last executing test programs: 2m9.716396478s ago: executing program 3 (id=683): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=@newneigh={0x28, 0x1c, 0x401, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x40, 0x14}, [@NDA_DST_MAC={0xa, 0x1, @local}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000}, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff0000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ff1000/0x4000)=nil, 0x0}, 0x68) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000200), 0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0xc001) ioprio_set$pid(0x2, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r1, r1, 0x0, 0x200000) r2 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x43cb1, 0x1c080, 0xa, 0x20002f7}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x3, &(0x7f0000000000)=ANY=[@ANYRES32=r0], 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x78, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) r3 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r5, 0x29, 0x12, &(0x7f0000000000)=0x6, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x1, 0xb, &(0x7f0000001580)=ANY=[@ANYBLOB="180000000100000000000b0008000000180500002020702500000000002020207b1af8ff00000000bfa10000000000000401000000feffffb702000008000000b70300000100000085000000a400000095"], &(0x7f0000000000)='syzkaller\x00', 0xe, 0xff5, &(0x7f00000003c0)=""/4085, 0x40f00}, 0x94) r6 = syz_genetlink_get_family_id$fou(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$FOU_CMD_GET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x34, r6, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@FOU_ATTR_LOCAL_V4={0x8, 0x6, @remote}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e21}, @FOU_ATTR_IFINDEX={0x8}, @FOU_ATTR_PEER_V4={0x8, 0x8, @multicast1}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x34) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r3, 0x0, 0x0) fchdir(r7) r8 = openat(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0) lseek(r8, 0x4, 0x1) 2m9.274919473s ago: executing program 3 (id=688): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x3, 0xc, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000000000000000000000000000850000002e0000001801"], 0x0}, 0x94) r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000000140)={&(0x7f0000000000)={0xa, 0x4e22, 0xfffffffb, @mcast2, 0x9}, 0x1c, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="2800000000000000290000000400fe802b0110000700010004"], 0x28}, 0x4004004) 2m9.159091922s ago: executing program 3 (id=689): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010800d972a440b72040155ab7010203010902120001000000000904000000ff"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, &(0x7f0000000bc0)={0x44, &(0x7f0000000900)=ANY=[@ANYBLOB="e01506"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB="240000000104010200000180000000000000000008000540000000000500010001"], 0x24}}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "2d9421fe8a4c9563", "cf6ff9ff337ed301000100c747fbbfc1", "dbdc27ff", "16de86d67a8426bd"}, 0x28) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) ioctl$int_in(r2, 0x5452, &(0x7f0000000540)=0x1000) recvfrom(r2, &(0x7f0000002800)=""/4071, 0xfffffffffffffdab, 0x17, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r2) setsockopt$sock_int(r2, 0x1, 0x12, &(0x7f00000000c0)=0x8, 0x4) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) r4 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r4, 0xc0205649, &(0x7f0000000080)={0x0, 0x1, 0x4000006, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x98f90a, 0x78, '\x00', @p_u16=&(0x7f00000003c0)=0x6}}) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMAXCID(r3, 0x40047451, &(0x7f0000000200)=0x8) ioctl$PPPIOCSFLAGS1(r3, 0x40047459, &(0x7f0000000100)=0x2000004) pwritev(r3, &(0x7f00000002c0)=[{&(0x7f0000000300)}], 0x1, 0x7, 0x1) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c0000000104050000000000000000000300000005000100"], 0x3c}, 0x1, 0x0, 0x0, 0x24000830}, 0x20000888) syz_emit_ethernet(0x11, &(0x7f0000002d00)={@broadcast, @random="46a84d74094a", @void, {@llc={0x8864, {@llc={0x8e, 0x42, '*'}}}}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000940)={0x84, &(0x7f0000000440)={0x0, 0xc, 0x3, "182102"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$inet_udp(0x2, 0x2, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) 2m7.064594202s ago: executing program 3 (id=697): r0 = socket$inet6(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000c80)={'batadv_slave_1\x00', 0x0}) r3 = socket(0x2a, 0x2, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x8, 0x40, 0x7fff0000}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r6, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f00000000c0)='./file0/../file0/../file0/../file0\x00', &(0x7f0000000080)='./file0/../file0/../file0/../file0/file0\x00') sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x2}}]}, 0x38}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$nl_route(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@ipv4_newaddr={0x48, 0x14, 0x509, 0x70bd27, 0x25dfdbfc, {0x2, 0x1f, 0x0, 0xff, r2}, [@IFA_BROADCAST={0x8, 0x4, @rand_addr=0x64010104}, @IFA_FLAGS={0x8, 0x8, 0x100}, @IFA_LOCAL={0x8, 0x2, @private=0xa010102}, @IFA_ADDRESS={0x8, 0x1, @local}, @IFA_RT_PRIORITY={0x8, 0x9, 0x3}, @IFA_RT_PRIORITY={0x8, 0x9, 0x107}]}, 0x48}, 0x1, 0x0, 0x0, 0x4040014}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendto$inet6(r0, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 2m6.869056209s ago: executing program 3 (id=700): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002ebd700e000000001400000018000180140002006e657464657673696d30000000000009050019000000000308001500f1ffff01050018"], 0x44}}, 0x0) 2m6.490379822s ago: executing program 3 (id=704): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x1, 0xb, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x8, 0xfed, &(0x7f0000001840)=""/4077}, 0x94) r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000680)="5c00000014006b04000000d86e6c1d000a117ea6e070d6060003910000000000250002000f00000017d34460bc24eab556a705251e6182949a36c23d3b48dfd8cdbf9767b4fa51f61400c9f4d49346d88037e786a6d0bdd7000000", 0x5b}, {&(0x7f0000000280)="e1", 0x1}], 0x2, 0x0, 0x0, 0x1f00c00e}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid_for_children\x00') sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@newlink={0x30, 0x10, 0x49920d862a92153b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x18c8a, 0xd10c}, [@IFLA_TXQLEN={0x8, 0xd, 0x5}, @IFLA_NET_NS_FD={0x8, 0x1c, r2}]}, 0x30}}, 0x0) ioctl$NS_GET_USERNS(r2, 0xb701, 0x0) 2m6.057767471s ago: executing program 32 (id=704): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x1, 0xb, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x8, 0xfed, &(0x7f0000001840)=""/4077}, 0x94) r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000680)="5c00000014006b04000000d86e6c1d000a117ea6e070d6060003910000000000250002000f00000017d34460bc24eab556a705251e6182949a36c23d3b48dfd8cdbf9767b4fa51f61400c9f4d49346d88037e786a6d0bdd7000000", 0x5b}, {&(0x7f0000000280)="e1", 0x1}], 0x2, 0x0, 0x0, 0x1f00c00e}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid_for_children\x00') sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@newlink={0x30, 0x10, 0x49920d862a92153b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x18c8a, 0xd10c}, [@IFLA_TXQLEN={0x8, 0xd, 0x5}, @IFLA_NET_NS_FD={0x8, 0x1c, r2}]}, 0x30}}, 0x0) ioctl$NS_GET_USERNS(r2, 0xb701, 0x0) 12.808026494s ago: executing program 1 (id=1420): unshare(0x2a020400) socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x670, 0x5, 0x400, 0x2c0, 0x208, 0xffffffff, 0x2c0, 0x0, 0x368, 0x368, 0xffffffff, 0x368, 0x368, 0x5, 0x0, {[{{@ip={@broadcast, @dev={0xac, 0x14, 0x14, 0x1c}, 0x0, 0xffff00, 'vxcan1\x00', 'dummy0\x00', {0xff}, {}, 0x2, 0x3, 0x1a}, 0x0, 0xf0, 0x128, 0x48, {}, [@common=@unspec=@nfacct={{0x48}, {'syz1\x00', 0x9fbb}}, @common=@unspec=@devgroup={{0x38}, {0x3, 0x7, 0x615, 0x9a, 0x5}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x14, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, @port=0x4e20, @gre_key=0x3}}}}, {{@uncond, 0x0, 0xb0, 0xe0, 0x0, {}, [@common=@set={{0x40}, {{0x2, [0x1, 0x6, 0x0, 0x4, 0x1, 0x5], 0x1, 0x2}}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xfffc, 0xd, 0x6}, {0x2, 0x4, 0x3}, 0x1000, 0x100}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x14, @ipv6=@private2, @ipv4=@local, @gre_key, @port=0x4e20}}}, {{@ip={@private=0xa010101, @dev={0xac, 0x14, 0x14, 0x15}, 0xffffffff, 0xffffff00, 'erspan0\x00', 'veth1_to_bridge\x00', {0xff}, {0xff}, 0x88, 0x0, 0x8}, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @rand_addr=0xffffffff, @empty, @icmp_id, @port=0x4e21}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x460) r1 = syz_usb_connect$lan78xx(0x0, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f0000001140)={0x34, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) socket$nl_xfrm(0x10, 0x3, 0x6) socket(0x80000000000000a, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) epoll_create1(0x80000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xfffffffffffffee6}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24040045) r3 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xce}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}, {0x0}], 0x2) io_uring_enter(r3, 0x2219, 0xcf74, 0x16, 0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) socket$nl_generic(0x10, 0x3, 0x10) pipe2(&(0x7f0000000000), 0x80000) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x181603, 0x0) ioctl$KVM_CAP_X86_DISABLE_EXITS(0xffffffffffffffff, 0x4068aea3, 0x0) syz_usb_control_io$lan78xx(r1, 0x0, 0x0) 10.240533483s ago: executing program 0 (id=1434): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x13, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000010000000000000280000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000000000088500000086000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0xfca804a0, 0xffffffffffffffba, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r2 = syz_usb_connect$cdc_ncm(0x5, 0x6e, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x8, 0x90, 0x4a, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x5}, {0xd, 0x24, 0xf, 0x1, 0x5f467d72, 0x5, 0x9}, {0x6, 0x24, 0x1a, 0x1008, 0x2}}, {{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x9, 0x81, 0x1}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x8, 0x7f, 0x6, 0xde}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x0, 0x7f, 0xf}}}}}}}]}}, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0}) syz_usb_connect$uac3(0x5, 0x8c, &(0x7f0000000000)=ANY=[@ANYBLOB="1201100100000010b519210040000102030109027a0003010e0002080b0102010030400904000000010130000a24010e1600050000000c240b0002010000000d06000904010000010230000904010101010220000905"], 0x0) syz_usb_disconnect(r2) memfd_create(&(0x7f0000000140)='(-:!^\x00', 0xd) r3 = syz_usb_connect(0x2, 0x24, &(0x7f0000000440)={{0x12, 0x1, 0x310, 0xf3, 0x6b, 0xb2, 0x20, 0x12d1, 0xebed, 0x36f5, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x8, 0x3, 0x90, 0x5, "", [{{0x9, 0x4, 0xad, 0x4, 0x0, 0xff, 0x6, 0x75, 0x91}}]}}]}}, 0x0) syz_usb_control_io$cdc_ecm(r3, &(0x7f0000000740)={0x14, 0x0, &(0x7f0000000700)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket(0x1e, 0x5, 0xb) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4c0000001000030428bd58000000000000000000", @ANYRES32=0x0, @ANYBLOB="46060900200000002400128009000100766c616e000000001400028006000100010000000600050088a8000008000500", @ANYRES32=r9, @ANYBLOB], 0x4c}, 0x1, 0x0, 0x0, 0x600}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x40000}, 0x0) socket(0x1e, 0x4, 0x6c0) syz_usb_control_io$uac1(r3, 0x0, 0x0) syz_usb_control_io$uac1(r3, 0x0, &(0x7f00000000c0)={0x44, &(0x7f0000000080)={0x20, 0xa, 0x1, "01"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 9.725223967s ago: executing program 1 (id=1436): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}, 0x1, 0x0, 0x0, 0x20048811}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f0000000100)={{0x0, 0xdddd1000, 0x10, 0x0, 0x8, 0x2, 0x0, 0x2, 0x0, 0x8, 0x9, 0x10}, {0xffff1000, 0x58000, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4}, {0x2000, 0x0, 0x0, 0x0, 0x7, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfc}, {0x3000, 0x54000, 0xe, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x3, 0x4}, {0xeeee0000, 0x3000, 0x9, 0x0, 0xff, 0x4, 0x0, 0xe, 0x0, 0x3c}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x10, 0x80}, {0xdddd1000, 0x0, 0xa, 0x6, 0x0, 0x0, 0x2}, {0x8080000, 0x3000, 0x4, 0x0, 0xfe, 0x1, 0x10, 0xa, 0x26, 0x0, 0x0, 0x40}, {0x80ac000}, {0x4000}, 0xddf8ffdb, 0x0, 0x8080000, 0xf0, 0x8, 0xdd00, 0x0, [0xe, 0x0, 0x1]}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c86dd0700100000004000000060ec97000fc83c00fe800000000007ffffff0000000000aaff02000000000000000000000000000106"], 0xffe) 9.01586558s ago: executing program 1 (id=1439): unshare(0x2a020400) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) write(r1, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x6, 0x0, 0x0) 8.818407266s ago: executing program 2 (id=1440): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) sendmsg$NL80211_CMD_DEL_PMKSA(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x2000c841}, 0x400c4) r1 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r1, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) r2 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x74, &(0x7f0000000000)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x73, 0x0, @private=0x300, @multicast1}, {0x0, 0x0, 0xfffffe9a, 0x0, @gue={{0x2}}}}}}}, 0x0) unshare(0x6020400) fadvise64(r0, 0x8, 0xb, 0x0) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r3, 0xaf01, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) sendmmsg$inet(r4, &(0x7f0000003240)=[{{&(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10, &(0x7f00000016c0)=[{&(0x7f0000001540)="94", 0xffe3}], 0x1}}], 0x1, 0x4000800) syz_kvm_setup_syzos_vm$x86(r3, &(0x7f0000c00000/0x400000)=nil) r5 = syz_usb_connect(0x0, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000709c3120e80401669b81010203010902120001010000000904"], 0x0) syz_usb_control_io$cdc_ecm(r5, &(0x7f0000000600)={0x14, &(0x7f0000000540)={0x0, 0x9, 0x2, {0x2, 0xb}}, &(0x7f00000005c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000780)={0x1c, &(0x7f0000000640)={0x40, 0xf, 0xb0, "491e5734fd553054ce31021d0cd12d5de80c3139df5ced4666c100258f250376b9a35de2503c580f98caf79851ba3a65f8dc03f071dce04e6a278bdd69820f159937318bebfc8756fb241b4bfd01c9a70252ce847966fedff9d5c49beb6e9c2053cde40ae73cdad2473befccab5d87b5030d5167840ed2ecbb59126cd42e2e0818cfec1a1fc5c371ec7b34d51379aeaf62518c1381bba1fe2dfc3d2cb3824ab99c8a4a4454154e19112126d5e0cb1460"}, &(0x7f0000000700)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000000740)={0x0, 0x8, 0x1, 0x21}}) 8.789837544s ago: executing program 5 (id=1441): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070048000900010073797a3000000000a0000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d5c00128038000180090001006c61737400000000280002800c000240fffffffffffffffe0800014000800000080001400000000d0800014000010102200001800a00010071756f746100000055fe02800c000140000000000000000408000340000001"], 0xe8}}, 0x20050800) 7.46034846s ago: executing program 1 (id=1442): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x403, 0x2, 0x0, {0x0, 0x0, 0x4, 0x0, 0x300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0xe}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x8044) (fail_nth: 36) 7.460020095s ago: executing program 5 (id=1443): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=@newneigh={0x28, 0x1c, 0x401, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x40, 0x14}, [@NDA_DST_MAC={0xa, 0x1, @local}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000}, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff0000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ff1000/0x4000)=nil, 0x0}, 0x68) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000200), 0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0xc001) ioprio_set$pid(0x2, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r1, r1, 0x0, 0x200000) r2 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x43cb1, 0x1c080, 0xa, 0x20002f7}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x3, &(0x7f0000000000)=ANY=[@ANYRES32=r0], 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x78, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) r3 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r5, 0x29, 0x12, &(0x7f0000000000)=0x6, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x1, 0xb, &(0x7f0000001580)=ANY=[@ANYBLOB="18000000010000000000030108000000180500002020702500000000002020207b1af8ff00000000bfa10000000000000401000000feffffb702000008000000b70300000100000085000000a400000095"], &(0x7f0000000000)='syzkaller\x00', 0xe, 0xff5, &(0x7f00000003c0)=""/4085, 0x40f00}, 0x94) r6 = syz_genetlink_get_family_id$fou(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$FOU_CMD_GET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x34, r6, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@FOU_ATTR_LOCAL_V4={0x8, 0x6, @remote}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e21}, @FOU_ATTR_IFINDEX={0x8}, @FOU_ATTR_PEER_V4={0x8, 0x8, @multicast1}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x34) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r3, 0x0, 0x0) fchdir(r7) r8 = openat(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0) lseek(r8, 0x4, 0x1) 6.294274777s ago: executing program 0 (id=1444): syz_open_dev$I2C(&(0x7f0000000000), 0x0, 0x402) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x88800, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000140)={0xfffffffffffffe44}) openat$ptmx(0xffffffffffffff9c, 0x0, 0x480, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x0, 0x4000000) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0xa, 0x8000, 0x0, 0x9, 0x1, 0xfffffdffffffffff, 0x61, 0xfffffffb}, 0x0) syz_open_dev$dri(0x0, 0x1, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x20000d5}, 0xc040) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r4 = fanotify_init(0x202, 0x0) fanotify_mark(r4, 0x1, 0x4800003e, r3, 0x0) dup2(r4, r3) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000000c0), 0xa6c01, 0x0) syz_usb_connect(0x6, 0x0, 0x0, &(0x7f0000000c00)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x10, &(0x7f0000000140)=ANY=[@ANYBLOB="1003ae6977f1f0787de342df58a8fe1c"]}]}) r5 = syz_open_dev$video4linux(&(0x7f0000000000), 0x6c2, 0x80) ioctl$VIDIOC_QUERYSTD(r5, 0x8008563f, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000240)={'veth0_virt_wifi\x00'}) socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000180), 0x0, 0x4c8380) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r7, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) 5.855522305s ago: executing program 5 (id=1445): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002ebd700e000000001400000018000180140002006e657464657673696d30000000000000050019000000090308001500f1ffff01050018"], 0x44}}, 0x0) 5.713756963s ago: executing program 1 (id=1446): unshare(0x2a020400) socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x670, 0x5, 0x400, 0x2c0, 0x208, 0xffffffff, 0x2c0, 0x0, 0x368, 0x368, 0xffffffff, 0x368, 0x368, 0x5, 0x0, {[{{@ip={@broadcast, @dev={0xac, 0x14, 0x14, 0x1c}, 0x0, 0xffff00, 'vxcan1\x00', 'dummy0\x00', {0xff}, {}, 0x2, 0x3, 0x1a}, 0x0, 0xf0, 0x128, 0x48, {}, [@common=@unspec=@nfacct={{0x48}, {'syz1\x00', 0x9fbb}}, @common=@unspec=@devgroup={{0x38}, {0x3, 0x7, 0x615, 0x9a, 0x5}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x14, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, @port=0x4e20, @gre_key=0x3}}}}, {{@uncond, 0x0, 0xb0, 0xe0, 0x0, {}, [@common=@set={{0x40}, {{0x2, [0x1, 0x6, 0x0, 0x4, 0x1, 0x5], 0x1, 0x2}}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xfffc, 0xd, 0x6}, {0x2, 0x4, 0x3}, 0x1000, 0x100}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x14, @ipv6=@private2, @ipv4=@local, @gre_key, @port=0x4e20}}}, {{@ip={@private=0xa010101, @dev={0xac, 0x14, 0x14, 0x15}, 0xffffffff, 0xffffff00, 'erspan0\x00', 'veth1_to_bridge\x00', {0xff}, {0xff}, 0x88, 0x0, 0x8}, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @rand_addr=0xffffffff, @empty, @icmp_id, @port=0x4e21}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x460) r1 = syz_usb_connect$lan78xx(0x0, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f0000001140)={0x34, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) socket$nl_xfrm(0x10, 0x3, 0x6) socket(0x80000000000000a, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) epoll_create1(0x80000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xfffffffffffffee6}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24040045) r3 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xce}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}, {0x0}], 0x2) io_uring_enter(r3, 0x2219, 0xcf74, 0x16, 0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) socket$nl_generic(0x10, 0x3, 0x10) pipe2(&(0x7f0000000000), 0x80000) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x181603, 0x0) ioctl$KVM_CAP_X86_DISABLE_EXITS(0xffffffffffffffff, 0x4068aea3, 0x0) syz_usb_control_io$lan78xx(r1, 0x0, 0x0) 5.585614168s ago: executing program 5 (id=1447): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000400)=ANY=[], 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='bridge0\x00', 0x10) write(r0, 0x0, 0x0) 5.441025973s ago: executing program 5 (id=1448): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000440)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x6, 0x0, 0x0, 0xffffffff}]}, 0x10) r1 = socket$inet6(0xa, 0x3, 0x88) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_BEGIN_FF_ERASE(r2, 0xc00c55ca, &(0x7f0000000000)={0x10, 0x55020859, 0xfffffff7}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000140)=@generic={&(0x7f0000000100)='./file0\x00', 0x0, 0x10}, 0x18) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/fs/binfmt_misc/syz2\x00', 0x2, 0x0) pread64(r4, &(0x7f0000000100)=""/159, 0x9f, 0x6) sendmsg$IPCTNL_MSG_EXP_NEW(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x60, 0x0, 0x2, 0x401, 0x0, 0x0, {0xa}, [@CTA_EXPECT_MASTER={0x4}, @CTA_EXPECT_MASK={0x4}, @CTA_EXPECT_TUPLE={0x44, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @local}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x86}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x40480c0}, 0x4) mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, &(0x7f0000000180)=0x4, 0x1ff, 0xe) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e20, 0x2, @empty, 0xc}, 0x1c) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x44004) r5 = syz_open_dev$vim2m(&(0x7f0000000200), 0x1, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r5, 0xc02c564a, &(0x7f0000000340)={0xf4, 0x30324c4a, 0x2, @stepwise={0x2, 0x8, 0x2bdc4a4, 0x2, 0x42, 0x81}}) r6 = socket$key(0xf, 0x3, 0x2) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001100)=@newsa={0x194, 0x10, 0x1, 0x70bd2b, 0x0, {{@in6=@private1, @in6=@mcast1, 0x0, 0xecdf, 0x0, 0x200}, {@in=@broadcast, 0x0, 0x32}, @in=@rand_addr=0x64010100, {0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, {0x8, 0x400800, 0x0, 0x400}, {}, 0x0, 0x3507, 0xa, 0x4, 0x0, 0x2c}, [@algo_crypt={0x58, 0x2, {{'cbc(aes)\x00'}, 0x80, "e0fad3f10cd3a506627800000000074f"}}, @algo_auth_trunc={0x4c, 0x14, {{'hmac(sha256)\x00'}, 0x0, 0xc0}}]}, 0x194}}, 0x4050) sendmsg$key(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={0x2, 0x9, 0x0, 0x0, 0x2}, 0x10}}, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x400, 0x0) ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r9 = openat$vimc2(0xffffffffffffff9c, &(0x7f00000024c0), 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r9, 0xc040565f, &(0x7f0000000040)={0x9, 0x100, 0x0, {0xfffffffd, 0x4, 0xb, 0x6}}) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b7050000000000007912a800000000005d0a0000000000009500000000000000"], &(0x7f00000002c0)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x2a) syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000000)) syz_usb_connect$uac2(0x3, 0x8b, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x40, 0x4b4, 0x931f, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x79, 0x3, 0x1, 0x6, 0x10, 0x1, {0x8, 0xb, 0x1, 0x8a, 0x1, 0x4, 0x20, 0x1}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x11, 0x7, 0x9, 0x9}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@as_header={0x10, 0x24, 0x1, 0x5, 0x2, 0x3, 0x1, 0x5, 0x1, 0x17}]}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x4, 0x6c, 0x5, {0x8, 0x25, 0x1, 0x80, 0x3f, 0x12, 0xff}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x5, 0x3, 0xc4, {0x8, 0x25, 0x1, 0x3, 0xc, 0xfc}}}}}}}}]}}, 0x0) 4.913786846s ago: executing program 2 (id=1450): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2840, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ifreq(r3, 0x8932, &(0x7f0000000040)={'hsr0\x00', @ifru_mtu}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) r4 = io_uring_setup(0x168e, &(0x7f0000000400)={0x0, 0x6319, 0x2, 0x2, 0x2da}) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$sock_int(r5, 0x1, 0x2f, &(0x7f0000003940)=0x1, 0x4) setsockopt$sock_int(r5, 0x1, 0x2f, &(0x7f0000000040)=0x4, 0x4) futex(0x0, 0x100, 0x0, 0x0, 0x0, 0x1) io_uring_register$IORING_REGISTER_BUFFERS2(r4, 0xf, &(0x7f0000002700)={0x3, 0x0, 0x0, &(0x7f0000000200)=[{0x0}, {&(0x7f00000015c0)=""/4096, 0x1000}, {&(0x7f0000002a00)=""/88, 0x58}], 0x0}, 0x20) read$usbmon(0xffffffffffffffff, &(0x7f0000000080)=""/183, 0xb7) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000380)={[0x2, 0x3, 0x4, 0x1000000000000002, 0x102000000000002, 0x8000000d, 0x2004c8, 0xffff, 0x3, 0xffffffff, 0xffffffffffffffff, 0x7fffffffffffffff, 0xd0b, 0x4, 0x2000000000000003, 0x50fd24f7], 0x60000, 0x4284}) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="0203f30216000000000000002000000002001b0008000000e9000000000000000300060000000000020000000000000000000000000000000200010000000000000003fcff000020030005000000000002000000011414aa00000000000000000a00080008"], 0xb0}, 0x1, 0x7}, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, 0x0, 0x0) r7 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440)={'syz', 0x3}, &(0x7f0000000340), 0xf2, 0xfffffffffffffffd) r8 = add_key$user(&(0x7f00000000c0), 0x0, &(0x7f0000000180), 0x0, 0xffffffffffffffff) r9 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r9, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300)={0xffffffffffffffff}, 0x2, 0x1}}, 0x20) r11 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r11, &(0x7f0000000780)={0xa, 0x4, 0xfa00, {r10}}, 0xc) r12 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="f9", 0x1, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000300)={r12, r8, r12}, &(0x7f0000000440)=""/68, 0x44, &(0x7f0000000400)={&(0x7f00000002c0)={'sha3-512\x00'}}) keyctl$dh_compute(0x17, &(0x7f0000000200)={r7, r12, r7}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={'sha224\x00'}}) 4.728338255s ago: executing program 4 (id=1451): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001140)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) 4.150395856s ago: executing program 4 (id=1452): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}, 0x1, 0x0, 0x0, 0x20048811}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f0000000100)={{0x0, 0xdddd1000, 0x10, 0x0, 0x8, 0x2, 0x0, 0x2, 0x0, 0x8, 0x9, 0x10}, {0xffff1000, 0x58000, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4}, {0x2000, 0x0, 0x0, 0x0, 0x7, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfc}, {0x3000, 0x54000, 0xe, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x3, 0x4}, {0xeeee0000, 0x3000, 0x9, 0x0, 0xff, 0x4, 0x0, 0xe, 0x0, 0x3c}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x10, 0x80}, {0xdddd1000, 0x0, 0xa, 0x6, 0x0, 0x0, 0x2}, {0x8080000, 0x3000, 0x4, 0x0, 0xfe, 0x1, 0x10, 0xa, 0x26, 0x0, 0x0, 0x40}, {0x80ac000}, {0x4000}, 0xddf8ffdb, 0x0, 0x8080000, 0xf0, 0x8, 0xdd00, 0x0, [0xe, 0x0, 0x1]}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c86dd0700100000004000000060ec97000fc83c00fe80000000008dffffff0000000000aaff02000000000000000000000000000106"], 0xffe) 3.843472806s ago: executing program 0 (id=1453): r0 = syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup\x00', 0x0, 0x0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace$pokeuser(0x6, r2, 0xb0, 0x400) r3 = openat$cgroup_ro(r1, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) read$FUSE(r3, &(0x7f0000001240)={0x2020}, 0x2020) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000100), 0x2964c1) r6 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x822b01) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r7, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r7, 0x84, 0x15, 0x0, 0x0) sendto$inet6(r7, &(0x7f0000000040)='l', 0x1, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) sendto$inet6(r7, &(0x7f0000000180)='|Z', 0x2, 0x4010, 0x0, 0x0) sendto$inet6(r7, &(0x7f0000000140)="87", 0x1, 0x20004000, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x2c, &(0x7f0000000100), 0x4) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r7, 0x84, 0x18, &(0x7f0000000240), 0x8) pselect6(0x40, &(0x7f0000000100)={0x0, 0x3, 0x0, 0x1, 0x800, 0x0, 0x0, 0x2}, 0x0, &(0x7f0000000240)={0x1f, 0x3}, 0x0, 0x0) write$char_usb(r6, &(0x7f0000000040)="e2", 0x918) sendmsg$NL80211_CMD_GET_SURVEY(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="fb000000", @ANYRES32, @ANYBLOB="00df25320000000800030000000000000000", @ANYRES32=0x0, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x800) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffe, 0x6, 0x1, @buffer={0x300, 0x56, &(0x7f0000000440)=""/86}, &(0x7f0000000380)="259374c94982", 0x0, 0x0, 0x14, 0x0, 0x0}) r8 = dup2(r4, r5) sendto$inet6(r8, 0x0, 0x0, 0x4000804, &(0x7f00000006c0)={0xa, 0x4e1f, 0x5, @private2, 0x37d}, 0x1c) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000040)={0xa0003009}) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r0, 0x0) 3.215964752s ago: executing program 2 (id=1454): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x89f0, &(0x7f0000000180)={'bond0\x00', @ifru_names='netdevsim0\x00'}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000b80)=ANY=[@ANYBLOB="5400000010000304040900"/20, @ANYRES32=0x0, @ANYBLOB="01010200000000002400128009000100766c616e000000001400028006000100000000000600050088a8000008000500", @ANYRES32=r3], 0x54}, 0x1, 0xba01}, 0x810) 2.715514303s ago: executing program 5 (id=1455): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x1) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/bus/input/devices\x00', 0x0, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000140)=""/4078, 0xfee}], 0x1, 0xed, 0x207fff) openat$fb0(0xffffffffffffff9c, 0x0, 0x180300, 0x0) syz_kvm_setup_syzos_vm$x86(r2, &(0x7f0000bfe000/0x400000)=nil) syz_usb_connect(0x4, 0x319, &(0x7f0000001600)={{0x12, 0x1, 0x110, 0x6b, 0xd2, 0x78, 0xff, 0x17a8, 0x5, 0x8b9e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x307, 0x1, 0x4b, 0x1, 0xb0, 0xb, "", [{{0x9, 0x4, 0x72, 0x2, 0x6, 0xc2, 0xf, 0xbf, 0x9, [@cdc_ecm={{0xb, 0x24, 0x6, 0x0, 0x0, "06f414fa885d"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x9, 0x0, 0xfa}, [@mdlm={0x15, 0x24, 0x12, 0xe228}, @mdlm_detail={0x24, 0x24, 0x13, 0x7f, "63832544b5992729c2c21e14138e14d2545f2904857f9925c82a39c66ef2f284"}, @network_terminal={0x7, 0x24, 0xa, 0x1, 0x0, 0x8, 0x9}, @mbim={0xc, 0x24, 0x1b, 0x6, 0xe, 0x3, 0x9c, 0x6, 0xd2}, @mdlm={0x15, 0x24, 0x12, 0x7}, @dmm={0x7, 0x24, 0x14, 0x6, 0x5}]}, @generic={0x18, 0x22, "dc18ffa56b88c91cf826bf9af4fcb8b91f3729e3a30a"}], [{{0x9, 0x5, 0x2, 0x10, 0x10, 0x9, 0x0, 0x42, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x9, 0x5}]}}, {{0x9, 0x5, 0xf, 0x8, 0x10, 0x9, 0xdb, 0x1, [@generic={0x2f, 0x5, "e02d445a237f7e38d12a55d30b777b3e32b3b9122286b587f66d616520d33917272bf2b1b18aa485f6a33640c7"}]}}, {{0x9, 0x5, 0x80, 0x10, 0x10, 0x75, 0x23, 0x10, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x7f, 0xceb4}]}}, {{0x9, 0x5, 0x1, 0x0, 0x400, 0x9, 0x7f, 0x0, [@generic={0x99, 0x4, "bfc726695c3a35b0a914b9b91a695a36f352343aac85c7bea9a43db9c81f4a275d0a4be00dd66887c9d3baa5866910786d010b00057a7db0143fbd1d075a8bc9159a40cd5568ecaccaaea14420addc45cfaeb006a11388abd9d84e5d9c127688ffd3aa47edec6af3c344ffd12b654bee5fe77fd336d56cccb1fb2575dc0114994a0efd69ce5ec0e26cf59e8f357c40f1df22d5e70d1ea8"}, @generic={0x7d, 0x7, "4a1e14eaceb5f692d68d95b953f20a4793a92a54c2045455450c18cff69e544e7397ded88a1ed7c7902f7cbb5e8d93faf0a25b01a4281e19699ef38a607b5752c9e4c8f1ec8da0c58296914c1aeef1ca1b6081714d90621c808239b044ef2900beb4d2a2e5054a78ebce4f7161b437e51e3bb125b22c7eb250b77c"}]}}, {{0x9, 0x5, 0x3, 0x4, 0x3ff, 0x4, 0x4, 0x70, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x7d, 0x8001}, @generic={0x39, 0x22, "fae95515649ed2d625428b910973775dfc23b93e4e5d5450df8e2ef7a672792b752e6a5c7463e513298db741b78a4a9d74d102f10f74f1"}]}}, {{0x9, 0x5, 0x2, 0xc, 0x20, 0x1, 0xff, 0xa, [@generic={0x6a, 0xd, "79ca462f6f6175a303cf504955387551b1b2e8fafda8f045e66fb05fc9680ddfcf3d9d4016678067b1abb9ff050bea53fb39965fbd50c4add37de35ad2d37cc0793fe772c5b42f049c2b03b4ccb834471cf09fe594005b28fd68382f5877596c52d0aba2cb67cac3"}, @generic={0x25, 0xe, "d9eeb140fbeb72e3ae1f58ed32fc9737f0e728e75ee23c6b68923ec50fa7069db6c44b"}]}}]}}]}}]}}, &(0x7f0000001cc0)={0xa, &(0x7f0000001980)={0xa, 0x6, 0x250, 0xb2, 0x25, 0x7, 0x40, 0x96}, 0xa6, &(0x7f00000019c0)=ANY=[@ANYBLOB="050fa600060b10010cae0081010001051410040334e85c8f6f18c40000000000fcff0fffff00c03f0000c03f000000c0ff002e100b5cedcff9a96681ac319d477488d63e7157d0ef22fa6b3e7ab043ab2e57f5330448a63953b7a4b6161356d224100a96060020000f780800c0000000000000003f3fff00c00000006f0000000000000014100405657292ed87d0b33653ec67e4f197bec1"], 0x5, [{0x4, &(0x7f0000001a80)=@lang_id={0x4, 0x3, 0xca3e3a43493e1508}}, {0x21, &(0x7f0000001ac0)=@string={0x21, 0x3, "91934ed6cfe4cbd1be2cad26b5a8b95f817f8d0e1af255325cc324dceec7d7"}}, {0xf4, &(0x7f0000001b00)=@string={0xf4, 0x3, "4527be8a1cb45db394ce43ce3cf66e86a1f3718f99958960e49d3186cce9249c78cf00abffa08409f98f6984121f9b6287f681445f6600313b6196cbf74d06a98a9f4740cb3240c63efcf54b1af16b301045d49068617fdd042fe04847595ba9ffbc7cee5543578a4b176f7ed00f5d0f979339c6a1592282e36d4131c911915495875740e44f81253768fcf1d8071ad8224dbb70ece71a9f6fdfb71dba17c5959cbba9f69631ab4c60b70863c4dde2092d6194b70576c10278abff5bd9a641d9e5095fb98e43fd09e21d17f1d938402de9ff9f6ed799fb9d6187a2445ccfc5bcd0bbc6aaf7f9099c2f92b26124fbde1a43ab"}}, {0x6c, &(0x7f0000001c00)=@string={0x6c, 0x3, "48e9c11f966279087fb005073d085caf7fd5b377150b4b6565324c843ce8598cb47b4273e708a667d1d781340efdaf73451952d25170bda5dfd9914c74cedcb9b8f1551fd99c2f64b78d015ab4990ca4b20b9cd6149d7857808bfca0d123fce81816db708ee0fb8cf653"}}, {0x4, &(0x7f0000001c80)=@lang_id={0x4, 0x3, 0x414}}]}) r4 = syz_usb_connect(0x5, 0x24, &(0x7f0000000340)=ANY=[@ANYBLOB="12010601bc3bd020402012c651e50102030109021200017b63200909040002"], 0x0) syz_usb_control_io(r4, &(0x7f0000000b00)={0x2c, 0x0, &(0x7f0000000980)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$lan78xx(r4, 0x0, 0x0) r5 = syz_open_dev$sndctrl(&(0x7f0000001280), 0x0, 0x0) mprotect(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x9) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r5, 0xc1205531, &(0x7f00000101c0)={0x0, 0x2, 0x0, 0x0, '\x00', '\x00', '\x00', 0x0, 0x8001, 0x0, 0x1000000, "64f778ddcf2907e63600"}) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r2, 0x4020aed2, &(0x7f00000000c0)={0xe000, 0x201000, 0x8}) r6 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r7 = dup(r6) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000840)={0x1ff, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f00000002c0)=[@text64={0x40, &(0x7f0000000300)="66b88b0048b800300000000000000f23c00f21f835030008000f23f8410f013866b840000f00d02e410f79d666baf80cb8fb80f883ef66bafc0cec420f4c8800000000c423f917d20b8f697097aa000000003c00b805000000b9020000000f01c1", 0x61}], 0x1, 0x20, 0x0, 0x0) syz_kvm_setup_cpu$x86(r7, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x70, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) r9 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r9, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2}) ioctl$vim2m_VIDIOC_STREAMOFF(r9, 0x40045612, &(0x7f0000000080)=0x2) ppoll(&(0x7f0000000140)=[{r9, 0x8024}], 0x1, 0x0, 0x0, 0x0) vmsplice(r0, &(0x7f0000000080)=[{&(0x7f0000000040)="fe90", 0x2}], 0x1, 0x1) 1.127421532s ago: executing program 1 (id=1456): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000008bd2805090000000000010902240001000080000904f301010300020009211508fe0122070009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ff8000/0x2000)=nil, 0x0}, 0x68) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) listen(r1, 0x0) syz_open_dev$sg(&(0x7f00000020c0), 0xd, 0x553503) socket$unix(0x1, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x10, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) bind$unix(0xffffffffffffffff, &(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x6e) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x4004045) r2 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x0, 0x399}) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e21, 0x7, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xa}, 0x1c) r3 = epoll_create1(0x0) r4 = socket$unix(0x1, 0x5, 0x0) close(r4) r5 = socket(0x40000000015, 0x5, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) setsockopt$sock_int(r5, 0x1, 0x2e, &(0x7f0000000000)=0xffff, 0x4) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f00000000c0)={0xa0028000}) r6 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="ae", 0x1, 0xffffffffffffffff) keyctl$read(0x2, r6, &(0x7f00000000c0)=""/4096, 0x1000) keyctl$read(0xb, r6, &(0x7f00000010c0)=""/4096, 0x1000) io_uring_enter(r2, 0x8ae, 0x6933, 0x17, 0x0, 0xeffd) syz_usb_control_io$hid(r0, &(0x7f0000000580)={0x24, 0x0, 0x0, &(0x7f0000000500)={0x0, 0x22, 0x7, {[@main=@item_012={0x0, 0x0, 0xb}, @main=@item_4={0x3, 0x0, 0x3, "986bba0b"}, @global=@item_012={0x0, 0x1, 0x9}]}}, 0x0}, 0x0) 929.790294ms ago: executing program 2 (id=1457): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000004c0)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000010025bd7000fadbdf2500000000", @ANYRES32=r1, @ANYBLOB="138000002b9201002400128009000100626f6e64000000001400028008f3", @ANYRES64=r0], 0x44}, 0x1, 0x0, 0x0, 0x40448e0}, 0x4000) 780.433525ms ago: executing program 4 (id=1458): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000400)=ANY=[], 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='bridge0\x00', 0x10) write(r0, 0x0, 0x0) 654.849886ms ago: executing program 0 (id=1459): unshare(0x2a020400) unshare(0xe57164d93eb324bc) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_int(r0, 0x1, 0x6, 0x0, 0x0) 582.081265ms ago: executing program 4 (id=1460): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)="4cfe", 0x2}], 0x1}, 0x4015) recvmsg$unix(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000240)=""/31, 0x1f}], 0x1}, 0x0) recvmsg$unix(r0, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x10002) write$cgroup_type(r0, &(0x7f0000000000), 0x9) close(r1) 419.909639ms ago: executing program 2 (id=1461): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r5 = getpgid(0x0) r6 = epoll_create(0x10) kcmp$KCMP_EPOLL_TFD(r5, 0xffffffffffffffff, 0x7, r1, &(0x7f0000000000)={r6, r4, 0x8}) sendmsg$nl_route_sched(r3, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) r9 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r9, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000280)=@delqdisc={0x1bc, 0x25, 0x0, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0xffe0}, {0xfff3, 0xd}, {0xc, 0xb}}, [@TCA_STAB={0x13c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x7, 0x7, 0x7, 0x7, 0x2, 0xfffffffe, 0x1fb, 0x4}}, {0xc, 0x2, [0x1, 0xfff7, 0xe, 0x0]}}, {{0x1c, 0x1, {0x5, 0x1, 0x3, 0x4, 0x0, 0x5, 0x6953, 0x7}}, {0x12, 0x2, [0xe, 0x6, 0x45d, 0x101, 0xed, 0x9660, 0x2]}}, {{0x1c, 0x1, {0x2, 0x25, 0x2, 0x8, 0x1, 0x7, 0x8, 0x8}}, {0x14, 0x2, [0x2, 0x7, 0x1, 0xb943, 0x9, 0x1, 0x143, 0xfffc]}}, {{0x1c, 0x1, {0xfa, 0x5, 0x7, 0x8, 0x2, 0x9, 0x401, 0xa}}, {0x18, 0x2, [0x71, 0x4, 0x1, 0x7, 0xba89, 0x6, 0x0, 0x9dc, 0xc, 0x800]}}, {{0x1c, 0x1, {0x7, 0xe, 0x3, 0x80000000, 0x0, 0x4, 0x5, 0xa}}, {0x18, 0x2, [0xe78, 0xe, 0x6ed4, 0xe247, 0x4b, 0x40, 0x5, 0x5, 0xc, 0x7]}}, {{0x1c, 0x1, {0x5, 0xfd, 0xc9d, 0x5, 0x2, 0x480, 0x5, 0x3}}, {0xa, 0x2, [0xc, 0xe, 0x0]}}, {{0x1c, 0x1, {0x1, 0x6, 0x5, 0x7ff, 0x2, 0x8, 0x1ff}}, {0x4}}]}, @qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x8001, 0x0, 0x9, 0x7, 0x9}, 0x9, 0x1, 0x9, 0x0, 0x7fff, 0x13, 0x1f, 0x6, 0x3, 0xffff, {0x4, 0x1, 0xdd6, 0x1, 0xb, 0x4b200000}}}}, @TCA_RATE={0x6, 0x5, {0x1, 0x4}}]}, 0x1bc}, 0x1, 0x0, 0x0, 0x4048084}, 0xc0) 280.015395ms ago: executing program 0 (id=1462): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070060000900010073797a3000000000a0000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d5c00128038000180090001006c61737400000000280002800c000240fffffffffffffffe0800014000800000080001400000000d0800014000010102200001800a00010071756f746100000055fe02800c000140000000000000000408000340000001"], 0xe8}}, 0x20050800) 279.803803ms ago: executing program 4 (id=1463): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000120a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff0000000002000000090001"], 0x7c}}, 0x0) 1.528002ms ago: executing program 0 (id=1464): openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f00006a6000/0x3000)=nil, 0x3000, 0x0, 0x50, 0xffffffffffffffff, 0xbe90f000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) dup(r0) socket$key(0xf, 0x3, 0x2) socket$kcm(0x2, 0xa, 0x2) socket$kcm(0x2, 0xa, 0x2) socket$nl_generic(0x11, 0x3, 0x10) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000040)={'\x00', 0xfbff, 0x4053, 0x81, 0x2, 0x4, 0xffffffffffffffff}) r2 = getpgrp(r1) r3 = syz_open_procfs(r1, &(0x7f0000000180)='sessionid\x00') preadv(r3, &(0x7f0000000700)=[{&(0x7f0000000000)=""/42, 0x2a}, {&(0x7f0000000340)=""/93, 0x5d}], 0x2, 0x33, 0x2000051b) syz_open_dev$swradio(0x0, 0x1, 0x2) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="120100008e88052086800095d89301020301090212000100000000090401"], 0x0) r4 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) ioctl$I2C_RDWR(r4, 0x707, &(0x7f00000000c0)={&(0x7f00000003c0)=[{0x1e, 0x0, 0x0, 0x0}, {0x6, 0x0, 0x0, 0x0}], 0x2}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ptrace$ARCH_GET_FS(0x1e, r2, &(0x7f0000000200), 0x1003) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000007300), 0x0, 0x10) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockname$inet(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) mknod$loop(&(0x7f0000000040)='./file0\x00', 0xfff, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[], 0x4c}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a03000000000000000000050000000900010073797a30000000000900030073797a300000000008000c40000000032800048008000240000000120800014000000000140004"], 0xa4}}, 0x0) 1.051203ms ago: executing program 2 (id=1465): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000440)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x6, 0x0, 0x0, 0xffffffff}]}, 0x10) r1 = socket$inet6(0xa, 0x3, 0x88) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_BEGIN_FF_ERASE(r2, 0xc00c55ca, &(0x7f0000000000)={0x10, 0x55020859, 0xfffffff7}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000140)=@generic={&(0x7f0000000100)='./file0\x00', 0x0, 0x10}, 0x18) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/fs/binfmt_misc/syz2\x00', 0x2, 0x0) pread64(r4, &(0x7f0000000100)=""/159, 0x9f, 0x6) sendmsg$IPCTNL_MSG_EXP_NEW(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x60, 0x0, 0x2, 0x401, 0x0, 0x0, {0xa}, [@CTA_EXPECT_MASTER={0x4}, @CTA_EXPECT_MASK={0x4}, @CTA_EXPECT_TUPLE={0x44, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @local}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x86}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x40480c0}, 0x4) mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, &(0x7f0000000180)=0x4, 0x1ff, 0xe) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e20, 0x2, @empty, 0xc}, 0x1c) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x44004) r5 = syz_open_dev$vim2m(&(0x7f0000000200), 0x1, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r5, 0xc02c564a, &(0x7f0000000340)={0xf4, 0x30324c4a, 0x2, @stepwise={0x2, 0x8, 0x2bdc4a4, 0x2, 0x42, 0x81}}) r6 = socket$key(0xf, 0x3, 0x2) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001100)=@newsa={0x194, 0x10, 0x1, 0x70bd2b, 0x0, {{@in6=@private1, @in6=@mcast1, 0x0, 0xecdf, 0x0, 0x200}, {@in=@broadcast, 0x0, 0x32}, @in=@rand_addr=0x64010100, {0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, {0x8, 0x400800, 0x0, 0x400}, {}, 0x0, 0x3507, 0xa, 0x4, 0x0, 0x2c}, [@algo_crypt={0x58, 0x2, {{'cbc(aes)\x00'}, 0x80, "e0fad3f10cd3a506627800000000074f"}}, @algo_auth_trunc={0x4c, 0x14, {{'hmac(sha256)\x00'}, 0x0, 0xc0}}]}, 0x194}}, 0x4050) sendmsg$key(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={0x2, 0x9, 0x0, 0x0, 0x2}, 0x10}}, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x400, 0x0) ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r9 = openat$vimc2(0xffffffffffffff9c, &(0x7f00000024c0), 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r9, 0xc040565f, &(0x7f0000000040)={0x9, 0x100, 0x0, {0xfffffffd, 0x4, 0xb, 0x6}}) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b7050000000000007912a800000000005d0a0000000000009500000000000000"], &(0x7f00000002c0)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x2a) syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000000)) syz_usb_connect$uac2(0x3, 0x8b, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x40, 0x4b4, 0x931f, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x79, 0x3, 0x1, 0x6, 0x10, 0x1, {0x8, 0xb, 0x1, 0x8a, 0x1, 0x4, 0x20, 0x1}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x11, 0x7, 0x9, 0x9}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@as_header={0x10, 0x24, 0x1, 0x5, 0x2, 0x3, 0x1, 0x5, 0x1, 0x17}]}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x4, 0x6c, 0x5, {0x8, 0x25, 0x1, 0x80, 0x3f, 0x12, 0xff}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x5, 0x3, 0xc4, {0x8, 0x25, 0x1, 0x3, 0xc, 0xfc}}}}}}}}]}}, 0x0) 0s ago: executing program 4 (id=1466): unshare(0x2a020400) socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x670, 0x5, 0x400, 0x2c0, 0x208, 0xffffffff, 0x2c0, 0x0, 0x368, 0x368, 0xffffffff, 0x368, 0x368, 0x5, 0x0, {[{{@ip={@broadcast, @dev={0xac, 0x14, 0x14, 0x1c}, 0x0, 0xffff00, 'vxcan1\x00', 'dummy0\x00', {0xff}, {}, 0x2, 0x3, 0x1a}, 0x0, 0xf0, 0x128, 0x48, {}, [@common=@unspec=@nfacct={{0x48}, {'syz1\x00', 0x9fbb}}, @common=@unspec=@devgroup={{0x38}, {0x3, 0x7, 0x615, 0x9a, 0x5}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x14, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, @port=0x4e20, @gre_key=0x3}}}}, {{@uncond, 0x0, 0xb0, 0xe0, 0x0, {}, [@common=@set={{0x40}, {{0x2, [0x1, 0x6, 0x0, 0x4, 0x1, 0x5], 0x1, 0x2}}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xfffc, 0xd, 0x6}, {0x2, 0x4, 0x3}, 0x1000, 0x100}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x14, @ipv6=@private2, @ipv4=@local, @gre_key, @port=0x4e20}}}, {{@ip={@private=0xa010101, @dev={0xac, 0x14, 0x14, 0x15}, 0xffffffff, 0xffffff00, 'erspan0\x00', 'veth1_to_bridge\x00', {0xff}, {0xff}, 0x88, 0x0, 0x8}, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @rand_addr=0xffffffff, @empty, @icmp_id, @port=0x4e21}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x460) r1 = syz_usb_connect$lan78xx(0x0, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f0000001140)={0x34, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) socket$nl_xfrm(0x10, 0x3, 0x6) socket(0x80000000000000a, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) epoll_create1(0x80000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xfffffffffffffee6}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24040045) r3 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xce}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}, {0x0}], 0x2) io_uring_enter(r3, 0x2219, 0xcf74, 0x16, 0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) socket$nl_generic(0x10, 0x3, 0x10) pipe2(&(0x7f0000000000), 0x80000) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x181603, 0x0) ioctl$KVM_CAP_X86_DISABLE_EXITS(0xffffffffffffffff, 0x4068aea3, 0x0) syz_usb_control_io$lan78xx(r1, 0x0, 0x0) kernel console output (not intermixed with test programs): an invalid bInterval 0, changing to 7 [ 269.547911][ T24] usb 1-1: failed to fetch extended address, random address set [ 269.553226][ T9] usb 2-1: config 48 interface 0 altsetting 98 endpoint 0xA has invalid wMaxPacketSize 0 [ 269.591046][ T9] usb 2-1: config 48 interface 0 has no altsetting 0 [ 269.619497][ T9] usb 2-1: New USB device found, idVendor=1784, idProduct=0006, bcdDevice=bb.2f [ 269.629234][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 269.639934][ T9] usb 2-1: Product: syz [ 269.644175][ T9] usb 2-1: Manufacturer: syz [ 269.648792][ T9] usb 2-1: SerialNumber: syz [ 269.660012][ T9378] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 269.690840][ T24] usb 1-1: USB disconnect, device number 63 [ 269.700325][ T9400] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1106'. [ 269.731555][ T9404] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1107'. [ 269.752085][ T9402] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1108'. [ 270.050670][ T9411] ip6tnl1: entered allmulticast mode [ 270.205918][ T9421] fuse: Bad value for 'fd' [ 270.244530][ T808] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 270.278678][ T9428] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 270.285244][ T9428] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 270.305699][ T9428] vhci_hcd vhci_hcd.0: Device attached [ 270.323236][ T9429] vhci_hcd: connection closed [ 270.324901][ T1008] vhci_hcd vhci_hcd.2: stop threads [ 270.347146][ T1008] vhci_hcd vhci_hcd.2: release socket [ 270.365771][ T1008] vhci_hcd vhci_hcd.2: disconnect device [ 270.392612][ T9432] netlink: 'syz.0.1117': attribute type 1 has an invalid length. [ 270.426256][ T808] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 270.442071][ T808] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 270.461846][ T9432] 8021q: adding VLAN 0 to HW filter on device bond5 [ 270.480101][ T808] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 270.506709][ T808] usb 6-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 270.525240][ T808] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 270.538551][ T808] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 270.553445][ T808] usb 6-1: Product: syz [ 270.557958][ T808] usb 6-1: Manufacturer: syz [ 270.562590][ T808] usb 6-1: SerialNumber: syz [ 270.580359][ T808] cdc_mbim 6-1:1.0: skipping garbage [ 270.774145][ T24] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 270.924168][ T24] usb 5-1: Using ep0 maxpacket: 8 [ 270.940391][ T24] usb 5-1: New USB device found, idVendor=0fe9, idProduct=db01, bcdDevice=e9.9b [ 270.958829][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 270.967809][ T24] usb 5-1: Product: syz [ 270.972155][ T24] usb 5-1: Manufacturer: syz [ 270.977452][ T24] usb 5-1: SerialNumber: syz [ 270.989731][ T24] usb 5-1: config 0 descriptor?? [ 271.009752][ T24] dvb-usb: found a 'DViCO FusionHDTV DVB-T USB (LGZ201)' in warm state. [ 271.021946][ T24] dvb-usb: bulk message failed: -22 (2/0) [ 271.039988][ T24] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 271.051927][ T24] dvbdev: DVB: registering new adapter (DViCO FusionHDTV DVB-T USB (LGZ201)) [ 271.061707][ T24] usb 5-1: media controller created [ 271.085825][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 271.204918][ T9448] __nla_validate_parse: 4 callbacks suppressed [ 271.204966][ T9448] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1122'. [ 271.229392][ T24] dvb-usb: bulk message failed: -22 (1/0) [ 271.324833][ T24] DVB: Unable to find symbol mt352_attach() [ 271.351322][ T24] dvb-usb: no frontend was attached by 'DViCO FusionHDTV DVB-T USB (LGZ201)' [ 271.504389][ T24] rc_core: IR keymap rc-dvico-portable not found [ 271.515657][ T24] Registered IR keymap rc-empty [ 271.526529][ T9454] vivid-004: ================= START STATUS ================= [ 271.536659][ T24] rc rc0: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0 [ 271.563339][ T9454] vivid-004: Radio HW Seek Mode: Bounded [ 271.571709][ T24] input: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0/input78 [ 271.607576][ T9454] vivid-004: Radio Programmable HW Seek: false [ 271.615096][ T24] dvb-usb: schedule remote query interval to 100 msecs. [ 271.623620][ T24] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully initialized and connected. [ 271.634911][ T9454] vivid-004: RDS Rx I/O Mode: Block I/O [ 271.645106][ T24] usb 5-1: USB disconnect, device number 60 [ 271.655268][ T9454] vivid-004: Generate RBDS Instead of RDS: false [ 271.670334][ T9454] vivid-004: RDS Reception: true [ 271.675892][ T9454] vivid-004: RDS Program Type: 0 inactive [ 271.681855][ T9454] vivid-004: RDS PS Name: inactive [ 271.692733][ T9454] vivid-004: RDS Radio Text: inactive [ 271.698995][ T9454] vivid-004: RDS Traffic Announcement: false inactive [ 271.711491][ T9454] vivid-004: RDS Traffic Program: false inactive [ 271.720237][ T9454] vivid-004: RDS Music: false inactive [ 271.727640][ T9454] vivid-004: ================== END STATUS ================== [ 271.813774][ T24] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully deinitialized and disconnected. [ 271.835879][ T5706] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 272.000318][ T5706] usb 1-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 272.028149][ T5706] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 272.053529][ T5706] usb 1-1: Product: syz [ 272.066045][ T5706] usb 1-1: Manufacturer: syz [ 272.077385][ T5706] usb 1-1: SerialNumber: syz [ 272.107345][ T5706] usb 1-1: config 0 descriptor?? [ 272.181594][ T9] usb 2-1: USB disconnect, device number 58 [ 272.920416][ T5706] usb 1-1: Firmware: major: 24, minor: 33, hardware type: ATUSB (2) [ 272.990830][ T9477] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1132'. [ 273.062211][ T808] cdc_mbim 6-1:1.0: bind() failure [ 273.104176][ T808] cdc_ncm 6-1:1.1: CDC Union missing and no IAD found [ 273.136908][ T808] cdc_ncm 6-1:1.1: bind() failure [ 273.200538][ T808] usb 6-1: USB disconnect, device number 22 [ 273.314390][ T5706] usb 1-1: failed to fetch extended address, random address set [ 273.394088][ T5706] usb 1-1: USB disconnect, device number 64 [ 273.405513][ T9488] program syz.4.1135 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 274.261317][ T9507] netlink: 'syz.4.1141': attribute type 8 has an invalid length. [ 274.295988][ T9507] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1141'. [ 274.316871][ T5758] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 274.338354][ T9507] veth1_to_team: entered promiscuous mode [ 274.351578][ T9507] gretap0: entered promiscuous mode [ 274.367369][ T9507] veth1_to_team: left promiscuous mode [ 274.378179][ T9507] gretap0: left promiscuous mode [ 274.487445][ T5758] usb 1-1: config 48 interface 0 altsetting 98 bulk endpoint 0x4 has invalid maxpacket 1024 [ 274.504409][ T5758] usb 1-1: config 48 interface 0 altsetting 98 has an endpoint descriptor with address 0x5A, changing to 0xA [ 274.521968][ T5758] usb 1-1: config 48 interface 0 altsetting 98 endpoint 0xA has an invalid bInterval 0, changing to 7 [ 274.546243][ T5758] usb 1-1: config 48 interface 0 altsetting 98 endpoint 0xA has invalid wMaxPacketSize 0 [ 274.567166][ T5758] usb 1-1: config 48 interface 0 has no altsetting 0 [ 274.584276][ T5758] usb 1-1: New USB device found, idVendor=1784, idProduct=0006, bcdDevice=bb.2f [ 274.593785][ T5758] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 274.602426][ T5758] usb 1-1: Product: syz [ 274.616270][ T5758] usb 1-1: Manufacturer: syz [ 274.624154][ T24] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 274.640536][ T5758] usb 1-1: SerialNumber: syz [ 274.659650][ T9501] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 274.796776][ T24] usb 3-1: unable to get BOS descriptor or descriptor too short [ 274.818475][ T24] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 274.843286][ T24] usb 3-1: can't read configurations, error -71 [ 274.884509][ T5706] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 275.056351][ T5706] usb 5-1: unable to get BOS descriptor or descriptor too short [ 275.085321][ T5706] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 275.110529][ T5706] usb 5-1: can't read configurations, error -71 [ 275.436434][ T9523] netlink: 'syz.5.1147': attribute type 1 has an invalid length. [ 275.544367][ T9524] veth0_virt_wifi: Caught tx_queue_len zero misconfig [ 275.894065][ T5358] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 276.081464][ T5358] usb 6-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 276.093751][ T5358] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 276.101922][ T5358] usb 6-1: Product: syz [ 276.106367][ T5358] usb 6-1: Manufacturer: syz [ 276.112026][ T5358] usb 6-1: SerialNumber: syz [ 276.120336][ T5358] usb 6-1: config 0 descriptor?? [ 276.574164][ T5692] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 276.719515][ T9553] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1157'. [ 276.740734][ T5692] usb 2-1: unable to get BOS descriptor or descriptor too short [ 276.760417][ T9553] 8021q: adding VLAN 0 to HW filter on device bond7 [ 276.767360][ T5692] usb 2-1: config 8 has an invalid interface number: 178 but max is 2 [ 276.789399][ T5692] usb 2-1: config 8 has an invalid interface number: 112 but max is 2 [ 276.808139][ T5358] usb 6-1: Firmware: major: 24, minor: 33, hardware type: ATUSB (2) [ 276.821676][ T5692] usb 2-1: config 8 has no interface number 1 [ 276.839121][ T5692] usb 2-1: config 8 has no interface number 2 [ 276.858002][ T5692] usb 2-1: config 8 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 276.882627][ T5692] usb 2-1: config 8 interface 178 has no altsetting 0 [ 276.892849][ T5692] usb 2-1: config 8 interface 112 has no altsetting 0 [ 276.905728][ T9558] bridge11: entered promiscuous mode [ 276.911230][ T9558] bridge11: entered allmulticast mode [ 276.918764][ T5692] usb 2-1: New USB device found, idVendor=05c6, idProduct=9201, bcdDevice=c5.50 [ 276.928230][ T5692] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 276.944090][ T5692] usb 2-1: Product: syz [ 276.948319][ T5692] usb 2-1: Manufacturer: syz [ 276.952967][ T5692] usb 2-1: SerialNumber: syz [ 277.019590][ T9560] syzkaller1: entered promiscuous mode [ 277.025319][ T9560] syzkaller1: entered allmulticast mode [ 277.096818][ T9] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 277.109142][ T5758] usb 1-1: USB disconnect, device number 65 [ 277.205900][ T5358] usb 6-1: failed to fetch extended address, random address set [ 277.242378][ T5692] usb 2-1: USB disconnect, device number 59 [ 277.289056][ T9] usb 5-1: unable to get BOS descriptor or descriptor too short [ 277.307248][ T9] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 277.325780][ T9] usb 5-1: can't read configurations, error -71 [ 277.334896][ T5358] usb 6-1: USB disconnect, device number 23 [ 277.524091][ T5691] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 277.674033][ T5691] usb 3-1: Using ep0 maxpacket: 16 [ 277.681735][ T5691] usb 3-1: unable to get BOS descriptor or descriptor too short [ 277.691240][ T5691] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 8 [ 277.701525][ T5691] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 16 [ 277.732252][ T5691] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 277.744506][ T5691] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 277.752761][ T5691] usb 3-1: Product: syz [ 277.757624][ T5691] usb 3-1: Manufacturer: syz [ 277.762318][ T5691] usb 3-1: SerialNumber: syz [ 277.993733][ T9567] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 278.019159][ T9567] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 278.052265][ T5691] cdc_ncm 3-1:1.0: bind() failure [ 278.092105][ T5691] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 278.109708][ T5691] cdc_ncm 3-1:1.1: bind() failure [ 278.145398][ T5691] usb 3-1: USB disconnect, device number 68 [ 278.169831][ T9582] netlink: 'syz.4.1168': attribute type 8 has an invalid length. [ 278.189262][ T9582] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1168'. [ 278.210989][ T9582] veth1_to_team: entered promiscuous mode [ 278.247410][ T9582] gretap0: entered promiscuous mode [ 278.262537][ T9582] veth1_to_team: left promiscuous mode [ 278.276371][ T9582] gretap0: left promiscuous mode [ 278.291619][ T9586] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1170'. [ 278.364085][ T24] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 278.514019][ T24] usb 2-1: Using ep0 maxpacket: 32 [ 278.520807][ T24] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 278.529334][ T24] usb 2-1: config 0 has no interface number 0 [ 278.536553][ T24] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 278.547756][ T24] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 278.557783][ T24] usb 2-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 278.566867][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 278.577195][ T24] usb 2-1: config 0 descriptor?? [ 278.594103][ T5691] usb 3-1: new full-speed USB device number 69 using dummy_hcd [ 278.594479][ T5705] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 278.634413][ T5692] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 278.664124][ T5706] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 278.746822][ T9567] netlink: 'syz.2.1162': attribute type 1 has an invalid length. [ 278.759060][ T5705] usb 6-1: config 48 interface 0 altsetting 98 bulk endpoint 0x4 has invalid maxpacket 1024 [ 278.770613][ T5705] usb 6-1: config 48 interface 0 altsetting 98 has an endpoint descriptor with address 0x5A, changing to 0xA [ 278.783323][ T5705] usb 6-1: config 48 interface 0 altsetting 98 endpoint 0xA has an invalid bInterval 0, changing to 7 [ 278.794946][ T5705] usb 6-1: config 48 interface 0 altsetting 98 endpoint 0xA has invalid wMaxPacketSize 0 [ 278.805285][ T5705] usb 6-1: config 48 interface 0 has no altsetting 0 [ 278.814450][ T5692] usb 1-1: config 0 has an invalid interface number: 168 but max is 0 [ 278.821739][ T5705] usb 6-1: New USB device found, idVendor=1784, idProduct=0006, bcdDevice=bb.2f [ 278.834057][ T5705] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 278.842365][ T5705] usb 6-1: Product: syz [ 278.843246][ T5692] usb 1-1: config 0 has no interface number 0 [ 278.847594][ T5705] usb 6-1: Manufacturer: syz [ 278.858507][ T5705] usb 6-1: SerialNumber: syz [ 278.866909][ T5706] usb 5-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 278.867529][ T5692] usb 1-1: config 0 interface 168 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 278.878574][ T5706] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 278.901368][ T5692] usb 1-1: config 0 interface 168 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 278.905217][ T9589] raw-gadget.3 gadget.5: fail, usb_ep_enable returned -22 [ 278.919841][ T5706] usb 5-1: Product: syz [ 278.924591][ T5706] usb 5-1: Manufacturer: syz [ 278.930364][ T5706] usb 5-1: SerialNumber: syz [ 278.936943][ T9567] 8021q: adding VLAN 0 to HW filter on device bond8 [ 278.944332][ T5692] usb 1-1: config 0 interface 168 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 278.956751][ T5706] usb 5-1: config 0 descriptor?? [ 278.970453][ T5692] usb 1-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice=a8.a4 [ 278.985966][ T5692] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 278.999330][ T5692] usb 1-1: config 0 descriptor?? [ 279.010006][ T5691] usb 3-1: unable to get BOS descriptor or descriptor too short [ 279.021962][ T5691] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 279.029733][ T5691] usb 3-1: can't read configurations, error -71 [ 279.221923][ T5692] usb 1-1: string descriptor 0 read error: -71 [ 279.243076][ T5692] keyspan 1-1:0.168: Keyspan 2 port adapter converter detected [ 279.251310][ T5692] keyspan 1-1:0.168: found no endpoint descriptor for endpoint 1 [ 279.261133][ T24] uclogic 0003:28BD:0094.0010: pen parameters not found [ 279.262867][ T5692] keyspan 1-1:0.168: found no endpoint descriptor for endpoint 84 [ 279.270643][ T24] uclogic 0003:28BD:0094.0010: interface is invalid, ignoring [ 279.283311][ T5692] keyspan 1-1:0.168: found no endpoint descriptor for endpoint 2 [ 279.304896][ T5692] usb 1-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 279.326404][ T5692] keyspan 1-1:0.168: found no endpoint descriptor for endpoint 88 [ 279.338089][ T5692] keyspan 1-1:0.168: found no endpoint descriptor for endpoint 6 [ 279.354201][ T5692] usb 1-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 279.378512][ T5692] usb 1-1: USB disconnect, device number 66 [ 279.390041][ T5692] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 279.406916][ T5692] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 279.421441][ T5692] keyspan 1-1:0.168: device disconnected [ 279.463753][ T24] usb 2-1: USB disconnect, device number 60 [ 279.701134][ T5706] usb 5-1: Firmware: major: 24, minor: 33, hardware type: ATUSB (2) [ 280.029356][ T5706] usb 5-1: failed to fetch extended address, random address set [ 280.119867][ T5706] usb 5-1: USB disconnect, device number 65 [ 280.654128][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 280.921485][ T9660] x_tables: duplicate underflow at hook 3 [ 280.927724][ T9659] x_tables: duplicate underflow at hook 3 [ 281.054194][ T9665] netlink: 'syz.4.1196': attribute type 1 has an invalid length. [ 281.364063][ T5692] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 281.406351][ T5705] usb 6-1: USB disconnect, device number 24 [ 281.559883][ T5692] usb 3-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 281.579000][ T5692] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 281.593581][ T5692] usb 3-1: Product: syz [ 281.598227][ T5692] usb 3-1: Manufacturer: syz [ 281.602942][ T5692] usb 3-1: SerialNumber: syz [ 281.612831][ T5692] usb 3-1: config 0 descriptor?? [ 281.766355][ T9682] netlink: 104 bytes leftover after parsing attributes in process `syz.5.1200'. [ 282.134215][ T5705] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 282.299466][ T5705] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 282.309626][ T5705] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 282.319017][ T5705] usb 5-1: Product: syz [ 282.323685][ T5705] usb 5-1: Manufacturer: syz [ 282.328936][ T5705] usb 5-1: SerialNumber: syz [ 282.536615][ T5692] usb 3-1: Firmware: major: 24, minor: 33, hardware type: ATUSB (2) [ 283.403523][ T9686] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1202'. [ 283.415127][ T5705] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 283.459470][ T5705] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 283.484042][ T5705] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 283.512360][ T5705] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -71 [ 283.578539][ T5705] usb 5-1: USB disconnect, device number 66 [ 283.614812][ T5692] usb 3-1: failed to fetch extended address, random address set [ 283.671026][ T5692] usb 3-1: USB disconnect, device number 71 [ 283.731633][ T9705] bridge11: entered promiscuous mode [ 283.738851][ T9705] bridge11: entered allmulticast mode [ 283.985500][ T9] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 284.044164][ T5705] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 284.147897][ T9] usb 6-1: Using ep0 maxpacket: 8 [ 284.159735][ T9] usb 6-1: unable to get BOS descriptor or descriptor too short [ 284.187758][ T9] usb 6-1: config 4 interface 0 has no altsetting 0 [ 284.194189][ T5705] usb 1-1: Using ep0 maxpacket: 16 [ 284.206661][ T9] usb 6-1: string descriptor 0 read error: -22 [ 284.212433][ T5705] usb 1-1: unable to get BOS descriptor or descriptor too short [ 284.217366][ T9] usb 6-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 284.244739][ T9] usb 6-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 284.248739][ T5705] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 8 [ 284.280889][ T5705] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 16 [ 284.300602][ T9] usb 6-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 284.313393][ T5705] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 284.347283][ T5705] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 284.363237][ T5705] usb 1-1: Product: syz [ 284.370406][ T5705] usb 1-1: Manufacturer: syz [ 284.376533][ T5705] usb 1-1: SerialNumber: syz [ 284.400129][ T9] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 284.443771][ T9] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 284.471851][ T9] usb 6-1: media controller created [ 284.496177][ T9706] usb 6-1: dvb_usb_au6610: wlen=0, aborting [ 284.543630][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 284.606109][ T9708] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 284.627849][ T9708] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 284.647933][ T5705] cdc_ncm 1-1:1.0: bind() failure [ 284.684620][ T5705] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 284.700386][ T5705] cdc_ncm 1-1:1.1: bind() failure [ 284.706055][ T9] zl10353_read_register: readreg error (reg=127, ret==0) [ 284.731508][ T5705] usb 1-1: USB disconnect, device number 67 [ 284.867459][ T9] usb 6-1: USB disconnect, device number 25 [ 284.904504][ T9725] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1214'. [ 284.959093][ T9725] vlan6: entered promiscuous mode [ 284.968863][ T9725] bond0: entered promiscuous mode [ 285.215631][ T5705] usb 1-1: new full-speed USB device number 68 using dummy_hcd [ 285.262917][ T9727] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1215'. [ 285.390213][ T9708] netlink: 'syz.0.1208': attribute type 1 has an invalid length. [ 285.424153][ T807] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 285.452997][ T9708] 8021q: adding VLAN 0 to HW filter on device bond6 [ 285.546975][ T9742] FAULT_INJECTION: forcing a failure. [ 285.546975][ T9742] name failslab, interval 1, probability 0, space 0, times 0 [ 285.569313][ T5705] usb 1-1: unable to get BOS descriptor or descriptor too short [ 285.584280][ T807] usb 6-1: Using ep0 maxpacket: 16 [ 285.594120][ T9742] CPU: 0 UID: 0 PID: 9742 Comm: syz.1.1219 Tainted: G L syzkaller #0 PREEMPT(full) [ 285.594147][ T9742] Tainted: [L]=SOFTLOCKUP [ 285.594153][ T9742] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 285.594171][ T9742] Call Trace: [ 285.594178][ T9742] [ 285.594186][ T9742] dump_stack_lvl+0xe8/0x150 [ 285.594212][ T9742] should_fail_ex+0x412/0x560 [ 285.594239][ T9742] should_failslab+0xa8/0x100 [ 285.594267][ T9742] __kvmalloc_node_noprof+0x178/0x8a0 [ 285.594293][ T9742] ? rhashtable_init_noprof+0x52e/0xad0 [ 285.594317][ T9742] ? rhashtable_init_noprof+0x12d/0xad0 [ 285.594344][ T9742] rhashtable_init_noprof+0x52e/0xad0 [ 285.594372][ T9742] br_mdb_hash_init+0x26/0x90 [ 285.594399][ T9742] br_dev_init+0x47/0x490 [ 285.594423][ T9742] register_netdevice+0x6c6/0x1ec0 [ 285.594453][ T9742] ? trace_kmalloc+0x2a/0xf0 [ 285.594478][ T9742] ? __kvmalloc_node_noprof+0x545/0x8a0 [ 285.594507][ T9742] ? __pfx_register_netdevice+0x10/0x10 [ 285.594537][ T9742] ? validate_linkmsg+0x765/0x950 [ 285.594563][ T9742] br_dev_newlink+0x6a/0x140 [ 285.594583][ T9742] ? rtnl_newlink_create+0x311/0xb70 [ 285.594605][ T9742] ? __pfx_br_dev_newlink+0x10/0x10 [ 285.594617][ T5705] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 285.594627][ T9742] rtnl_newlink_create+0x329/0xb70 [ 285.594651][ T9742] ? __pfx___nla_validate_parse+0x10/0x10 [ 285.594761][ T9742] ? __mutex_lock+0x608/0x1550 [ 285.594846][ T9742] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 285.594912][ T9742] ? __pfx___mutex_lock+0x10/0x10 [ 285.594989][ T9742] ? ns_capable+0x89/0xe0 [ 285.595020][ T9742] rtnl_newlink+0x166a/0x1bb0 [ 285.595094][ T9742] ? __pfx_rtnl_newlink+0x10/0x10 [ 285.595187][ T9742] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 285.595335][ T9742] ? kasan_quarantine_put+0xbb/0x1f0 [ 285.595401][ T9742] ? lockdep_hardirqs_on+0x7a/0x110 [ 285.595471][ T9742] ? nlmon_xmit+0xb0/0x100 [ 285.595535][ T9742] ? kmem_cache_free+0x182/0x650 [ 285.595626][ T9742] ? __lock_acquire+0x6b5/0x2cf0 [ 285.595692][ T9742] ? __dev_queue_xmit+0x2b6/0x3950 [ 285.595770][ T9742] ? __local_bh_enable_ip+0xd0/0x130 [ 285.595820][ T9742] ? lockdep_hardirqs_on+0x7a/0x110 [ 285.595888][ T9742] ? __dev_queue_xmit+0x2b6/0x3950 [ 285.595982][ T9742] ? __local_bh_enable_ip+0xd0/0x130 [ 285.596024][ T9742] ? __dev_queue_xmit+0x2b6/0x3950 [ 285.596117][ T9742] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 285.596242][ T9742] ? __pfx_rtnl_newlink+0x10/0x10 [ 285.596300][ T9742] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 285.596367][ T9742] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 285.596425][ T9742] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 285.596480][ T9742] ? ref_tracker_free+0x693/0x840 [ 285.596555][ T9742] ? __pfx_ref_tracker_free+0x10/0x10 [ 285.596612][ T9742] ? __asan_memcpy+0x40/0x70 [ 285.596668][ T9742] ? __skb_clone+0x63/0x7a0 [ 285.596753][ T9742] netlink_rcv_skb+0x232/0x4b0 [ 285.596869][ T9742] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 285.596927][ T9742] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 285.597053][ T9742] ? netlink_deliver_tap+0x2e/0x1b0 [ 285.597118][ T9742] ? netlink_deliver_tap+0x2e/0x1b0 [ 285.597212][ T9742] netlink_unicast+0x75c/0x8e0 [ 285.597306][ T9742] netlink_sendmsg+0x813/0xb40 [ 285.597402][ T9742] ? __pfx_netlink_sendmsg+0x10/0x10 [ 285.597494][ T9742] ? aa_sock_msg_perm+0xf1/0x1b0 [ 285.597590][ T9742] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 285.597688][ T9742] ____sys_sendmsg+0x972/0x9f0 [ 285.597762][ T9742] ? __might_fault+0xaf/0x130 [ 285.597848][ T9742] ? __pfx_____sys_sendmsg+0x10/0x10 [ 285.597951][ T9742] ? import_iovec+0x73/0xa0 [ 285.598039][ T9742] ___sys_sendmsg+0x2a5/0x360 [ 285.598110][ T9742] ? __lock_acquire+0x6b5/0x2cf0 [ 285.598176][ T9742] ? __pfx____sys_sendmsg+0x10/0x10 [ 285.598346][ T9742] ? __fget_files+0x2a/0x420 [ 285.598387][ T9742] ? __fget_files+0x3a0/0x420 [ 285.598500][ T9742] __x64_sys_sendmsg+0x1bd/0x2a0 [ 285.598569][ T9742] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 285.598667][ T9742] ? __pfx_ksys_write+0x10/0x10 [ 285.598774][ T9742] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 285.598829][ T9742] do_syscall_64+0x15f/0xf80 [ 285.598907][ T9742] ? trace_irq_disable+0x3b/0x140 [ 285.599011][ T9742] ? clear_bhb_loop+0x40/0x90 [ 285.599089][ T9742] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 285.599143][ T9742] RIP: 0033:0x7f4c7e99cdd9 [ 285.599205][ T9742] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 285.599257][ T9742] RSP: 002b:00007f4c7f78c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 285.599320][ T9742] RAX: ffffffffffffffda RBX: 00007f4c7ec15fa0 RCX: 00007f4c7e99cdd9 [ 285.599355][ T9742] RDX: 0000000000008044 RSI: 0000200000000440 RDI: 0000000000000003 [ 285.599395][ T9742] RBP: 00007f4c7f78c090 R08: 0000000000000000 R09: 0000000000000000 [ 285.599428][ T9742] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 285.599460][ T9742] R13: 00007f4c7ec16038 R14: 00007f4c7ec15fa0 R15: 00007f4c7ed3fa48 [ 285.599547][ T9742] [ 285.767401][ T9742] bridge8: entered promiscuous mode [ 285.782433][ T5705] usb 1-1: can't read configurations, error -71 [ 285.783507][ T807] usb 6-1: unable to get BOS descriptor or descriptor too short [ 285.827976][ T9742] bridge8: entered allmulticast mode [ 286.124846][ T807] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 8 [ 286.134797][ T807] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 16 [ 286.146622][ T807] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 286.155932][ T807] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 286.164253][ T807] usb 6-1: Product: syz [ 286.168498][ T807] usb 6-1: Manufacturer: syz [ 286.173113][ T807] usb 6-1: SerialNumber: syz [ 286.254509][ T24] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 286.387312][ T9730] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 286.396644][ T9730] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 286.416946][ T807] cdc_ncm 6-1:1.0: bind() failure [ 286.428945][ T24] usb 5-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 286.441615][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 286.463756][ T24] usb 5-1: Product: syz [ 286.469250][ T807] cdc_ncm 6-1:1.1: CDC Union missing and no IAD found [ 286.484484][ T24] usb 5-1: Manufacturer: syz [ 286.489450][ T807] cdc_ncm 6-1:1.1: bind() failure [ 286.496312][ T24] usb 5-1: SerialNumber: syz [ 286.516868][ T24] usb 5-1: config 0 descriptor?? [ 286.522245][ T807] usb 6-1: USB disconnect, device number 26 [ 286.567397][ T5692] usb 2-1: new full-speed USB device number 61 using dummy_hcd [ 286.739803][ T5692] usb 2-1: config index 0 descriptor too short (expected 55488, got 36) [ 286.748793][ T5692] usb 2-1: config 0 has an invalid descriptor of length 216, skipping remainder of the config [ 286.759646][ T5692] usb 2-1: config 0 has no interfaces? [ 286.765613][ T5692] usb 2-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 286.777280][ T5692] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 286.796714][ T5692] usb 2-1: config 0 descriptor?? [ 286.934119][ T807] usb 6-1: new full-speed USB device number 27 using dummy_hcd [ 287.022047][ T9748] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 287.038831][ T9748] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 287.056789][ T5723] usb 2-1: USB disconnect, device number 61 [ 287.101090][ T9730] netlink: 'syz.5.1216': attribute type 1 has an invalid length. [ 287.184328][ T9730] 8021q: adding VLAN 0 to HW filter on device bond1 [ 287.250735][ T807] usb 6-1: unable to get BOS descriptor or descriptor too short [ 287.275195][ T807] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 287.283924][ T807] usb 6-1: can't read configurations, error -71 [ 287.316106][ T24] usb 5-1: Firmware: major: 24, minor: 33, hardware type: ATUSB (2) [ 287.504128][ T5705] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 287.661345][ T24] usb 5-1: failed to fetch extended address, random address set [ 287.678901][ T5705] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 68, changing to 10 [ 287.701942][ T5705] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 287.728826][ T5705] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 287.753053][ T24] usb 5-1: USB disconnect, device number 67 [ 287.762672][ T5705] usb 2-1: config 0 descriptor?? [ 287.875587][ T5692] usb 1-1: new high-speed USB device number 70 using dummy_hcd [ 287.990848][ T5705] usbhid 2-1:0.0: can't add hid device: -71 [ 288.010608][ T5705] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 288.039868][ T5705] usb 2-1: USB disconnect, device number 62 [ 288.051820][ T9777] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1231'. [ 288.066492][ T5692] usb 1-1: config 48 interface 0 altsetting 98 bulk endpoint 0x4 has invalid maxpacket 1024 [ 288.079149][ T5692] usb 1-1: config 48 interface 0 altsetting 98 has an endpoint descriptor with address 0x5A, changing to 0xA [ 288.101236][ T5692] usb 1-1: config 48 interface 0 altsetting 98 endpoint 0xA has an invalid bInterval 0, changing to 7 [ 288.123233][ T5692] usb 1-1: config 48 interface 0 altsetting 98 endpoint 0xA has invalid wMaxPacketSize 0 [ 288.133482][ T5692] usb 1-1: config 48 interface 0 has no altsetting 0 [ 288.142876][ T5692] usb 1-1: New USB device found, idVendor=1784, idProduct=0006, bcdDevice=bb.2f [ 288.159911][ T5692] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 288.185622][ T5692] usb 1-1: Product: syz [ 288.195473][ T5692] usb 1-1: Manufacturer: syz [ 288.200126][ T5692] usb 1-1: SerialNumber: syz [ 288.209883][ T9771] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 288.263241][ T9784] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1233'. [ 288.614677][ T9802] input: syz1 as /devices/virtual/input/input83 [ 288.722814][ T9804] FAULT_INJECTION: forcing a failure. [ 288.722814][ T9804] name failslab, interval 1, probability 0, space 0, times 0 [ 288.769319][ T9804] CPU: 0 UID: 0 PID: 9804 Comm: syz.4.1240 Tainted: G L syzkaller #0 PREEMPT(full) [ 288.769356][ T9804] Tainted: [L]=SOFTLOCKUP [ 288.769363][ T9804] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 288.769376][ T9804] Call Trace: [ 288.769384][ T9804] [ 288.769393][ T9804] dump_stack_lvl+0xe8/0x150 [ 288.769422][ T9804] should_fail_ex+0x412/0x560 [ 288.769454][ T9804] should_failslab+0xa8/0x100 [ 288.769487][ T9804] __kmalloc_cache_noprof+0x88/0x660 [ 288.769515][ T9804] ? __asan_memset+0x22/0x50 [ 288.769539][ T9804] ? br_vlan_init+0x54/0x1b0 [ 288.769562][ T9804] ? rhashtable_init_noprof+0x7c6/0xad0 [ 288.769606][ T9804] br_vlan_init+0x54/0x1b0 [ 288.769633][ T9804] br_dev_init+0x65/0x490 [ 288.769670][ T9804] register_netdevice+0x6c6/0x1ec0 [ 288.769717][ T9804] ? trace_kmalloc+0x2a/0xf0 [ 288.769742][ T9804] ? __kvmalloc_node_noprof+0x545/0x8a0 [ 288.769770][ T9804] ? __pfx_register_netdevice+0x10/0x10 [ 288.769800][ T9804] ? validate_linkmsg+0x765/0x950 [ 288.769826][ T9804] br_dev_newlink+0x6a/0x140 [ 288.769845][ T9804] ? rtnl_newlink_create+0x311/0xb70 [ 288.769867][ T9804] ? __pfx_br_dev_newlink+0x10/0x10 [ 288.769889][ T9804] rtnl_newlink_create+0x329/0xb70 [ 288.769912][ T9804] ? __pfx___nla_validate_parse+0x10/0x10 [ 288.769945][ T9804] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 288.769972][ T9804] ? __pfx___mutex_lock+0x10/0x10 [ 288.770005][ T9804] ? ns_capable+0x89/0xe0 [ 288.770026][ T9804] rtnl_newlink+0x166a/0x1bb0 [ 288.770062][ T9804] ? __pfx_rtnl_newlink+0x10/0x10 [ 288.770087][ T9804] ? rcu_is_watching+0x15/0xb0 [ 288.770108][ T9804] ? trace_sched_exit_tp+0x3a/0x130 [ 288.770128][ T9804] ? __schedule+0x17ca/0x5680 [ 288.770171][ T9804] ? lockdep_hardirqs_on+0x7a/0x110 [ 288.770196][ T9804] ? __pfx___schedule+0x10/0x10 [ 288.770214][ T9804] ? nlmon_xmit+0xb0/0x100 [ 288.770247][ T9804] ? __lock_acquire+0x6b5/0x2cf0 [ 288.770269][ T9804] ? preempt_schedule_common+0x82/0xd0 [ 288.770289][ T9804] ? __dev_queue_xmit+0x2b6/0x3950 [ 288.770313][ T9804] ? preempt_schedule_thunk+0x16/0x30 [ 288.770360][ T9804] ? __local_bh_enable_ip+0xe1/0x130 [ 288.770378][ T9804] ? __dev_queue_xmit+0x2b6/0x3950 [ 288.770412][ T9804] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 288.770450][ T9804] ? __pfx_rtnl_newlink+0x10/0x10 [ 288.770471][ T9804] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 288.770498][ T9804] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 288.770519][ T9804] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 288.770540][ T9804] ? ref_tracker_free+0x693/0x840 [ 288.770567][ T9804] ? __pfx_ref_tracker_free+0x10/0x10 [ 288.770602][ T9804] netlink_rcv_skb+0x232/0x4b0 [ 288.770627][ T9804] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 288.770652][ T9804] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 288.770674][ T9804] ? lockdep_hardirqs_on+0x7a/0x110 [ 288.770727][ T9804] netlink_unicast+0x75c/0x8e0 [ 288.770760][ T9804] netlink_sendmsg+0x813/0xb40 [ 288.770794][ T9804] ? __pfx_netlink_sendmsg+0x10/0x10 [ 288.770822][ T9804] ? aa_sock_msg_perm+0xf1/0x1b0 [ 288.770847][ T9804] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 288.770877][ T9804] ____sys_sendmsg+0x972/0x9f0 [ 288.770902][ T9804] ? __might_fault+0xaf/0x130 [ 288.770933][ T9804] ? __pfx_____sys_sendmsg+0x10/0x10 [ 288.770967][ T9804] ? import_iovec+0x73/0xa0 [ 288.770997][ T9804] ___sys_sendmsg+0x2a5/0x360 [ 288.771021][ T9804] ? __lock_acquire+0x6b5/0x2cf0 [ 288.771046][ T9804] ? __pfx____sys_sendmsg+0x10/0x10 [ 288.771107][ T9804] ? __fget_files+0x2a/0x420 [ 288.771128][ T9804] ? __fget_files+0x3a0/0x420 [ 288.771159][ T9804] __x64_sys_sendmsg+0x1bd/0x2a0 [ 288.771188][ T9804] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 288.771223][ T9804] ? __pfx_ksys_write+0x10/0x10 [ 288.771257][ T9804] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 288.771277][ T9804] do_syscall_64+0x15f/0xf80 [ 288.771301][ T9804] ? trace_irq_disable+0x3b/0x140 [ 288.771339][ T9804] ? clear_bhb_loop+0x40/0x90 [ 288.771360][ T9804] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 288.771378][ T9804] RIP: 0033:0x7fcd6919cdd9 [ 288.771394][ T9804] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 288.771409][ T9804] RSP: 002b:00007fcd6a0f1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 288.771428][ T9804] RAX: ffffffffffffffda RBX: 00007fcd69415fa0 RCX: 00007fcd6919cdd9 [ 288.771440][ T9804] RDX: 0000000000008044 RSI: 0000200000000440 RDI: 0000000000000003 [ 288.771451][ T9804] RBP: 00007fcd6a0f1090 R08: 0000000000000000 R09: 0000000000000000 [ 288.771462][ T9804] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 288.771472][ T9804] R13: 00007fcd69416038 R14: 00007fcd69415fa0 R15: 00007fcd6953fa48 [ 288.771500][ T9804] [ 289.534192][ T5691] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 289.690825][ T5691] usb 6-1: Using ep0 maxpacket: 16 [ 289.701149][ T5691] usb 6-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 289.710385][ T5691] usb 6-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 289.718676][ T5691] usb 6-1: Product: syz [ 289.722921][ T5691] usb 6-1: Manufacturer: syz [ 289.727622][ T5691] usb 6-1: SerialNumber: syz [ 289.736125][ T5691] usb 6-1: config 0 descriptor?? [ 289.868173][ T9816] ip6tnl1: entered allmulticast mode [ 289.967801][ T5691] usb 6-1: USB disconnect, device number 29 [ 290.016590][ T807] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 290.184823][ T807] usb 5-1: unable to get BOS descriptor or descriptor too short [ 290.205682][ T807] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 290.226987][ T807] usb 5-1: can't read configurations, error -71 [ 290.277535][ T9826] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 290.745712][ T9837] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1253'. [ 290.769753][ T5692] usb 1-1: USB disconnect, device number 70 [ 290.884996][ T36] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 290.915905][ T5691] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 290.923803][ T36] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 291.022188][ T30] audit: type=1326 audit(1777744750.005:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9842 comm="syz.5.1256" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8587b9cdd9 code=0x50000 [ 291.055906][ T9845] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1257'. [ 291.076681][ T9845] ip6tnl1: entered allmulticast mode [ 291.108281][ T30] audit: type=1326 audit(1777744750.005:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9842 comm="syz.5.1256" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8587b9cdd9 code=0x50000 [ 291.250539][ T30] audit: type=1326 audit(1777744750.005:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9842 comm="syz.5.1256" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8587b9cdd9 code=0x50000 [ 291.287810][ T807] usb 5-1: new full-speed USB device number 69 using dummy_hcd [ 291.333239][ T30] audit: type=1326 audit(1777744750.005:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9842 comm="syz.5.1256" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8587b9cdd9 code=0x50000 [ 291.404809][ T30] audit: type=1326 audit(1777744750.005:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9842 comm="syz.5.1256" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8587b9cdd9 code=0x50000 [ 291.494102][ T5691] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 291.499967][ T30] audit: type=1326 audit(1777744750.055:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9842 comm="syz.5.1256" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8587b9cdd9 code=0x50000 [ 291.544166][ T807] usb 5-1: config 0 has an invalid interface number: 214 but max is 0 [ 291.579499][ T807] usb 5-1: config 0 has no interface number 0 [ 291.606313][ T9855] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 291.615592][ T807] usb 5-1: config 0 interface 214 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 291.637420][ T30] audit: type=1326 audit(1777744750.055:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9842 comm="syz.5.1256" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8587b9cdd9 code=0x50000 [ 291.666412][ T807] usb 5-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 291.687648][ T5691] usb 6-1: Using ep0 maxpacket: 16 [ 291.696299][ T807] usb 5-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 291.713296][ T807] usb 5-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 291.723090][ T30] audit: type=1326 audit(1777744750.055:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9842 comm="syz.5.1256" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8587b9cdd9 code=0x50000 [ 291.753302][ T5691] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 291.754154][ T807] usb 5-1: Manufacturer: syz [ 291.778591][ T807] usb 5-1: SerialNumber: syz [ 291.784954][ T30] audit: type=1326 audit(1777744750.055:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9842 comm="syz.5.1256" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8587b9cdd9 code=0x50000 [ 291.797322][ T5691] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 291.840638][ T807] usb 5-1: config 0 descriptor?? [ 291.854634][ T5692] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 291.885730][ T5691] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 291.900018][ T5691] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 291.929226][ T5692] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 291.944713][ T5691] usb 6-1: Product: syz [ 291.953141][ T5691] usb 6-1: Manufacturer: syz [ 291.960829][ T30] audit: type=1326 audit(1777744750.055:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9842 comm="syz.5.1256" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8587b9cdd9 code=0x50000 [ 291.996232][ T5691] usb 6-1: SerialNumber: syz [ 292.051532][ T5691] usb 6-1: 0:2 : does not exist [ 292.274134][ T5705] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 292.444061][ T5705] usb 3-1: Using ep0 maxpacket: 32 [ 292.463253][ T5705] usb 3-1: config 239 has an invalid descriptor of length 0, skipping remainder of the config [ 292.483302][ T5705] usb 3-1: config 239 has 1 interface, different from the descriptor's value: 3 [ 292.518073][ T5705] usb 3-1: New USB device found, idVendor=0582, idProduct=003b, bcdDevice= 0.40 [ 292.536449][ T5705] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 292.563924][ T5705] usb 3-1: Product: syz [ 292.575481][ T807] usbtouchscreen 5-1:0.214: probe with driver usbtouchscreen failed with error -71 [ 292.587624][ T5705] usb 3-1: Manufacturer: syz [ 292.599506][ T5705] usb 3-1: SerialNumber: syz [ 292.623550][ T807] usb 5-1: USB disconnect, device number 69 [ 293.259945][ T9866] xt_hashlimit: size too large, truncated to 1048576 [ 293.565073][ T5692] usb 1-1: new high-speed USB device number 71 using dummy_hcd [ 293.746606][ T5692] usb 1-1: Using ep0 maxpacket: 32 [ 293.780264][ T5692] usb 1-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 293.817736][ T5692] usb 1-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 293.864958][ T5692] usb 1-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 293.906411][ T5692] usb 1-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 293.958372][ T5692] usb 1-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 293.985735][ T5692] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 294.019164][ T5692] usb 1-1: Product: syz [ 294.026821][ T5692] usb 1-1: Manufacturer: syz [ 294.043053][ T5692] usb 1-1: SerialNumber: syz [ 294.053649][ T5758] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 294.095490][ T5691] usb 6-1: 5:0: failed to get current value for ch 0 (-22) [ 294.128749][ C0] imon 1-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 294.182321][ T5692] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:155.0/input/input87 [ 294.195969][ T9890] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 294.236050][ T9892] kAFS: unable to lookup cell '˙' [ 294.253706][ T5705] usb 3-1: unit 2 not found! [ 294.258897][ T5758] usb 2-1: unable to get BOS descriptor or descriptor too short [ 294.271171][ T5691] usb 6-1: USB disconnect, device number 30 [ 294.303531][ T5758] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 294.343332][ T5758] usb 2-1: can't read configurations, error -71 [ 294.355911][ T5692] imon 1-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 294.368261][ T9892] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1269'. [ 294.385346][ T5692] (id 0x00) [ 294.559860][ T9897] netlink: 'syz.5.1272': attribute type 2 has an invalid length. [ 294.594363][ T9897] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1272'. [ 294.608346][ T5705] usb 3-1: USB disconnect, device number 72 [ 294.664849][ T5692] rc_core: IR keymap rc-imon-pad not found [ 294.685035][ T5692] Registered IR keymap rc-empty [ 294.701253][ T5692] imon 1-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 294.725054][ T5692] imon 1-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 294.809493][ T6637] udevd[6637]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:239.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 294.831429][ T5692] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:155.0/rc/rc0 [ 294.866656][ T5692] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:155.0/rc/rc0/input88 [ 294.989388][ T5692] imon 1-1:155.0: iMON device (15c2:ffdc, intf0) on usb<1:71> initialized [ 295.016721][ T9866] ip6tnl0: Caught tx_queue_len zero misconfig [ 295.083419][ T5692] usb 1-1: USB disconnect, device number 71 [ 295.259230][ T9902] FAULT_INJECTION: forcing a failure. [ 295.259230][ T9902] name failslab, interval 1, probability 0, space 0, times 0 [ 295.311967][ T9902] CPU: 0 UID: 0 PID: 9902 Comm: syz.4.1275 Tainted: G L syzkaller #0 PREEMPT(full) [ 295.311998][ T9902] Tainted: [L]=SOFTLOCKUP [ 295.312005][ T9902] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 295.312017][ T9902] Call Trace: [ 295.312025][ T9902] [ 295.312033][ T9902] dump_stack_lvl+0xe8/0x150 [ 295.312062][ T9902] should_fail_ex+0x412/0x560 [ 295.312093][ T9902] should_failslab+0xa8/0x100 [ 295.312125][ T9902] __kvmalloc_node_noprof+0x178/0x8a0 [ 295.312155][ T9902] ? rhashtable_init_noprof+0x52e/0xad0 [ 295.312180][ T9902] ? rhashtable_init_noprof+0x12d/0xad0 [ 295.312211][ T9902] rhashtable_init_noprof+0x52e/0xad0 [ 295.312244][ T9902] br_vlan_init+0x98/0x1b0 [ 295.312273][ T9902] br_dev_init+0x65/0x490 [ 295.312300][ T9902] register_netdevice+0x6c6/0x1ec0 [ 295.312334][ T9902] ? trace_kmalloc+0x2a/0xf0 [ 295.312363][ T9902] ? __kvmalloc_node_noprof+0x545/0x8a0 [ 295.312396][ T9902] ? __pfx_register_netdevice+0x10/0x10 [ 295.312435][ T9902] ? validate_linkmsg+0x765/0x950 [ 295.312465][ T9902] br_dev_newlink+0x6a/0x140 [ 295.312486][ T9902] ? rtnl_newlink_create+0x311/0xb70 [ 295.312509][ T9902] ? __pfx_br_dev_newlink+0x10/0x10 [ 295.312535][ T9902] rtnl_newlink_create+0x329/0xb70 [ 295.312561][ T9902] ? __pfx___nla_validate_parse+0x10/0x10 [ 295.312599][ T9902] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 295.312628][ T9902] ? __pfx___mutex_lock+0x10/0x10 [ 295.312663][ T9902] ? ns_capable+0x89/0xe0 [ 295.312687][ T9902] rtnl_newlink+0x166a/0x1bb0 [ 295.312727][ T9902] ? __pfx_rtnl_newlink+0x10/0x10 [ 295.312748][ T9902] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 295.312806][ T9902] ? kasan_quarantine_put+0xbb/0x1f0 [ 295.312832][ T9902] ? lockdep_hardirqs_on+0x7a/0x110 [ 295.312861][ T9902] ? nlmon_xmit+0xb0/0x100 [ 295.312883][ T9902] ? kmem_cache_free+0x182/0x650 [ 295.312921][ T9902] ? __lock_acquire+0x6b5/0x2cf0 [ 295.312946][ T9902] ? __dev_queue_xmit+0x2b6/0x3950 [ 295.312976][ T9902] ? __local_bh_enable_ip+0xd0/0x130 [ 295.312996][ T9902] ? lockdep_hardirqs_on+0x7a/0x110 [ 295.313018][ T9902] ? __dev_queue_xmit+0x2b6/0x3950 [ 295.313043][ T9902] ? __local_bh_enable_ip+0xd0/0x130 [ 295.313060][ T9902] ? __dev_queue_xmit+0x2b6/0x3950 [ 295.313094][ T9902] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 295.313131][ T9902] ? __pfx_rtnl_newlink+0x10/0x10 [ 295.313155][ T9902] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 295.313183][ T9902] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 295.313206][ T9902] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 295.313227][ T9902] ? ref_tracker_free+0x693/0x840 [ 295.313258][ T9902] ? __pfx_ref_tracker_free+0x10/0x10 [ 295.313282][ T9902] ? __asan_memcpy+0x40/0x70 [ 295.313304][ T9902] ? __skb_clone+0x63/0x7a0 [ 295.313339][ T9902] netlink_rcv_skb+0x232/0x4b0 [ 295.313366][ T9902] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 295.313392][ T9902] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 295.313439][ T9902] ? netlink_deliver_tap+0x2e/0x1b0 [ 295.313464][ T9902] ? netlink_deliver_tap+0x2e/0x1b0 [ 295.313495][ T9902] netlink_unicast+0x75c/0x8e0 [ 295.313530][ T9902] netlink_sendmsg+0x813/0xb40 [ 295.313566][ T9902] ? __pfx_netlink_sendmsg+0x10/0x10 [ 295.313597][ T9902] ? aa_sock_msg_perm+0xf1/0x1b0 [ 295.313624][ T9902] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 295.313654][ T9902] ____sys_sendmsg+0x972/0x9f0 [ 295.313680][ T9902] ? __might_fault+0xaf/0x130 [ 295.313712][ T9902] ? __pfx_____sys_sendmsg+0x10/0x10 [ 295.313749][ T9902] ? import_iovec+0x73/0xa0 [ 295.313781][ T9902] ___sys_sendmsg+0x2a5/0x360 [ 295.313806][ T9902] ? __lock_acquire+0x6b5/0x2cf0 [ 295.313834][ T9902] ? __pfx____sys_sendmsg+0x10/0x10 [ 295.313900][ T9902] ? __fget_files+0x2a/0x420 [ 295.313922][ T9902] ? __fget_files+0x3a0/0x420 [ 295.313956][ T9902] __x64_sys_sendmsg+0x1bd/0x2a0 [ 295.313987][ T9902] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 295.314025][ T9902] ? __pfx_ksys_write+0x10/0x10 [ 295.314061][ T9902] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 295.314083][ T9902] do_syscall_64+0x15f/0xf80 [ 295.314107][ T9902] ? trace_irq_disable+0x3b/0x140 [ 295.314136][ T9902] ? clear_bhb_loop+0x40/0x90 [ 295.314160][ T9902] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 295.314180][ T9902] RIP: 0033:0x7fcd6919cdd9 [ 295.314198][ T9902] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 295.314214][ T9902] RSP: 002b:00007fcd6a0f1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 295.314235][ T9902] RAX: ffffffffffffffda RBX: 00007fcd69415fa0 RCX: 00007fcd6919cdd9 [ 295.314249][ T9902] RDX: 0000000000008044 RSI: 0000200000000440 RDI: 0000000000000003 [ 295.314262][ T9902] RBP: 00007fcd6a0f1090 R08: 0000000000000000 R09: 0000000000000000 [ 295.314274][ T9902] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 295.314285][ T9902] R13: 00007fcd69416038 R14: 00007fcd69415fa0 R15: 00007fcd6953fa48 [ 295.314318][ T9902] [ 295.785266][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 295.815649][ T5691] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 295.927776][ T9902] bridge0: entered promiscuous mode [ 295.946878][ T9902] bridge0: entered allmulticast mode [ 296.014332][ T5691] usb 6-1: Using ep0 maxpacket: 16 [ 296.021336][ T5691] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 129, using maximum allowed: 30 [ 296.032358][ T5691] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 296.043345][ T5691] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 296.053200][ T5691] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 129 [ 296.066620][ T5691] usb 6-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 296.076119][ T5691] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 296.087295][ T5691] usb 6-1: config 0 descriptor?? [ 296.114088][ T5723] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 296.277449][ T5723] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 296.308422][ T5723] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 296.340067][ T5723] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 296.351129][ T9920] bridge12: entered promiscuous mode [ 296.365251][ T9920] bridge12: entered allmulticast mode [ 296.371845][ T5723] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 296.416185][ T9907] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 296.457872][ T5723] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 296.471190][ T9921] sctp: [Deprecated]: syz.1.1278 (pid 9921) Use of struct sctp_assoc_value in delayed_ack socket option. [ 296.471190][ T9921] Use struct sctp_sack_info instead [ 296.532917][ T5691] input: HID 0458:5013 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0458:5013.0011/input/input89 [ 296.700662][ T9899] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 296.758522][ T9899] Cannot find add_set index 3 as target [ 296.810262][ T5691] input: HID 0458:5013 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0458:5013.0011/input/input90 [ 296.892283][ T5723] usb 3-1: USB disconnect, device number 73 [ 297.030845][ T5691] kye 0003:0458:5013.0011: input,hiddev0,hidraw0: USB HID vff.fa Device [HID 0458:5013] on usb-dummy_hcd.5-1/input0 [ 297.111888][ T5691] usb 6-1: USB disconnect, device number 31 [ 297.124389][ T9] usb 1-1: new high-speed USB device number 72 using dummy_hcd [ 297.308475][ T9] usb 1-1: unable to get BOS descriptor or descriptor too short [ 297.367965][ T9] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 297.385863][ T9936] fido_id[9936]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 297.404188][ T9] usb 1-1: can't read configurations, error -71 [ 297.463620][ T9938] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1286'. [ 297.714300][ T5691] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 297.885945][ T5691] usb 6-1: config 220 has an invalid interface number: 76 but max is 2 [ 297.904616][ T5691] usb 6-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 297.936316][ T5691] usb 6-1: config 220 has no interface number 2 [ 297.951674][ T5691] usb 6-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 297.985167][ T5691] usb 6-1: config 220 interface 0 has no altsetting 0 [ 298.002370][ T5691] usb 6-1: config 220 interface 76 has no altsetting 0 [ 298.030745][ T5691] usb 6-1: config 220 interface 1 has no altsetting 0 [ 298.049640][ T5691] usb 6-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 298.068558][ T5691] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 298.092584][ T5691] usb 6-1: Product: syz [ 298.104004][ T5691] usb 6-1: Manufacturer: syz [ 298.118303][ T5691] usb 6-1: SerialNumber: syz [ 298.213112][ T9949] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1289'. [ 298.419393][ T9935] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 298.451715][ T9935] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 298.486278][ T5691] usb 6-1: selecting invalid altsetting 0 [ 298.522986][ T5691] uvcvideo 6-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 298.540707][ T5691] uvcvideo 6-1:220.0: No valid video chain found. [ 298.607731][ T5691] usb 6-1: selecting invalid altsetting 0 [ 298.646329][ T5691] usbtest 6-1:220.1: probe with driver usbtest failed with error -22 [ 298.686675][ T5691] usb 6-1: USB disconnect, device number 32 [ 298.808320][ T9953] FAULT_INJECTION: forcing a failure. [ 298.808320][ T9953] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 298.850010][ T9953] CPU: 0 UID: 0 PID: 9953 Comm: syz.0.1291 Tainted: G L syzkaller #0 PREEMPT(full) [ 298.850038][ T9953] Tainted: [L]=SOFTLOCKUP [ 298.850043][ T9953] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 298.850051][ T9953] Call Trace: [ 298.850056][ T9953] [ 298.850061][ T9953] dump_stack_lvl+0xe8/0x150 [ 298.850079][ T9953] should_fail_ex+0x412/0x560 [ 298.850098][ T9953] _copy_from_user+0x2d/0xb0 [ 298.850115][ T9953] ___sys_recvmsg+0x175/0x590 [ 298.850139][ T9953] ? __pfx____sys_recvmsg+0x10/0x10 [ 298.850160][ T9953] ? __fget_files+0x2a/0x420 [ 298.850193][ T9953] do_recvmmsg+0x334/0x800 [ 298.850220][ T9953] ? __pfx_do_recvmmsg+0x10/0x10 [ 298.850244][ T9953] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 298.850272][ T9953] __x64_sys_recvmmsg+0x198/0x250 [ 298.850291][ T9953] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 298.850314][ T9953] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 298.850327][ T9953] do_syscall_64+0x15f/0xf80 [ 298.850342][ T9953] ? trace_irq_disable+0x3b/0x140 [ 298.850360][ T9953] ? clear_bhb_loop+0x40/0x90 [ 298.850392][ T9953] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 298.850412][ T9953] RIP: 0033:0x7f12e139cdd9 [ 298.850424][ T9953] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 298.850434][ T9953] RSP: 002b:00007f12e223f028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 298.850448][ T9953] RAX: ffffffffffffffda RBX: 00007f12e1615fa0 RCX: 00007f12e139cdd9 [ 298.850457][ T9953] RDX: 0000000000000f00 RSI: 0000200000000400 RDI: 0000000000000003 [ 298.850465][ T9953] RBP: 00007f12e223f090 R08: 0000000000000000 R09: 0000000000000000 [ 298.850472][ T9953] R10: 0000004c42bb4f92 R11: 0000000000000246 R12: 0000000000000002 [ 298.850480][ T9953] R13: 00007f12e1616038 R14: 00007f12e1615fa0 R15: 00007f12e173fa48 [ 298.850499][ T9953] [ 299.182002][ T9957] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 299.394769][ T5723] usb 2-1: new full-speed USB device number 65 using dummy_hcd [ 299.485758][ T5691] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 299.559726][ T5723] usb 2-1: config 8 has an invalid interface number: 177 but max is 0 [ 299.563458][ T9976] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1300'. [ 299.582014][ T5723] usb 2-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 299.602645][ T5723] usb 2-1: config 8 has no interface number 0 [ 299.609061][ T5723] usb 2-1: config 8 interface 177 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 299.631100][ T5723] usb 2-1: config 8 interface 177 has no altsetting 0 [ 299.644000][ T5723] usb 2-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1 [ 299.672700][ T5723] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 299.682606][ T5691] usb 6-1: config 48 interface 0 altsetting 98 bulk endpoint 0x4 has invalid maxpacket 1024 [ 299.704431][ T5691] usb 6-1: config 48 interface 0 altsetting 98 has an endpoint descriptor with address 0x5A, changing to 0xA [ 299.716318][ T5723] ir_toy 2-1:8.177: required endpoints not found [ 299.733804][ T9979] xt_nfacct: accounting object `syz1' does not exist [ 299.747998][ T5691] usb 6-1: config 48 interface 0 altsetting 98 endpoint 0xA has an invalid bInterval 0, changing to 7 [ 299.768066][ T5691] usb 6-1: config 48 interface 0 altsetting 98 endpoint 0xA has invalid wMaxPacketSize 0 [ 299.778934][ T5691] usb 6-1: config 48 interface 0 has no altsetting 0 [ 299.789284][ T5691] usb 6-1: New USB device found, idVendor=1784, idProduct=0006, bcdDevice=bb.2f [ 299.800495][ T5691] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 299.816575][ T5691] usb 6-1: Product: syz [ 299.831232][ T5691] usb 6-1: Manufacturer: syz [ 299.842023][ T5691] usb 6-1: SerialNumber: syz [ 299.861497][ T9960] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 299.907714][ T24] usb 2-1: USB disconnect, device number 65 [ 300.024634][ T5723] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 300.188342][ T5723] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 300.204024][ T5723] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 300.213605][ T5723] usb 3-1: Product: syz [ 300.220226][ T5723] usb 3-1: Manufacturer: syz [ 300.233999][ T5723] usb 3-1: SerialNumber: syz [ 300.280376][ T9988] input: syz1 as /devices/virtual/input/input92 [ 300.314060][ T24] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 300.484282][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 300.493405][ T24] usb 5-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 300.503384][ T24] usb 5-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 300.511776][ T24] usb 5-1: Product: syz [ 300.516521][ T24] usb 5-1: Manufacturer: syz [ 300.521190][ T24] usb 5-1: SerialNumber: syz [ 300.533353][ T9991] FAULT_INJECTION: forcing a failure. [ 300.533353][ T9991] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 300.541883][ T24] usb 5-1: config 0 descriptor?? [ 300.557453][ T9991] CPU: 0 UID: 0 PID: 9991 Comm: syz.1.1305 Tainted: G L syzkaller #0 PREEMPT(full) [ 300.557480][ T9991] Tainted: [L]=SOFTLOCKUP [ 300.557494][ T9991] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 300.557505][ T9991] Call Trace: [ 300.557512][ T9991] [ 300.557520][ T9991] dump_stack_lvl+0xe8/0x150 [ 300.557547][ T9991] should_fail_ex+0x412/0x560 [ 300.557576][ T9991] _copy_from_user+0x2d/0xb0 [ 300.557603][ T9991] ___sys_recvmsg+0x175/0x590 [ 300.557636][ T9991] ? __pfx____sys_recvmsg+0x10/0x10 [ 300.557666][ T9991] ? __fget_files+0x2a/0x420 [ 300.557717][ T9991] do_recvmmsg+0x334/0x800 [ 300.557750][ T9991] ? __pfx_do_recvmmsg+0x10/0x10 [ 300.557788][ T9991] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 300.557830][ T9991] __x64_sys_recvmmsg+0x198/0x250 [ 300.557859][ T9991] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 300.557894][ T9991] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 300.557914][ T9991] do_syscall_64+0x15f/0xf80 [ 300.557937][ T9991] ? trace_irq_disable+0x3b/0x140 [ 300.557964][ T9991] ? clear_bhb_loop+0x40/0x90 [ 300.557988][ T9991] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 300.558013][ T9991] RIP: 0033:0x7f4c7e99cdd9 [ 300.558030][ T9991] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 300.558045][ T9991] RSP: 002b:00007f4c7f78c028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 300.558064][ T9991] RAX: ffffffffffffffda RBX: 00007f4c7ec15fa0 RCX: 00007f4c7e99cdd9 [ 300.558077][ T9991] RDX: 0000000000000f00 RSI: 0000200000000400 RDI: 0000000000000003 [ 300.558089][ T9991] RBP: 00007f4c7f78c090 R08: 0000000000000000 R09: 0000000000000000 [ 300.558100][ T9991] R10: 0000004c42bb4f92 R11: 0000000000000246 R12: 0000000000000002 [ 300.558111][ T9991] R13: 00007f4c7ec16038 R14: 00007f4c7ec15fa0 R15: 00007f4c7ed3fa48 [ 300.558140][ T9991] [ 300.845943][ T24] usb 5-1: USB disconnect, device number 70 [ 300.954195][ T9] usb 1-1: new high-speed USB device number 74 using dummy_hcd [ 301.013359][ T9997] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 301.104109][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 301.118259][ T9] usb 1-1: unable to get BOS descriptor or descriptor too short [ 301.144962][ T9] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 8 [ 301.156375][ T9] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 16 [ 301.170559][ T9] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 301.182102][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 301.209894][ T9] usb 1-1: Product: syz [ 301.219596][ T9] usb 1-1: Manufacturer: syz [ 301.229508][ T9] usb 1-1: SerialNumber: syz [ 301.452221][ T9992] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 301.480693][ T9992] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 301.498645][ T9] cdc_ncm 1-1:1.0: bind() failure [ 301.520989][ T9] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 301.528673][ T9] cdc_ncm 1-1:1.1: bind() failure [ 301.553599][ T9] usb 1-1: USB disconnect, device number 74 [ 302.044120][ T9] usb 1-1: new full-speed USB device number 75 using dummy_hcd [ 302.084066][ T24] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 302.205434][ T9992] netlink: 'syz.0.1306': attribute type 1 has an invalid length. [ 302.246765][ T24] usb 5-1: Using ep0 maxpacket: 8 [ 302.307030][ T5691] usb 6-1: USB disconnect, device number 33 [ 302.317754][ T24] usb 5-1: unable to get BOS descriptor or descriptor too short [ 302.382443][ T24] usb 5-1: too many configurations: 70, using maximum allowed: 8 [ 302.433414][ T5723] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 302.477727][ T24] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 302.517217][ T24] usb 5-1: can't read configurations, error -61 [ 302.524887][ T9992] 8021q: adding VLAN 0 to HW filter on device bond7 [ 302.528551][ T5723] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPROTO [ 302.572889][ T5723] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 302.632069][ T5723] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 302.658603][ T9] usb 1-1: unable to get BOS descriptor or descriptor too short [ 302.684107][ T24] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 302.688188][ T9] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 302.707086][ T5723] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 302.742085][ T5723] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -71 [ 302.746391][ T9] usb 1-1: can't read configurations, error -71 [ 302.810515][ T5723] usb 3-1: USB disconnect, device number 74 [ 302.864381][ T24] usb 5-1: Using ep0 maxpacket: 8 [ 302.877662][ T24] usb 5-1: unable to get BOS descriptor or descriptor too short [ 302.900583][ T24] usb 5-1: too many configurations: 70, using maximum allowed: 8 [ 302.933673][ T24] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 302.961340][ T24] usb 5-1: can't read configurations, error -61 [ 302.988710][ T24] usb usb5-port1: attempt power cycle [ 303.335351][T10029] netlink: 'syz.1.1319': attribute type 8 has an invalid length. [ 303.343627][T10029] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1319'. [ 303.344471][ T24] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 303.366110][T10027] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 303.378540][T10029] veth1_to_team: entered promiscuous mode [ 303.387899][T10029] gretap0: entered promiscuous mode [ 303.394808][ T24] usb 5-1: Using ep0 maxpacket: 8 [ 303.401975][ T24] usb 5-1: unable to get BOS descriptor or descriptor too short [ 303.410370][ T24] usb 5-1: too many configurations: 70, using maximum allowed: 8 [ 303.418614][T10029] veth1_to_team: left promiscuous mode [ 303.427175][T10029] gretap0: left promiscuous mode [ 303.434541][ T24] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 303.444416][ T24] usb 5-1: can't read configurations, error -61 [ 303.463094][T10031] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1320'. [ 303.575159][ T24] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 303.590605][T10035] bridge5: entered promiscuous mode [ 303.605480][T10035] bridge5: entered allmulticast mode [ 303.636712][ T24] usb 5-1: Using ep0 maxpacket: 8 [ 303.645919][ T24] usb 5-1: unable to get BOS descriptor or descriptor too short [ 303.660607][ T24] usb 5-1: too many configurations: 70, using maximum allowed: 8 [ 303.682921][ T24] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 303.701027][ T24] usb 5-1: can't read configurations, error -61 [ 303.709853][ T24] usb usb5-port1: unable to enumerate USB device [ 303.854395][ T5758] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 303.906027][ T5692] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 304.026923][ T5758] usb 2-1: config 48 interface 0 altsetting 98 bulk endpoint 0x4 has invalid maxpacket 1024 [ 304.037495][ T5758] usb 2-1: config 48 interface 0 altsetting 98 has an endpoint descriptor with address 0x5A, changing to 0xA [ 304.049488][ T5758] usb 2-1: config 48 interface 0 altsetting 98 endpoint 0xA has an invalid bInterval 0, changing to 7 [ 304.065512][ T5758] usb 2-1: config 48 interface 0 altsetting 98 endpoint 0xA has invalid wMaxPacketSize 0 [ 304.077059][ T5758] usb 2-1: config 48 interface 0 has no altsetting 0 [ 304.084727][ T5692] usb 3-1: config 48 interface 0 altsetting 98 bulk endpoint 0x4 has invalid maxpacket 1024 [ 304.095357][ T5692] usb 3-1: config 48 interface 0 altsetting 98 has an endpoint descriptor with address 0x5A, changing to 0xA [ 304.107365][ T5692] usb 3-1: config 48 interface 0 altsetting 98 endpoint 0xA has an invalid bInterval 0, changing to 7 [ 304.118944][ T5692] usb 3-1: config 48 interface 0 altsetting 98 endpoint 0xA has invalid wMaxPacketSize 0 [ 304.131369][ T5692] usb 3-1: config 48 interface 0 has no altsetting 0 [ 304.138290][ T5758] usb 2-1: New USB device found, idVendor=1784, idProduct=0006, bcdDevice=bb.2f [ 304.147735][ T5758] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 304.155880][ T5758] usb 2-1: Product: syz [ 304.160483][ T5758] usb 2-1: Manufacturer: syz [ 304.169540][ T5758] usb 2-1: SerialNumber: syz [ 304.174400][ T5692] usb 3-1: New USB device found, idVendor=1784, idProduct=0006, bcdDevice=bb.2f [ 304.183570][ T5692] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 304.195777][ T5692] usb 3-1: Product: syz [ 304.201466][T10038] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 304.202552][ T5692] usb 3-1: Manufacturer: syz [ 304.213385][ T5692] usb 3-1: SerialNumber: syz [ 304.229123][T10041] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 304.453263][T10038] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 304.476910][T10038] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 304.676751][T10057] input: syz1 as /devices/virtual/input/input93 [ 304.737883][T10056] input: syz1 as /devices/virtual/input/input94 [ 304.794994][ T24] usb 1-1: new high-speed USB device number 77 using dummy_hcd [ 304.964186][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 304.982934][ T24] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA4, changing to 0x84 [ 305.008434][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 124, setting to 64 [ 305.034432][ T24] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 305.050150][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 305.071795][ T24] usb 1-1: config 0 descriptor?? [ 305.286079][ T24] ath6kl: Failed to submit usb control message: -71 [ 305.304679][ T24] ath6kl: unable to send the bmi data to the device: -71 [ 305.312347][ T24] ath6kl: Unable to send get target info: -71 [ 305.339449][ T24] ath6kl: Failed to init ath6kl core: -71 [ 305.367172][ T24] ath6kl_usb 1-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 305.403689][ T24] usb 1-1: USB disconnect, device number 77 [ 305.988144][T10063] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 306.524047][ T5691] usb 5-1: new high-speed USB device number 75 using dummy_hcd [ 306.629743][ T5758] usb 2-1: USB disconnect, device number 66 [ 306.686589][ T5691] usb 5-1: Using ep0 maxpacket: 16 [ 306.698284][ T5691] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 306.711841][ T5691] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 306.714605][ T24] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 306.721987][ T5691] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 306.752514][ T5691] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 306.778569][ T5691] usb 5-1: config 0 descriptor?? [ 306.787268][T10074] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1335'. [ 306.908119][ T5692] usb 3-1: USB disconnect, device number 75 [ 306.924777][ T24] usb 6-1: Using ep0 maxpacket: 16 [ 306.940283][ T24] usb 6-1: unable to get BOS descriptor or descriptor too short [ 306.973283][ T24] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 8 [ 306.997195][ T24] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 16 [ 307.035716][ T24] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 307.050883][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 307.067429][ T24] usb 6-1: Product: syz [ 307.072332][ T24] usb 6-1: Manufacturer: syz [ 307.081899][ T24] usb 6-1: SerialNumber: syz [ 307.099705][ T5691] usbhid 5-1:0.0: can't add hid device: -71 [ 307.120244][ T5691] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 307.166868][ T5691] usb 5-1: USB disconnect, device number 75 [ 307.296703][T10070] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 307.310704][T10070] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 307.329566][ T24] cdc_ncm 6-1:1.0: bind() failure [ 307.342164][ T24] cdc_ncm 6-1:1.1: CDC Union missing and no IAD found [ 307.351911][ T24] cdc_ncm 6-1:1.1: bind() failure [ 307.363620][ T24] usb 6-1: USB disconnect, device number 34 [ 307.516055][ T5692] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 307.584108][ T5758] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 307.675420][ T5692] usb 3-1: config 48 interface 0 altsetting 98 bulk endpoint 0x4 has invalid maxpacket 1024 [ 307.685729][ T5692] usb 3-1: config 48 interface 0 altsetting 98 has an endpoint descriptor with address 0x5A, changing to 0xA [ 307.697365][ T5692] usb 3-1: config 48 interface 0 altsetting 98 endpoint 0xA has an invalid bInterval 0, changing to 7 [ 307.708421][ T5692] usb 3-1: config 48 interface 0 altsetting 98 endpoint 0xA has invalid wMaxPacketSize 0 [ 307.718550][ T5692] usb 3-1: config 48 interface 0 has no altsetting 0 [ 307.727516][ T5692] usb 3-1: New USB device found, idVendor=1784, idProduct=0006, bcdDevice=bb.2f [ 307.736908][ T5692] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 307.745106][ T5692] usb 3-1: Product: syz [ 307.749578][ T5692] usb 3-1: Manufacturer: syz [ 307.754836][ T5692] usb 3-1: SerialNumber: syz [ 307.764644][ T5758] usb 2-1: unable to get BOS descriptor or descriptor too short [ 307.782511][ T5758] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 307.783079][T10091] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 307.790444][ T5758] usb 2-1: can't read configurations, error -71 [ 307.824173][ T24] usb 6-1: new full-speed USB device number 35 using dummy_hcd [ 307.889002][T10096] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 307.987026][T10070] netlink: 'syz.5.1330': attribute type 1 has an invalid length. [ 308.023583][T10070] 8021q: adding VLAN 0 to HW filter on device bond2 [ 308.048574][ T24] usb 6-1: unable to get BOS descriptor or descriptor too short [ 308.059296][ T24] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 308.066977][ T24] usb 6-1: can't read configurations, error -71 [ 308.183029][T10102] input: syz1 as /devices/virtual/input/input97 [ 308.226440][ T808] usb 5-1: new high-speed USB device number 76 using dummy_hcd [ 308.387739][ T808] usb 5-1: unable to get BOS descriptor or descriptor too short [ 308.419680][ T808] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 308.430762][ T808] usb 5-1: can't read configurations, error -71 [ 308.440803][T10104] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1345'. [ 308.500700][T10106] bridge9: entered promiscuous mode [ 308.506141][T10106] bridge9: entered allmulticast mode [ 308.550870][T10108] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1347'. [ 308.626815][T10110] bridge6: entered promiscuous mode [ 308.632226][T10110] bridge6: entered allmulticast mode [ 308.944255][ T5758] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 309.104033][ T24] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 309.110601][ T5758] usb 2-1: config 1 interface 0 altsetting 13 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 309.125228][ T5758] usb 2-1: config 1 interface 0 has no altsetting 0 [ 309.134869][ T5758] usb 2-1: string descriptor 0 read error: -22 [ 309.141647][ T5758] usb 2-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.40 [ 309.151051][ T5758] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 309.256116][ T24] usb 6-1: config 48 interface 0 altsetting 98 bulk endpoint 0x4 has invalid maxpacket 1024 [ 309.266518][ T24] usb 6-1: config 48 interface 0 altsetting 98 has an endpoint descriptor with address 0x5A, changing to 0xA [ 309.278327][ T24] usb 6-1: config 48 interface 0 altsetting 98 endpoint 0xA has an invalid bInterval 0, changing to 7 [ 309.289986][ T24] usb 6-1: config 48 interface 0 altsetting 98 endpoint 0xA has invalid wMaxPacketSize 0 [ 309.299877][ T24] usb 6-1: config 48 interface 0 has no altsetting 0 [ 309.308754][ T24] usb 6-1: New USB device found, idVendor=1784, idProduct=0006, bcdDevice=bb.2f [ 309.319113][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 309.327352][ T24] usb 6-1: Product: syz [ 309.331672][ T24] usb 6-1: Manufacturer: syz [ 309.336356][ T24] usb 6-1: SerialNumber: syz [ 309.347966][T10114] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 309.474172][ T808] usb 5-1: new high-speed USB device number 77 using dummy_hcd [ 309.574317][ T5758] hid_parser_main: 19 callbacks suppressed [ 309.574339][ T5758] lenovo 0003:17EF:6047.0012: unknown main item tag 0x0 [ 309.587454][ T5758] lenovo 0003:17EF:6047.0012: unknown main item tag 0x0 [ 309.594573][ T5758] lenovo 0003:17EF:6047.0012: unknown main item tag 0x0 [ 309.601946][ T5758] lenovo 0003:17EF:6047.0012: unknown main item tag 0x0 [ 309.609606][ T5758] lenovo 0003:17EF:6047.0012: unknown main item tag 0x0 [ 309.618269][ T5758] lenovo 0003:17EF:6047.0012: unknown main item tag 0x0 [ 309.625353][ T5758] lenovo 0003:17EF:6047.0012: unknown main item tag 0x0 [ 309.633019][ T5758] lenovo 0003:17EF:6047.0012: unknown main item tag 0x0 [ 309.640165][ T808] usb 5-1: Using ep0 maxpacket: 8 [ 309.645637][ T5758] lenovo 0003:17EF:6047.0012: unknown main item tag 0x0 [ 309.652712][ T5758] lenovo 0003:17EF:6047.0012: unknown main item tag 0x0 [ 309.661783][ T808] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 309.677775][ T808] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 309.704022][ T808] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 309.724115][ T808] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 309.744081][ T808] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 309.769913][ T808] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 309.780938][ T5758] lenovo 0003:17EF:6047.0012: hidraw0: USB HID v0.01 Device [HID 17ef:6047] on usb-dummy_hcd.1-1/input0 [ 309.795298][ T808] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 309.807319][ T5758] lenovo 0003:17EF:6047.0012: Failed to switch F7/9/11 mode: -71 [ 309.817335][ T5758] lenovo 0003:17EF:6047.0012: Failed to switch middle button: -71 [ 309.841048][ T5758] lenovo 0003:17EF:6047.0012: Fn-lock setting failed: -71 [ 309.861204][ T5758] lenovo 0003:17EF:6047.0012: Sensitivity setting failed: -71 [ 309.881106][ T5758] usb 2-1: USB disconnect, device number 69 [ 309.955897][T10122] fido_id[10122]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 310.038850][ T808] usb 5-1: usb_control_msg returned -32 [ 310.044947][ T808] usbtmc 5-1:16.0: can't read capabilities [ 310.313582][ T5692] usb 3-1: USB disconnect, device number 76 [ 310.512354][T10133] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 310.590340][T10137] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1356'. [ 310.648378][T10139] vcan0: tx drop: invalid sa for name 0x0000000020000000 [ 310.804783][ T5692] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 310.816913][T10145] syzkaller0: entered promiscuous mode [ 310.822454][T10145] syzkaller0: entered allmulticast mode [ 310.967008][ T5692] usb 3-1: unable to get BOS descriptor or descriptor too short [ 310.987621][ T5692] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 310.995419][ T5692] usb 3-1: can't read configurations, error -71 [ 311.762732][T10150] FAULT_INJECTION: forcing a failure. [ 311.762732][T10150] name failslab, interval 1, probability 0, space 0, times 0 [ 311.769767][ T24] usb 6-1: USB disconnect, device number 36 [ 311.782884][T10150] CPU: 0 UID: 0 PID: 10150 Comm: syz.1.1362 Tainted: G L syzkaller #0 PREEMPT(full) [ 311.782912][T10150] Tainted: [L]=SOFTLOCKUP [ 311.782919][T10150] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 311.782930][T10150] Call Trace: [ 311.782938][T10150] [ 311.782945][T10150] dump_stack_lvl+0xe8/0x150 [ 311.782973][T10150] should_fail_ex+0x412/0x560 [ 311.783002][T10150] should_failslab+0xa8/0x100 [ 311.783030][T10150] ? __kernfs_new_node+0xea/0x970 [ 311.783055][T10150] kmem_cache_alloc_noprof+0x87/0x650 [ 311.783088][T10150] __kernfs_new_node+0xea/0x970 [ 311.783112][T10150] ? __lock_acquire+0x6b5/0x2cf0 [ 311.783136][T10150] ? __pfx___kernfs_new_node+0x10/0x10 [ 311.783162][T10150] ? kernfs_root+0x1c/0x230 [ 311.783191][T10150] ? kernfs_root+0x1c/0x230 [ 311.783213][T10150] ? kernfs_root+0x1c/0x230 [ 311.783232][T10150] ? kernfs_root+0x1c/0x230 [ 311.783268][T10150] kernfs_new_node+0x102/0x210 [ 311.783295][T10150] kernfs_create_dir_ns+0x44/0x130 [ 311.783321][T10150] sysfs_create_dir_ns+0x12f/0x2a0 [ 311.783349][T10150] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 311.783370][T10150] ? do_raw_spin_unlock+0xf5/0x210 [ 311.783400][T10150] kobject_add_internal+0x62b/0xd00 [ 311.783435][T10150] kobject_add+0x163/0x240 [ 311.783465][T10150] ? __pfx_kobject_add+0x10/0x10 [ 311.783494][T10150] ? get_device_parent+0x366/0x3a0 [ 311.783518][T10150] device_add+0x408/0xbb0 [ 311.783543][T10150] ? device_initialize+0x26a/0x460 [ 311.783564][T10150] netdev_register_kobject+0x178/0x310 [ 311.783595][T10150] register_netdevice+0x1456/0x1ec0 [ 311.783636][T10150] ? __pfx_register_netdevice+0x10/0x10 [ 311.783675][T10150] br_dev_newlink+0x6a/0x140 [ 311.783695][T10150] ? rtnl_newlink_create+0x311/0xb70 [ 311.783716][T10150] ? __pfx_br_dev_newlink+0x10/0x10 [ 311.783739][T10150] rtnl_newlink_create+0x329/0xb70 [ 311.783763][T10150] ? __pfx___nla_validate_parse+0x10/0x10 [ 311.783797][T10150] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 311.783824][T10150] ? __pfx___mutex_lock+0x10/0x10 [ 311.783856][T10150] ? ns_capable+0x89/0xe0 [ 311.783884][T10150] rtnl_newlink+0x166a/0x1bb0 [ 311.783918][T10150] ? __pfx_rtnl_newlink+0x10/0x10 [ 311.783936][T10150] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 311.783986][T10150] ? kasan_quarantine_put+0xbb/0x1f0 [ 311.784009][T10150] ? lockdep_hardirqs_on+0x7a/0x110 [ 311.784035][T10150] ? nlmon_xmit+0xb0/0x100 [ 311.784054][T10150] ? kmem_cache_free+0x182/0x650 [ 311.784089][T10150] ? __lock_acquire+0x6b5/0x2cf0 [ 311.784113][T10150] ? __dev_queue_xmit+0x2b6/0x3950 [ 311.784141][T10150] ? __local_bh_enable_ip+0xd0/0x130 [ 311.784159][T10150] ? lockdep_hardirqs_on+0x7a/0x110 [ 311.784179][T10150] ? __dev_queue_xmit+0x2b6/0x3950 [ 311.784203][T10150] ? __local_bh_enable_ip+0xd0/0x130 [ 311.784219][T10150] ? __dev_queue_xmit+0x2b6/0x3950 [ 311.784250][T10150] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 311.784285][T10150] ? __pfx_rtnl_newlink+0x10/0x10 [ 311.784305][T10150] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 311.784330][T10150] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 311.784350][T10150] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 311.784369][T10150] ? ref_tracker_free+0x693/0x840 [ 311.784396][T10150] ? __pfx_ref_tracker_free+0x10/0x10 [ 311.784416][T10150] ? __asan_memcpy+0x40/0x70 [ 311.784436][T10150] ? __skb_clone+0x63/0x7a0 [ 311.784467][T10150] netlink_rcv_skb+0x232/0x4b0 [ 311.784492][T10150] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 311.784515][T10150] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 311.784550][T10150] ? netlink_deliver_tap+0x2e/0x1b0 [ 311.784573][T10150] ? netlink_deliver_tap+0x2e/0x1b0 [ 311.784600][T10150] netlink_unicast+0x75c/0x8e0 [ 311.784631][T10150] netlink_sendmsg+0x813/0xb40 [ 311.784662][T10150] ? __pfx_netlink_sendmsg+0x10/0x10 [ 311.784688][T10150] ? aa_sock_msg_perm+0xf1/0x1b0 [ 311.784714][T10150] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 311.784741][T10150] ____sys_sendmsg+0x972/0x9f0 [ 311.784764][T10150] ? __might_fault+0xaf/0x130 [ 311.784792][T10150] ? __pfx_____sys_sendmsg+0x10/0x10 [ 311.784823][T10150] ? import_iovec+0x73/0xa0 [ 311.784860][T10150] ___sys_sendmsg+0x2a5/0x360 [ 311.784888][T10150] ? __lock_acquire+0x6b5/0x2cf0 [ 311.784911][T10150] ? __pfx____sys_sendmsg+0x10/0x10 [ 311.784966][T10150] ? __fget_files+0x2a/0x420 [ 311.784987][T10150] ? __fget_files+0x3a0/0x420 [ 311.785015][T10150] __x64_sys_sendmsg+0x1bd/0x2a0 [ 311.785042][T10150] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 311.785075][T10150] ? __pfx_ksys_write+0x10/0x10 [ 311.785108][T10150] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 311.785128][T10150] do_syscall_64+0x15f/0xf80 [ 311.785149][T10150] ? trace_irq_disable+0x3b/0x140 [ 311.785175][T10150] ? clear_bhb_loop+0x40/0x90 [ 311.785197][T10150] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 311.785214][T10150] RIP: 0033:0x7f4c7e99cdd9 [ 311.785232][T10150] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 311.785246][T10150] RSP: 002b:00007f4c7f78c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 311.785265][T10150] RAX: ffffffffffffffda RBX: 00007f4c7ec15fa0 RCX: 00007f4c7e99cdd9 [ 311.785277][T10150] RDX: 0000000000008044 RSI: 0000200000000440 RDI: 0000000000000003 [ 311.785289][T10150] RBP: 00007f4c7f78c090 R08: 0000000000000000 R09: 0000000000000000 [ 311.785300][T10150] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 311.785310][T10150] R13: 00007f4c7ec16038 R14: 00007f4c7ec15fa0 R15: 00007f4c7ed3fa48 [ 311.785339][T10150] [ 312.358242][T10150] kobject: kobject_add_internal failed for bridge10 (error: -12 parent: net) [ 312.424174][ T5692] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 312.478146][T10156] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1365'. [ 312.529308][T10158] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 312.597253][ T5692] usb 3-1: Using ep0 maxpacket: 32 [ 312.605945][ T5692] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 312.616154][ T5692] usb 3-1: config 0 has no interfaces? [ 312.623683][ T5692] usb 3-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 312.632800][ T5692] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 312.641009][ T5692] usb 3-1: Product: syz [ 312.645324][ T5692] usb 3-1: Manufacturer: syz [ 312.649959][ T5692] usb 3-1: SerialNumber: syz [ 312.657562][ T5692] usb 3-1: config 0 descriptor?? [ 312.734411][ T24] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 312.786577][T10164] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1368'. [ 312.871241][T10148] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 312.880239][T10148] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 312.888069][ T24] usb 6-1: Using ep0 maxpacket: 16 [ 312.897914][ T5723] usb 3-1: USB disconnect, device number 78 [ 312.906823][ T24] usb 6-1: unable to get BOS descriptor or descriptor too short [ 312.917609][ T24] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 8 [ 312.932249][ T24] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 16 [ 312.947680][ T24] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 312.960769][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 312.974245][ T24] usb 6-1: Product: syz [ 312.981113][ T24] usb 6-1: Manufacturer: syz [ 312.989391][ T24] usb 6-1: SerialNumber: syz [ 313.038679][T10169] netlink: 'syz.1.1369': attribute type 2 has an invalid length. [ 313.203534][T10154] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 313.215248][T10154] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 313.237929][ T24] cdc_ncm 6-1:1.0: bind() failure [ 313.254153][ T24] cdc_ncm 6-1:1.1: CDC Union missing and no IAD found [ 313.263352][ T24] cdc_ncm 6-1:1.1: bind() failure [ 313.276078][ T24] usb 6-1: USB disconnect, device number 37 [ 313.284078][ T5705] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 313.446859][ T5705] usb 2-1: Using ep0 maxpacket: 32 [ 313.473610][ T5705] usb 2-1: config index 0 descriptor too short (expected 36, got 35) [ 313.483710][ T5705] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 313.494608][ T5705] usb 2-1: New USB device found, idVendor=056e, idProduct=011c, bcdDevice= 0.00 [ 313.503730][ T5705] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 313.523863][ T5705] usb 2-1: config 0 descriptor?? [ 313.764145][ T24] usb 6-1: new full-speed USB device number 38 using dummy_hcd [ 313.904127][ T5723] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 313.936477][T10154] netlink: 'syz.5.1364': attribute type 1 has an invalid length. [ 314.002894][T10154] 8021q: adding VLAN 0 to HW filter on device bond3 [ 314.060961][ T24] usb 6-1: unable to get BOS descriptor or descriptor too short [ 314.072652][ T24] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 314.084196][ T5723] usb 3-1: unable to get BOS descriptor or descriptor too short [ 314.092410][ T24] usb 6-1: can't read configurations, error -71 [ 314.102853][ T5723] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 314.108352][T10177] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1372'. [ 314.120307][ T5723] usb 3-1: can't read configurations, error -71 [ 314.441768][T10185] bridge13: entered allmulticast mode [ 314.902878][T10194] netlink: 'syz.5.1380': attribute type 8 has an invalid length. [ 314.929136][T10194] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1380'. [ 315.173186][T10198] bond4: entered promiscuous mode [ 315.188153][T10198] 8021q: adding VLAN 0 to HW filter on device bond4 [ 315.525418][T10129] usbtmc 5-1:16.0: usb_control_msg returned -110 [ 315.585472][T10211] netlink: 212368 bytes leftover after parsing attributes in process `syz.5.1385'. [ 315.613196][ T5723] usb 5-1: USB disconnect, device number 77 [ 315.891709][T10218] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1384'. [ 316.275802][ T5705] usb 2-1: string descriptor 0 read error: -71 [ 316.324426][ T5705] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 316.378586][ T5705] usb 2-1: USB disconnect, device number 70 [ 316.510744][T10230] ip6tnl2: entered allmulticast mode [ 316.530113][ T1151] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 316.554195][ T5723] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 316.561886][ T1151] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 316.675095][ T5723] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 316.791889][T10236] tipc: Enabling of bearer rejected, failed to enable media [ 316.892880][T10240] bridge7: entered promiscuous mode [ 316.919958][ T5723] IPVS: starting estimator thread 0... [ 316.931833][T10240] bridge7: entered allmulticast mode [ 316.943855][T10238] netlink: 5508 bytes leftover after parsing attributes in process `syz.1.1394'. [ 317.044987][T10244] IPVS: using max 47 ests per chain, 112800 per kthread [ 317.125714][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.135031][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.254874][ T24] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 317.632271][T10253] netlink: 'syz.1.1398': attribute type 8 has an invalid length. [ 317.684099][T10253] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1398'. [ 317.719113][T10253] veth1_to_team: entered promiscuous mode [ 317.746899][T10253] gretap0: entered promiscuous mode [ 317.786722][T10253] veth1_to_team: left promiscuous mode [ 317.805093][T10253] gretap0: left promiscuous mode [ 318.031609][T10265] FAULT_INJECTION: forcing a failure. [ 318.031609][T10265] name failslab, interval 1, probability 0, space 0, times 0 [ 318.058035][T10265] CPU: 1 UID: 0 PID: 10265 Comm: syz.5.1403 Tainted: G L syzkaller #0 PREEMPT(full) [ 318.058064][T10265] Tainted: [L]=SOFTLOCKUP [ 318.058070][T10265] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 318.058081][T10265] Call Trace: [ 318.058089][T10265] [ 318.058097][T10265] dump_stack_lvl+0xe8/0x150 [ 318.058124][T10265] should_fail_ex+0x412/0x560 [ 318.058153][T10265] should_failslab+0xa8/0x100 [ 318.058184][T10265] __kmalloc_node_track_caller_noprof+0xeb/0x7b0 [ 318.058213][T10265] ? __kernfs_new_node+0xaa/0x970 [ 318.058241][T10265] kstrdup+0x42/0x100 [ 318.058261][T10265] __kernfs_new_node+0xaa/0x970 [ 318.058289][T10265] ? kernfs_root+0x1c/0x230 [ 318.058312][T10265] ? __pfx___kernfs_new_node+0x10/0x10 [ 318.058335][T10265] ? kernfs_root+0x1c/0x230 [ 318.058364][T10265] ? kernfs_root+0x1c/0x230 [ 318.058386][T10265] ? kernfs_root+0x1c/0x230 [ 318.058414][T10265] kernfs_new_node+0x102/0x210 [ 318.058444][T10265] kernfs_create_link+0xa7/0x200 [ 318.058484][T10265] sysfs_do_create_link_sd+0x83/0x110 [ 318.058513][T10265] device_add_class_symlinks+0x1cf/0x240 [ 318.058542][T10265] device_add+0x475/0xbb0 [ 318.058562][T10265] ? device_initialize+0x26a/0x460 [ 318.058588][T10265] netdev_register_kobject+0x178/0x310 [ 318.058626][T10265] register_netdevice+0x1456/0x1ec0 [ 318.058682][T10265] ? __pfx_register_netdevice+0x10/0x10 [ 318.058730][T10265] br_dev_newlink+0x6a/0x140 [ 318.058754][T10265] ? rtnl_newlink_create+0x311/0xb70 [ 318.058780][T10265] ? __pfx_br_dev_newlink+0x10/0x10 [ 318.058806][T10265] rtnl_newlink_create+0x329/0xb70 [ 318.058835][T10265] ? __pfx___nla_validate_parse+0x10/0x10 [ 318.058880][T10265] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 318.058912][T10265] ? __pfx___mutex_lock+0x10/0x10 [ 318.058951][T10265] ? ns_capable+0x89/0xe0 [ 318.058976][T10265] rtnl_newlink+0x166a/0x1bb0 [ 318.059019][T10265] ? __pfx_rtnl_newlink+0x10/0x10 [ 318.059041][T10265] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 318.059103][T10265] ? kasan_quarantine_put+0xbb/0x1f0 [ 318.059131][T10265] ? lockdep_hardirqs_on+0x7a/0x110 [ 318.059162][T10265] ? nlmon_xmit+0xb0/0x100 [ 318.059185][T10265] ? kmem_cache_free+0x182/0x650 [ 318.059225][T10265] ? __lock_acquire+0x6b5/0x2cf0 [ 318.059252][T10265] ? __dev_queue_xmit+0x2b6/0x3950 [ 318.059285][T10265] ? __local_bh_enable_ip+0xd0/0x130 [ 318.059307][T10265] ? lockdep_hardirqs_on+0x7a/0x110 [ 318.059332][T10265] ? __dev_queue_xmit+0x2b6/0x3950 [ 318.059360][T10265] ? __local_bh_enable_ip+0xd0/0x130 [ 318.059379][T10265] ? __dev_queue_xmit+0x2b6/0x3950 [ 318.059417][T10265] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 318.059458][T10265] ? __pfx_rtnl_newlink+0x10/0x10 [ 318.059483][T10265] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 318.059512][T10265] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 318.059536][T10265] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 318.059559][T10265] ? ref_tracker_free+0x693/0x840 [ 318.059589][T10265] ? __pfx_ref_tracker_free+0x10/0x10 [ 318.059626][T10265] ? __asan_memcpy+0x40/0x70 [ 318.059663][T10265] ? __skb_clone+0x63/0x7a0 [ 318.059707][T10265] netlink_rcv_skb+0x232/0x4b0 [ 318.059731][T10265] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 318.059754][T10265] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 318.059789][T10265] ? netlink_deliver_tap+0x2e/0x1b0 [ 318.059811][T10265] ? netlink_deliver_tap+0x2e/0x1b0 [ 318.059839][T10265] netlink_unicast+0x75c/0x8e0 [ 318.059870][T10265] netlink_sendmsg+0x813/0xb40 [ 318.059902][T10265] ? __pfx_netlink_sendmsg+0x10/0x10 [ 318.059928][T10265] ? aa_sock_msg_perm+0xf1/0x1b0 [ 318.059952][T10265] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 318.059979][T10265] ____sys_sendmsg+0x972/0x9f0 [ 318.060003][T10265] ? __might_fault+0xaf/0x130 [ 318.060031][T10265] ? __pfx_____sys_sendmsg+0x10/0x10 [ 318.060063][T10265] ? import_iovec+0x73/0xa0 [ 318.060092][T10265] ___sys_sendmsg+0x2a5/0x360 [ 318.060115][T10265] ? __lock_acquire+0x6b5/0x2cf0 [ 318.060138][T10265] ? __pfx____sys_sendmsg+0x10/0x10 [ 318.060195][T10265] ? __fget_files+0x2a/0x420 [ 318.060216][T10265] ? __fget_files+0x3a0/0x420 [ 318.060246][T10265] __x64_sys_sendmsg+0x1bd/0x2a0 [ 318.060273][T10265] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 318.060306][T10265] ? __pfx_ksys_write+0x10/0x10 [ 318.060339][T10265] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 318.060358][T10265] do_syscall_64+0x15f/0xf80 [ 318.060379][T10265] ? trace_irq_disable+0x3b/0x140 [ 318.060404][T10265] ? clear_bhb_loop+0x40/0x90 [ 318.060427][T10265] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 318.060444][T10265] RIP: 0033:0x7f8587b9cdd9 [ 318.060460][T10265] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 318.060474][T10265] RSP: 002b:00007f858899c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 318.060492][T10265] RAX: ffffffffffffffda RBX: 00007f8587e15fa0 RCX: 00007f8587b9cdd9 [ 318.060504][T10265] RDX: 0000000000008044 RSI: 0000200000000440 RDI: 0000000000000003 [ 318.060515][T10265] RBP: 00007f858899c090 R08: 0000000000000000 R09: 0000000000000000 [ 318.060526][T10265] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 318.060536][T10265] R13: 00007f8587e16038 R14: 00007f8587e15fa0 R15: 00007f8587f3fa48 [ 318.060564][T10265] [ 318.648230][T10267] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1405'. [ 318.789835][T10277] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1408'. [ 318.917950][T10285] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1412'. [ 319.031874][T10289] netlink: 'syz.1.1413': attribute type 8 has an invalid length. [ 319.039737][T10289] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1413'. [ 319.055878][T10289] veth1_to_team: entered promiscuous mode [ 319.062931][T10289] gretap0: entered promiscuous mode [ 319.072197][T10289] veth1_to_team: left promiscuous mode [ 319.080152][T10289] gretap0: left promiscuous mode [ 319.185797][ T5692] usb 1-1: new high-speed USB device number 78 using dummy_hcd [ 319.222127][T10297] fuse: Bad value for 'group_id' [ 319.234256][T10297] fuse: Bad value for 'group_id' [ 319.334807][T10304] xt_nfacct: accounting object `syz1' does not exist [ 319.363598][ T5692] usb 1-1: unable to get BOS descriptor or descriptor too short [ 319.385012][ T5692] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 319.405641][ T5692] usb 1-1: can't read configurations, error -71 [ 319.424132][ T9] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 319.574193][ T5723] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 319.592441][T10307] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1421'. [ 319.601664][ T9] usb 6-1: Using ep0 maxpacket: 32 [ 319.608896][ T9] usb 6-1: config 123 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 10 [ 319.623052][ T9] usb 6-1: config 123 interface 0 has no altsetting 0 [ 319.635257][ T9] usb 6-1: New USB device found, idVendor=2040, idProduct=c612, bcdDevice=e5.51 [ 319.645094][T10307] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1421'. [ 319.654196][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 319.662454][ T9] usb 6-1: Product: syz [ 319.667193][ T9] usb 6-1: Manufacturer: syz [ 319.671861][ T9] usb 6-1: SerialNumber: syz [ 319.749196][ T5723] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 319.764123][ T5723] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 319.781147][ T5723] usb 2-1: Product: syz [ 319.785842][ T5723] usb 2-1: Manufacturer: syz [ 319.790603][ T5723] usb 2-1: SerialNumber: syz [ 319.975597][T10310] FAULT_INJECTION: forcing a failure. [ 319.975597][T10310] name failslab, interval 1, probability 0, space 0, times 0 [ 319.988679][T10310] CPU: 0 UID: 0 PID: 10310 Comm: syz.0.1422 Tainted: G L syzkaller #0 PREEMPT(full) [ 319.988702][T10310] Tainted: [L]=SOFTLOCKUP [ 319.988708][T10310] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 319.988737][T10310] Call Trace: [ 319.988747][T10310] [ 319.988757][T10310] dump_stack_lvl+0xe8/0x150 [ 319.988786][T10310] should_fail_ex+0x412/0x560 [ 319.988818][T10310] should_failslab+0xa8/0x100 [ 319.988847][T10310] ? __kernfs_new_node+0xea/0x970 [ 319.988867][T10310] kmem_cache_alloc_noprof+0x87/0x650 [ 319.988916][T10310] __kernfs_new_node+0xea/0x970 [ 319.988951][T10310] ? __pfx___kernfs_new_node+0x10/0x10 [ 319.988976][T10310] ? kernfs_root+0x1c/0x230 [ 319.989007][T10310] ? kernfs_root+0x1c/0x230 [ 319.989024][T10310] ? kernfs_root+0x1c/0x230 [ 319.989063][T10310] kernfs_new_node+0x102/0x210 [ 319.989096][T10310] kernfs_create_link+0xa7/0x200 [ 319.989120][T10310] sysfs_do_create_link_sd+0x83/0x110 [ 319.989152][T10310] device_add_class_symlinks+0x1cf/0x240 [ 319.989172][T10310] device_add+0x475/0xbb0 [ 319.989186][T10310] ? device_initialize+0x26a/0x460 [ 319.989219][T10310] netdev_register_kobject+0x178/0x310 [ 319.989259][T10310] register_netdevice+0x1456/0x1ec0 [ 319.989305][T10310] ? __pfx_register_netdevice+0x10/0x10 [ 319.989353][T10310] br_dev_newlink+0x6a/0x140 [ 319.989376][T10310] ? rtnl_newlink_create+0x311/0xb70 [ 319.989403][T10310] ? __pfx_br_dev_newlink+0x10/0x10 [ 319.989428][T10310] rtnl_newlink_create+0x329/0xb70 [ 319.989459][T10310] ? __pfx___nla_validate_parse+0x10/0x10 [ 319.989493][T10310] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 319.989536][T10310] ? __pfx___mutex_lock+0x10/0x10 [ 319.989575][T10310] ? ns_capable+0x89/0xe0 [ 319.989616][T10310] rtnl_newlink+0x166a/0x1bb0 [ 319.989645][T10310] ? __pfx_rtnl_newlink+0x10/0x10 [ 319.989660][T10310] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 319.989753][T10310] ? kasan_quarantine_put+0xbb/0x1f0 [ 319.989775][T10310] ? lockdep_hardirqs_on+0x7a/0x110 [ 319.989800][T10310] ? nlmon_xmit+0xb0/0x100 [ 319.989814][T10310] ? kmem_cache_free+0x182/0x650 [ 319.989869][T10310] ? __lock_acquire+0x6b5/0x2cf0 [ 319.989899][T10310] ? irqentry_exit+0x218/0x730 [ 319.989921][T10310] ? lockdep_hardirqs_on+0x7a/0x110 [ 319.989943][T10310] ? irqentry_exit+0x218/0x730 [ 319.989966][T10310] ? trace_irq_disable+0x3b/0x140 [ 319.990002][T10310] ? __pfx_rtnl_newlink+0x10/0x10 [ 319.990035][T10310] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 319.990062][T10310] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 319.990082][T10310] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 319.990106][T10310] ? ref_tracker_free+0x693/0x840 [ 319.990128][T10310] ? __pfx_ref_tracker_free+0x10/0x10 [ 319.990144][T10310] ? __asan_memcpy+0x40/0x70 [ 319.990158][T10310] ? __skb_clone+0x63/0x7a0 [ 319.990203][T10310] netlink_rcv_skb+0x232/0x4b0 [ 319.990228][T10310] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 319.990251][T10310] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 319.990285][T10310] ? netlink_deliver_tap+0x2e/0x1b0 [ 319.990301][T10310] ? netlink_deliver_tap+0x2e/0x1b0 [ 319.990335][T10310] netlink_unicast+0x75c/0x8e0 [ 319.990368][T10310] netlink_sendmsg+0x813/0xb40 [ 319.990403][T10310] ? __pfx_netlink_sendmsg+0x10/0x10 [ 319.990429][T10310] ? aa_sock_msg_perm+0xf1/0x1b0 [ 319.990456][T10310] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 319.990481][T10310] ____sys_sendmsg+0x972/0x9f0 [ 319.990521][T10310] ? __might_fault+0xaf/0x130 [ 319.990550][T10310] ? __pfx_____sys_sendmsg+0x10/0x10 [ 319.990589][T10310] ? import_iovec+0x73/0xa0 [ 319.990610][T10310] ___sys_sendmsg+0x2a5/0x360 [ 319.990628][T10310] ? __lock_acquire+0x6b5/0x2cf0 [ 319.990657][T10310] ? __pfx____sys_sendmsg+0x10/0x10 [ 319.990717][T10310] ? __fget_files+0x2a/0x420 [ 319.990739][T10310] ? __fget_files+0x3a0/0x420 [ 319.990766][T10310] __x64_sys_sendmsg+0x1bd/0x2a0 [ 319.990787][T10310] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 319.990829][T10310] ? __pfx_ksys_write+0x10/0x10 [ 319.990864][T10310] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 319.990883][T10310] do_syscall_64+0x15f/0xf80 [ 319.990909][T10310] ? trace_irq_disable+0x3b/0x140 [ 319.990928][T10310] ? clear_bhb_loop+0x40/0x90 [ 319.990944][T10310] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 319.990970][T10310] RIP: 0033:0x7f12e139cdd9 [ 319.990988][T10310] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 319.991004][T10310] RSP: 002b:00007f12e223f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 319.991022][T10310] RAX: ffffffffffffffda RBX: 00007f12e1615fa0 RCX: 00007f12e139cdd9 [ 319.991035][T10310] RDX: 0000000000008044 RSI: 0000200000000440 RDI: 0000000000000003 [ 319.991046][T10310] RBP: 00007f12e223f090 R08: 0000000000000000 R09: 0000000000000000 [ 319.991061][T10310] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 319.991069][T10310] R13: 00007f12e1616038 R14: 00007f12e1615fa0 R15: 00007f12e173fa48 [ 319.991091][T10310] [ 320.479791][ T9] usb 6-1: dvb_usb_v2: found a 'Hauppauge 126xxx' in warm state [ 320.486606][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 320.497356][ T9] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 320.507958][ T9] dvbdev: DVB: registering new adapter (Hauppauge 126xxx) [ 320.515199][ T9] usb 6-1: media controller created [ 320.531708][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 320.614230][ T9] set interface failed [ 320.614259][ T9] usb 6-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 320.624806][ T9] error writing reg: 0xff, val: 0x00 [ 320.670570][ T9] dvb_usb_mxl111sf 6-1:123.0: probe with driver dvb_usb_mxl111sf failed with error -22 [ 320.703304][ T9] usb 6-1: USB disconnect, device number 40 [ 320.830883][T10316] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1425'. [ 320.883446][T10318] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1426'. [ 321.007441][T10323] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1428'. [ 321.605044][T10331] ip6gretap0: entered promiscuous mode [ 321.623127][T10331] macvtap1: entered promiscuous mode [ 321.657358][T10331] ip6gretap0: left promiscuous mode [ 321.844243][ T24] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 322.008829][ T24] usb 6-1: unable to get BOS descriptor or descriptor too short [ 322.031458][ T24] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 322.044426][ T24] usb 6-1: can't read configurations, error -71 [ 322.254137][ T5705] usb 1-1: new high-speed USB device number 80 using dummy_hcd [ 322.350638][ T5723] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 322.421449][ T5723] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPROTO [ 322.435789][ T5705] usb 1-1: Using ep0 maxpacket: 16 [ 322.441858][ T5723] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 322.461385][ T5705] usb 1-1: unable to get BOS descriptor or descriptor too short [ 322.471926][ T5723] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 322.492580][ T5705] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 8 [ 322.515755][ T5723] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 322.529469][ T5705] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 16 [ 322.543990][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 322.562168][ T5723] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -71 [ 322.578418][ T5705] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 322.610628][ T5705] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 322.632255][ T5723] usb 2-1: USB disconnect, device number 71 [ 322.643146][ T5705] usb 1-1: Product: syz [ 322.671125][ T5705] usb 1-1: Manufacturer: syz [ 322.699012][ T5705] usb 1-1: SerialNumber: syz [ 322.892614][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 323.003975][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 323.106984][T10341] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 323.412151][T10341] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 323.503637][ T5705] cdc_ncm 1-1:1.0: bind() failure [ 324.516733][ T5705] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 324.527737][T10357] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1441'. [ 324.547725][ T5705] cdc_ncm 1-1:1.1: bind() failure [ 324.640961][ T5705] usb 1-1: USB disconnect, device number 80 [ 324.934305][ T24] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 325.011304][ T5705] usb 1-1: new full-speed USB device number 81 using dummy_hcd [ 325.041727][T10360] FAULT_INJECTION: forcing a failure. [ 325.041727][T10360] name failslab, interval 1, probability 0, space 0, times 0 [ 325.075956][T10360] CPU: 0 UID: 0 PID: 10360 Comm: syz.1.1442 Tainted: G L syzkaller #0 PREEMPT(full) [ 325.075982][T10360] Tainted: [L]=SOFTLOCKUP [ 325.075989][T10360] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 325.076000][T10360] Call Trace: [ 325.076007][T10360] [ 325.076015][T10360] dump_stack_lvl+0xe8/0x150 [ 325.076041][T10360] should_fail_ex+0x412/0x560 [ 325.076068][T10360] should_failslab+0xa8/0x100 [ 325.076095][T10360] ? __kernfs_new_node+0xea/0x970 [ 325.076119][T10360] kmem_cache_alloc_noprof+0x87/0x650 [ 325.076151][T10360] __kernfs_new_node+0xea/0x970 [ 325.076181][T10360] ? __pfx___kernfs_new_node+0x10/0x10 [ 325.076205][T10360] ? kernfs_root+0x1c/0x230 [ 325.076233][T10360] ? kernfs_root+0x1c/0x230 [ 325.076254][T10360] ? kernfs_root+0x1c/0x230 [ 325.076274][T10360] ? kernfs_root+0x1c/0x230 [ 325.076300][T10360] kernfs_new_node+0x102/0x210 [ 325.076328][T10360] __kernfs_create_file+0x4b/0x2e0 [ 325.076349][T10360] sysfs_add_file_mode_ns+0x238/0x300 [ 325.076376][T10360] internal_create_group+0x673/0x1180 [ 325.076414][T10360] ? __pfx_internal_create_group+0x10/0x10 [ 325.076441][T10360] ? up_write+0x1ab/0x410 [ 325.076468][T10360] sysfs_create_groups+0x59/0x120 [ 325.076494][T10360] device_add_attrs+0xdd/0x5b0 [ 325.076517][T10360] ? __pfx_device_add_attrs+0x10/0x10 [ 325.076542][T10360] ? device_add_class_symlinks+0x21f/0x240 [ 325.076565][T10360] device_add+0x496/0xbb0 [ 325.076584][T10360] ? device_initialize+0x26a/0x460 [ 325.076606][T10360] netdev_register_kobject+0x178/0x310 [ 325.076639][T10360] register_netdevice+0x1456/0x1ec0 [ 325.076679][T10360] ? __pfx_register_netdevice+0x10/0x10 [ 325.076720][T10360] br_dev_newlink+0x6a/0x140 [ 325.076741][T10360] ? rtnl_newlink_create+0x311/0xb70 [ 325.076763][T10360] ? __pfx_br_dev_newlink+0x10/0x10 [ 325.076786][T10360] rtnl_newlink_create+0x329/0xb70 [ 325.076809][T10360] ? __pfx___nla_validate_parse+0x10/0x10 [ 325.076844][T10360] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 325.076876][T10360] ? __pfx___mutex_lock+0x10/0x10 [ 325.076909][T10360] ? ns_capable+0x89/0xe0 [ 325.076930][T10360] rtnl_newlink+0x166a/0x1bb0 [ 325.076965][T10360] ? __pfx_rtnl_newlink+0x10/0x10 [ 325.076994][T10360] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 325.077067][T10360] ? kasan_quarantine_put+0xbb/0x1f0 [ 325.077094][T10360] ? lockdep_hardirqs_on+0x7a/0x110 [ 325.077125][T10360] ? nlmon_xmit+0xb0/0x100 [ 325.077148][T10360] ? kmem_cache_free+0x182/0x650 [ 325.077190][T10360] ? __lock_acquire+0x6b5/0x2cf0 [ 325.077218][T10360] ? __dev_queue_xmit+0x2b6/0x3950 [ 325.077251][T10360] ? __local_bh_enable_ip+0xd0/0x130 [ 325.077273][T10360] ? lockdep_hardirqs_on+0x7a/0x110 [ 325.077298][T10360] ? __dev_queue_xmit+0x2b6/0x3950 [ 325.077326][T10360] ? __local_bh_enable_ip+0xd0/0x130 [ 325.077345][T10360] ? __dev_queue_xmit+0x2b6/0x3950 [ 325.077383][T10360] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 325.077425][T10360] ? __pfx_rtnl_newlink+0x10/0x10 [ 325.077450][T10360] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 325.077479][T10360] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 325.077503][T10360] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 325.077526][T10360] ? ref_tracker_free+0x693/0x840 [ 325.077556][T10360] ? __pfx_ref_tracker_free+0x10/0x10 [ 325.077582][T10360] ? __asan_memcpy+0x40/0x70 [ 325.077605][T10360] ? __skb_clone+0x63/0x7a0 [ 325.077642][T10360] netlink_rcv_skb+0x232/0x4b0 [ 325.077670][T10360] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 325.077697][T10360] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 325.077739][T10360] ? netlink_deliver_tap+0x2e/0x1b0 [ 325.077766][T10360] ? netlink_deliver_tap+0x2e/0x1b0 [ 325.077800][T10360] netlink_unicast+0x75c/0x8e0 [ 325.077836][T10360] netlink_sendmsg+0x813/0xb40 [ 325.077881][T10360] ? __pfx_netlink_sendmsg+0x10/0x10 [ 325.077913][T10360] ? aa_sock_msg_perm+0xf1/0x1b0 [ 325.077942][T10360] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 325.077974][T10360] ____sys_sendmsg+0x972/0x9f0 [ 325.078002][T10360] ? __might_fault+0xaf/0x130 [ 325.078036][T10360] ? __pfx_____sys_sendmsg+0x10/0x10 [ 325.078074][T10360] ? import_iovec+0x73/0xa0 [ 325.078107][T10360] ___sys_sendmsg+0x2a5/0x360 [ 325.078135][T10360] ? __lock_acquire+0x6b5/0x2cf0 [ 325.078162][T10360] ? __pfx____sys_sendmsg+0x10/0x10 [ 325.078241][T10360] ? __fget_files+0x2a/0x420 [ 325.078274][T10360] ? __fget_files+0x3a0/0x420 [ 325.078305][T10360] __x64_sys_sendmsg+0x1bd/0x2a0 [ 325.078331][T10360] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 325.078365][T10360] ? __pfx_ksys_write+0x10/0x10 [ 325.078398][T10360] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 325.078421][T10360] do_syscall_64+0x15f/0xf80 [ 325.078443][T10360] ? trace_irq_disable+0x3b/0x140 [ 325.078489][T10360] ? clear_bhb_loop+0x40/0x90 [ 325.078515][T10360] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 325.078538][T10360] RIP: 0033:0x7f4c7e99cdd9 [ 325.078558][T10360] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 325.078576][T10360] RSP: 002b:00007f4c7f78c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 325.078597][T10360] RAX: ffffffffffffffda RBX: 00007f4c7ec15fa0 RCX: 00007f4c7e99cdd9 [ 325.078613][T10360] RDX: 0000000000008044 RSI: 0000200000000440 RDI: 0000000000000003 [ 325.078626][T10360] RBP: 00007f4c7f78c090 R08: 0000000000000000 R09: 0000000000000000 [ 325.078640][T10360] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 325.078652][T10360] R13: 00007f4c7ec16038 R14: 00007f4c7ec15fa0 R15: 00007f4c7ed3fa48 [ 325.078687][T10360] [ 325.094251][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 325.990957][ T24] usb 3-1: New USB device found, idVendor=04e8, idProduct=6601, bcdDevice=81.9b [ 326.026612][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 326.058031][ T24] usb 3-1: Product: syz [ 326.070697][ T24] usb 3-1: Manufacturer: syz [ 326.093854][ T24] usb 3-1: SerialNumber: syz [ 326.164820][ T5705] usb 1-1: device not accepting address 81, error -71 [ 326.329343][ T24] visor 3-1:1.0: Handspring Visor / Palm OS converter detected [ 326.387301][ T24] usb 3-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 326.439725][ T24] usb 3-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 326.577303][T10371] xt_nfacct: accounting object `syz1' does not exist [ 326.845423][ T24] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 327.011208][ T24] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 327.026879][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 327.037558][ T24] usb 2-1: Product: syz [ 327.041770][ T24] usb 2-1: Manufacturer: syz [ 327.047908][ T24] usb 2-1: SerialNumber: syz [ 327.055032][ T5723] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 327.081635][ T807] usb 3-1: USB disconnect, device number 81 [ 327.096588][ T807] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 327.151256][ T807] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 327.175219][ T807] visor 3-1:1.0: device disconnected [ 327.254615][ T5723] usb 6-1: unable to get BOS descriptor or descriptor too short [ 327.301393][ T5723] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 327.361601][ T5723] usb 6-1: can't read configurations, error -71 [ 327.643960][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 328.644107][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 329.163960][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 329.303949][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 329.447809][ T5633] Bluetooth: hci4: command 0x0406 tx timeout [ 330.808118][T10395] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1454'. [ 330.949913][ T24] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 331.036094][ T24] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPROTO [ 331.123875][ T24] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 331.170862][ T24] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 331.202191][ T24] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 331.250423][ T24] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -71 [ 331.358635][ T24] usb 2-1: USB disconnect, device number 72 [ 331.386602][ T807] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 331.494097][T10403] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1457'. [ 331.565711][ T807] usb 6-1: Using ep0 maxpacket: 32 [ 331.603496][ T807] usb 6-1: config 123 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 10 [ 331.684068][ T807] usb 6-1: config 123 interface 0 has no altsetting 0 [ 331.721289][ T807] usb 6-1: New USB device found, idVendor=2040, idProduct=c612, bcdDevice=e5.51 [ 331.733139][ T24] usb 2-1: new full-speed USB device number 73 using dummy_hcd [ 331.748173][ T807] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 331.757531][ T807] usb 6-1: Product: syz [ 331.761756][ T807] usb 6-1: Manufacturer: syz [ 331.768733][ T807] usb 6-1: SerialNumber: syz [ 331.906007][ T24] usb 2-1: config 0 has an invalid interface number: 243 but max is 0 [ 331.961832][ T24] usb 2-1: config 0 has no interface number 0 [ 331.978255][T10414] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1462'. [ 331.995240][ T24] usb 2-1: config 0 interface 243 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 332.007990][T10416] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1463'. [ 332.019777][ T24] usb 2-1: config 0 interface 243 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 332.064932][ T24] usb 2-1: config 0 interface 243 has no altsetting 0 [ 332.101715][ T24] usb 2-1: New USB device found, idVendor=28bd, idProduct=0905, bcdDevice= 0.00 [ 332.149936][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 332.187261][ T24] usb 2-1: config 0 descriptor?? [ 332.395190][ T807] usb 6-1: dvb_usb_v2: found a 'Hauppauge 126xxx' in warm state [ 332.418722][T10420] xt_nfacct: accounting object `syz1' does not exist [ 332.764132][ T5691] usb 5-1: new high-speed USB device number 78 using dummy_hcd [ 332.773429][ T808] usb 1-1: new high-speed USB device number 83 using dummy_hcd [ 332.864054][ T9] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 332.942802][ T807] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 332.956381][ T808] usb 1-1: Using ep0 maxpacket: 32 [ 332.960320][ T808] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 332.960343][ T808] usb 1-1: config 0 has no interface number 0 [ 332.963961][ T808] usb 1-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 332.964031][ T808] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 332.964052][ T808] usb 1-1: Product: syz [ 332.964066][ T808] usb 1-1: Manufacturer: syz [ 332.964081][ T808] usb 1-1: SerialNumber: syz [ 332.969497][ T5691] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 332.969527][ T5691] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 332.969548][ T5691] usb 5-1: Product: syz [ 332.969565][ T5691] usb 5-1: Manufacturer: syz [ 332.969581][ T5691] usb 5-1: SerialNumber: syz [ 332.992011][ T808] usb 1-1: config 0 descriptor?? [ 333.017348][ T808] usb 1-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 333.017382][ T808] usb 1-1: selecting invalid altsetting 1 [ 333.017400][ T808] usb 1-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 333.050662][ T808] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 333.052392][ T808] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 333.052476][ T808] usb 1-1: media controller created [ 333.068965][ T9] usb 3-1: unable to get BOS descriptor or descriptor too short [ 333.070003][ T9] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 333.070035][ T9] usb 3-1: can't read configurations, error -71 [ 333.170468][ T808] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 333.266828][T10422] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000018: 0000 [#1] SMP KASAN PTI [ 333.278837][T10422] KASAN: null-ptr-deref in range [0x00000000000000c0-0x00000000000000c7] [ 333.287290][T10422] CPU: 0 UID: 0 PID: 10422 Comm: syz.0.1464 Tainted: G L syzkaller #0 PREEMPT(full) [ 333.298271][T10422] Tainted: [L]=SOFTLOCKUP [ 333.302611][T10422] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 333.312679][T10422] RIP: 0010:__mutex_lock+0x14e/0x1550 [ 333.318090][T10422] Code: e0 63 44 9a 48 c1 e8 03 42 0f b6 04 30 84 c0 0f 85 40 12 00 00 83 3d b0 b9 9a 0e 00 75 23 49 8d 7c 24 58 48 89 f8 48 c1 e8 03 <42> 80 3c 30 00 74 05 e8 46 3d 87 f6 4d 39 64 24 58 0f 85 6c 11 00 [ 333.337715][T10422] RSP: 0018:ffffc90002e37420 EFLAGS: 00010206 [ 333.343818][T10422] RAX: 0000000000000018 RBX: 0000000000000000 RCX: ffffffff9a446303 [ 333.351809][T10422] RDX: 0000000000000000 RSI: ffffffff8e2189d3 RDI: 00000000000000c0 [ 333.359802][T10422] RBP: ffffc90002e375d8 R08: ffffc90002e37547 R09: 0000000000000000 [ 333.367792][T10422] R10: ffffc90002e37520 R11: fffff520005c6ea9 R12: 0000000000000068 [ 333.375781][T10422] R13: 0000000000000000 R14: dffffc0000000000 R15: 1ffff920005c6e9c [ 333.383769][T10422] FS: 00007f12e223f6c0(0000) GS:ffff888125290000(0000) knlGS:0000000000000000 [ 333.392715][T10422] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 333.399318][T10422] CR2: 000000110c3dfec1 CR3: 00000000797f4000 CR4: 00000000003526f0 [ 333.407314][T10422] Call Trace: [ 333.410625][T10422] [ 333.413581][T10422] ? __mutex_lock+0x319/0x1550 [ 333.418400][T10422] ? __mutex_trylock_common+0x158/0x260 [ 333.424018][T10422] ? dvb_usbv2_generic_write+0x26/0x60 [ 333.429524][T10422] ? __pfx___mutex_lock+0x10/0x10 [ 333.434597][T10422] ? __pfx___mutex_lock+0x10/0x10 [ 333.439682][T10422] ? __mutex_lock+0x319/0x1550 [ 333.444514][T10422] dvb_usbv2_generic_write+0x26/0x60 [ 333.450026][T10422] mxl111sf_ctrl_msg+0x160/0x2f0 [ 333.454997][T10422] mxl111sf_write_reg+0xa9/0x1b0 [ 333.459970][T10422] ? __pfx_mxl111sf_write_reg+0x10/0x10 [ 333.465571][T10422] ? trace_contention_end+0x9a/0x140 [ 333.470891][T10422] mxl111sf_i2c_xfer+0x496/0x5100 [ 333.475945][T10422] ? unwind_next_frame+0xa6/0x2550 [ 333.481102][T10422] ? __pfx_mxl111sf_i2c_xfer+0x10/0x10 [ 333.486582][T10422] ? is_bpf_text_address+0x292/0x2b0 [ 333.491901][T10422] ? is_bpf_text_address+0x26/0x2b0 [ 333.497125][T10422] ? kernel_text_address+0xa5/0xe0 [ 333.502286][T10422] ? __kernel_text_address+0xd/0x30 [ 333.507525][T10422] ? unwind_get_return_address+0x4d/0x90 [ 333.513241][T10422] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 333.519456][T10422] ? arch_stack_walk+0xfb/0x150 [ 333.524359][T10422] ? stack_trace_save+0xa9/0x100 [ 333.529330][T10422] ? __pfx_stack_trace_save+0x10/0x10 [ 333.534829][T10422] ? stack_depot_save_flags+0x33/0x810 [ 333.540317][T10422] ? __pfx_stack_trace_save+0x10/0x10 [ 333.545718][T10422] ? look_up_lock_class+0x57/0x110 [ 333.550863][T10422] ? register_lock_class+0x31/0x2e0 [ 333.556087][T10422] ? __lock_acquire+0x6b5/0x2cf0 [ 333.561071][T10422] __i2c_transfer+0x79a/0x1f70 [ 333.565872][T10422] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 333.571705][T10422] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 333.577542][T10422] ? i2c_transfer+0xc8/0x2d0 [ 333.582162][T10422] i2c_transfer+0x1cc/0x2d0 [ 333.586701][T10422] i2cdev_ioctl_rdwr+0x460/0x740 [ 333.591678][T10422] i2cdev_ioctl+0x6a5/0x880 [ 333.596217][T10422] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 333.601274][T10422] ? __fget_files+0x3a0/0x420 [ 333.606004][T10422] ? __fget_files+0x2a/0x420 [ 333.610619][T10422] ? bpf_lsm_file_ioctl+0x9/0x20 [ 333.615631][T10422] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 333.620683][T10422] __se_sys_ioctl+0xfc/0x170 [ 333.625308][T10422] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 333.631421][T10422] do_syscall_64+0x15f/0xf80 [ 333.636040][T10422] ? clear_bhb_loop+0x40/0x90 [ 333.640749][T10422] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 333.646661][T10422] RIP: 0033:0x7f12e139cdd9 [ 333.651093][T10422] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 333.670724][T10422] RSP: 002b:00007f12e223f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 333.679183][T10422] RAX: ffffffffffffffda RBX: 00007f12e1615fa0 RCX: 00007f12e139cdd9 [ 333.687220][T10422] RDX: 00002000000000c0 RSI: 0000000000000707 RDI: 000000000000000c [ 333.695228][T10422] RBP: 00007f12e1432d69 R08: 0000000000000000 R09: 0000000000000000 [ 333.703224][T10422] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 333.711214][T10422] R13: 00007f12e1616038 R14: 00007f12e1615fa0 R15: 00007f12e173fa48 [ 333.719228][T10422] [ 333.722283][T10422] Modules linked in: [ 333.727364][T10422] ---[ end trace 0000000000000000 ]--- [ 333.774965][ T24] uclogic 0003:28BD:0905.0013: interface is invalid, ignoring [ 333.803201][T10422] RIP: 0010:__mutex_lock+0x14e/0x1550 [ 333.808771][T10422] Code: e0 63 44 9a 48 c1 e8 03 42 0f b6 04 30 84 c0 0f 85 40 12 00 00 83 3d b0 b9 9a 0e 00 75 23 49 8d 7c 24 58 48 89 f8 48 c1 e8 03 <42> 80 3c 30 00 74 05 e8 46 3d 87 f6 4d 39 64 24 58 0f 85 6c 11 00 [ 333.830921][T10422] RSP: 0018:ffffc90002e37420 EFLAGS: 00010206 [ 333.901444][ T24] usb 2-1: USB disconnect, device number 73 [ 334.058618][ T807] dvbdev: DVB: registering new adapter (Hauppauge 126xxx) [ 334.114196][ T807] usb 6-1: media controller created [ 334.261098][ T807] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 334.302545][T10422] RAX: 0000000000000018 RBX: 0000000000000000 RCX: ffffffff9a446303 [ 334.380927][T10422] RDX: 0000000000000000 RSI: ffffffff8e2189d3 RDI: 00000000000000c0 [ 334.414053][T10422] RBP: ffffc90002e375d8 R08: ffffc90002e37547 R09: 0000000000000000 [ 334.474867][ T807] set interface failed [ 334.626934][T10422] R10: ffffc90002e37520 R11: fffff520005c6ea9 R12: 0000000000000068 [ 334.694634][T10422] R13: 0000000000000000 R14: dffffc0000000000 R15: 1ffff920005c6e9c [ 334.744912][T10422] FS: 00007f12e223f6c0(0000) GS:ffff888125390000(0000) knlGS:0000000000000000 [ 334.852204][T10422] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 334.874246][T10422] CR2: 000000110c369ef8 CR3: 00000000797f4000 CR4: 00000000003526f0 [ 334.886133][ T808] usb 1-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 334.886168][ T808] zl10353_read_register: readreg error (reg=127, ret==-110) [ 334.926292][T10422] Kernel panic - not syncing: Fatal exception [ 334.933058][T10422] Kernel Offset: disabled [ 334.937429][T10422] Rebooting in 86400 seconds..