last executing test programs: 2m46.134895518s ago: executing program 2 (id=2848): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x3fd, &(0x7f0000000500)=0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000690000/0x7000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000ff1000/0xc000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000690000/0x4000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r3 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x1, 0x800000c1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) io_pgetevents(r2, 0x1, 0x1, &(0x7f0000000100)=[{}], 0x0, 0x0) io_submit(r2, 0xf000, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000001c0)='m', 0xfffffdfc}]) (fail_nth: 18) 2m45.532003962s ago: executing program 2 (id=2850): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x33) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="540000004900010928bd700018dcdf250aff8000", @ANYRES32, @ANYBLOB="0000000014000100fe80000000000000000000000000001f14000100fe8000000000000000000000000000bb080002"], 0x54}}, 0x0) r3 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r3, 0x2000) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) connect$l2tp(r4, &(0x7f0000000200)={0x2, 0x0, @remote, 0x1}, 0x10) ioctl$VIDIOC_QUERY_EXT_CTRL(r3, 0xc0e85667, &(0x7f0000000000)={0x40000000, 0x200, "1bf7c1fb5e291b2b1517babaf2110f6af6ee5f862ff5495ec2f7095ca0df98c7", 0x8, 0x39d7622f, 0x0, 0x6, 0x0, 0x8, 0x8, 0x8, [0x9, 0x5, 0x4, 0x80000000]}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a00010069706f69620000000400028008000500", @ANYRES32=0x0, @ANYBLOB], 0x3c}, 0x1, 0xba01, 0x0, 0x4005}, 0x810) ioctl$KVM_X86_SET_MSR_FILTER(r6, 0x4188aec6, &(0x7f00000002c0)={0x1, [{0x1, 0x0, 0x2, 0x0}, {0x1, 0x0, 0x6, 0x0}, {0x1, 0x10, 0x80044da0, &(0x7f0000000100)="3ae8"}, {0x3, 0x0, 0x9, 0x0}, {0x0, 0x0, 0x0, 0x0}, {0x2, 0x0, 0x1, 0x0}, {0x1, 0x0, 0x0, 0x0}, {0x2, 0x0, 0x80000006, 0x0}, {0x1, 0x0, 0xa, 0xfffffffffffffffd}, {0x0, 0xa2, 0xfffffff9, 0x0}, {0x1, 0x0, 0x3, 0x0}, {0x2, 0x0, 0x3, 0x0}, {0x2, 0x0, 0x5da2, 0x0}, {0x3, 0x8, 0xd1a5, &(0x7f0000000700)="d2"}, {0x2, 0x0, 0x5cf1, 0x0}, {0x3, 0x0, 0x818, 0x0}]}) prctl$PR_GET_TID_ADDRESS(0x28, &(0x7f0000000000)) ioctl$KVM_RUN(r7, 0xae80, 0x0) 2m45.188508806s ago: executing program 2 (id=2853): sendmsg$ETHTOOL_MSG_PAUSE_GET(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={0x0, 0xfffffffffffffef9}, 0x1, 0x0, 0x0, 0x20048004}, 0x840) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB="8c45000043000701fefffffffcdbdf25017c000004004580744501"], 0x458c}, 0x1, 0x0, 0x0, 0xbbe21a6a6c0c72fd}, 0xc000) (fail_nth: 61) 2m45.09045068s ago: executing program 2 (id=2854): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r1, 0x0, 0xf, &(0x7f0000000000)=0x5, 0x4) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x4e20, @broadcast}, 0x65) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, 0x0) epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) set_mempolicy(0x4005, &(0x7f0000000000)=0x1, 0x4) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x3d, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x9, 0x0, 0x7ffffdbd}]}) r4 = shmat(0x0, &(0x7f0000ffc000/0x3000)=nil, 0x4000) shmdt(r4) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f0000724000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000290000/0x4000)=nil) syz_emit_ethernet(0x95, &(0x7f0000000240)=ANY=[@ANYBLOB], &(0x7f00000001c0)={0x1, 0x1, [0xf74, 0x4e0, 0xe4b, 0xa20]}) syz_open_dev$usbfs(&(0x7f0000000100), 0x775, 0x8000) munlockall() madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) dup(r2) r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r5, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x1}, 0x8) syz_open_dev$dvb_dvr(&(0x7f0000000240), 0x0, 0x100) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000140)={0x48, 0xc, 0x0, 0x0, 0xfffffffffffffffc, 0x1541}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000000)={0x28, 0x6, 0x0, 0x0, &(0x7f0000ffb000/0x4000)=nil, 0x4000}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 2m42.500759276s ago: executing program 2 (id=2859): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x8040}, 0x44000) 2m42.215734332s ago: executing program 2 (id=2860): r0 = socket$nl_route(0x10, 0x3, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000300), 0x2002, 0x0) syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x80400) ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f00000000c0)={'sit0\x00', 0x0}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x3, 0x8, 0x8001, 0x0, 0xb, 0x8000000000000000, 0x6, 0xfa11, 0xffffffff}, 0x0) r3 = openat$urandom(0xffffffffffffff9c, 0x0, 0x143902, 0x0) r4 = fanotify_init(0x200, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) fanotify_mark(r4, 0x101, 0x1051, r5, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x7a) renameat2(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7\x00', 0x4) writev(r3, &(0x7f0000000380)=[{0x0}, {&(0x7f00000004c0)}], 0x2) r6 = syz_open_dev$I2C(&(0x7f00000000c0), 0x0, 0x0) ioctl$I2C_RDWR(r6, 0x707, &(0x7f0000000000)={&(0x7f0000000100)}) pread64(0xffffffffffffffff, 0x0, 0x0, 0xadc) r7 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) ioctl$USBDEVFS_IOCTL(r7, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r7, 0x80045505, &(0x7f0000000040)=@usbdevfs_connect) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) ioctl$USBDEVFS_SETCONFIGURATION(r7, 0x80045505, &(0x7f0000000000)=0x1) bind$vsock_stream(0xffffffffffffffff, 0x0, 0x0) r8 = socket$alg(0x26, 0x5, 0x0) accept4(r8, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="4000000000010400000000", @ANYRES32=0x0, @ANYBLOB="8080000000840000200012800b00010065727370616e000010000280040012000800050000000000"], 0x40}}, 0x0) 2m26.740658924s ago: executing program 32 (id=2860): r0 = socket$nl_route(0x10, 0x3, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000300), 0x2002, 0x0) syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x80400) ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f00000000c0)={'sit0\x00', 0x0}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x3, 0x8, 0x8001, 0x0, 0xb, 0x8000000000000000, 0x6, 0xfa11, 0xffffffff}, 0x0) r3 = openat$urandom(0xffffffffffffff9c, 0x0, 0x143902, 0x0) r4 = fanotify_init(0x200, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) fanotify_mark(r4, 0x101, 0x1051, r5, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x7a) renameat2(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7\x00', 0x4) writev(r3, &(0x7f0000000380)=[{0x0}, {&(0x7f00000004c0)}], 0x2) r6 = syz_open_dev$I2C(&(0x7f00000000c0), 0x0, 0x0) ioctl$I2C_RDWR(r6, 0x707, &(0x7f0000000000)={&(0x7f0000000100)}) pread64(0xffffffffffffffff, 0x0, 0x0, 0xadc) r7 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) ioctl$USBDEVFS_IOCTL(r7, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r7, 0x80045505, &(0x7f0000000040)=@usbdevfs_connect) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) ioctl$USBDEVFS_SETCONFIGURATION(r7, 0x80045505, &(0x7f0000000000)=0x1) bind$vsock_stream(0xffffffffffffffff, 0x0, 0x0) r8 = socket$alg(0x26, 0x5, 0x0) accept4(r8, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="4000000000010400000000", @ANYRES32=0x0, @ANYBLOB="8080000000840000200012800b00010065727370616e000010000280040012000800050000000000"], 0x40}}, 0x0) 8.924781733s ago: executing program 4 (id=3322): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) r0 = socket(0x28, 0x5, 0x0) fcntl$F_SET_RW_HINT(r0, 0x40c, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x2}) bpf$TOKEN_CREATE(0x24, &(0x7f00000004c0)={0x0, r0}, 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x2000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r1, 0x0) io_cancel(0x0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x2, 0x3, 0xffffffffffffffff, &(0x7f0000000340)="3ab2be4022bb18ab7c457a89c6e628e2d813fe322bdc7bc7dcc25221fa62f6f98fa41fba6d39daa9456320400666bb47ea98ae72039e2c75001355bb0fcaf43b43ec7b83dae67a4738f1b04b824d6fa583f5a352700f608c5a59023a1c657562d75c5502b89791df8d4c825d5d9dab62c15cd5a574d586165204459dd044f2f7d5d66256784cf0aa19d5bc946a9d6f368b23389c1e7aa9805e97956014da6910ebc602c61b3f22ad10d74537231782afd9287627f43333a44877e90e80d52765ea4380a27cf84598a5c622cb83a69766dbd2ead081d22769", 0xd8, 0x8}, &(0x7f0000000480)) 7.729231115s ago: executing program 1 (id=3324): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x9d}, 0x1c) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001dc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffcca}, 0x48) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={r1, 0xffffffffffffffff, 0xd, 0x0, @void}, 0x10) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000007c0)='vegas', 0x55) sendto$inet6(r0, 0x0, 0x0, 0x28004044, &(0x7f0000000180)={0xa, 0x4001, 0x719179f, @empty, 0x5}, 0x1c) 7.316648592s ago: executing program 1 (id=3325): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) (async) personality(0x500006) (async) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) socket(0x1d, 0x2, 0x6) unshare(0x20000400) (async) pselect6(0x40, &(0x7f0000000100)={0x0, 0x3, 0x0, 0x1, 0x800, 0x8}, 0x0, &(0x7f0000000240)={0x1f, 0x5}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) 6.951035704s ago: executing program 1 (id=3329): openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r1 = socket(0x10, 0x80003, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0xffffffffffffff69, 0x2, {0xf, "0000000000000000000100000e00000f"}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2000000}, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) ioctl$VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x3, 0xff, 0x34424752, 0x7, 0xa, [{0x419, 0x9}, {0xfffffff9}, {0x3ff, 0x8}, {0x5, 0x4aa}, {0x1}, {0xfffffffb, 0x8e}, {0x1, 0x8}, {0xf, 0x4}], 0x3, 0x3, 0x3, 0x2}}) getsockopt$inet_tcp_buf(r4, 0x6, 0x23, &(0x7f0000000040)=""/15, &(0x7f0000000200)=0xf) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(r6, &(0x7f0000000340)={0x0, 0x5f, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="7d04f088e3c5a41a3c18126e17c1af", @ANYRES16=r7, @ANYBLOB="000800000000000000000600000008000300", @ANYRES32=0x0, @ANYBLOB="0800050002000000"], 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="40007d74dd89b817af410f0c000000000000f473346ceec69fc263f36f0000000b71b73b1e4250ec00000000", @ANYRES16=r7, @ANYBLOB="050000000000000000002100000008000300", @ANYRESOCT=r1, @ANYBLOB="11002a00dd0b6162636465666768696a6b00000010002d800a0000000202020202020000"], 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x8000) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04) syz_usb_connect$uac2(0x5, 0x7b, &(0x7f0000000700)=ANY=[@ANYBLOB="1201010200000020820509004000010203010902690003010b6080080b010001ff200209040000000101200009240100040b0900000904ffff000102200009040101"], &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0}) write$dsp(r0, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0x0, r0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000180)={{0x0, 0x3938700}, {0x77359400}}, &(0x7f00000002c0)) io_uring_setup(0xb, &(0x7f0000000040)={0x0, 0xb841, 0x8000, 0x1, 0x4000c1}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r9, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) 6.324074042s ago: executing program 5 (id=3332): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010829bd7000000000000b00000008000300", @ANYRES32, @ANYBLOB="60005080110001004abee339084eeef16f162471f4000000080003000bac0f00050002"], 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x0) 6.151221462s ago: executing program 4 (id=3334): sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="340277f2b053a3304b89f8a7a80b00db96f248dabd7fac3c2f9e2b99a67f20a1cd09c0c843e5635493bbfa23b72d98a0c37a3e5805f5e2ec75e9d98b09"], 0x20}, 0x1, 0x0, 0x0, 0x80000}, 0x40800) r0 = syz_create_resource$binfmt(&(0x7f0000000440)='./file0\x00') r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) write$binfmt_script(r1, &(0x7f0000000080)={'#! ', './file1', [{}]}, 0x2) write$binfmt_elf64(r1, &(0x7f0000000200)=ANY=[], 0x1cb) close(r1) execveat$binfmt(0xffffffffffffff9c, r0, 0x0, 0x0, 0x0) (fail_nth: 44) 6.106886864s ago: executing program 5 (id=3336): keyctl$update(0x2, 0x0, 0x0, 0xfffffffffffffda4) r0 = socket$inet6(0x10, 0x3, 0x0) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000083667d1040206402d14e0102030109021b000100000000090400000190f19c00090584"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, &(0x7f0000001e40)={0x44, &(0x7f0000001c40)={0x40, 0x15, 0x1, '!'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write(r0, &(0x7f0000000000)="fc0000001c000705ab092509b86813000aa9350346000000b8d9b86e06034a25d871f957e6fe1d5b0e93210001c0016c7c334baa50809bf0060848ff7f00000000000000039815fa2c53c28648000000b937799f377a00bc000c00f0036cdf0db40016cb1e4798119b600033d44000040060b16a482c0a3c313012dafd5a32e273fc83ab82d710f74cec18444ef90d475ef8b28637f3d92c94170e5bba2e177312e081f691bc51105568881000953134bb9600463ae4f50f0d1bcae5f5502943083f5d9e611183b102b2b8f5566791cb19020191bd0733802e0784f2013cd1890058a10000c880ac801fe4af000049f0d4794eedfca92c09d776e7a90ab79a6f00a1960548deac279c00000000000000000000c5de3fd11539e9da719d73c33d97dd10d5fffec13bf93ec9dd37707df4add60f37808ab752fffff7e245f8d25cb2da82b088721e9bf2f2e657b9670922054279760ee111b5d5ea73361e6af309f8c751b5", 0x164) 5.908123428s ago: executing program 4 (id=3337): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000140)={0x2, 0x3, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000), 0x20000328) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r2 = syz_io_uring_complete(0x0, 0x0) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000680)={&(0x7f0000000540), 0xc, &(0x7f0000000640)={&(0x7f0000000580)={0x24, 0x1, 0x1, 0x301, 0x0, 0x0, {0x7}, [@CTA_ZONE={0x6}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x2}]}, 0x24}}, 0x4040) r3 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) syz_emit_ethernet(0x4a, &(0x7f00000005c0)={@broadcast, @multicast, @val={@void, {0x8100, 0x0, 0x0, 0x2}}, {@ipv6={0x86dd, @icmpv6={0x7, 0x6, "d172f5", 0x10, 0x3a, 0xff, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @mcast2, {[], @ni={0xc46ee13d8e75c188, 0x0, 0x0, 0xc2, 0x2, 0x9}}}}}}, 0x0) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_BEACON(r4, &(0x7f0000000880)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000840)={&(0x7f00000008c0)={0x3ac, 0x0, 0x0, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x0, 0x12}}}}, [@NL80211_ATTR_IE_PROBE_RESP={0xc1, 0x7f, [@peer_mgmt={0x75, 0x14, {0x0, 0x8, @void, @void, @val="579daedb40563e3372c5c5d31c28caee"}}, @fast_bss_trans={0x37, 0x7e, {0x6, 0x2, "f8a0d4e551df429908abbcf0cd55169c", "e9dfacee75ffed3214935406cbdd307aeb697ed5db1815fe8cec5f033c79eb15", "aa9c302a2704f9649f46f83f765717a7b75e6da5eae967c04367b8d678f8872b", [{0x3, 0x9, "fdb355fd632b1bc0ed"}, {0x3, 0x1f, "7af0ee06ac48ca9de617832900458b6aebc9ab4c7a9af5103442c4f2043008"}]}}, @mesh_id={0x72, 0x6}, @link_id={0x65, 0x12, {@random="bc40e1e6adaf", @device_b}}, @gcr_ga={0xbd, 0x6, @broadcast}, @sec_chan_ofs={0x3e, 0x1, 0x2}]}, @NL80211_ATTR_IE_PROBE_RESP={0x37, 0x7f, [@mic={0x8c, 0x18, {0x891, "3f9c0519229b", @long="e86f46387f4d273050b443ad6d56df1a"}}, @cf={0x4, 0x6, {0x1, 0xfb, 0x6, 0x8f7}}, @mesh_config={0x71, 0x7, {0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1, 0xc, 0x69}}, @mesh_chsw={0x76, 0x6, {0xd, 0x5, 0x39, 0x3ff}}]}, @NL80211_ATTR_IE_PROBE_RESP={0x1cb, 0x7f, [@perr={0x84, 0xdb, {0x8, 0xd, [{{0x0, 0x1}, @device_a, 0xfffffffe, @value=@device_b, 0x25}, {{}, @device_a, 0x7, @void, 0x39}, {{0x0, 0x1}, @device_a, 0xcc8f, @value=@device_b, 0x2a}, {{}, @device_b, 0x7fffffff, @void, 0x1b}, {{}, @device_b, 0xfffffffe, @void, 0xc}, {{0x0, 0x1}, @broadcast, 0x7, @value, 0xb}, {{0x0, 0x1}, @device_b, 0x5, @value, 0x20}, {{0x0, 0x1}, @broadcast, 0x81fb, @value=@broadcast, 0x2e}, {{0x0, 0x1}, @broadcast, 0x2, @value=@broadcast}, {{0x0, 0x1}, @broadcast, 0xfffffffb}, {{}, @device_b, 0x8, @void, 0x20}, {{0x0, 0x1}, @device_a, 0xd, @value, 0xf}, {{}, @device_a, 0xfffffffc, @void, 0x14}]}}, @measure_req={0x26, 0xe0, {0x2, 0x8, 0x4, "cb3ef97c00dd645508fb5d96df1df6fc8230478583e28676990aa74c9294bde44afbca611772fd35aa0203aa12ebed37dc5c6eb9508950cccca48f08c48dc671917f145dc27f7d57d0ec110f1dea81eae61435c60412dc41a96422a6432669d5122c4221d0b761233a884762cceeb611a4103bf86e4d4b89e42f05d9d4cfc8b12d13250009390330fac00c3e01ed39780198899b0c0430177d6612ca4ada0c96fa4f732fbe207b9311c1d539b7bef3c1404e2987de79a82a95215947801abdcf624e151b872b22e7c9dfcd8704aea63533da656639076ca47df2b67b6a"}}, @gcr_ga={0xbd, 0x6}]}, @NL80211_ATTR_IE={0xb9, 0x2a, [@channel_switch={0x25, 0x3, {0x0, 0xb5, 0x7}}, @random={0x7, 0xa4, "87650dd6cc6efead0ee7b034e59067563aa143ffffff7fe941b848b49ac7d6a63f98375bec7c7b1beada39a72ecbff9c2f8c163f78094ee943abef26a387f0d649d98bcb84bba50c9a4f884a1503d90db94d1354c8aadec5e0a5442489df8210b49022b44974f27d0fbbccc8e89c3f4ff2d80968ab6fb465eea9b7cb47327b129ceaf56d264df1022d1923f6696b0188b7594298fd7ec4822c175a93a58b4f5d97d293d5"}, @ibss={0x6, 0x2, 0x8}, @ext_channel_switch={0x3c, 0x4, {0x1, 0x98, 0x68, 0x5}}]}]}, 0x3ac}, 0x1, 0x0, 0x0, 0x8890}, 0x4000) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r7 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$UI_DEV_SETUP(r4, 0x405c5503, &(0x7f00000002c0)={{0x6, 0x3ff, 0x800, 0x7}, 'syz1\x00', 0x54}) socket$nl_route(0x10, 0x3, 0x0) bind$inet(r7, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r8 = socket$kcm(0x2, 0x3, 0x2) fremovexattr(r7, &(0x7f0000000800)=ANY=[@ANYBLOB="1f47a5efc7c378ab"]) dup2(r8, 0xffffffffffffffff) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r6, &(0x7f0000000280)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x1, 0x0, 0x14}, @ipv4=@udp={{0x5, 0x4, 0x3, 0x1b, 0x30, 0x66, 0x0, 0x40, 0x11, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x12}}, {0x4e24, 0x4e20, 0x1c, 0x0, @gue={{0x1, 0x0, 0x0, 0x2, 0x100, @void}, "87583a98dfe5903e16bc2e536ac273c5"}}}}, 0x3e) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000340)=0xffffffffffffffff, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, r0, 0x1000) 5.521464295s ago: executing program 0 (id=3338): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x802, 0x0) write$vga_arbiter(r2, &(0x7f0000000100)=ANY=[@ANYBLOB='lock m'], 0x9) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x100, 0xe}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newtfilter={0x9c, 0x2c, 0xd27, 0x70bd25, 0x25dfdc00, {0x0, 0x0, 0x0, r5, {0xc, 0x4}, {0x0, 0xfff1}, {0x8, 0xc}}, [@filter_kind_options=@f_u32={{0x8}, {0x70, 0x2, [@TCA_U32_SEL={0x64, 0x5, {0x9, 0x21, 0x5, 0x8, 0x1, 0x5, 0x1, 0x0, [{0x8, 0x1, 0x5, 0xa}, {0x8, 0x7, 0x1, 0x3}, {0x4, 0x9105, 0x1, 0x7fffffff}, {0xffff, 0x8, 0x80000001, 0x6}, {0x0, 0x6838, 0x3ff, 0x9}]}}, @TCA_U32_FLAGS={0x8, 0xb, 0x2}]}}]}, 0x9c}, 0x1, 0x0, 0x0, 0x20000010}, 0x20008044) close_range(r0, 0xffffffffffffffff, 0x0) 4.829109739s ago: executing program 3 (id=3339): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x74, 0x0, 0x0, 0x11203}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x20}]}}}]}, 0x3c}, 0x1, 0x2000, 0x0, 0x800}, 0x0) 4.732933087s ago: executing program 0 (id=3340): ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000080), 0xd9, 0x800) setsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f00000000c0)=ANY=[@ANYBLOB="2f0204010e100800000000000000000000007fffe0000001"], 0x18) close(r0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xf}, 0x1c) listen(r2, 0x4) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000000240)) r4 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe) keyctl$update(0x2, r4, &(0x7f0000000140)="c4", 0x1) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) close(0x4) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) add_key$user(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x2}, &(0x7f00000001c0)="ac483b6d26b3c56f", 0x8, r4) r6 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f000040f000/0x4000)=nil, 0x4000, 0x1000009, 0x80012, r6, 0xd54ab000) read(r6, &(0x7f0000000200)=""/17, 0x11) connect$inet(r3, &(0x7f0000000140)={0x2, 0x4e22, @loopback}, 0x10) socket$nl_route(0x10, 0x3, 0x0) r7 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r7, 0x0, 0x0) r8 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r8, &(0x7f0000000100), 0x10) sendmsg$can_bcm(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001140)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x8001) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) close_range(r9, 0xffffffffffffffff, 0x0) 4.468035529s ago: executing program 3 (id=3341): setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x2b0, 0x0, 0x18c, 0x203, 0x320, 0x19030000, 0x410, 0x2e0, 0x2e0, 0x410, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0xa8, 0xf0, 0x300}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x2, 'syz0\x00', {0x8001}}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz0\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x310) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4c000000000105000d0000000000000002000102240002801400018008000100e000000108000200e00000010c00028005000100000000200c000f800800014000000200080008"], 0x4c}}, 0x0) 4.447152609s ago: executing program 4 (id=3342): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) arch_prctl$ARCH_SHSTK_UNLOCK(0x5004, 0x3) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000080), 0x800, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=0x0, @ANYRESDEC=0x0]) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r2, &(0x7f0000004100)={0x2020}, 0x2020) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="4000000010000906000000000000000000040000", @ANYRES32=0x0, @ANYBLOB="a7ffa88800000000200012800900010069706970000000fa0f000280040013000500090000000008f33a5798cb485f3a9776f093ab3e544599d87862ad961fa67f7215b55c42d37b9a100eb2ec063287898534c013c8f11d376156badd398f094e0e3b0cae09b813a27158392211de2312f2526854a5a004cb08dad59319ee0f21d26b"], 0x40}}, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000680)={'bridge0\x00'}) socket(0x400000000010, 0x3, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000002640)={0x2020}, 0x2020) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) getrlimit(0x8, &(0x7f0000000740)) 4.356228448s ago: executing program 0 (id=3343): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYRES16=r0, @ANYBLOB="010829bd7000000000000b00000008000300", @ANYRES32=r2, @ANYBLOB="60005080110001004abee339084eeef16f162471f40000000800030002ac0f00050002"], 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x0) 4.28142266s ago: executing program 3 (id=3344): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0xff4f, 0xffffffffffffff4f, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xeb) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0xff4f, 0xffffffffffffff4f, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xeb) r0 = syz_open_dev$amidi(&(0x7f0000000100), 0x2, 0x40181) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS32(r0, 0xc0245720, &(0x7f00000000c0)={0x1}) syz_usb_connect$uac3(0x4, 0xa0, &(0x7f0000000340)=ANY=[@ANYRESHEX=r0, @ANYRES8=r0, @ANYRES16=r0, @ANYBLOB="64323e8cb4bfa73ccef3c2f95fd8a47cef4befe95614988e3717da540feb3237df5adc8aaadd2751f9495d0f62bc5f26f010520a2e2e8dc44223f249b77d01855a4b673e778f40b00bdd2a77cee381df537e82d77702bf5360c5711ae08b19a11ac53f59a8bd743695867951407fb8cf96976700377f7637056b2af16a8bdc7baf8aa7f812014bdca72e10da72d3011c60625229c9b67324fa98b7367a2c648e1dc29d3f0ce6d49805215c5f1f9f6998814e0c0b37069bb1", @ANYRESOCT=r0], 0x0) 4.123946146s ago: executing program 0 (id=3345): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) r0 = socket(0x28, 0x5, 0x0) fcntl$F_SET_RW_HINT(r0, 0x40c, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x2}) bpf$TOKEN_CREATE(0x24, &(0x7f00000004c0)={0x0, r0}, 0x8) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x2000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r1, 0x0) io_cancel(0x0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x2, 0x3, 0xffffffffffffffff, &(0x7f0000000340)="3ab2be4022bb18ab7c457a89c6e628e2d813fe322bdc7bc7dcc25221fa62f6f98fa41fba6d39daa9456320400666bb47ea98ae72039e2c75001355bb0fcaf43b43ec7b83dae67a4738f1b04b824d6fa583f5a352700f608c5a59023a1c657562d75c5502b89791df8d4c825d5d9dab62c15cd5a574d586165204459dd044f2f7d5d66256784cf0aa19d5bc946a9d6f368b23389c1e7aa9805e97956014da6910ebc602c61b3f22ad10d74537231782afd9287627f43333a44877e90e80d52765ea4380a27cf84598a5c622cb83a69766dbd2ead081d22769", 0xd8, 0x8}, &(0x7f0000000480)) 3.744345916s ago: executing program 1 (id=3346): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x284041, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) shmctl$IPC_INFO(0x0, 0x3, &(0x7f0000000080)=""/16) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'sm3\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x80800) sendmsg$kcm(r4, &(0x7f0000001880)={0x0, 0xf5, &(0x7f0000001600)=[{&(0x7f0000001a00)="e8a472"}, {&(0x7f0000000080)="bcc9b1557de1fed1f955144629ed4dcfda58d1b606fa77a7658dcf3c33679ea22502e3cff80000f5d43921bc111a262f295a8eb540", 0x7fffeffd}, {&(0x7f0000001680)="094fb143daa9baa36aaa2cca06886c533118e056", 0x14}], 0x3, 0x0, 0x0, 0xf0ff}, 0x24040001) 3.574073873s ago: executing program 5 (id=3347): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece) read$char_usb(r2, &(0x7f0000000440)=""/81, 0x51) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/ipc\x00') quotactl_fd$Q_GETNEXTQUOTA(r5, 0xffffffff80000900, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x7a, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, &(0x7f0000000540)) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)) ioctl$KVM_RUN(r6, 0xae80, 0x2befff) sendmsg$NL80211_CMD_SET_NOACK_MAP(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40005}, 0x0) syz_usb_disconnect(0xffffffffffffffff) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000003, 0x20000000ec072, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_XFRM_POLICY(r7, 0x0, 0x11, 0x0, &(0x7f0000000280)) setsockopt$RXRPC_MIN_SECURITY_LEVEL(0xffffffffffffffff, 0x110, 0x4, &(0x7f0000000040), 0x4) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r7, 0xc018937e, &(0x7f0000000180)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'}) setsockopt$IP_VS_SO_SET_ADD(r8, 0x0, 0x482, &(0x7f00000001c0)={0x29, @rand_addr=0x64010100, 0x4e23, 0x3, 'sh\x00', 0x2a, 0x9, 0x2}, 0x2c) 3.332583146s ago: executing program 0 (id=3348): r0 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000402505a8a4410001020b0109021b00010100c00009040000020701010009050102"], 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x4, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000400)={0x80002005}) 3.240203831s ago: executing program 3 (id=3349): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f00000009c0)=@raw={'raw\x00', 0x8, 0x3, 0x400, 0x0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x330, 0xffffffff, 0xffffffff, 0x330, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0, 0x60030000, {0x0, 0xff000000}}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x55d, 0x3, 0xc086, 'netbios-ns\x00', {0x7}}}}, {{@ipv6={@empty, @dev={0xfe, 0x80, '\x00', 0x39}, [0xffffff00, 0xffffffff, 0xffffff00, 0xffffff00], [0xffffffff, 0x0, 0xffffffff, 0xff000000], 'netpci0\x00', 'ipvlan0\x00', {}, {}, 0x2b, 0x2, 0x5, 0x5}, 0x0, 0x220, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'\x00', {0xae7, 0x2fca0d1e, 0x4d, 0x1, 0x401, 0x1000, 0x9, 0x8}}}, @common=@inet=@length={{0x28}, {0xff, 0x3, 0x1}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x460) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000030400000006000000005dcc0300", @ANYRES32=r2, @ANYBLOB="71e79fd800000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r3], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newtfilter={0x34, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x74, r2, {}, {0xf, 0x1}, {0xa, 0x1}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0xf0ffffffffffff, 0x0, 0x60001d0}, 0xc8c4) 2.653264795s ago: executing program 1 (id=3350): socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r0 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x6c) fcntl$notify(r0, 0x402, 0x5) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000180)={0x0, &(0x7f0000000100)}) getresuid(&(0x7f0000000040), &(0x7f0000000080), &(0x7f0000000140)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240"], 0x7c}}, 0x0) r3 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x41, 0x0) write$nbd(r3, &(0x7f0000000340)={0x1000000, 0x0, 0x0, 0x0, 0x200000, "82b0cfc4337965941538be02000000000000000000007400a391793ba7f40000000000fdf700"/48}, 0x40) r4 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x8002) write$binfmt_aout(r4, &(0x7f00000003c0)=ANY=[@ANYBLOB="03070600b531"], 0x31c8) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x9c}, 0x1, 0x0, 0x0, 0x80}, 0x0) close(r2) 2.308117562s ago: executing program 3 (id=3351): r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x4, 0x8001, 0x0, 0x7, 0x200000000002, 0x7, 0x8, 0x3}, 0x0) preadv2(r1, &(0x7f0000000740)=[{&(0x7f0000000600)=""/250, 0xfa}], 0x1, 0xfffffffd, 0x8, 0x1b) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f00000007c0)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000002c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000840)=[@iv={0x1018, 0x117, 0x2, 0x1000, "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"}, @iv={0x90, 0x117, 0x2, 0xaf, "259b044cb375eddd1316944dea3ec01fd951c9186caedeb2a5336569caa11ad2272c68aaee2d5aad7d93bc5a800a4e6c967821e6810c897a0a8845f98900b622dd22c31dce9679ddecf5697b27307b2fa96f276ee4a3bcd2e1b392066c4772a2836ad4d4c1420a1c4da91de23b76d0176e77a20fef0a97cb4944f1"}], 0x10a8}, {0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000003c0)="96e6e14d06cd2cd1dc6969313336a9017d94", 0x12}, {&(0x7f0000000400)="499b7fee4035c5b8beb1f70453870f0783c185665f5661dc54c5a1a1ad65e127a695fb29eb758e857595e5277fdfcd8246da633a7d6ed7e05fe75f4f36c670e755ca5142914fdc83650da6c01c7a06ebf495fbe36b151a4c207d9347308484a5891ad7c14310bd", 0x67}, {&(0x7f0000000640)="7caba4f81ffec1c44c4691773da226d91a54e9721f1f4c8f4d4f19a73292612c8ad72d40ac83e55148f6700815e6d140cfab03adc719caee1f3feed087bc616c3bc19a510350d0befe495457b7d16c139c6e6850f1e32a661bd7cc91e333472aae3e3eb8815a38aa8fea91788c44336c8437a86f885f3546456df377a81b43b22f543cad111ff0d0", 0x88}], 0x3, &(0x7f0000000a80)=ANY=[], 0x0, 0x40088c0}], 0x2, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0xf0ff) 2.212728051s ago: executing program 1 (id=3352): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) r2 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r2, &(0x7f0000000080)={0x1d, r1, 0x0, {0x0, 0x1, 0x4}, 0xfd}, 0x18) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(0xffffffffffffffff, 0x18, 0x0, 0x1) socket$inet6_sctp(0xa, 0x5, 0x84) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$AUTOFS_IOC_EXPIRE(r0, 0x810c9365, &(0x7f0000000200)={{0xe080, 0x1}, 0x100, './file0\x00'}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000001c0)={'sit0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x14, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x8, 0x4, 0xfffffffc}, @TCA_HHF_ADMIT_BYTES={0x8, 0x5, 0xffffffc0}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x48881}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pipe(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r6, 0x407, 0xffffffff80000000) r7 = socket(0x200000000000011, 0x2, 0xd) bind$packet(r7, &(0x7f0000000080)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) setsockopt$packet_fanout(r7, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x8000}, 0x4) syz_emit_ethernet(0x32, &(0x7f00000000c0)=ANY=[@ANYBLOB="e90c610fac6f39d87f0000020800450000240000e0000011", @ANYRESDEC=0x0], 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000380)=ANY=[@ANYBLOB="000000001000bbbbbbbbbbbb08004500003c000000020011"], 0x0) getsockname$inet(0xffffffffffffffff, 0x0, 0x0) mkdir(0x0, 0x22) bpf$MAP_CREATE(0x0, 0x0, 0x50) unshare(0x62040200) syz_usb_connect(0x6, 0x33, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) r8 = socket$inet6(0xa, 0x3, 0x3) setsockopt$inet6_IPV6_XFRM_POLICY(r8, 0x29, 0x23, 0x0, 0x0) ioctl$KVM_CAP_MANUAL_DIRTY_LOG_PROTECT2(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000000)={0xa8, 0x0, 0x3}) 1.754797923s ago: executing program 3 (id=3353): socket$inet_mptcp(0x2, 0x1, 0x106) socket(0x2a, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x5, 0x84) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x118d7, 0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000000)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockname$inet(0xffffffffffffffff, 0x0, &(0x7f0000002280)) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x22) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) unshare(0x62040200) syz_usb_connect(0x6, 0x22, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, 0x0, 0x0) r4 = socket$inet6(0xa, 0x5, 0x4) setsockopt$inet_int(r4, 0x0, 0xf, 0x0, 0x0) sendmmsg(r2, &(0x7f0000000180), 0x4000190, 0x0) r5 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x20100, 0x0) ioctl$RTC_WKALM_SET(r5, 0x4028700f, &(0x7f0000001400)={0x0, 0x1, {0xb3, 0x13, 0x80010, 0x15, 0x2, 0xb30, 0x1, 0x168, 0x1}}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000018c0)={'team0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="4000000010003b1500000000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00000000015001001800128008000100677470000c00028008000100", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r7, @ANYBLOB="0df16064f075813fe179c9ef8950c7069ad85c0cc803642a9b3551e7dcca918370697b0eeb1cd634c7dbab786b770afbf25845024956510dd9cbbaa133367fb5a68dc88298e34e817e1f328c8824682bbf5c38feb74871bce5f791d22dee2659dfdb77a2789ea7c2c3f461d4fa6f87ef7349fc170f8d0ab040f90ce5efcb3972751c8398f1a6e5430a9c06e8777ce459eed9f777c0757ccd2aa74a9a6d89ac7832a2751b3d75b153"], 0x40}}, 0x2400c080) 1.731568633s ago: executing program 4 (id=3354): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="400000000000000071104d000000000006000000000000009500000000000000eada6c4ec7b49d93e6cfe47cbffc32e0ab0e0ae810033033920437"], &(0x7f0000003ff6)='GPL\x00', 0x9, 0xfd96, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r2 = dup(r1) mmap(&(0x7f000009e000/0x3000)=nil, 0x3000, 0xb, 0x13, r2, 0x2000) sendto$inet(r0, &(0x7f0000000100)='J', 0xfdbe, 0x4004084, 0x0, 0x11000a00) syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f0000000000)) io_uring_enter(0xffffffffffffffff, 0x3516, 0x0, 0x0, 0x0, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, 0xffffffffffffffff, &(0x7f0000000040)={0x10000000}) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = socket(0xa, 0xa, 0xe2cf) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r6 = dup(r5) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) close(0xffffffffffffffff) r8 = dup(r7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r8, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) r9 = socket$can_j1939(0x1d, 0x2, 0x7) fcntl$F_GET_FILE_RW_HINT(r9, 0x40d, &(0x7f0000000140)) write$binfmt_aout(r6, 0x0, 0xffffffdb) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) ioctl$sock_SIOCBRDELBR(r4, 0x89a1, &(0x7f0000000180)='veth1_macvtap\x00') 952.800645ms ago: executing program 5 (id=3355): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB, @ANYRES16=r0, @ANYBLOB="010829bd7000000000000b00000008000300", @ANYRES32=r2, @ANYBLOB="60005080110001004abee339084eeef16f162471f40000000800030002ac0f00050002"], 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x0) 652.856165ms ago: executing program 5 (id=3356): r0 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r0, &(0x7f0000000140)={&(0x7f0000000100)={0x2, 0x4e24, @local}, 0x10, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="2c000000000000000000400007000000441c0503e0"], 0x30}, 0x40880) 344.444699ms ago: executing program 5 (id=3357): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000006c0)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES16], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000001540)={0x24, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00220f0000005b574e69622bf85eda07b3"], 0x0}, 0x0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) syz_usb_disconnect(r1) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[], 0x28}, 0x1, 0x1802, 0x0, 0x4048000}, 0x8040800) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@mss={0x2, 0x7}, @sack_perm], 0x2) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_opts(r2, 0x0, 0xd, &(0x7f0000937fed)=""/16, &(0x7f0000000080)=0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, 0x0, 0x0, 0x805, 0x0, 0x0) 143.224931ms ago: executing program 0 (id=3358): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) r0 = socket(0x28, 0x5, 0x0) fcntl$F_SET_RW_HINT(r0, 0x40c, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x2}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x2000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r1, 0x0) io_cancel(0x0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x2, 0x3, 0xffffffffffffffff, &(0x7f0000000340)="3ab2be4022bb18ab7c457a89c6e628e2d813fe322bdc7bc7dcc25221fa62f6f98fa41fba6d39daa9456320400666bb47ea98ae72039e2c75001355bb0fcaf43b43ec7b83dae67a4738f1b04b824d6fa583f5a352700f608c5a59023a1c657562d75c5502b89791df8d4c825d5d9dab62c15cd5a574d586165204459dd044f2f7d5d66256784cf0aa19d5bc946a9d6f368b23389c1e7aa9805e97956014da6910ebc602c61b3f22ad10d74537231782afd9287627f43333a44877e90e80d52765ea4380a27cf84598a5c622cb83a69766dbd2ead081d22769", 0xd8, 0x8}, &(0x7f0000000480)) 0s ago: executing program 4 (id=3359): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x4000001) r3 = io_uring_setup(0x35c5, &(0x7f0000000040)={0x0, 0x7b4e, 0xf080, 0xc, 0xa0002f5}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[], 0x28}}, 0x4000) pwritev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)='0', 0x1}], 0x1, 0x0, 0x3) syz_usb_connect$sierra_net(0x3, 0xffffffffffffff63, 0x0, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x43, 0x0, 0x0) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="140000001000010400000000000000000100000a74000000060a0b04000000000000000002000008400004803c000180080001006c6f670030000280060004400001000008000340fffffffa0a0002407d5def2e21000000080003400000000806000140000100000900010073797a30000000000900020073797a320000000008000b400000000314000000110001"], 0x9c}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) r4 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, &(0x7f0000010000)='asymmetric\x00', &(0x7f0000000400)) add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, r4) close(r0) kernel console output (not intermixed with test programs): 00 [ 819.030723][T15879] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 819.030730][T15879] R13: 00007f3089c16038 R14: 00007f3089c15fa0 R15: 00007f3089d3fa48 [ 819.030749][T15879] [ 819.509820][ T5916] usb 2-1: new full-speed USB device number 110 using dummy_hcd [ 819.578394][T11298] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 819.656552][T15892] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2924'. [ 819.665624][T15892] netlink: 'syz.0.2924': attribute type 30 has an invalid length. [ 819.718427][ T5916] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 819.736544][ T5916] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x4 has an invalid bInterval 0, changing to 4 [ 819.770209][ T5916] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.de [ 819.797100][ T5916] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 819.818600][T15813] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 819.836752][T15891] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2924'. [ 819.853709][T15813] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 819.865933][T15813] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 819.877470][ T5916] usb 2-1: config 0 descriptor?? [ 819.888790][T15813] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 819.900305][T15891] netlink: 'syz.0.2924': attribute type 30 has an invalid length. [ 820.006982][T12280] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 820.108301][T12280] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 820.143186][T15884] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2923'. [ 820.204637][T12280] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 820.228612][T12280] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 820.363311][T15908] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 820.449978][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 820.458427][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 820.466940][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 820.488013][T15908] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 820.513069][T15904] warning: `syz.1.2923' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 820.530354][ T5831] Bluetooth: hci5: command tx timeout [ 820.734765][ T5916] ath6kl: Failed to submit usb control message: -71 [ 820.749901][ T5916] ath6kl: unable to send the bmi data to the device: -71 [ 820.772326][ T5916] ath6kl: Unable to send get target info: -71 [ 821.089608][ T5916] ath6kl: Failed to init ath6kl core: -71 [ 821.119423][ T5916] ath6kl_usb 2-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 821.156784][ T5916] usb 2-1: USB disconnect, device number 110 [ 822.056196][T15925] ptrace attach of "./syz-executor exec"[5843] was attempted by " ./file0  \x07  N$   \x07kfPg *l\x09[N8\x07y2#`\x0cDƜ /sys/kernel/debug/binder/stats 8    \x0c   blkio.bfq.dequeue \x22^Jѝ=V L=![/Ydq(g)xcaK':yB[RD/.M1/Xh\x0b%(r [ 822.142359][T15924] random: crng reseeded on system resumption [ 822.623478][T15811] Bluetooth: hci5: command tx timeout [ 822.706153][T15924] netlink: 'syz.1.2929': attribute type 10 has an invalid length. [ 825.042517][T15942] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 825.491636][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 825.500104][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 825.508668][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 827.250425][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 827.258826][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 827.835288][T15813] 8021q: adding VLAN 0 to HW filter on device bond0 [ 827.875512][T15813] 8021q: adding VLAN 0 to HW filter on device team0 [ 827.942176][T12274] bridge0: port 1(bridge_slave_0) entered blocking state [ 827.949480][T12274] bridge0: port 1(bridge_slave_0) entered forwarding state [ 827.967580][T12280] bridge0: port 2(bridge_slave_1) entered blocking state [ 827.974803][T12280] bridge0: port 2(bridge_slave_1) entered forwarding state [ 827.989894][ T5916] usb 4-1: new high-speed USB device number 97 using dummy_hcd [ 828.146616][T15964] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2939'. [ 828.170913][T15964] netlink: 'syz.0.2939': attribute type 30 has an invalid length. [ 828.189928][ T5916] usb 4-1: device descriptor read/64, error -71 [ 828.242241][T15963] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2939'. [ 828.277297][T15963] netlink: 'syz.0.2939': attribute type 30 has an invalid length. [ 828.446238][ T5916] usb 4-1: new high-speed USB device number 98 using dummy_hcd [ 828.463535][T15813] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 828.599962][ T5916] usb 4-1: device descriptor read/64, error -71 [ 828.712687][ T5916] usb usb4-port1: attempt power cycle [ 828.725129][T15813] veth0_vlan: entered promiscuous mode [ 828.791796][T15813] veth1_vlan: entered promiscuous mode [ 828.830288][T12282] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 828.838178][T12282] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 828.935075][T15813] veth0_macvtap: entered promiscuous mode [ 828.966573][T15813] veth1_macvtap: entered promiscuous mode [ 829.015697][T15813] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 829.041454][T15813] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 829.067101][T12282] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 829.076157][ T5916] usb 4-1: new high-speed USB device number 99 using dummy_hcd [ 829.106097][ T5916] usb 4-1: device descriptor read/8, error -71 [ 829.133843][ T1098] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 829.174111][ T1098] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 829.333216][ T1098] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 829.369914][ T5916] usb 4-1: new high-speed USB device number 100 using dummy_hcd [ 829.408524][ T5916] usb 4-1: device descriptor read/8, error -71 [ 829.506382][ T1098] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 829.534128][ T5916] usb usb4-port1: unable to enumerate USB device [ 829.537072][ T1098] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 829.694354][T12282] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 829.724411][T12282] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 830.539988][ T10] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 830.589870][ T5888] usb 5-1: new high-speed USB device number 126 using dummy_hcd [ 830.690872][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 830.699377][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 830.764291][ T10] usb 6-1: config 220 has an invalid interface number: 76 but max is 2 [ 830.773217][ T5888] usb 5-1: Using ep0 maxpacket: 16 [ 830.788836][ T10] usb 6-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 830.817032][ T5888] usb 5-1: config 0 has no interfaces? [ 830.848410][ T5888] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 830.874513][T15997] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2951'. [ 830.884640][ T10] usb 6-1: config 220 has no interface number 2 [ 830.910406][ T10] usb 6-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 830.930704][ T5888] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 830.938878][ T5888] usb 5-1: Manufacturer: syz [ 830.985687][ T10] usb 6-1: config 220 interface 0 has no altsetting 0 [ 831.013633][ T5888] usb 5-1: config 0 descriptor?? [ 831.044897][ T5831] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 831.060778][ T5831] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 831.074498][ T5831] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 831.082066][ T10] usb 6-1: config 220 interface 76 has no altsetting 0 [ 831.161041][ T5831] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 831.203517][ T10] usb 6-1: config 220 interface 1 has no altsetting 0 [ 831.235712][T15990] netlink: 'syz.4.2947': attribute type 1 has an invalid length. [ 831.259889][ T5831] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 831.337445][ T10] usb 6-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 831.358083][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 831.389924][ T10] usb 6-1: Product: syz [ 831.406710][ T10] usb 6-1: Manufacturer: syz [ 831.427188][ T10] usb 6-1: SerialNumber: syz [ 831.506866][T16003] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2947'. [ 831.553277][T15990] 8021q: adding VLAN 0 to HW filter on device bond0 [ 831.693334][T16006] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2952'. [ 831.710540][T15991] fuse: Unknown parameter '' [ 831.711016][T15994] bond0: (slave gretap1): making interface the new active one [ 831.750004][T15991] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 831.811488][T15991] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 831.954564][T15994] bond0: (slave gretap1): Enslaving as an active interface with an up link [ 832.918160][ T1098] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 833.171664][ T1098] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 833.333696][ T10] usb 6-1: selecting invalid altsetting 0 [ 833.341971][ T5831] Bluetooth: hci6: command tx timeout [ 833.349323][ T10] uvcvideo 6-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 833.357506][ T10] uvcvideo 6-1:220.0: No valid video chain found. [ 833.379885][ T5888] usb 2-1: new high-speed USB device number 111 using dummy_hcd [ 833.405471][ T10] usb 6-1: selecting invalid altsetting 0 [ 833.449825][ T10] usbtest 6-1:220.1: probe with driver usbtest failed with error -22 [ 833.509322][ T10] usb 6-1: USB disconnect, device number 2 [ 833.549847][ T5888] usb 2-1: device descriptor read/64, error -71 [ 833.642188][ T1098] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 833.811612][ T5888] usb 2-1: new high-speed USB device number 112 using dummy_hcd [ 833.816286][T11298] usb 5-1: USB disconnect, device number 126 [ 833.889948][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 833.898438][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 833.979887][ T5888] usb 2-1: device descriptor read/64, error -71 [ 833.997046][ T1098] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 834.090178][ T5888] usb usb2-port1: attempt power cycle [ 834.459861][ T5888] usb 2-1: new high-speed USB device number 113 using dummy_hcd [ 834.520385][ T5888] usb 2-1: device descriptor read/8, error -71 [ 834.529227][T16029] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 834.610086][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 834.783201][ T5888] usb 2-1: new high-speed USB device number 114 using dummy_hcd [ 834.853653][ T5888] usb 2-1: device descriptor read/8, error -71 [ 834.990839][ T5888] usb usb2-port1: unable to enumerate USB device [ 835.013404][ T5916] usb 5-1: new high-speed USB device number 127 using dummy_hcd [ 835.168529][ T1098] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 835.186447][ T5916] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 835.201479][ T5916] usb 5-1: config 0 has no interfaces? [ 835.207032][ T5916] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 835.217904][ T1098] bond_slave_0: left promiscuous mode [ 835.227357][ T1098] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 835.235750][ T5916] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 835.247712][ T1098] mac80211_hwsim hwsim5 wlan1: left promiscuous mode [ 835.258764][ T5916] usb 5-1: config 0 descriptor?? [ 835.279008][ T1098] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 835.300454][ T1098] batadv0: left promiscuous mode [ 835.306505][ T1098] bond0 (unregistering): Released all slaves [ 835.326008][ T1098] bond1 (unregistering): Released all slaves [ 835.351288][ T1098] bond2 (unregistering): Released all slaves [ 835.376382][ T1098] bond3 (unregistering): Released all slaves [ 835.410833][ T5831] Bluetooth: hci6: command tx timeout [ 835.418000][T16000] chnl_net:caif_netlink_parms(): no params data found [ 835.522198][T16034] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 835.557923][T16034] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 835.807535][ T1098] tipc: Left network mode [ 835.999206][T16000] bridge0: port 1(bridge_slave_0) entered blocking state [ 836.037753][T16000] bridge0: port 1(bridge_slave_0) entered disabled state [ 836.037989][T16000] bridge_slave_0: entered allmulticast mode [ 836.040389][T16000] bridge_slave_0: entered promiscuous mode [ 836.053803][T16000] bridge0: port 2(bridge_slave_1) entered blocking state [ 836.053954][T16000] bridge0: port 2(bridge_slave_1) entered disabled state [ 836.054235][T16000] bridge_slave_1: entered allmulticast mode [ 836.055556][T16000] bridge_slave_1: entered promiscuous mode [ 836.270427][T16000] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 836.284066][T16000] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 836.590705][T16057] tipc: Enabled bearer , priority 0 [ 836.593536][T16000] team0: Port device team_slave_0 added [ 836.607464][T16056] syzkaller0: entered promiscuous mode [ 836.607492][T16056] syzkaller0: entered allmulticast mode [ 836.616911][T16000] team0: Port device team_slave_1 added [ 836.870242][T16055] tipc: Resetting bearer [ 836.953675][T16055] tipc: Disabling bearer [ 836.962255][T16000] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 836.962276][T16000] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 836.962305][T16000] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 836.981259][ T1098] hsr_slave_0: left promiscuous mode [ 837.011473][ T1098] hsr_slave_1: left promiscuous mode [ 837.012846][ T1098] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 837.018790][ T1098] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 837.019518][ T1098] batman_adv: batadv0: Removing interface: dummy0 [ 837.492351][ T5831] Bluetooth: hci6: command tx timeout [ 837.752782][ T5888] usb 5-1: USB disconnect, device number 127 [ 837.782540][ T1098] team_slave_1 (unregistering): left promiscuous mode [ 837.860982][ T1098] team0 (unregistering): Port device team_slave_1 removed [ 837.955029][ T1098] team_slave_0 (unregistering): left promiscuous mode [ 838.002292][ T1098] team0 (unregistering): Port device team_slave_0 removed [ 838.242756][T16090] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2974'. [ 838.323585][T16093] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2975'. [ 838.375152][T16093] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2975'. [ 838.431717][T16000] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 838.438894][T16000] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 838.516898][T16000] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 838.587600][T16097] tipc: Enabled bearer , priority 0 [ 838.601132][ T5888] usb 4-1: new full-speed USB device number 101 using dummy_hcd [ 838.610086][T16098] syzkaller0: entered promiscuous mode [ 838.615887][T16098] syzkaller0: entered allmulticast mode [ 838.819364][T16091] tipc: Resetting bearer [ 838.825904][ T5888] usb 4-1: config index 0 descriptor too short (expected 30, got 18) [ 838.891976][ T5888] usb 4-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 838.930391][ T5888] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 838.932307][T16091] tipc: Disabling bearer [ 838.975365][ T5888] usb 4-1: Product: syz [ 838.979616][ T5888] usb 4-1: Manufacturer: syz [ 839.010045][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 839.018523][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 839.027005][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 839.035785][ T5888] usb 4-1: SerialNumber: syz [ 839.070836][ T5888] usb 4-1: config 0 descriptor?? [ 839.080957][ T5888] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 839.089158][ T5888] usb 4-1: setting power ON [ 839.118905][ T5888] dvb-usb: bulk message failed: -22 (2/0) [ 839.151713][ T5888] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 839.212135][ T5888] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) error while loading driver (-19) [ 839.240952][ T5888] dvb_usb_cxusb 4-1:0.0: probe with driver dvb_usb_cxusb failed with error -22 [ 839.245024][T16000] hsr_slave_0: entered promiscuous mode [ 839.314892][T16000] hsr_slave_1: entered promiscuous mode [ 839.333577][T11298] usb 4-1: USB disconnect, device number 101 [ 839.362373][T16000] debugfs: 'hsr0' already exists in 'hsr' [ 839.398712][T16000] Cannot create hsr debugfs directory [ 839.521751][T16118] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2982'. [ 839.570286][ T5831] Bluetooth: hci6: command tx timeout [ 840.171585][ T1098] bond0 (unregistering): (slave gretap1): Releasing active interface [ 840.331642][ T1098] bond0 (unregistering): Released all slaves [ 840.476498][T16136] : renamed from virt_wifi0 [ 841.339845][T11298] usb 5-1: new low-speed USB device number 2 using dummy_hcd [ 841.501120][T11298] usb 5-1: Invalid ep0 maxpacket: 32 [ 841.654127][T11298] usb 5-1: new low-speed USB device number 3 using dummy_hcd [ 841.850625][T11298] usb 5-1: Invalid ep0 maxpacket: 32 [ 841.885816][T11298] usb usb5-port1: attempt power cycle [ 841.922265][T16174] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2996'. [ 842.102346][T16174] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2996'. [ 842.160532][T16178] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2996'. [ 842.252076][T11298] usb 5-1: new low-speed USB device number 4 using dummy_hcd [ 842.304053][T11298] usb 5-1: Invalid ep0 maxpacket: 32 [ 842.451311][T11298] usb 5-1: new low-speed USB device number 5 using dummy_hcd [ 842.501377][T11298] usb 5-1: Invalid ep0 maxpacket: 32 [ 842.516307][T11298] usb usb5-port1: unable to enumerate USB device [ 842.525508][T16000] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 842.561747][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805add8800: rx timeout, send abort [ 842.579827][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88805add8800: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 842.614779][T16000] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 842.646842][T16000] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 842.748170][T16000] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 843.143664][T16000] 8021q: adding VLAN 0 to HW filter on device bond0 [ 843.296981][T16000] 8021q: adding VLAN 0 to HW filter on device team0 [ 843.320492][T12280] bridge0: port 1(bridge_slave_0) entered blocking state [ 843.327751][T12280] bridge0: port 1(bridge_slave_0) entered forwarding state [ 843.448760][T16209] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 843.483983][T12280] bridge0: port 2(bridge_slave_1) entered blocking state [ 843.491189][T12280] bridge0: port 2(bridge_slave_1) entered forwarding state [ 843.742962][T16000] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 843.978082][T16000] veth0_vlan: entered promiscuous mode [ 844.028817][T16000] veth1_vlan: entered promiscuous mode [ 844.173895][T16000] veth0_macvtap: entered promiscuous mode [ 844.238084][T16000] veth1_macvtap: entered promiscuous mode [ 844.342844][T16000] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 844.434708][T16229] openvswitch: netlink: nsh attribute has 1 unknown bytes. [ 844.503024][T16000] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 844.690131][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 844.698764][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 844.707449][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 844.731456][ T1098] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 844.741598][ T1098] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 844.765243][T12280] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 844.983668][T12280] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 845.728402][T12284] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 845.758804][T12284] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 845.993184][T12280] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 846.026639][T12280] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 846.999942][ T42] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 847.163841][ T42] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 847.194325][ T42] usb 6-1: config 0 has no interfaces? [ 847.254537][ T42] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 847.305084][ T42] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 847.403726][ T42] usb 6-1: config 0 descriptor?? [ 847.699074][T16249] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 847.730097][ T5888] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 847.779885][T16249] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 847.892341][ T5888] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 847.923264][ T5888] usb 5-1: config 0 has no interfaces? [ 847.928931][ T5888] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 848.006536][ T5888] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 848.494841][ T5888] usb 5-1: config 0 descriptor?? [ 848.722089][T16260] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 848.731540][T16260] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 848.885646][T15811] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 848.897239][T15811] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 848.906036][T15811] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 848.920808][T15811] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 848.928902][T15811] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 849.697301][ T5895] usb 6-1: USB disconnect, device number 3 [ 849.973058][T16300] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3015'. [ 850.114604][ T1098] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 850.139637][ T1098] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 850.162811][ T1098] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 850.306105][ T1098] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 850.317847][ T1098] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 850.330645][ T1098] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 850.408683][ T5917] usb 5-1: USB disconnect, device number 6 [ 850.514488][ T1098] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 850.530042][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 850.538361][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 850.550263][ T1098] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 850.578590][ T1098] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 850.813641][ T1098] team0: Port device netdevsim0 removed [ 850.838430][ T1098] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 850.973631][ T1098] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 850.999521][ T1098] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 851.011319][ T5831] Bluetooth: hci0: command tx timeout [ 851.169297][T16319] team_slave_0: entered promiscuous mode [ 851.175465][T16319] team_slave_1: entered promiscuous mode [ 851.234703][T16319] vlan2: entered promiscuous mode [ 851.278859][T16319] team0: entered promiscuous mode [ 851.378911][T16316] netlink: 72 bytes leftover after parsing attributes in process `syz.5.3017'. [ 851.387185][T16289] chnl_net:caif_netlink_parms(): no params data found [ 852.296236][T16289] bridge0: port 1(bridge_slave_0) entered blocking state [ 852.357785][T16289] bridge0: port 1(bridge_slave_0) entered disabled state [ 852.495250][T16346] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3021'. [ 852.561348][T16289] bridge_slave_0: entered allmulticast mode [ 852.620934][ T5917] usb 6-1: new full-speed USB device number 4 using dummy_hcd [ 852.733227][T16289] bridge_slave_0: entered promiscuous mode [ 852.904281][ T5917] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 852.967819][T16289] bridge0: port 2(bridge_slave_1) entered blocking state [ 853.099669][ T5831] Bluetooth: hci0: command tx timeout [ 853.164241][ T5917] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 853.182534][T16289] bridge0: port 2(bridge_slave_1) entered disabled state [ 853.217257][ T5917] usb 6-1: Product: syz [ 853.239436][T16289] bridge_slave_1: entered allmulticast mode [ 853.248205][ T5917] usb 6-1: Manufacturer: syz [ 853.280869][ T5917] usb 6-1: SerialNumber: syz [ 853.285873][T16289] bridge_slave_1: entered promiscuous mode [ 853.317181][ T5917] usb 6-1: config 0 descriptor?? [ 853.484605][ T1098] bridge_slave_1: left allmulticast mode [ 853.519983][ T1098] bridge_slave_1: left promiscuous mode [ 853.529421][ T1098] bridge0: port 2(bridge_slave_1) entered disabled state [ 853.607216][ T5917] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 853.865517][T16360] kvm: kvm [16359]: vcpu0, guest rIP: 0x9134 Unhandled WRMSR(0x11e) = 0xbe702111 [ 854.154181][ T1098] bond3 (unregistering): (slave ip6erspan0): Releasing active interface [ 854.731947][ T1098] bond4 (unregistering): (slave geneve2): Releasing active interface [ 855.122143][ T1098] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 855.150529][ T1098] bridge0 (unregistering): left promiscuous mode [ 855.171725][ T5831] Bluetooth: hci0: command tx timeout [ 855.387923][ T1098] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 855.425672][ T1098] bond_slave_0: left promiscuous mode [ 855.474465][ T1098] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 855.516596][ T1098] bond_slave_1: left promiscuous mode [ 855.581547][ T1098] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 855.599512][ T1098] bond0 (unregistering): Released all slaves [ 855.624222][ T1098] bond1 (unregistering): Released all slaves [ 855.656839][ T1098] bond2 (unregistering): Released all slaves [ 855.692815][ T1098] bond3 (unregistering): Released all slaves [ 855.761637][ T1098] bond4 (unregistering): Released all slaves [ 855.815374][T16355] syzkaller1: entered promiscuous mode [ 855.821595][T16355] syzkaller1: entered allmulticast mode [ 855.994745][ T1098] tipc: Disabling bearer [ 856.025254][T16289] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 856.027739][ T1098] tipc: Left network mode [ 856.103788][T16289] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 856.453692][ T5917] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 856.511056][ T5917] usb 6-1: USB disconnect, device number 4 [ 856.638781][T16289] team0: Port device team_slave_0 added [ 856.806692][T16390] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 856.914198][T16289] team0: Port device team_slave_1 added [ 857.250550][ T5831] Bluetooth: hci0: command tx timeout [ 857.326637][T16397] netlink: 64 bytes leftover after parsing attributes in process `syz.5.3029'. [ 857.418863][T16289] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 857.439092][T16289] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 857.561392][T16289] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 857.844474][T16289] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 857.883294][T16289] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 858.021644][T16289] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 858.147434][ T1098] hsr_slave_0: left promiscuous mode [ 858.164874][ T1098] hsr_slave_1: left promiscuous mode [ 858.189270][ T1098] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 858.229022][ T1098] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 858.356902][ T1098] team_slave_0: left promiscuous mode [ 858.362753][ T1098] team_slave_1: left promiscuous mode [ 858.368222][ T1098] batadv1: left promiscuous mode [ 858.425291][ T1098] veth1_macvtap: left promiscuous mode [ 858.446687][ T1098] veth0_macvtap: left promiscuous mode [ 858.480722][ T1098] veth1_vlan: left allmulticast mode [ 858.506359][ T1098] veth1_vlan: left promiscuous mode [ 858.535268][ T1098] veth0_vlan: left promiscuous mode [ 858.938850][ T1098] team0 (unregistering): Port device batadv1 removed [ 859.039859][ T42] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 859.233932][ T42] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 859.269789][ T42] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 859.297433][ T42] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 859.327923][ T42] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.de [ 859.389496][ T42] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 859.434447][ T42] usb 5-1: config 0 descriptor?? [ 859.561081][ T1098] team0 (unregistering): Port device team_slave_1 removed [ 859.660157][ T42] ath6kl: Failed to submit usb control message: -71 [ 859.668130][ T42] ath6kl: unable to send the bmi data to the device: -71 [ 859.679253][ T42] ath6kl: Unable to send get target info: -71 [ 859.690860][ T42] ath6kl: Failed to init ath6kl core: -71 [ 859.698224][ T42] ath6kl_usb 5-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 859.710518][ T1098] team0 (unregistering): Port device team_slave_0 removed [ 859.713364][ T42] usb 5-1: USB disconnect, device number 7 [ 860.041347][T16434] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3038'. [ 860.070364][T16434] netlink: 'syz.5.3038': attribute type 30 has an invalid length. [ 860.165721][T16435] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3038'. [ 860.201632][T16416] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3032'. [ 860.262659][T16418] dummy0: entered promiscuous mode [ 860.283564][T16418] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 860.335002][T16418] hsr1: Slave A (dummy0) is not up; please bring it up to get a fully working HSR network [ 860.342184][T16435] netlink: 'syz.5.3038': attribute type 30 has an invalid length. [ 860.384261][T16418] hsr1: Slave B (netdevsim0) is not up; please bring it up to get a fully working HSR network [ 860.429986][T16418] hsr1: entered allmulticast mode [ 860.435148][T16418] dummy0: entered allmulticast mode [ 860.471220][T16418] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 860.617659][ T89] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 860.640049][ T89] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 860.749326][ T89] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 860.797620][ T89] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 860.836948][T16289] hsr_slave_0: entered promiscuous mode [ 860.872635][T16289] hsr_slave_1: entered promiscuous mode [ 860.891675][T16289] debugfs: 'hsr0' already exists in 'hsr' [ 860.907900][T16289] Cannot create hsr debugfs directory [ 861.342895][T16458] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3047'. [ 861.387483][ T1098] IPVS: stop unused estimator thread 0... [ 861.699984][ T5917] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 862.051266][ T5917] usb 6-1: Using ep0 maxpacket: 16 [ 862.081898][ T5917] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 53, changing to 9 [ 862.149991][ T5917] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 25082, setting to 1024 [ 862.186777][ T5917] usb 6-1: New USB device found, idVendor=1b96, idProduct=0008, bcdDevice= 0.00 [ 862.277981][ T5917] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 862.313159][ T5917] usb 6-1: config 0 descriptor?? [ 862.734277][ T5917] ntrig 0003:1B96:0008.0020: item fetching failed at offset 3/7 [ 862.758177][ T5917] ntrig 0003:1B96:0008.0020: parse failed [ 862.779994][ T5917] ntrig 0003:1B96:0008.0020: probe with driver ntrig failed with error -22 [ 862.934086][ T42] usb 6-1: USB disconnect, device number 5 [ 862.980791][T16289] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 863.049885][T16289] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 863.087291][T16289] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 863.113547][T16289] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 863.428003][T16289] 8021q: adding VLAN 0 to HW filter on device bond0 [ 863.521290][T16289] 8021q: adding VLAN 0 to HW filter on device team0 [ 863.604727][T12274] bridge0: port 1(bridge_slave_0) entered blocking state [ 863.612093][T12274] bridge0: port 1(bridge_slave_0) entered forwarding state [ 863.695340][T12274] bridge0: port 2(bridge_slave_1) entered blocking state [ 863.702585][T12274] bridge0: port 2(bridge_slave_1) entered forwarding state [ 863.856629][T16507] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3052'. [ 863.931875][T16289] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 863.970016][T16507] netlink: 'syz.1.3052': attribute type 30 has an invalid length. [ 864.085951][T16513] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3052'. [ 864.126649][T16513] netlink: 'syz.1.3052': attribute type 30 has an invalid length. [ 864.138995][T16509] netlink: 'syz.5.3054': attribute type 1 has an invalid length. [ 864.507800][T16289] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 864.648224][T16521] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3057'. [ 864.744713][T16289] veth0_vlan: entered promiscuous mode [ 864.792304][T16289] veth1_vlan: entered promiscuous mode [ 864.821913][T16524] FAULT_INJECTION: forcing a failure. [ 864.821913][T16524] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 864.890483][T16524] CPU: 0 UID: 0 PID: 16524 Comm: syz.5.3058 Tainted: G L syzkaller #0 PREEMPT(full) [ 864.890516][T16524] Tainted: [L]=SOFTLOCKUP [ 864.890524][T16524] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 864.890535][T16524] Call Trace: [ 864.890544][T16524] [ 864.890553][T16524] dump_stack_lvl+0xe8/0x150 [ 864.890586][T16524] should_fail_ex+0x412/0x560 [ 864.890620][T16524] prepare_alloc_pages+0x22a/0x650 [ 864.890653][T16524] __alloc_frozen_pages_noprof+0x12f/0x380 [ 864.890684][T16524] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 864.890711][T16524] ? __pfx_policy_nodemask+0x10/0x10 [ 864.890735][T16524] ? __pfx___mutex_lock+0x10/0x10 [ 864.890763][T16524] ? aa_file_perm+0x50e/0x15e0 [ 864.890785][T16524] alloc_pages_mpol+0x232/0x4a0 [ 864.890813][T16524] alloc_pages_noprof+0xa8/0x1a0 [ 864.890852][T16524] anon_pipe_write+0xc06/0x1480 [ 864.890876][T16524] ? __pfx_aa_file_perm+0x10/0x10 [ 864.890915][T16524] ? __pfx_anon_pipe_write+0x10/0x10 [ 864.890938][T16524] ? apparmor_file_permission+0x1f4/0x300 [ 864.890974][T16524] ? bpf_lsm_file_permission+0x9/0x20 [ 864.891002][T16524] ? security_file_permission+0x75/0x260 [ 864.891028][T16524] ? rw_verify_area+0x255/0x4d0 [ 864.891048][T16524] ? import_ubuf+0xfb/0x1d0 [ 864.891071][T16524] aio_write+0x5cd/0x870 [ 864.891109][T16524] ? __pfx_aio_write+0x10/0x10 [ 864.891165][T16524] io_submit_one+0x7bb/0x14c0 [ 864.891211][T16524] ? __pfx_io_submit_one+0x10/0x10 [ 864.891247][T16524] ? __might_fault+0xaf/0x130 [ 864.891270][T16524] __se_sys_io_submit+0x195/0x340 [ 864.891304][T16524] ? __pfx___se_sys_io_submit+0x10/0x10 [ 864.891321][T16524] ? ksys_write+0x242/0x270 [ 864.891358][T16524] do_syscall_64+0x14d/0xf80 [ 864.891381][T16524] ? trace_irq_disable+0x3b/0x150 [ 864.891396][T16524] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 864.891417][T16524] ? clear_bhb_loop+0x40/0x90 [ 864.891442][T16524] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 864.891461][T16524] RIP: 0033:0x7f47c859c819 [ 864.891480][T16524] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 864.891496][T16524] RSP: 002b:00007f47c93e2028 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 864.891518][T16524] RAX: ffffffffffffffda RBX: 00007f47c8815fa0 RCX: 00007f47c859c819 [ 864.891532][T16524] RDX: 0000200000000300 RSI: 000000000000f000 RDI: 00007f47c93b2000 [ 864.891545][T16524] RBP: 00007f47c93e2090 R08: 0000000000000000 R09: 0000000000000000 [ 864.891557][T16524] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 864.891568][T16524] R13: 00007f47c8816038 R14: 00007f47c8815fa0 R15: 00007f47c893fa48 [ 864.891601][T16524] [ 864.934053][T16289] veth0_macvtap: entered promiscuous mode [ 865.357731][T16289] veth1_macvtap: entered promiscuous mode [ 865.447714][T16529] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3060'. [ 865.637733][T16289] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 865.686318][T16289] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 865.773426][T12280] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 865.960874][T16544] netlink: 104 bytes leftover after parsing attributes in process `syz.5.3064'. [ 865.985817][T12280] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 866.080756][T12280] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 866.124153][T16550] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3065'. [ 866.126718][T12280] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 866.229778][T16550] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3065'. [ 866.276597][T16553] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3066'. [ 866.658261][T16565] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3067'. [ 866.694605][T16566] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3068'. [ 866.731533][T16566] netlink: 'syz.1.3068': attribute type 30 has an invalid length. [ 866.852078][T16569] netlink: 'syz.1.3068': attribute type 30 has an invalid length. [ 867.733252][T12276] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 867.742902][T12276] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 867.936576][T12276] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 867.975748][T12276] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 868.456407][T16593] bond_slave_0: entered promiscuous mode [ 868.462231][T16593] bond_slave_1: entered promiscuous mode [ 868.524052][T16593] vlan2: entered promiscuous mode [ 868.529168][T16593] bond0: entered promiscuous mode [ 868.840615][ T42] usb 4-1: new high-speed USB device number 102 using dummy_hcd [ 869.021028][ T42] usb 4-1: too many configurations: 9, using maximum allowed: 8 [ 869.041188][ T42] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 869.070075][ T42] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 869.088984][ T42] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 869.113587][ T42] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 869.144875][ T42] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 869.169575][ T42] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 869.200836][ T42] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 869.215921][ T42] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 869.227411][ T42] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 869.239848][ T42] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 869.251835][ T42] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 869.268924][ T42] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 869.285554][T16602] __nla_validate_parse: 1 callbacks suppressed [ 869.285569][T16602] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3076'. [ 869.307771][ T42] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 869.328420][ T42] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 869.351410][ T42] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 869.362082][ T42] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 869.395538][ T42] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 869.761875][ T42] usb 4-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 869.804018][ T42] usb 4-1: Product: syz [ 869.850011][ T42] usb 4-1: Manufacturer: syz [ 869.854768][ T42] usb 4-1: SerialNumber: syz [ 870.152006][ T29] audit: type=1326 audit(1775266833.225:830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16584 comm="syz.4.3072" exe="/root/syz-executor" sig=9 arch=c000003e syscall=39 compat=0 ip=0x7f25ce596597 code=0x0 [ 870.211038][ T42] usb 4-1: config 0 descriptor?? [ 870.232313][ T42] yurex 4-1:0.0: Could not find endpoints [ 870.450212][ T42] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 870.458374][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.465131][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.486343][ T5888] usb 4-1: USB disconnect, device number 102 [ 871.040374][T16608] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3078'. [ 871.477095][T15811] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 871.489538][T15811] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 871.502579][T15811] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 871.530148][T15811] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 871.537957][T15811] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 871.858514][T16616] binder: BINDER_SET_CONTEXT_MGR already set [ 871.877545][T16615] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3081'. [ 871.975483][T16616] binder: 16613:16616 ioctl 4018620d 200000000040 returned -16 [ 871.975785][T16620] binder: 16613:16620 ioctl c0306201 2000000003c0 returned -14 [ 872.332848][T16631] FAULT_INJECTION: forcing a failure. [ 872.332848][T16631] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 872.392932][T16631] CPU: 0 UID: 0 PID: 16631 Comm: syz.4.3086 Tainted: G L syzkaller #0 PREEMPT(full) [ 872.392966][T16631] Tainted: [L]=SOFTLOCKUP [ 872.392974][T16631] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 872.392985][T16631] Call Trace: [ 872.392994][T16631] [ 872.393002][T16631] dump_stack_lvl+0xe8/0x150 [ 872.393033][T16631] should_fail_ex+0x412/0x560 [ 872.393066][T16631] _copy_from_iter+0x1d3/0x1670 [ 872.393091][T16631] ? rcu_is_watching+0x15/0xb0 [ 872.393124][T16631] ? __pfx__copy_from_iter+0x10/0x10 [ 872.393153][T16631] ? netlink_sendmsg+0x650/0xb40 [ 872.393172][T16631] ? skb_put+0x11b/0x210 [ 872.393198][T16631] netlink_sendmsg+0x6c0/0xb40 [ 872.393228][T16631] ? __pfx_netlink_sendmsg+0x10/0x10 [ 872.393253][T16631] ? aa_sock_msg_perm+0xf1/0x1b0 [ 872.393284][T16631] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 872.393311][T16631] ____sys_sendmsg+0x972/0x9f0 [ 872.393345][T16631] ? __pfx_____sys_sendmsg+0x10/0x10 [ 872.393376][T16631] ? import_iovec+0x73/0xa0 [ 872.393403][T16631] ___sys_sendmsg+0x2a5/0x360 [ 872.393431][T16631] ? __pfx____sys_sendmsg+0x10/0x10 [ 872.393491][T16631] ? __fget_files+0x2a/0x420 [ 872.393508][T16631] ? __fget_files+0x3a0/0x420 [ 872.393536][T16631] __x64_sys_sendmsg+0x1bd/0x2a0 [ 872.393564][T16631] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 872.393598][T16631] ? __pfx_ksys_write+0x10/0x10 [ 872.393631][T16631] do_syscall_64+0x14d/0xf80 [ 872.393656][T16631] ? trace_irq_disable+0x3b/0x150 [ 872.393673][T16631] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 872.393693][T16631] ? clear_bhb_loop+0x40/0x90 [ 872.393717][T16631] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 872.393734][T16631] RIP: 0033:0x7f25ce59c819 [ 872.393753][T16631] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 872.393770][T16631] RSP: 002b:00007f25cf4d3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 872.393792][T16631] RAX: ffffffffffffffda RBX: 00007f25ce815fa0 RCX: 00007f25ce59c819 [ 872.393807][T16631] RDX: 0000000000040080 RSI: 0000200000000200 RDI: 0000000000000003 [ 872.393820][T16631] RBP: 00007f25cf4d3090 R08: 0000000000000000 R09: 0000000000000000 [ 872.393832][T16631] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 872.393843][T16631] R13: 00007f25ce816038 R14: 00007f25ce815fa0 R15: 00007f25ce93fa48 [ 872.393874][T16631] [ 872.736736][ T5888] usb 4-1: new high-speed USB device number 103 using dummy_hcd [ 873.133668][T11044] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 873.270890][ T10] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 873.289857][T11044] usb 6-1: Using ep0 maxpacket: 16 [ 873.309518][T16612] chnl_net:caif_netlink_parms(): no params data found [ 873.321657][T11044] usb 6-1: config 0 has no interfaces? [ 873.331422][T11044] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 873.356390][T16640] netlink: 'syz.0.3087': attribute type 12 has an invalid length. [ 873.366087][T11044] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 873.375003][T16640] FAULT_INJECTION: forcing a failure. [ 873.375003][T16640] name failslab, interval 1, probability 0, space 0, times 0 [ 873.431927][ T10] usb 5-1: device descriptor read/64, error -71 [ 873.444582][T11044] usb 6-1: Manufacturer: syz [ 873.472499][T11044] usb 6-1: config 0 descriptor?? [ 873.495868][T16640] CPU: 0 UID: 0 PID: 16640 Comm: syz.0.3087 Tainted: G L syzkaller #0 PREEMPT(full) [ 873.495899][T16640] Tainted: [L]=SOFTLOCKUP [ 873.495904][T16640] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 873.495912][T16640] Call Trace: [ 873.495917][T16640] [ 873.495923][T16640] dump_stack_lvl+0xe8/0x150 [ 873.495945][T16640] should_fail_ex+0x412/0x560 [ 873.495971][T16640] should_failslab+0xa8/0x100 [ 873.495988][T16640] __kmalloc_cache_noprof+0x88/0x660 [ 873.496002][T16640] ? __ipv6_dev_mc_inc+0x44f/0xa50 [ 873.496019][T16640] __ipv6_dev_mc_inc+0x44f/0xa50 [ 873.496038][T16640] pndisc_constructor+0xe0/0x150 [ 873.496054][T16640] ? __pfx_pndisc_constructor+0x10/0x10 [ 873.496071][T16640] ? pneigh_create+0x15b/0x4b0 [ 873.496086][T16640] pneigh_create+0x246/0x4b0 [ 873.496101][T16640] neigh_add+0x6ea/0xf70 [ 873.496122][T16640] ? __pfx_neigh_add+0x10/0x10 [ 873.496153][T16640] ? __pfx_neigh_add+0x10/0x10 [ 873.496166][T16640] rtnetlink_rcv_msg+0x77e/0xbe0 [ 873.496183][T16640] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 873.496195][T16640] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 873.496206][T16640] ? ref_tracker_free+0x693/0x840 [ 873.496224][T16640] ? __copy_skb_header+0xa3/0x4a0 [ 873.496241][T16640] ? __pfx_ref_tracker_free+0x10/0x10 [ 873.496252][T16640] ? __skb_clone+0x63/0x7a0 [ 873.496272][T16640] netlink_rcv_skb+0x232/0x4b0 [ 873.496286][T16640] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 873.496300][T16640] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 873.496319][T16640] ? netlink_deliver_tap+0x2e/0x1b0 [ 873.496336][T16640] netlink_unicast+0x80f/0x9b0 [ 873.496359][T16640] ? __pfx_netlink_unicast+0x10/0x10 [ 873.496377][T16640] ? netlink_sendmsg+0x650/0xb40 [ 873.496388][T16640] ? skb_put+0x11b/0x210 [ 873.496404][T16640] netlink_sendmsg+0x813/0xb40 [ 873.496422][T16640] ? __pfx_netlink_sendmsg+0x10/0x10 [ 873.496437][T16640] ? aa_sock_msg_perm+0xf1/0x1b0 [ 873.496456][T16640] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 873.496472][T16640] ? __pfx_netlink_sendmsg+0x10/0x10 [ 873.496483][T16640] sock_write_iter+0x49b/0x4f0 [ 873.496502][T16640] ? __pfx_sock_write_iter+0x10/0x10 [ 873.496526][T16640] ? bpf_lsm_file_permission+0x9/0x20 [ 873.496539][T16640] ? security_file_permission+0x75/0x260 [ 873.496560][T16640] vfs_write+0x61d/0xb90 [ 873.496580][T16640] ? __pfx_vfs_write+0x10/0x10 [ 873.496600][T16640] ? __fget_files+0x2a/0x420 [ 873.496616][T16640] ksys_write+0x150/0x270 [ 873.496631][T16640] ? __pfx_ksys_write+0x10/0x10 [ 873.496651][T16640] do_syscall_64+0x14d/0xf80 [ 873.496667][T16640] ? trace_irq_disable+0x3b/0x150 [ 873.496677][T16640] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 873.496689][T16640] ? clear_bhb_loop+0x40/0x90 [ 873.496703][T16640] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 873.496715][T16640] RIP: 0033:0x7fb38d19c819 [ 873.496728][T16640] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 873.496738][T16640] RSP: 002b:00007fb38e0b2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 873.496752][T16640] RAX: ffffffffffffffda RBX: 00007fb38d415fa0 RCX: 00007fb38d19c819 [ 873.496760][T16640] RDX: 00000000000000fc RSI: 0000200000000240 RDI: 0000000000000003 [ 873.496768][T16640] RBP: 00007fb38e0b2090 R08: 0000000000000000 R09: 0000000000000000 [ 873.496775][T16640] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 873.496782][T16640] R13: 00007fb38d416038 R14: 00007fb38d415fa0 R15: 00007fb38d53fa48 [ 873.496801][T16640] [ 873.859911][T15811] Bluetooth: hci1: command tx timeout [ 874.929627][ T10] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 875.140655][ T10] usb 5-1: device descriptor read/64, error -71 [ 875.181278][T12282] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 875.221031][T12282] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 875.280020][ T10] usb usb5-port1: attempt power cycle [ 875.511524][T12282] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 875.522339][T12282] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 875.646995][ T10] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 875.691967][ T10] usb 5-1: device descriptor read/8, error -71 [ 875.900293][ T5831] Bluetooth: hci1: command tx timeout [ 876.105923][T16658] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 876.172260][T11044] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 876.357168][T12282] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 876.449915][T12282] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 876.507183][ T89] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 876.611134][T12282] netdevsim netdevsim1 netdevsim0 (unregistering): left promiscuous mode [ 876.633181][T12282] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 876.656607][T12282] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 876.711028][T16612] bridge0: port 1(bridge_slave_0) entered blocking state [ 876.733582][T16612] bridge0: port 1(bridge_slave_0) entered disabled state [ 876.785495][T16612] bridge_slave_0: entered allmulticast mode [ 876.811823][T16612] bridge_slave_0: entered promiscuous mode [ 876.845878][T16612] bridge0: port 2(bridge_slave_1) entered blocking state [ 876.890811][T16612] bridge0: port 2(bridge_slave_1) entered disabled state [ 876.929550][T16612] bridge_slave_1: entered allmulticast mode [ 876.936683][ T5888] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 876.999907][T16612] bridge_slave_1: entered promiscuous mode [ 877.060378][ T10] usb 6-1: USB disconnect, device number 6 [ 877.303634][T16612] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 877.377780][T16612] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 877.608944][ T89] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 877.639195][ T89] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 877.763419][T16612] team0: Port device team_slave_0 added [ 877.816840][T16612] team0: Port device team_slave_1 added [ 877.982629][ T5831] Bluetooth: hci1: command tx timeout [ 878.022034][T16674] FAULT_INJECTION: forcing a failure. [ 878.022034][T16674] name failslab, interval 1, probability 0, space 0, times 0 [ 878.043800][T16612] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 878.059770][T16612] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 878.100859][T16674] CPU: 1 UID: 0 PID: 16674 Comm: syz.4.3097 Tainted: G L syzkaller #0 PREEMPT(full) [ 878.100882][T16674] Tainted: [L]=SOFTLOCKUP [ 878.100886][T16674] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 878.100894][T16674] Call Trace: [ 878.100908][T16674] [ 878.100914][T16674] dump_stack_lvl+0xe8/0x150 [ 878.100935][T16674] should_fail_ex+0x412/0x560 [ 878.100957][T16674] should_failslab+0xa8/0x100 [ 878.100973][T16674] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 878.100986][T16674] ? __alloc_skb+0x186/0x7d0 [ 878.100999][T16674] ? __alloc_skb+0x1d0/0x7d0 [ 878.101010][T16674] ? __local_bh_enable_ip+0xd0/0x130 [ 878.101028][T16674] __alloc_skb+0x1d0/0x7d0 [ 878.101043][T16674] netlink_sendmsg+0x5d4/0xb40 [ 878.101062][T16674] ? __pfx_netlink_sendmsg+0x10/0x10 [ 878.101077][T16674] ? aa_sock_msg_perm+0xf1/0x1b0 [ 878.101095][T16674] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 878.101111][T16674] ____sys_sendmsg+0x972/0x9f0 [ 878.101130][T16674] ? __pfx_____sys_sendmsg+0x10/0x10 [ 878.101150][T16674] ? import_iovec+0x73/0xa0 [ 878.101165][T16674] ___sys_sendmsg+0x2a5/0x360 [ 878.101183][T16674] ? __pfx____sys_sendmsg+0x10/0x10 [ 878.101216][T16674] ? __fget_files+0x2a/0x420 [ 878.101226][T16674] ? __fget_files+0x3a0/0x420 [ 878.101242][T16674] __x64_sys_sendmsg+0x1bd/0x2a0 [ 878.101258][T16674] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 878.101278][T16674] ? __pfx_ksys_write+0x10/0x10 [ 878.101297][T16674] do_syscall_64+0x14d/0xf80 [ 878.101312][T16674] ? trace_irq_disable+0x3b/0x150 [ 878.101322][T16674] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 878.101334][T16674] ? clear_bhb_loop+0x40/0x90 [ 878.101348][T16674] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 878.101359][T16674] RIP: 0033:0x7f25ce59c819 [ 878.101371][T16674] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 878.101381][T16674] RSP: 002b:00007f25cf4d3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 878.101395][T16674] RAX: ffffffffffffffda RBX: 00007f25ce815fa0 RCX: 00007f25ce59c819 [ 878.101404][T16674] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000006 [ 878.101411][T16674] RBP: 00007f25cf4d3090 R08: 0000000000000000 R09: 0000000000000000 [ 878.101419][T16674] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 878.101426][T16674] R13: 00007f25ce816038 R14: 00007f25ce815fa0 R15: 00007f25ce93fa48 [ 878.101443][T16674] [ 878.352772][ T10] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 878.370295][T16612] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 878.623540][T12282] bridge_slave_1: left allmulticast mode [ 878.657928][T12282] bridge_slave_1: left promiscuous mode [ 878.681200][T12282] bridge0: port 2(bridge_slave_1) entered disabled state [ 878.782742][T12282] bridge_slave_0: left allmulticast mode [ 878.809895][T12282] bridge_slave_0: left promiscuous mode [ 878.815781][T12282] bridge0: port 1(bridge_slave_0) entered disabled state [ 878.840105][T16691] netlink: 68 bytes leftover after parsing attributes in process `syz.5.3098'. [ 878.998127][ T5916] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 879.204953][ T5916] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 879.241944][ T5916] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 879.477511][ T5916] usb 5-1: config 0 descriptor?? [ 880.002362][ T5916] usb 5-1: string descriptor 0 read error: -71 [ 880.067599][ T5831] Bluetooth: hci1: command tx timeout [ 880.093832][ T5916] usb 5-1: USB disconnect, device number 13 [ 880.341199][T12282] bond3 (unregistering): (slave gretap1): Releasing active interface [ 880.487172][T12282] dvmrp12 (unregistering): left allmulticast mode [ 880.512075][T16705] FAULT_INJECTION: forcing a failure. [ 880.512075][T16705] name failslab, interval 1, probability 0, space 0, times 0 [ 880.581130][T16705] CPU: 0 UID: 0 PID: 16705 Comm: syz.0.3102 Tainted: G L syzkaller #0 PREEMPT(full) [ 880.581164][T16705] Tainted: [L]=SOFTLOCKUP [ 880.581177][T16705] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 880.581190][T16705] Call Trace: [ 880.581199][T16705] [ 880.581207][T16705] dump_stack_lvl+0xe8/0x150 [ 880.581241][T16705] should_fail_ex+0x412/0x560 [ 880.581277][T16705] should_failslab+0xa8/0x100 [ 880.581306][T16705] __kmalloc_noprof+0xe8/0x760 [ 880.581331][T16705] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 880.581359][T16705] tomoyo_realpath_from_path+0xe3/0x5d0 [ 880.581392][T16705] ? tomoyo_path_number_perm+0x219/0x630 [ 880.581420][T16705] tomoyo_path_number_perm+0x246/0x630 [ 880.581451][T16705] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 880.581481][T16705] ? __lock_acquire+0x6b5/0x2cf0 [ 880.581520][T16705] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 880.581568][T16705] ? __fget_files+0x2a/0x420 [ 880.581590][T16705] ? __fget_files+0x2a/0x420 [ 880.581607][T16705] ? __fget_files+0x3a0/0x420 [ 880.581624][T16705] ? __fget_files+0x2a/0x420 [ 880.581647][T16705] security_file_ioctl+0xc3/0x2a0 [ 880.581682][T16705] __se_sys_ioctl+0x47/0x170 [ 880.581711][T16705] do_syscall_64+0x14d/0xf80 [ 880.581736][T16705] ? trace_irq_disable+0x3b/0x150 [ 880.581752][T16705] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 880.581772][T16705] ? clear_bhb_loop+0x40/0x90 [ 880.581797][T16705] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 880.581817][T16705] RIP: 0033:0x7fb38d19c819 [ 880.581838][T16705] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 880.581862][T16705] RSP: 002b:00007fb38e0b2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 880.581884][T16705] RAX: ffffffffffffffda RBX: 00007fb38d415fa0 RCX: 00007fb38d19c819 [ 880.581898][T16705] RDX: 0000000000000000 RSI: 0000000000005411 RDI: 0000000000000003 [ 880.581910][T16705] RBP: 00007fb38e0b2090 R08: 0000000000000000 R09: 0000000000000000 [ 880.581922][T16705] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 880.581934][T16705] R13: 00007fb38d416038 R14: 00007fb38d415fa0 R15: 00007fb38d53fa48 [ 880.581966][T16705] [ 880.583039][T16705] ERROR: Out of memory at tomoyo_realpath_from_path. [ 880.896338][T12282] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 880.921833][T16710] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3103'. [ 880.932668][T12282] bridge0 (unregistering): left promiscuous mode [ 881.032424][T12282] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 881.059298][T12282] bond_slave_0: left promiscuous mode [ 881.072587][T16712] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 881.086295][T12282] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 881.130785][T12282] bond_slave_1: left promiscuous mode [ 881.152983][T12282] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 881.164568][T12282] batadv0: left promiscuous mode [ 881.173840][T12282] bond0 (unregistering): Released all slaves [ 881.201929][T12282] bond1 (unregistering): Released all slaves [ 881.245661][T12282] bond2 (unregistering): Released all slaves [ 881.306468][T12282] bond3 (unregistering): Released all slaves [ 881.377321][T12282] bond4 (unregistering): Released all slaves [ 881.425883][T16612] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 881.437714][T16612] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 881.523866][T16612] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 881.699911][T12282] tipc: Left network mode [ 881.970654][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 882.046638][T16730] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 882.128908][T16612] hsr_slave_0: entered promiscuous mode [ 882.210864][T16612] hsr_slave_1: entered promiscuous mode [ 882.230908][T16612] debugfs: 'hsr0' already exists in 'hsr' [ 882.271129][T16612] Cannot create hsr debugfs directory [ 882.352782][T16734] syzkaller1: entered promiscuous mode [ 882.358425][T16734] syzkaller1: entered allmulticast mode [ 882.932801][T12282] dummy0: left promiscuous mode [ 883.108845][T12282] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 883.158201][T12282] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 883.168379][T16754] netlink: 'syz.3.3114': attribute type 10 has an invalid length. [ 883.225829][T12282] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 883.254985][T12282] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 883.344831][T12282] hsr0: left allmulticast mode [ 883.390029][ T5888] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 883.437740][T12282] veth1_macvtap: left promiscuous mode [ 883.457336][T12282] veth0_macvtap: left promiscuous mode [ 883.473550][T12282] veth1_vlan: left promiscuous mode [ 883.494463][T12282] veth0_vlan: left promiscuous mode [ 883.592761][ T5888] usb 6-1: Using ep0 maxpacket: 16 [ 883.677163][ T5888] usb 6-1: config 0 has no interfaces? [ 883.721459][ T5888] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 883.760046][ T5888] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 883.797557][ T5888] usb 6-1: Manufacturer: syz [ 883.857097][ T5888] usb 6-1: config 0 descriptor?? [ 884.206809][T16756] netlink: 'syz.5.3113': attribute type 1 has an invalid length. [ 884.507130][T16766] netlink: 44 bytes leftover after parsing attributes in process `syz.5.3113'. [ 884.532879][T12282] team_slave_1 (unregistering): left promiscuous mode [ 884.579369][T12282] team0 (unregistering): Port device team_slave_1 removed [ 884.641702][T12282] team_slave_0 (unregistering): left promiscuous mode [ 884.721775][T12282] team0 (unregistering): Port device team_slave_0 removed [ 885.207466][T16774] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3119'. [ 886.220353][T16754] bridge0: port 2(bridge_slave_1) entered disabled state [ 886.228403][T16754] bridge0: port 1(bridge_slave_0) entered disabled state [ 886.246777][T16754] bridge0: port 2(bridge_slave_1) entered blocking state [ 886.254090][T16754] bridge0: port 2(bridge_slave_1) entered listening state [ 886.261624][T16754] bridge0: port 1(bridge_slave_0) entered blocking state [ 886.268788][T16754] bridge0: port 1(bridge_slave_0) entered listening state [ 886.342152][T16754] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 886.604926][T16756] 8021q: adding VLAN 0 to HW filter on device bond1 [ 886.657867][T16762] bond1: (slave gretap1): making interface the new active one [ 886.738688][T16762] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 886.983155][T16781] program syz.0.3121 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 887.384049][T12282] IPVS: stop unused estimator thread 0... [ 887.595379][T16794] team_slave_0: entered promiscuous mode [ 887.601182][T16794] team_slave_1: entered promiscuous mode [ 887.638136][T16794] vlan2: entered promiscuous mode [ 887.652223][T16794] team0: entered promiscuous mode [ 888.074062][T16802] deleting an unspecified loop device is not supported. [ 888.174991][ T5895] usb 6-1: USB disconnect, device number 7 [ 888.687850][T16612] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 888.699904][ T5895] usb 6-1: new full-speed USB device number 8 using dummy_hcd [ 888.726775][T16612] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 888.758479][T16612] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 888.794598][T16612] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 888.882620][ T5895] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 888.909973][ T5895] usb 6-1: config 0 has no interface number 0 [ 888.939850][ T5895] usb 6-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 888.975238][ T5895] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 889.050573][ T5895] usb 6-1: config 0 descriptor?? [ 889.074989][ T5895] usb 6-1: selecting invalid altsetting 1 [ 889.110707][ T5895] dvb_ttusb_budget: ttusb_init_controller: error [ 889.148943][ T5895] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 889.225480][T16612] 8021q: adding VLAN 0 to HW filter on device bond0 [ 889.346056][T16612] 8021q: adding VLAN 0 to HW filter on device team0 [ 889.407331][T12284] bridge0: port 1(bridge_slave_0) entered blocking state [ 889.414600][T12284] bridge0: port 1(bridge_slave_0) entered forwarding state [ 889.460005][ T5895] DVB: Unable to find symbol cx22700_attach() [ 889.484724][T12284] bridge0: port 2(bridge_slave_1) entered blocking state [ 889.492007][T12284] bridge0: port 2(bridge_slave_1) entered forwarding state [ 889.665672][ T5895] DVB: Unable to find symbol tda10046_attach() [ 889.696092][ T5895] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 889.756673][ T5895] usb 6-1: USB disconnect, device number 8 [ 889.880035][ T5902] usb 4-1: new high-speed USB device number 104 using dummy_hcd [ 889.938951][T16612] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 890.105464][ T5902] usb 4-1: Using ep0 maxpacket: 32 [ 890.132909][ T5902] usb 4-1: config 0 has no interfaces? [ 890.149938][T16612] veth0_vlan: entered promiscuous mode [ 890.166815][ T5902] usb 4-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 890.211840][ T5902] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 890.213059][T16612] veth1_vlan: entered promiscuous mode [ 890.264420][ T5902] usb 4-1: Product: syz [ 890.268787][ T5902] usb 4-1: Manufacturer: syz [ 890.290155][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 890.302927][ T5902] usb 4-1: SerialNumber: syz [ 890.330473][ T5902] usb 4-1: config 0 descriptor?? [ 890.360973][ T42] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 890.434422][T16612] veth0_macvtap: entered promiscuous mode [ 890.497911][T16612] veth1_macvtap: entered promiscuous mode [ 890.561716][ T42] usb 6-1: Using ep0 maxpacket: 8 [ 890.590288][ T42] usb 6-1: config 53 has an invalid interface number: 101 but max is 0 [ 890.621311][T16612] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 890.634058][ T42] usb 6-1: config 53 has an invalid descriptor of length 0, skipping remainder of the config [ 890.653032][T16826] netlink: 'syz.3.3128': attribute type 21 has an invalid length. [ 890.675444][T16612] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 890.681664][ T42] usb 6-1: config 53 has no interface number 0 [ 890.696099][T16826] IPv6: NLM_F_CREATE should be specified when creating new route [ 890.717599][ T42] usb 6-1: config 53 interface 101 altsetting 0 has an endpoint descriptor with address 0xC2, changing to 0x82 [ 890.740001][ T42] usb 6-1: config 53 interface 101 altsetting 0 endpoint 0x82 has invalid maxpacket 33307, setting to 1024 [ 890.752816][ T42] usb 6-1: config 53 interface 101 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 890.777969][T16826] netlink: 'syz.3.3128': attribute type 1 has an invalid length. [ 890.788586][T16344] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 890.799500][ T42] usb 6-1: config 53 interface 101 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 890.821088][T16344] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 890.830160][ T42] usb 6-1: config 53 interface 101 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 890.850937][T16344] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 890.866063][T16344] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 890.901847][ T42] usb 6-1: New USB device found, idVendor=0bfd, idProduct=011b, bcdDevice=33.a1 [ 890.916571][ T42] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 890.925391][ T5902] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 890.964238][ T42] usb 6-1: Product: syz [ 890.968491][ T42] usb 6-1: Manufacturer: syz [ 891.013773][ T42] usb 6-1: SerialNumber: syz [ 891.053209][T16833] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 891.121173][ T5902] usb 5-1: Using ep0 maxpacket: 32 [ 891.152496][ T5902] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 891.200041][ T5902] usb 5-1: config 0 has no interface number 0 [ 891.242702][ T5902] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 891.259744][ T5902] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 891.288979][ T5902] usb 5-1: Product: syz [ 891.314499][ T5902] usb 5-1: Manufacturer: syz [ 891.335852][ T5902] usb 5-1: SerialNumber: syz [ 891.371087][ T42] kvaser_usb 6-1:53.101: CMD_MAP_CHANNEL_REQ failed for CAN0 [ 891.388816][ T42] kvaser_usb 6-1:53.101: error -EMSGSIZE: Failed to initialize card [ 891.398310][ T5902] usb 5-1: config 0 descriptor?? [ 891.413636][T12282] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 891.417406][ T42] kvaser_usb 6-1:53.101: probe with driver kvaser_usb failed with error -90 [ 891.469870][T12282] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 891.472510][ T42] usb 6-1: USB disconnect, device number 9 [ 891.492201][ T5917] usb 4-1: USB disconnect, device number 104 [ 891.631161][ T5902] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 891.709743][ T5902] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 891.783182][ T1098] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 891.822258][ T1098] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 891.930724][ T5902] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 891.972093][ T5902] smsc95xx 5-1:0.67: probe with driver smsc95xx failed with error -32 [ 892.028626][T16861] netlink: 'syz.3.3134': attribute type 10 has an invalid length. [ 892.103135][T16861] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 892.132875][T16861] team0: Failed to send options change via netlink (err -105) [ 892.154173][T16861] team0: Port device netdevsim0 added [ 892.192629][T16867] batadv0: entered promiscuous mode [ 892.208315][T16867] macsec1: entered allmulticast mode [ 892.226982][T16867] batadv0: entered allmulticast mode [ 892.257898][T16867] batadv0: left allmulticast mode [ 892.280147][T16867] batadv0: left promiscuous mode [ 892.330183][ T42] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 892.363579][T16872] netlink: 'syz.3.3136': attribute type 1 has an invalid length. [ 892.392068][T16872] netlink: 'syz.3.3136': attribute type 1 has an invalid length. [ 892.433048][T16872] vxlan0: entered promiscuous mode [ 892.516903][ T42] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 892.558205][ T42] usb 6-1: config 0 has no interfaces? [ 892.578486][ T42] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 892.627390][ T42] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 892.660575][ T42] usb 6-1: config 0 descriptor?? [ 892.692070][ T5888] usb 5-1: USB disconnect, device number 14 [ 892.903218][T16865] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 892.912847][T16865] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 892.981190][T16888] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.3138'. [ 893.509395][ T5917] usb 6-1: USB disconnect, device number 10 [ 893.933226][T15811] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 893.951161][T15811] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 893.965111][T15811] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 893.985492][T15811] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 893.994028][T15811] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 894.727125][ T5839] bond0: (slave syz_tun): Releasing backup interface [ 894.790471][ T5839] syz_tun (unregistering): left promiscuous mode [ 895.532751][T12276] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 895.599473][T12276] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 896.055058][T15811] Bluetooth: hci4: command tx timeout [ 896.111698][T12276] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 896.122733][T12276] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 896.209046][T16894] chnl_net:caif_netlink_parms(): no params data found [ 896.806195][T12276] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 896.930323][T16948] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3147'. [ 896.975702][T12276] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 897.128815][T16952] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3148'. [ 897.333858][T12276] team0: Port device netdevsim0 removed [ 897.357627][T12276] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 897.431761][T12276] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 897.714225][T16894] bridge0: port 1(bridge_slave_0) entered blocking state [ 897.724541][T16894] bridge0: port 1(bridge_slave_0) entered disabled state [ 897.872150][T16894] bridge_slave_0: entered allmulticast mode [ 897.930797][T16894] bridge_slave_0: entered promiscuous mode [ 897.959077][T16894] bridge0: port 2(bridge_slave_1) entered blocking state [ 898.026463][T16894] bridge0: port 2(bridge_slave_1) entered disabled state [ 898.052065][T16894] bridge_slave_1: entered allmulticast mode [ 898.082073][T16894] bridge_slave_1: entered promiscuous mode [ 898.132639][T15811] Bluetooth: hci4: command tx timeout [ 898.286517][T16894] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 898.389903][ T10] usb 2-1: new high-speed USB device number 115 using dummy_hcd [ 898.423661][T16894] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 898.592165][ T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 898.649977][ T10] usb 2-1: config 0 has no interfaces? [ 898.673484][ T10] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 898.684386][T16894] team0: Port device team_slave_0 added [ 898.730509][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 898.772090][T16894] team0: Port device team_slave_1 added [ 898.791756][ T10] usb 2-1: config 0 descriptor?? [ 898.935380][T12276] bridge_slave_1: left allmulticast mode [ 898.952195][T12276] bridge_slave_1: left promiscuous mode [ 899.024246][T12276] bridge0: port 2(bridge_slave_1) entered disabled state [ 899.042875][T16964] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 899.056658][T16964] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 899.107084][T16980] netlink: 'syz.5.3153': attribute type 28 has an invalid length. [ 899.141815][T12276] bridge_slave_0: left allmulticast mode [ 899.149495][T16980] netlink: 'syz.5.3153': attribute type 3 has an invalid length. [ 899.186911][T12276] bridge_slave_0: left promiscuous mode [ 899.204065][T16980] netlink: 132 bytes leftover after parsing attributes in process `syz.5.3153'. [ 899.205834][T12276] bridge0: port 1(bridge_slave_0) entered disabled state [ 899.214092][ T10] usb 2-1: USB disconnect, device number 115 [ 899.968171][T12276] erspan0 (unregistering): left allmulticast mode [ 900.045014][T17002] netlink: 'syz.0.3157': attribute type 1 has an invalid length. [ 900.210568][T15811] Bluetooth: hci4: command tx timeout [ 900.257287][T17008] openvswitch: netlink: nsh attribute has 1 unknown bytes. [ 900.434137][T12276] bond4 (unregistering): (slave vxlan1): Releasing active interface [ 900.515516][T12276] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 900.537552][T12276] bridge0 (unregistering): left promiscuous mode [ 900.683622][T12276] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 900.738452][T12276] bond_slave_0: left promiscuous mode [ 900.861050][T12276] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 900.906715][T12276] bond_slave_1: left promiscuous mode [ 900.934032][T12276] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 901.056017][T12276] batadv0: left promiscuous mode [ 901.094532][T12276] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 901.134195][T12276] dummy0: left promiscuous mode [ 901.186225][T12276] bond0 (unregistering): Released all slaves [ 901.225890][T12276] bond1 (unregistering): Released all slaves [ 901.268555][T12276] bond2 (unregistering): Released all slaves [ 901.326408][T12276] bond3 (unregistering): Released all slaves [ 901.376091][T12276] bond4 (unregistering): Released all slaves [ 901.418305][T16894] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 901.471237][T16894] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 901.562723][T16894] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 901.603285][T16993] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 901.611186][T16993] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 901.641421][T16993] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 901.649236][T16993] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 901.763311][T17002] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 901.835842][T12276] tipc: Left network mode [ 901.849510][T16894] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 901.898310][T16894] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 901.969950][T16894] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 902.253063][T17022] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 902.269924][T17022] xt_l2tp: invalid flags combination: 0 [ 902.307641][T15811] Bluetooth: hci4: command tx timeout [ 902.508687][T16894] hsr_slave_0: entered promiscuous mode [ 902.522769][T16894] hsr_slave_1: entered promiscuous mode [ 902.601040][T16894] debugfs: 'hsr0' already exists in 'hsr' [ 902.607073][T16894] Cannot create hsr debugfs directory [ 904.346866][T12276] hsr_slave_0: left promiscuous mode [ 904.372389][T12276] hsr_slave_1: left promiscuous mode [ 904.391020][T12276] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 904.449235][T12276] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 904.549603][T12276] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 904.693881][T12276] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 904.765113][T12276] veth1_macvtap: left promiscuous mode [ 904.800044][T12276] veth0_macvtap: left promiscuous mode [ 904.851161][T12276] veth1_vlan: left allmulticast mode [ 904.910046][T12276] veth1_vlan: left promiscuous mode [ 904.956347][T12276] veth0_vlan: left promiscuous mode [ 905.451132][T17062] netlink: 'syz.1.3166': attribute type 10 has an invalid length. [ 905.889288][T12276] team0 (unregistering): Port device team_slave_1 removed [ 905.944172][T12276] team0 (unregistering): Port device team_slave_0 removed [ 906.289588][T17062] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 906.335980][T17062] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 907.032858][ T5902] usb 4-1: new high-speed USB device number 105 using dummy_hcd [ 907.168247][T12276] IPVS: stop unused estimator thread 0... [ 907.209907][ T5902] usb 4-1: Using ep0 maxpacket: 16 [ 907.282343][ T5902] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 907.304868][ T5902] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 907.329405][ T5902] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 39329, setting to 1024 [ 907.365401][ T5902] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1024 [ 907.399221][ T5902] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 907.419218][ T5902] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 907.428233][ T5902] usb 4-1: SerialNumber: syz [ 907.451896][T17073] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 907.486420][ T5902] cdc_acm 4-1:1.0: skipping garbage [ 907.526081][ T5902] cdc_acm 4-1:1.0: probe with driver cdc_acm failed with error -12 [ 907.570267][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 907.701784][ T5916] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 907.758031][T17073] ip6erspan0: entered allmulticast mode [ 907.792165][T17073] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 907.846389][T17073] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 907.900849][ T5917] usb 4-1: USB disconnect, device number 105 [ 907.911650][ T5916] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 907.946632][ T5916] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 907.987657][ T5916] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 908.035654][ T5916] usb 6-1: config 0 descriptor?? [ 908.080599][ T5916] pwc: Askey VC010 type 2 USB webcam detected. [ 908.180692][T17094] netlink: 104 bytes leftover after parsing attributes in process `syz.0.3173'. [ 908.224045][T16894] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 908.262553][T16894] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 908.332750][T16894] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 908.366642][T16894] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 908.655774][T17108] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3176'. [ 908.690817][ T5916] pwc: recv_control_msg error -32 req 02 val 2700 [ 908.715243][T16894] 8021q: adding VLAN 0 to HW filter on device bond0 [ 908.729840][ T5916] pwc: recv_control_msg error -71 req 02 val 2c00 [ 908.746848][ T5916] pwc: recv_control_msg error -71 req 04 val 1000 [ 908.779652][ T5916] pwc: recv_control_msg error -71 req 04 val 1300 [ 908.801364][T16894] 8021q: adding VLAN 0 to HW filter on device team0 [ 908.808497][ T5916] pwc: recv_control_msg error -71 req 04 val 1400 [ 908.836633][T12284] bridge0: port 1(bridge_slave_0) entered blocking state [ 908.837162][ T5916] pwc: recv_control_msg error -71 req 02 val 2000 [ 908.844033][T12284] bridge0: port 1(bridge_slave_0) entered forwarding state [ 908.857139][T17106] input: syz0 as /devices/virtual/input/input46 [ 908.878027][ T5916] pwc: recv_control_msg error -71 req 02 val 2100 [ 908.894522][ T5916] pwc: recv_control_msg error -71 req 04 val 1500 [ 908.916176][ T1098] bridge0: port 2(bridge_slave_1) entered blocking state [ 908.923563][ T1098] bridge0: port 2(bridge_slave_1) entered forwarding state [ 908.928551][ T5916] pwc: recv_control_msg error -71 req 02 val 2500 [ 908.963981][ T5916] pwc: recv_control_msg error -71 req 02 val 2400 [ 908.991173][ T5916] pwc: recv_control_msg error -71 req 02 val 2600 [ 909.044821][ T5916] pwc: recv_control_msg error -71 req 02 val 2900 [ 909.058544][T16011] udevd[16011]: setting owner of /dev/input/event4 to uid=0, gid=104 failed: No such file or directory [ 909.102430][ T5916] pwc: recv_control_msg error -71 req 02 val 2800 [ 909.133192][ T5916] pwc: recv_control_msg error -71 req 04 val 1100 [ 909.151202][ T5916] pwc: recv_control_msg error -71 req 04 val 1200 [ 909.217145][ T5916] pwc: Registered as video103. [ 909.268443][ T5916] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input47 [ 909.362959][ T5916] usb 6-1: USB disconnect, device number 11 [ 909.461391][T16894] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 909.704427][T16894] veth0_vlan: entered promiscuous mode [ 909.766325][T16894] veth1_vlan: entered promiscuous mode [ 909.956183][T17137] ipip0: entered promiscuous mode [ 909.961551][T17137] ipip0: entered allmulticast mode [ 910.090802][T17139] netlink: 104 bytes leftover after parsing attributes in process `syz.5.3183'. [ 910.318278][T16894] veth0_macvtap: entered promiscuous mode [ 910.388413][T16894] veth1_macvtap: entered promiscuous mode [ 910.657504][T16894] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 910.717893][T16894] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 910.783542][T12284] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 910.836942][T12284] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 910.923342][T12284] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 910.944763][T12284] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 911.126587][T17155] openvswitch: netlink: nsh attribute has 1 unknown bytes. [ 911.856711][T12266] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 911.901385][T12266] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 912.710055][T12282] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 912.764055][T12282] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 913.938035][T17190] netlink: 'syz.4.3193': attribute type 12 has an invalid length. [ 913.990058][T17192] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3191'. [ 914.569794][ T5916] usb 6-1: new low-speed USB device number 12 using dummy_hcd [ 914.911971][ T5916] usb 6-1: Invalid ep0 maxpacket: 64 [ 915.034441][T17212] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3197'. [ 915.054081][ T5916] usb 6-1: new low-speed USB device number 13 using dummy_hcd [ 915.219954][ T5916] usb 6-1: Invalid ep0 maxpacket: 64 [ 915.225753][ T5916] usb usb6-port1: attempt power cycle [ 915.605096][ T5916] usb 6-1: new low-speed USB device number 14 using dummy_hcd [ 915.688884][ T5916] usb 6-1: Invalid ep0 maxpacket: 64 [ 915.850785][ T5916] usb 6-1: new low-speed USB device number 15 using dummy_hcd [ 915.911740][ T5916] usb 6-1: Invalid ep0 maxpacket: 64 [ 915.929898][ T5916] usb usb6-port1: unable to enumerate USB device [ 916.319938][ T5916] usb 4-1: new high-speed USB device number 106 using dummy_hcd [ 916.491955][ T5916] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 916.514239][ T5916] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 916.540374][ C1] bridge0: port 1(bridge_slave_0) entered learning state [ 916.547777][ C1] bridge0: port 2(bridge_slave_1) entered learning state [ 916.555579][ T5916] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 916.609558][ T5916] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 916.629762][ T5916] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 916.660910][ T5916] usb 4-1: config 0 descriptor?? [ 916.907350][ T5916] usbhid 4-1:0.0: can't add hid device: -71 [ 916.953439][ T5916] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 916.988799][ T5916] usb 4-1: USB disconnect, device number 106 [ 917.116400][T17235] tun0: tun_chr_ioctl cmd 1074025675 [ 917.160010][T17235] tun0: persist disabled [ 917.207756][T17237] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 917.270464][T11044] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 917.409911][T17242] netlink: 56 bytes leftover after parsing attributes in process `syz.5.3205'. [ 917.470987][T12276] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 917.500654][ T5895] usb 4-1: new high-speed USB device number 107 using dummy_hcd [ 917.718437][ T5895] usb 4-1: Using ep0 maxpacket: 16 [ 917.733661][ T5895] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 917.794822][ T5895] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 917.845955][ T5895] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 917.975652][ T10] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 918.123646][ T5895] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 918.163474][ T5895] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 918.200096][ T5895] usb 4-1: Product: syz [ 918.212042][ T5895] usb 4-1: Manufacturer: syz [ 918.259922][ T5895] usb 4-1: SerialNumber: syz [ 918.531302][T12276] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 918.539597][T12276] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 918.615456][ T5916] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 918.699948][ T5895] usb 4-1: 0:2 : does not exist [ 919.057231][T17252] syzkaller1: entered promiscuous mode [ 919.138380][T17252] syzkaller1: entered allmulticast mode [ 919.693015][T17263] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3210'. [ 920.784490][ T5895] usb 4-1: USB disconnect, device number 107 [ 921.247080][T17273] FAULT_INJECTION: forcing a failure. [ 921.247080][T17273] name failslab, interval 1, probability 0, space 0, times 0 [ 921.260306][T17273] CPU: 0 UID: 0 PID: 17273 Comm: syz.1.3211 Tainted: G L syzkaller #0 PREEMPT(full) [ 921.260328][T17273] Tainted: [L]=SOFTLOCKUP [ 921.260333][T17273] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 921.260340][T17273] Call Trace: [ 921.260347][T17273] [ 921.260352][T17273] dump_stack_lvl+0xe8/0x150 [ 921.260376][T17273] should_fail_ex+0x412/0x560 [ 921.260397][T17273] should_failslab+0xa8/0x100 [ 921.260414][T17273] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 921.260439][T17273] ? __alloc_skb+0x186/0x7d0 [ 921.260454][T17273] ? __alloc_skb+0x1d0/0x7d0 [ 921.260465][T17273] ? __local_bh_enable_ip+0xd0/0x130 [ 921.260482][T17273] __alloc_skb+0x1d0/0x7d0 [ 921.260495][T17273] ? netlink_ack_tlv_len+0x6c/0x210 [ 921.260508][T17273] netlink_ack+0x146/0xa50 [ 921.260528][T17273] netlink_rcv_skb+0x2b6/0x4b0 [ 921.260541][T17273] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 921.260559][T17273] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 921.260577][T17273] ? bpf_lsm_capable+0x9/0x20 [ 921.260593][T17273] ? security_capable+0x7e/0x2c0 [ 921.260614][T17273] nfnetlink_rcv+0x2c0/0x27b0 [ 921.260636][T17273] ? __local_bh_enable_ip+0xd0/0x130 [ 921.260650][T17273] ? lockdep_hardirqs_on+0x7a/0x110 [ 921.260665][T17273] ? __dev_queue_xmit+0x277/0x3890 [ 921.260680][T17273] ? __local_bh_enable_ip+0xd0/0x130 [ 921.260700][T17273] ? __dev_queue_xmit+0x277/0x3890 [ 921.260714][T17273] ? __dev_queue_xmit+0x1e78/0x3890 [ 921.260729][T17273] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 921.260745][T17273] ? __dev_queue_xmit+0x277/0x3890 [ 921.260763][T17273] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 921.260783][T17273] ? __pfx___dev_queue_xmit+0x10/0x10 [ 921.260802][T17273] ? ref_tracker_free+0x693/0x840 [ 921.260813][T17273] ? __copy_skb_header+0xa3/0x4a0 [ 921.260834][T17273] ? __pfx_ref_tracker_free+0x10/0x10 [ 921.260844][T17273] ? __skb_clone+0x63/0x7a0 [ 921.260861][T17273] ? __skb_clone+0x483/0x7a0 [ 921.260879][T17273] ? skb_clone+0x246/0x3a0 [ 921.260895][T17273] ? __netlink_deliver_tap+0x807/0x850 [ 921.260907][T17273] ? netlink_deliver_tap+0x2e/0x1b0 [ 921.260921][T17273] ? netlink_deliver_tap+0x2e/0x1b0 [ 921.260937][T17273] netlink_unicast+0x80f/0x9b0 [ 921.260959][T17273] ? __pfx_netlink_unicast+0x10/0x10 [ 921.260977][T17273] ? netlink_sendmsg+0x650/0xb40 [ 921.260988][T17273] ? skb_put+0x11b/0x210 [ 921.261003][T17273] netlink_sendmsg+0x813/0xb40 [ 921.261020][T17273] ? __pfx_netlink_sendmsg+0x10/0x10 [ 921.261034][T17273] ? aa_sock_msg_perm+0xf1/0x1b0 [ 921.261052][T17273] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 921.261071][T17273] ____sys_sendmsg+0x972/0x9f0 [ 921.261091][T17273] ? __pfx_____sys_sendmsg+0x10/0x10 [ 921.261110][T17273] ? import_iovec+0x73/0xa0 [ 921.261126][T17273] ___sys_sendmsg+0x2a5/0x360 [ 921.261143][T17273] ? __pfx____sys_sendmsg+0x10/0x10 [ 921.261176][T17273] ? __fget_files+0x2a/0x420 [ 921.261186][T17273] ? __fget_files+0x3a0/0x420 [ 921.261202][T17273] __x64_sys_sendmsg+0x1bd/0x2a0 [ 921.261219][T17273] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 921.261239][T17273] ? __pfx_ksys_write+0x10/0x10 [ 921.261258][T17273] do_syscall_64+0x14d/0xf80 [ 921.261272][T17273] ? trace_irq_disable+0x3b/0x150 [ 921.261282][T17273] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 921.261293][T17273] ? clear_bhb_loop+0x40/0x90 [ 921.261307][T17273] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 921.261319][T17273] RIP: 0033:0x7fa17319c819 [ 921.261331][T17273] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 921.261341][T17273] RSP: 002b:00007fa173fe3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 921.261355][T17273] RAX: ffffffffffffffda RBX: 00007fa173416090 RCX: 00007fa17319c819 [ 921.261364][T17273] RDX: 0000000000044000 RSI: 0000200000000240 RDI: 0000000000000006 [ 921.261371][T17273] RBP: 00007fa173fe3090 R08: 0000000000000000 R09: 0000000000000000 [ 921.261379][T17273] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 921.261386][T17273] R13: 00007fa173416128 R14: 00007fa173416090 R15: 00007fa17353fa48 [ 921.261408][T17273] [ 921.996328][T17276] binder: 17274:17276 ioctl 8002f515 2000000001c0 returned -22 [ 922.636565][T17291] syzkaller1: entered promiscuous mode [ 922.690042][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 922.698195][T17291] syzkaller1: entered allmulticast mode [ 923.049982][ T10] usb 5-1: new full-speed USB device number 15 using dummy_hcd [ 923.335178][ T10] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 923.344353][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 923.352786][ T10] usb 5-1: Product: syz [ 923.357070][ T10] usb 5-1: Manufacturer: syz [ 923.373579][ T10] usb 5-1: SerialNumber: syz [ 923.422984][ T10] usb 5-1: config 0 descriptor?? [ 923.660138][ T10] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 923.819475][T17302] ipip0: entered promiscuous mode [ 923.824733][T17302] ipip0: entered allmulticast mode [ 924.638766][T17307] syzkaller1: entered promiscuous mode [ 924.644536][T17307] syzkaller1: entered allmulticast mode [ 925.735560][ T10] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 926.022986][T17335] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3228'. [ 926.485980][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805c1cd800: rx timeout, send abort [ 926.494782][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88805c1cd800: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 926.729217][T17348] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3230'. [ 926.740832][T17348] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3230'. [ 926.824719][T17349] fuse: Unknown parameter 'J<@e/\(5_'' [ 926.834755][T17349] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3231'. [ 926.955207][ T5916] usb 5-1: USB disconnect, device number 15 [ 927.490020][T16847] usb 4-1: new high-speed USB device number 108 using dummy_hcd [ 927.570446][ T5916] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 927.650469][T16847] usb 4-1: Using ep0 maxpacket: 16 [ 927.678673][T16847] usb 4-1: config 0 has no interfaces? [ 927.693547][T16847] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 927.709836][T16847] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 927.719908][T16847] usb 4-1: Manufacturer: syz [ 927.753309][ T5916] usb 5-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 927.763129][ T5916] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 927.784420][T16847] usb 4-1: config 0 descriptor?? [ 927.793860][ T5916] usb 5-1: config 0 descriptor?? [ 929.700082][T17365] openvswitch: netlink: nsh attribute has 1 unknown bytes. [ 929.751163][T17367] netlink: 104 bytes leftover after parsing attributes in process `syz.0.3236'. [ 929.766273][ T5916] usb 5-1: Cannot set autoneg [ 929.771603][ T5916] MOSCHIP usb-ethernet driver 5-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -61 [ 929.907292][T17368] syzkaller1: entered promiscuous mode [ 929.926973][T17368] syzkaller1: entered allmulticast mode [ 930.364939][T16847] usb 4-1: USB disconnect, device number 108 [ 930.609980][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 931.069451][T16847] usb 5-1: USB disconnect, device number 16 [ 931.352813][T17392] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 931.405938][T17392] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 931.414621][ T5902] usb 4-1: new high-speed USB device number 109 using dummy_hcd [ 931.590402][T16847] usb 5-1: new low-speed USB device number 17 using dummy_hcd [ 931.624762][ T5902] usb 4-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 931.641773][ T29] audit: type=1800 audit(1775266894.755:831): pid=17384 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.3241" name="bus" dev="ramfs" ino=76812 res=0 errno=0 [ 931.669306][ T5902] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 931.698598][T17394] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 931.708136][ T5902] usb 4-1: Product: syz [ 931.722791][ T5902] usb 4-1: Manufacturer: syz [ 931.739755][ T5902] usb 4-1: SerialNumber: syz [ 931.772826][ T5902] usb 4-1: config 0 descriptor?? [ 931.796413][T16847] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 931.806626][ T5902] ch341 4-1:0.0: ch341-uart converter detected [ 931.819769][T16847] usb 5-1: config 0 has no interface number 0 [ 931.840541][T16847] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 931.882666][T16847] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 931.910477][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.918765][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.932582][T16847] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 931.944875][T16847] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 931.956840][T16847] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 932.036188][ T5902] usb 4-1: failed to receive control message: -121 [ 932.053397][T17398] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3245'. [ 932.067128][T16847] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 932.089860][ T5902] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -121 [ 932.124486][T16847] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 932.167892][T16847] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 932.199418][T16847] usb 5-1: config 0 descriptor?? [ 932.234627][T17391] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 932.257421][T17386] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3242'. [ 932.273026][ T5902] usb 4-1: USB disconnect, device number 109 [ 932.294976][ T5902] ch341 4-1:0.0: device disconnected [ 932.319864][T16847] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 932.388431][T17402] syzkaller0: entered promiscuous mode [ 932.396313][T17402] syzkaller0: entered allmulticast mode [ 933.044510][T11044] usb 5-1: USB disconnect, device number 17 [ 933.054258][T11044] ldusb 5-1:0.55: LD USB Device #0 now disconnected [ 933.385895][T17419] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 933.392512][T17419] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 933.515905][T17419] vhci_hcd vhci_hcd.0: Device attached [ 933.546798][T17420] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(6) [ 933.553564][T17420] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 933.627331][T17420] vhci_hcd vhci_hcd.0: Device attached [ 933.699946][ T10] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 933.759439][T17422] vhci_hcd: connection closed [ 933.759757][T16344] vhci_hcd vhci_hcd.4: stop threads [ 933.769967][ T10] usb 41-1: new full-speed USB device number 3 using vhci_hcd [ 933.790168][T17421] vhci_hcd: connection reset by peer [ 933.798483][T16344] vhci_hcd vhci_hcd.4: release socket [ 933.833208][T16344] vhci_hcd vhci_hcd.4: disconnect device [ 933.869774][T16344] vhci_hcd vhci_hcd.4: stop threads [ 933.900019][T16344] vhci_hcd vhci_hcd.4: release socket [ 933.930004][T16344] vhci_hcd vhci_hcd.4: disconnect device [ 934.662320][ T29] audit: type=1326 audit(1775266897.675:832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17441 comm="syz.3.3259" exe="/root/syz-executor" sig=9 arch=c000003e syscall=39 compat=0 ip=0x7fbc99796597 code=0x0 [ 934.839964][T11044] usb 4-1: new high-speed USB device number 110 using dummy_hcd [ 937.403104][T17466] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3266'. [ 938.363225][T17487] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3271'. [ 938.577434][T17491] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3273'. [ 938.829544][T16847] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 938.919929][ T10] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 939.014844][T16847] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 939.029344][T16847] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 939.066582][T16847] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 939.094649][ T5831] Bluetooth: hci5: command 0x0406 tx timeout [ 939.146667][T16847] usb 6-1: New USB device found, idVendor=0461, idProduct=4e72, bcdDevice= 0.00 [ 939.167942][T16847] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 939.191910][T16847] usb 6-1: config 0 descriptor?? [ 939.220059][ T5917] usb 2-1: new high-speed USB device number 116 using dummy_hcd [ 939.391867][ T5917] usb 2-1: device descriptor read/64, error -71 [ 939.472679][T11044] usb 4-1: new high-speed USB device number 111 using dummy_hcd [ 939.611094][T16847] hid-rmi 0003:0461:4E72.0021: unknown main item tag 0x2 [ 939.620593][T16847] hid-rmi 0003:0461:4E72.0021: unknown main item tag 0x0 [ 939.627698][T16847] hid-rmi 0003:0461:4E72.0021: unbalanced collection at end of report description [ 939.660064][T11044] usb 4-1: Using ep0 maxpacket: 16 [ 939.662431][ T5917] usb 2-1: new high-speed USB device number 117 using dummy_hcd [ 939.688670][T11044] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00 [ 939.717098][T11044] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 939.718968][T16847] hid-rmi 0003:0461:4E72.0021: parse failed [ 939.755123][T11044] usb 4-1: Product: syz [ 939.770968][T11044] usb 4-1: Manufacturer: syz [ 939.771839][T16847] hid-rmi 0003:0461:4E72.0021: probe with driver hid-rmi failed with error -22 [ 939.775667][T11044] usb 4-1: SerialNumber: syz [ 939.801037][T11044] usb 4-1: config 0 descriptor?? [ 939.849990][ T5917] usb 2-1: device descriptor read/64, error -71 [ 939.864018][T11044] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 939.900438][T11044] usb 4-1: Detected FT-X [ 939.928256][T16847] usb 6-1: USB disconnect, device number 16 [ 939.960077][ T5917] usb usb2-port1: attempt power cycle [ 940.087763][T17498] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 940.114424][T17507] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 940.148901][T17498] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 940.176935][T17507] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 940.310649][ T5917] usb 2-1: new high-speed USB device number 118 using dummy_hcd [ 940.339416][T17497] veth1_vlan: left promiscuous mode [ 940.373605][ T5917] usb 2-1: device descriptor read/8, error -71 [ 940.386769][T11044] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 940.427696][T11044] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 940.472441][T11044] ftdi_sio 4-1:0.0: GPIO initialisation failed: -71 [ 940.501241][T11044] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 940.550310][T11044] usb 4-1: USB disconnect, device number 111 [ 940.570214][T17512] netlink: 56 bytes leftover after parsing attributes in process `syz.5.3279'. [ 940.582459][T11044] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 940.602711][T11044] ftdi_sio 4-1:0.0: device disconnected [ 940.640182][ T5917] usb 2-1: new high-speed USB device number 119 using dummy_hcd [ 940.672670][ T5917] usb 2-1: device descriptor read/8, error -71 [ 940.792592][ T5917] usb usb2-port1: unable to enumerate USB device [ 941.431400][T17523] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3284'. [ 941.491014][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 941.592881][T17526] netlink: 96 bytes leftover after parsing attributes in process `syz.5.3286'. [ 941.839572][ T29] audit: type=1326 audit(1775266904.945:833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17499 comm="syz.0.3276" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb38d19c819 code=0x0 [ 942.271993][T17537] netlink: 'syz.5.3289': attribute type 3 has an invalid length. [ 942.850281][T16847] usb 2-1: new high-speed USB device number 120 using dummy_hcd [ 943.039956][T16847] usb 2-1: Using ep0 maxpacket: 16 [ 943.150982][T16847] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 943.175577][T16847] usb 2-1: config 1 has an invalid descriptor of length 105, skipping remainder of the config [ 943.468790][T16847] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 943.550597][T16847] usb 2-1: config 1 has no interface number 1 [ 943.556782][T16847] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 943.627446][T16847] usb 2-1: config 1 interface 2 altsetting 1 has an endpoint descriptor with address 0x2E, changing to 0xE [ 943.660703][T17547] trusted_key: encrypted_key: master key parameter 'trustedTyz' is invalid [ 943.734188][T16847] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0xE has an invalid bInterval 101, changing to 7 [ 943.819930][T16847] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0xE has invalid maxpacket 26214, setting to 1024 [ 943.839016][T16847] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 943.855136][T16847] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 943.973461][ T5917] usb 4-1: new high-speed USB device number 112 using dummy_hcd [ 944.069510][T16847] usb 2-1: Product: syz [ 944.081428][T16847] usb 2-1: Manufacturer: syz [ 944.118840][T16847] usb 2-1: SerialNumber: syz [ 944.196571][ T5917] usb 4-1: Using ep0 maxpacket: 32 [ 944.234024][ T5917] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 944.244207][ T5917] usb 4-1: config 0 has no interface number 0 [ 944.258236][ T5917] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 944.287932][ T5917] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 944.307486][ T5917] usb 4-1: Product: syz [ 944.317181][ T5917] usb 4-1: Manufacturer: syz [ 944.323339][ T5917] usb 4-1: SerialNumber: syz [ 944.367413][ T5917] usb 4-1: config 0 descriptor?? [ 944.604205][T17562] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3297'. [ 944.884473][ T5917] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 944.915568][ T5917] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 945.197090][ T5917] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 945.238320][ T5917] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -71 [ 945.276932][ T5917] usb 4-1: USB disconnect, device number 112 [ 945.588934][T16847] usb 2-1: 2:1 : no or invalid class specific endpoint descriptor [ 945.616441][T16847] usb 2-1: found format II with max.bitrate = 0, frame size=0 [ 945.634697][T16847] usb 2-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 945.826817][T17578] netlink: 'syz.1.3304': attribute type 2 has an invalid length. [ 945.875991][T16847] usb 2-1: USB disconnect, device number 120 [ 945.893059][T17578] : entered promiscuous mode [ 945.969874][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 946.166620][T17586] tipc: Started in network mode [ 946.192536][T17586] tipc: Node identity b64bb37986c2, cluster identity 4711 [ 946.386593][T17586] tipc: Enabled bearer , priority 0 [ 946.421343][T17588] syzkaller0: entered promiscuous mode [ 946.426991][T17588] syzkaller0: entered allmulticast mode [ 946.517516][T17588] syzkaller0: mtu less than device minimum [ 946.552195][ T29] audit: type=1326 audit(1775266909.665:834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17579 comm="syz.3.3305" exe="/root/syz-executor" sig=9 arch=c000003e syscall=39 compat=0 ip=0x7fbc99796597 code=0x0 [ 946.575692][T16847] usb 4-1: new high-speed USB device number 113 using dummy_hcd [ 946.619837][ C1] bridge0: port 2(bridge_slave_1) entered forwarding state [ 946.627146][ C1] bridge0: topology change detected, propagating [ 946.633771][ C1] bridge0: port 1(bridge_slave_0) entered forwarding state [ 946.641239][ C1] bridge0: topology change detected, propagating [ 946.672650][T17584] tipc: Resetting bearer [ 946.713217][T17584] tipc: Disabling bearer [ 947.782917][T17615] cifs: Unknown parameter ' [ 948.160483][ T5902] usb 2-1: new high-speed USB device number 121 using dummy_hcd [ 949.554208][ T5902] usb 2-1: Using ep0 maxpacket: 16 [ 949.567611][ T5902] usb 2-1: config 1 interface 0 altsetting 2 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 949.588959][ T5902] usb 2-1: config 1 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 949.603670][ T5902] usb 2-1: config 1 interface 0 has no altsetting 0 [ 949.623736][ T5902] usb 2-1: New USB device found, idVendor=05c6, idProduct=920d, bcdDevice=e5.23 [ 949.634136][ T5902] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 949.646468][ T5902] usb 2-1: Product: syz [ 949.670344][ T5902] usb 2-1: Manufacturer: syz [ 949.675082][ T5902] usb 2-1: SerialNumber: syz [ 951.550884][ T5902] usb 2-1: USB disconnect, device number 121 [ 952.279397][T17645] FAULT_INJECTION: forcing a failure. [ 952.279397][T17645] name failslab, interval 1, probability 0, space 0, times 0 [ 952.359862][T17645] CPU: 1 UID: 0 PID: 17645 Comm: syz.0.3323 Tainted: G L syzkaller #0 PREEMPT(full) [ 952.359898][T17645] Tainted: [L]=SOFTLOCKUP [ 952.359905][T17645] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 952.359916][T17645] Call Trace: [ 952.359925][T17645] [ 952.359934][T17645] dump_stack_lvl+0xe8/0x150 [ 952.359968][T17645] should_fail_ex+0x412/0x560 [ 952.360005][T17645] should_failslab+0xa8/0x100 [ 952.360032][T17645] __kmalloc_cache_noprof+0x88/0x660 [ 952.360055][T17645] ? ovs_ct_limit_cmd_set+0x2f7/0xb00 [ 952.360081][T17645] ? __kmalloc_cache_noprof+0x15b/0x660 [ 952.360108][T17645] ovs_ct_limit_cmd_set+0x2f7/0xb00 [ 952.360153][T17645] genl_family_rcv_msg_doit+0x22a/0x330 [ 952.360187][T17645] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 952.360226][T17645] ? bpf_lsm_capable+0x9/0x20 [ 952.360253][T17645] ? security_capable+0x7e/0x2c0 [ 952.360289][T17645] genl_rcv_msg+0x61c/0x7a0 [ 952.360331][T17645] ? __pfx_genl_rcv_msg+0x10/0x10 [ 952.360356][T17645] ? __pfx_ovs_ct_limit_cmd_set+0x10/0x10 [ 952.360383][T17645] ? __lock_acquire+0x6b5/0x2cf0 [ 952.360423][T17645] netlink_rcv_skb+0x232/0x4b0 [ 952.360445][T17645] ? __pfx_genl_rcv_msg+0x10/0x10 [ 952.360472][T17645] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 952.360513][T17645] ? down_read+0x272/0x2e0 [ 952.360538][T17645] ? genl_rcv+0xd/0x40 [ 952.360564][T17645] genl_rcv+0x28/0x40 [ 952.360585][T17645] netlink_unicast+0x80f/0x9b0 [ 952.360624][T17645] ? __pfx_netlink_unicast+0x10/0x10 [ 952.360655][T17645] ? netlink_sendmsg+0x650/0xb40 [ 952.360672][T17645] ? skb_put+0x11b/0x210 [ 952.360699][T17645] netlink_sendmsg+0x813/0xb40 [ 952.360731][T17645] ? __pfx_netlink_sendmsg+0x10/0x10 [ 952.360756][T17645] ? aa_sock_msg_perm+0xf1/0x1b0 [ 952.360789][T17645] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 952.360815][T17645] ____sys_sendmsg+0x972/0x9f0 [ 952.360851][T17645] ? __pfx_____sys_sendmsg+0x10/0x10 [ 952.360886][T17645] ? import_iovec+0x73/0xa0 [ 952.360914][T17645] ___sys_sendmsg+0x2a5/0x360 [ 952.360945][T17645] ? __pfx____sys_sendmsg+0x10/0x10 [ 952.361008][T17645] ? __fget_files+0x2a/0x420 [ 952.361027][T17645] ? __fget_files+0x3a0/0x420 [ 952.361055][T17645] __x64_sys_sendmsg+0x1bd/0x2a0 [ 952.361084][T17645] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 952.361120][T17645] ? __pfx_ksys_write+0x10/0x10 [ 952.361156][T17645] do_syscall_64+0x14d/0xf80 [ 952.361180][T17645] ? trace_irq_disable+0x3b/0x150 [ 952.361197][T17645] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 952.361217][T17645] ? clear_bhb_loop+0x40/0x90 [ 952.361241][T17645] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 952.361261][T17645] RIP: 0033:0x7fb38d19c819 [ 952.361281][T17645] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 952.361296][T17645] RSP: 002b:00007fb38e0b2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 952.361327][T17645] RAX: ffffffffffffffda RBX: 00007fb38d415fa0 RCX: 00007fb38d19c819 [ 952.361341][T17645] RDX: 000000000000c000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 952.361354][T17645] RBP: 00007fb38e0b2090 R08: 0000000000000000 R09: 0000000000000000 [ 952.361367][T17645] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 952.361378][T17645] R13: 00007fb38d416038 R14: 00007fb38d415fa0 R15: 00007fb38d53fa48 [ 952.361412][T17645] [ 953.257460][T17660] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3329'. [ 953.317703][T17660] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 953.334631][T17660] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 953.460404][T17662] netlink: 'syz.3.3330': attribute type 1 has an invalid length. [ 953.509749][T17662] netlink: 9 bytes leftover after parsing attributes in process `syz.3.3330'. [ 953.622625][ T5916] usb 2-1: new high-speed USB device number 122 using dummy_hcd [ 953.811312][ T5916] usb 2-1: Using ep0 maxpacket: 32 [ 953.819568][ T5916] usb 2-1: unable to get BOS descriptor or descriptor too short [ 953.837284][ T5916] usb 2-1: config 1 has an invalid interface number: 255 but max is 2 [ 953.870530][ T5916] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 953.915367][ T5916] usb 2-1: config 1 has no interface number 2 [ 953.937522][ T5916] usb 2-1: config 1 interface 255 has no altsetting 0 [ 953.979983][ T5916] usb 2-1: config 1 interface 1 has no altsetting 0 [ 954.005641][ T5916] usb 2-1: New USB device found, idVendor=0582, idProduct=0009, bcdDevice= 0.40 [ 954.021564][ T5916] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 954.060873][ T5916] usb 2-1: Product: syz [ 954.195687][ T5916] usb 2-1: Manufacturer: syz [ 954.201149][ T5916] usb 2-1: SerialNumber: syz [ 954.219162][T17677] kAFS: unable to lookup cell '' [ 954.329851][ T5902] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 954.514546][ T5902] usb 6-1: Using ep0 maxpacket: 16 [ 954.531634][ T5902] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 954.568133][ T5902] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 954.591481][ T5902] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 954.631258][ T5902] usb 6-1: Product: syz [ 954.714199][T17684] syzkaller1: entered promiscuous mode [ 954.728088][T17684] syzkaller1: entered allmulticast mode [ 954.904717][ T5902] usb 6-1: Manufacturer: syz [ 954.909536][ T5902] usb 6-1: SerialNumber: syz [ 954.946696][ T5902] usb 6-1: config 0 descriptor?? [ 954.963639][ T5902] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 954.974786][ T5902] em28xx 6-1:0.0: DVB interface 0 found: bulk [ 955.010184][T15811] Bluetooth: hci6: command 0x0406 tx timeout [ 955.562034][ T5902] em28xx 6-1:0.0: chip ID is em2750 [ 955.762282][T17674] netlink: 224 bytes leftover after parsing attributes in process `syz.5.3336'. [ 955.844461][T17700] ipip0: entered promiscuous mode [ 955.849766][T17700] ipip0: entered allmulticast mode [ 955.899545][ T29] audit: type=1326 audit(1775266918.975:835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17693 comm="syz.4.3342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1ba79c819 code=0x7ffc0000 [ 955.989198][ T29] audit: type=1326 audit(1775266918.975:836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17693 comm="syz.4.3342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=97 compat=0 ip=0x7fc1ba79c819 code=0x7ffc0000 [ 956.032893][ T5902] em28xx 6-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 956.051208][ T5902] em28xx 6-1:0.0: board has no eeprom [ 956.107368][ T29] audit: type=1326 audit(1775266918.975:837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17693 comm="syz.4.3342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1ba79c819 code=0x7ffc0000 [ 956.146396][ T5902] em28xx 6-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 956.175440][ T5902] em28xx 6-1:0.0: dvb set to bulk mode. [ 956.196502][T16847] em28xx 6-1:0.0: Binding DVB extension [ 956.307150][ T5902] usb 6-1: USB disconnect, device number 17 [ 956.321419][ T29] audit: type=1326 audit(1775266918.975:838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17693 comm="syz.4.3342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1ba79c819 code=0x7ffc0000 [ 956.359522][ T5902] em28xx 6-1:0.0: Disconnecting em28xx [ 956.439484][T16847] em28xx 6-1:0.0: Registering input extension [ 956.465900][ T5916] usb 2-1: USB disconnect, device number 122 [ 956.481868][ T5902] em28xx 6-1:0.0: Closing input extension [ 956.720945][ T5902] em28xx 6-1:0.0: Freeing device [ 957.205648][T17718] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3349'. [ 957.256335][T17718] erspan0: entered promiscuous mode [ 957.351610][T17719] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3349'. [ 957.370928][T17718] macvtap1: entered promiscuous mode [ 957.377029][T17718] macvtap1: entered allmulticast mode [ 957.470487][T17718] erspan0: entered allmulticast mode [ 957.622060][T17719] erspan0: left allmulticast mode [ 957.627964][T17719] erspan0: left promiscuous mode [ 958.828489][T17740] team0: Device gtp0 is of different type [ 960.022381][ T5916] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 960.050111][ T30] INFO: task syz.2.2860:15655 blocked for more than 143 seconds. [ 960.069972][ T30] Tainted: G L syzkaller #0 [ 960.103047][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 960.137051][ T30] task:syz.2.2860 state:D stack:24960 pid:15655 tgid:15655 ppid:5840 task_flags:0x400040 flags:0x00080002 [ 960.188138][ T30] Call Trace: [ 960.204331][ T30] [ 960.212359][ T5916] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 960.225856][ T5916] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 960.237216][ T30] __schedule+0x15dd/0x52d0 [ 960.244462][ T30] ? stack_trace_save+0xa9/0x100 [ 960.251843][ T5916] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 960.318300][ T30] ? __pfx___schedule+0x10/0x10 [ 960.343900][ T30] ? schedule+0x90/0x360 [ 960.511236][ T5916] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 960.524871][ T30] schedule+0x164/0x360 [ 960.784495][ T30] schedule_preempt_disabled+0x13/0x30 [ 960.798630][ T30] __mutex_lock+0x7fe/0x1300 [ 961.202990][ T5916] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 961.212632][ T30] ? __mutex_lock+0x5ac/0x1300 [ 961.218493][ T30] ? usbdev_release+0x7e/0x760 [ 961.223609][ T5916] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 961.231958][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 961.237301][ T30] ? __fsnotify_parent+0x267/0x620 [ 961.256008][ T30] ? __pfx___fsnotify_parent+0x10/0x10 [ 961.263617][ T5916] usb 6-1: config 0 descriptor?? [ 961.288691][ T30] ? __pfx_usbdev_release+0x10/0x10 [ 961.308835][ T30] usbdev_release+0x7e/0x760 [ 961.330765][ T30] ? __pfx_usbdev_release+0x10/0x10 [ 961.348536][ T30] __fput+0x44f/0xa70 [ 961.365026][ T30] task_work_run+0x1d9/0x270 [ 961.390206][ T30] ? __pfx_task_work_run+0x10/0x10 [ 961.418973][ T30] exit_to_user_mode_loop+0xed/0x480 [ 961.526858][ T30] ? rcu_is_watching+0x15/0xb0 [ 961.532485][ T30] do_syscall_64+0x32d/0xf80 [ 961.537986][ T30] ? trace_irq_disable+0x3b/0x150 [ 961.545545][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 961.554294][ T30] ? clear_bhb_loop+0x40/0x90 [ 961.560669][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 961.567559][ T30] RIP: 0033:0x7fe54739c819 [ 961.580339][ T30] RSP: 002b:00007fe54773fba8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 961.589258][ T30] RAX: 0000000000000000 RBX: 00007fe547617da0 RCX: 00007fe54739c819 [ 961.599604][ T30] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 961.608313][ T30] RBP: 00007fe547617da0 R08: 0000000000000006 R09: 0000000000000000 [ 961.618163][ T30] R10: 00007fe547617cb0 R11: 0000000000000246 R12: 00000000000c2fb6 [ 961.630928][ T30] R13: 00007fe54761618c R14: 00000000000c2d89 R15: 00007fe547616180 [ 961.644721][ T30] [ 961.703750][ T30] [ 961.703750][ T30] Showing all locks held in the system: [ 961.735302][ T5916] plantronics 0003:047F:FFFF.0022: ignoring exceeding usage max [ 961.769830][ T30] 6 locks held by kworker/0:0/9: [ 961.779567][ T5916] plantronics 0003:047F:FFFF.0022: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 961.797585][ T30] 1 lock held by khungtaskd/30: [ 961.843422][ T30] #0: ffffffff8e75e5e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 961.859050][ T30] 2 locks held by getty/5584: [ 961.866342][ T30] #0: ffff8880327050a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 961.883759][ T30] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13c0 [ 961.894625][ T30] 1 lock held by syz.2.2860/15655: [ 961.900768][ T30] #0: ffff888029c721e0 (&dev->mutex){....}-{4:4}, at: usbdev_release+0x7e/0x760 [ 961.910463][ T30] 5 locks held by kworker/u8:0/16344: [ 961.916057][ T30] #0: ffff88801bade948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0xa52/0x18c0 [ 961.928436][ T30] #1: ffffc9000c78fc40 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0xa8d/0x18c0 [ 961.953042][ T5916] usb 6-1: USB disconnect, device number 18 [ 961.972069][ T30] #2: ffffffff8fbc1dd0 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf4/0x800 [ 961.993496][ T30] #3: ffffffff8fbd0548 (rtnl_mutex){+.+.}-{4:4}, at: ops_undo_list+0x2a4/0x940 [ 962.022235][ T30] #4: ffffffff8e7648f8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2d0/0x770 [ 962.039760][T17759] fido_id[17759]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 962.054721][ T30] 4 locks held by kworker/1:2/16847: [ 962.061037][ T30] #0: ffff88813fe0f148 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0xa52/0x18c0 [ 962.086503][ T30] #1: ffff8880b8724588 (psi_seq){-.-.}-{0:0}, at: psi_task_switch+0x53/0x880 [ 962.107736][ T30] #2: ffff888020741960 (&helper->damage_lock){....}-{3:3}, at: drm_fb_helper_damage_work+0x198/0x750 [ 962.145601][ T30] #3: ffffffff9a52c758 (&obj_hash[i].lock){-.-.}-{2:2}, at: debug_object_activate+0x83/0x580 [ 962.161349][ T30] 4 locks held by syz.4.3359/17754: [ 962.167156][ T30] [ 962.170605][ T30] ============================================= [ 962.170605][ T30] [ 962.179879][ T30] NMI backtrace for cpu 1 [ 962.179901][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 962.179936][ T30] Tainted: [L]=SOFTLOCKUP [ 962.179943][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 962.179955][ T30] Call Trace: [ 962.179963][ T30] [ 962.179971][ T30] dump_stack_lvl+0xe8/0x150 [ 962.180004][ T30] nmi_cpu_backtrace+0x274/0x2d0 [ 962.180024][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 962.180052][ T30] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 962.180074][ T30] sys_info+0x135/0x170 [ 962.180101][ T30] watchdog+0xfd9/0x1030 [ 962.180125][ T30] ? watchdog+0x21a/0x1030 [ 962.180148][ T30] kthread+0x388/0x470 [ 962.180166][ T30] ? __pfx_watchdog+0x10/0x10 [ 962.180182][ T30] ? __pfx_kthread+0x10/0x10 [ 962.180203][ T30] ret_from_fork+0x51e/0xb90 [ 962.180231][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 962.180255][ T30] ? __switch_to+0xc7d/0x1450 [ 962.180281][ T30] ? __pfx_kthread+0x10/0x10 [ 962.180303][ T30] ret_from_fork_asm+0x1a/0x30 [ 962.180343][ T30] [ 962.180353][ T30] Sending NMI from CPU 1 to CPUs 0: [ 962.301610][ C0] NMI backtrace for cpu 0 [ 962.301633][ C0] CPU: 0 UID: 0 PID: 9 Comm: kworker/0:0 Tainted: G L syzkaller #0 PREEMPT(full) [ 962.301654][ C0] Tainted: [L]=SOFTLOCKUP [ 962.301661][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 962.301672][ C0] Workqueue: usb_hub_wq hub_event [ 962.301704][ C0] RIP: 0010:lock_acquire+0xaa/0x2e0 [ 962.301726][ C0] Code: 0f 84 c1 00 00 00 65 8b 05 03 79 7b 11 85 c0 0f 85 b2 00 00 00 65 48 8b 05 4b 33 7b 11 83 b8 54 0b 00 00 00 0f 85 9d 00 00 00 <9c> 5b fa 48 c7 c7 95 45 f1 8d e8 e7 20 0e 0a 65 ff 05 d0 78 7b 11 [ 962.301739][ C0] RSP: 0018:ffffc90000007968 EFLAGS: 00000046 [ 962.301753][ C0] RAX: ffff88801d6e5b80 RBX: 0000000000000086 RCX: 0000000000000102 [ 962.301765][ C0] RDX: 0000000000000000 RSI: ffffffff8bb22e80 RDI: 1ffff1100da97c03 [ 962.301776][ C0] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 962.301785][ C0] R10: 000000000000000e R11: ffffffff81b0d0f0 R12: 0000000000000000 [ 962.301796][ C0] R13: ffff88806d4be018 R14: 0000000000000000 R15: 0000000000000001 [ 962.301807][ C0] FS: 0000000000000000(0000) GS:ffff888125454000(0000) knlGS:0000000000000000 [ 962.301820][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 962.301832][ C0] CR2: 00002000003cf030 CR3: 000000005ed26000 CR4: 00000000003526f0 [ 962.301848][ C0] Call Trace: [ 962.301855][ C0] [ 962.301864][ C0] ? kmem_cache_free+0x187/0x630 [ 962.301886][ C0] _raw_spin_lock_irqsave+0x40/0x60 [ 962.301904][ C0] ? ath6kl_usb_recv_complete+0x23c/0x4d0 [ 962.301926][ C0] ath6kl_usb_recv_complete+0x23c/0x4d0 [ 962.301949][ C0] __usb_hcd_giveback_urb+0x376/0x540 [ 962.301973][ C0] dummy_timer+0xbbd/0x45d0 [ 962.301997][ C0] ? __resched_curr+0x1ff/0x3f0 [ 962.302019][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 962.302048][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 962.302068][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 962.302090][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 962.302108][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 962.302128][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 962.302149][ C0] __hrtimer_run_queues+0x53a/0xcc0 [ 962.302177][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 962.302197][ C0] ? ktime_get_update_offsets_now+0x3b2/0x3d0 [ 962.302219][ C0] hrtimer_run_softirq+0x182/0x5a0 [ 962.302243][ C0] handle_softirqs+0x22a/0x870 [ 962.302272][ C0] ? __irq_exit_rcu+0x5f/0x150 [ 962.302294][ C0] __irq_exit_rcu+0x5f/0x150 [ 962.302312][ C0] irq_exit_rcu+0x9/0x30 [ 962.302330][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 962.302349][ C0] [ 962.302355][ C0] [ 962.302362][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 962.302380][ C0] RIP: 0010:lock_acquire+0x50/0x2e0 [ 962.302399][ C0] Code: 8b 05 d4 33 7b 11 48 89 44 24 30 0f 1f 44 00 00 65 8b 05 d7 33 7b 11 83 f8 08 0f 83 77 01 00 00 89 c0 48 0f a3 05 40 47 70 0e <73> 0d e8 c9 35 09 00 84 c0 0f 84 bc 01 00 00 83 3d 3a 7a 70 0e 00 [ 962.302411][ C0] RSP: 0018:ffffc900000e64e0 EFLAGS: 00000293 [ 962.302424][ C0] RAX: 0000000000000000 RBX: ffffffff816d1843 RCX: 0000000000000002 [ 962.302435][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff8e75e5e0 [ 962.302446][ C0] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 962.302455][ C0] R10: ffffc900000e66d8 R11: fffff5200001ccdd R12: 0000000000000002 [ 962.302466][ C0] R13: ffffffff8e75e5e0 R14: 0000000000000000 R15: 0000000000000000 [ 962.302479][ C0] ? arch_stack_walk+0xe3/0x150 [ 962.302507][ C0] ? unwind_next_frame+0xa5/0x23c0 [ 962.302527][ C0] ? arch_stack_walk+0xe3/0x150 [ 962.302547][ C0] ? unwind_next_frame+0xa5/0x23c0 [ 962.302567][ C0] unwind_next_frame+0xc2/0x23c0 [ 962.302586][ C0] ? unwind_next_frame+0xa5/0x23c0 [ 962.302609][ C0] ? unwind_next_frame+0xa5/0x23c0 [ 962.302630][ C0] ? __unwind_start+0xf7/0x760 [ 962.302652][ C0] __unwind_start+0x5b8/0x760 [ 962.302675][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 962.302691][ C0] arch_stack_walk+0xe3/0x150 [ 962.302714][ C0] ? arch_stack_walk+0xe3/0x150 [ 962.302737][ C0] stack_trace_save+0xa9/0x100 [ 962.302752][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 962.302770][ C0] ? kasan_save_track+0x4f/0x80 [ 962.302807][ C0] ? kasan_save_track+0x3e/0x80 [ 962.302822][ C0] ? __kasan_kmalloc+0x93/0xb0 [ 962.302838][ C0] ? __kmalloc_cache_noprof+0x31c/0x660 [ 962.302854][ C0] ? dummy_urb_enqueue+0x7c/0x780 [ 962.302874][ C0] ? usb_hcd_submit_urb+0x328/0x1b70 [ 962.302894][ C0] ? ath6kl_usb_power_on+0x6a/0x280 [ 962.302913][ C0] ? ath6kl_core_init+0x1e1/0x10b0 [ 962.302931][ C0] kasan_save_track+0x3e/0x80 [ 962.302968][ C0] __kasan_slab_alloc+0x6c/0x80 [ 962.302986][ C0] kmem_cache_alloc_node_noprof+0x384/0x690 [ 962.303003][ C0] ? __alloc_skb+0x1d0/0x7d0 [ 962.303020][ C0] ? kmem_cache_alloc_node_noprof+0x23e/0x690 [ 962.303038][ C0] __alloc_skb+0x1d0/0x7d0 [ 962.303056][ C0] __netdev_alloc_skb+0xc1/0x810 [ 962.303072][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 962.303091][ C0] ath6kl_usb_post_recv_transfers+0x207/0x6f0 [ 962.303119][ C0] ath6kl_usb_power_on+0x6a/0x280 [ 962.303139][ C0] ath6kl_core_init+0x1e1/0x10b0 [ 962.303159][ C0] ? __kasan_kmalloc+0x93/0xb0 [ 962.303178][ C0] ? __pfx_ath6kl_core_init+0x10/0x10 [ 962.303196][ C0] ? __asan_memcpy+0x40/0x70 [ 962.303212][ C0] ? ath6kl_core_create+0x7fb/0x9a0 [ 962.303231][ C0] ath6kl_usb_probe+0x14df/0x15d0 [ 962.303264][ C0] usb_probe_interface+0x668/0xc90 [ 962.303289][ C0] ? __pfx_usb_probe_interface+0x10/0x10 [ 962.303309][ C0] really_probe+0x267/0xaf0 [ 962.303333][ C0] __driver_probe_device+0x18c/0x320 [ 962.303356][ C0] driver_probe_device+0x4f/0x240 [ 962.303382][ C0] __device_attach_driver+0x279/0x430 [ 962.303410][ C0] bus_for_each_drv+0x258/0x2f0 [ 962.303430][ C0] ? __pfx___device_attach_driver+0x10/0x10 [ 962.303456][ C0] ? __pfx_bus_for_each_drv+0x10/0x10 [ 962.303478][ C0] ? lockdep_hardirqs_on+0x7a/0x110 [ 962.303500][ C0] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 962.303523][ C0] __device_attach+0x2c5/0x450 [ 962.303546][ C0] ? __pfx___device_attach+0x10/0x10 [ 962.303569][ C0] ? _raw_spin_unlock+0x28/0x50 [ 962.303587][ C0] device_initial_probe+0xa1/0xd0 [ 962.303608][ C0] bus_probe_device+0x12a/0x220 [ 962.303625][ C0] ? device_add+0x726/0xb70 [ 962.303644][ C0] device_add+0x7b6/0xb70 [ 962.303664][ C0] usb_set_configuration+0x1a87/0x2110 [ 962.303695][ C0] usb_generic_driver_probe+0x8d/0x150 [ 962.303716][ C0] usb_probe_device+0x1c4/0x3b0 [ 962.303737][ C0] ? __pfx_usb_probe_device+0x10/0x10 [ 962.303757][ C0] really_probe+0x267/0xaf0 [ 962.303780][ C0] __driver_probe_device+0x18c/0x320 [ 962.303802][ C0] driver_probe_device+0x4f/0x240 [ 962.303825][ C0] __device_attach_driver+0x279/0x430 [ 962.303848][ C0] bus_for_each_drv+0x258/0x2f0 [ 962.303865][ C0] ? __pfx___device_attach_driver+0x10/0x10 [ 962.303886][ C0] ? __pfx_bus_for_each_drv+0x10/0x10 [ 962.303904][ C0] ? lockdep_hardirqs_on+0x7a/0x110 [ 962.303922][ C0] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 962.303942][ C0] __device_attach+0x2c5/0x450 [ 962.303963][ C0] ? __pfx___device_attach+0x10/0x10 [ 962.303985][ C0] ? _raw_spin_unlock+0x28/0x50 [ 962.304003][ C0] device_initial_probe+0xa1/0xd0 [ 962.304024][ C0] bus_probe_device+0x12a/0x220 [ 962.304041][ C0] ? device_add+0x726/0xb70 [ 962.304060][ C0] device_add+0x7b6/0xb70 [ 962.304080][ C0] usb_new_device+0xa08/0x16f0 [ 962.304103][ C0] ? __pfx_usb_new_device+0x10/0x10 [ 962.304122][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 962.304140][ C0] hub_event+0x2a1c/0x4f30 [ 962.304158][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 962.304196][ C0] ? __pfx_hub_event+0x10/0x10 [ 962.304219][ C0] ? process_scheduled_works+0xa8d/0x18c0 [ 962.304238][ C0] ? process_scheduled_works+0xa8d/0x18c0 [ 962.304264][ C0] process_scheduled_works+0xb6e/0x18c0 [ 962.304295][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 962.304316][ C0] ? assign_work+0x3d5/0x5e0 [ 962.304336][ C0] worker_thread+0xa53/0xfc0 [ 962.304366][ C0] kthread+0x388/0x470 [ 962.304382][ C0] ? __pfx_worker_thread+0x10/0x10 [ 962.304400][ C0] ? __pfx_kthread+0x10/0x10 [ 962.304416][ C0] ret_from_fork+0x51e/0xb90 [ 962.304435][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 962.304454][ C0] ? __switch_to+0xc7d/0x1450 [ 962.304473][ C0] ? __pfx_kthread+0x10/0x10 [ 962.304489][ C0] ret_from_fork_asm+0x1a/0x30 [ 962.304517][ C0] [ 963.415465][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 963.422395][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 963.433091][ T30] Tainted: [L]=SOFTLOCKUP [ 963.437419][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 963.447575][ T30] Call Trace: [ 963.450870][ T30] [ 963.453814][ T30] vpanic+0x56c/0xa60 [ 963.457827][ T30] ? __pfx___schedule+0x10/0x10 [ 963.462692][ T30] ? __pfx_vpanic+0x10/0x10 [ 963.467220][ T30] ? __pfx_console_unlock+0x10/0x10 [ 963.472438][ T30] panic+0xc5/0xd0 [ 963.476196][ T30] ? __pfx_panic+0x10/0x10 [ 963.480624][ T30] ? preempt_schedule_thunk+0x16/0x30 [ 963.486018][ T30] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 963.492268][ T30] watchdog+0x1023/0x1030 [ 963.496610][ T30] ? watchdog+0x21a/0x1030 [ 963.501058][ T30] kthread+0x388/0x470 [ 963.505156][ T30] ? __pfx_watchdog+0x10/0x10 [ 963.509843][ T30] ? __pfx_kthread+0x10/0x10 [ 963.514444][ T30] ret_from_fork+0x51e/0xb90 [ 963.519047][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 963.524164][ T30] ? __switch_to+0xc7d/0x1450 [ 963.528880][ T30] ? __pfx_kthread+0x10/0x10 [ 963.533509][ T30] ret_from_fork_asm+0x1a/0x30 [ 963.538323][ T30] [ 963.541736][ T30] Kernel Offset: disabled [ 963.546063][ T30] Rebooting in 86400 seconds..