 255.878316][ T8995] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1020'. [ 255.896924][ T10] usb 3-1: USB disconnect, device number 49 [ 255.909954][ T5697] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 256.028623][ T5728] usb 2-1: New USB device found, idVendor=0425, idProduct=0000, bcdDevice= 0.00 [ 256.039424][ T5728] usb 2-1: no configurations [ 256.044099][ T5728] usb 2-1: can't read configurations, error -22 [ 256.053152][ T5728] usb usb2-port1: attempt power cycle [ 256.068237][ T5697] usb 4-1: Using ep0 maxpacket: 8 [ 256.074081][ T5697] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 256.084447][ T5697] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 256.093232][ T5697] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 256.103119][ T5697] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 256.113672][ T5697] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 256.124474][ T5697] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 256.140319][ T5697] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 256.268289][ T29] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 256.356247][ T5697] usb 4-1: usb_control_msg returned -32 [ 256.368948][ T5697] usbtmc 4-1:16.0: can't read capabilities [ 256.428429][ T5728] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 256.452440][ T29] usb 1-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 256.469579][ T5728] usb 2-1: New USB device found, idVendor=0425, idProduct=0000, bcdDevice= 0.00 [ 256.472015][ T8999] FAULT_INJECTION: forcing a failure. [ 256.472015][ T8999] name failslab, interval 1, probability 0, space 0, times 0 [ 256.484055][ T5728] usb 2-1: no configurations [ 256.494458][ T8999] CPU: 0 UID: 0 PID: 8999 Comm: syz.2.1023 Tainted: G L syzkaller #0 PREEMPT(full) [ 256.494490][ T8999] Tainted: [L]=SOFTLOCKUP [ 256.494497][ T8999] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 256.494509][ T8999] Call Trace: [ 256.494516][ T8999] [ 256.494523][ T8999] dump_stack_lvl+0xe8/0x150 [ 256.494556][ T8999] should_fail_ex+0x410/0x560 [ 256.494584][ T8999] should_failslab+0xa8/0x100 [ 256.494621][ T8999] kmem_cache_alloc_node_noprof+0xb3/0x620 [ 256.494642][ T8999] ? local_lock_release+0x9c/0x160 [ 256.494666][ T8999] ? __alloc_skb+0x1db/0x7a0 [ 256.494684][ T8999] ? __alloc_skb+0x1db/0x7a0 [ 256.494711][ T8999] __alloc_skb+0x1db/0x7a0 [ 256.494737][ T8999] netlink_ack+0x136/0xb30 [ 256.494760][ T8999] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 256.494782][ T8999] ? ref_tracker_free+0x689/0x830 [ 256.494991][ T8999] ? __pfx_ref_tracker_free+0x10/0x10 [ 256.495028][ T8999] ? __asan_memcpy+0x40/0x70 [ 256.495059][ T8999] netlink_rcv_skb+0x2a4/0x4a0 [ 256.495092][ T8999] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 256.495118][ T8999] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 256.495155][ T8999] ? netlink_deliver_tap+0x2e/0x1b0 [ 256.495181][ T8999] ? netlink_deliver_tap+0x2e/0x1b0 [ 256.495212][ T8999] netlink_unicast+0x7bd/0x940 [ 256.495246][ T8999] netlink_sendmsg+0x813/0xb40 [ 256.495282][ T8999] ? __pfx_netlink_sendmsg+0x10/0x10 [ 256.495312][ T8999] ? aa_sock_msg_perm+0xf6/0x1c0 [ 256.495342][ T8999] ? __pfx_netlink_sendmsg+0x10/0x10 [ 256.495366][ T8999] sock_sendmsg_nosec+0x13a/0x180 [ 256.495386][ T8999] ____sys_sendmsg+0x54e/0x850 [ 256.495412][ T8999] ? __pfx_____sys_sendmsg+0x10/0x10 [ 256.495448][ T8999] ___sys_sendmsg+0x2a5/0x360 [ 256.495471][ T8999] ? __lock_acquire+0x683/0x2cf0 [ 256.495502][ T8999] ? __pfx____sys_sendmsg+0x10/0x10 [ 256.495525][ T8999] ? get_pid_task+0x20/0x1f0 [ 256.495551][ T8999] ? get_pid_task+0x20/0x1f0 [ 256.495574][ T8999] ? get_pid_task+0x20/0x1f0 [ 256.495624][ T8999] ? __fget_files+0x2a/0x420 [ 256.495650][ T8999] ? __fget_files+0x3a2/0x420 [ 256.495684][ T8999] __sys_sendmsg+0x177/0x240 [ 256.495710][ T8999] ? __pfx___sys_sendmsg+0x10/0x10 [ 256.495749][ T8999] __do_fast_syscall_32+0x27a/0x6a0 [ 256.495772][ T8999] ? do_fast_syscall_32+0x33/0x70 [ 256.495791][ T8999] ? asm_int80_emulation+0x1a/0x20 [ 256.495809][ T8999] ? do_int80_emulation+0x299/0x500 [ 256.495828][ T8999] ? trace_irq_disable+0x3b/0x140 [ 256.495868][ T8999] do_fast_syscall_32+0x33/0x70 [ 256.495892][ T8999] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 256.495932][ T8999] RIP: 0023:0xf701f0ec [ 256.495951][ T8999] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 256.495967][ T8999] RSP: 002b:00000000f540d50c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 256.495988][ T8999] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000800000c0 [ 256.496001][ T8999] RDX: 000000002000000c RSI: 0000000000000000 RDI: 0000000000000000 [ 256.496016][ T8999] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 256.496027][ T8999] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 256.496038][ T8999] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 256.496064][ T8999] [ 256.838158][ T10] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 256.842777][ T5728] usb 2-1: can't read configurations, error -22 [ 256.870427][ T29] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 256.880478][ T29] usb 1-1: config 0 descriptor?? [ 256.889257][ T29] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 256.988138][ T9] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 257.008216][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 257.014798][ T10] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 257.026673][ T10] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 257.035515][ T10] usb 5-1: config 0 has no interface number 0 [ 257.038197][ T5728] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 257.041817][ T10] usb 5-1: config 0 interface 184 has no altsetting 0 [ 257.059107][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 257.068404][ T10] usb 5-1: Product: syz [ 257.072825][ T5728] usb 2-1: New USB device found, idVendor=0425, idProduct=0000, bcdDevice= 0.00 [ 257.074062][ T10] usb 5-1: Manufacturer: syz [ 257.087765][ T10] usb 5-1: SerialNumber: syz [ 257.089955][ T5728] usb 2-1: no configurations [ 257.099069][ T10] usb 5-1: config 0 descriptor?? [ 257.102635][ T5728] usb 2-1: can't read configurations, error -22 [ 257.112322][ T5728] usb usb2-port1: unable to enumerate USB device [ 257.140045][ T9] usb 3-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 257.151270][ T9] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE8, changing to 0x88 [ 257.163666][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 257.175685][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 257.186031][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 257.201078][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 257.210100][ T9] usb 3-1: Product: syz [ 257.214982][ T9] usb 3-1: Manufacturer: syz [ 257.222578][ T9] usb 3-1: SerialNumber: syz [ 257.233298][ T9] usb 3-1: config 0 descriptor?? [ 257.249205][ T9] iguanair 3-1:0.0: probe with driver iguanair failed with error -12 [ 257.312264][ T29] cpia1 1-1:0.0: unexpected state after lo power cmd: 00 [ 257.352759][ T5728] usb 4-1: USB disconnect, device number 40 [ 257.625090][ T5728] usb 3-1: USB disconnect, device number 50 [ 257.722117][ T29] gspca_cpia1: usb_control_msg 02, error -32 [ 257.866345][ T29] gspca_cpia1: usb_control_msg 02, error -71 [ 257.874787][ T29] cpia1 1-1:0.0: only firmware version 1 is supported (got: 0) [ 257.893347][ T29] usb 1-1: USB disconnect, device number 49 [ 258.149919][ T10] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): EEPROM read operation timeout [ 258.206689][ T9022] netlink: 'syz.2.1030': attribute type 11 has an invalid length. [ 258.403472][ T10] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 258.457639][ T10] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 258.489604][ T10] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 258.518175][ T10] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 258.542799][ T10] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -71 [ 258.570043][ T10] usb 5-1: USB disconnect, device number 53 [ 258.994957][ T9029] openvswitch: netlink: Key 6 has unexpected len 20 expected 2 [ 259.182782][ T9031] netlink: 9144 bytes leftover after parsing attributes in process `syz.4.1033'. [ 259.262475][ T29] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 259.326202][ T29] hid-generic 0000:0000:0000.001C: hidraw0: HID v0.00 Device [syz1] on syz0 [ 259.359800][ T9041] udevd[9041]: failed to execute '/lib/udev/fido_id' 'fido_id': No such file or directory [ 259.458313][ T5728] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 259.528112][ T9] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 259.633118][ T5728] usb 5-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 259.647723][ T5728] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 259.666110][ T5728] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 259.683593][ T5728] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 259.698838][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 259.710630][ T9] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 259.712707][ T5728] usb 5-1: config 0 descriptor?? [ 259.744478][ T9] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 259.758744][ T9036] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1034'. [ 259.759370][ T29] usb 3-1: new full-speed USB device number 51 using dummy_hcd [ 259.768292][ T9] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 259.799614][ T9] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 259.810568][ T9] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 259.821302][ T9] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 259.835728][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 259.941308][ T29] usb 3-1: New USB device found, idVendor=17cc, idProduct=1978, bcdDevice= 0.40 [ 259.964600][ T29] usb 3-1: config 1 has an invalid descriptor of length 150, skipping remainder of the config [ 259.978988][ T29] usb 3-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 259.996970][ T29] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 260.008359][ T29] usb 3-1: Product: syz [ 260.012612][ T29] usb 3-1: Manufacturer: syz [ 260.019511][ T29] usb 3-1: SerialNumber: syz [ 260.067234][ T9] usb 4-1: usb_control_msg returned -32 [ 260.077207][ T9] usbtmc 4-1:16.0: can't read capabilities [ 260.178966][ T5728] usbhid 5-1:0.0: can't add hid device: -71 [ 260.195549][ T5728] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 260.225190][ T5728] usb 5-1: USB disconnect, device number 54 [ 260.399960][ T29] usb 3-1: USB disconnect, device number 51 [ 260.538123][ T9] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 260.688059][ T9] usb 2-1: device descriptor read/64, error -71 [ 260.928793][ T9] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 261.059581][ T5610] usb 4-1: USB disconnect, device number 41 [ 261.068072][ T9] usb 2-1: device descriptor read/64, error -71 [ 261.098433][ T29] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 261.178171][ T5728] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 261.188645][ T9] usb usb2-port1: attempt power cycle [ 261.269851][ T29] usb 1-1: New USB device found, idVendor=0425, idProduct=a4a1, bcdDevice= 0.40 [ 261.281721][ T29] usb 1-1: no configurations [ 261.289534][ T29] usb 1-1: can't read configurations, error -22 [ 261.328092][ T5728] usb 3-1: Using ep0 maxpacket: 8 [ 261.335382][ T5728] usb 3-1: unable to get BOS descriptor or descriptor too short [ 261.344518][ T5728] usb 3-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 261.355707][ T5728] usb 3-1: config 4 has an invalid interface number: 147 but max is 0 [ 261.364761][ T5728] usb 3-1: config 4 contains an unexpected descriptor of type 0x2, skipping [ 261.373994][ T5728] usb 3-1: config 4 has no interface number 0 [ 261.384108][ T5728] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 261.392738][ T5728] usb 3-1: Product: syz [ 261.396968][ T5728] usb 3-1: Manufacturer: syz [ 261.401713][ T5728] usb 3-1: SerialNumber: syz [ 261.439782][ T29] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 261.528085][ T9] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 261.548740][ T9] usb 2-1: device descriptor read/8, error -71 [ 261.619808][ T29] usb 1-1: New USB device found, idVendor=0425, idProduct=a4a1, bcdDevice= 0.40 [ 261.629917][ T29] usb 1-1: no configurations [ 261.634807][ T29] usb 1-1: can't read configurations, error -22 [ 261.643282][ T29] usb usb1-port1: attempt power cycle [ 261.697086][ T9073] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 261.718527][ T9073] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 261.731340][ T9073] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 261.749461][ T9073] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 261.788057][ T9] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 261.808797][ T9] usb 2-1: device descriptor read/8, error -71 [ 261.918673][ T9] usb usb2-port1: unable to enumerate USB device [ 261.998324][ T29] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 262.021558][ T29] usb 1-1: New USB device found, idVendor=0425, idProduct=a4a1, bcdDevice= 0.40 [ 262.038111][ T29] usb 1-1: no configurations [ 262.046195][ T29] usb 1-1: can't read configurations, error -22 [ 262.199492][ T29] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 262.249630][ T29] usb 1-1: New USB device found, idVendor=0425, idProduct=a4a1, bcdDevice= 0.40 [ 262.268146][ T29] usb 1-1: no configurations [ 262.273086][ T29] usb 1-1: can't read configurations, error -22 [ 262.283190][ T29] usb usb1-port1: unable to enumerate USB device [ 262.456473][ T9078] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1049'. [ 262.635838][ T9082] usb usb8: usbfs: process 9082 (syz.3.1051) did not claim interface 0 before use [ 262.697292][ T29] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 262.723652][ T29] hid-generic 0000:0000:0000.001D: hidraw0: HID v0.00 Device [syz1] on syz0 [ 262.728173][ T9] usb 5-1: new low-speed USB device number 55 using dummy_hcd [ 262.754110][ T9085] udevd[9085]: failed to execute '/lib/udev/fido_id' 'fido_id': No such file or directory [ 262.890609][ T9] usb 5-1: unable to get BOS descriptor or descriptor too short [ 262.898731][ T9] usb 5-1: New USB device found, idVendor=eb1a, idProduct=e357, bcdDevice=7b.81 [ 262.912261][ T9] usb 5-1: config 255 has an invalid interface number: 100 but max is 1 [ 262.921071][ T9] usb 5-1: config 255 has an invalid interface number: 100 but max is 1 [ 262.929872][ T9086] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1052'. [ 262.939725][ T9] usb 5-1: config 255 has 1 interface, different from the descriptor's value: 2 [ 262.949473][ T9] usb 5-1: config 255 has no interface number 0 [ 262.955810][ T9] usb 5-1: config 255 interface 100 has no altsetting 0 [ 262.964240][ T9] usb 5-1: config 255 interface 100 has no altsetting 1 [ 262.974993][ T9] usb 5-1: string descriptor 0 read error: -22 [ 262.981705][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 263.205194][ T29] usb 5-1: USB disconnect, device number 55 [ 263.334460][ T9088] netlink: 9144 bytes leftover after parsing attributes in process `syz.1.1053'. [ 263.688288][ T9] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 263.840757][ T9] usb 2-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 263.864303][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 263.899121][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 263.934330][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 263.965136][ T9] usb 2-1: config 0 descriptor?? [ 264.126514][ T5728] uvcvideo 3-1:4.147: Found UVC 0.02 device syz (04f2:b746) [ 264.170034][ T5728] uvcvideo 3-1:4.147: No valid video chain found. [ 264.201262][ T9095] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 51000000 out of range (51000..2150000) [ 264.227834][ T5728] usb 3-1: USB disconnect, device number 52 [ 264.442942][ T9] usbhid 2-1:0.0: can't add hid device: -71 [ 264.449738][ T9] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 264.460660][ T9] usb 2-1: USB disconnect, device number 52 [ 264.628837][ T5728] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 264.768145][ T10] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 264.778690][ T5728] usb 3-1: Using ep0 maxpacket: 8 [ 264.784733][ T5728] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 264.795085][ T5728] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 264.803613][ T5728] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 264.813836][ T5728] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 264.823883][ T5728] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 264.834157][ T5728] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 264.847521][ T29] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 264.855589][ T5728] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 264.898114][ T10] usb 1-1: device descriptor read/64, error -71 [ 264.938115][ T5675] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 265.009963][ T29] usb 5-1: New USB device found, idVendor=1235, idProduct=8201, bcdDevice= 1.00 [ 265.025491][ T29] usb 5-1: config index 0 descriptor too short (expected 69, got 51) [ 265.034802][ T29] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 265.051543][ T29] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 265.061180][ T29] usb 5-1: Product: syz [ 265.065436][ T29] usb 5-1: Manufacturer: syz [ 265.070581][ T5728] usb 3-1: usb_control_msg returned -32 [ 265.076212][ T29] usb 5-1: SerialNumber: syz [ 265.082799][ T5728] usbtmc 3-1:16.0: can't read capabilities [ 265.090904][ T5675] usb 4-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 265.103738][ T5675] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 265.121307][ T29] usb 5-1: Focusrite Scarlett Gen 2 Mixer Driver enabled (pid=0x8201); report any issues to https://github.com/geoffreybennett/scarlett-gen2/issues [ 265.127684][ T5675] usb 4-1: config 0 descriptor?? [ 265.145761][ T10] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 265.170332][ T5675] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 265.298730][ T10] usb 1-1: device descriptor read/64, error -71 [ 265.410251][ T10] usb usb1-port1: attempt power cycle [ 265.565586][ T5675] cpia1 4-1:0.0: unexpected state after lo power cmd: 00 [ 265.725784][ T9103] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 265.741655][ T9103] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 265.768099][ T10] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 265.809469][ T10] usb 1-1: device descriptor read/8, error -71 [ 265.977081][ T5675] gspca_cpia1: usb_control_msg 02, error -32 [ 266.052064][ T9] usb 3-1: USB disconnect, device number 53 [ 266.061315][ T10] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 266.099235][ T10] usb 1-1: device descriptor read/8, error -71 [ 266.211558][ T9120] netlink: 'syz.1.1063': attribute type 5 has an invalid length. [ 266.218557][ T10] usb usb1-port1: unable to enumerate USB device [ 266.231541][ T5675] gspca_cpia1: usb_control_msg 02, error -71 [ 266.238704][ T9120] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1063'. [ 266.245566][ T5675] cpia1 4-1:0.0: only firmware version 1 is supported (got: 0) [ 266.261522][ T5675] usb 4-1: USB disconnect, device number 42 [ 266.361739][ T9] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 266.374668][ T9] hid-generic 0000:0000:0000.001E: hidraw0: HID v0.00 Device [syz1] on syz0 [ 266.398547][ T9123] udevd[9123]: failed to execute '/lib/udev/fido_id' 'fido_id': No such file or directory [ 266.548189][ T29] usb 5-1: Scarlett Gen 2 USB request timed out, cmd 0 [ 266.557058][ T29] usb 5-1: Error initialising Scarlett Gen 2 Mixer Driver: -110 [ 266.605836][ T29] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -110 [ 266.630117][ T9124] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1064'. [ 266.651753][ T7180] udevd[7180]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 267.238150][ T9] usb 4-1: new full-speed USB device number 43 using dummy_hcd [ 267.389992][ T9] usb 4-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 267.408097][ T9] usb 4-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 267.422711][ T9] usb 4-1: Product: syz [ 267.430852][ T9] usb 4-1: SerialNumber: syz [ 267.442246][ T9] usb 4-1: config 0 descriptor?? [ 267.457753][ T9] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 267.483057][ T9] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 267.517795][ T9] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) error while loading driver (-19) [ 267.645292][ T29] usb 5-1: USB disconnect, device number 56 [ 267.701454][ T9] usb 4-1: USB disconnect, device number 43 [ 267.912870][ T9144] netlink: 9144 bytes leftover after parsing attributes in process `syz.0.1071'. [ 267.968053][ T5728] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 268.138871][ T5728] usb 3-1: New USB device found, idVendor=0425, idProduct=a4a1, bcdDevice= 0.40 [ 268.156303][ T5728] usb 3-1: no configurations [ 268.172372][ T5728] usb 3-1: can't read configurations, error -22 [ 268.228707][ T29] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 268.318118][ T5728] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 268.389964][ T29] usb 1-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 268.414571][ T29] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 268.448833][ T29] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 268.476897][ T29] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 268.496788][ T5728] usb 3-1: New USB device found, idVendor=0425, idProduct=a4a1, bcdDevice= 0.40 [ 268.521607][ T5728] usb 3-1: no configurations [ 268.526909][ T29] usb 1-1: config 0 descriptor?? [ 268.538549][ T5728] usb 3-1: can't read configurations, error -22 [ 268.554171][ T5728] usb usb3-port1: attempt power cycle [ 268.592218][ T9156] bond2: entered allmulticast mode [ 268.608607][ T9156] 8021q: adding VLAN 0 to HW filter on device bond2 [ 268.698122][ T9] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 268.754591][ T5610] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 268.797768][ T5610] hid-generic 0000:0000:0000.001F: hidraw0: HID v0.00 Device [syz1] on syz0 [ 268.827875][ T9161] udevd[9161]: failed to execute '/lib/udev/fido_id' 'fido_id': No such file or directory [ 268.873691][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 268.882444][ T9] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 268.898450][ T5728] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 268.902589][ T9] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 268.919495][ T5728] usb 3-1: New USB device found, idVendor=0425, idProduct=a4a1, bcdDevice= 0.40 [ 268.920691][ T9] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 268.939252][ T5728] usb 3-1: no configurations [ 268.944682][ T5728] usb 3-1: can't read configurations, error -22 [ 268.970325][ T9] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 268.990964][ T29] usbhid 1-1:0.0: can't add hid device: -71 [ 269.000981][ T9] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 269.003913][ T29] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 269.029385][ T9] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 269.045945][ T29] usb 1-1: USB disconnect, device number 58 [ 269.062135][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 269.080792][ T5728] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 269.110652][ T5728] usb 3-1: New USB device found, idVendor=0425, idProduct=a4a1, bcdDevice= 0.40 [ 269.127548][ T5728] usb 3-1: no configurations [ 269.133240][ T5728] usb 3-1: can't read configurations, error -22 [ 269.140610][ T5728] usb usb3-port1: unable to enumerate USB device [ 269.224184][ T9164] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1078'. [ 269.234019][ T9162] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1077'. [ 269.301324][ T9] usb 2-1: usb_control_msg returned -32 [ 269.307315][ T9] usbtmc 2-1:16.0: can't read capabilities [ 269.488081][ T5675] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 269.645220][ T5675] usb 5-1: unable to get BOS descriptor or descriptor too short [ 269.655622][ T5675] usb 5-1: New USB device found, idVendor=1235, idProduct=820b, bcdDevice= 0.40 [ 269.668393][ T5675] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 269.680846][ T5675] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 269.692872][ T5675] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 269.703034][ T5675] usb 5-1: Product: syz [ 269.707266][ T5675] usb 5-1: Manufacturer: syz [ 269.715064][ T5675] usb 5-1: SerialNumber: syz [ 269.733740][ T5675] usb 5-1: 0:1 : does not exist [ 269.739110][ T5675] usb 5-1: Focusrite Clarett+ Mixer Driver enabled (pid=0x820b); report any issues to https://github.com/geoffreybennett/scarlett-gen2/issues [ 269.755726][ T5675] usb 5-1: Error initialising Clarett+ Mixer Driver: -22 [ 269.817378][ T5675] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 269.866984][ T7180] udevd[7180]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 269.918179][ T5728] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 269.937851][ T29] usb 5-1: USB disconnect, device number 57 [ 270.078172][ T5728] usb 1-1: Using ep0 maxpacket: 16 [ 270.084241][ T5728] usb 1-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 270.094932][ T5728] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 270.108182][ T5728] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 270.118980][ T5728] usb 1-1: config 0 descriptor?? [ 270.198110][ T5675] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 270.341467][ T9] usb 2-1: USB disconnect, device number 53 [ 270.351546][ T5675] usb 4-1: New USB device found, idVendor=15a4, idProduct=9015, bcdDevice= 2.00 [ 270.373042][ T5675] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 270.388142][ C0] ip6_tunnel: syztnl0 xmit: Local address not yet configured! [ 270.403226][ T5675] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 270.412153][ T5675] usb 4-1: Product: syz [ 270.416376][ T5675] usb 4-1: Manufacturer: syz [ 270.422983][ T5675] usb 4-1: SerialNumber: syz [ 270.729121][ T5675] usb 4-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 270.750232][ T9182] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1084'. [ 270.760798][ T5675] dvb_usb_af9015 4-1:1.0: probe with driver dvb_usb_af9015 failed with error -22 [ 270.796618][ T5675] usb 4-1: USB disconnect, device number 44 [ 271.741376][ T9198] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1088'. [ 271.817918][ T30] audit: type=1326 audit(1787319958.442:456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9199 comm="syz.2.1089" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf701f0ec code=0x0 [ 271.937819][ T9] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 271.964619][ T9] hid-generic 0000:0000:0000.0020: hidraw0: HID v0.00 Device [syz1] on syz0 [ 272.027227][ T9205] udevd[9205]: failed to execute '/lib/udev/fido_id' 'fido_id': No such file or directory [ 272.315122][ T9209] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1090'. [ 272.582732][ T5728] usbhid 1-1:0.0: can't add hid device: -71 [ 272.589428][ T5728] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 272.602045][ T5728] usb 1-1: USB disconnect, device number 59 [ 272.718122][ T5675] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 272.778124][ T29] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 272.878192][ T5675] usb 5-1: Using ep0 maxpacket: 8 [ 272.883903][ T5675] usb 5-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 272.896948][ T5675] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 272.905649][ T5675] usb 5-1: Product: syz [ 272.910657][ T5675] usb 5-1: Manufacturer: syz [ 272.915936][ T5675] usb 5-1: SerialNumber: syz [ 272.948281][ T29] usb 2-1: Using ep0 maxpacket: 32 [ 272.955790][ T29] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 272.970555][ T29] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 272.984872][ T5728] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 272.994245][ T29] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 273.007758][ T29] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 273.019143][ T29] usb 2-1: config 0 descriptor?? [ 273.027203][ T29] hub 2-1:0.0: USB hub found [ 273.048395][ T9] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 273.148214][ T5728] usb 1-1: Using ep0 maxpacket: 32 [ 273.157029][ T5728] usb 1-1: unable to get BOS descriptor or descriptor too short [ 273.176676][ T5728] usb 1-1: New USB device found, idVendor=12d1, idProduct=983b, bcdDevice=27.d4 [ 273.190556][ T5728] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 273.199577][ T5728] usb 1-1: can't read configurations, error -71 [ 273.209082][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 273.214984][ T9] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 273.232004][ T29] hub 2-1:0.0: config failed, can't read hub descriptor (err -90) [ 273.232972][ T9] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 273.251243][ T9] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 273.261866][ T9] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 273.273229][ T9] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 273.283283][ T9] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 273.298264][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 273.515311][ T29] usbhid 2-1:0.0: can't add hid device: -71 [ 273.524469][ T9] usb 4-1: usb_control_msg returned -32 [ 273.526389][ T29] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 273.530622][ T9] usbtmc 4-1:16.0: can't read capabilities [ 273.547714][ T5675] usb 5-1: clock source 0 is not valid, cannot use [ 273.566716][ T29] usb 2-1: USB disconnect, device number 54 [ 273.759586][ T9214] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 273.781747][ T9214] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 273.812870][ T9214] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 273.824869][ T9214] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 273.837655][ T9214] binder: 9212:9214 ioctl c0306201 80000040 returned -14 [ 274.512470][ T5683] usb 4-1: USB disconnect, device number 45 [ 274.520068][ T9] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 274.678918][ T9] usb 2-1: New USB device found, idVendor=0425, idProduct=a4a1, bcdDevice= 0.40 [ 274.688873][ T9] usb 2-1: no configurations [ 274.693841][ T9] usb 2-1: can't read configurations, error -22 [ 274.828100][ T9] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 274.916680][ T5675] usb 5-1: 1:1: cannot get freq (v2/v3): err -71 [ 274.937727][ T5675] usb 5-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 274.959820][ T5675] usb 5-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 274.973852][ T5675] usb 5-1: clock source 0 is not valid, cannot use [ 274.984463][ T9] usb 2-1: New USB device found, idVendor=0425, idProduct=a4a1, bcdDevice= 0.40 [ 274.999879][ T5675] usb 5-1: 2:1: cannot get freq (v2/v3): err -71 [ 275.009362][ T9] usb 2-1: no configurations [ 275.016539][ T9] usb 2-1: can't read configurations, error -22 [ 275.024654][ T5675] usb 5-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 275.043221][ T9] usb usb2-port1: attempt power cycle [ 275.147218][ T5675] usb 5-1: USB disconnect, device number 58 [ 275.401108][ T9] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 275.431959][ T9252] netlink: 'syz.3.1106': attribute type 11 has an invalid length. [ 275.440959][ T9] usb 2-1: New USB device found, idVendor=0425, idProduct=a4a1, bcdDevice= 0.40 [ 275.459549][ T9] usb 2-1: no configurations [ 275.467633][ T9] usb 2-1: can't read configurations, error -22 [ 275.484638][ T30] audit: type=1326 audit(1787319962.112:457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9253 comm="syz.0.1107" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707f0ec code=0x7ffc0000 [ 275.547295][ T30] audit: type=1326 audit(1787319962.112:458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9253 comm="syz.0.1107" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707f0ec code=0x7ffc0000 [ 275.592578][ T5728] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 275.608858][ T9] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 275.631905][ T30] audit: type=1326 audit(1787319962.152:459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9253 comm="syz.0.1107" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707f0ec code=0x7ffc0000 [ 275.641861][ T9] usb 2-1: New USB device found, idVendor=0425, idProduct=a4a1, bcdDevice= 0.40 [ 275.668448][ T9] usb 2-1: no configurations [ 275.673190][ T9] usb 2-1: can't read configurations, error -22 [ 275.683613][ T9252] 8021q: adding VLAN 0 to HW filter on device bond0 [ 275.685542][ T9] usb usb2-port1: unable to enumerate USB device [ 275.696957][ T30] audit: type=1326 audit(1787319962.152:460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9253 comm="syz.0.1107" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707f0ec code=0x7ffc0000 [ 275.725068][ T9252] 8021q: adding VLAN 0 to HW filter on device team0 [ 275.756325][ T9252] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 275.763772][ T30] audit: type=1326 audit(1787319962.152:461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9253 comm="syz.0.1107" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=116 compat=1 ip=0xf707f0ec code=0x7ffc0000 [ 275.797511][ T5728] usb 3-1: Using ep0 maxpacket: 8 [ 275.808473][ T5728] usb 3-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 275.824257][ T30] audit: type=1326 audit(1787319962.152:462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9253 comm="syz.0.1107" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707f0ec code=0x7ffc0000 [ 275.853932][ T30] audit: type=1326 audit(1787319962.152:463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9253 comm="syz.0.1107" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707f0ec code=0x7ffc0000 [ 275.887098][ T5728] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 275.908416][ T5728] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 275.924045][ T5728] usb 3-1: config 1 has no interface number 0 [ 275.939028][ T30] audit: type=1326 audit(1787319962.152:464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9253 comm="syz.0.1107" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=436 compat=1 ip=0xf707f0ec code=0x7ffc0000 [ 275.972450][ T9252] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 275.977321][ T5728] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 275.999001][ T5728] usb 3-1: Product: syz [ 276.005332][ T5728] usb 3-1: Manufacturer: syz [ 276.011867][ T30] audit: type=1326 audit(1787319962.152:465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9253 comm="syz.0.1107" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=252 compat=1 ip=0xf707f0ec code=0x7ffc0000 [ 276.023838][ T9252] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 276.038919][ T5728] usb 3-1: SerialNumber: syz [ 276.119016][ T9252] veth1_vlan: left promiscuous mode [ 276.126184][ T9252] veth0_vlan: left promiscuous mode [ 276.134378][ T9252] veth0_vlan: entered promiscuous mode [ 276.144072][ T9252] veth1_vlan: entered promiscuous mode [ 276.165890][ T9252] veth1_macvtap: left promiscuous mode [ 276.174741][ T9252] veth0_macvtap: left promiscuous mode [ 276.184385][ T9252] veth0_macvtap: entered promiscuous mode [ 276.210055][ T9252] veth1_macvtap: entered promiscuous mode [ 276.242494][ T9252] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 276.262259][ T9252] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 276.276124][ T9252] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 276.290910][ T9252] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 276.508079][ T29] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 276.578578][ T36] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.593921][ T36] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.606321][ T36] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.628626][ T36] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.659105][ T29] usb 5-1: Using ep0 maxpacket: 8 [ 276.666527][ T29] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 276.684921][ T29] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 276.696560][ T29] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 276.712669][ T29] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 276.724210][ T29] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 276.736944][ T29] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 276.750930][ T29] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 276.827025][ T9286] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1119'. [ 276.897390][ T30] audit: type=1800 audit(1787319963.522:466): pid=9288 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1120" name="file0" dev="tmpfs" ino=1271 res=0 errno=0 [ 276.935724][ T30] audit: type=1804 audit(1787319963.562:467): pid=9288 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.1120" name="/newroot/244/file0" dev="tmpfs" ino=1271 res=1 errno=0 [ 276.964597][ T9] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 276.971657][ T29] usb 5-1: usb_control_msg returned -32 [ 276.988079][ T29] usbtmc 5-1:16.0: can't read capabilities [ 277.120784][ T9] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 277.138564][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 277.148776][ T9] usb 1-1: Product: syz [ 277.153578][ T9] usb 1-1: Manufacturer: syz [ 277.158463][ T9] usb 1-1: SerialNumber: syz [ 277.314167][ T10] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 277.700396][ T9294] netlink: 'syz.3.1121': attribute type 11 has an invalid length. [ 277.783413][ T9] usb 1-1: USB disconnect, device number 62 [ 278.002385][ T5675] usb 5-1: USB disconnect, device number 59 [ 278.136552][ T9300] Can't find ip_set type [ 278.144830][ T9300] FAULT_INJECTION: forcing a failure. [ 278.144830][ T9300] name failslab, interval 1, probability 0, space 0, times 0 [ 278.163077][ T9300] CPU: 0 UID: 0 PID: 9300 Comm: syz.3.1123 Tainted: G L syzkaller #0 PREEMPT(full) [ 278.163111][ T9300] Tainted: [L]=SOFTLOCKUP [ 278.163118][ T9300] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 278.163129][ T9300] Call Trace: [ 278.163136][ T9300] [ 278.163145][ T9300] dump_stack_lvl+0xe8/0x150 [ 278.163176][ T9300] should_fail_ex+0x410/0x560 [ 278.163205][ T9300] should_failslab+0xa8/0x100 [ 278.163247][ T9300] kmem_cache_alloc_node_noprof+0xb3/0x620 [ 278.163270][ T9300] ? local_lock_release+0x9c/0x160 [ 278.163295][ T9300] ? __alloc_skb+0x1db/0x7a0 [ 278.163315][ T9300] ? __alloc_skb+0x1db/0x7a0 [ 278.163343][ T9300] __alloc_skb+0x1db/0x7a0 [ 278.163369][ T9300] netlink_ack+0x136/0xb30 [ 278.163410][ T9300] netlink_rcv_skb+0x2a4/0x4a0 [ 278.163437][ T9300] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 278.163465][ T9300] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 278.163502][ T9300] ? bpf_lsm_capable+0x9/0x20 [ 278.163532][ T9300] ? security_capable+0x7e/0x2c0 [ 278.163563][ T9300] nfnetlink_rcv+0x2b9/0x28c0 [ 278.163597][ T9300] ? __dev_queue_xmit+0x29b/0x3820 [ 278.163628][ T9300] ? __local_bh_enable_ip+0xd6/0x140 [ 278.163650][ T9300] ? lockdep_hardirqs_on+0x7b/0x110 [ 278.163670][ T9300] ? __dev_queue_xmit+0x29b/0x3820 [ 278.163695][ T9300] ? __local_bh_enable_ip+0xd6/0x140 [ 278.163715][ T9300] ? __dev_queue_xmit+0x29b/0x3820 [ 278.163741][ T9300] ? __dev_queue_xmit+0x1edc/0x3820 [ 278.163766][ T9300] ? __do_fast_syscall_32+0x27a/0x6a0 [ 278.163787][ T9300] ? do_fast_syscall_32+0x33/0x70 [ 278.163817][ T9300] ? __dev_queue_xmit+0x29b/0x3820 [ 278.163845][ T9300] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 278.163875][ T9300] ? __pfx___dev_queue_xmit+0x10/0x10 [ 278.163910][ T9300] ? ref_tracker_free+0x689/0x830 [ 278.163938][ T9300] ? __pfx_ref_tracker_free+0x10/0x10 [ 278.163963][ T9300] ? __asan_memcpy+0x40/0x70 [ 278.163982][ T9300] ? __skb_clone+0x5c/0x6c0 [ 278.164012][ T9300] ? __skb_clone+0x449/0x6c0 [ 278.164043][ T9300] ? skb_clone+0x246/0x3a0 [ 278.164071][ T9300] ? __netlink_deliver_tap+0x811/0x860 [ 278.164215][ T9300] ? netlink_deliver_tap+0x2e/0x1b0 [ 278.164252][ T9300] ? netlink_deliver_tap+0x2e/0x1b0 [ 278.164280][ T9300] ? netlink_deliver_tap+0x2e/0x1b0 [ 278.164312][ T9300] netlink_unicast+0x7bd/0x940 [ 278.164359][ T9300] netlink_sendmsg+0x813/0xb40 [ 278.164396][ T9300] ? __pfx_netlink_sendmsg+0x10/0x10 [ 278.164426][ T9300] ? aa_sock_msg_perm+0xf6/0x1c0 [ 278.164454][ T9300] ? __pfx_netlink_sendmsg+0x10/0x10 [ 278.164479][ T9300] sock_sendmsg_nosec+0x13a/0x180 [ 278.164503][ T9300] ____sys_sendmsg+0x54e/0x850 [ 278.164536][ T9300] ? __pfx_____sys_sendmsg+0x10/0x10 [ 278.164578][ T9300] ___sys_sendmsg+0x2a5/0x360 [ 278.164609][ T9300] ? __lock_acquire+0x683/0x2cf0 [ 278.164642][ T9300] ? __pfx____sys_sendmsg+0x10/0x10 [ 278.164886][ T9300] ? get_pid_task+0x20/0x1f0 [ 278.164916][ T9300] ? get_pid_task+0x20/0x1f0 [ 278.164939][ T9300] ? get_pid_task+0x20/0x1f0 [ 278.164993][ T9300] ? __fget_files+0x2a/0x420 [ 278.165019][ T9300] ? __fget_files+0x3a2/0x420 [ 278.165054][ T9300] __sys_sendmsg+0x177/0x240 [ 278.165083][ T9300] ? __pfx___sys_sendmsg+0x10/0x10 [ 278.165127][ T9300] __do_fast_syscall_32+0x27a/0x6a0 [ 278.165150][ T9300] ? do_fast_syscall_32+0x33/0x70 [ 278.165169][ T9300] ? asm_int80_emulation+0x1a/0x20 [ 278.165201][ T9300] ? do_int80_emulation+0x299/0x500 [ 278.165220][ T9300] ? trace_irq_disable+0x3b/0x140 [ 278.165249][ T9300] do_fast_syscall_32+0x33/0x70 [ 278.165267][ T9300] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 278.165287][ T9300] RIP: 0023:0xf706f0ec [ 278.165354][ T9300] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 278.165371][ T9300] RSP: 002b:00000000f545d50c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 278.165404][ T9300] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800002c0 [ 278.165422][ T9300] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 278.165434][ T9300] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 278.165445][ T9300] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 278.165457][ T9300] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 278.165485][ T9300] [ 278.633020][ T9303] Can't find ip_set type [ 278.653640][ T10] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 278.661047][ T10] ath9k_htc: Failed to initialize the device [ 278.673610][ T9] usb 1-1: ath9k_htc: USB layer deinitialized [ 278.840538][ T9311] FAULT_INJECTION: forcing a failure. [ 278.840538][ T9311] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 278.915476][ T9311] CPU: 1 UID: 0 PID: 9311 Comm: syz.0.1128 Tainted: G L syzkaller #0 PREEMPT(full) [ 278.915508][ T9311] Tainted: [L]=SOFTLOCKUP [ 278.915514][ T9311] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 278.915525][ T9311] Call Trace: [ 278.915531][ T9311] [ 278.915539][ T9311] dump_stack_lvl+0xe8/0x150 [ 278.915570][ T9311] should_fail_ex+0x410/0x560 [ 278.915597][ T9311] _copy_from_user+0x2d/0xb0 [ 278.915623][ T9311] dev_ethtool+0xdb/0x29c0 [ 278.915644][ T9311] ? __lock_acquire+0x683/0x2cf0 [ 278.915679][ T9311] ? tomoyo_path_number_perm+0x219/0x5f0 [ 278.915705][ T9311] ? tomoyo_path_number_perm+0x219/0x5f0 [ 278.915725][ T9311] ? __pfx_dev_ethtool+0x10/0x10 [ 278.915744][ T9311] ? do_vfs_ioctl+0x116f/0x1530 [ 278.915767][ T9311] ? dev_load+0x21/0x1f0 [ 278.915802][ T9311] ? dev_load+0x21/0x1f0 [ 278.915825][ T9311] ? dev_load+0x21/0x1f0 [ 278.915849][ T9311] dev_ioctl+0x392/0x1150 [ 278.915876][ T9311] compat_sock_ioctl+0xc60/0xcc0 [ 278.915911][ T9311] ? __pfx_compat_sock_ioctl+0x10/0x10 [ 278.915941][ T9311] ? __fget_files+0x3a2/0x420 [ 278.915966][ T9311] ? __fget_files+0x2a/0x420 [ 278.915992][ T9311] ? bpf_lsm_file_ioctl_compat+0x9/0x20 [ 278.916015][ T9311] __ia32_compat_sys_ioctl+0x5ea/0x950 [ 278.916036][ T9311] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 278.916057][ T9311] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 278.916090][ T9311] ? __fget_files+0x3a2/0x420 [ 278.916120][ T9311] ? fput+0xa0/0xd0 [ 278.916141][ T9311] ? ksys_write+0x242/0x270 [ 278.916177][ T9311] __do_fast_syscall_32+0x27a/0x6a0 [ 278.916197][ T9311] ? do_fast_syscall_32+0x33/0x70 [ 278.916216][ T9311] ? asm_int80_emulation+0x1a/0x20 [ 278.916234][ T9311] ? do_int80_emulation+0x299/0x500 [ 278.916253][ T9311] ? trace_irq_disable+0x3b/0x140 [ 278.916280][ T9311] do_fast_syscall_32+0x33/0x70 [ 278.916301][ T9311] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 278.916324][ T9311] RIP: 0023:0xf707f0ec [ 278.916341][ T9311] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 278.916357][ T9311] RSP: 002b:00000000f546d50c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 278.916378][ T9311] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000008946 [ 278.916392][ T9311] RDX: 00000000800000c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 278.916404][ T9311] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 278.916415][ T9311] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 278.916427][ T9311] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 278.916454][ T9311] [ 279.233104][ T5728] snd-usb-audio 3-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 279.248278][ T5728] usb 3-1: USB disconnect, device number 58 [ 279.318954][ T7180] udevd[7180]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 279.443319][ T9324] netlink: 'syz.4.1133': attribute type 11 has an invalid length. [ 279.608114][ T9] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 279.728258][ T5728] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 279.768923][ T9] usb 4-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 279.783325][ T9] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE8, changing to 0x88 [ 279.798987][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 279.812660][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 279.825563][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 279.841655][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 279.851493][ T9] usb 4-1: Product: syz [ 279.856171][ T9] usb 4-1: Manufacturer: syz [ 279.863087][ T9] usb 4-1: SerialNumber: syz [ 279.886804][ T9] usb 4-1: config 0 descriptor?? [ 279.899272][ T5728] usb 1-1: New USB device found, idVendor=0425, idProduct=a4a1, bcdDevice= 0.40 [ 279.902166][ T9] iguanair 4-1:0.0: probe with driver iguanair failed with error -12 [ 279.926675][ T5728] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 279.948093][ T5728] usb 1-1: can't read configurations, error -61 [ 280.108152][ T5728] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 280.278178][ T5728] usb 1-1: New USB device found, idVendor=0425, idProduct=a4a1, bcdDevice= 0.40 [ 280.307735][ T5728] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 280.323088][ T5728] usb 1-1: can't read configurations, error -61 [ 280.339186][ T5728] usb usb1-port1: attempt power cycle [ 280.533188][ T9] usb 4-1: USB disconnect, device number 46 [ 280.688101][ T5728] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 280.740420][ T5728] usb 1-1: New USB device found, idVendor=0425, idProduct=a4a1, bcdDevice= 0.40 [ 280.759951][ T5728] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 280.778697][ T5728] usb 1-1: can't read configurations, error -61 [ 280.928091][ T5728] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 280.968930][ T5728] usb 1-1: New USB device found, idVendor=0425, idProduct=a4a1, bcdDevice= 0.40 [ 280.992680][ T5728] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 281.017205][ T5728] usb 1-1: can't read configurations, error -61 [ 281.040817][ T5728] usb usb1-port1: unable to enumerate USB device [ 281.488336][ T10] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 281.518076][ T5728] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 281.605452][ T9365] FAULT_INJECTION: forcing a failure. [ 281.605452][ T9365] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 281.623835][ T9365] CPU: 1 UID: 0 PID: 9365 Comm: syz.2.1147 Tainted: G L syzkaller #0 PREEMPT(full) [ 281.623868][ T9365] Tainted: [L]=SOFTLOCKUP [ 281.623876][ T9365] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 281.623887][ T9365] Call Trace: [ 281.623895][ T9365] [ 281.623903][ T9365] dump_stack_lvl+0xe8/0x150 [ 281.623936][ T9365] should_fail_ex+0x410/0x560 [ 281.623965][ T9365] _copy_from_user+0x2d/0xb0 [ 281.623991][ T9365] bm_register_write+0x15f/0x1820 [ 281.624025][ T9365] ? __pfx_bm_register_write+0x10/0x10 [ 281.624048][ T9365] vfs_write+0x296/0xba0 [ 281.624088][ T9365] ? __pfx_vfs_write+0x10/0x10 [ 281.624117][ T9365] ? __fget_files+0x2a/0x420 [ 281.624146][ T9365] ? __fget_files+0x3a2/0x420 [ 281.624170][ T9365] ? __fget_files+0x2a/0x420 [ 281.624204][ T9365] ksys_write+0x150/0x270 [ 281.624235][ T9365] ? __pfx_ksys_write+0x10/0x10 [ 281.624280][ T9365] __do_fast_syscall_32+0x27a/0x6a0 [ 281.624303][ T9365] ? do_fast_syscall_32+0x33/0x70 [ 281.624323][ T9365] ? asm_int80_emulation+0x1a/0x20 [ 281.624341][ T9365] ? do_int80_emulation+0x299/0x500 [ 281.624361][ T9365] ? trace_irq_disable+0x3b/0x140 [ 281.624391][ T9365] do_fast_syscall_32+0x33/0x70 [ 281.624411][ T9365] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 281.624434][ T9365] RIP: 0023:0xf701f0ec [ 281.624451][ T9365] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 281.624467][ T9365] RSP: 002b:00000000f540d50c EFLAGS: 00000206 ORIG_RAX: 0000000000000004 [ 281.624488][ T9365] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000300 [ 281.624501][ T9365] RDX: 000000000000002c RSI: 0000000000000000 RDI: 0000000000000000 [ 281.624513][ T9365] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 281.624524][ T9365] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 281.624535][ T9365] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 281.624564][ T9365] [ 281.625012][ T9365] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1147'. [ 281.648065][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 281.654216][ T5728] usb 2-1: device descriptor read/64, error -71 [ 281.698904][ T10] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 282.158196][ T5728] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 282.293150][ T9383] ovs-s!!: entered promiscuous mode [ 282.308866][ T5728] usb 2-1: device descriptor read/64, error -71 [ 282.357168][ T10] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 282.418834][ T5728] usb usb2-port1: attempt power cycle [ 282.425545][ T10] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 282.440817][ T10] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 282.451290][ T10] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 282.465760][ T10] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 282.480836][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 282.678037][ T24] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 282.703424][ T10] usb 4-1: usb_control_msg returned -32 [ 282.728457][ T10] usbtmc 4-1:16.0: can't read capabilities [ 282.789633][ T5728] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 282.840607][ T5728] usb 2-1: device descriptor read/8, error -71 [ 282.888105][ T24] usb 5-1: Using ep0 maxpacket: 8 [ 282.905372][ T24] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 282.930074][ T24] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 282.948509][ T24] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 282.970591][ T24] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 282.993564][ T24] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 283.016576][ T24] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 283.047148][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 283.098190][ T5728] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 283.136240][ T9394] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1152'. [ 283.148563][ T5728] usb 2-1: device descriptor read/8, error -71 [ 283.196663][ T9394] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1152'. [ 283.259552][ T5728] usb usb2-port1: unable to enumerate USB device [ 283.286209][ T24] usb 5-1: usb_control_msg returned -32 [ 283.307281][ T24] usbtmc 5-1:16.0: can't read capabilities [ 284.354422][ T9426] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1159'. [ 284.508130][ T24] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 284.671589][ T24] usb 1-1: unable to get BOS descriptor or descriptor too short [ 284.690224][ T24] usb 1-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 284.735410][ T24] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 284.786350][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 284.824495][ T24] usb 1-1: Product: syz [ 284.863087][ T24] usb 1-1: Manufacturer: syz [ 284.892104][ T24] usb 1-1: SerialNumber: syz [ 285.074230][ T9448] kernel read not supported for file /batadv_slave_1» (pid: 9448 comm: syz.2.1162) [ 285.093055][ T30] audit: type=1800 audit(1787319971.722:468): pid=9448 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1162" name=6261746164765F736C6176655F31BB dev="mqueue" ino=32831 res=0 errno=0 [ 285.117107][ T24] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 285.293839][ T9457] FAULT_INJECTION: forcing a failure. [ 285.293839][ T9457] name failslab, interval 1, probability 0, space 0, times 0 [ 285.310104][ T9457] CPU: 0 UID: 0 PID: 9457 Comm: syz.2.1165 Tainted: G L syzkaller #0 PREEMPT(full) [ 285.310138][ T9457] Tainted: [L]=SOFTLOCKUP [ 285.310144][ T9457] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 285.310156][ T9457] Call Trace: [ 285.310164][ T9457] [ 285.310172][ T9457] dump_stack_lvl+0xe8/0x150 [ 285.310194][ T9457] should_fail_ex+0x410/0x560 [ 285.310211][ T9457] should_failslab+0xa8/0x100 [ 285.310227][ T9457] __kmalloc_cache_noprof+0xa8/0x660 [ 285.310249][ T9457] ? kasan_save_track+0x3e/0x80 [ 285.310271][ T9457] ? kmem_cache_alloc_noprof+0x2a4/0x5f0 [ 285.310292][ T9457] ? nsim_fib_event_nb+0x185/0x11d0 [ 285.310312][ T9457] ? nsim_fib_event_nb+0x185/0x11d0 [ 285.310331][ T9457] ? sock_sendmsg_nosec+0x13a/0x180 [ 285.310344][ T9457] nsim_fib_event_nb+0x185/0x11d0 [ 285.310356][ T9457] ? atomic_notifier_call_chain+0x26/0x180 [ 285.310374][ T9457] notifier_call_chain+0x1a5/0x3d0 [ 285.310408][ T9457] ? atomic_notifier_call_chain+0x26/0x180 [ 285.310444][ T9457] atomic_notifier_call_chain+0xda/0x180 [ 285.310473][ T9457] call_fib_notifiers+0x31/0x60 [ 285.310490][ T9457] call_fib_entry_notifiers+0x158/0x200 [ 285.310506][ T9457] ? __pfx_call_fib_entry_notifiers+0x10/0x10 [ 285.310521][ T9457] ? kmem_cache_alloc_noprof+0x30c/0x5f0 [ 285.310533][ T9457] ? kmem_cache_alloc_noprof+0x152/0x5f0 [ 285.310553][ T9457] ? fib_table_insert+0xe58/0x1b10 [ 285.310582][ T9457] fib_table_insert+0x143f/0x1b10 [ 285.310628][ T9457] inet_rtm_newroute+0x14f/0x250 [ 285.310644][ T9457] ? __local_bh_enable_ip+0xd6/0x140 [ 285.310656][ T9457] ? __dev_queue_xmit+0x29b/0x3820 [ 285.310675][ T9457] ? __pfx_inet_rtm_newroute+0x10/0x10 [ 285.310717][ T9457] ? __pfx_inet_rtm_newroute+0x10/0x10 [ 285.310745][ T9457] rtnetlink_rcv_msg+0x802/0xc00 [ 285.310772][ T9457] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 285.310787][ T9457] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 285.310809][ T9457] ? ref_tracker_free+0x689/0x830 [ 285.310825][ T9457] ? __pfx_ref_tracker_free+0x10/0x10 [ 285.310847][ T9457] ? __asan_memcpy+0x40/0x70 [ 285.310866][ T9457] ? __skb_clone+0x5c/0x6c0 [ 285.310894][ T9457] netlink_rcv_skb+0x226/0x4a0 [ 285.310919][ T9457] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 285.310941][ T9457] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 285.310977][ T9457] ? netlink_deliver_tap+0x2e/0x1b0 [ 285.311002][ T9457] ? netlink_deliver_tap+0x2e/0x1b0 [ 285.311034][ T9457] netlink_unicast+0x7bd/0x940 [ 285.311065][ T9457] netlink_sendmsg+0x813/0xb40 [ 285.311098][ T9457] ? __pfx_netlink_sendmsg+0x10/0x10 [ 285.311127][ T9457] ? aa_sock_msg_perm+0xf6/0x1c0 [ 285.311217][ T9457] ? __pfx_netlink_sendmsg+0x10/0x10 [ 285.311248][ T9457] sock_sendmsg_nosec+0x13a/0x180 [ 285.311271][ T9457] ____sys_sendmsg+0x54e/0x850 [ 285.311299][ T9457] ? __pfx_____sys_sendmsg+0x10/0x10 [ 285.311337][ T9457] ___sys_sendmsg+0x2a5/0x360 [ 285.311360][ T9457] ? __lock_acquire+0x683/0x2cf0 [ 285.311405][ T9457] ? __pfx____sys_sendmsg+0x10/0x10 [ 285.311437][ T9457] ? get_pid_task+0x20/0x1f0 [ 285.311463][ T9457] ? get_pid_task+0x20/0x1f0 [ 285.311486][ T9457] ? get_pid_task+0x20/0x1f0 [ 285.311540][ T9457] ? __fget_files+0x2a/0x420 [ 285.311562][ T9457] ? __fget_files+0x3a2/0x420 [ 285.311639][ T9457] __sys_sendmsg+0x177/0x240 [ 285.311668][ T9457] ? __pfx___sys_sendmsg+0x10/0x10 [ 285.311711][ T9457] __do_fast_syscall_32+0x27a/0x6a0 [ 285.311733][ T9457] ? do_fast_syscall_32+0x33/0x70 [ 285.311752][ T9457] ? asm_int80_emulation+0x1a/0x20 [ 285.311768][ T9457] ? do_int80_emulation+0x299/0x500 [ 285.311794][ T9457] ? trace_irq_disable+0x3b/0x140 [ 285.311824][ T9457] do_fast_syscall_32+0x33/0x70 [ 285.311846][ T9457] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 285.311868][ T9457] RIP: 0023:0xf701f0ec [ 285.311886][ T9457] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 285.311901][ T9457] RSP: 002b:00000000f540d50c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 285.311920][ T9457] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000c00 [ 285.311932][ T9457] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 285.312059][ T9457] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 285.312071][ T9457] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 285.312081][ T9457] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 285.312106][ T9457] [ 285.312879][ T24] usb 1-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 285.791296][ T5610] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 285.803762][ T24] usb 1-1: found format II with max.bitrate = 4, frame size=7372 [ 285.816574][ T24] usb 1-1: invalid uac2 rates [ 285.821826][ T24] usb 1-1: invalid uac2 rates [ 285.829125][ T24] usb 1-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 285.838416][ T24] usb 1-1: found format II with max.bitrate = 4, frame size=7372 [ 285.949944][ T5610] usb 2-1: New USB device found, idVendor=0425, idProduct=a4a1, bcdDevice= 0.40 [ 285.970128][ T5610] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 285.988226][ T5610] usb 2-1: can't read configurations, error -61 [ 286.039706][ T24] usb 1-1: parse_audio_format_rates_v2v3(): unable to retrieve number of sample rates (clock 0) [ 286.128631][ T5610] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 286.188572][ T24] usb 1-1: USB disconnect, device number 67 [ 286.297328][ T7180] udevd[7180]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 286.309281][ T5610] usb 2-1: New USB device found, idVendor=0425, idProduct=a4a1, bcdDevice= 0.40 [ 286.356615][ T5610] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 286.381444][ T5610] usb 2-1: can't read configurations, error -61 [ 286.391441][ T5610] usb usb2-port1: attempt power cycle [ 286.748252][ T5610] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 286.789826][ T5610] usb 2-1: New USB device found, idVendor=0425, idProduct=a4a1, bcdDevice= 0.40 [ 286.803017][ T5610] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 286.818787][ T5610] usb 2-1: can't read configurations, error -61 [ 286.916963][ T9477] netlink: 'syz.2.1170': attribute type 11 has an invalid length. [ 286.948263][ T5610] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 286.980274][ T5610] usb 2-1: New USB device found, idVendor=0425, idProduct=a4a1, bcdDevice= 0.40 [ 287.011155][ T5610] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 287.020457][ T5610] usb 2-1: can't read configurations, error -61 [ 287.027421][ T5610] usb usb2-port1: unable to enumerate USB device [ 287.263798][ T9484] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1172'. [ 287.518165][ T5683] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 287.669435][ T5683] usb 3-1: New USB device found, idVendor=0b05, idProduct=1866, bcdDevice= 0.00 [ 287.683370][ T5683] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 287.700591][ T5683] usb 3-1: config 0 descriptor?? [ 288.109747][ T9486] ovs-s!: entered promiscuous mode [ 288.127830][ T5683] asus 0003:0B05:1866.0021: unknown main item tag 0x0 [ 288.167621][ T5683] asus 0003:0B05:1866.0021: unknown main item tag 0x0 [ 288.180143][ T5683] asus 0003:0B05:1866.0021: unknown main item tag 0x0 [ 288.198662][ T5683] asus 0003:0B05:1866.0021: unknown main item tag 0x0 [ 288.206249][ T5683] asus 0003:0B05:1866.0021: unknown main item tag 0x0 [ 288.213568][ T5683] asus 0003:0B05:1866.0021: unknown main item tag 0x0 [ 288.221363][ T5683] asus 0003:0B05:1866.0021: unknown main item tag 0x0 [ 288.230874][ T5683] asus 0003:0B05:1866.0021: unknown main item tag 0x0 [ 288.247082][ T5683] asus 0003:0B05:1866.0021: hidraw0: USB HID vef.fd Device [HID 0b05:1866] on usb-dummy_hcd.2-1/input0 [ 288.343108][ T9488] udevd[9488]: failed to execute '/lib/udev/fido_id' 'fido_id': No such file or directory [ 288.366261][ T5610] usb 3-1: USB disconnect, device number 59 [ 288.579032][ T5683] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 288.708623][ T9412] usbtmc 4-1:16.0: usb_control_msg returned -110 [ 288.721161][ T10] usb 4-1: USB disconnect, device number 47 [ 288.741880][ T5683] usb 1-1: New USB device found, idVendor=0b05, idProduct=1abe, bcdDevice= 0.00 [ 288.776701][ T5683] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 288.792664][ T5683] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 288.823156][ T5683] usb 1-1: config 0 descriptor?? [ 288.826861][ T5610] usb 5-1: USB disconnect, device number 60 [ 288.834317][ T9489] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 289.069767][ T9502] FAULT_INJECTION: forcing a failure. [ 289.069767][ T9502] name failslab, interval 1, probability 0, space 0, times 0 [ 289.124421][ T9502] CPU: 1 UID: 0 PID: 9502 Comm: syz.3.1179 Tainted: G L syzkaller #0 PREEMPT(full) [ 289.124460][ T9502] Tainted: [L]=SOFTLOCKUP [ 289.124487][ T9502] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 289.124500][ T9502] Call Trace: [ 289.124510][ T9502] [ 289.124518][ T9502] dump_stack_lvl+0xe8/0x150 [ 289.124563][ T9502] should_fail_ex+0x410/0x560 [ 289.124594][ T9502] should_failslab+0xa8/0x100 [ 289.124625][ T9502] __kmalloc_cache_noprof+0xa8/0x660 [ 289.124653][ T9502] ? alloc_netdev_mqs+0xc2d/0x12a0 [ 289.124681][ T9502] ? alloc_netdev_mqs+0xc2d/0x12a0 [ 289.124706][ T9502] ? __xdp_rxq_info_reg+0x171/0x280 [ 289.124734][ T9502] alloc_netdev_mqs+0xc2d/0x12a0 [ 289.124770][ T9502] internal_dev_create+0x89/0x480 [ 289.124798][ T9502] ovs_vport_add+0xea/0x230 [ 289.124820][ T9502] new_vport+0x1a/0x190 [ 289.124940][ T9502] ovs_dp_cmd_new+0x690/0xac0 [ 289.125002][ T9502] ? __pfx_ovs_dp_cmd_new+0x10/0x10 [ 289.125038][ T9502] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 289.125063][ T9502] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 289.125093][ T9502] genl_family_rcv_msg_doit+0x233/0x340 [ 289.125117][ T9502] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 289.125144][ T9502] ? bpf_lsm_capable+0x9/0x20 [ 289.125163][ T9502] ? security_capable+0x7e/0x2c0 [ 289.125193][ T9502] genl_rcv_msg+0x614/0x7a0 [ 289.125221][ T9502] ? __pfx_genl_rcv_msg+0x10/0x10 [ 289.125246][ T9502] ? __pfx_ovs_dp_cmd_new+0x10/0x10 [ 289.125283][ T9502] ? __pfx_ref_tracker_free+0x10/0x10 [ 289.125304][ T9502] ? __asan_memcpy+0x40/0x70 [ 289.125325][ T9502] ? __skb_clone+0x5c/0x6c0 [ 289.125358][ T9502] netlink_rcv_skb+0x226/0x4a0 [ 289.125386][ T9502] ? __pfx_genl_rcv_msg+0x10/0x10 [ 289.125410][ T9502] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 289.125452][ T9502] ? down_read+0x2be/0x330 [ 289.125479][ T9502] genl_rcv+0x28/0x40 [ 289.125499][ T9502] netlink_unicast+0x7bd/0x940 [ 289.125536][ T9502] netlink_sendmsg+0x813/0xb40 [ 289.125573][ T9502] ? __pfx_netlink_sendmsg+0x10/0x10 [ 289.125671][ T9502] ? aa_sock_msg_perm+0xf6/0x1c0 [ 289.125702][ T9502] ? __pfx_netlink_sendmsg+0x10/0x10 [ 289.125728][ T9502] sock_sendmsg_nosec+0x13a/0x180 [ 289.125752][ T9502] ____sys_sendmsg+0x54e/0x850 [ 289.125784][ T9502] ? __pfx_____sys_sendmsg+0x10/0x10 [ 289.125822][ T9502] ___sys_sendmsg+0x2a5/0x360 [ 289.125843][ T9502] ? __lock_acquire+0x683/0x2cf0 [ 289.125871][ T9502] ? __pfx____sys_sendmsg+0x10/0x10 [ 289.125894][ T9502] ? get_pid_task+0x20/0x1f0 [ 289.125918][ T9502] ? get_pid_task+0x20/0x1f0 [ 289.125937][ T9502] ? get_pid_task+0x20/0x1f0 [ 289.125985][ T9502] ? __fget_files+0x2a/0x420 [ 289.126006][ T9502] ? __fget_files+0x3a2/0x420 [ 289.126038][ T9502] __sys_sendmsg+0x177/0x240 [ 289.126063][ T9502] ? __pfx___sys_sendmsg+0x10/0x10 [ 289.126290][ T9502] __do_fast_syscall_32+0x27a/0x6a0 [ 289.126437][ T9502] ? do_fast_syscall_32+0x33/0x70 [ 289.126457][ T9502] ? asm_int80_emulation+0x1a/0x20 [ 289.126474][ T9502] ? do_int80_emulation+0x299/0x500 [ 289.126574][ T9502] ? trace_irq_disable+0x3b/0x140 [ 289.126603][ T9502] do_fast_syscall_32+0x33/0x70 [ 289.126665][ T9502] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 289.126684][ T9502] RIP: 0023:0xf706f0ec [ 289.126695][ T9502] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 289.126704][ T9502] RSP: 002b:00000000f545d50c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 289.126717][ T9502] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000100 [ 289.126727][ T9502] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 289.126737][ T9502] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 289.126747][ T9502] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 289.126759][ T9502] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 289.126823][ T9502] [ 289.376942][ T5683] asus 0003:0B05:1ABE.0022: unknown main item tag 0x0 [ 289.681851][ T9506] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1181'. [ 289.694846][ T5683] asus 0003:0B05:1ABE.0022: unknown main item tag 0x0 [ 289.780900][ T5683] asus 0003:0B05:1ABE.0022: unexpected long global item [ 289.800745][ T24] usb 3-1: new full-speed USB device number 60 using dummy_hcd [ 289.804723][ T5683] asus 0003:0B05:1ABE.0022: Asus hid parse failed: -22 [ 289.824192][ T5683] asus 0003:0B05:1ABE.0022: probe with driver asus failed with error -22 [ 289.958699][ T24] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 289.994591][ T24] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 290.020738][ T24] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 290.040370][ T24] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 290.062228][ T24] usb 3-1: config 1 interface 1 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 19 [ 290.091261][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 290.100802][ T24] usb 3-1: Product: syz [ 290.106824][ T24] usb 3-1: Manufacturer: syz [ 290.116713][ T24] usb 3-1: SerialNumber: syz [ 290.134963][ T9500] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 290.229564][ T5683] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 290.376388][ T9500] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 290.397733][ T9500] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 290.408189][ T5683] usb 2-1: Using ep0 maxpacket: 8 [ 290.416028][ T9500] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 290.424434][ T9500] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 290.428235][ T5610] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 290.432742][ T5683] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 290.453395][ T5683] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 290.462784][ T5683] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 290.474361][ T5683] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 290.485403][ T5683] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 290.497352][ T5683] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 290.514824][ T5683] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 290.598048][ T5610] usb 5-1: Using ep0 maxpacket: 16 [ 290.612048][ T5610] usb 5-1: New USB device found, idVendor=0582, idProduct=00eb, bcdDevice= 0.40 [ 290.640694][ T5610] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 290.668102][ T5610] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 290.712300][ T5610] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 290.730273][ T5610] usb 5-1: Product: syz [ 290.744818][ T5683] usb 2-1: usb_control_msg returned -32 [ 290.748367][ T5610] usb 5-1: Manufacturer: syz [ 290.757008][ T5683] usbtmc 2-1:16.0: can't read capabilities [ 290.758753][ T5610] usb 5-1: SerialNumber: syz [ 290.912634][ T9527] netlink: 'syz.3.1187': attribute type 11 has an invalid length. [ 291.039595][ T9520] tc action pedit offset must be on 32 bit boundaries [ 291.049873][ T9520] tc action pedit offset must be on 32 bit boundaries [ 291.058376][ T9520] tc action pedit offset must be on 32 bit boundaries [ 291.063245][ T9500] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 291.066639][ T9520] tc action pedit offset must be on 32 bit boundaries [ 291.082797][ T9520] tc action pedit offset must be on 32 bit boundaries [ 291.091005][ T9520] tc action pedit offset must be on 32 bit boundaries [ 291.094570][ T9500] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 291.099090][ T9520] tc action pedit offset must be on 32 bit boundaries [ 291.116543][ T9520] tc action pedit offset must be on 32 bit boundaries [ 291.124407][ T9520] tc action pedit offset must be on 32 bit boundaries [ 291.126663][ T9500] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 291.132119][ T9520] tc action pedit offset must be on 32 bit boundaries [ 291.141551][ T9500] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 291.147854][ T9520] 0: reclassify loop, rule prio 0, protocol 800 [ 291.241465][ T5610] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 291.265205][ T5610] usb 5-1: 2:1 : invalid UAC_AS_GENERAL desc [ 291.349887][ T5683] usb 1-1: USB disconnect, device number 68 [ 291.394843][ T24] cdc_ncm 3-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 291.409067][ T24] cdc_ncm 3-1:1.0: setting rx_max = 16384 [ 291.446986][ T5610] usb 5-1: USB disconnect, device number 61 [ 291.500664][ T9534] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1190'. [ 291.534515][ T5614] udevd[5614]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 291.554969][ T9534] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1190'. [ 291.619292][ T24] cdc_ncm 3-1:1.0: setting tx_max = 16384 [ 291.622290][ T9537] tun1: tun_chr_ioctl cmd 1074025675 [ 291.661713][ T9537] tun1: persist enabled [ 291.685436][ T9534] tun1: tun_chr_ioctl cmd 1074025675 [ 291.685441][ T24] cdc_ncm 3-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.2-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 291.703712][ T9534] tun1: persist disabled [ 291.737607][ T9534] netlink: 'syz.0.1190': attribute type 1 has an invalid length. [ 291.756417][ T9534] netlink: 'syz.0.1190': attribute type 2 has an invalid length. [ 291.836665][ T9] usb 2-1: USB disconnect, device number 67 [ 292.010747][ T5610] usb 3-1: USB disconnect, device number 60 [ 292.033036][ T5610] cdc_ncm 3-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.2-1, CDC NCM (NO ZLP) [ 292.063218][ T30] audit: type=1326 audit(1787319978.692:469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9544 comm="syz.0.1192" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707f0ec code=0x7ffc0000 [ 292.117051][ T30] audit: type=1326 audit(1787319978.692:470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9544 comm="syz.0.1192" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707f0ec code=0x7ffc0000 [ 292.146521][ T30] audit: type=1326 audit(1787319978.692:471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9544 comm="syz.0.1192" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707f0ec code=0x7ffc0000 [ 292.170996][ T9552] program syz.3.1193 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 292.219100][ T30] audit: type=1326 audit(1787319978.692:472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9544 comm="syz.0.1192" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707f0ec code=0x7ffc0000 [ 292.253280][ T30] audit: type=1326 audit(1787319978.692:473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9544 comm="syz.0.1192" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=227 compat=1 ip=0xf707f0ec code=0x7ffc0000 [ 292.289271][ T30] audit: type=1326 audit(1787319978.692:474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9544 comm="syz.0.1192" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707f0ec code=0x7ffc0000 [ 292.326668][ T30] audit: type=1326 audit(1787319978.692:475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9544 comm="syz.0.1192" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707f0ec code=0x7ffc0000 [ 292.410330][ T30] audit: type=1326 audit(1787319978.692:476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9544 comm="syz.0.1192" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707f0ec code=0x7ffc0000 [ 292.461039][ T30] audit: type=1326 audit(1787319978.692:477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9544 comm="syz.0.1192" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf707f0ec code=0x7ffc0000 [ 292.509635][ T30] audit: type=1326 audit(1787319978.702:478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9544 comm="syz.0.1192" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707f0ec code=0x7ffc0000 [ 292.840152][ T9575] netlink: 'syz.4.1199': attribute type 11 has an invalid length. [ 293.125532][ T9589] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1202'. [ 293.167655][ T9589] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1202'. [ 293.196115][ T9593] CIFS: Invalid mount helper version specified [ 293.227122][ T9589] tun1: tun_chr_ioctl cmd 1074025675 [ 293.244948][ T9589] tun1: persist enabled [ 293.265852][ T9589] tun1: tun_chr_ioctl cmd 1074025675 [ 293.294298][ T9589] tun1: persist disabled [ 293.320132][ T9589] netlink: 'syz.4.1202': attribute type 1 has an invalid length. [ 293.342633][ T9589] netlink: 'syz.4.1202': attribute type 2 has an invalid length. [ 293.788089][ T5683] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 293.848935][ T9608] FAULT_INJECTION: forcing a failure. [ 293.848935][ T9608] name failslab, interval 1, probability 0, space 0, times 0 [ 293.900129][ T9608] CPU: 0 UID: 0 PID: 9608 Comm: syz.2.1208 Tainted: G L syzkaller #0 PREEMPT(full) [ 293.900162][ T9608] Tainted: [L]=SOFTLOCKUP [ 293.900169][ T9608] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 293.900180][ T9608] Call Trace: [ 293.900187][ T9608] [ 293.900195][ T9608] dump_stack_lvl+0xe8/0x150 [ 293.900228][ T9608] should_fail_ex+0x410/0x560 [ 293.900256][ T9608] should_failslab+0xa8/0x100 [ 293.900283][ T9608] kmem_cache_alloc_noprof+0xa6/0x5f0 [ 293.900305][ T9608] ? security_inode_alloc+0x39/0x310 [ 293.900327][ T9608] ? security_inode_alloc+0x39/0x310 [ 293.900357][ T9608] security_inode_alloc+0x39/0x310 [ 293.900390][ T9608] inode_init_always_gfp+0x97e/0xd30 [ 293.900421][ T9608] ? __pfx_sock_alloc_inode+0x10/0x10 [ 293.900440][ T9608] alloc_inode+0x82/0x1b0 [ 293.900465][ T9608] __sock_create+0x12d/0x9d0 [ 293.900495][ T9608] __sys_socket+0xd6/0x1b0 [ 293.900519][ T9608] __ia32_compat_sys_socketcall+0x412/0xa50 [ 293.900544][ T9608] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 293.900567][ T9608] ? __fget_files+0x3a2/0x420 [ 293.900593][ T9608] ? __pfx___ia32_compat_sys_socketcall+0x10/0x10 [ 293.900638][ T9608] __do_fast_syscall_32+0x27a/0x6a0 [ 293.900660][ T9608] ? do_fast_syscall_32+0x33/0x70 [ 293.900679][ T9608] ? asm_int80_emulation+0x1a/0x20 [ 293.900704][ T9608] ? do_int80_emulation+0x299/0x500 [ 293.900724][ T9608] ? trace_irq_disable+0x3b/0x140 [ 293.900751][ T9608] do_fast_syscall_32+0x33/0x70 [ 293.900771][ T9608] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 293.900792][ T9608] RIP: 0023:0xf701f0ec [ 293.900807][ T9608] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 293.900824][ T9608] RSP: 002b:00000000f540c370 EFLAGS: 00000206 ORIG_RAX: 0000000000000066 [ 293.900843][ T9608] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 00000000f540c380 [ 293.900857][ T9608] RDX: 00000000f73e7ff4 RSI: 0000000080000040 RDI: 00000000f540c3dc [ 293.900869][ T9608] RBP: 00000000f540c4c4 R08: 0000000000000000 R09: 0000000000000000 [ 293.900881][ T9608] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 293.900892][ T9608] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 293.900920][ T9608] [ 293.900953][ T9608] socket: no more sockets [ 294.198200][ T5683] usb 5-1: Using ep0 maxpacket: 8 [ 294.204233][ T5683] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 294.234603][ T5683] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 294.248396][ T5683] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 294.273894][ T5683] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 294.322193][ T5683] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 294.361494][ T5683] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 294.405768][ T9620] netlink: 'syz.2.1212': attribute type 11 has an invalid length. [ 294.420104][ T5683] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 294.617301][ T9625] [ 294.619672][ T9625] ====================================================== [ 294.627364][ T9625] WARNING: possible circular locking dependency detected [ 294.634475][ T9625] syzkaller #0 Tainted: G L [ 294.641192][ T9625] ------------------------------------------------------ [ 294.648759][ T9625] syz.1.1213/9625 is trying to acquire lock: [ 294.655197][ T9625] ffffffff8ec8d080 (fs_reclaim){+.+.}-{0:0}, at: prepare_alloc_pages+0x15b/0x650 [ 294.655478][ T9627] netlink: 'syz.1.1213': attribute type 2 has an invalid length. [ 294.664888][ T9625] [ 294.664888][ T9625] but task is already holding lock: [ 294.664903][ T9625] ffffffff8ec67520 (pcpu_alloc_mutex){+.+.}-{4:4}, at: pcpu_alloc_noprof+0x231/0x1900 [ 294.664954][ T9625] [ 294.664954][ T9625] which lock already depends on the new lock. [ 294.664954][ T9625] [ 294.664960][ T9625] [ 294.664960][ T9625] the existing dependency chain (in reverse order) is: [ 294.664967][ T9625] [ 294.664967][ T9625] -> #3 (pcpu_alloc_mutex){+.+.}-{4:4}: [ 294.664994][ T9625] __mutex_lock+0x19d/0x1550 [ 294.665015][ T9625] pcpu_alloc_noprof+0x231/0x1900 [ 294.689335][ T5683] usb 5-1: usb_control_msg returned -32 [ 294.690260][ T9625] percpu_ref_init+0x42/0x350 [ 294.708840][ T5683] usbtmc 5-1:16.0: can't read capabilities [ 294.711696][ T9625] blkg_alloc+0xee/0x8f0 [ 294.711730][ T9625] blkg_conf_prep+0x60b/0xd80 [ 294.757945][ T9625] tg_set_conf+0x20b/0x4e0 [ 294.763066][ T9625] cgroup_file_write+0x331/0x8f0 [ 294.768610][ T9625] kernfs_fop_write_iter+0x3a4/0x540 [ 294.774829][ T9625] vfs_write+0x612/0xba0 [ 294.780144][ T9625] ksys_write+0x150/0x270 [ 294.785010][ T9625] __do_fast_syscall_32+0x27a/0x6a0 [ 294.790744][ T9625] do_fast_syscall_32+0x33/0x70 [ 294.796841][ T9625] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 294.803970][ T9625] [ 294.803970][ T9625] -> #2 (&q->blkcg_mutex){+.+.}-{4:4}: [ 294.812009][ T9625] __mutex_lock+0x19d/0x1550 [ 294.817143][ T9625] blkcg_activate_policy+0x1cb/0x8e0 [ 294.823587][ T9625] blk_throtl_init+0x2f7/0x420 [ 294.829611][ T9625] tg_set_conf+0x1db/0x4e0 [ 294.835224][ T9625] cgroup_file_write+0x331/0x8f0 [ 294.840736][ T9625] kernfs_fop_write_iter+0x3a4/0x540 [ 294.847098][ T9625] vfs_write+0x612/0xba0 [ 294.852008][ T9625] ksys_write+0x150/0x270 [ 294.856876][ T9625] __do_fast_syscall_32+0x27a/0x6a0 [ 294.862914][ T9625] do_fast_syscall_32+0x33/0x70 [ 294.870840][ T9625] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 294.878723][ T9625] [ 294.878723][ T9625] -> #1 (&q->q_usage_counter(io)#17){++++}-{0:0}: [ 294.889044][ T9625] blk_alloc_queue+0x544/0x690 [ 294.894438][ T9625] __blk_mq_alloc_disk+0x194/0x390 [ 294.902799][ T9625] loop_add+0x480/0xb40 [ 294.908731][ T9625] loop_init+0xd7/0x160 [ 294.913823][ T9625] do_one_initcall+0x250/0x870 [ 294.920319][ T9625] do_initcall_level+0x10a/0x1a0 [ 294.926526][ T9625] do_initcalls+0x59/0xa0 [ 294.932137][ T9625] kernel_init_freeable+0x29d/0x3e0 [ 294.938165][ T9625] kernel_init+0x22/0x1d0 [ 294.943952][ T9625] ret_from_fork+0x514/0xb70 [ 294.949589][ T9625] ret_from_fork_asm+0x1a/0x30 [ 294.955372][ T9625] [ 294.955372][ T9625] -> #0 (fs_reclaim){+.+.}-{0:0}: [ 294.962620][ T9625] __lock_acquire+0x1520/0x2cf0 [ 294.968664][ T9625] lock_acquire+0x106/0x350 [ 294.974329][ T9625] fs_reclaim_acquire+0x71/0x100 [ 294.980713][ T9625] prepare_alloc_pages+0x15b/0x650 [ 294.986363][ T9625] __alloc_frozen_pages_noprof+0x12f/0x380 [ 294.992692][ T9625] __alloc_pages_noprof+0x10/0x100 [ 294.998329][ T9625] pcpu_populate_chunk+0x181/0xb30 [ 295.004008][ T9625] pcpu_alloc_noprof+0xbca/0x1900 [ 295.009574][ T9625] bpf_map_alloc_percpu+0x65/0x180 [ 295.016128][ T9625] prealloc_init+0x214/0x650 [ 295.022200][ T9625] htab_map_alloc+0x6a0/0xc90 [ 295.028639][ T9625] map_create+0xf3d/0x1b70 [ 295.034483][ T9625] __sys_bpf+0xaea/0xd90 [ 295.039571][ T9625] __ia32_sys_bpf+0xba/0xd0 [ 295.045026][ T9625] __do_fast_syscall_32+0x27a/0x6a0 [ 295.053438][ T9625] do_fast_syscall_32+0x33/0x70 [ 295.060819][ T9625] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 295.067993][ T9625] [ 295.067993][ T9625] other info that might help us debug this: [ 295.067993][ T9625] [ 295.078514][ T9625] Chain exists of: [ 295.078514][ T9625] fs_reclaim --> &q->blkcg_mutex --> pcpu_alloc_mutex [ 295.078514][ T9625] [ 295.091634][ T9625] Possible unsafe locking scenario: [ 295.091634][ T9625] [ 295.099176][ T9625] CPU0 CPU1 [ 295.104654][ T9625] ---- ---- [ 295.110389][ T9625] lock(pcpu_alloc_mutex); [ 295.114909][ T9625] lock(&q->blkcg_mutex); [ 295.122034][ T9625] lock(pcpu_alloc_mutex); [ 295.129260][ T9625] lock(fs_reclaim); [ 295.133337][ T9625] [ 295.133337][ T9625] *** DEADLOCK *** [ 295.133337][ T9625] [ 295.141570][ T9625] locks held by syz.1.1213/9625: 1, last CPU#1: [ 295.148152][ T9625] #0: ffffffff8ec67520 (pcpu_alloc_mutex){+.+.}-{4:4}, at: pcpu_alloc_noprof+0x231/0x1900 [ 295.158264][ T9625] [ 295.158264][ T9625] stack backtrace: [ 295.164961][ T9625] CPU: 1 UID: 0 PID: 9625 Comm: syz.1.1213 Tainted: G L syzkaller #0 PREEMPT(full) [ 295.164987][ T9625] Tainted: [L]=SOFTLOCKUP [ 295.164994][ T9625] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 295.165003][ T9625] Call Trace: [ 295.165010][ T9625] [ 295.165017][ T9625] dump_stack_lvl+0xe8/0x150 [ 295.165045][ T9625] print_circular_bug+0x2e1/0x300 [ 295.165065][ T9625] check_noncircular+0x12e/0x150 [ 295.165084][ T9625] __lock_acquire+0x1520/0x2cf0 [ 295.165108][ T9625] ? clockevents_program_event+0x491/0x630 [ 295.165127][ T9625] ? __pfx_clockevents_program_event+0x10/0x10 [ 295.165143][ T9625] ? hrtimer_start_range_ns_common+0x812/0xb90 [ 295.165164][ T9625] ? prepare_alloc_pages+0x15b/0x650 [ 295.165184][ T9625] lock_acquire+0x106/0x350 [ 295.165205][ T9625] ? prepare_alloc_pages+0x15b/0x650 [ 295.165226][ T9625] ? rcu_is_watching+0x16/0xb0 [ 295.165243][ T9625] fs_reclaim_acquire+0x71/0x100 [ 295.165261][ T9625] ? prepare_alloc_pages+0x15b/0x650 [ 295.165280][ T9625] prepare_alloc_pages+0x15b/0x650 [ 295.165301][ T9625] __alloc_frozen_pages_noprof+0x12f/0x380 [ 295.165324][ T9625] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 295.165347][ T9625] ? __pfx___schedule+0x10/0x10 [ 295.165374][ T9625] __alloc_pages_noprof+0x10/0x100 [ 295.165395][ T9625] pcpu_populate_chunk+0x181/0xb30 [ 295.165415][ T9625] ? preempt_schedule_thunk+0x16/0x40 [ 295.165441][ T9625] pcpu_alloc_noprof+0xbca/0x1900 [ 295.165464][ T9625] bpf_map_alloc_percpu+0x65/0x180 [ 295.165482][ T9625] prealloc_init+0x214/0x650 [ 295.165504][ T9625] htab_map_alloc+0x6a0/0xc90 [ 295.165522][ T9625] map_create+0xf3d/0x1b70 [ 295.165547][ T9625] ? __pfx_map_create+0x10/0x10 [ 295.165572][ T9625] ? bpf_lsm_bpf+0x9/0x20 [ 295.165590][ T9625] ? security_bpf+0x7e/0x2d0 [ 295.165609][ T9625] __sys_bpf+0xaea/0xd90 [ 295.165633][ T9625] ? __pfx___sys_bpf+0x10/0x10 [ 295.165656][ T9625] ? do_futex+0x3e7/0x4e0 [ 295.165680][ T9625] ? rcu_is_watching+0x16/0xb0 [ 295.165697][ T9625] __ia32_sys_bpf+0xba/0xd0 [ 295.165719][ T9625] __do_fast_syscall_32+0x27a/0x6a0 [ 295.165737][ T9625] ? do_fast_syscall_32+0x33/0x70 [ 295.165754][ T9625] ? irqentry_exit+0x10f/0x910 [ 295.165768][ T9625] ? trace_irq_disable+0x3b/0x140 [ 295.165790][ T9625] do_fast_syscall_32+0x33/0x70 [ 295.165807][ T9625] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 295.165826][ T9625] RIP: 0023:0xf705f0ec [ 295.165841][ T9625] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 295.165856][ T9625] RSP: 002b:00000000f544d50c EFLAGS: 00000206 ORIG_RAX: 0000000000000165 [ 295.165874][ T9625] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000080000540 [ 295.165886][ T9625] RDX: 0000000000000050 RSI: 0000000000000000 RDI: 0000000000000000 [ 295.165896][ T9625] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 295.165906][ T9625] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 295.165915][ T9625] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 295.165931][ T9625] [ 295.549216][ T9631] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1216'. [ 295.561950][ T9627] D†'|o: entered promiscuous mode [ 295.768113][ T5683] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 295.918831][ T5683] usb 3-1: New USB device found, idVendor=04e6, idProduct=0005, bcdDevice= 1.00 [ 295.936154][ T9] usb 1-1: new full-speed USB device number 69 using dummy_hcd [ 295.945268][ T5683] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 295.956806][ T5683] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 295.969185][ T5683] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 295.977845][ T5683] usb 3-1: Product: syz [ 295.985114][ T5683] usb 3-1: Manufacturer: syz [ 295.991595][ T5683] usb 3-1: SerialNumber: syz [ 296.004780][ T5683] ums-sddr09 3-1:1.0: USB Mass Storage device detected [ 296.018829][ T5683] ums-sddr09 3-1:1.0: This device (04e6,0005,0100 S 06 P 50) has an unneeded SubClass entry in unusual_devs.h (kernel syzkaller) [ 296.018829][ T5683] Please send a copy of this message to and [ 296.100212][ T9] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 296.112195][ T9] usb 1-1: config 0 interface 0 altsetting 255 endpoint 0x8 has invalid maxpacket 160, setting to 64 [ 296.125100][ T9] usb 1-1: config 0 interface 0 has no altsetting 0 [ 296.136709][ T9] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 296.140093][ T5610] usb 5-1: USB disconnect, device number 62 [ 296.145610][ T9] usb 1-1: Product: syz [ 296.158238][ T9] usb 1-1: Manufacturer: syz [ 296.164593][ T9] usb 1-1: SerialNumber: syz [ 296.174368][ T9] usb 1-1: config 0 descriptor?? [ 296.184788][ T9] usb 1-1: selecting invalid altsetting 0 [ 296.394967][ T9618] usb 1-1: cannot submit urb 0, error -2: endpoint not enabled [ 296.403442][ T9618] usb 1-1: cannot submit urb 0, error -2: endpoint not enabled [ 296.420138][ T9618] usb 1-1: cannot submit urb 0, error -2: endpoint not enabled [ 296.438396][ T9618] usb 1-1: cannot submit urb 0, error -2: endpoint not enabled [ 296.451304][ T9628] syzkaller0: entered promiscuous mode [ 296.457365][ T9618] usb 1-1: cannot submit urb 0, error -2: endpoint not enabled [ 296.459032][ T9] usb 1-1: USB disconnect, device number 69 [ 296.466089][ T9628] syzkaller0: entered allmulticast mode [ 296.479159][ T9637] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 296.493010][ T9637] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 296.556630][ T5683] ums-sddr09 3-1:1.0: probe with driver ums-sddr09 failed with error -5 [ 296.580213][ T5683] usb 3-1: USB disconnect, device number 61 [ 296.868771][ T13] wlan1: Trigger new scan to find an IBSS to join [ 299.838304][ T63] wlan1: Trigger new scan to find an IBSS to join [ 302.868136][ T13] wlan1: Trigger new scan to find an IBSS to join [ 303.818340][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50