last executing test programs:

6.362143359s ago: executing program 4 (id=2967):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', <r1=>0x0})
r2 = socket$packet(0x11, 0x3, 0x300)
bind$packet(r2, &(0x7f00000000c0)={0x11, 0x18, r1, 0x1, 0x83, 0x6, @multicast}, 0x14)
setsockopt$packet_int(r2, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4)
setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x0, 0x0, 0xffffffff}, 0x1c) (fail_nth: 54)

5.861314226s ago: executing program 4 (id=2969):
r0 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, 0x0)
ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc01c64b9, &(0x7f00000001c0)={&(0x7f0000000100)=[<r1=>0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0], 0x1, 0x0, 0xcccccccc})
ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f0000000040)={0x5, 0x0, &(0x7f0000000000)=[<r2=>0x0, 0x0, 0x0, 0x0, 0x0]})
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000000340)={&(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[{}], &(0x7f00000002c0)=[<r3=>0x0], &(0x7f0000000300)=[0x0], 0x1, 0x1, 0x5})
ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000480)={0x100, 0x0, &(0x7f0000000040), &(0x7f0000000080)=[0x2, 0x1, 0x4], &(0x7f00000003c0)=[r1, r2, 0x0, r3], &(0x7f0000000400)=[0x2]})

5.482410156s ago: executing program 4 (id=2971):
r0 = syz_open_dev$vbi(&(0x7f0000000080), 0x1, 0x2)
ioctl$VIDIOC_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000380)={0x0, @bt={0x12, 0x7c5, 0x1, 0x3, 0xd59f80, 0x4, 0x5, 0x7, 0x8, 0x5, 0x722, 0xe72, 0x7, 0x8, 0x2e, 0x8, {0xffff945a, 0x1}, 0x3, 0xed}})
r1 = syz_io_uring_setup(0xd3a, &(0x7f0000000080)={0x0, 0x2, 0x3010, 0x6, 0x3}, &(0x7f0000000000)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0, &(0x7f0000000180)=<r4=>0x0)
syz_io_uring_modify_offsets$generic(r2, r3, 0x2c, 0x8)
r5 = eventfd(0x3)
io_uring_register$IORING_REGISTER_EVENTFD(r1, 0x4, &(0x7f00000001c0)=r5, 0x1)
syz_ublk_setup_io_uring(0x20, &(0x7f0000000040), 0x0, 0x0, 0x0)
syz_io_uring_submit$UBLK(r2, r3, r4, &(0x7f0000000980)=@ublk_start_dev_sqe={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207506, 0x0, 0x0, 0x0, 0x1, 0x8000000000000000})
syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000440)={0x2e, 0x7f, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000400)=@any_dev={0x2, 0x927, 0x0, 0x0, 0x1000, 0x1d6, 0xffffffffffffffff, 0x0, 0x18d}}}, 0x0)
io_uring_enter(r1, 0x6516, 0x6d93, 0x8, 0x0, 0x0)
r6 = syz_open_dev$vbi(&(0x7f0000000080), 0x1, 0x2)
ioctl$VIDIOC_S_DV_TIMINGS(r6, 0xc0845657, &(0x7f0000000380)={0x0, @bt={0x12, 0x7c5, 0x1, 0x1, 0xd59f80, 0x4, 0x5, 0x7, 0x8, 0x2800, 0x722, 0xe72, 0x7, 0x9, 0x2e, 0x0, {0xffff945a, 0x1}, 0x5, 0xed}})

5.14200691s ago: executing program 1 (id=2973):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@newtfilter={0x48, 0x2c, 0xd3f, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x289, r2, {0x1, 0xb}, {0x0, 0x9}, {0xffe0, 0x4}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_KEY_IPV6_SRC={0x14, 0xe, @local}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x20040004)

5.141237624s ago: executing program 4 (id=2974):
r0 = ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece)
setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000040)=0x1008, 0x4)
ioctl$KVM_CAP_MSR_PLATFORM_INFO(r0, 0x4068aea3, &(0x7f0000000080))
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0xb83297c01978451f}, 0x48)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={{0x14}, [@NFT_MSG_DELSETELEM={0x4c, 0xe, 0xa, 0x801, 0x0, 0x0, {0x0, 0x0, 0x4}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_LIST_SET={0xfffffffffffffe80, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x14, 0x1, 0x0, 0x0, {0x3}}}, 0x74}, 0x1, 0x0, 0x0, 0x850}, 0x4040080)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="900000000001010400000000141a00000200ffff0800074000000001240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e02010c00028005000100000000002c000e800c000280040001"], 0x90}}, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000041000701fefffffffeffffff017c0000040042800c00018006000600800a000014000280100015800c"], 0x38}, 0x1, 0x0, 0x0, 0x4048015}, 0xc000)
mbind(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x4000, &(0x7f0000000100)=0x2, 0x5, 0x2)
timer_create(0x2, 0x0, &(0x7f0000000480)=<r2=>0x0)
timer_delete(r2)
ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r0, 0x4020565b, &(0x7f0000000140)={0x4, 0xd5, 0x2})
r3 = syz_genetlink_get_family_id$nl80211(0x0, r0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r6=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x24, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0xb}]}, 0x24}, 0x1, 0x0, 0x0, 0x400c000}, 0x0)
sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r0, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x58, r3, 0x170, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x1c}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x3f}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x37}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x61}]}, 0x58}, 0x1, 0x0, 0x0, 0xe76af3543b011ecf}, 0x10)
r7 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10)
sendmsg$nl_generic(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x18, 0x16, 0xa01, 0x0, 0x0, {0xa}, [@nested={0x4, 0x10}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
sendmsg$DEVLINK_CMD_SB_POOL_GET(r7, &(0x7f0000000600)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000005c0)={&(0x7f00000004c0)={0xcc, 0x0, 0x200, 0x70bd26, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x7}, {0x6, 0x11, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x2}, {0x6, 0x11, 0x7}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x100}, {0x6, 0x11, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x3}, {0x6, 0x11, 0x7ff}}]}, 0xcc}, 0x1, 0x0, 0x0, 0x4000000}, 0x894)

4.772984638s ago: executing program 4 (id=2975):
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$batadv(&(0x7f0000000e40), 0xffffffffffffffff)
r0 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10)
set_mempolicy(0x4005, &(0x7f0000000000)=0x1, 0x4)
ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x85, &(0x7f0000000080)={0x0, 0xb, 0x0, 0x0, 0x7995}, 0xfcd6, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0})
r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301)
ioctl$USBDEVFS_FREE_STREAMS(r1, 0x802c550a, &(0x7f0000000000)=ANY=[])
r2 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r2, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10)
bind$tipc(r2, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10)
bind$tipc(r2, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10)
bind$tipc(r0, &(0x7f0000000440)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x3}}, 0x10)
r3 = openat$pidfd(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
socket(0x840000000002, 0x3, 0x100)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
syz_mount_image$fuse(&(0x7f00000002c0), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB, @ANYBLOB="6630ace4c08e125362fba97f8073b3caa4aaf88d1419830ae75cf42ee0096f0251ffa435f176c09a34cdbd727e71a26c9d9c766daa4e566a95d135025cb4eb8bff27a86d885a37f8e95e7ed43c15d61cbd685b222116bd8559a7677863b99e8951c92cab7c9c6cd993d22b623999b3cfebaa3c2bed052b8984068649288c68605c5eeddef43d80f59f444cd05e86eda3a75a25dfb1431e38a41790b5a8af6879616250e9efc4dc866a341e4a3edb4c1c31eb6096d064abdfa97dc5ef0578b3ad19508f42df0fe672da407b5429036a9889f5c76db1290c48bccb4ccbeed7bcc63a79ff05d566d72519e5c1f9890fa165079849fa8d44", @ANYRES32=r1, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0)
openat$vcsa(0xffffff9c, &(0x7f0000002340), 0x0, 0x0)
r4 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=<r5=>0x0, &(0x7f0000000280)=<r6=>0x0, &(0x7f0000000140)=<r7=>0x0)
syz_ublk_add_dev(r4, r5, r6, r7, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=<r8=>0x0)
r9 = socket$inet6_tcp(0xa, 0x1, 0x0)
r10 = dup(r9)
syz_ublk_setup_queues(r10, r8, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x100003, 0x16f}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x300, 0x2100, 0x10000004}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1, 0xfffffffe, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x0, 0x3, 0x1f0, 0x0, r10}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x587e, 0x2, 0x0, 0x363}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x2, 0x0, 0x0}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94)
pidfd_send_signal(r3, 0xfffffffe, &(0x7f0000000700)={0xfffffffe, 0x0, 0xfffffffe}, 0x0)
r11 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r11, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x5}}, 0x10)
r12 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', <r13=>0x0})
sendmsg$nl_route_sched(r12, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@getqdisc={0x24, 0x26, 0x1, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r13, {0x0, 0xb}, {}, {0x0, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4048000)

4.750457811s ago: executing program 1 (id=2976):
r0 = socket$nl_route(0x10, 0x3, 0x0)
openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="0203000210000000000000000000000002000800180000002c0000000000000005000600000000000a00000000000000fe8000000000000000000000000000aa00000000000000000200010000000000fd0009070000000005000500000000000a000793f79c489cc24500c54be612b7d5cbfffff801fe800000000000000000"], 0x80}, 0x1, 0x7}, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10)
connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10)
sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/diskstats\x00', 0x0, 0x0)
sendfile(r2, r3, 0x0, 0x106f)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000280)={'wg2\x00'})
sendmsg$WG_CMD_GET_DEVICE(r3, &(0x7f0000000d80)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000480)={0x410, 0x0, 0x8, 0x70bd2d, 0x25dfdbfd, {}, [@WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e24}, @WGDEVICE_A_PRIVATE_KEY={0x24}, @WGDEVICE_A_PEERS={0x374, 0x8, 0x0, 0x1, [{0x98, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e23, 0x5, @mcast2, 0xfff}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @broadcast}}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0xdf}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x5}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x3}]}, {0x3c, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x139e}, @WGPEER_A_FLAGS={0x8, 0x3, 0x3}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_FLAGS={0x8}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x2}, @WGPEER_A_PROTOCOL_VERSION={0x8}]}, {0xc, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}]}, {0x290, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x220, 0x9, 0x0, 0x1, [{0x88, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x1a}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}]}, {0x130, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @local}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x2}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x3}}]}]}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x3, @mcast2}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @multicast2}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e21, @multicast1}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "d6dafaa126e6e669275c6d863f4de5e5b8d0236b4048367659ecfcff5e076a10"}]}]}, @WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0xb}, @WGDEVICE_A_PRIVATE_KEY={0x24}]}, 0x410}}, 0x10)
unshare(0x22020400)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r4, 0x6, 0x1d, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x9}, 0x14)
write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000080)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000300), 0xffffffffffffffff, 0x0, 0x1, 0x4}}, 0x20)
writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000100)="18000000246837f73199aee6fdb9291b120000002d41d227975ad8ec030f5919f397867997f9c0efa9c9092a31cdbb98ea272787afda0af59a320709c3a59ef05c6f40ceafec53f48d6186e7d8409e35306221caf67b370d875eff3191932728e5ab6c9a3acf6ccee3e352c898f5744abaedfb53f92c37acb126bd143f3e9cdfcf25a8d6129fcc3a141c3f5ab6db772f87c787817a9b699dd60732d952716b103bc1e91ac5b1ed92f35389580994bb0df9bce07e7a80921888f984139f488d256a67fec0cbb5c4e93d5c151d97f676ab93b1efbd46f600dc964231e3257bf358448fddf894c0cdfa9115adbe5b19bc912fcbc8aac7719b64", 0xf8}, {&(0x7f0000001480)="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", 0x1001}], 0x3)
bpf$BPF_BTF_LOAD(0x26, 0x0, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0x3, &(0x7f0000000100), 0x4)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="000000000000b40b400012800c0001006d6163766c616e00300002800800010010000000100005800a000400aaacaaaaaabb000008000300030000000a000400aaaaaaaab1aa000008000500", @ANYRES32], 0x68}}, 0x0)
openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[], 0x68}}, 0x20000880)

3.490082704s ago: executing program 4 (id=2980):
r0 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f0000000580)={0x0, 0x280, 0x1e0, 0x34325241, 0x3, [0x2], [0x80ffff], [0x0, 0x0, 0x0, 0x4000], [0x400000000000000]})
ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc01c64b9, 0x0)
ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f0000000040)={0x5, 0x0, &(0x7f0000000000)=[<r1=>0x0, 0x0, 0x0, 0x0, 0x0]})
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000000340)={&(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[{}], &(0x7f00000002c0)=[<r2=>0x0], &(0x7f0000000300)=[0x0], 0x1, 0x1, 0x5})
ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000480)={0x100, 0x0, &(0x7f0000000040), &(0x7f0000000080)=[0x2, 0x1, 0x4], &(0x7f00000003c0)=[0x0, r1, 0x0, r2], &(0x7f0000000400)=[0x2]})

3.199295082s ago: executing program 2 (id=2982):
r0 = syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x1808e2)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
socket(0x400000000010, 0x3, 0x0) (async)
r2 = socket(0x400000000010, 0x3, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40004}, 0x4000)
sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newtfilter={0x4c, 0x2c, 0xc3f, 0x70bd2d, 0x25dfdbf9, {0x0, 0x0, 0x0, r4, {0x3, 0x2}, {}, {0x7, 0xffe0}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8100}, @TCA_FLOWER_KEY_VLAN_ETH_TYPE={0x6, 0x19, 0x88a8}, @TCA_FLOWER_KEY_CVLAN_ETH_TYPE={0x6, 0x4f, 0x8864}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000810}, 0x20084084) (async)
sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newtfilter={0x4c, 0x2c, 0xc3f, 0x70bd2d, 0x25dfdbf9, {0x0, 0x0, 0x0, r4, {0x3, 0x2}, {}, {0x7, 0xffe0}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8100}, @TCA_FLOWER_KEY_VLAN_ETH_TYPE={0x6, 0x19, 0x88a8}, @TCA_FLOWER_KEY_CVLAN_ETH_TYPE={0x6, 0x4f, 0x8864}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000810}, 0x20084084)
sendmmsg$sock(0xffffffffffffffff, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000240)="510fdc7f383e19b5b7f159bf009b8ffd932eadfcdabb6190f1928520a7022201f281268e43aca35c86534f1faa23e48c46d6bb679d9330bb2c5a9e0527eedc16974eed7cc32fd6d6ca50819580aa28029a7eb9c7e2c7f4f8effae1f493d8f6218b4c26d8f8e2d4113c0ecd3175c9cfe5197b2eb062d2e56eea6a4523c257f1aee5a9a45d3a4db16cef050ce20d954e669dfa9452341924d651fa9ad574df2fa9fc446cf92c86192af6d424a84096efa13d1ec82ee45abeb3663bcf", 0xbb}], 0x1}}], 0x1, 0xc8009)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wlan0\x00'})
r5 = socket$netlink(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a01040000000000000000020000000900010073797a300000000048000000030a01040000000000000000020000000900010073797a30000000000900030073797a30000000001400048008000140000000030800024000000000080005400000000198000000060a01040000000000000000020000000900010073797a30000000000900020073797a30000000006c000480680001800a0001006d61746368000000580002800e000100686173686c696d697400000008000240000000013c0003006c6f000000000000000000000000000020000000"], 0x128}}, 0x0) (async)
sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a01040000000000000000020000000900010073797a300000000048000000030a01040000000000000000020000000900010073797a30000000000900030073797a30000000001400048008000140000000030800024000000000080005400000000198000000060a01040000000000000000020000000900010073797a30000000000900020073797a30000000006c000480680001800a0001006d61746368000000580002800e000100686173686c696d697400000008000240000000013c0003006c6f000000000000000000000000000020000000"], 0x128}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000002840)=ANY=[@ANYBLOB="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"/2745], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48)
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/mem_sleep', 0x20001, 0x18b) (async)
r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/mem_sleep', 0x20001, 0x18b)
ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000080)={r6, 0x0, {0x0, 0x0, 0x0, 0x7, 0x4010000000000ffc, 0x0, 0x0, 0x19, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "675237601a8ca5b07dcc141802c4dae4162e62a661b7ad3300", [0xfffffffffffffce8, 0x6]}}) (async)
ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000080)={r6, 0x0, {0x0, 0x0, 0x0, 0x7, 0x4010000000000ffc, 0x0, 0x0, 0x19, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "675237601a8ca5b07dcc141802c4dae4162e62a661b7ad3300", [0xfffffffffffffce8, 0x6]}})

2.765044513s ago: executing program 1 (id=2984):
r0 = ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece)
setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000040)=0x1008, 0x4)
ioctl$KVM_CAP_MSR_PLATFORM_INFO(r0, 0x4068aea3, &(0x7f0000000080))
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0xb83297c01978451f}, 0x48)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={{0x14}, [@NFT_MSG_DELSETELEM={0x4c, 0xe, 0xa, 0x801, 0x0, 0x0, {0x0, 0x0, 0x4}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_LIST_SET={0xfffffffffffffe80, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x14, 0x1, 0x0, 0x0, {0x3}}}, 0x74}, 0x1, 0x0, 0x0, 0x850}, 0x4040080)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="900000000001010400000000141a00000200ffff0800074000000001240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e02010c00028005000100000000002c000e800c000280040001"], 0x90}}, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000041000701fefffffffeffffff017c0000040042800c00018006000600800a000014000280100015800c"], 0x38}, 0x1, 0x0, 0x0, 0x4048015}, 0xc000)
mbind(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x4000, &(0x7f0000000100)=0x2, 0x5, 0x2)
timer_create(0x2, 0x0, &(0x7f0000000480)=<r2=>0x0)
timer_delete(r2)
ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r0, 0x4020565b, &(0x7f0000000140)={0x4, 0xd5, 0x2})
r3 = syz_genetlink_get_family_id$nl80211(0x0, r0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r6=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x24, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0xb}]}, 0x24}, 0x1, 0x0, 0x0, 0x400c000}, 0x0)
sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r0, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x58, r3, 0x170, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x1c}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x3f}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x37}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x61}]}, 0x58}, 0x1, 0x0, 0x0, 0xe76af3543b011ecf}, 0x10)
r7 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10)
sendmsg$nl_generic(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x18, 0x16, 0xa01, 0x0, 0x0, {0xa}, [@nested={0x4, 0x10}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
sendmsg$DEVLINK_CMD_SB_POOL_GET(r7, &(0x7f0000000600)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000005c0)={&(0x7f00000004c0)={0xcc, 0x0, 0x200, 0x70bd26, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x7}, {0x6, 0x11, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x2}, {0x6, 0x11, 0x7}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x100}, {0x6, 0x11, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x3}, {0x6, 0x11, 0x7ff}}]}, 0xcc}, 0x1, 0x0, 0x0, 0x4000000}, 0x894)

2.275751913s ago: executing program 1 (id=2986):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r4=>0x0})
r5 = socket$inet(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000300)={'wlan0\x00', 0x1000})
sendmsg$NL80211_CMD_SET_INTERFACE(r2, 0x0, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000000)={'wlan0\x00', 0x1})
sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000dc0)={0x28, r3, 0x1, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}]}, 0x28}, 0x1, 0x0, 0x0, 0x85}, 0x4c040)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r10=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r9, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x30, r9, 0x5, 0x0, 0x25dfdbff, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x1, [{0x2, 0x1}]}, @void, @void, @void, @void, @void, @void}, 0x2f)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000003c0)={'wlan0\x00', <r11=>0x0})
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000032c0)={0x2c, r6, 0x1, 0x70bd2a, 0x0, {{}, {@val={0x8, 0x3, r11}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0xf9}]}, 0x2c}}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000016c0)={'wlan0\x00', <r12=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000003740)={0x0, 0x0, &(0x7f0000003700)={&(0x7f0000000540)={0x4c, r1, 0x1, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_FRAME={0x1d, 0x33, @deauth={{{0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1}, {0xe}, @device_b, @device_a, @initial, {0x3, 0x7}}, 0x0, @val={0x8c, 0x10, {0x283, "726712ea1b02", @short="acf28009ddef7a20"}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20040080}, 0x28008004)

1.679381449s ago: executing program 2 (id=2989):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010080030900010073797a30000000002c000000020a01010000f50000000000010000000900010073797a30"], 0x118}}, 0x0)

1.534282224s ago: executing program 2 (id=2991):
socketpair$unix(0x1, 0x2, 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000001100)='iocharset', 0x0, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000140)={0x0, &(0x7f0000000280)})
syz_open_dev$evdev(0x0, 0x2, 0x862b01)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4)
socket$key(0xf, 0x3, 0x2)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
shutdown(r1, 0x0)
recvmmsg(r1, &(0x7f0000005000)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/19, 0x13}, 0x3}], 0x4000169, 0x60, 0x0)
listen(r0, 0x40000000)

1.291382274s ago: executing program 2 (id=2995):
r0 = ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece)
setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000040)=0x1008, 0x4)
ioctl$KVM_CAP_MSR_PLATFORM_INFO(r0, 0x4068aea3, &(0x7f0000000080))
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0xb83297c01978451f}, 0x48)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={{0x14}, [@NFT_MSG_DELSETELEM={0x4c, 0xe, 0xa, 0x801, 0x0, 0x0, {0x0, 0x0, 0x4}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_LIST_SET={0xfffffffffffffe80, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x14, 0x1, 0x0, 0x0, {0x3}}}, 0x74}, 0x1, 0x0, 0x0, 0x850}, 0x4040080)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="900000000001010400000000141a00000200ffff0800074000000001240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e02010c00028005000100000000002c000e800c000280040001"], 0x90}}, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000041000701fefffffffeffffff017c0000040042800c00018006000600800a000014000280100015800c"], 0x38}, 0x1, 0x0, 0x0, 0x4048015}, 0xc000)
mbind(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x4000, &(0x7f0000000100)=0x2, 0x5, 0x2)
timer_create(0x2, 0x0, &(0x7f0000000480)=<r2=>0x0)
timer_delete(r2)
ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r0, 0x4020565b, &(0x7f0000000140)={0x4, 0xd5, 0x2})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r6=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x24, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0xb}]}, 0x24}, 0x1, 0x0, 0x0, 0x400c000}, 0x0)
sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r0, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x58, r3, 0x170, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x1c}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x3f}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x37}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x61}]}, 0x58}, 0x1, 0x0, 0x0, 0xe76af3543b011ecf}, 0x10)
r7 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10)
sendmsg$nl_generic(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x18, 0x16, 0xa01, 0x0, 0x0, {0xa}, [@nested={0x4, 0x10}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
sendmsg$DEVLINK_CMD_SB_POOL_GET(r7, &(0x7f0000000600)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000005c0)={&(0x7f00000004c0)={0xcc, 0x0, 0x200, 0x70bd26, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x7}, {0x6, 0x11, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x2}, {0x6, 0x11, 0x7}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x100}, {0x6, 0x11, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x3}, {0x6, 0x11, 0x7ff}}]}, 0xcc}, 0x1, 0x0, 0x0, 0x4000000}, 0x894)

1.127452868s ago: executing program 3 (id=2996):
r0 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000a0)={'bridge_slave_0\x00', <r1=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="7c00000013000100000000000000000007000000", @ANYRES32=r1, @ANYBLOB="00000000000000005c001a800600000001000000500005802400018008000100010000000800020000000000080003000000000008000400", @ANYBLOB="28000380080001"], 0x7c}}, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000500)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0)
write$binfmt_script(r2, 0x0, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0)

1.125172363s ago: executing program 2 (id=2997):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r4=>0x0})
r5 = socket$inet(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000300)={'wlan0\x00', 0x1000})
sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000000)={'wlan0\x00', 0x1})
sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000dc0)={0x28, r3, 0x1, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}]}, 0x28}, 0x1, 0x0, 0x0, 0x85}, 0x4c040)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r10=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r9, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x30, r9, 0x5, 0x0, 0x25dfdbff, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x1, [{0x2, 0x1}]}, @void, @void, @void, @void, @void, @void}, 0x2f)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000003c0)={'wlan0\x00', <r11=>0x0})
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000032c0)={0x2c, r6, 0x1, 0x70bd2a, 0x0, {{}, {@val={0x8, 0x3, r11}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0xf9}]}, 0x2c}}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000016c0)={'wlan0\x00', <r12=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000003740)={0x0, 0x0, &(0x7f0000003700)={&(0x7f0000000540)={0x4c, r1, 0x1, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_FRAME={0x1d, 0x33, @deauth={{{0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1}, {0xe}, @device_b, @device_a, @initial, {0x3, 0x7}}, 0x0, @val={0x8c, 0x10, {0x283, "726712ea1b02", @short="acf28009ddef7a20"}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20040080}, 0x28008004)

941.216738ms ago: executing program 1 (id=2998):
r0 = socket(0x2c, 0x2, 0x2)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000100)={0x3ff8, 0x0, 0x0, 0x4}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94)
unshare(0xc040400)
r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401)
ioctl$SG_IO(r1, 0x2285, &(0x7f00000005c0)={0x53, 0x0, 0x6, 0x0, @scatter={0x0, 0x20000, 0x0}, &(0x7f0000000240)="2e8d7acda0b2", 0x0, 0x0, 0x0, 0x0, 0x0})
r2 = socket$inet6_mptcp(0xa, 0x1, 0x106)
memfd_create(&(0x7f0000000000)='/dev/sda1\x00', 0x1)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
getsockopt$inet6_mptcp_buf(r2, 0x11c, 0x2, &(0x7f0000000100)=""/222, &(0x7f0000000000)=0x61637876)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'veth1\x00', <r3=>0x0})
r4 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_BLANKSCREEN(r4, 0x560e, &(0x7f0000000000))
ioctl$TIOCSWINSZ(r4, 0x5414, &(0x7f0000000040)={0x9, 0x2, 0x1000, 0x5})
bind$packet(r0, &(0x7f0000000080)={0x11, 0x1b, r3, 0x1, 0x0, 0x6, @random="518440db9de1"}, 0x14)
socket$nl_netfilter(0x10, 0x3, 0xc)
syz_emit_ethernet(0x82, &(0x7f0000000100)={@broadcast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x74, 0x4, 0x0, 0xfe, 0x1, 0x0, @rand_addr=0x64010101, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x1, 0xe000, {0x16, 0x4, 0x0, 0x0, 0x3, 0x4, 0x0, 0x0, 0x11, 0x0, @rand_addr=0x64010100, @local, {[@cipso={0x86, 0x6, 0x3}, @timestamp_prespec={0x44, 0x3c, 0xfd, 0x3, 0x4, [{@multicast1=0xe0000033, 0x5102}, {@private=0xa010100}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@remote, 0xfffffffe}, {@empty, 0x1}, {@remote, 0x4}, {@local, 0x1}]}]}}}}}}}, 0x0)
r5 = syz_open_dev$dri(&(0x7f0000000180), 0xcaf8, 0x40000)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000380)={0xff, 0x3, 0xd83f})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f00000002c0)={0x8, 0xd7, 0x8})
socket$nl_route(0x10, 0x3, 0x0)
ptrace$setregs(0x4212, 0x0, 0x58, &(0x7f0000000080)="0100000000000000000000000000000000000000000000000000000001")
r6 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x42, 0x1ff)
mmap$IORING_OFF_SQ_RING(0xfffff000, 0x2000, 0x2000003, 0x12, r6, 0x0)
move_pages(0x0, 0x2064, &(0x7f0000000040)=[&(0x7f0000ff9000/0x2000)=nil], &(0x7f0000001180), &(0x7f0000000000), 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r7)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0xfb, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r8, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a50000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000001300c000b400000000000000006140000001100"], 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_BATCH(r8, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000c0a011e00000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c0001800600010058c60000140000001100"], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)

937.845653ms ago: executing program 3 (id=2999):
r0 = socket(0x840000000002, 0x3, 0x100)
connect$inet(r0, &(0x7f00000005c0)={0x2, 0x0, @local}, 0x10)
sendmmsg$inet(r0, &(0x7f0000001080)=[{{0x0, 0x0, 0x0}, 0xfffffdef}, {{0x0, 0x0, 0x0, 0x97, &(0x7f0000000ac0)=[@ip_retopts={{0x38, 0x0, 0x7, {[@cipso={0x86, 0x29, 0x1, [{0x0, 0x7, "94e06b094e"}, {0x6, 0xb, "140fcfbd12500e9117"}, {0x0, 0x4, "c42e"}, {0x6, 0xd, "fc051feefc45290aa57602"}]}]}}}], 0x38}}], 0x2, 0x0)

854.673551ms ago: executing program 0 (id=3000):
r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@newtfilter={0x48, 0x2c, 0x1, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0x1, 0xb}, {0x0, 0x9}, {0xffe0, 0x4}}, [@filter_kind_options=@f_flower={{0x6d}, {0x18, 0x2, [@TCA_FLOWER_KEY_IPV6_SRC={0x14, 0xe, @local}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x20040004)

774.833503ms ago: executing program 3 (id=3001):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a1c000000000a0104000000000000000202000000080001006e61740040000000030a0104000000000000000002000000080001006e6174000800030073797a00080007006e61740014000400080001000000000308000200ffffff9c84000000060a0104000000000000000002000000080001006e6174000800020073797a00600004005c0001000b00010074617267657400004c00020009000100444e4154000000000800020000000002340003"], 0x108}}, 0x0)

641.786006ms ago: executing program 1 (id=3002):
r0 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000000000201c1b091c00000000000109022d000100006000090400800203000000092108040001220500090581032000090807"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_usb_connect$uac3(0x0, 0x99, &(0x7f0000000500)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x8, 0x644, 0x8047, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x87, 0x3, 0x1, 0xfa, 0x0, 0x0, {0x8, 0xb, 0x1, 0x0, 0x1, 0x23, 0x30, 0x8}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x0, 0x17, 0x9}, [@power_domain={0xd, 0x24, 0x10, 0x8, 0xec, 0x7, 0xff, "57055357"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x2, 0xed}, @format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x4}]}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0x3, 0x5, 0xbb, {0xa, 0x25, 0x25, 0xaa2, 0x2, 0x3}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0xde, 0x20, 0x7, {0xa, 0x25, 0x25, 0x5, 0x4, 0x14de}}}}}}}}]}}, &(0x7f0000000700)={0xa, &(0x7f00000005c0)={0xa, 0x6, 0x300, 0x3, 0x7, 0x1, 0xff, 0x8}, 0x11, &(0x7f0000000600)={0x5, 0xf, 0x11, 0x1, [@ssp_cap={0xc, 0x10, 0xa, 0xfe, 0x0, 0x4, 0x0, 0x4000}]}, 0x3, [{0x7, &(0x7f0000000640)=@string={0x7, 0x3, "204121f75f"}}, {0x4, &(0x7f0000000680)=@lang_id={0x4, 0x3, 0x3401}}, {0x4, &(0x7f00000006c0)=@lang_id={0x4, 0x3, 0x9beb6504823b96e0}}]})
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
syz_open_dev$media(&(0x7f0000000380), 0x10, 0x101000)
syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0)
r2 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=<r3=>0x0, &(0x7f0000000280)=<r4=>0x0, &(0x7f0000000140)=<r5=>0x0)
syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x161d02)
syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff}}}, &(0x7f0000000480)=<r6=>0x0)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
r8 = dup(r7)
syz_ublk_setup_queues(r8, r6, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x2100, 0x10000004, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1, 0xfffffffe, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x0, 0x0, 0x1f0, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x587e, 0x8200, 0x2, 0x367, 0x0, r2}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x0, 0x0, 0x0}}, 0x0)
ioctl$KVM_CREATE_VM(r8, 0xae01, 0x1f)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
keyctl$unlink(0x9, 0x0, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000880)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0xa}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x5, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELRULE={0x34, 0x8, 0xa, 0x3, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x1}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0xa8}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000)
syz_usb_control_io$hid(r0, &(0x7f0000000200)={0x24, &(0x7f0000000000)={0x40, 0xc, 0x2, {0x2, 0x7}}, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0xb, "a502507b"}, @global=@item_012={0x2, 0x1, 0x6, ' M'}]}}, 0x0}, &(0x7f0000000480)={0x2c, 0x0, &(0x7f0000000340)={0x0, 0xa, 0x1, 0x80}, 0x0, 0x0, &(0x7f0000000440)={0x20, 0x3, 0x0, 0x5}})

641.235227ms ago: executing program 3 (id=3003):
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x800)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x200000000000011, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="7000000910000304000080000000000000007400", @ANYRES32=r2, @ANYBLOB="0000000003120100500012800b0001006272696467650000400002800800050001000000060027000000000008000100150008000500250000000000080004"], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40)

593.981571ms ago: executing program 0 (id=3004):
socketpair$unix(0x1, 0x2, 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000001100)='iocharset', 0x0, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000140)={0x0, &(0x7f0000000280)})
syz_open_dev$evdev(0x0, 0x2, 0x862b01)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4)
socket$key(0xf, 0x3, 0x2)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
shutdown(r1, 0x0)
recvmmsg(r1, &(0x7f0000005000)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/19, 0x13}, 0x3}], 0x4000169, 0x60, 0x0)
listen(r0, 0x40000000)

414.047452ms ago: executing program 3 (id=3005):
open$dir(&(0x7f00000000c0)='./file0\x00', 0x882, 0x80)
syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x40)
r0 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x1621, 0x1000, 0x0, 0x51}, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000000)=<r2=>0x0, &(0x7f0000000080)=<r3=>0x0)
syz_io_uring_submit(r1, r2, r3, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4004, @fd_index=0x3, 0x5, 0x0, 0x0, 0x10})
r4 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000000)={0xa}, 0x10)
sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@gettaction={0x18, 0x5a, 0xffffffffffffffff, 0x70bd2a, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x4}]}, 0x18}}, 0x40000)
io_uring_enter(r0, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0)

382.750474ms ago: executing program 0 (id=3006):
r0 = ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece)
setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000040)=0x1008, 0x4)
ioctl$KVM_CAP_MSR_PLATFORM_INFO(r0, 0x4068aea3, &(0x7f0000000080))
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0xb83297c01978451f}, 0x48)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={{0x14}, [@NFT_MSG_DELSETELEM={0x4c, 0xe, 0xa, 0x801, 0x0, 0x0, {0x0, 0x0, 0x4}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_LIST_SET={0xfffffffffffffe80, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x14, 0x1, 0x0, 0x0, {0x3}}}, 0x74}, 0x1, 0x0, 0x0, 0x850}, 0x4040080)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="900000000001010400000000141a00000200ffff0800074000000001240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e02010c00028005000100000000002c000e800c000280040001"], 0x90}}, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000041000701fefffffffeffffff017c0000040042800c00018006000600800a000014000280100015800c"], 0x38}, 0x1, 0x0, 0x0, 0x4048015}, 0xc000)
mbind(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x4000, &(0x7f0000000100)=0x2, 0x5, 0x2)
timer_create(0x2, 0x0, &(0x7f0000000480)=<r2=>0x0)
timer_delete(r2)
ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r0, 0x4020565b, &(0x7f0000000140)={0x4, 0xd5, 0x2})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r6=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x24, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0xb}]}, 0x24}, 0x1, 0x0, 0x0, 0x400c000}, 0x0)
sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r0, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x58, r3, 0x170, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x1c}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x3f}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x37}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x61}]}, 0x58}, 0x1, 0x0, 0x0, 0xe76af3543b011ecf}, 0x10)
r7 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10)
sendmsg$nl_generic(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x18, 0x16, 0xa01, 0x0, 0x0, {0xa}, [@nested={0x4, 0x10}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
sendmsg$DEVLINK_CMD_SB_POOL_GET(r7, &(0x7f0000000600)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000005c0)={&(0x7f00000004c0)={0xcc, 0x0, 0x200, 0x70bd26, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x7}, {0x6, 0x11, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x2}, {0x6, 0x11, 0x7}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x100}, {0x6, 0x11, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x3}, {0x6, 0x11, 0x7ff}}]}, 0xcc}, 0x1, 0x0, 0x0, 0x4000000}, 0x894)

294.67533ms ago: executing program 3 (id=3007):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0x3, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}})
write$tun(r0, &(0x7f0000001240)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x12d, 0xb29, 0x14}, @ipv4=@udp={{0x5, 0x4, 0x3, 0x1b, 0xb0, 0x69, 0x0, 0x40, 0x11, 0x0, @rand_addr=0x64010102, @dev}, {0x4e20, 0x4e24, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "a61c8e9bddb9c20f78d0b2919bf3e9da3b9b45ed552e35e93b73d768c09da5ab", "2b569b62e4682fc233cc58d087ea0a6ed1b19068354437b9b375ae055bdab1bbe0b61e29fde4bcc923f72d69ea864fa1", "7a0230d10c08785b98290bf0d8d54c0c7f4b7e27428220ce768e311d", {"3867137c4955ba642faaac5457afbd0b", "2adbfbd2780ba812ff7d1aafd511b948"}}}}}, 0xbe)

271.382521ms ago: executing program 0 (id=3008):
r0 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000a0)={'bridge_slave_0\x00', <r1=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="7c00000013000100000000000000000007000000", @ANYRES32=r1, @ANYBLOB="00000000000000005c001a800600000001000000500005802400018008000100010000000800020000000000080003000000000008000400", @ANYBLOB="28000380080001"], 0x7c}}, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000500)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0)
write$binfmt_script(r2, 0x0, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0)

137.901401ms ago: executing program 2 (id=3009):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000010000000000000000000000f50a64000000060a0b0400000000000000000200000038000480340001800b0001006e756d67656e00002400028008000140000000120800034000000001080002400000000008000440000000060900010073797a30000000000900020073797a32"], 0x8c}, 0x1, 0x0, 0x0, 0x8000}, 0x0)

47.314528ms ago: executing program 0 (id=3010):
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20040004)
r0 = socket(0x400000000010, 0x3, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001300)=@newtfilter={0xe90, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r2, {0x1, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xe5c, 0x2, [@TCA_MATCHALL_ACT={0xe58, 0x2, [@m_pedit={0xe54, 0x1, 0x0, 0x0, {{0xa}, {0xe28, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x2, 0x9, 0x20000000, 0x6}, 0x1, 0xfb}, [{0x2, 0x9c, 0x9, 0x5, 0x2, 0x7}, {0x0, 0x6, 0x4, 0x10000, 0xfffffffd, 0x81}, {0x1, 0x1, 0x8, 0x101, 0x1}, {0x3, 0x3, 0x0, 0x7, 0x5, 0x4}, {0xf, 0x7, 0x9, 0x51, 0x6}, {0x3, 0x8004, 0xc, 0x101, 0x103, 0x84b5}, {0x9c, 0x4, 0x9, 0x2, 0x487, 0x8}, {0x1, 0x10000, 0x5, 0x4, 0x3, 0x8000}, {0x7, 0x9, 0x1ff, 0x8, 0x2, 0x7fff}, {0x439356e7, 0x609, 0x16, 0xfffffffc, 0x0, 0x6}, {0x5, 0x3, 0x8, 0x3, 0x400000, 0xffffffff}, {0x5, 0xfffffff8, 0x7, 0x7, 0x8, 0x5}, {0x5, 0x8, 0xfffffffe, 0x5, 0xfffff000, 0x7}, {0x768d, 0xcd, 0x8, 0x7, 0x5, 0x10000}, {0xfffffffe, 0xfffffffb, 0x6, 0x5, 0x7ff, 0x5}, {0x240, 0x6, 0xfffffffe, 0x6, 0x2}, {0xfffff9fd, 0x49, 0xa5f, 0xa, 0x5, 0x2}, {0x6, 0x9, 0x167, 0x2, 0x71, 0xa2}, {0x140, 0x2, 0xc, 0x6, 0x87}, {0x5, 0xa, 0x7ffffffe, 0x4, 0x3, 0x2000}, {0x32d, 0x2008, 0x7fff, 0x4, 0x8, 0x9}, {0x6, 0x200, 0x58fe, 0x7ff, 0x4, 0x3}, {0x101, 0xd, 0x101, 0x0, 0xde4, 0x2}, {0x0, 0x3, 0x2, 0x1, 0x2, 0x9}, {0xffffffff, 0x1, 0x9, 0x0, 0x1, 0x4}, {0xc, 0xe, 0x0, 0x3, 0x8, 0x81}, {0x3, 0x3, 0x8006, 0xe, 0x0, 0x80}, {0xd, 0x638c, 0x7ff, 0x0, 0x80000000, 0x2}, {0x4, 0xb, 0x6c5f1878, 0x57c4, 0x8, 0x25ff}, {0x4, 0xd, 0x1fadd976, 0x3071, 0x0, 0x1}, {0x5, 0x800, 0x3, 0x3, 0x3, 0x9}, {0x9, 0x1ff, 0x1000, 0x9c, 0x1, 0x5}, {0x9, 0xd76, 0x6, 0xdc2, 0xa16a, 0x2}, {0x1ff, 0x5, 0x7, 0x2, 0x2, 0xffffffff}, {0x1, 0x32158140, 0x0, 0x8, 0x6, 0x7}, {0xe, 0x4, 0x9000, 0x5, 0x2, 0x7f}, {0x3, 0x2ec74d53, 0x0, 0x0, 0x8, 0x2}, {0x5, 0xfff, 0xffffff13, 0x6, 0x2, 0x6}, {0x1, 0x6, 0x3, 0x4, 0xffb, 0xc}, {0x6, 0x6, 0x1ff, 0x8, 0x7ff, 0x8001}, {0x4, 0xffffffff, 0x0, 0xfffff740, 0x4, 0x4}, {0xffff, 0x5, 0x7, 0xac, 0xf}, {0x5, 0x3, 0x6, 0xfff, 0x4, 0x8001}, {0xd, 0x3, 0x80000000, 0x0, 0xffffff81, 0x7ff}, {0xfffffffb, 0x2, 0x1ff, 0x5d, 0xffff8001, 0x800000}, {0x0, 0x6, 0x7ffc, 0x9, 0x500, 0x7}, {0x1, 0xffffffff, 0x834, 0x7, 0x0, 0x3}, {0x7fff, 0x6, 0x0, 0x2002, 0x2, 0x8}, {0xf61, 0x101, 0x9, 0x2, 0x80000000, 0x7fff}, {0xc7, 0x1, 0x8, 0x2, 0xffff, 0x20000000}, {0x0, 0x5, 0x1, 0xffff, 0x3, 0x3}, {0x9, 0x10001, 0x9f98, 0x1, 0x8, 0x66a}, {0xfff, 0x6, 0x8, 0x80000001, 0x0, 0x7f}, {0xff, 0x6, 0x7f, 0x5, 0x3, 0xb}, {0x4, 0x4b, 0x0, 0x1, 0x7f, 0x7fffffff}, {0xfff, 0x47e4, 0x1, 0xffffffff, 0x80000001, 0x9}, {0x3, 0x4, 0x7, 0x6, 0x8, 0xe5}, {0x9, 0x9, 0x1, 0x9, 0x0, 0x2}, {0x8, 0x80000001, 0x7fff, 0xb2d9, 0xfffffffe, 0x8}, {0x80000001, 0x8, 0x5202, 0x2, 0x53ce, 0x3}, {0x6, 0x4, 0x8, 0x8, 0x7f, 0x80000000}, {0xfffffff9, 0x9, 0x6, 0x6, 0x9, 0x3}, {0xfffffffd, 0x8, 0x6, 0x5, 0x3, 0x8f}, {0x741, 0x0, 0x9, 0x7fffffff, 0x2, 0x200}, {0x401, 0x2, 0x8, 0x4, 0x8000, 0xc6e9}, {0x1, 0x2d73, 0x400, 0x5, 0x9f17, 0xffffff7f}, {0x10000, 0x401, 0x2b00, 0xfffff57b, 0xfffffc00, 0xd}, {0x3, 0x4, 0xc52b, 0x9, 0x5, 0xff}, {0x0, 0x4, 0x401, 0x0, 0x1, 0x9}, {0x8, 0x4, 0x1, 0x2, 0x10, 0x1}, {0xff, 0x8, 0x6, 0x5, 0xff, 0x5}, {0x2, 0xb15ce2d, 0x80000001, 0xbeab, 0x4, 0x5}, {0x3, 0x8, 0x3, 0x7, 0x8, 0x4}, {0xfff, 0x9, 0x6, 0x3, 0x100, 0x57}, {0x9, 0x5, 0x8, 0x3, 0xa, 0x2}, {0xb3, 0xe, 0x3, 0x7e8, 0x7, 0x9}, {0x400000ff, 0x7, 0x5, 0x10001, 0x2, 0x6}, {0x1, 0x8f, 0x9, 0xffffff46, 0x4, 0x88000000}, {0x9, 0x2, 0xfffffffc, 0x1, 0xd52, 0x3}, {0xd203, 0x7, 0x1, 0x10000, 0x43, 0x1ff}, {0x1004, 0x3ff, 0xffffffff, 0x1, 0x5, 0x100}, {0x1ff, 0x3, 0x7ff, 0xfffffff8, 0x1ff, 0xfffffffc}, {0x7, 0x9, 0x83ff, 0x1, 0x7, 0x4}, {0x0, 0x6, 0x0, 0x6, 0xffff0001, 0xcca}, {0x7, 0x1, 0xfffffff1, 0x3ff, 0x100, 0x4}, {0x3, 0x9, 0x0, 0xed4, 0x4, 0x9}, {0x9, 0x7, 0x8001, 0x7, 0x2, 0x2}, {0x5, 0xfff, 0x9, 0x5, 0xb5, 0x3}, {0x0, 0x1, 0x1, 0x5, 0xffffff01, 0xfff}, {0x7, 0x5, 0x2, 0xa5f, 0x0, 0xfffff9de}, {0x9, 0xffffffff, 0xe6b, 0xb, 0xb, 0x4}, {0x9, 0xffffff11, 0x1, 0x2, 0xff, 0x52e2}, {0x0, 0x1, 0x0, 0x7, 0xdb, 0x6}, {0x7, 0x400, 0x9, 0x8, 0xa, 0x104}, {0x81, 0x8, 0x988, 0x0, 0x0, 0x7}, {0xdc03, 0x7, 0x80, 0x8, 0xfffffff9, 0x4}, {0xa, 0xfffffffe, 0x1, 0x1ff, 0x1ff, 0xc1b7}, {0xa24b, 0x947d, 0x40, 0x4, 0x9, 0x2}, {0x9, 0x401, 0xa89, 0x5ef, 0x9, 0x8}, {0x4, 0x7fff, 0x0, 0x4, 0x7fffffff}, {0x3, 0xb8c, 0x6, 0x21761f6a, 0x1, 0x4}, {0xfff, 0xda, 0x1d, 0x4, 0x8, 0x2}, {0x8, 0x10, 0x100, 0x0, 0xfffffff7, 0xc}, {0xfffff000, 0x8, 0xe96, 0x9, 0x9, 0x34b0}, {0x4, 0x8, 0x8, 0x3, 0x6cf4, 0x1}, {0x3, 0x3, 0x7, 0x5, 0xbe, 0x81}, {0x4, 0x800, 0x4000, 0x5, 0x8, 0xfa2f}, {0x3, 0x8d, 0x81, 0x2, 0x8, 0x6}, {0x9, 0x2, 0x6, 0x4, 0xf, 0x5}, {0x100, 0x1, 0x2, 0xffffffff, 0x9, 0x74}, {0x4, 0x4, 0x8, 0x1, 0x0, 0x3}, {0x8002, 0xfffffffb, 0xffffffff, 0x62f, 0x401, 0x30564e0}, {0x9a2f, 0x800, 0x8, 0x1, 0x80000000}, {0x20000009, 0x2, 0x800, 0x200, 0x9, 0x3}, {0x47, 0x6, 0x8936, 0xdcb, 0x7, 0x2}, {0x6, 0x80000000, 0x8, 0xe, 0xfffffffa, 0x8de3}, {0x0, 0x9, 0x8, 0xfff, 0x6, 0x1ff}, {0x8195, 0x2, 0x1000}, {0x1, 0x50, 0xff, 0x9e0f, 0x5, 0x3}, {0x7fff, 0x6, 0x0, 0x5, 0x8000, 0x3}, {0x7ff, 0x9, 0x9, 0x6, 0x7, 0xe77}, {0x1, 0x5e12, 0x3, 0xfffffffa, 0x2, 0x80000001}, {0xffffff8c, 0x9, 0x1, 0x1, 0x10, 0x5}, {0x7, 0x7, 0x104, 0x78d, 0xffffcff7, 0x9}, {0x1, 0xe, 0x7, 0x2, 0x2, 0x207f}, {0xf, 0x5, 0xfffffffa, 0xff, 0x80004, 0xfff}, {0x1, 0x7ff, 0x696e, 0xa, 0x49d, 0xb}, {0x9bf4, 0x0, 0x5, 0x3, 0x3, 0x1000}], [{0x1, 0x1}, {0x2}, {}, {0x2}, {0x2, 0x745e81639ff0f356}, {0x4, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x3}, {0x2}, {0x3}, {}, {}, {0x2}, {0x2}, {}, {0x3, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x2}, {0x5}, {0x2}, {0x1, 0x1}, {0x1}, {0x1, 0x1}, {0x5}, {0x4}, {0x3, 0x1}, {0x5, 0x1}, {0x36bc5bece03d104f}, {0x4, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {}, {0xa}, {0x3}, {0x3, 0x1}, {0x2}, {0x3}, {0x4, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x2}, {0x4}, {0x4, 0x1}, {0x4, 0x1}, {0x4}, {0x2}, {0x2, 0x1}, {0x5, 0x3}, {0x4, 0x1}, {0x1}, {0x4}, {0x0, 0x1}, {0x2}, {0x1, 0x1}, {0x3, 0x1}, {0x5}, {0x3, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {}, {0x2, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {}, {0x3}, {0x6}, {0xa}, {0x3, 0x1}, {}, {0x5, 0x1}, {0x1}, {0x4}, {0x5}, {0x2590228f88cc2931}, {0x3, 0x1}, {0x4}, {0x0, 0x1}, {0x5, 0x1}, {0x6}, {0x2}, {0xb82e57098c7a44ef}, {0x3, 0x1}, {0x1}, {0x6, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x5}, {0x0, 0x1}, {0x4}, {0x4}, {0x0, 0x1}, {0x2}, {0x4, 0x1}, {0x1}, {0x1, 0x1}, {}, {0x3}, {0x1, 0x1}, {}, {0x4, 0x1}, {0x3}, {0x3}, {0x1}, {0x5}, {0x3, 0x1}, {0x4}, {0x3, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x1}, {0x5, 0x1}, {0x4}, {0x0, 0x1}, {0x3}, {0x1}, {0x0, 0x1}, {0x4}], 0x1}}, @TCA_PEDIT_KEYS_EX={0x4}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0xe90}, 0x1, 0x0, 0x0, 0x10}, 0x0)

0s ago: executing program 0 (id=3011):
r0 = socket(0x2, 0x80805, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000240)=[@in={0x2, 0x4e24, @loopback}], 0x10) (async)
r1 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x1)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x58, 0x10, 0x401, 0x800000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4801, 0x15319}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'bond0\x00'}, @IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0x8}, @IFLA_BOND_MIIMON={0x8, 0x3, 0x9348}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x10, r0, 0xbfb99000) (async)
ioctl$KDFONTOP_SET(r1, 0x4b72, &(0x7f0000000800)={0x0, 0x0, 0xe, 0x1, 0x2e, &(0x7f0000000400)="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"})
r3 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x2, 0xd, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @private1}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast1}}, @sadb_x_policy={0x8, 0x12, 0x1, 0x2, 0x0, 0x0, 0x0, {0x6, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@private1, @in6=@private1}}, @sadb_lifetime={0x4, 0x4}]}, 0xc0}}, 0x0)

kernel console output (not intermixed with test programs):

 read/8, error -71
[  455.548929][ T5704] usb usb2-port1: unable to enumerate USB device
[  456.509922][T13156] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2664'.
[  456.576948][T13158] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2665'.
[  457.225026][  T986] usb 2-1: new high-speed USB device number 73 using dummy_hcd
[  457.372713][ T5349] usb 1-1: new full-speed USB device number 66 using dummy_hcd
[  457.383747][  T986] usb 2-1: New USB device found, idVendor=0846, idProduct=1001, bcdDevice= 1.00
[  457.386270][  T986] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  457.386338][  T986] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[  457.396186][  T986] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  457.396215][  T986] usb 2-1: Product: syz
[  457.396230][  T986] usb 2-1: Manufacturer: syz
[  457.396244][  T986] usb 2-1: SerialNumber: syz
[  457.524350][ T5349] usb 1-1: New USB device found, idVendor=17ef, idProduct=6062, bcdDevice= 0.00
[  457.526275][ T5349] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid maxpacket 1024, setting to 64
[  457.526314][ T5349] usb 1-1: config 0 interface 0 altsetting 2 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[  457.526344][ T5349] usb 1-1: config 0 interface 0 has no altsetting 0
[  457.526381][ T5349] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  457.529239][ T5349] usb 1-1: config 0 descriptor??
[  457.530101][T13170] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22
[  457.530263][T13170] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22
[  457.703006][ T5715] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffff92
[  457.711684][ T5715] udl 3-1:0.0: [drm] Cannot find any crtc or sizes
[  457.720263][ T5715] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffe0
[  457.765282][ T5715] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffe0
[  457.765593][ T5715] udl 3-1:0.0: [drm] Cannot find any crtc or sizes
[  457.771567][  T986] kaweth 2-1:1.0: Firmware present in device.
[  457.822437][ T5715] usb 3-1: USB disconnect, device number 52
[  458.004659][ T5349] lenovo 0003:17EF:6062.002D: unknown main item tag 0x2
[  458.004723][ T5349] lenovo 0003:17EF:6062.002D: unknown main item tag 0x3
[  458.004753][ T5349] lenovo 0003:17EF:6062.002D: unknown main item tag 0x1
[  458.004782][ T5349] lenovo 0003:17EF:6062.002D: unknown main item tag 0x2
[  458.010073][ T5349] lenovo 0003:17EF:6062.002D: hidraw0: USB HID v0.01 Device [HID 17ef:6062] on usb-dummy_hcd.0-1/input0
[  458.058283][  T986] kaweth 2-1:1.0: Error reading configuration (-71), no net device created
[  458.058839][  T986] kaweth 2-1:1.0: probe with driver kaweth failed with error -5
[  458.091673][  T986] usb 2-1: USB disconnect, device number 73
[  458.390787][T13184] syzkaller0: entered promiscuous mode
[  458.390811][T13184] syzkaller0: entered allmulticast mode
[  458.658491][T13189] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2674'.
[  458.658521][T13189] openvswitch: netlink: Flow key attr not present in new flow.
[  458.925964][T13191] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2675'.
[  458.935232][T13170] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  458.935301][T13170] Bluetooth: hci0: Opcode 0x0406 failed: -4
[  459.079070][T13170] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  459.079273][T13170] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  459.079440][T13170] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  459.079606][T13170] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  459.242989][T13202] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2679'.
[  459.360045][ T5349] usb 1-1: USB disconnect, device number 66
[  459.484419][T13209] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  459.490035][T13209] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  459.501088][T13212] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  459.504906][T13212] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  459.522004][   T30] audit: type=1326 audit(1789175483.742:1538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13208 comm="syz.4.2683" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf702f0ec code=0x0
[  459.542184][T13204] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2680'.
[  459.772763][  T986] usb 4-1: new high-speed USB device number 80 using dummy_hcd
[  459.813001][ T3105] usb 2-1: new full-speed USB device number 74 using dummy_hcd
[  459.926471][  T986] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[  459.928690][  T986] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  459.963648][ T3105] usb 2-1: New USB device found, idVendor=0506, idProduct=4601, bcdDevice= 1.00
[  459.965692][ T3105] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10
[  459.965728][ T3105] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[  459.965768][ T3105] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  460.002450][T13219] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2684'.
[  460.031339][  T986] usb 4-1: config 0 descriptor??
[  460.134750][T13222] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2686'.
[  460.134776][T13222] openvswitch: netlink: Flow actions attr not present in new flow.
[  460.215815][T13225] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2687'.
[  460.249808][  T986] udl 4-1:0.0: [drm] Unrecognized vendor firmware descriptor
[  460.373046][ T5682] usb 1-1: new high-speed USB device number 67 using dummy_hcd
[  460.464945][  T986] [drm] Initialized udl 0.0.1 for 4-1:0.0 on minor 1
[  460.464971][  T986] [drm] Initialized udl on minor 1
[  460.522656][ T5682] usb 1-1: Using ep0 maxpacket: 8
[  460.523468][ T5682] usb 1-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=2a.d5
[  460.524772][ T5682] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  460.524822][ T5682] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  460.528195][ T5682] usb 1-1: config 0 descriptor??
[  460.559387][ T5682] uvcvideo 1-1:0.0: probe with driver uvcvideo failed with error -22
[  460.583592][ T5349] usb 3-1: new high-speed USB device number 53 using dummy_hcd
[  460.662811][    C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  460.734547][ T5349] usb 3-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.00
[  460.735887][ T5349] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  460.738527][ T5349] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  460.738551][ T5349] usb 3-1: Product: syz
[  460.738563][ T5349] usb 3-1: Manufacturer: syz
[  460.738576][ T5349] usb 3-1: SerialNumber: syz
[  460.976304][ T5349] usb 3-1: selecting invalid altsetting 1
[  460.976365][ T5349] speedtch 3-1:1.0: speedtch_bind: setting interface to  1 failed (-22)!
[  460.976426][ T5349] speedtch 3-1:1.0: usbatm_usb_probe: bind failed: -22!
[  460.976474][ T5349] speedtch 3-1:1.0: probe with driver speedtch failed with error -22
[  460.983025][ T5612] Bluetooth: hci0: command 0x0406 tx timeout
[  461.021277][T13211] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  461.021984][T13211] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  461.039694][ T3105] pegasus 2-1:1.0: probe with driver pegasus failed with error -71
[  461.056479][ T3105] usb 2-1: USB disconnect, device number 74
[  461.143164][ T5612] Bluetooth: hci4: command 0x0406 tx timeout
[  461.143211][ T5612] Bluetooth: hci2: command 0x0406 tx timeout
[  461.143237][ T4933] Bluetooth: hci1: command 0x0406 tx timeout
[  461.143289][ T5619] Bluetooth: hci3: command 0x0406 tx timeout
[  461.179435][T13229] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  461.180237][T13229] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  461.382482][T13229] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  461.392795][T13229] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  461.419172][ T5349] usb 3-1: selecting invalid altsetting 1
[  461.419200][ T5349] speedtch 3-1:1.1: speedtch_bind: setting interface to  1 failed (-22)!
[  461.419765][ T5349] speedtch 3-1:1.1: usbatm_usb_probe: bind failed: -22!
[  461.419815][ T5349] speedtch 3-1:1.1: probe with driver speedtch failed with error -22
[  461.421098][ T5682] usb 1-1: USB disconnect, device number 67
[  461.469350][ T5349] usb 3-1: USB disconnect, device number 53
[  462.042740][ T5682] usb 2-1: new full-speed USB device number 75 using dummy_hcd
[  462.203303][ T5682] usb 2-1: New USB device found, idVendor=17ef, idProduct=6062, bcdDevice= 0.00
[  462.204479][ T5682] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid maxpacket 1024, setting to 64
[  462.204500][ T5682] usb 2-1: config 0 interface 0 altsetting 2 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[  462.204547][ T5682] usb 2-1: config 0 interface 0 has no altsetting 0
[  462.204581][ T5682] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  462.209357][ T5682] usb 2-1: config 0 descriptor??
[  462.210154][T13241] raw-gadget.4 gadget.1: fail, usb_ep_enable returned -22
[  462.210264][T13241] raw-gadget.4 gadget.1: fail, usb_ep_enable returned -22
[  462.242849][ T5715] usb 3-1: new low-speed USB device number 54 using dummy_hcd
[  462.394780][ T5715] usb 3-1: Invalid ep0 maxpacket: 16
[  462.542990][ T5715] usb 3-1: new low-speed USB device number 55 using dummy_hcd
[  462.629033][ T5682] lenovo 0003:17EF:6062.002E: unknown main item tag 0x2
[  462.629063][ T5682] lenovo 0003:17EF:6062.002E: unknown main item tag 0x3
[  462.629081][ T5682] lenovo 0003:17EF:6062.002E: unknown main item tag 0x1
[  462.629133][ T5682] lenovo 0003:17EF:6062.002E: unknown main item tag 0x2
[  462.632025][ T5682] lenovo 0003:17EF:6062.002E: hidraw0: USB HID v0.01 Device [HID 17ef:6062] on usb-dummy_hcd.1-1/input0
[  462.692731][ T5715] usb 3-1: Invalid ep0 maxpacket: 16
[  462.693047][ T5715] usb usb3-port1: attempt power cycle
[  463.010382][T13241] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  463.010583][T13241] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  463.010750][T13241] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  463.010916][T13241] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  463.011074][T13241] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  463.011766][T13241] Bluetooth: hci4: Opcode 0x0406 failed: -4
[  463.052743][ T5715] usb 3-1: new low-speed USB device number 56 using dummy_hcd
[  463.078232][ T5715] usb 3-1: Invalid ep0 maxpacket: 16
[  463.173560][ T5682] usb 2-1: USB disconnect, device number 75
[  463.208646][ T5715] usb 3-1: new low-speed USB device number 57 using dummy_hcd
[  463.224258][ T5715] usb 3-1: Invalid ep0 maxpacket: 16
[  463.224609][ T5715] usb usb3-port1: unable to enumerate USB device
[  463.286242][T13254] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2699'.
[  463.416905][T13258] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2701'.
[  463.538672][T13266] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  463.539153][T13266] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  463.759316][T13271] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2704'.
[  464.476421][T13281] FAULT_INJECTION: forcing a failure.
[  464.476421][T13281] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  464.476458][T13281] CPU: 0 UID: 0 PID: 13281 Comm: syz.1.2708 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  464.476482][T13281] Tainted: [L]=SOFTLOCKUP
[  464.476490][T13281] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  464.476502][T13281] Call Trace:
[  464.476511][T13281]  <TASK>
[  464.476520][T13281]  dump_stack_lvl+0xe8/0x150
[  464.476552][T13281]  should_fail_ex+0x410/0x560
[  464.476580][T13281]  _copy_from_iter+0x1d3/0x1660
[  464.476602][T13281]  ? __alloc_skb+0x27a/0x7a0
[  464.476622][T13281]  ? __alloc_skb+0x27a/0x7a0
[  464.476645][T13281]  ? __alloc_skb+0x27a/0x7a0
[  464.476666][T13281]  ? __pfx__copy_from_iter+0x10/0x10
[  464.476686][T13281]  ? kmem_cache_alloc_node_noprof+0x1f9/0x610
[  464.476715][T13281]  ? __alloc_skb+0x27a/0x7a0
[  464.476734][T13281]  ? __alloc_skb+0x27a/0x7a0
[  464.476757][T13281]  ? netlink_sendmsg+0x650/0xb40
[  464.476784][T13281]  ? skb_put+0x112/0x210
[  464.476808][T13281]  netlink_sendmsg+0x6c0/0xb40
[  464.476845][T13281]  ? __pfx_netlink_sendmsg+0x10/0x10
[  464.476872][T13281]  ? apparmor_socket_sendmsg+0x98/0x360
[  464.476887][T13281]  ? __pfx_netlink_sendmsg+0x10/0x10
[  464.476901][T13281]  sock_sendmsg_nosec+0x13a/0x180
[  464.476927][T13281]  ____sys_sendmsg+0x54e/0x850
[  464.476957][T13281]  ? __pfx_____sys_sendmsg+0x10/0x10
[  464.476996][T13281]  ___sys_sendmsg+0x2a5/0x360
[  464.477020][T13281]  ? __lock_acquire+0x747/0x2de0
[  464.477041][T13281]  ? __pfx____sys_sendmsg+0x10/0x10
[  464.477054][T13281]  ? get_pid_task+0x20/0x1f0
[  464.477065][T13281]  ? get_pid_task+0x20/0x1f0
[  464.477073][T13281]  ? get_pid_task+0x20/0x1f0
[  464.477115][T13281]  ? __fget_files+0x2a/0x420
[  464.477141][T13281]  ? __fget_files+0x3a2/0x420
[  464.477177][T13281]  __sys_sendmsg+0x177/0x240
[  464.477203][T13281]  ? __pfx___sys_sendmsg+0x10/0x10
[  464.477229][T13281]  __do_fast_syscall_32+0x27a/0x6a0
[  464.477263][T13281]  ? do_fast_syscall_32+0x33/0x70
[  464.477286][T13281]  ? asm_int80_emulation+0x1a/0x20
[  464.477305][T13281]  ? do_int80_emulation+0x299/0x500
[  464.477326][T13281]  ? trace_irq_disable+0x3b/0x140
[  464.477350][T13281]  do_fast_syscall_32+0x33/0x70
[  464.477376][T13281]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  464.477399][T13281] RIP: 0023:0xf7f860ec
[  464.477419][T13281] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8
[  464.477436][T13281] RSP: 002b:00000000f544650c EFLAGS: 00000206 ORIG_RAX: 0000000000000172
[  464.477458][T13281] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000000
[  464.477472][T13281] RDX: 0000000000048000 RSI: 0000000000000000 RDI: 0000000000000000
[  464.477479][T13281] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  464.477485][T13281] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  464.477491][T13281] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  464.477505][T13281]  </TASK>
[  464.892785][ T5682] usb 2-1: new high-speed USB device number 76 using dummy_hcd
[  465.055410][ T5682] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[  465.057390][ T5682] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  465.066359][ T5612] Bluetooth: hci0: command 0x0406 tx timeout
[  465.066400][ T5612] Bluetooth: hci4: command 0x0406 tx timeout
[  465.066428][ T5612] Bluetooth: hci3: command 0x0406 tx timeout
[  465.066455][ T5612] Bluetooth: hci2: command 0x0406 tx timeout
[  465.066497][ T5612] Bluetooth: hci1: command 0x0406 tx timeout
[  465.079692][ T5682] usb 2-1: config 0 descriptor??
[  465.216351][T13289] nvme nvme0: rdma connection establishment failed (-104)
[  465.364040][T13295] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined
[  465.391613][T13298] FAULT_INJECTION: forcing a failure.
[  465.391613][T13298] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  465.391638][T13298] CPU: 1 UID: 0 PID: 13298 Comm: syz.2.2715 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  465.391654][T13298] Tainted: [L]=SOFTLOCKUP
[  465.391658][T13298] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  465.391666][T13298] Call Trace:
[  465.391671][T13298]  <TASK>
[  465.391678][T13298]  dump_stack_lvl+0xe8/0x150
[  465.391700][T13298]  should_fail_ex+0x410/0x560
[  465.391719][T13298]  _copy_from_user+0x2d/0xb0
[  465.391734][T13298]  vmci_host_unlocked_ioctl+0xbde/0x2850
[  465.391755][T13298]  ? __pfx_vmci_host_unlocked_ioctl+0x10/0x10
[  465.391782][T13298]  ? kasan_quarantine_put+0xbb/0x1f0
[  465.391799][T13298]  ? tomoyo_path_number_perm+0x219/0x5f0
[  465.391812][T13298]  ? tomoyo_path_number_perm+0x219/0x5f0
[  465.391825][T13298]  ? do_vfs_ioctl+0x116f/0x1530
[  465.391838][T13298]  ? __pfx_do_vfs_ioctl+0x10/0x10
[  465.391856][T13298]  ? hook_file_ioctl_compat+0x1f2/0x600
[  465.391869][T13298]  ? trace_irq_disable+0x3b/0x140
[  465.391890][T13298]  ? lock_release+0x2e1/0x3c0
[  465.391904][T13298]  ? __fget_files+0x3a2/0x420
[  465.391919][T13298]  ? __fget_files+0x2a/0x420
[  465.391935][T13298]  ? bpf_lsm_file_ioctl_compat+0x9/0x20
[  465.391953][T13298]  __ia32_compat_sys_ioctl+0x5ea/0x950
[  465.391967][T13298]  ? __pfx___ia32_compat_sys_ioctl+0x10/0x10
[  465.391979][T13298]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  465.391993][T13298]  ? __fget_files+0x3a2/0x420
[  465.392010][T13298]  ? fput+0xa0/0xd0
[  465.392024][T13298]  ? ksys_write+0x242/0x270
[  465.392045][T13298]  __do_fast_syscall_32+0x27a/0x6a0
[  465.392058][T13298]  ? do_fast_syscall_32+0x33/0x70
[  465.392070][T13298]  ? asm_int80_emulation+0x1a/0x20
[  465.392081][T13298]  ? do_int80_emulation+0x299/0x500
[  465.392092][T13298]  ? trace_irq_disable+0x3b/0x140
[  465.392105][T13298]  do_fast_syscall_32+0x33/0x70
[  465.392118][T13298]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  465.392131][T13298] RIP: 0023:0xf703f0ec
[  465.392143][T13298] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8
[  465.392152][T13298] RSP: 002b:00000000f542d50c EFLAGS: 00000206 ORIG_RAX: 0000000000000036
[  465.392165][T13298] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000000007a5
[  465.392173][T13298] RDX: 0000000080000140 RSI: 0000000000000000 RDI: 0000000000000000
[  465.392180][T13298] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  465.392186][T13298] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  465.392192][T13298] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  465.392215][T13298]  </TASK>
[  465.529946][ T5682] udl 2-1:0.0: [drm] Unrecognized vendor firmware descriptor
[  465.531053][ T5682] [drm:udl_init] *ERROR* Selecting channel failed
[  465.557995][  T986] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffff92
[  465.577410][  T986] udl 4-1:0.0: [drm] Cannot find any crtc or sizes
[  465.578098][ T5715] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffe0
[  465.637570][ T5715] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffe0
[  465.637794][ T5715] udl 4-1:0.0: [drm] Cannot find any crtc or sizes
[  465.744214][ T5682] [drm] Initialized udl 0.0.1 for 2-1:0.0 on minor 2
[  465.744241][ T5682] [drm] Initialized udl on minor 2
[  465.755022][ T5715] usb 4-1: USB disconnect, device number 80
[  465.763502][ T5682] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  465.763993][ T5682] udl 2-1:0.0: [drm] Cannot find any crtc or sizes
[  465.807296][ T5682] usb 2-1: USB disconnect, device number 76
[  465.821296][  T986] udl 2-1:0.0: [drm] Cannot find any crtc or sizes
[  465.928971][T13305] netlink: 'syz.2.2717': attribute type 1 has an invalid length.
[  465.928999][T13305] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  466.039749][T13308] FAULT_INJECTION: forcing a failure.
[  466.039749][T13308] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  466.039775][T13308] CPU: 1 UID: 0 PID: 13308 Comm: syz.3.2719 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  466.039791][T13308] Tainted: [L]=SOFTLOCKUP
[  466.039795][T13308] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  466.039803][T13308] Call Trace:
[  466.039808][T13308]  <TASK>
[  466.039813][T13308]  dump_stack_lvl+0xe8/0x150
[  466.039833][T13308]  should_fail_ex+0x410/0x560
[  466.039848][T13308]  _copy_from_iter+0x1d3/0x1660
[  466.039860][T13308]  ? __alloc_skb+0x27a/0x7a0
[  466.039874][T13308]  ? __alloc_skb+0x27a/0x7a0
[  466.039886][T13308]  ? __alloc_skb+0x27a/0x7a0
[  466.039897][T13308]  ? __pfx__copy_from_iter+0x10/0x10
[  466.039910][T13308]  ? kmem_cache_alloc_node_noprof+0x1f9/0x610
[  466.039926][T13308]  ? __alloc_skb+0x27a/0x7a0
[  466.039937][T13308]  ? __alloc_skb+0x27a/0x7a0
[  466.039951][T13308]  ? netlink_sendmsg+0x650/0xb40
[  466.039966][T13308]  ? skb_put+0x112/0x210
[  466.039979][T13308]  netlink_sendmsg+0x6c0/0xb40
[  466.040036][T13308]  ? __pfx_netlink_sendmsg+0x10/0x10
[  466.040055][T13308]  ? apparmor_socket_sendmsg+0x98/0x360
[  466.040068][T13308]  ? __pfx_netlink_sendmsg+0x10/0x10
[  466.040082][T13308]  sock_sendmsg_nosec+0x13a/0x180
[  466.040100][T13308]  ____sys_sendmsg+0x54e/0x850
[  466.040116][T13308]  ? __pfx_____sys_sendmsg+0x10/0x10
[  466.040136][T13308]  ___sys_sendmsg+0x2a5/0x360
[  466.040149][T13308]  ? __lock_acquire+0x747/0x2de0
[  466.040169][T13308]  ? __pfx____sys_sendmsg+0x10/0x10
[  466.040182][T13308]  ? get_pid_task+0x20/0x1f0
[  466.040192][T13308]  ? get_pid_task+0x20/0x1f0
[  466.040201][T13308]  ? get_pid_task+0x20/0x1f0
[  466.040225][T13308]  ? __fget_files+0x2a/0x420
[  466.040239][T13308]  ? __fget_files+0x3a2/0x420
[  466.040258][T13308]  __sys_sendmsg+0x177/0x240
[  466.040272][T13308]  ? __pfx___sys_sendmsg+0x10/0x10
[  466.040294][T13308]  __do_fast_syscall_32+0x27a/0x6a0
[  466.040307][T13308]  ? do_fast_syscall_32+0x33/0x70
[  466.040319][T13308]  ? asm_int80_emulation+0x1a/0x20
[  466.040329][T13308]  ? do_int80_emulation+0x299/0x500
[  466.040340][T13308]  ? trace_irq_disable+0x3b/0x140
[  466.040353][T13308]  do_fast_syscall_32+0x33/0x70
[  466.040364][T13308]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  466.040377][T13308] RIP: 0023:0xf700f0ec
[  466.040388][T13308] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8
[  466.040397][T13308] RSP: 002b:00000000f53fd50c EFLAGS: 00000206 ORIG_RAX: 0000000000000172
[  466.040410][T13308] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000040
[  466.040418][T13308] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  466.040424][T13308] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  466.040430][T13308] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  466.040436][T13308] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  466.040451][T13308]  </TASK>
[  466.490599][T13311] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2720'.
[  466.490628][T13311] openvswitch: netlink: Flow actions attr not present in new flow.
[  466.884476][ T5612] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  466.900468][ T5612] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  466.912819][ T5612] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  466.922412][ T5612] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  466.937605][ T5612] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  466.953416][T13322] FAULT_INJECTION: forcing a failure.
[  466.953416][T13322] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  466.953451][T13322] CPU: 1 UID: 0 PID: 13322 Comm: syz.2.2723 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  466.953477][T13322] Tainted: [L]=SOFTLOCKUP
[  466.953485][T13322] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  466.953497][T13322] Call Trace:
[  466.953505][T13322]  <TASK>
[  466.953516][T13322]  dump_stack_lvl+0xe8/0x150
[  466.953549][T13322]  should_fail_ex+0x410/0x560
[  466.953583][T13322]  _copy_from_user+0x2d/0xb0
[  466.953608][T13322]  get_compat_msghdr+0xb3/0x4c0
[  466.953639][T13322]  ? __pfx_get_compat_msghdr+0x10/0x10
[  466.953676][T13322]  ___sys_sendmsg+0x201/0x360
[  466.953700][T13322]  ? __lock_acquire+0x747/0x2de0
[  466.953724][T13322]  ? __pfx____sys_sendmsg+0x10/0x10
[  466.953747][T13322]  ? get_pid_task+0x20/0x1f0
[  466.953765][T13322]  ? get_pid_task+0x20/0x1f0
[  466.953780][T13322]  ? get_pid_task+0x20/0x1f0
[  466.953825][T13322]  ? __fget_files+0x2a/0x420
[  466.953850][T13322]  ? __fget_files+0x3a2/0x420
[  466.953883][T13322]  __sys_sendmsg+0x177/0x240
[  466.953910][T13322]  ? __pfx___sys_sendmsg+0x10/0x10
[  466.953950][T13322]  __do_fast_syscall_32+0x27a/0x6a0
[  466.953974][T13322]  ? do_fast_syscall_32+0x33/0x70
[  466.953994][T13322]  ? asm_int80_emulation+0x1a/0x20
[  466.954013][T13322]  ? do_int80_emulation+0x299/0x500
[  466.954033][T13322]  ? trace_irq_disable+0x3b/0x140
[  466.954057][T13322]  do_fast_syscall_32+0x33/0x70
[  466.954077][T13322]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  466.954100][T13322] RIP: 0023:0xf703f0ec
[  466.954118][T13322] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8
[  466.954136][T13322] RSP: 002b:00000000f540c50c EFLAGS: 00000206 ORIG_RAX: 0000000000000172
[  466.954157][T13322] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000080000300
[  466.954170][T13322] RDX: 0000000024040884 RSI: 0000000000000000 RDI: 0000000000000000
[  466.954182][T13322] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  466.954194][T13322] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  466.954206][T13322] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  466.954233][T13322]  </TASK>
[  467.142903][   T52] Bluetooth: hci4: command 0x0406 tx timeout
[  467.414485][T13330] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2726'.
[  468.315392][ T5715] usb 2-1: new high-speed USB device number 77 using dummy_hcd
[  468.446804][T13346] netlink: 'syz.4.2729': attribute type 1 has an invalid length.
[  468.446864][T13346] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  468.505520][ T5715] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[  468.507833][ T5715] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  468.539233][ T5715] usb 2-1: config 0 descriptor??
[  468.768623][ T5715] udl 2-1:0.0: [drm] Unrecognized vendor firmware descriptor
[  468.871353][ T8536] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  468.983243][   T52] Bluetooth: hci5: command tx timeout
[  469.009883][ T5715] [drm] Initialized udl 0.0.1 for 2-1:0.0 on minor 1
[  469.009928][ T5715] [drm] Initialized udl on minor 1
[  469.289477][ T8536] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  469.346866][T13361] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2733'.
[  469.346892][T13361] openvswitch: netlink: Flow actions attr not present in new flow.
[  469.465790][ T8536] team0: Port device netdevsim1 removed
[  469.478963][ T8536] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  469.657354][T13368] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  469.658280][T13368] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  469.884775][ T8536] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  470.018451][T13323] bridge0: port 1(bridge_slave_0) entered blocking state
[  470.018657][T13323] bridge0: port 1(bridge_slave_0) entered disabled state
[  470.019433][T13323] bridge_slave_0: entered allmulticast mode
[  470.037493][T13323] bridge_slave_0: entered promiscuous mode
[  470.055900][T13323] bridge0: port 2(bridge_slave_1) entered blocking state
[  470.056024][T13323] bridge0: port 2(bridge_slave_1) entered disabled state
[  470.056181][T13323] bridge_slave_1: entered allmulticast mode
[  470.057409][   T30] audit: type=1326 audit(1789175494.292:1539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13377 comm="syz.4.2738" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702f0ec code=0x7ffc0000
[  470.057700][   T30] audit: type=1326 audit(1789175494.292:1540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13377 comm="syz.4.2738" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702f0ec code=0x7ffc0000
[  470.058090][   T30] audit: type=1326 audit(1789175494.292:1541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13377 comm="syz.4.2738" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf702f0ec code=0x7ffc0000
[  470.058441][   T30] audit: type=1326 audit(1789175494.292:1542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13377 comm="syz.4.2738" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702f0ec code=0x7ffc0000
[  470.058706][   T30] audit: type=1326 audit(1789175494.292:1543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13377 comm="syz.4.2738" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702f0ec code=0x7ffc0000
[  470.058909][   T30] audit: type=1326 audit(1789175494.292:1544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13377 comm="syz.4.2738" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf702f0ec code=0x7ffc0000
[  470.059536][   T30] audit: type=1326 audit(1789175494.292:1545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13377 comm="syz.4.2738" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702f0ec code=0x7ffc0000
[  470.059792][   T30] audit: type=1326 audit(1789175494.292:1546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13377 comm="syz.4.2738" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702f0ec code=0x7ffc0000
[  470.068443][T13323] bridge_slave_1: entered promiscuous mode
[  470.273214][T13323] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  470.311523][T13323] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  470.495278][T13323] team0: Port device team_slave_0 added
[  470.506855][T13385] netlink: 'syz.4.2740': attribute type 1 has an invalid length.
[  470.506891][T13385] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  470.574752][T13323] team0: Port device team_slave_1 added
[  470.853427][T13323] batman_adv: batadv0: Adding interface: batadv_slave_0
[  470.853441][T13323] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  470.853457][T13323] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  470.983492][T13323] batman_adv: batadv0: Adding interface: batadv_slave_1
[  470.983876][T13323] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  470.983945][T13323] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  471.002878][ T5682] usb 3-1: new high-speed USB device number 58 using dummy_hcd
[  471.064675][   T52] Bluetooth: hci5: command tx timeout
[  471.158057][ T5682] usb 3-1: New USB device found, idVendor=045e, idProduct=00f9, bcdDevice= 0.00
[  471.160338][ T5682] usb 3-1: config 0 has an invalid descriptor of length 162, skipping remainder of the config
[  471.160383][ T5682] usb 3-1: config 0 interface 0 altsetting 8 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  471.160402][ T5682] usb 3-1: config 0 interface 0 has no altsetting 0
[  471.162075][ T5682] usb 3-1: New USB device strings: Mfr=12, Product=0, SerialNumber=0
[  471.162093][ T5682] usb 3-1: Manufacturer: syz
[  471.178670][ T5682] usb 3-1: config 0 descriptor??
[  471.227763][ T5682] usbhid 3-1:0.0: couldn't find an input interrupt endpoint
[  471.309504][ T8536] bridge_slave_1: left allmulticast mode
[  471.311427][ T8536] bridge_slave_1: left promiscuous mode
[  471.317773][ T8536] bridge0: port 2(bridge_slave_1) entered disabled state
[  471.332052][ T8536] bridge_slave_0: left allmulticast mode
[  471.332071][ T8536] bridge_slave_0: left promiscuous mode
[  471.332242][ T8536] bridge0: port 1(bridge_slave_0) entered disabled state
[  471.384160][ T8536] batman_adv: batadv0: Interface deactivated: gretap1
[  471.940005][ T8536] gretap0 (unregistering): left promiscuous mode
[  471.984863][ T8536] batman_adv: batadv0: Removing interface: gretap1
[  471.993657][ T8536] batman_adv: batadv0: Removing interface: gretap2
[  472.059685][ T8536] bond4 (unregistering): (slave gre1): Releasing backup interface
[  472.062064][ T8536] gre1 (unregistering): left promiscuous mode
[  472.245033][ T8536] bond0 (unregistering): left promiscuous mode
[  472.245056][ T8536] bond_slave_0: left promiscuous mode
[  472.245289][ T8536] bond_slave_1: left promiscuous mode
[  472.282073][ T8536] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  472.301319][ T8536] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  472.312071][ T8536] bond0 (unregistering): Released all slaves
[  472.346444][ T8536] bond1 (unregistering): Released all slaves
[  472.389242][ T8536] bond2 (unregistering): Released all slaves
[  472.437405][ T8536] bond3 (unregistering): (slave veth0_to_bond): Releasing active interface
[  472.437437][ T8536] veth0_to_bond: left promiscuous mode
[  472.437615][ T8536] veth0_to_bond: left allmulticast mode
[  472.466494][ T8536] bond3 (unregistering): Released all slaves
[  472.507895][ T8536] bond4 (unregistering): Released all slaves
[  472.560278][ T8536] bond5 (unregistering): Released all slaves
[  472.598191][ T8536] bond6 (unregistering): Released all slaves
[  472.728353][T13323] hsr_slave_0: entered promiscuous mode
[  472.736373][T13323] hsr_slave_1: entered promiscuous mode
[  472.739243][T13323] debugfs: 'hsr0' already exists in 'hsr'
[  472.739268][T13323] Cannot create hsr debugfs directory
[  473.142882][   T52] Bluetooth: hci5: command tx timeout
[  473.143605][ T8536] tipc: Disabling bearer <eth:syzkaller0>
[  473.148627][ T8536] tipc: Left network mode
[  473.148905][T13404] netlink: 92 bytes leftover after parsing attributes in process `syz.4.2745'.
[  474.023372][ T5715] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffff92
[  474.023899][ T5715] udl 2-1:0.0: [drm] Cannot find any crtc or sizes
[  474.137126][T13417] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  474.159881][ T5715] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffe0
[  474.162155][ T5715] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffe0
[  474.207836][ T5715] udl 2-1:0.0: [drm] Cannot find any crtc or sizes
[  474.215686][ T5715] usb 2-1: USB disconnect, device number 77
[  474.330425][ T1234] usb 3-1: USB disconnect, device number 58
[  474.494960][ T5278] 8021q: adding VLAN 0 to HW filter on device eth1
[  474.645493][T13428] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  474.743445][ T5715] wlan1: authenticate with 08:02:11:00:00:00 (local address=08:02:11:00:00:01)
[  474.748619][ T5715] wlan1: send auth to 08:02:11:00:00:00 (try 1/3)
[  474.764390][  T150] wlan1: send auth to 08:02:11:00:00:00 (try 2/3)
[  474.764758][  T150] wlan1: send auth to 08:02:11:00:00:00 (try 3/3)
[  474.764876][  T150] wlan1: authentication with 08:02:11:00:00:00 timed out
[  475.222870][   T52] Bluetooth: hci5: command tx timeout
[  475.496866][T13459] binder: binder_mmap: 13457 80000000-80003000 bad vm_flags failed -1
[  475.754968][T13450] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  475.837232][ T8536] hsr_slave_0: left promiscuous mode
[  475.838088][ T8536] hsr_slave_1: left promiscuous mode
[  475.839066][ T8536] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  475.839088][ T8536] batman_adv: batadv0: Removing interface: batadv_slave_0
[  475.912141][T13462] kvm: pic: single mode not supported
[  475.912249][T13462] kvm: pic: level sensitive irq not supported
[  475.945550][T13466] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2753'.
[  476.026638][    C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  476.049224][ T8536] veth1_macvtap: left promiscuous mode
[  476.049353][ T8536] veth0_macvtap: left promiscuous mode
[  476.049534][ T8536] veth1_vlan: left promiscuous mode
[  476.049632][ T8536] veth0_vlan: left promiscuous mode
[  476.078979][T13472] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2753'.
[  477.295822][ T8536] team0 (unregistering): Port device team_slave_1 removed
[  477.335243][ T8536] team0 (unregistering): Port device team_slave_0 removed
[  477.852791][ T5715] usb 3-1: new high-speed USB device number 59 using dummy_hcd
[  477.922744][ T5704] usb 4-1: new high-speed USB device number 81 using dummy_hcd
[  478.006526][ T5715] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[  478.008185][ T5715] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  478.017436][ T5715] usb 3-1: config 0 descriptor??
[  478.073125][ T5704] usb 4-1: Using ep0 maxpacket: 16
[  478.073837][ T5704] usb 4-1: New USB device found, idVendor=046d, idProduct=c20e, bcdDevice= 0.00
[  478.075428][ T5704] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  478.075479][ T5704] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  478.078328][ T5704] usb 4-1: config 0 descriptor??
[  478.101776][T13512] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  478.101822][T13512] Bluetooth: hci1: Error when powering off device on rfkill (-4)
[  478.234836][ T5715] udl 3-1:0.0: [drm] Unrecognized vendor firmware descriptor
[  478.387491][T13512] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  478.387530][T13512] Bluetooth: hci2: Error when powering off device on rfkill (-4)
[  478.399219][T13323] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  478.447665][T13512] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  478.447689][T13512] Bluetooth: hci3: Error when powering off device on rfkill (-4)
[  478.460071][T13512] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  478.460091][T13512] Bluetooth: hci4: Error when powering off device on rfkill (-4)
[  478.537141][T13512] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  478.537169][T13512] Bluetooth: hci5: Error when powering off device on rfkill (-4)
[  478.565069][T13323] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  478.577632][T13323] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  478.616163][ T5715] [drm] Initialized udl 0.0.1 for 3-1:0.0 on minor 1
[  478.616188][ T5715] [drm] Initialized udl on minor 1
[  478.719601][T13323] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  478.818637][T13526] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  478.819165][T13526] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  478.862844][T13526] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  478.863324][T13526] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  478.976769][T13323] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  478.992256][ T5704] logitech 0003:046D:C20E.002F: rdesc size test failed for formula gp
[  478.996220][ T5704] logitech 0003:046D:C20E.002F: unknown main item tag 0x0
[  478.996262][ T5704] logitech 0003:046D:C20E.002F: unknown main item tag 0x0
[  478.996293][ T5704] logitech 0003:046D:C20E.002F: unknown main item tag 0x0
[  478.996321][ T5704] logitech 0003:046D:C20E.002F: unknown main item tag 0x0
[  478.996347][ T5704] logitech 0003:046D:C20E.002F: unknown main item tag 0x0
[  478.996372][ T5704] logitech 0003:046D:C20E.002F: unknown main item tag 0x0
[  478.996399][ T5704] logitech 0003:046D:C20E.002F: unknown main item tag 0x0
[  478.996425][ T5704] logitech 0003:046D:C20E.002F: unknown main item tag 0x0
[  478.996449][ T5704] logitech 0003:046D:C20E.002F: unknown main item tag 0x0
[  478.996474][ T5704] logitech 0003:046D:C20E.002F: unknown main item tag 0x0
[  479.073184][T13323] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  479.102259][T13323] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  479.119873][ T5704] logitech 0003:046D:C20E.002F: hidraw0: USB HID v0.0a Device [HID 046d:c20e] on usb-dummy_hcd.3-1/input0
[  479.170699][ T5704] usb 4-1: USB disconnect, device number 81
[  479.209208][T13323] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  479.521871][T13533] fido_id[13533]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory
[  479.574206][T13545] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2764'.
[  479.934437][T13551] netlink: 100 bytes leftover after parsing attributes in process `syz.4.2766'.
[  479.934465][T13551] netlink: 100 bytes leftover after parsing attributes in process `syz.4.2766'.
[  480.275388][T13323] 8021q: adding VLAN 0 to HW filter on device bond0
[  480.471192][T13323] 8021q: adding VLAN 0 to HW filter on device team0
[  480.505993][  T150] bridge0: port 1(bridge_slave_0) entered blocking state
[  480.506104][  T150] bridge0: port 1(bridge_slave_0) entered forwarding state
[  480.569882][  T150] bridge0: port 2(bridge_slave_1) entered blocking state
[  480.569992][  T150] bridge0: port 2(bridge_slave_1) entered forwarding state
[  480.731606][T13563] netlink: 290 bytes leftover after parsing attributes in process `syz.3.2770'.
[  480.996154][T13323] 8021q: adding VLAN 0 to HW filter on device batadv0
[  481.136483][T13323] veth0_vlan: entered promiscuous mode
[  481.191848][T13323] veth1_vlan: entered promiscuous mode
[  481.305953][T13323] veth0_macvtap: entered promiscuous mode
[  481.355031][T13323] veth1_macvtap: entered promiscuous mode
[  481.571841][T13323] batman_adv: batadv0: Interface activated: batadv_slave_0
[  481.635024][T13323] batman_adv: batadv0: Interface activated: batadv_slave_1
[  481.886893][ T2213] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  481.886948][ T2213] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  481.886986][ T2213] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  481.887014][ T2213] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  482.284914][ T2213] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  482.285154][ T2213] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  482.402548][ T1016] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  482.402571][ T1016] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  482.573494][ T5704] usb 4-1: new low-speed USB device number 82 using dummy_hcd
[  482.724848][ T5704] usb 4-1: unable to get BOS descriptor or descriptor too short
[  482.724900][ T5704] usb 4-1: New USB device found, idVendor=0763, idProduct=2080, bcdDevice= 0.40
[  482.727191][ T5704] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  482.727217][ T5704] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  482.731846][ T5704] usb 4-1: string descriptor 0 read error: -22
[  482.732007][ T5704] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  483.313000][ T5704] usb 4-1: USB disconnect, device number 82
[  483.626840][ T5715] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffff92
[  483.627369][ T5715] udl 3-1:0.0: [drm] Cannot find any crtc or sizes
[  483.632048][ T5715] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffe0
[  483.769408][ T5715] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffe0
[  483.769640][ T5715] udl 3-1:0.0: [drm] Cannot find any crtc or sizes
[  483.771207][ T5715] usb 3-1: USB disconnect, device number 59
[  484.166413][T13610] netlink: 'syz.4.2777': attribute type 10 has an invalid length.
[  484.313152][T13615] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2779'.
[  484.392798][ T5715] usb 1-1: new high-speed USB device number 68 using dummy_hcd
[  484.399286][T13617] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  484.399805][T13617] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  484.542645][ T5715] usb 1-1: Using ep0 maxpacket: 16
[  484.543429][ T5715] usb 1-1: New USB device found, idVendor=041e, idProduct=4018, bcdDevice=ed.b4
[  484.547967][ T5715] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  484.547996][ T5715] usb 1-1: Product: syz
[  484.548010][ T5715] usb 1-1: Manufacturer: syz
[  484.548024][ T5715] usb 1-1: SerialNumber: syz
[  484.593590][ T5715] usb 1-1: config 0 descriptor??
[  484.609033][ T5715] gspca_main: spca508-2.14.0 probing 041e:4018
[  484.798306][ T5715] gspca_spca508: reg_read err -32
[  484.856435][ T5715] gspca_spca508: reg_read err -32
[  484.897499][T13625] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  485.071536][ T5715] gspca_spca508: reg_read err -71
[  485.071903][ T5715] gspca_spca508: reg_read err -71
[  485.072295][ T5715] gspca_spca508: reg write: error -71
[  485.072475][ T5715] spca508 1-1:0.0: probe with driver spca508 failed with error -71
[  485.104783][ T5715] usb 1-1: USB disconnect, device number 68
[  485.315435][T13632] netlink: 'syz.3.2784': attribute type 11 has an invalid length.
[  485.410352][T13637] netlink: 92 bytes leftover after parsing attributes in process `syz.1.2785'.
[  485.511997][T13634] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  485.560585][T13634] 8021q: adding VLAN 0 to HW filter on device bond2
[  485.589297][T13634] 8021q: adding VLAN 0 to HW filter on device bond3
[  485.595236][T13634] 8021q: adding VLAN 0 to HW filter on device bond4
[  485.614326][T13634] A link change request failed with some changes committed already. Interface geneve2 may have been left with an inconsistent configuration, please check.
[  485.845284][T13649] FAULT_INJECTION: forcing a failure.
[  485.845284][T13649] name failslab, interval 1, probability 0, space 0, times 0
[  485.845320][T13649] CPU: 0 UID: 0 PID: 13649 Comm: syz.0.2788 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  485.845347][T13649] Tainted: [L]=SOFTLOCKUP
[  485.845354][T13649] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  485.845365][T13649] Call Trace:
[  485.845374][T13649]  <TASK>
[  485.845382][T13649]  dump_stack_lvl+0xe8/0x150
[  485.845414][T13649]  should_fail_ex+0x410/0x560
[  485.845440][T13649]  should_failslab+0xa8/0x100
[  485.845464][T13649]  ? skb_clone+0x212/0x3a0
[  485.845487][T13649]  kmem_cache_alloc_noprof+0xa1/0x600
[  485.845519][T13649]  ? skb_clone+0x212/0x3a0
[  485.845552][T13649]  skb_clone+0x212/0x3a0
[  485.845580][T13649]  __netlink_deliver_tap+0x413/0x860
[  485.845619][T13649]  ? netlink_deliver_tap+0x2e/0x1b0
[  485.845645][T13649]  netlink_deliver_tap+0x19c/0x1b0
[  485.845671][T13649]  netlink_unicast+0x781/0x940
[  485.845706][T13649]  netlink_sendmsg+0x813/0xb40
[  485.845743][T13649]  ? __pfx_netlink_sendmsg+0x10/0x10
[  485.845775][T13649]  ? apparmor_socket_sendmsg+0x98/0x360
[  485.845798][T13649]  ? __pfx_netlink_sendmsg+0x10/0x10
[  485.845825][T13649]  sock_sendmsg_nosec+0x13a/0x180
[  485.845859][T13649]  ____sys_sendmsg+0x54e/0x850
[  485.845890][T13649]  ? __pfx_____sys_sendmsg+0x10/0x10
[  485.845929][T13649]  ___sys_sendmsg+0x2a5/0x360
[  485.845949][T13649]  ? __lock_acquire+0x747/0x2de0
[  485.845973][T13649]  ? __pfx____sys_sendmsg+0x10/0x10
[  485.845995][T13649]  ? get_pid_task+0x20/0x1f0
[  485.846014][T13649]  ? get_pid_task+0x20/0x1f0
[  485.846030][T13649]  ? get_pid_task+0x20/0x1f0
[  485.846078][T13649]  ? __fget_files+0x2a/0x420
[  485.846105][T13649]  ? __fget_files+0x3a2/0x420
[  485.846141][T13649]  __sys_sendmsg+0x177/0x240
[  485.846169][T13649]  ? __pfx___sys_sendmsg+0x10/0x10
[  485.846207][T13649]  __do_fast_syscall_32+0x27a/0x6a0
[  485.846233][T13649]  ? do_fast_syscall_32+0x33/0x70
[  485.846263][T13649]  ? asm_int80_emulation+0x1a/0x20
[  485.846282][T13649]  ? do_int80_emulation+0x299/0x500
[  485.846309][T13649]  do_fast_syscall_32+0x33/0x70
[  485.846332][T13649]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  485.846354][T13649] RIP: 0023:0xf7f360ec
[  485.846372][T13649] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8
[  485.846390][T13649] RSP: 002b:00000000f53f650c EFLAGS: 00000206 ORIG_RAX: 0000000000000172
[  485.846413][T13649] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000080
[  485.846428][T13649] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  485.846440][T13649] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  485.846453][T13649] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  485.846465][T13649] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  485.846494][T13649]  </TASK>
[  485.850003][T13649] netlink: 'syz.0.2788': attribute type 6 has an invalid length.
[  486.256692][T13663] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2793'.
[  486.256779][T13663] netlink: 'syz.1.2793': attribute type 10 has an invalid length.
[  486.256797][T13663] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2793'.
[  486.293940][ T5690] usb 1-1: new high-speed USB device number 69 using dummy_hcd
[  486.464075][ T5690] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb
[  486.467213][ T5690] usb 1-1: config 0 has an invalid interface number: 106 but max is 0
[  486.467242][ T5690] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  486.467261][ T5690] usb 1-1: config 0 has no interface number 0
[  486.467288][ T5690] usb 1-1: too many endpoints for config 0 interface 106 altsetting 74: 216, using maximum allowed: 30
[  486.467324][ T5690] usb 1-1: config 0 interface 106 altsetting 74 has 0 endpoint descriptors, different from the interface descriptor's value: 216
[  486.467352][ T5690] usb 1-1: config 0 interface 106 has no altsetting 0
[  486.467386][ T5690] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  486.524845][ T5690] usb 1-1: config 0 descriptor??
[  486.599411][ T5690] usb 1-1: Warning: ath10k USB support is incomplete, don't expect anything to work!
[  486.619277][T13669] program syz.2.2794 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  486.657640][T13670] netlink: 'syz.1.2795': attribute type 6 has an invalid length.
[  486.925326][   T30] audit: type=1326 audit(1789175511.132:1547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13653 comm="syz.0.2791" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f360ec code=0x0
[  487.278334][T13672] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  487.789432][ T1016] usb 1-1: Failed to submit usb control message: -110
[  487.789459][ T1016] usb 1-1: unable to send the bmi data to the device: -110
[  487.789470][ T1016] usb 1-1: unable to get target info from device
[  487.789492][ T1016] usb 1-1: could not get target info (-110)
[  487.789855][ T1016] usb 1-1: could not probe fw (-110)
[  487.965714][T13695] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  487.966050][T13695] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  488.283491][ T5690] usb 2-1: new full-speed USB device number 78 using dummy_hcd
[  488.444077][ T5690] usb 2-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15
[  488.449475][ T5690] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  488.449493][ T5690] usb 2-1: Product: syz
[  488.449501][ T5690] usb 2-1: Manufacturer: syz
[  488.449510][ T5690] usb 2-1: SerialNumber: syz
[  488.455137][ T5690] usb 2-1: config 0 descriptor??
[  488.726069][T13707] vlan2: entered promiscuous mode
[  488.828094][ T5690] RobotFuzz Open Source InterFace, OSIF 2-1:0.0: version d4.15 found at bus 002 address 078
[  489.226263][T13712] input: syz0 as /devices/virtual/input/input37
[  489.318268][T13715] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2804'.
[  489.345023][T13717] netlink: 'syz.3.2805': attribute type 1 has an invalid length.
[  489.345068][T13717] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  489.642643][ T5690] usb 1-1: USB disconnect, device number 69
[  489.721084][T13708] i2c i2c-1: failure reading status
[  489.829070][T13697] netlink: 'syz.1.2800': attribute type 1 has an invalid length.
[  490.369755][ T5690] usb 2-1: USB disconnect, device number 78
[  490.428600][T13736] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  490.443856][T13736] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2811'.
[  491.099780][T13756] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  491.101652][T13756] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  491.235286][T13759] netlink: 'syz.3.2817': attribute type 1 has an invalid length.
[  491.235434][T13759] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  491.266313][ T5690] usb 2-1: new high-speed USB device number 79 using dummy_hcd
[  491.433651][ T5690] usb 2-1: Using ep0 maxpacket: 16
[  491.435342][ T5690] usb 2-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00
[  491.436953][ T5690] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  491.436987][ T5690] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  491.437011][ T5690] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  491.437052][ T5690] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  491.445166][ T5690] usb 2-1: config 0 descriptor??
[  492.121635][ T5690] usbhid 2-1:0.0: can't add hid device: -71
[  492.122371][ T5690] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[  492.147087][ T5690] usb 2-1: USB disconnect, device number 79
[  492.456469][T13789] netlink: 'syz.4.2828': attribute type 1 has an invalid length.
[  492.456511][T13789] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  492.569217][T13788] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  492.585194][T13788] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2827'.
[  492.914863][T13798] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  492.928800][T13798] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  492.992784][ T5715] usb 2-1: new high-speed USB device number 80 using dummy_hcd
[  493.143492][ T5715] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  493.149415][ T5715] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  493.149444][ T5715] usb 2-1: Product: syz
[  493.149459][ T5715] usb 2-1: Manufacturer: syz
[  493.149474][ T5715] usb 2-1: SerialNumber: syz
[  493.260930][T13802] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2833'.
[  493.404153][ T1234] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  493.511473][T13809] F2FS-fs: Conflicting test_dummy_encryption options
[  493.657189][T13815] netlink: 'syz.4.2839': attribute type 1 has an invalid length.
[  493.657230][T13815] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  493.862819][ T5715] usb 3-1: new full-speed USB device number 60 using dummy_hcd
[  494.020977][ T5715] usb 3-1: New USB device found, idVendor=17ef, idProduct=6062, bcdDevice= 0.00
[  494.022080][ T5715] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid maxpacket 1024, setting to 64
[  494.022102][ T5715] usb 3-1: config 0 interface 0 altsetting 2 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[  494.022133][ T5715] usb 3-1: config 0 interface 0 has no altsetting 0
[  494.022153][ T5715] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  494.035223][ T5715] usb 3-1: config 0 descriptor??
[  494.039771][T13813] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22
[  494.039950][T13813] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22
[  494.322553][    T0] NOHZ tick-stop error: local softirq work is pending, handler #102!!!
[  494.506616][ T1234] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive
[  494.515338][ T5715] hid_parser_main: 8 callbacks suppressed
[  494.515363][ T5715] lenovo 0003:17EF:6062.0030: unknown main item tag 0x2
[  494.515645][ T5715] lenovo 0003:17EF:6062.0030: unknown main item tag 0x3
[  494.515676][ T5715] lenovo 0003:17EF:6062.0030: unknown main item tag 0x1
[  494.515705][ T5715] lenovo 0003:17EF:6062.0030: unknown main item tag 0x2
[  494.523475][ T1234] ath9k_htc: Failed to initialize the device
[  494.581373][ T5715] lenovo 0003:17EF:6062.0030: hidraw0: USB HID v0.01 Device [HID 17ef:6062] on usb-dummy_hcd.2-1/input0
[  494.788912][T13837] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  495.511991][ T1234] usb 2-1: ath9k_htc: USB layer deinitialized
[  495.752052][ T5690] usb 3-1: USB disconnect, device number 60
[  495.982055][T13858] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2850'.
[  496.369933][T13862] netlink: 'syz.0.2851': attribute type 1 has an invalid length.
[  496.369959][T13862] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  496.789192][T13872] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  497.054301][T13883] FAULT_INJECTION: forcing a failure.
[  497.054301][T13883] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  497.054362][T13883] CPU: 1 UID: 0 PID: 13883 Comm: syz.2.2860 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  497.054388][T13883] Tainted: [L]=SOFTLOCKUP
[  497.054396][T13883] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  497.054407][T13883] Call Trace:
[  497.054414][T13883]  <TASK>
[  497.054422][T13883]  dump_stack_lvl+0xe8/0x150
[  497.054454][T13883]  should_fail_ex+0x410/0x560
[  497.054482][T13883]  _copy_to_user+0x31/0xb0
[  497.054509][T13883]  bpf_verifier_vlog+0x606/0x900
[  497.054549][T13883]  bpf_verifier_log_write+0x11d/0x1a0
[  497.054571][T13883]  ? __pfx_bpf_verifier_log_write+0x10/0x10
[  497.054604][T13883]  ? arg_track_eq+0xd9/0x7a0
[  497.054627][T13883]  analyze_subprog+0x2ca8/0x9e00
[  497.054648][T13883]  ? probe_event_enable+0x6ff/0xae0
[  497.054717][T13883]  ? __pfx_analyze_subprog+0x10/0x10
[  497.054743][T13883]  ? __ia32_sys_bpf+0xba/0xd0
[  497.054759][T13883]  ? __do_fast_syscall_32+0x27a/0x6a0
[  497.054782][T13883]  ? do_fast_syscall_32+0x33/0x70
[  497.054801][T13883]  ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  497.054837][T13883]  ? call_instance+0x263/0x560
[  497.054848][T13883]  ? rcu_is_watching+0x16/0xb0
[  497.054861][T13883]  ? call_instance+0x263/0x560
[  497.054871][T13883]  ? trace_kmalloc+0x2a/0xf0
[  497.054888][T13883]  ? call_instance+0x263/0x560
[  497.054898][T13883]  ? __kvmalloc_node_noprof+0x52f/0x820
[  497.054910][T13883]  ? __kvmalloc_node_noprof+0x345/0x820
[  497.054921][T13883]  ? call_instance+0x263/0x560
[  497.054931][T13883]  ? call_instance+0x263/0x560
[  497.054950][T13883]  bpf_compute_subprog_arg_access+0x2c9/0x14d0
[  497.054964][T13883]  ? sk_filter_func_proto+0x70/0xb0
[  497.054987][T13883]  ? __pfx_bpf_compute_subprog_arg_access+0x10/0x10
[  497.055002][T13883]  ? __kvmalloc_node_noprof+0x345/0x820
[  497.055013][T13883]  ? bpf_compute_live_registers+0x14f/0x1ff0
[  497.055024][T13883]  ? bpf_compute_live_registers+0x14f/0x1ff0
[  497.055039][T13883]  bpf_compute_live_registers+0x8d3/0x1ff0
[  497.055060][T13883]  ? __pfx_bpf_compute_live_registers+0x10/0x10
[  497.055078][T13883]  bpf_check+0x25ed/0x2e10
[  497.055095][T13883]  ? ktime_get_with_offset+0x93/0x2d0
[  497.055109][T13883]  ? __pfx_bpf_check+0x10/0x10
[  497.055121][T13883]  ? bpf_obj_name_cpy+0x194/0x1e0
[  497.055137][T13883]  bpf_prog_load+0x14d6/0x1c20
[  497.055155][T13883]  ? __pfx_bpf_prog_load+0x10/0x10
[  497.055179][T13883]  __sys_bpf+0xd0d/0xd90
[  497.055195][T13883]  ? __pfx___sys_bpf+0x10/0x10
[  497.055208][T13883]  ? ksys_write+0x1e6/0x270
[  497.055225][T13883]  ? __mutex_unlock_slowpath+0x731/0x900
[  497.055254][T13883]  ? fput+0xa0/0xd0
[  497.055269][T13883]  ? ksys_write+0x242/0x270
[  497.055287][T13883]  __ia32_sys_bpf+0xba/0xd0
[  497.055299][T13883]  __do_fast_syscall_32+0x27a/0x6a0
[  497.055312][T13883]  ? do_fast_syscall_32+0x33/0x70
[  497.055323][T13883]  ? asm_int80_emulation+0x1a/0x20
[  497.055332][T13883]  ? do_int80_emulation+0x299/0x500
[  497.055343][T13883]  ? trace_irq_disable+0x3b/0x140
[  497.055356][T13883]  do_fast_syscall_32+0x33/0x70
[  497.055368][T13883]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  497.055380][T13883] RIP: 0023:0xf703f0ec
[  497.055391][T13883] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8
[  497.055400][T13883] RSP: 002b:00000000f542d50c EFLAGS: 00000206 ORIG_RAX: 0000000000000165
[  497.055414][T13883] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000008000e000
[  497.055421][T13883] RDX: 0000000000000059 RSI: 0000000000000000 RDI: 0000000000000000
[  497.055428][T13883] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  497.055434][T13883] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  497.055440][T13883] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  497.055455][T13883]  </TASK>
[  497.545017][T13891] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  497.562704][T13891] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  497.636127][   T30] audit: type=1326 audit(1789175521.872:1548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13890 comm="syz.4.2862" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702f0ec code=0x7ffc0000
[  497.637277][   T30] audit: type=1326 audit(1789175521.872:1549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13890 comm="syz.4.2862" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702f0ec code=0x7ffc0000
[  497.641471][   T30] audit: type=1326 audit(1789175521.872:1550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13890 comm="syz.4.2862" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf702f0ec code=0x7ffc0000
[  497.703007][ T5690] usb 3-1: new full-speed USB device number 61 using dummy_hcd
[  497.799963][   T30] audit: type=1326 audit(1789175522.032:1551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13890 comm="syz.4.2862" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702f0ec code=0x7ffc0000
[  497.800018][   T30] audit: type=1326 audit(1789175522.032:1552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13890 comm="syz.4.2862" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702f0ec code=0x7ffc0000
[  497.890734][   T30] audit: type=1326 audit(1789175522.122:1553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13890 comm="syz.4.2862" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=358 compat=1 ip=0xf702f0ec code=0x7ffc0000
[  497.901560][ T5690] usb 3-1: New USB device found, idVendor=17ef, idProduct=6062, bcdDevice= 0.00
[  497.903150][ T5690] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid maxpacket 1024, setting to 64
[  497.903183][ T5690] usb 3-1: config 0 interface 0 altsetting 2 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[  497.903210][ T5690] usb 3-1: config 0 interface 0 has no altsetting 0
[  497.903242][ T5690] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  497.931384][ T5690] usb 3-1: config 0 descriptor??
[  497.940145][T13889] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22
[  497.940296][T13889] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22
[  498.000247][   T30] audit: type=1326 audit(1789175522.232:1554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13890 comm="syz.4.2862" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702f0ec code=0x7ffc0000
[  498.000996][   T30] audit: type=1326 audit(1789175522.232:1555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13890 comm="syz.4.2862" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702f0ec code=0x7ffc0000
[  498.207599][   T30] audit: type=1326 audit(1789175522.432:1556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13890 comm="syz.4.2862" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=3 compat=1 ip=0xf702f0ec code=0x7ffc0000
[  498.207946][   T30] audit: type=1326 audit(1789175522.442:1557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13890 comm="syz.4.2862" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702f0ec code=0x7ffc0000
[  498.389615][T13794] syz.1.2830 (13794): drop_caches: 2
[  498.450241][ T5690] lenovo 0003:17EF:6062.0031: unknown main item tag 0x2
[  498.450282][ T5690] lenovo 0003:17EF:6062.0031: unknown main item tag 0x3
[  498.450597][ T5690] lenovo 0003:17EF:6062.0031: unknown main item tag 0x1
[  498.450627][ T5690] lenovo 0003:17EF:6062.0031: unknown main item tag 0x2
[  498.495856][ T5690] lenovo 0003:17EF:6062.0031: hidraw0: USB HID v0.01 Device [HID 17ef:6062] on usb-dummy_hcd.2-1/input0
[  498.629236][ T5690] usb 2-1: USB disconnect, device number 80
[  498.983281][   T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  499.324502][ T1234] usb 3-1: USB disconnect, device number 61
[  499.395620][   T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  499.483061][ T5704] usb 2-1: new high-speed USB device number 81 using dummy_hcd
[  499.580061][ T5612] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  499.598338][ T5612] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  499.608009][ T5612] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  499.624017][ T5612] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  499.652451][ T5612] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  499.660844][ T5704] usb 2-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.00
[  499.744738][ T5704] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  499.763128][ T5704] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  499.763155][ T5704] usb 2-1: Product: syz
[  499.763169][ T5704] usb 2-1: Manufacturer: syz
[  499.763183][ T5704] usb 2-1: SerialNumber: syz
[  499.859082][   T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  499.990148][ T5704] usb 2-1: selecting invalid altsetting 1
[  499.990173][ T5704] speedtch 2-1:1.0: speedtch_bind: setting interface to  1 failed (-22)!
[  499.990229][ T5704] speedtch 2-1:1.0: usbatm_usb_probe: bind failed: -22!
[  499.990258][ T5704] speedtch 2-1:1.0: probe with driver speedtch failed with error -22
[  500.199683][   T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  500.199901][T13906] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  500.202495][T13906] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  500.458440][T13906] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  500.461858][T13906] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  500.515093][ T5704] usb 2-1: selecting invalid altsetting 1
[  500.515110][ T5704] speedtch 2-1:1.1: speedtch_bind: setting interface to  1 failed (-22)!
[  500.515496][ T5704] speedtch 2-1:1.1: usbatm_usb_probe: bind failed: -22!
[  500.515538][ T5704] speedtch 2-1:1.1: probe with driver speedtch failed with error -22
[  500.533302][ T5704] usb 2-1: USB disconnect, device number 81
[  500.976352][T13921] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2870'.
[  501.348069][T13929] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2873'.
[  501.476749][T13929] team0: Device xfrm0 is of different type
[  501.588597][T13924] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  501.611413][T13934] FAULT_INJECTION: forcing a failure.
[  501.611413][T13934] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  501.611445][T13934] CPU: 0 UID: 0 PID: 13934 Comm: syz.2.2874 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  501.611465][T13934] Tainted: [L]=SOFTLOCKUP
[  501.611471][T13934] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  501.611480][T13934] Call Trace:
[  501.611486][T13934]  <TASK>
[  501.611493][T13934]  dump_stack_lvl+0xe8/0x150
[  501.611520][T13934]  should_fail_ex+0x410/0x560
[  501.611542][T13934]  _copy_from_iter+0x1d3/0x1660
[  501.611559][T13934]  ? __alloc_skb+0x27a/0x7a0
[  501.611578][T13934]  ? __alloc_skb+0x27a/0x7a0
[  501.611597][T13934]  ? __alloc_skb+0x27a/0x7a0
[  501.611614][T13934]  ? __pfx__copy_from_iter+0x10/0x10
[  501.611630][T13934]  ? kmem_cache_alloc_node_noprof+0x1f9/0x610
[  501.611654][T13934]  ? __alloc_skb+0x27a/0x7a0
[  501.611671][T13934]  ? __alloc_skb+0x27a/0x7a0
[  501.611694][T13934]  ? netlink_sendmsg+0x650/0xb40
[  501.611715][T13934]  ? skb_put+0x112/0x210
[  501.611733][T13934]  netlink_sendmsg+0x6c0/0xb40
[  501.611759][T13934]  ? __pfx_netlink_sendmsg+0x10/0x10
[  501.611784][T13934]  ? apparmor_socket_sendmsg+0x98/0x360
[  501.611802][T13934]  ? __pfx_netlink_sendmsg+0x10/0x10
[  501.611821][T13934]  sock_sendmsg_nosec+0x13a/0x180
[  501.611844][T13934]  ____sys_sendmsg+0x54e/0x850
[  501.611866][T13934]  ? __pfx_____sys_sendmsg+0x10/0x10
[  501.611896][T13934]  ___sys_sendmsg+0x2a5/0x360
[  501.611913][T13934]  ? __lock_acquire+0x747/0x2de0
[  501.611931][T13934]  ? __pfx____sys_sendmsg+0x10/0x10
[  501.611948][T13934]  ? get_pid_task+0x20/0x1f0
[  501.611962][T13934]  ? get_pid_task+0x20/0x1f0
[  501.611975][T13934]  ? get_pid_task+0x20/0x1f0
[  501.612009][T13934]  ? __fget_files+0x2a/0x420
[  501.612028][T13934]  ? __fget_files+0x3a2/0x420
[  501.612053][T13934]  __sys_sendmsg+0x177/0x240
[  501.612073][T13934]  ? __pfx___sys_sendmsg+0x10/0x10
[  501.612104][T13934]  __do_fast_syscall_32+0x27a/0x6a0
[  501.612122][T13934]  ? do_fast_syscall_32+0x33/0x70
[  501.612137][T13934]  ? asm_int80_emulation+0x1a/0x20
[  501.612155][T13934]  ? do_int80_emulation+0x299/0x500
[  501.612171][T13934]  ? trace_irq_disable+0x3b/0x140
[  501.612189][T13934]  do_fast_syscall_32+0x33/0x70
[  501.612206][T13934]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  501.612223][T13934] RIP: 0023:0xf703f0ec
[  501.612239][T13934] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8
[  501.612252][T13934] RSP: 002b:00000000f542d50c EFLAGS: 00000206 ORIG_RAX: 0000000000000172
[  501.612270][T13934] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000400
[  501.612281][T13934] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  501.612290][T13934] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  501.612299][T13934] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  501.612308][T13934] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  501.612329][T13934]  </TASK>
[  501.629294][ T1311] ieee802154 phy0 wpan0: encryption failed: -22
[  501.634534][ T1311] ieee802154 phy1 wpan1: encryption failed: -22
[  501.746625][T13927] tipc: Resetting bearer <eth:syzkaller0>
[  501.793057][   T52] Bluetooth: hci0: command tx timeout
[  501.816102][   T12] bridge_slave_1: left allmulticast mode
[  501.816129][   T12] bridge_slave_1: left promiscuous mode
[  501.816354][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  501.846717][   T12] bridge_slave_0: left allmulticast mode
[  501.846743][   T12] bridge_slave_0: left promiscuous mode
[  501.850476][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  502.078080][T13939] kvm: pic: single mode not supported
[  502.078098][T13939] kvm: pic: level sensitive irq not supported
[  502.094265][T13944] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2876'.
[  502.449708][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  502.470985][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  502.484172][   T12] bond0 (unregistering): Released all slaves
[  502.995882][T13981] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2879'.
[  503.079776][T13981] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2879'.
[  503.104945][T13981] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2879'.
[  503.134482][ T1234] usb 4-1: new full-speed USB device number 83 using dummy_hcd
[  503.160173][T13981] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2879'.
[  503.177666][T13981] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2879'.
[  503.295210][ T1234] usb 4-1: New USB device found, idVendor=17ef, idProduct=6062, bcdDevice= 0.00
[  503.297467][ T1234] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid maxpacket 1024, setting to 64
[  503.297521][ T1234] usb 4-1: config 0 interface 0 altsetting 2 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[  503.297551][ T1234] usb 4-1: config 0 interface 0 has no altsetting 0
[  503.297585][ T1234] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  503.335289][T13991] Failed to get privilege flags for destination (handle=0x0:0x0)
[  503.335320][T13991] FAULT_INJECTION: forcing a failure.
[  503.335320][T13991] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  503.335350][T13991] CPU: 0 UID: 0 PID: 13991 Comm: syz.1.2882 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  503.335376][T13991] Tainted: [L]=SOFTLOCKUP
[  503.335383][T13991] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  503.335395][T13991] Call Trace:
[  503.335403][T13991]  <TASK>
[  503.335412][T13991]  dump_stack_lvl+0xe8/0x150
[  503.335445][T13991]  should_fail_ex+0x410/0x560
[  503.335472][T13991]  _copy_to_user+0x31/0xb0
[  503.335498][T13991]  simple_read_from_buffer+0xe1/0x170
[  503.335531][T13991]  proc_fail_nth_read+0x1bb/0x230
[  503.335559][T13991]  ? common_file_perm+0x20e/0x2b0
[  503.335583][T13991]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  503.335615][T13991]  ? rw_verify_area+0x24a/0x4c0
[  503.335643][T13991]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  503.335672][T13991]  vfs_read+0x213/0xa80
[  503.335703][T13991]  ? __pfx___mutex_lock+0x10/0x10
[  503.335726][T13991]  ? __pfx_vfs_read+0x10/0x10
[  503.335754][T13991]  ? __fget_files+0x2a/0x420
[  503.335784][T13991]  ? __fget_files+0x3a2/0x420
[  503.335808][T13991]  ? __fget_files+0x2a/0x420
[  503.335842][T13991]  ksys_read+0x150/0x270
[  503.335872][T13991]  ? __pfx_ksys_read+0x10/0x10
[  503.335903][T13991]  ? asm_int80_emulation+0x1a/0x20
[  503.335927][T13991]  do_int80_emulation+0x198/0x500
[  503.335949][T13991]  ? trace_irq_disable+0x3b/0x140
[  503.335969][T13991]  ? asm_int80_emulation+0x1a/0x20
[  503.335987][T13991]  ? clear_bhb_loop+0x70/0xc0
[  503.336009][T13991]  ? clear_bhb_loop+0x70/0xc0
[  503.336032][T13991]  asm_int80_emulation+0x1a/0x20
[  503.336051][T13991] RIP: 0023:0xf71875ab
[  503.336069][T13991] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53
[  503.336086][T13991] RSP: 002b:00000000f54464bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003
[  503.336106][T13991] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000f54465d0
[  503.336120][T13991] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000
[  503.336132][T13991] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  503.336143][T13991] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  503.336155][T13991] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  503.336184][T13991]  </TASK>
[  503.453906][ T1234] usb 4-1: config 0 descriptor??
[  503.460913][T13966] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  503.461064][T13966] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  503.840287][ T5278] 8021q: adding VLAN 0 to HW filter on device eth1
[  503.863066][   T52] Bluetooth: hci0: command tx timeout
[  503.921154][ T1234] lenovo 0003:17EF:6062.0032: unknown main item tag 0x2
[  503.921197][ T1234] lenovo 0003:17EF:6062.0032: unknown main item tag 0x3
[  503.921226][ T1234] lenovo 0003:17EF:6062.0032: unknown main item tag 0x1
[  503.921255][ T1234] lenovo 0003:17EF:6062.0032: unknown main item tag 0x2
[  503.954015][ T1234] lenovo 0003:17EF:6062.0032: hidraw0: USB HID v0.01 Device [HID 17ef:6062] on usb-dummy_hcd.3-1/input0
[  504.080223][   T12] hsr_slave_0: left promiscuous mode
[  504.081183][   T12] hsr_slave_1: left promiscuous mode
[  504.087374][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  504.087399][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  504.106359][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  504.106401][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  504.202070][   T12] veth1_macvtap: left promiscuous mode
[  504.202111][   T12] veth0_macvtap: left promiscuous mode
[  504.202456][   T12] veth1_vlan: left promiscuous mode
[  504.208303][   T12] veth0_vlan: left promiscuous mode
[  504.570182][   T12] team0 (unregistering): Port device team_slave_1 removed
[  504.589923][   T12] team0 (unregistering): Port device team_slave_0 removed
[  504.778358][T14015] syzkaller1: tun_chr_ioctl cmd 1074025677
[  504.778479][T14015] syzkaller1: linktype set to 780
[  504.812876][T14016] syzkaller1: tun_chr_ioctl cmd 62725
[  504.917732][T13966] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  504.917846][T13966] Bluetooth: hci0: Opcode 0x0406 failed: -4
[  504.969838][T13912] bridge0: port 1(bridge_slave_0) entered blocking state
[  504.970040][T13912] bridge0: port 1(bridge_slave_0) entered disabled state
[  504.970219][T13912] bridge_slave_0: entered allmulticast mode
[  504.972443][T13912] bridge_slave_0: entered promiscuous mode
[  504.978010][T13912] bridge0: port 2(bridge_slave_1) entered blocking state
[  504.978108][T13912] bridge0: port 2(bridge_slave_1) entered disabled state
[  504.978235][T13912] bridge_slave_1: entered allmulticast mode
[  504.980249][T13912] bridge_slave_1: entered promiscuous mode
[  504.995968][T13966] Bluetooth: hci0: Opcode 0x0406 failed: -4
[  505.130694][T13912] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  505.153650][T13912] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  505.376245][T13912] team0: Port device team_slave_0 added
[  505.390172][T13912] team0: Port device team_slave_1 added
[  505.579609][T13912] batman_adv: batadv0: Adding interface: batadv_slave_0
[  505.579627][T13912] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  505.579652][T13912] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  505.588101][ T5690] usb 4-1: USB disconnect, device number 83
[  505.695198][T13912] batman_adv: batadv0: Adding interface: batadv_slave_1
[  505.695219][T13912] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  505.695247][T13912] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  505.725986][T14034] kvm: pic: single mode not supported
[  505.726004][T14034] kvm: pic: level sensitive irq not supported
[  505.767539][T14040] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2891'.
[  505.846551][T14044] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2894'.
[  505.902420][T14041] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  505.916327][T14041] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  505.991973][T13912] hsr_slave_0: entered promiscuous mode
[  506.001606][T13912] hsr_slave_1: entered promiscuous mode
[  506.007363][T13912] debugfs: 'hsr0' already exists in 'hsr'
[  506.007388][T13912] Cannot create hsr debugfs directory
[  506.112412][   T30] kauditd_printk_skb: 13 callbacks suppressed
[  506.112433][   T30] audit: type=1326 audit(1789175530.342:1571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14039 comm="syz.4.2893" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf702f0ec code=0x0
[  506.635043][ T5704] usb 2-1: new high-speed USB device number 82 using dummy_hcd
[  506.793594][ T5704] usb 2-1: Using ep0 maxpacket: 32
[  506.794891][ T5704] usb 2-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.06
[  506.797137][ T5704] usb 2-1: config 2 has an invalid interface number: 88 but max is 0
[  506.797165][ T5704] usb 2-1: config 2 has no interface number 0
[  506.797206][ T5704] usb 2-1: config 2 interface 88 altsetting 25 bulk endpoint 0x6 has invalid maxpacket 256
[  506.797224][ T5704] usb 2-1: config 2 interface 88 has no altsetting 0
[  506.823510][ T5704] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=1
[  506.823538][ T5704] usb 2-1: Product: syz
[  506.823553][ T5704] usb 2-1: Manufacturer: syz
[  506.823568][ T5704] usb 2-1: SerialNumber: syz
[  506.881740][T14056] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22
[  506.982811][   T52] Bluetooth: hci0: command 0x0419 tx timeout
[  506.993331][ T1234] usb 4-1: new high-speed USB device number 84 using dummy_hcd
[  507.098523][T14056] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22
[  507.132637][ T1234] usb 4-1: device descriptor read/64, error -71
[  507.338927][ T5278] 8021q: adding VLAN 0 to HW filter on device eth2
[  507.375089][ T1234] usb 4-1: new high-speed USB device number 85 using dummy_hcd
[  507.502782][ T1234] usb 4-1: device descriptor read/64, error -71
[  507.615168][ T1234] usb usb4-port1: attempt power cycle
[  507.952662][ T1234] usb 4-1: new high-speed USB device number 86 using dummy_hcd
[  507.973279][ T1234] usb 4-1: device descriptor read/8, error -71
[  508.213752][ T1234] usb 4-1: new high-speed USB device number 87 using dummy_hcd
[  508.233483][ T1234] usb 4-1: device descriptor read/8, error -71
[  508.343242][ T1234] usb usb4-port1: unable to enumerate USB device
[  509.064572][   T52] Bluetooth: hci0: command 0x0419 tx timeout
[  509.420332][ T5704] asix 2-1:2.88 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[  509.420516][ T5704] asix 2-1:2.88: probe with driver asix failed with error -71
[  509.444705][ T5704] usb 2-1: USB disconnect, device number 82
[  509.832410][T14113] FAULT_INJECTION: forcing a failure.
[  509.832410][T14113] name failslab, interval 1, probability 0, space 0, times 0
[  509.832452][T14113] CPU: 1 UID: 0 PID: 14113 Comm: syz.1.2902 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  509.832481][T14113] Tainted: [L]=SOFTLOCKUP
[  509.832489][T14113] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  509.832504][T14113] Call Trace:
[  509.832511][T14113]  <TASK>
[  509.832519][T14113]  dump_stack_lvl+0xe8/0x150
[  509.832551][T14113]  should_fail_ex+0x410/0x560
[  509.832573][T14113]  ? __alloc_skb+0x1db/0x7a0
[  509.832593][T14113]  should_failslab+0xa8/0x100
[  509.832618][T14113]  ? __alloc_skb+0x1db/0x7a0
[  509.832638][T14113]  kmem_cache_alloc_node_noprof+0xa1/0x610
[  509.832668][T14113]  ? __alloc_skb+0x18d/0x7a0
[  509.832689][T14113]  ? __alloc_skb+0x1db/0x7a0
[  509.832717][T14113]  __alloc_skb+0x1db/0x7a0
[  509.832744][T14113]  netlink_ack+0x136/0xb30
[  509.832770][T14113]  ? __pfx_genl_rcv_msg+0x10/0x10
[  509.832792][T14113]  ? __pfx_nl80211_post_doit+0x10/0x10
[  509.832830][T14113]  netlink_rcv_skb+0x2a4/0x4a0
[  509.832856][T14113]  ? __pfx_genl_rcv_msg+0x10/0x10
[  509.832878][T14113]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  509.832929][T14113]  ? down_read+0x2be/0x330
[  509.832955][T14113]  genl_rcv+0x28/0x40
[  509.832974][T14113]  netlink_unicast+0x7bd/0x940
[  509.833008][T14113]  netlink_sendmsg+0x813/0xb40
[  509.833046][T14113]  ? __pfx_netlink_sendmsg+0x10/0x10
[  509.833082][T14113]  ? apparmor_socket_sendmsg+0x18b/0x360
[  509.833108][T14113]  ? __pfx_netlink_sendmsg+0x10/0x10
[  509.833134][T14113]  sock_sendmsg_nosec+0x13a/0x180
[  509.833167][T14113]  ____sys_sendmsg+0x54e/0x850
[  509.833196][T14113]  ? __pfx_____sys_sendmsg+0x10/0x10
[  509.833238][T14113]  ___sys_sendmsg+0x2a5/0x360
[  509.833262][T14113]  ? __lock_acquire+0x747/0x2de0
[  509.833287][T14113]  ? __pfx____sys_sendmsg+0x10/0x10
[  509.833312][T14113]  ? get_pid_task+0x20/0x1f0
[  509.833331][T14113]  ? get_pid_task+0x20/0x1f0
[  509.833348][T14113]  ? get_pid_task+0x20/0x1f0
[  509.833415][T14113]  ? __fget_files+0x2a/0x420
[  509.833439][T14113]  ? __fget_files+0x3a2/0x420
[  509.833476][T14113]  __sys_sendmsg+0x177/0x240
[  509.833504][T14113]  ? __pfx___sys_sendmsg+0x10/0x10
[  509.833546][T14113]  __do_fast_syscall_32+0x27a/0x6a0
[  509.833571][T14113]  ? do_fast_syscall_32+0x33/0x70
[  509.833593][T14113]  ? asm_int80_emulation+0x1a/0x20
[  509.833611][T14113]  ? do_int80_emulation+0x299/0x500
[  509.833631][T14113]  ? trace_irq_disable+0x3b/0x140
[  509.833656][T14113]  do_fast_syscall_32+0x33/0x70
[  509.833680][T14113]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  509.833700][T14113] RIP: 0023:0xf7f860ec
[  509.833717][T14113] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8
[  509.833734][T14113] RSP: 002b:00000000f544650c EFLAGS: 00000206 ORIG_RAX: 0000000000000172
[  509.833754][T14113] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080003740
[  509.833766][T14113] RDX: 0000000028008004 RSI: 0000000000000000 RDI: 0000000000000000
[  509.833777][T14113] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  509.833788][T14113] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  509.833799][T14113] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  509.833825][T14113]  </TASK>
[  510.361996][T14123] kvm: pic: single mode not supported
[  510.362012][T14123] kvm: pic: level sensitive irq not supported
[  510.435623][T14129] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2907'.
[  510.626586][ T5704] usb 2-1: new full-speed USB device number 83 using dummy_hcd
[  510.630930][T14124] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  510.647329][T14124] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2905'.
[  510.774017][ T5704] usb 2-1: New USB device found, idVendor=17ef, idProduct=6062, bcdDevice= 0.00
[  510.775206][ T5704] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid maxpacket 1024, setting to 64
[  510.775241][ T5704] usb 2-1: config 0 interface 0 altsetting 2 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[  510.775279][ T5704] usb 2-1: config 0 interface 0 has no altsetting 0
[  510.775312][ T5704] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  510.778748][ T5704] usb 2-1: config 0 descriptor??
[  510.779498][T14128] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  510.779636][T14128] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  511.142842][   T52] Bluetooth: hci0: command 0x0419 tx timeout
[  511.409343][ T5704] lenovo 0003:17EF:6062.0033: unknown main item tag 0x2
[  511.409387][ T5704] lenovo 0003:17EF:6062.0033: unknown main item tag 0x3
[  511.409417][ T5704] lenovo 0003:17EF:6062.0033: unknown main item tag 0x1
[  511.409445][ T5704] lenovo 0003:17EF:6062.0033: unknown main item tag 0x2
[  511.440305][ T5704] lenovo 0003:17EF:6062.0033: hidraw0: USB HID v0.01 Device [HID 17ef:6062] on usb-dummy_hcd.1-1/input0
[  511.814377][T14178] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  511.814750][T14178] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  511.826299][T14178] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  511.832403][T14178] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  512.157965][T14176] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  512.549426][ T5690] usb 2-1: USB disconnect, device number 83
[  512.575289][T13912] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  512.607875][T13912] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  512.621557][T13912] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  512.649632][T13912] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  512.658057][T13912] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  512.701116][T13912] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  512.705986][T13912] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  512.720144][T13912] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  513.226504][T13912] 8021q: adding VLAN 0 to HW filter on device bond0
[  513.244413][ T1234] usb 3-1: new full-speed USB device number 62 using dummy_hcd
[  513.296066][T13912] 8021q: adding VLAN 0 to HW filter on device team0
[  513.326014][ T8535] bridge0: port 1(bridge_slave_0) entered blocking state
[  513.326130][ T8535] bridge0: port 1(bridge_slave_0) entered forwarding state
[  513.358046][ T8535] bridge0: port 2(bridge_slave_1) entered blocking state
[  513.358117][ T8535] bridge0: port 2(bridge_slave_1) entered forwarding state
[  513.393502][ T1234] usb 3-1: New USB device found, idVendor=046d, idProduct=c517, bcdDevice= 0.00
[  513.395279][ T1234] usb 3-1: config 0 interface 0 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  513.395388][ T1234] usb 3-1: config 0 interface 0 has no altsetting 0
[  513.395424][ T1234] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  513.447798][ T1234] usb 3-1: config 0 descriptor??
[  513.666364][T14207] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer.
[  513.824668][T13912] 8021q: adding VLAN 0 to HW filter on device batadv0
[  514.144890][T14199] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  514.195775][   T52] Bluetooth: hci0: command 0x0419 tx timeout
[  514.297414][T13912] veth0_vlan: entered promiscuous mode
[  514.364493][T13912] veth1_vlan: entered promiscuous mode
[  514.576224][T13912] veth0_macvtap: entered promiscuous mode
[  514.618135][T13912] veth1_macvtap: entered promiscuous mode
[  514.702236][ T1234] usbhid 3-1:0.0: can't add hid device: -71
[  514.711233][ T1234] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[  514.727357][T13912] batman_adv: batadv0: Interface activated: batadv_slave_0
[  514.729798][ T1234] usb 3-1: USB disconnect, device number 62
[  514.798471][T13912] batman_adv: batadv0: Interface activated: batadv_slave_1
[  514.835120][ T8535] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  514.835406][ T8535] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  514.862956][ T8534] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  514.935801][ T8535] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  515.186559][ T8535] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  515.186582][ T8535] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  515.376829][ T1039] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  515.376852][ T1039] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  515.628446][T14232] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  515.645768][T14232] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2919'.
[  515.852961][T14241] netlink: 'syz.0.2865': attribute type 1 has an invalid length.
[  515.853006][T14241] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  516.624662][T14253] netlink: 'syz.4.2916': attribute type 21 has an invalid length.
[  516.624691][T14253] netlink: 'syz.4.2916': attribute type 7 has an invalid length.
[  516.749033][ T5612] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  516.760547][ T5349] usb 2-1: new full-speed USB device number 84 using dummy_hcd
[  516.776442][ T5612] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  516.801373][ T5612] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  516.815571][ T5612] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  516.832766][ T5612] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  516.949174][ T5349] usb 2-1: New USB device found, idVendor=17ef, idProduct=6062, bcdDevice= 0.00
[  516.950320][ T5349] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid maxpacket 1024, setting to 64
[  516.950354][ T5349] usb 2-1: config 0 interface 0 altsetting 2 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[  516.950384][ T5349] usb 2-1: config 0 interface 0 has no altsetting 0
[  516.950418][ T5349] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  516.988175][ T5349] usb 2-1: config 0 descriptor??
[  517.004428][T14262] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  517.004555][T14262] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  517.150588][T14271] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2924'.
[  517.187864][T14271] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2924'.
[  517.473524][T14277] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2925'.
[  517.528223][T14277] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2925'.
[  517.579081][ T5349] lenovo 0003:17EF:6062.0034: unknown main item tag 0x2
[  517.579131][ T5349] lenovo 0003:17EF:6062.0034: unknown main item tag 0x3
[  517.579162][ T5349] lenovo 0003:17EF:6062.0034: unknown main item tag 0x1
[  517.579189][ T5349] lenovo 0003:17EF:6062.0034: unknown main item tag 0x2
[  517.635345][ T5349] lenovo 0003:17EF:6062.0034: hidraw0: USB HID v0.01 Device [HID 17ef:6062] on usb-dummy_hcd.1-1/input0
[  517.914499][T14287] netlink: 276 bytes leftover after parsing attributes in process `syz.0.2928'.
[  517.929456][T14285] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  517.940788][T14285] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  518.111470][T14285] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2927'.
[  518.294390][T14288] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  518.294578][T14288] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  518.294667][T14288] Bluetooth: hci5: Opcode 0x0406 failed: -4
[  518.349631][T14288] Bluetooth: hci5: Opcode 0x0406 failed: -4
[  518.589057][T14301] netlink: 'syz.3.2930': attribute type 1 has an invalid length.
[  518.589096][T14301] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  518.686678][ T5349] usb 2-1: USB disconnect, device number 84
[  518.808934][   T61] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  518.808971][   T61] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  519.040756][   T30] audit: type=1326 audit(1789175543.272:1572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14309 comm="syz.3.2932" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700f0ec code=0x7ffc0000
[  519.041209][   T30] audit: type=1326 audit(1789175543.272:1573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14309 comm="syz.3.2932" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700f0ec code=0x7ffc0000
[  519.042263][   T30] audit: type=1326 audit(1789175543.272:1574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14309 comm="syz.3.2932" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=386 compat=1 ip=0xf700f0ec code=0x7ffc0000
[  519.095559][   T30] audit: type=1326 audit(1789175543.272:1575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14309 comm="syz.3.2932" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700f0ec code=0x7ffc0000
[  519.095602][   T30] audit: type=1326 audit(1789175543.342:1576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14309 comm="syz.3.2932" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700f0ec code=0x7ffc0000
[  519.174564][   T30] audit: type=1326 audit(1789175543.412:1577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14309 comm="syz.3.2932" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf700f0ec code=0x7ffc0000
[  519.175154][   T30] audit: type=1326 audit(1789175543.412:1578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14309 comm="syz.3.2932" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700f0ec code=0x7ffc0000
[  519.175995][   T30] audit: type=1326 audit(1789175543.412:1579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14309 comm="syz.3.2932" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700f0ec code=0x7ffc0000
[  519.179053][   T30] audit: type=1326 audit(1789175543.412:1580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14309 comm="syz.3.2932" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=360 compat=1 ip=0xf700f0ec code=0x7ffc0000
[  519.179213][   T30] audit: type=1326 audit(1789175543.412:1581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14309 comm="syz.3.2932" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700f0ec code=0x7ffc0000
[  519.463116][ T5690] usb 4-1: new high-speed USB device number 88 using dummy_hcd
[  519.515975][   T61] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  519.516012][   T61] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  519.643148][ T5690] usb 4-1: Using ep0 maxpacket: 8
[  519.655537][ T5690] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  519.664492][ T5690] usb 4-1: config index 0 descriptor too short (expected 301, got 45)
[  519.664544][ T5690] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  519.664566][ T5690] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  519.664590][ T5690] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  519.664613][ T5690] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  519.664655][ T5690] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  519.956220][ T5690] usb 4-1: usb_control_msg returned -32
[  519.956274][ T5690] usbtmc 4-1:16.0: can't read capabilities
[  520.098264][   T61] team0: Port device netdevsim1 removed
[  520.160469][   T61] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  520.160502][   T61] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  520.161793][T14310] usbtmc 4-1:16.0: send_request_dev_dep_msg_in returned -90
[  520.232364][ T5690] usb 4-1: USB disconnect, device number 88
[  520.344134][   T52] Bluetooth: hci0: command 0x0419 tx timeout
[  520.344230][ T5612] Bluetooth: hci5: command 0x041b tx timeout
[  520.482800][T14330] kvm: pic: single mode not supported
[  520.484652][T14330] kvm: pic: level sensitive irq not supported
[  520.507000][T14333] FAULT_INJECTION: forcing a failure.
[  520.507000][T14333] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  520.507055][T14333] CPU: 0 UID: 0 PID: 14333 Comm: syz.4.2937 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  520.507084][T14333] Tainted: [L]=SOFTLOCKUP
[  520.507093][T14333] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  520.507105][T14333] Call Trace:
[  520.507117][T14333]  <TASK>
[  520.507143][T14333]  dump_stack_lvl+0xe8/0x150
[  520.507178][T14333]  should_fail_ex+0x410/0x560
[  520.507204][T14333]  _copy_from_iter+0x1d3/0x1660
[  520.507225][T14333]  ? __alloc_skb+0x27a/0x7a0
[  520.507252][T14333]  ? __alloc_skb+0x27a/0x7a0
[  520.507276][T14333]  ? __alloc_skb+0x27a/0x7a0
[  520.507298][T14333]  ? __pfx__copy_from_iter+0x10/0x10
[  520.507319][T14333]  ? kmem_cache_alloc_node_noprof+0x1f9/0x610
[  520.507350][T14333]  ? __alloc_skb+0x27a/0x7a0
[  520.507370][T14333]  ? __alloc_skb+0x27a/0x7a0
[  520.507397][T14333]  ? netlink_sendmsg+0x650/0xb40
[  520.507427][T14333]  ? skb_put+0x112/0x210
[  520.507451][T14333]  netlink_sendmsg+0x6c0/0xb40
[  520.507488][T14333]  ? __pfx_netlink_sendmsg+0x10/0x10
[  520.507521][T14333]  ? apparmor_socket_sendmsg+0x98/0x360
[  520.507545][T14333]  ? __pfx_netlink_sendmsg+0x10/0x10
[  520.507573][T14333]  sock_sendmsg_nosec+0x13a/0x180
[  520.507607][T14333]  ____sys_sendmsg+0x54e/0x850
[  520.507637][T14333]  ? __pfx_____sys_sendmsg+0x10/0x10
[  520.507679][T14333]  ___sys_sendmsg+0x2a5/0x360
[  520.507703][T14333]  ? __lock_acquire+0x747/0x2de0
[  520.507729][T14333]  ? __pfx____sys_sendmsg+0x10/0x10
[  520.507755][T14333]  ? get_pid_task+0x20/0x1f0
[  520.507774][T14333]  ? get_pid_task+0x20/0x1f0
[  520.507792][T14333]  ? get_pid_task+0x20/0x1f0
[  520.507838][T14333]  ? __fget_files+0x2a/0x420
[  520.507866][T14333]  ? __fget_files+0x3a2/0x420
[  520.507902][T14333]  __sys_sendmsg+0x177/0x240
[  520.507929][T14333]  ? __pfx___sys_sendmsg+0x10/0x10
[  520.507972][T14333]  __do_fast_syscall_32+0x27a/0x6a0
[  520.507999][T14333]  ? do_fast_syscall_32+0x33/0x70
[  520.508033][T14333]  ? asm_int80_emulation+0x1a/0x20
[  520.508053][T14333]  ? do_int80_emulation+0x299/0x500
[  520.508076][T14333]  ? trace_irq_disable+0x3b/0x140
[  520.508101][T14333]  do_fast_syscall_32+0x33/0x70
[  520.508124][T14333]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  520.508149][T14333] RIP: 0023:0xf702f0ec
[  520.508169][T14333] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8
[  520.508188][T14333] RSP: 002b:00000000f541d50c EFLAGS: 00000206 ORIG_RAX: 0000000000000172
[  520.508211][T14333] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000280
[  520.508227][T14333] RDX: 0000000000004000 RSI: 0000000000000000 RDI: 0000000000000000
[  520.508240][T14333] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  520.508252][T14333] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  520.508266][T14333] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  520.508293][T14333]  </TASK>
[  520.581515][T14335] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2936'.
[  520.703160][T14269] bridge0: port 1(bridge_slave_0) entered blocking state
[  520.703306][T14269] bridge0: port 1(bridge_slave_0) entered disabled state
[  520.703486][T14269] bridge_slave_0: entered allmulticast mode
[  520.715432][T14269] bridge_slave_0: entered promiscuous mode
[  520.923173][   T61] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  520.923211][   T61] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  520.947098][T14269] bridge0: port 2(bridge_slave_1) entered blocking state
[  520.947207][T14269] bridge0: port 2(bridge_slave_1) entered disabled state
[  520.947370][T14269] bridge_slave_1: entered allmulticast mode
[  520.951009][T14269] bridge_slave_1: entered promiscuous mode
[  521.092343][T14269] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  521.119253][T14269] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  521.204894][T14269] team0: Port device team_slave_0 added
[  521.207985][T14269] team0: Port device team_slave_1 added
[  521.245878][T14269] batman_adv: batadv0: Adding interface: batadv_slave_0
[  521.245897][T14269] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  521.245922][T14269] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  521.248304][T14269] batman_adv: batadv0: Adding interface: batadv_slave_1
[  521.248345][T14269] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  521.248373][T14269] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  521.340641][ T5715] usb 1-1: new high-speed USB device number 70 using dummy_hcd
[  521.512598][ T5715] usb 1-1: Using ep0 maxpacket: 8
[  521.514066][T14353] netlink: 'syz.4.2941': attribute type 1 has an invalid length.
[  521.514109][T14353] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  521.546060][ T5715] usb 1-1: unable to get BOS descriptor or descriptor too short
[  521.550686][ T5715] usb 1-1: New USB device found, idVendor=1199, idProduct=6893, bcdDevice=16.b7
[  521.562704][ T5715] usb 1-1: unable to read config index 0 descriptor/start: -71
[  521.562831][ T5715] usb 1-1: can't read configurations, error -71
[  521.657119][T14269] hsr_slave_0: entered promiscuous mode
[  521.678712][T14269] hsr_slave_1: entered promiscuous mode
[  521.705756][T14269] debugfs: 'hsr0' already exists in 'hsr'
[  521.705786][T14269] Cannot create hsr debugfs directory
[  522.253327][ T5704] usb 4-1: new full-speed USB device number 89 using dummy_hcd
[  522.405584][ T5704] usb 4-1: New USB device found, idVendor=17ef, idProduct=6062, bcdDevice= 0.00
[  522.409097][ T5704] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid maxpacket 1024, setting to 64
[  522.409132][ T5704] usb 4-1: config 0 interface 0 altsetting 2 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[  522.409158][ T5704] usb 4-1: config 0 interface 0 has no altsetting 0
[  522.409192][ T5704] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  522.413098][ T5704] usb 4-1: config 0 descriptor??
[  522.422461][T14372] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  522.423055][T14372] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  522.434065][ T5612] Bluetooth: hci5: command 0x041b tx timeout
[  522.647193][T14387] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2948'.
[  522.956555][ T5704] lenovo 0003:17EF:6062.0035: unknown main item tag 0x2
[  522.956597][ T5704] lenovo 0003:17EF:6062.0035: unknown main item tag 0x3
[  522.956624][ T5704] lenovo 0003:17EF:6062.0035: unknown main item tag 0x1
[  522.956653][ T5704] lenovo 0003:17EF:6062.0035: unknown main item tag 0x2
[  522.994031][ T5704] lenovo 0003:17EF:6062.0035: hidraw0: USB HID v0.01 Device [HID 17ef:6062] on usb-dummy_hcd.3-1/input0
[  523.365738][   T61] bridge_slave_1: left allmulticast mode
[  523.365767][   T61] bridge_slave_1: left promiscuous mode
[  523.365906][   T61] bridge0: port 2(bridge_slave_1) entered disabled state
[  523.440481][   T61] bridge_slave_0: left allmulticast mode
[  523.440502][   T61] bridge_slave_0: left promiscuous mode
[  523.442124][   T61] bridge0: port 1(bridge_slave_0) entered disabled state
[  523.582024][   T61] batman_adv: batadv0: Interface deactivated: gretap1
[  523.582090][   T61] batman_adv: batadv0: Interface deactivated: gretap2
[  523.591155][   T61] tipc: Resetting bearer <eth:syzkaller0>
[  523.609811][   T61] batman_adv: batadv0: Interface deactivated: syzkaller0
[  524.440272][   T61] gretap0 (unregistering): left promiscuous mode
[  524.496973][   T61] batman_adv: batadv0: Removing interface: gretap1
[  524.510355][ T5612] Bluetooth: hci5: command 0x041b tx timeout
[  524.552005][   T61] batman_adv: batadv0: Removing interface: gretap2
[  524.645685][   T61] bond2 (unregistering): (slave gre1): Releasing backup interface
[  524.645746][   T61] gre1 (unregistering): left promiscuous mode
[  524.822474][   T61] tipc: Disabling bearer <eth:syzkaller0>
[  524.832359][   T61] batman_adv: batadv0: Removing interface: syzkaller0
[  524.905032][   T61] bond0 (unregistering): left promiscuous mode
[  524.905059][   T61] bond_slave_0: left promiscuous mode
[  524.905557][   T61] bond_slave_1: left promiscuous mode
[  524.942460][   T61] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  524.948445][   T61] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  524.950867][   T61] bond0 (unregistering): Released all slaves
[  524.990061][   T61] bond1 (unregistering): Released all slaves
[  525.035898][   T61] bond2 (unregistering): Released all slaves
[  525.071110][T14403] netlink: 'syz.1.2953': attribute type 1 has an invalid length.
[  525.071151][T14403] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  525.164362][T14396] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  525.164604][T14396] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  525.166928][T14401] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  525.168219][   T30] kauditd_printk_skb: 81 callbacks suppressed
[  525.168237][   T30] audit: type=1326 audit(1789175549.412:1663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14400 comm="syz.4.2952" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf702f0ec code=0x7ffc0000
[  525.168279][   T30] audit: type=1326 audit(1789175549.412:1664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14400 comm="syz.4.2952" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf702f0ec code=0x7ffc0000
[  525.263727][   T61] .!: left promiscuous mode
[  525.278640][T14401] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  525.282229][   T30] audit: type=1326 audit(1789175549.522:1665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14400 comm="syz.4.2952" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702f0ec code=0x7ffc0000
[  525.282281][   T30] audit: type=1326 audit(1789175549.522:1666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14400 comm="syz.4.2952" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702f0ec code=0x7ffc0000
[  525.303519][   T30] audit: type=1326 audit(1789175549.522:1667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14400 comm="syz.4.2952" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf702f0ec code=0x7ffc0000
[  525.303573][   T30] audit: type=1326 audit(1789175549.522:1668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14400 comm="syz.4.2952" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702f0ec code=0x7ffc0000
[  525.303635][   T30] audit: type=1326 audit(1789175549.522:1669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14400 comm="syz.4.2952" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702f0ec code=0x7ffc0000
[  525.309550][   T30] audit: type=1326 audit(1789175549.522:1670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14400 comm="syz.4.2952" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf702f0ec code=0x7ffc0000
[  525.309602][   T30] audit: type=1326 audit(1789175549.522:1671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14400 comm="syz.4.2952" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702f0ec code=0x7ffc0000
[  525.309640][   T30] audit: type=1326 audit(1789175549.522:1672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14400 comm="syz.4.2952" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702f0ec code=0x7ffc0000
[  525.680806][ T5682] usb 4-1: USB disconnect, device number 89
[  526.122113][   T61] tipc: Left network mode
[  526.987139][T14433] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2956'.
[  526.991852][T14433] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2956'.
[  527.226363][   T52] Bluetooth: hci5: command 0x041b tx timeout
[  527.226404][   T52] Bluetooth: hci0: command 0x0419 tx timeout
[  527.352176][T14443] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2959'.
[  528.353667][   T61] hsr_slave_0: left promiscuous mode
[  528.396442][   T61] hsr_slave_1: left promiscuous mode
[  528.397179][   T61] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  528.397195][   T61] batman_adv: batadv0: Removing interface: batadv_slave_0
[  528.818448][   T61] veth1_macvtap: left promiscuous mode
[  528.818492][   T61] veth0_macvtap: left promiscuous mode
[  528.847027][   T61] veth1_vlan: left promiscuous mode
[  528.848303][   T61] veth0_vlan: left promiscuous mode
[  529.312853][ T5612] Bluetooth: hci5: command 0x041b tx timeout
[  529.722674][ T5697] usb 1-1: new full-speed USB device number 72 using dummy_hcd
[  529.862669][ T5697] usb 1-1: device descriptor read/64, error -71
[  530.102724][ T5697] usb 1-1: new full-speed USB device number 73 using dummy_hcd
[  530.232700][ T5697] usb 1-1: device descriptor read/64, error -71
[  530.349461][ T5697] usb usb1-port1: attempt power cycle
[  530.682837][ T5697] usb 1-1: new full-speed USB device number 74 using dummy_hcd
[  530.701915][   T61] team0 (unregistering): Port device team_slave_1 removed
[  530.712163][ T5697] usb 1-1: device descriptor read/8, error -71
[  530.719908][   T61] team0 (unregistering): Port device team_slave_0 removed
[  530.732459][T14472] netlink: 'syz.1.2963': attribute type 1 has an invalid length.
[  530.732485][T14472] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  530.946891][ T5697] usb 1-1: new full-speed USB device number 75 using dummy_hcd
[  530.966470][ T5697] usb 1-1: device descriptor read/8, error -71
[  531.030422][T14477] netlink: 'syz.4.2966': attribute type 6 has an invalid length.
[  531.030454][T14477] FAULT_INJECTION: forcing a failure.
[  531.030454][T14477] name failslab, interval 1, probability 0, space 0, times 0
[  531.030483][T14477] CPU: 1 UID: 0 PID: 14477 Comm: syz.4.2966 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  531.030511][T14477] Tainted: [L]=SOFTLOCKUP
[  531.030518][T14477] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  531.030530][T14477] Call Trace:
[  531.030538][T14477]  <TASK>
[  531.030547][T14477]  dump_stack_lvl+0xe8/0x150
[  531.030580][T14477]  should_fail_ex+0x410/0x560
[  531.030604][T14477]  should_failslab+0xa8/0x100
[  531.030628][T14477]  __kmalloc_cache_noprof+0xa3/0x600
[  531.030649][T14477]  ? nfnetlink_rcv+0x1021/0x28c0
[  531.030673][T14477]  ? nfnetlink_rcv+0x1021/0x28c0
[  531.030704][T14477]  nfnetlink_rcv+0x1021/0x28c0
[  531.030770][T14477]  ? __pfx_nfnetlink_rcv+0x10/0x10
[  531.030809][T14477]  ? ref_tracker_free+0x689/0x830
[  531.030852][T14477]  ? skb_clone+0x246/0x3a0
[  531.030880][T14477]  ? __netlink_deliver_tap+0x811/0x860
[  531.030915][T14477]  ? netlink_deliver_tap+0x2e/0x1b0
[  531.030938][T14477]  ? netlink_deliver_tap+0x2e/0x1b0
[  531.030969][T14477]  netlink_unicast+0x7bd/0x940
[  531.031000][T14477]  netlink_sendmsg+0x813/0xb40
[  531.031036][T14477]  ? __pfx_netlink_sendmsg+0x10/0x10
[  531.031071][T14477]  ? apparmor_socket_sendmsg+0x98/0x360
[  531.031094][T14477]  ? __pfx_netlink_sendmsg+0x10/0x10
[  531.031120][T14477]  sock_sendmsg_nosec+0x13a/0x180
[  531.031154][T14477]  ____sys_sendmsg+0x54e/0x850
[  531.031183][T14477]  ? __pfx_____sys_sendmsg+0x10/0x10
[  531.031220][T14477]  ___sys_sendmsg+0x2a5/0x360
[  531.031242][T14477]  ? __lock_acquire+0x747/0x2de0
[  531.031267][T14477]  ? __pfx____sys_sendmsg+0x10/0x10
[  531.031290][T14477]  ? get_pid_task+0x20/0x1f0
[  531.031309][T14477]  ? get_pid_task+0x20/0x1f0
[  531.031326][T14477]  ? get_pid_task+0x20/0x1f0
[  531.031375][T14477]  ? __fget_files+0x2a/0x420
[  531.031399][T14477]  ? __fget_files+0x3a2/0x420
[  531.031435][T14477]  __sys_sendmsg+0x177/0x240
[  531.031462][T14477]  ? __pfx___sys_sendmsg+0x10/0x10
[  531.031499][T14477]  __do_fast_syscall_32+0x27a/0x6a0
[  531.031521][T14477]  ? do_fast_syscall_32+0x33/0x70
[  531.031539][T14477]  ? asm_int80_emulation+0x1a/0x20
[  531.031557][T14477]  ? do_int80_emulation+0x299/0x500
[  531.031576][T14477]  ? trace_irq_disable+0x3b/0x140
[  531.031598][T14477]  do_fast_syscall_32+0x33/0x70
[  531.031621][T14477]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  531.031642][T14477] RIP: 0023:0xf702f0ec
[  531.031660][T14477] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8
[  531.031677][T14477] RSP: 002b:00000000f541d50c EFLAGS: 00000206 ORIG_RAX: 0000000000000172
[  531.031700][T14477] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000080
[  531.031714][T14477] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  531.031734][T14477] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  531.031747][T14477] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  531.031758][T14477] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  531.031788][T14477]  </TASK>
[  531.089772][ T5697] usb usb1-port1: unable to enumerate USB device
[  531.402431][ T5612] Bluetooth: hci5: command 0x041b tx timeout
[  531.558000][T14479] caif0: tun_chr_ioctl cmd 1074025672
[  531.558026][T14479] caif0: ignored: set checksum disabled
[  531.689719][T14269] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  531.710615][T14269] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  531.720926][T14269] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  531.774636][T14269] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  531.786956][T14269] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  531.811482][T14269] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  531.823425][T14269] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  531.887467][T14269] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  531.958005][   T61] IPVS: stop unused estimator thread 0...
[  532.287242][T14496] nvme_fabrics: missing parameter 'traddr=%s'
[  532.522334][T14507] netlink: 'syz.4.2974': attribute type 1 has an invalid length.
[  532.522374][T14507] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  532.724981][T14269] 8021q: adding VLAN 0 to HW filter on device bond0
[  532.827458][T14269] 8021q: adding VLAN 0 to HW filter on device team0
[  532.872001][   T38] bridge0: port 1(bridge_slave_0) entered blocking state
[  532.872103][   T38] bridge0: port 1(bridge_slave_0) entered forwarding state
[  532.931329][ T1016] bridge0: port 2(bridge_slave_1) entered blocking state
[  532.931445][ T1016] bridge0: port 2(bridge_slave_1) entered forwarding state
[  533.082981][T14514] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[  533.090768][T14269] 8021q: adding VLAN 0 to HW filter on device batadv0
[  533.151035][T14514] fuse: Unknown parameter 'f0����Sb���s�ʤ����
[  533.151035][T14514] �\�.�	oQ��5�v��4ͽr~q�l��vm�NVj��5\���'�m�Z7��^~�<��h["!��Y�gxc���Q�'
[  533.231104][T14269] veth0_vlan: entered promiscuous mode
[  533.269904][T14269] veth1_vlan: entered promiscuous mode
[  533.314822][T14484] syz.3.2968 (14484): drop_caches: 2
[  533.320658][T14269] veth0_macvtap: entered promiscuous mode
[  533.348381][T14269] veth1_macvtap: entered promiscuous mode
[  533.385094][T14269] batman_adv: batadv0: Interface activated: batadv_slave_0
[  533.402188][T14269] batman_adv: batadv0: Interface activated: batadv_slave_1
[  533.524379][ T1039] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  533.528911][ T1016] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  533.529836][ T1016] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  533.529877][ T1016] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  533.682951][ T1016] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  533.682972][ T1016] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  533.859669][ T8535] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  533.859691][ T8535] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  534.542488][T14534] xt_hashlimit: size too large, truncated to 1048576
[  534.896413][   T52] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  534.918856][   T52] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  534.920425][   T52] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  534.933217][   T52] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  534.933811][   T52] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  535.050850][T14544] netlink: 'syz.1.2984': attribute type 1 has an invalid length.
[  535.050894][T14544] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  535.408587][T14535] xt_hashlimit: size too large, truncated to 1048576
[  535.443802][T14548] x_tables: ip6_tables: LED.0 target: invalid size 40 (kernel) != (user) 120
[  535.454420][ T5704] usb 5-1: USB disconnect, device number 61
[  535.811305][T14554] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  535.886105][T14556] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2986'.
[  535.941059][   T61] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  535.941097][   T61] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  535.953877][T14564] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2989'.
[  536.272649][   T61] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  536.272692][   T61] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  536.311770][T14579] syzkaller0: left promiscuous mode
[  536.311795][T14579] syzkaller0: left allmulticast mode
[  536.330573][T14578] netlink: 'syz.2.2995': attribute type 1 has an invalid length.
[  536.330614][T14578] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  536.505789][   T61] team0: Port device netdevsim1 removed
[  536.519580][   T61] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  536.519616][   T61] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  536.779204][T14598] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3000'.
[  536.784170][   T61] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  536.784205][   T61] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  536.840683][T14583] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  536.858240][T14583] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2997'.
[  536.866588][ T5704] wlan1: authenticate with 08:02:11:00:00:00 (local address=08:02:11:00:00:01)
[  536.866615][ T5704] wlan1: send auth to 08:02:11:00:00:00 (try 1/3)
[  536.866900][ T1039] wlan1: send auth to 08:02:11:00:00:00 (try 2/3)
[  536.867023][ T1039] wlan1: send auth to 08:02:11:00:00:00 (try 3/3)
[  536.867123][ T1039] wlan1: authentication with 08:02:11:00:00:00 timed out
[  536.984731][   T52] Bluetooth: hci3: command tx timeout
[  537.188757][T14609] netlink: 'syz.3.3005': attribute type 1 has an invalid length.
[  537.192764][ T5697] usb 2-1: new high-speed USB device number 85 using dummy_hcd
[  537.226250][T14612] netlink: 'syz.0.3006': attribute type 1 has an invalid length.
[  537.226287][T14612] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  537.364182][ T5697] usb 2-1: Using ep0 maxpacket: 32
[  537.365211][ T5697] usb 2-1: New USB device found, idVendor=1b1c, idProduct=1c09, bcdDevice= 0.00
[  537.368896][ T5697] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  537.368955][ T5697] usb 2-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  537.368984][ T5697] usb 2-1: config 0 interface 0 has no altsetting 0
[  537.369020][ T5697] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  537.378811][ T5697] usb 2-1: config 0 descriptor??
[  537.525454][   T61] bridge_slave_1: left allmulticast mode
[  537.525483][   T61] bridge_slave_1: left promiscuous mode
[  537.525754][   T61] bridge0: port 2(bridge_slave_1) entered disabled state
[  537.528269][   T61] bridge_slave_0: left allmulticast mode
[  537.528296][   T61] bridge_slave_0: left promiscuous mode
[  537.528498][   T61] bridge0: port 1(bridge_slave_0) entered disabled state
[  537.530497][   T61] Oops: general protection fault, probably for non-canonical address 0xfbd59c0000000024: 0000 [#1] SMP KASAN PTI
[  537.578805][   T61] KASAN: maybe wild-memory-access in range [0xdead000000000120-0xdead000000000127]
[  537.588095][   T61] CPU: 0 UID: 0 PID: 61 Comm: kworker/u8:4 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  537.598969][   T61] Tainted: [L]=SOFTLOCKUP
[  537.603305][   T61] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  537.613380][   T61] Workqueue: netns cleanup_net
[  537.618174][   T61] RIP: 0010:br_del_frame+0xd1/0x160
[  537.623401][   T61] Code: f7 4c 8b 73 10 48 83 c3 18 49 89 dd 49 c1 ed 03 43 80 7c 25 00 00 74 08 48 89 df e8 19 bf 83 f7 4c 8b 3b 4c 89 f8 48 c1 e8 03 <42> 80 3c 20 00 74 08 4c 89 ff e8 f0 bf 83 f7 4d 89 37 4d 85 f6 74
[  537.643028][   T61] RSP: 0018:ffffc9000202f7c0 EFLAGS: 00010a06
[  537.649104][   T61] RAX: 1bd5a00000000024 RBX: ffffffff907bf158 RCX: ffff88801df45dc0
[  537.657079][   T61] RDX: 0000000000000000 RSI: ffffffff907bf140 RDI: ffffffff907bf150
[  537.665066][   T61] RBP: 000000000000001c R08: ffffffff822c3a81 R09: 0000000000000000
[  537.673042][   T61] R10: dffffc0000000000 R11: fffffbfff20f4570 R12: dffffc0000000000
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  537.681005][   T61] R13: 1ffffffff20f7e2b R14: 0000000000000000 R15: dead000000000122
[  537.688979][   T61] FS:  0000000000000000(0000) GS:ffff888124cd2000(0000) knlGS:0000000000000000
[  537.697928][   T61] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  537.704516][   T61] CR2: 00007f45cad73a10 CR3: 00000000770ce000 CR4: 00000000003526f0
[  537.712528][   T61] Call Trace:
[  537.715800][   T61]  <TASK>
[  537.718722][   T61]  br_cfm_port_del+0x106/0x1a0
[  537.723488][   T61]  del_nbp+0x178/0x9f0
[  537.727554][   T61]  br_dev_delete+0x6e/0x130
[  537.732061][   T61]  br_net_exit_rtnl+0xb1/0x120
[  537.736834][   T61]  ? __pfx_br_net_exit_rtnl+0x10/0x10
[  537.742241][   T61]  ops_undo_list+0x319/0x8d0
[  537.746829][   T61]  ? __pfx_ops_undo_list+0x10/0x10
[  537.751933][   T61]  ? idr_destroy+0x218/0x290
[  537.756510][   T61]  ? do_raw_spin_unlock+0xf5/0x200
[  537.761631][   T61]  cleanup_net+0x572/0x810
[  537.766066][   T61]  ? __pfx_cleanup_net+0x10/0x10
[  537.771002][   T61]  ? rcu_is_watching+0x16/0xb0
[  537.775762][   T61]  ? process_scheduled_works+0x97a/0x1630
[  537.781483][   T61]  process_scheduled_works+0xc3d/0x1630
[  537.787037][   T61]  ? __pfx_process_scheduled_works+0x10/0x10
[  537.793021][   T61]  ? assign_work+0x3cf/0x5d0
[  537.797611][   T61]  worker_thread+0xa47/0xfb0
[  537.802206][   T61]  ? __kthread_parkme+0x71/0x1f0
[  537.807144][   T61]  kthread+0x38b/0x480
[  537.811209][   T61]  ? __pfx_worker_thread+0x10/0x10
[  537.816316][   T61]  ? __pfx_kthread+0x10/0x10
[  537.820903][   T61]  ret_from_fork+0x514/0xb70
[  537.825485][   T61]  ? __pfx_ret_from_fork+0x10/0x10
[  537.830595][   T61]  ? __switch_to+0xc89/0x1420
[  537.835306][   T61]  ? __pfx_kthread+0x10/0x10
[  537.839894][   T61]  ret_from_fork_asm+0x1a/0x30
[  537.844665][   T61]  </TASK>
[  537.847692][   T61] Modules linked in:
[  537.853178][   T61] ---[ end trace 0000000000000000 ]---
[  537.905157][   T61] RIP: 0010:br_del_frame+0xd1/0x160
[  537.905205][   T61] Code: f7 4c 8b 73 10 48 83 c3 18 49 89 dd 49 c1 ed 03 43 80 7c 25 00 00 74 08 48 89 df e8 19 bf 83 f7 4c 8b 3b 4c 89 f8 48 c1 e8 03 <42> 80 3c 20 00 74 08 4c 89 ff e8 f0 bf 83 f7 4d 89 37 4d 85 f6 74
[  537.905223][   T61] RSP: 0018:ffffc9000202f7c0 EFLAGS: 00010a06
[  537.905242][   T61] RAX: 1bd5a00000000024 RBX: ffffffff907bf158 RCX: ffff88801df45dc0
[  537.905284][   T61] RDX: 0000000000000000 RSI: ffffffff907bf140 RDI: ffffffff907bf150
[  537.905299][   T61] RBP: 000000000000001c R08: ffffffff822c3a81 R09: 0000000000000000
[  537.905313][   T61] R10: dffffc0000000000 R11: fffffbfff20f4570 R12: dffffc0000000000
[  537.905328][   T61] R13: 1ffffffff20f7e2b R14: 0000000000000000 R15: dead000000000122
[  537.905343][   T61] FS:  0000000000000000(0000) GS:ffff888124cd2000(0000) knlGS:0000000000000000
[  537.905360][   T61] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  537.905375][   T61] CR2: 0000000033723ffc CR3: 00000000781b8000 CR4: 00000000003526f0
[  537.905412][   T61] Kernel panic - not syncing: Fatal exception
[  538.006275][   T61] Kernel Offset: disabled
[  538.010602][   T61] Rebooting in 86400 seconds..