last executing test programs: 12.544604212s ago: executing program 4 (id=1436): syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="9b4307000001aaaaaaeaaa0008004500001c0b45000000019078fffffffeac1414aae0009078fffd0000"], 0x0) syz_open_procfs(0x0, &(0x7f0000000240)='net/if_inet6\x00') writev(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x22, 0x2, 0x24) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009"], 0x0) syz_open_dev$midi(0x0, 0x500, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) r2 = syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r2, 0xc0045627, &(0x7f00000001c0)=0x2) ioctl$VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000000480)={0x1ff, 0x200, 0x2, {0x4, @pix={0x7, 0x8, 0x34565559, 0x5, 0x800000, 0xfffffff3, 0x5, 0x983e, 0x1, 0x3, 0x2}}, 0x9}) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000040)={0x84, @empty, 0x4e20, 0x3, 'lblc\x00', 0x4, 0xa7e, 0x1a}, 0x2c) r4 = socket$kcm(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r4, 0x8982, 0x0) r5 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r5, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lc\x00', 0x5, 0x8, 0x11}, {@remote, 0x4e23, 0x3, 0xcd}}, 0x44) sendmsg$sock(r4, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) r6 = openat$dsp(0xffffffffffffff9c, 0x0, 0x802222, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(r6, 0xc0045009, &(0x7f0000000000)=0x1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 8.234631608s ago: executing program 4 (id=1445): r0 = syz_usb_connect(0x3, 0x3c, &(0x7f0000000380)=ANY=[@ANYBLOB="120101000814c910be0632a2f3330102030109021200010000000009"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) syz_usb_control_io$rtl8150(r0, &(0x7f0000000100)={0x14, &(0x7f0000000500)=ANY=[@ANYBLOB="000f420000007d108d5e85bc6f3e2ba8b104ccdb24e2c3a55a3fff1863885abed0e87ec903f0389e0608f32ca08d584580b6a38f003d91e3291bb1bb7c85763cdb6e5d27d0754e24411a0e"], &(0x7f00000000c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x42f}}}, &(0x7f0000000300)={0x2c, &(0x7f00000003c0)={0x20, 0xf, 0x100, "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"}, &(0x7f0000000180)={0x0, 0xa, 0x1, 0x10}, &(0x7f0000000200)={0x0, 0x8, 0x1, 0xd2}, &(0x7f0000000240), &(0x7f0000000340)={0x40, 0x5, 0x6, "5533ff562869"}}) ioctl$I2C_RDWR(r1, 0x707, &(0x7f00000002c0)={&(0x7f00000001c0)=[{0x2, 0x8411, 0x22, &(0x7f00000006c0)="0203204bdcc36cda8907f47563863d1428f47b34551c000bce0f6bc6584f11a7489c"}], 0x1}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) 6.967163885s ago: executing program 0 (id=1451): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22, @empty}, 0x10) listen(r0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8922, &(0x7f0000000080)={'dummy0\x00'}) socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000140)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @private=0xa010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) 6.902133773s ago: executing program 0 (id=1452): socketpair$unix(0x1, 0x5, 0x0, 0x0) r0 = socket$inet6(0x10, 0x5, 0x17) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000180)={'ip6_vti0\x00', &(0x7f0000000280)={'ip6_vti0\x00', 0x0, 0x4, 0x0, 0x3, 0x5, 0x12, @mcast2, @private0, 0x0, 0x8007, 0x100, 0x5}}) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x28880) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) r3 = gettid() sched_getattr(r3, &(0x7f0000000100)={0x38}, 0x38, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002d00)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x800) recvmmsg(r4, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000001180)=""/4096}, {&(0x7f0000000440)=""/128}], 0x0, &(0x7f00000004c0)=""/193}, 0x7f}, {{&(0x7f00000005c0)=@in, 0x0, &(0x7f0000000700)=[{&(0x7f0000000640)=""/35}, {&(0x7f0000000680)=""/127}], 0x0, &(0x7f0000000740)=""/23}, 0x3}], 0x400000000000054, 0x40012100, 0x0) sendto$inet6(r0, &(0x7f0000000540)="900000001c001f4d154a817393278bff0a80a57802000000e503740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e00a2c5fed0759cb068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cef7cff81d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4", 0x7e, 0x0, 0x0, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x1, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0x6}, {0x6, 0x0, 0x0, 0xb}}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0xa, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}, {0x56}}], {{0x4, 0x1, 0x2, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect(0x0, 0x3f, &(0x7f0000000440)=ANY=[@ANYBLOB="12011001d31ad240f0031d5842bb0102030109022d0005000000000904c50003ff01070009050502080000030109050c"], 0x0) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r6, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000010c0)=ANY=[@ANYBLOB="94000000", @ANYRES16=r7, @ANYBLOB="010000000000000000000a000000800004"], 0x94}}, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x53, &(0x7f0000000000)={0x0, 0x0}, 0x10) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x3, 0x5}}, './file0\x00'}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 6.30687109s ago: executing program 1 (id=1453): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000340)={0x1d, r1, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000180)="a3e96f40da385a4ce143914d572992142816c75281cbbbdb3b5b7597f1276f6a522fb5be8e3403a7d3894878d9ad28d5ecbbcdaa647fc6b0d25a6464b0c0d3fa06b5dd2e3477ca3970bdb637443c455d310159543771207b5c86118916abdb1a23f6df91ab9c17", 0x67}], 0x2}, 0x4048081) 6.19225558s ago: executing program 1 (id=1454): r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$HDIO_GETGEO(r0, 0x301, &(0x7f0000000080)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0xd) syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), r0) r1 = socket(0x22, 0x2, 0x3) getsockopt$SO_TIMESTAMP(r1, 0x1, 0x1c, 0x0, &(0x7f00000000c0)) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x2c0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000006040), r3) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug', 0x0, 0x0) fcntl$notify(r4, 0x402, 0x8) r5 = socket$kcm(0x10, 0x2, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x39}, 0x94) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000040)=r6, 0x4) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000200)={'veth0_to_hsr\x00', &(0x7f0000000180)=@ethtool_eee={0x44, 0x1, 0x320c, 0x400000, 0x6, 0x8, 0x401, 0x1000, [0x1, 0x1]}}) write$cgroup_int(r2, &(0x7f0000000000)=0xfe8e, 0x12) 6.04346757s ago: executing program 1 (id=1456): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x100}, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) syz_io_uring_setup(0x3b, &(0x7f0000000400)={0x0, 0x2, 0x10100, 0x2, 0x2b5}, &(0x7f0000000000), &(0x7f0000000100)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58) r5 = accept$alg(r4, 0x0, 0x0) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000580)="b19ccccf84f531d9ec4cda81a3ef", 0xe) sendmmsg$alg(r5, &(0x7f0000001bc0)=[{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000063c0)="5985d20392a438a118753a61ccd1d0e83101f02653a3db12a8785d9bcc59b58251f9ae571dc6a2d023b82407fbb8ae52a24b445059869df6095b826013c10bb7745d9edc0ef211452945180b52cc3986fb74d70cdc0194be37b376d2d4798d4e4463d042b1a462e80d80915fcffca56f2e0f5a6b6bff7e43eb6c80c1a8e85c077f4e980c3aa7b4b34562044059224e7280a86d55356ca279765d0943a185ac585ba7355885a40b0f4d02e5afe7b154deb20048d62307273f7069b86987af5b7fd9272d1ed5a9891e493deafa8a98f30c86803d00028221b891d3ae3437e26e9e0bbb0c152036ffebc06c5aa3fe55480e68414e7283793c5f93bf95ee471bf2b70abf696bb304bbecce852fd81439df022489675c1827a96f824378a80ce5338143bbc8fc3b1955bba34f2121cf485212c7cd8b50d81382605d28573b46b376e1092560f6d76c8ee2c4ebd9cf88665cec5acd5c2bb34ed1ce0338a7c1c8583914be1ef3a054e91f35a82147c0ef819f7971e12c18c5314df9e06bbbea133f82e638fd4646fb6a517fe75130f65392e8e1456fff3ae5cc7298b7bd6e7ea141808b4b4ec6930e7ee97e802a9a5c37c7bfaf6f8fd113b1e713e9d07cf0ddddf91965c29dbcc7a6478a071efe498458ee8428baeacd171ca321a88863d747ae8ba633f835401e66c831bec8d66ede3a6be8c9d6cd2e543df191a661d934e115c49db11cd3382aa4c378ea27b37078e4dbd52d5237873388f0b114dbcd77332e3cae456d8a96465a763709b9e33255b9648f186ae462f585dd729676a66e5dcba00b76ef82b9926d820d1f81f2ef2bdedb9727bc9b8420a16af0a3d49bfabaf53637b5712cd1efcfecefea443d99749398406a15af44464330fcc7ae05bc1319a403f17320384adf670171b10572b7a3c29224327d4da0cc98605adb69b143b75f495c3ee34b0e2df6119cdecfc9c14adac77c00225ba394a33c2031f7fd6fd5c51603133fd282b714d0206a61dcbfd9826847751c0828c7258b75739fc0f26cb4f5037652f608bfd156660b8ca43069fdfd27dc658b768b0842a71bd2191064e7c343710b26b4f94900dea847881b9269a250b165aa5b32cb02e853e01df7283f5aae557f555cdd110ffa52c5c702cb214934c5aa8a99c87b2ec9dd6717693827029ad477fa822c84c83303d04a6db313af73b83ef53d0caae2a0de16e13746d092a2e6260638245c57bf2904740ef4d4385b3fd888ea17795c712dbce6a559c71a8425deab805f99ec9f16cf268c5c6cb6cbbefe71115e62c85e9a0940b96a19a49b4a9373250c5b7a2446b4393aaa144ba32a9a0fff5cffc515d48691911a84ef869af3c3b08db4d8e44279b8ecf0753e88e5405897b4050db08c254cf0ff5b69a045bc62049218a573c6a395148454953a72768ddbd4326a0d247a0a4571ea894875a2f899f47487c3d2b62e51d8239633d3421fd79b0c32d05b99256614accf64ee6e2d51a3bdd221e79d6475e6ac68159923977200feba975e290d768d7255416a06c8f161fa39f7a04c4651d420f1d96703cb3773bd2a2a0c37b1603151c4cc47f0699900849509534f8ec5131cfee5d96d598e28d571328ca037a34ba31aa5e6d51fe2604f8316545f129f0ae8e0856888d3315ed22f6246852df12d67e3a64e7891df946b81495189341e9401406037cfb31490fcff4fc0406f2f70e2cabcd0fb8adeec4be909526dfa252a5aee0435df3a07e0897b86eaff8dd190f466b2a81e8a37ffb577bfb5feddefb292809c1d925c2f9cf27380dc78e74d74ceb1d31ebe84bbd2e6ce48dded3c55203966896ad1458d3d3095b9bacf250416ee27aa73a5c5d6ec6b2c9c323759ffe97df44481f796f4762e3245c0a88fd129dbafde688f2c57445665c623025a76748a9931a7f67c53faa4a155c9ba5caa38986462e48db7c580749bd372955244c9d4a17631f24b9b64036de9e97147b7056dcb54652fca36a037d0c3f754a303c594d8e04f706fe75e8f19607e6cc94ac60d83b4fc620a00b52605323391f3e005dcdb9be443b59d89760b605f32c07bef27a326863e07d770e7bb2853354f6404a83d099559e5a25849bd16c6381354ec45df14e3e16099a0cc299256118be93e47c025b01a2fe899c81411c8f6b74808562ecb2f91b8688b1617b93516b29162bf71db6e2dbee1ba98fba3cf6e7f56d90fbf017d2d81d2411515d73272bc167a55770deacb3d79dcfa1cb9c27e27585b521d3900e4fb280c1ba1f9e956bd1326bf162255f66b0189ae648a402e48cc61fdd20fd3a09070c88167730bf80b34cecfcb37a4046552d1b345f66c97fb67f1993990e55e43ee58372455864de62d636d836477fca1ca355bce2eed04ca30751ad642e61862d1e29886b9acc5be9d6ab7e6eab7c89a7ebde051116ae5f12432caa8228c4dddb5221f7f5fafeef8d397ee0c7d94dfcd2fade21947c98bd89b071f4e24dfb43b46f1db5f1276d8d71e3cccca479cb612be6bd02e6f188403b85022ed0e9d42f9c4531a11659bfd144b4a49b6659be2a548658a66d7faa44622742d7c42d7f90caa2ca3a24d10c993a9b1c814f4e0b735615cbd9c00d6bf444d0ae1071f2b74023d2e53b9d2b79f6ddaeadcef3bcc5d13971b7f9c7e72d1a431e1d79234e1dab13ee758f741777d836905c7873de0192ecda15d3a224331fc2222f6793edd69da51befe4f772ec696e4e4e5deba877b52b91d8b7de4fd151e1009134cebf4a353e6219b21f131487b3fba0f4b7e39626c5c7583ed5073086ff735ce19cb786e8d1bf359b4c3a7bc29bbf9d441d914d7e842b88f0868d0f6a6fd41624271ad5e166d677ea5109b6c8e9d2fdfff9e944e9c9ad50b3cde7e3f229e2bbf81c6aaa7b7c8e5700362000b6509942bbed25253e0833a5f7a71975b780472ed6f3da3a2ba162f20b3b90d4a084acbb137129bbd9b65f3e9ba6886241d80ee90dcf7d64050d52e8550f21262a88395ca06b83a5b5d9c05426582c86fe7753019a71ecc84c59fae3239d195246306f153b301629fbc6bd6e3fbc6aff7d35d79c5c8046b61ec70e2b7356c9400477778990364091be2b74bdab711f5561ff137021fdf9e82a35fd5bf85673bbb2944cf1f36a2e25fa4dd948525621f7a14dc3c8d1e1f1ec9d334dddcf7f9487f3d3ec60106becfddc15ece3850215aa3231a543264263757c6417adde58eb6b624096ac5c7b96e4e294cc935ad9315669d03b80522e5b7f6207e325cc5e9a33cdd8d5512aa388e452674a936826d47f23097d33c4e4a1f2f0802a2b9be2a608f2f0ff27f6b041d70d268f848687d45e6e510691ad516c7d7038d4153fb30415e425a4cb9d879aee8ffbca65df46876151af9a583d9a3fb331fb1b616a8007fddba31bee77e420172cd2a2a140a3376db47d7336d958bfa6f4ae80f78310c9043a184258dbaa9bba0c2482d7eb70c2bd94d52587fb92fd80c58110b05ad6eb1623009cd263deb3cb219bfde713ef738dfed0b1c6254177d939e8c358cc69ddfa3e31aa4c3cbfe384d96749217ff3b2b45a15f34403fe327aa2f805d1eaf7ee7f187070032eceba18a11e4ccf7c2e3a4d5c72d1db7b0bb5dc2354ae7eb27dedb91a5571203835b482353950220ad39f21334135c6fdd22a71c6119ce5dfa292a71ad296b141663210872c192aa228e21068d717235f1186234de39e69e5904ead38314ef69b86a656371d9987d327a7064fc6e1acd7f822165b1e42da9bff573db1eaf2563552bf6dbb6591031883f5cf7e22d1f2e2522e5bb88fc4bdece187d7f2612886a7f314895d43dd2c9e1b731aec39014028590ea0c76f1cd7d71c96ed45ce31d5e38f38a36a95d54708875dd99d8612275450a700251c7f21742d31b9be6de5fcf63b7b639ff746f31537694b3005ddf6cc8375f25bd782bc784943b72bd19f938a449fe0a617b5b1430a4d506e3bf0a1f118b6e45e9e6a3515efd9ecd1a964c5459921b01a0cacf0d4e4659f06ee2e53123a2241b583072f91af6b82f51fa14622ead00697b2f511e7f54cc4e8b015bd03b4ebae849ec9f7738d945450ff8363aee60678b80a86e93326f6a87d73b1a114f6f6186e2a4365d66d5b74df15280c4060ec847da5a1baf1706e7a373f2ec73ad755bffdd5813cf5ce8cf8b07d4ac8b324293b7248145b35b13fe638f902c5e8147084c221591cefa221573080f49ed7b3479e9c81c4ec2e5e8df89ce0266f6023327aae85f74fc70085398ca9749a1b8467d3d2d7bdcfc4bb9af62721a4cf55a5d2600210eeda03de3b9353725eb991583d7226debf7e3d4b06d89c41599b3687d56571c6c810882e1060510b0e6480b4e3d8705c858e24897dd8bd936f9a16bd626b98dd55696aa2dea3c0a12a6b12f5befba90ea487134453b5a8e863b5446565730e9d84e019d664654568c3448bbddd8cccc15e4615addae0d732dafe6f54b229cd5689396720d0010dfea3f9e6d9793b51be5c4e39659e8eb604ec15ee7ae2a2961a8b815d9417795cdde0702d6cf7dcdc16f02365d7eee5dfc7a0a9ea3957672f00a209fb845e782777ef9e5c9e7aa7926bb93c3486a8612e222ddc9709d9a2acef6c60db859c4fd39f365bb22f90edd04f891fd3ccdff35c5eac56ec49d02063a7859aa14c938d575fb85cc26a3f3fb3ef4d8ce576e927dc54c27702aff904e133a6869ac4384ca6ce273d1a7f3b4ffb570dd097e607ade6733262b527c508e4ff7e09bb56432c36a38065c582210252efc06aa0d3fe0ea99e97e6ee88f80ad33bcb2cd0570b8f97488bfe09d4560b9ab44ec7ea5726d291460ab46d32922c1b37067425ff9abc8a4bf810879114dc266a575e1ddcbfd6ef2c51b624091b3ebe68ededfd94f883ae674b1f00be817a559b3c6376aa68f039628ae425191b7c7ba60e73b0fa3c4fe5533b4f8fe0b21f61a5f9e520e22cdbebd929048552b6d8d1d5c18fa9900b7786462e7e4d738e57485e9a6dd14a0fd37f0256613317df8ec3518c7eee50c59070a7276f8b0575426887f2cb5be122cc766a25a07132ef01611d0c2d3f16de29a8c0f39a3a5a3e9596b61fd4e518bcc52cdd2d87605ce9d9c5f2a6d4e11d2f94575b0d5de72d0b97d0a2cf32b5465c6a4ddb62d61b97f2331341c9d448ec775180f858394f2c0b2ee982b9f867d73f97d0e0e3b275ef49c7c262c4d6f5fac787edafaa8b79410b1288a0b52afd93c8584ff9d61eddfa0cada98bd3c200fc708078098764bbe304c44d62eff132415a917c022c9f7466318017da7b4649eb0fae58fcb716a1f295d84dd9ec14218beb0372c041aaa4421a8f75eaef5115f0f32aca8fd30fde0e9e08972e23faf5381eb18c626c0ce920261461c3dfe7f1e8b35ca16f7283de3af4bba5c384e256cd369568214101a8e27c94531a81fe4fba595a4455f8724eebea716d1a4940b3d787fc4bd6ad8aa403fceb74f316fb5a816890646338efb6f13aba195f127aa1b1107bf303b1f997c74d6f4f664d708f58c3b3ca063825405ad7a61260debf4b220443b6537f5ae94820ec62901944cc9023e655f82e0e31a13f351ed0336cbcfda8ae0b20025fb33e49f011f6aa708140cffefbd06f9b90fefc6f9d79f67495ff0b1a2f1ff075eda3fdd800088fc0583dc0e1e9f7f02673da61cc4466a2559d70cd90e453b11449442eb11f444e1203bc38754f7ad0d93bb91e40f9cd490d2dd5d7e2571c460718f94d4c61751c119fedbbbd28d7716ccb6aaa8ba", 0xff2}, {&(0x7f0000000000)="c8e3f8cf798bf0915a031573e0530c", 0xf}], 0x2, &(0x7f0000000840)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x81}], 0x1, 0x44804) recvmsg(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000001c00)=""/4075, 0xfeb}, {&(0x7f00000003c0)=""/251, 0xfb}], 0x2}, 0x20012101) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r3) close_range(r2, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mkdir(&(0x7f0000000140)='./control\x00', 0x8) ioctl$AUTOFS_IOC_FAIL(0xffffffffffffffff, 0x9361, 0x5) inotify_init1(0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) rmdir(&(0x7f0000000100)='./control\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000003d00)) r6 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$int_in(r6, 0x5421, &(0x7f0000000080)=0xfffffffffbfffffe) connect$vsock_stream(r6, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) 5.597186183s ago: executing program 3 (id=1458): openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x5, &(0x7f0000006680)) syz_usb_disconnect(0xffffffffffffffff) shutdown(0xffffffffffffffff, 0x2) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000f40)=@newtfilter={0xa0, 0x2c, 0xd27, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {}, {0x9}}, [@filter_kind_options=@f_basic={{0xa}, {0x70, 0x2, [@TCA_BASIC_EMATCHES={0x6c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x3}}, @TCA_EMATCH_TREE_LIST={0x60, 0x2, 0x0, 0x1, [@TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0x3, 0x8, 0x2}, {0x0, 0x1}}}, @TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x5, 0x7, 0x1b}, {{0x1, 0x1, 0x1, 0x1}, {0x2, 0x1, 0x1}}}}, @TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x1, 0x1, 0x2}, {0x8ca, 0x7, 0x9, 0x4, 0x8, 0x1}}}, @TCF_EM_META={0x20, 0x1, 0x0, 0x0, {{0x8, 0x4, 0x8}, [@TCA_EM_META_RVALUE={0x4, 0x3, [@TCF_META_TYPE_VAR]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x9, 0x6, 0x3}, {0x6, 0x1}}}, @TCA_EM_META_RVALUE={0x4}]}}]}]}]}}]}, 0xa0}, 0x1, 0x0, 0x0, 0x48c0}, 0x20001880) r5 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(nhpoly1305-avx2)\x00'}, 0x58) ioctl$SG_IO(r5, 0x2285, 0x0) r7 = fcntl$dupfd(r5, 0x0, r5) write$sndseq(r7, &(0x7f0000000180)=[{0x0, 0x47, 0x0, 0x0, @tick, {0x40, 0xff}, {0x0, 0x9}, @queue={0xee, {0x7, 0xc9a}}}, {0x0, 0x0, 0x0, 0x0, @time={0x367f, 0xfffffffd}, {}, {0x80}, @connect={{0x40, 0x7}, {0x80, 0xf6}}}], 0x38) write$sndseq(r7, &(0x7f0000000200)=[{0x2, 0x2a, 0x0, 0x0, @tick, {}, {0x25}, @raw32}, {0xff, 0x0, 0x0, 0x0, @time={0x0, 0x7}, {0x0, 0x3}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x7, @tick, {}, {0x0, 0x4}, @raw32={[0x0, 0x0, 0x5dd]}}, {0x0, 0x0, 0x0, 0x0, @tick=0x4000, {0x0, 0x3}, {}, @quote={{0x1, 0xfe}}}, {0x0, 0x1, 0x1, 0x0, @tick=0x401, {}, {}, @quote={{0x2, 0x2}, 0x9}}], 0x8c) ioctl$SG_GET_NUM_WAITING(r7, 0x227d, &(0x7f0000000380)) r8 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000040), 0x202, 0x0) ioctl$SNDCTL_DSP_GETOSPACE(r8, 0x8010500c, &(0x7f0000000100)) 4.860285243s ago: executing program 4 (id=1459): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000100)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3b}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x1, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x4e24, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x1, "65a252e7cb7a5918c004a9971a46afced2c32642b1ec9fe34818d8ccd82041b7", "c930713c550e74ee13c2638ac75b2a9666efd31a34fce4498df8105d8bd8ed283a220c3a9becd8a70d3607ea8270d351", "ae12e16b560f2f8ac4ca3e745ce285f12f6e8719e7f1e7f286a68f76", {"980aa8fb8f80d69f1fb587086447e93e", "55e824bb69e833bd36300b088233545a"}}}}}}}, 0x0) recvmmsg(r0, 0x0, 0x0, 0x40000120, 0x0) 4.841273269s ago: executing program 4 (id=1460): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8, 0xffe, 0x1ff, 0x42000}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="280000005200010004000000000000001c000000", @ANYRES16=r0], 0x28}}, 0x0) 4.628691647s ago: executing program 4 (id=1461): openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000500)={0x0, 0x0}) sched_setattr(r2, &(0x7f0000000240)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0xfffffffc, 0x6}, 0x0) rseq(&(0x7f0000000400), 0x20, 0x0, 0x0) gettid() socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, &(0x7f00000002c0)={&(0x7f0000000100)=[0x0], 0x1}) mq_timedreceive(0xffffffffffffffff, 0x0, 0x0, 0x8000, 0xffffffffffffffff) ioctl$DRM_IOCTL_MODE_GETPLANE(r3, 0xc02064b6, &(0x7f00000001c0)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r3, 0xc01064c8, &(0x7f0000000280)={0x1, 0x0, &(0x7f0000000200)=[0x0]}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r3, 0xc02064b9, &(0x7f0000000040)={&(0x7f0000000300)=[0x0, 0x0, 0x0], &(0x7f0000000040), 0x3, r5, 0xcccccccc}) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) ptrace(0x10, 0x0) madvise(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x16) move_pages(0x0, 0x1, &(0x7f0000000140)=[&(0x7f00009ed000/0x4000)=nil], 0x0, 0x0, 0x6) ioctl$DRM_IOCTL_MODE_ATOMIC(r3, 0xc03864bc, &(0x7f0000000380)={0x0, 0x1, &(0x7f0000000440)=[r5], &(0x7f0000000200), &(0x7f00000000c0)=[r6], &(0x7f0000000040), 0x0, 0x300}) syz_io_uring_setup(0x8d2, 0x0, 0x0, &(0x7f0000000340)) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) 3.835218525s ago: executing program 1 (id=1465): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) r3 = syz_io_uring_setup(0x3b, &(0x7f0000000400)={0x0, 0x2, 0x10100, 0x2, 0x2b5}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r4, r5, &(0x7f0000000600)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r6, 0x0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f00000002c0)=""/183, 0xb7}], 0x1, 0x0, 0x26}, 0x0, 0x80002101}) io_uring_enter(r3, 0xd81, 0x0, 0x0, 0x0, 0x0) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58) r8 = accept$alg(r7, 0x0, 0x0) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000580), 0x0) sendmmsg$alg(r8, &(0x7f0000001bc0)=[{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000063c0)="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", 0xff2}, {&(0x7f0000000000)="c8e3f8cf798bf0915a031573e0530c", 0xf}], 0x2, &(0x7f0000000840)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x81}], 0x1, 0x44804) recvmsg(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000001c00)=""/4075, 0xfeb}, {&(0x7f00000003c0)=""/251, 0xfb}], 0x2}, 0x20012101) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r6) close_range(r2, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mkdir(&(0x7f0000000140)='./control\x00', 0x8) ioctl$AUTOFS_IOC_FAIL(0xffffffffffffffff, 0x9361, 0x5) inotify_init1(0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) rmdir(&(0x7f0000000100)='./control\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000003d00)) r9 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$int_in(r9, 0x5421, &(0x7f0000000080)=0xfffffffffbfffffe) 3.603389904s ago: executing program 3 (id=1466): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000100)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3b}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x1, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x4e24, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x1, "65a252e7cb7a5918c004a9971a46afced2c32642b1ec9fe34818d8ccd82041b7", "c930713c550e74ee13c2638ac75b2a9666efd31a34fce4498df8105d8bd8ed283a220c3a9becd8a70d3607ea8270d351", "ae12e16b560f2f8ac4ca3e745ce285f12f6e8719e7f1e7f286a68f76", {"980aa8fb8f80d69f1fb587086447e93e", "55e824bb69e833bd36300b088233545a"}}}}}}}, 0x0) recvmmsg(r0, &(0x7f0000003dc0)=[{{0x0, 0x0, &(0x7f0000002700)=[{&(0x7f0000000280)=""/173, 0xad}], 0x1, &(0x7f00000027c0)=""/4096, 0x1000}, 0x4}], 0x1, 0x40000120, 0x0) 3.289085798s ago: executing program 3 (id=1467): r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$HDIO_GETGEO(r0, 0x301, &(0x7f0000000080)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0xd) syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), r0) r1 = socket(0x22, 0x2, 0x3) getsockopt$SO_TIMESTAMP(r1, 0x1, 0x1c, 0x0, &(0x7f00000000c0)) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x2c0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000006040), r3) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug', 0x0, 0x0) fcntl$notify(r4, 0x402, 0x8) r5 = socket$kcm(0x10, 0x2, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x39}, 0x94) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000040)=r6, 0x4) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000200)={'veth0_to_hsr\x00', &(0x7f0000000180)=@ethtool_eee={0x44, 0x1, 0x320c, 0x400000, 0x6, 0x8, 0x401, 0x1000, [0x1, 0x1]}}) write$cgroup_int(r2, &(0x7f0000000000)=0xfe8e, 0x12) 3.126255848s ago: executing program 0 (id=1468): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newlink={0x40, 0x10, 0x609, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88a8ffa7}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x10, 0x2, 0x0, 0x1, [@IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_PROTO={0x5}]}}}]}, 0x40}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000680)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000104000000000007000000000000", @ANYRES32=r3, @ANYBLOB="3f00000006020400280012800b0001006272696467650000180002800c002e0003000000030000000500070008"], 0x48}, 0x1, 0x0, 0x0, 0x44000}, 0x0) setpriority(0x0, 0x1, 0xa7a8) gettid() timer_create(0x0, 0x0, 0x0) r4 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r4, 0x7a7, &(0x7f00000000c0)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, &(0x7f0000000040)={@host}) unshare(0x20020000) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000200)) syz_io_uring_submit(0x0, 0x0, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xffffffffffffff31}) io_uring_enter(0xffffffffffffffff, 0x207a98, 0x0, 0x0, 0x0, 0x0) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r4, 0x7ab, &(0x7f0000000000)={&(0x7f0000000540)={{@host=0x10}, {@host=0x10, 0x800}, 0x400, "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"}, 0x418, 0x1}) timer_create(0x7, &(0x7f0000000080)={0x0, 0x5, 0x2, @thr={&(0x7f0000000440)="b246772064ae6c2b237fc7713175efcaf2eb9740466dd5004bebaca899563c4a68c7d9f9d95091ffaca9ea9f01423ee69dc0af67517b689155d041a52b6ae11fcc733a5ca0b20956b065255fb592dc859a02fd6fcf7144eb30e68ebd07ade3a827a23c05dc96b29d547dcbf803875fd98a3f4472d65436e1f2771901ca78cd95a6ac37e5d36f95f0500c6dad1d99b38f3a956de9d19ec5250b0d0f86f0ad5d10a6f066a1e7a0063681a26cec6174fd5aa2f772b251ebbd677776b588b7c9402a1ce69af6efa3e621d4022b2c9fd982801458d1497154f1c088c6dba18c61", &(0x7f0000000540)="ed725c847ae4fdc538173fb9e12fab7d304f2c34c363331cf938f2a54dff3d320fd58073884b0ca890689bb8e947522b36bd508dfcdbe6cdd783b1c1c85b8989e099b5df7c771032a54cffeed9a739828758e6dda9ffd4b2e9e2571d230e7162f53f0453e177cd892be760cfac2e17254ab4a07dc091d49b1da8155623006c173d43b436c0ee62379d3925623118bc25fb8953f5d89ddcc5e04f15e3e9715e1b869a7a0a5a7f27d6e5fb1f80df4c4e153a81946b1a21818725a8ee5d32d34798f19a71dcca5ba5efb15149888c"}}, &(0x7f00000000c0)=0x0) timer_settime(r5, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x86, 0xfffffffe, 0x0, 0x0, 0xfffffffc) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x4000004) ioctl$sock_SIOCBRDELBR(r6, 0x89a2, &(0x7f0000000000)='bridge0\x00') 2.776225923s ago: executing program 3 (id=1469): socket$inet6_sctp(0xa, 0x1, 0x84) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)=0x0) timer_settime(r2, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = openat$audio(0xffffffffffffff9c, &(0x7f00000005c0), 0x40000000008d82, 0x0) r4 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x8, 0x1, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0x1, &(0x7f0000000140)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r4, 0x847ba, 0x0, 0xe, 0x0, 0x0) 2.732383458s ago: executing program 4 (id=1470): r0 = syz_usb_connect(0x3, 0x3c, &(0x7f0000000380)=ANY=[@ANYBLOB="120101000814c910be0632a2f333010203010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(0x0, 0x1, 0x402) syz_usb_control_io$rtl8150(r0, &(0x7f0000000100)={0x14, &(0x7f0000000500)=ANY=[@ANYBLOB="000f420000007d108d5e85bc6f3e2ba8b104ccdb24e2c3a55a3fff1863885abed0e87ec903f0389e0608f32ca08d584580b6a38f003d91e3291bb1bb7c85763cdb6e5d27d0754e24411a0e"], &(0x7f00000000c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x42f}}}, &(0x7f0000000300)={0x2c, &(0x7f00000003c0)={0x20, 0xf, 0x100, "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"}, &(0x7f0000000180)={0x0, 0xa, 0x1, 0x10}, &(0x7f0000000200)={0x0, 0x8, 0x1, 0xd2}, &(0x7f0000000240), &(0x7f0000000340)={0x40, 0x5, 0x6, "5533ff562869"}}) ioctl$I2C_RDWR(r1, 0x707, &(0x7f00000002c0)={&(0x7f00000001c0)=[{0x2, 0x8411, 0x22, &(0x7f00000006c0)="0203204bdcc36cda8907f47563863d1428f47b34551c000bce0f6bc6584f11a7489c"}], 0x1}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) 2.715402878s ago: executing program 2 (id=1471): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8, 0xffe, 0x1ff, 0x42000}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="280000005200010004000000000000001c000000", @ANYRES16=r0], 0x28}}, 0x0) 2.28345599s ago: executing program 2 (id=1472): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000100)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3b}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x1, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x4e24, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x1, "65a252e7cb7a5918c004a9971a46afced2c32642b1ec9fe34818d8ccd82041b7", "c930713c550e74ee13c2638ac75b2a9666efd31a34fce4498df8105d8bd8ed283a220c3a9becd8a70d3607ea8270d351", "ae12e16b560f2f8ac4ca3e745ce285f12f6e8719e7f1e7f286a68f76", {"980aa8fb8f80d69f1fb587086447e93e", "55e824bb69e833bd36300b088233545a"}}}}}}}, 0x0) recvmmsg(r0, 0x0, 0x0, 0x40000120, 0x0) 2.108458583s ago: executing program 2 (id=1473): r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r0, 0x0, 0x0, 0x0) 2.014524531s ago: executing program 0 (id=1474): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000400)=ANY=[], 0x8) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='batadv0\x00', 0x10) write(r0, &(0x7f00000000c0)="8f2a0a65bd8c002b0304000e", 0xc) 1.819850035s ago: executing program 2 (id=1475): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f00008e5000/0x1000)=nil, 0x1000, 0x3000007, 0x12, r0, 0x42b5e000) socket$inet6_sctp(0xa, 0x1, 0x84) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xd) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') write$RDMA_USER_CM_CMD_CREATE_ID(r2, 0x0, 0x0) accept$packet(r2, &(0x7f00000001c0), &(0x7f0000000200)=0x14) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f0000000080)=0x80000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_NOTIFICATIONS_RECEIVE(r3, 0x7a6, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000003100)=""/4049, &(0x7f00000004c0)=0xfd1) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000100)=@req={0x3fc, 0x4000}, 0x10) r5 = syz_open_procfs$userns(0x0, &(0x7f0000000000)) lseek(r5, 0x6, 0x3) r6 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r6, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r6, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) setsockopt$ARPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x60, 0x0, 0x0) recvfrom(r4, &(0x7f0000000140)=""/104, 0x68, 0x12020, 0x0, 0x0) setsockopt$TIPC_MCAST_REPLICAST(r6, 0x10f, 0x86) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) 1.715966641s ago: executing program 0 (id=1476): socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) r3 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, 0x0) r4 = socket(0x2, 0x3, 0x6) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="73f5f3d6640c857fd0fc9c145d7bbdf9e4771abd2b4de97a77631920d86b3be6f406d32d44658ae0d08c662d6ec527cbabbc08e851274e8f02c0a885f625dd22709110c6b09819a35e0abf0589653d074ed3c440e0758f", @ANYRES8=r3, @ANYRESOCT=r2, @ANYRES16=r3, @ANYRES64=r2, @ANYRES64=r4, @ANYRES16=r3, @ANYRES8=r2], 0x14}, 0x1, 0x0, 0x0, 0x20040004}, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000000080)={{0x1009, 0x1, 0xfffffffc, 0x80000, 'syz1\x00'}, 0x5, 0x30, 0x1, r2, 0x0, 0x0, 'syz0\x00', 0x0}) ptrace$ARCH_MAP_VDSO_32(0x1e, r2, 0x5, 0x2002) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) bind$alg(0xffffffffffffffff, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000001280), 0x0) r5 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000280), 0x40000, 0x0) ioctl$RTC_ALM_SET(r5, 0x40247007, &(0x7f00000002c0)={0x14, 0x10, 0x3, 0xb, 0x4, 0x2, 0x3, 0x84, 0x1}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000080)='cubic', 0x4) bind$inet6(r6, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) connect$inet6(r6, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r6, &(0x7f0000000e40)=[{{0x0, 0x0, &(0x7f0000002c40)=[{&(0x7f00000002c0)=';', 0x1}], 0x1}}], 0x1, 0x10) socket$kcm(0xf, 0x3, 0x2) connect$unix(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) 1.715465599s ago: executing program 1 (id=1477): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000100)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3b}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x1, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x4e24, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x1, "65a252e7cb7a5918c004a9971a46afced2c32642b1ec9fe34818d8ccd82041b7", "c930713c550e74ee13c2638ac75b2a9666efd31a34fce4498df8105d8bd8ed283a220c3a9becd8a70d3607ea8270d351", "ae12e16b560f2f8ac4ca3e745ce285f12f6e8719e7f1e7f286a68f76", {"980aa8fb8f80d69f1fb587086447e93e", "55e824bb69e833bd36300b088233545a"}}}}}}}, 0x0) recvmmsg(r0, &(0x7f0000003dc0)=[{{0x0, 0x0, &(0x7f0000002700)=[{&(0x7f0000000280)=""/173, 0xad}], 0x1, &(0x7f00000027c0)=""/4096, 0x1000}, 0x4}], 0x1, 0x40000120, 0x0) 1.268598202s ago: executing program 3 (id=1478): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22, @empty}, 0x10) listen(r0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=@setlink={0x3c, 0x13, 0x1, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xa, r1}, @IFLA_ALT_IFNAME={0x14, 0x35, 'dummy0\x00'}]}, 0x3c}}, 0x0) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8922, &(0x7f0000000080)={'dummy0\x00'}) socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000140)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @private=0xa010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) 936.886942ms ago: executing program 3 (id=1479): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) syz_io_uring_submit(0x0, 0x0, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f0000000040)={0x28, 0x7, 0x0, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="2c000000130001c3000000000000000000000800", @ANYRES32=r4, @ANYBLOB="0000d400000000000a000100003b"], 0x2c}}, 0x0) 644.211644ms ago: executing program 1 (id=1480): r0 = ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece) r1 = add_key$user(&(0x7f0000000380), &(0x7f0000000000)={'syz', 0x0}, &(0x7f0000000080)='W', 0x1, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000100)={r1, r2, r2}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={'streebog512-generic\x00'}}) r3 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r5, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000940)={0x38, 0x5, 0x0, 0x4, 0x0, 0xb49, 0x6, 0x8, 0x0, 0x9}, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r6, 0x0, 0x0, 0x2200c850, 0x0, 0x0) r7 = add_key$keyring(&(0x7f0000000300), &(0x7f00000002c0)={'syz', 0x2}, 0x0, 0x0, 0x0) add_key$user(&(0x7f0000000280), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000580)="00fd67c6d222406b096cc34801001000647418aaf9b90732f41ec9591b532723e017c8c54d863ecd9b0df09072030025c3a03ce14a48716ba2f4127d38d2129825d9fff7065d51f973ee7ad483b1b28e4aa696cd0d0000b1e1caee2a1ffdbff2b7601618da596d1db25ba3cd0e6c352a27bcb491e01f716712f22f38ce63658951ffe9c3e755a5669dfd0aa44a04dfd4e3df02b0bfd0781bc9607466d4fd536faac836e6252b3119c95587671b", 0xad, r7) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), 0x0, 0x0, 0xfffffffffffffffd) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x10}}, 0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) open(&(0x7f0000000380)='./file0\x00', 0x6ec58fa5834dfb19, 0xdb) r8 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$USBDEVFS_SUBMITURB(r8, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0x0, 0x0, 0x0, 0x7995}, 0xfff7, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) ioctl$sock_SIOCETHTOOL(r3, 0x8946, 0x0) ioctl$USBDEVFS_REAPURBNDELAY(r8, 0x4004550d, &(0x7f0000000500)) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0xc10c5541, &(0x7f0000000280)={0xfffff801, 0x714ab9a2, 0x1}) 629.36721ms ago: executing program 2 (id=1481): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newlink={0x40, 0x10, 0x609, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88a8ffa7}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x10, 0x2, 0x0, 0x1, [@IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_PROTO={0x5}]}}}]}, 0x40}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000680)={'bridge0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44000}, 0x0) 492.928095ms ago: executing program 2 (id=1482): r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000003fc0), 0x189000, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x100}, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) syz_usb_connect(0x2, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000011620140480b05101e8c00000001090212000100000000090401"], 0x0) r3 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003) ioctl$I2C_RDWR(r3, 0x707, &(0x7f0000000a40)={&(0x7f0000000380)=[{0x3, 0x6000, 0x1, &(0x7f00000003c0)='t'}, {0x1, 0x2a19, 0x0, 0x0}], 0x2}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) syz_usb_connect$uac1(0x3, 0xb6, &(0x7f0000000280)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xa4, 0x3, 0x1, 0x0, 0x0, 0x6, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x5, 0x9}, [@input_terminal={0xc, 0x24, 0x2, 0x4, 0x206, 0x1, 0x4, 0xd331, 0x8, 0x3}, @extension_unit={0xc, 0x24, 0x8, 0x2, 0x6f, 0xad, "c50f5cfce9"}, @mixer_unit={0xb, 0x24, 0x4, 0x3, 0x8, "a374b0142fba"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xa, 0x24, 0x2, 0x1, 0xc4, 0x4, 0x6, 0x7, "2cce"}]}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x0, 0x7, 0x9, {0x7, 0x25, 0x1, 0x0, 0x9, 0x5}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x3, 0x3, 0x7, 0x5, "d3", "d74d40"}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x4, 0x4, 0x0, 0x80, "7cd0", "ce7e"}]}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x7, 0x1, 0x4, {0x7, 0x25, 0x1, 0x0, 0x8}}}}}}}]}}, 0x0) r6 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$apparmor_exec(r6, &(0x7f0000000240)=ANY=[@ANYBLOB="65786563203aa009f5"], 0x9d) r7 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) r8 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_elf64(r8, &(0x7f0000000080)=ANY=[], 0x78) close(r8) execveat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x0, 0x0, 0x0) ioctl$KVM_SET_CPUID(r7, 0x4008ae8a, &(0x7f0000000740)={0x2, 0x0, [{0xa, 0x2, 0x5, 0x7f, 0x6}, {0x80000008, 0x8001, 0x2, 0x0, 0x6}]}) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000000)={0x0, r0, 0x7, 0x49, 0xfff, 0x3}) ioctl$SOUND_MIXER_READ_STEREODEVS(r0, 0x80044dfb, &(0x7f0000000100)) 0s ago: executing program 0 (id=1483): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, 0x0, 0x0) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000140), 0x4) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x2e}}, 0x10) r3 = accept(r0, 0x0, 0x0) sendmsg$AUDIT_USER_AVC(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000740)=ANY=[], 0x454}}, 0x0) sendmsg$NL80211_CMD_GET_MPP(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000005c0)=ANY=[], 0x20}}, 0x40000) shutdown(r3, 0x1) recvfrom(r2, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): 7d25, idProduct=a415, bcdDevice= 0.40 [ 237.378625][ T5923] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 237.387554][ T5923] usb 3-1: Product: syz [ 237.392181][ T5923] usb 3-1: Manufacturer: syz [ 237.414186][ T5923] cdc_wdm 3-1:1.0: skipping garbage [ 237.419618][ T5923] cdc_wdm 3-1:1.0: skipping garbage [ 237.427657][ T5923] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 237.461493][ T7885] macvlan2: entered promiscuous mode [ 237.466888][ T7885] macvlan2: entered allmulticast mode [ 237.480611][ T7885] bond1: entered promiscuous mode [ 237.490494][ T7885] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 237.530553][ T7872] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 237.539570][ T7872] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 237.590294][ T7885] bond1: left promiscuous mode [ 237.631703][ T30] audit: type=1400 audit(1759888468.761:82): apparmor="DENIED" operation="change_onexec" class="file" info="label not found" error=-2 profile="unconfined" name=3AA009F5 pid=7869 comm="syz.0.477" [ 237.699402][ T43] DVB: Unable to find symbol cx22700_attach() [ 237.718405][ T5923] cdc_wdm 3-1:1.0: Unknown control protocol [ 237.784204][ T43] DVB: Unable to find symbol tda10046_attach() [ 238.019506][ T5923] usb 3-1: USB disconnect, device number 21 [ 238.069881][ T43] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 238.417633][ T7896] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 238.742578][ T5841] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 238.969574][ T5841] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 238.979441][ T5841] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 239.017724][ T5841] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 239.068083][ T5841] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 239.083497][ T5841] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 239.146057][ T5841] usb 2-1: Product: syz [ 239.162702][ T5841] usb 2-1: Manufacturer: syz [ 239.444633][ T5841] usb 2-1: SerialNumber: syz [ 239.558894][ T5841] hub 2-1:1.0: bad descriptor, ignoring hub [ 239.566794][ T5841] hub 2-1:1.0: probe with driver hub failed with error -5 [ 239.805989][ T5841] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 19 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 239.997495][ T5841] usb 1-1: USB disconnect, device number 15 [ 240.125359][ T7913] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 240.131894][ T7913] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 240.149537][ T5888] usb 2-1: USB disconnect, device number 19 [ 240.190234][ T5888] usblp0: removed [ 240.305512][ T7913] vhci_hcd vhci_hcd.0: Device attached [ 240.433163][ T7913] netdevsim netdevsim4: Direct firmware load for nel/config failed with error -2 [ 240.444712][ T7913] netdevsim netdevsim4: Falling back to sysfs fallback for: nel/config [ 240.508854][ T7926] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 240.530636][ T7926] Cannot find add_set index 0 as target [ 240.539174][ T43] usb 41-1: new low-speed USB device number 3 using vhci_hcd [ 240.739164][ T7935] Cannot find add_set index 0 as target [ 240.787163][ T7914] vhci_hcd: connection reset by peer [ 240.826158][ T7106] vhci_hcd: stop threads [ 240.883845][ T7106] vhci_hcd: release socket [ 240.893969][ T7106] vhci_hcd: disconnect device [ 241.686760][ T7946] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 242.348859][ T7962] netlink: 8 bytes leftover after parsing attributes in process `syz.2.500'. [ 242.569190][ T5923] usb 1-1: new low-speed USB device number 16 using dummy_hcd [ 242.730294][ T5888] usb 2-1: new full-speed USB device number 20 using dummy_hcd [ 242.760272][ T5923] usb 1-1: config 0 has an invalid interface number: 122 but max is 0 [ 242.778483][ T5923] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 242.888349][ T5923] usb 1-1: config 0 has no interface number 0 [ 242.901586][ T7970] FAULT_INJECTION: forcing a failure. [ 242.901586][ T7970] name failslab, interval 1, probability 0, space 0, times 0 [ 242.932162][ T7970] CPU: 0 UID: 0 PID: 7970 Comm: syz.4.502 Not tainted syzkaller #0 PREEMPT(full) [ 242.932179][ T7970] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 242.932185][ T7970] Call Trace: [ 242.932190][ T7970] [ 242.932195][ T7970] dump_stack_lvl+0x189/0x250 [ 242.932215][ T7970] ? __pfx____ratelimit+0x10/0x10 [ 242.932234][ T7970] ? __pfx_dump_stack_lvl+0x10/0x10 [ 242.932250][ T7970] ? __pfx__printk+0x10/0x10 [ 242.932274][ T7970] ? __pfx___might_resched+0x10/0x10 [ 242.932288][ T7970] ? fs_reclaim_acquire+0x7d/0x100 [ 242.932315][ T7970] should_fail_ex+0x414/0x560 [ 242.932338][ T7970] should_failslab+0xa8/0x100 [ 242.932356][ T7970] __kmalloc_noprof+0xcb/0x7f0 [ 242.932377][ T7970] ? tomoyo_encode+0x28b/0x550 [ 242.932412][ T7970] tomoyo_encode+0x28b/0x550 [ 242.932437][ T7970] tomoyo_realpath_from_path+0x58d/0x5d0 [ 242.932470][ T7970] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 242.932490][ T7970] tomoyo_path_number_perm+0x1e8/0x5a0 [ 242.932516][ T7970] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 242.932572][ T7970] ? __fget_files+0x2a/0x420 [ 242.932593][ T7970] ? __fget_files+0x3a0/0x420 [ 242.932608][ T7970] ? __fget_files+0x2a/0x420 [ 242.932627][ T7970] security_file_ioctl+0xcb/0x2d0 [ 242.932645][ T7970] __se_sys_ioctl+0x47/0x170 [ 242.932659][ T7970] do_syscall_64+0xfa/0xfa0 [ 242.932669][ T7970] ? lockdep_hardirqs_on+0x9c/0x150 [ 242.932681][ T7970] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 242.932690][ T7970] ? clear_bhb_loop+0x60/0xb0 [ 242.932702][ T7970] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 242.932711][ T7970] RIP: 0033:0x7fb09c38eec9 [ 242.932721][ T7970] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 242.932730][ T7970] RSP: 002b:00007fb09d1d0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 242.932741][ T7970] RAX: ffffffffffffffda RBX: 00007fb09c5e5fa0 RCX: 00007fb09c38eec9 [ 242.932749][ T7970] RDX: 0000200000001280 RSI: 0000000000004c0a RDI: 0000000000000005 [ 242.932755][ T7970] RBP: 00007fb09d1d0090 R08: 0000000000000000 R09: 0000000000000000 [ 242.932761][ T7970] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 242.932767][ T7970] R13: 00007fb09c5e6038 R14: 00007fb09c5e5fa0 R15: 00007fb09c70fa28 [ 242.932783][ T7970] [ 242.933769][ T5888] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 242.949959][ T5923] usb 1-1: config 0 interface 122 altsetting 0 endpoint 0x1 has invalid maxpacket 16, setting to 8 [ 243.009252][ T5887] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 243.039312][ T7970] ERROR: Out of memory at tomoyo_realpath_from_path. [ 243.050045][ T5888] usb 2-1: config 0 has no interface number 0 [ 243.050104][ T5888] usb 2-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 243.050125][ T5888] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 243.144005][ T5923] usb 1-1: config 0 interface 122 altsetting 0 endpoint 0xA has invalid maxpacket 512, setting to 8 [ 243.230079][ T5923] usb 1-1: config 0 interface 122 altsetting 0 endpoint 0x8 is Bulk; changing to Interrupt [ 243.244489][ T5923] usb 1-1: config 0 interface 122 altsetting 0 endpoint 0x88 is Bulk; changing to Interrupt [ 243.309264][ T5923] usb 1-1: config 0 interface 122 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 243.359170][ T5923] usb 1-1: config 0 interface 122 altsetting 0 endpoint 0xF has invalid maxpacket 43418, setting to 8 [ 243.404012][ T5888] usb 2-1: config 0 descriptor?? [ 243.421272][ T5923] usb 1-1: config 0 interface 122 altsetting 0 has 6 endpoint descriptors, different from the interface descriptor's value: 8 [ 243.423968][ T5888] usb 2-1: selecting invalid altsetting 1 [ 243.490235][ T5887] usb 3-1: config 0 has no interfaces? [ 243.498402][ T5887] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 243.517471][ T5887] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 243.544374][ T5888] dvb_ttusb_budget: ttusb_init_controller: error [ 243.600460][ T5887] usb 3-1: Product: syz [ 243.606001][ T5887] usb 3-1: Manufacturer: syz [ 243.651742][ T7964] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 243.674597][ T5888] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 243.688146][ T7964] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 243.700759][ T30] audit: type=1400 audit(1759888474.911:83): apparmor="DENIED" operation="change_onexec" class="file" info="label not found" error=-2 profile="unconfined" name=3AA009F5 pid=7955 comm="syz.1.497" [ 243.701681][ T5887] usb 3-1: SerialNumber: syz [ 243.790770][ T5887] usb 3-1: config 0 descriptor?? [ 243.923154][ T5888] DVB: Unable to find symbol cx22700_attach() [ 244.532672][ T5888] DVB: Unable to find symbol tda10046_attach() [ 244.541273][ T5888] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 245.303370][ T5923] usb 1-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice= 5.b7 [ 245.606603][ T5923] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.680118][ T5923] usb 1-1: config 0 descriptor?? [ 245.687463][ T5923] usb 1-1: can't set config #0, error -71 [ 245.730403][ T43] vhci_hcd: vhci_device speed not set [ 245.740217][ T5888] usb 3-1: USB disconnect, device number 22 [ 245.846803][ T5887] usb 2-1: USB disconnect, device number 20 [ 245.859358][ T5923] usb 1-1: USB disconnect, device number 16 [ 247.729229][ T5888] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 248.020277][ T5888] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 248.081243][ T5888] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 248.265730][ T5888] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 248.638469][ T8002] syz.0.508: vmalloc error: size 536870912, failed to allocated page array size 1048576, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 248.689203][ T8002] CPU: 1 UID: 0 PID: 8002 Comm: syz.0.508 Not tainted syzkaller #0 PREEMPT(full) [ 248.689221][ T8002] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 248.689229][ T8002] Call Trace: [ 248.689234][ T8002] [ 248.689239][ T8002] dump_stack_lvl+0x189/0x250 [ 248.689256][ T8002] ? __pfx_dump_stack_lvl+0x10/0x10 [ 248.689267][ T8002] ? __pfx__printk+0x10/0x10 [ 248.689277][ T8002] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 248.689292][ T8002] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 248.689306][ T8002] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 248.689320][ T8002] warn_alloc+0x214/0x310 [ 248.689341][ T8002] ? __pfx_warn_alloc+0x10/0x10 [ 248.689359][ T8002] ? __get_vm_area_node+0x28f/0x300 [ 248.689373][ T8002] ? translate_table+0x198/0x2000 [ 248.689387][ T8002] __vmalloc_node_range_noprof+0x690/0x12d0 [ 248.689415][ T8002] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 248.689428][ T8002] ? translate_table+0x198/0x2000 [ 248.689441][ T8002] ? rcu_is_watching+0x15/0xb0 [ 248.689453][ T8002] ? translate_table+0x198/0x2000 [ 248.689464][ T8002] __kvmalloc_node_noprof+0x674/0x910 [ 248.689479][ T8002] ? translate_table+0x198/0x2000 [ 248.689489][ T8002] ? do_ipt_set_ctl+0x881/0xcd0 [ 248.689498][ T8002] ? nf_setsockopt+0x26c/0x290 [ 248.689511][ T8002] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 248.689520][ T8002] ? do_syscall_64+0xfa/0xfa0 [ 248.689535][ T8002] translate_table+0x198/0x2000 [ 248.689554][ T8002] ? __lock_acquire+0xab9/0xd20 [ 248.689566][ T8002] ? __pfx_translate_table+0x10/0x10 [ 248.689586][ T8002] ? __might_fault+0xb0/0x130 [ 248.689626][ T8002] ? _copy_from_user+0x94/0xb0 [ 248.689648][ T8002] do_ipt_set_ctl+0x967/0xcd0 [ 248.689672][ T8002] ? rcu_is_watching+0x15/0xb0 [ 248.689683][ T8002] ? trace_contention_end+0x39/0x120 [ 248.689696][ T8002] ? __pfx_do_ipt_set_ctl+0x10/0x10 [ 248.689718][ T8002] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 248.689737][ T8002] ? __pfx_aa_sk_perm+0x10/0x10 [ 248.689752][ T8002] nf_setsockopt+0x26c/0x290 [ 248.689765][ T8002] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 248.689781][ T8002] do_sock_setsockopt+0x179/0x1b0 [ 248.689794][ T8002] __x64_sys_setsockopt+0x13f/0x1b0 [ 248.689807][ T8002] do_syscall_64+0xfa/0xfa0 [ 248.689818][ T8002] ? lockdep_hardirqs_on+0x9c/0x150 [ 248.689830][ T8002] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 248.689840][ T8002] ? clear_bhb_loop+0x60/0xb0 [ 248.689852][ T8002] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 248.689862][ T8002] RIP: 0033:0x7f3033d8eec9 [ 248.689872][ T8002] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 248.689881][ T8002] RSP: 002b:00007f3034bd4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 248.689893][ T8002] RAX: ffffffffffffffda RBX: 00007f3033fe5fa0 RCX: 00007f3033d8eec9 [ 248.689901][ T8002] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000003 [ 248.689907][ T8002] RBP: 00007f3033e11f91 R08: 0000000000000510 R09: 0000000000000000 [ 248.689914][ T8002] R10: 0000200000000540 R11: 0000000000000246 R12: 0000000000000000 [ 248.689920][ T8002] R13: 00007f3033fe6038 R14: 00007f3033fe5fa0 R15: 00007f303410fa28 [ 248.689936][ T8002] [ 248.692640][ T8002] Mem-Info: [ 249.121534][ T8002] active_anon:26887 inactive_anon:0 isolated_anon:0 [ 249.121534][ T8002] active_file:14771 inactive_file:39950 isolated_file:0 [ 249.121534][ T8002] unevictable:768 dirty:312 writeback:0 [ 249.121534][ T8002] slab_reclaimable:8331 slab_unreclaimable:127719 [ 249.121534][ T8002] mapped:33825 shmem:20029 pagetables:1792 [ 249.121534][ T8002] sec_pagetables:0 bounce:0 [ 249.121534][ T8002] kernel_misc_reclaimable:0 [ 249.121534][ T8002] free:1241128 free_pcp:21048 free_cma:0 [ 249.139115][ T5888] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 249.167114][ C1] vkms_vblank_simulate: vblank timer overrun [ 249.278147][ T8002] Node 0 active_anon:109548kB inactive_anon:0kB active_file:59084kB inactive_file:159596kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:136700kB dirty:1244kB writeback:0kB shmem:79980kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12616kB pagetables:6440kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 249.278251][ T8018] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 249.310958][ T8002] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:128kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 249.317372][ C1] vkms_vblank_simulate: vblank timer overrun [ 249.353105][ C1] vkms_vblank_simulate: vblank timer overrun [ 249.442568][ T5888] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 249.493251][ T8002] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 249.583271][ T8002] lowmem_reserve[]: 0 2501 2503 2503 2503 [ 249.589529][ T8002] Node 0 DMA32 free:1057928kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:111324kB inactive_anon:0kB active_file:59084kB inactive_file:159596kB unevictable:1536kB writepending:1244kB zspages:0kB present:3129332kB managed:2561664kB mlocked:0kB bounce:0kB free_pcp:70112kB local_pcp:47744kB free_cma:0kB [ 249.625919][ T8002] lowmem_reserve[]: 0 0 1 1 1 [ 249.631015][ T8002] Node 0 Normal free:0kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 249.739207][ T8002] lowmem_reserve[]: 0 0 0 0 0 [ 249.759260][ T8002] Node 1 Normal free:3894184kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:15008kB local_pcp:4800kB free_cma:0kB [ 249.791717][ C1] vkms_vblank_simulate: vblank timer overrun [ 249.831901][ T8002] lowmem_reserve[]: 0 0 0 0 0 [ 249.851752][ T8002] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 249.953597][ T8002] Node 0 DMA32: 301*4kB (UE) 110*8kB (UE) 176*16kB (UME) 209*32kB (ME) 146*64kB (UME) 93*128kB (UME) 35*256kB (UME) 6*512kB (UME) 2*1024kB (UE) 3*2048kB (UME) 245*4096kB (M) = 1056580kB [ 250.019173][ T8002] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 250.079571][ T8002] Node 1 Normal: 164*4kB (UME) 43*8kB (UME) 34*16kB (UME) 95*32kB (UME) 33*64kB (UME) 9*128kB (UME) 5*256kB (UME) 2*512kB (M) 3*1024kB (UME) 1*2048kB (E) 947*4096kB (M) = 3894184kB [ 250.139161][ T8002] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 250.160481][ T8002] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 250.189834][ T8002] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 250.203348][ T8017] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 250.239164][ T8002] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 250.259726][ T8017] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 250.278113][ T8002] 73835 total pagecache pages [ 250.299423][ T8002] 0 pages in swap cache [ 250.303703][ T8002] Free swap = 124996kB [ 250.307873][ T8002] Total swap = 124996kB [ 250.333101][ T8002] 2097051 pages RAM [ 250.345002][ T8002] 0 pages HighMem/MovableOnly [ 250.359375][ T8002] 424545 pages reserved [ 250.372598][ T8002] 0 pages cma reserved [ 251.218831][ T8072] netlink: 8 bytes leftover after parsing attributes in process `syz.3.533'. [ 251.287273][ T8072] bridge0: port 2(bridge_slave_1) entered disabled state [ 251.295801][ T8072] bridge0: port 1(bridge_slave_0) entered disabled state [ 251.370461][ T8076] netlink: 8 bytes leftover after parsing attributes in process `syz.0.535'. [ 251.648473][ T8080] syz.0.537 uses obsolete (PF_INET,SOCK_PACKET) [ 251.772037][ T5923] usb 5-1: USB disconnect, device number 24 [ 251.976478][ T8091] netlink: 4 bytes leftover after parsing attributes in process `syz.4.542'. [ 252.360868][ T8102] dvmrp5: entered allmulticast mode [ 253.725761][ T8122] sctp: [Deprecated]: syz.2.552 (pid 8122) Use of int in max_burst socket option. [ 253.725761][ T8122] Use struct sctp_assoc_value instead [ 254.089260][ T116] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 254.280758][ T116] usb 4-1: Using ep0 maxpacket: 32 [ 254.292074][ T116] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 254.309089][ T116] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 254.340389][ T116] usb 4-1: New USB device found, idVendor=28bd, idProduct=0055, bcdDevice= 0.00 [ 254.351792][ T116] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 254.380862][ T116] usb 4-1: config 0 descriptor?? [ 254.614326][ T116] usbhid 4-1:0.0: can't add hid device: -71 [ 254.629211][ T116] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 254.652227][ T116] usb 4-1: USB disconnect, device number 23 [ 255.062048][ T8162] netlink: 4 bytes leftover after parsing attributes in process `syz.4.570'. [ 255.157780][ T8164] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 255.165390][ T8164] IPv6: NLM_F_CREATE should be set when creating new route [ 255.223534][ T8162] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 255.230817][ T8162] IPv6: NLM_F_CREATE should be set when creating new route [ 255.803613][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.810019][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.838139][ T8176] netlink: 104 bytes leftover after parsing attributes in process `syz.2.575'. [ 257.046306][ T5827] Bluetooth: hci3: unexpected event for opcode 0x2010 [ 257.219798][ T8221] sch_tbf: burst 1023 is lower than device lo mtu (65550) ! [ 258.442778][ T8256] bond2: option mode: invalid value (7) [ 258.481641][ T8256] bond2 (unregistering): Released all slaves [ 259.288528][ T8283] binder: 8282:8283 ioctl c0306201 200000000080 returned -14 [ 259.306797][ T30] audit: type=1326 audit(1759888490.511:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8284 comm="syz.2.621" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f068b78eec9 code=0x7ffc0000 [ 259.376979][ T30] audit: type=1326 audit(1759888490.551:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8284 comm="syz.2.621" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f068b78eec9 code=0x7ffc0000 [ 259.429603][ T30] audit: type=1326 audit(1759888490.561:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8284 comm="syz.2.621" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f068b78eec9 code=0x7ffc0000 [ 259.457435][ T30] audit: type=1326 audit(1759888490.561:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8284 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f068b78eec9 code=0x7ffc0000 [ 259.480924][ T30] audit: type=1326 audit(1759888490.561:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8284 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f068b78eec9 code=0x7ffc0000 [ 259.597970][ T30] audit: type=1326 audit(1759888490.571:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8284 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f068b78eec9 code=0x7ffc0000 [ 259.681468][ T30] audit: type=1326 audit(1759888490.571:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8284 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f068b78eec9 code=0x7ffc0000 [ 259.739214][ T30] audit: type=1326 audit(1759888490.571:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8284 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f068b78eec9 code=0x7ffc0000 [ 260.081506][ T8313] xt_hashlimit: size too large, truncated to 1048576 [ 260.155442][ T8313] xt_hashlimit: invalid rate [ 260.489936][ T8322] xt_CT: You must specify a L4 protocol and not use inversions on it [ 260.796988][ T8331] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 261.349512][ T8344] usb usb5: usbfs: process 8344 (syz.3.647) did not claim interface 0 before use [ 261.647607][ T8356] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 262.833009][ T8391] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 263.870096][ T8422] xt_l2tp: missing protocol rule (udp|l2tpip) [ 264.613055][ T8450] xt_NFQUEUE: number of total queues is 0 [ 265.093020][ T8465] netlink: 36 bytes leftover after parsing attributes in process `syz.3.701'. [ 265.113940][ T8465] bridge1: entered promiscuous mode [ 265.119293][ T8465] bridge1: entered allmulticast mode [ 265.460774][ T8471] binder: BINDER_SET_CONTEXT_MGR already set [ 265.477202][ T8471] binder: 8469:8471 ioctl 4018620d 200000000100 returned -16 [ 265.487743][ T8471] binder: BINDER_SET_CONTEXT_MGR already set [ 265.499703][ T8471] binder: 8469:8471 ioctl 4018620d 200000004a80 returned -16 [ 268.583302][ T8542] netlink: 8 bytes leftover after parsing attributes in process `syz.2.736'. [ 269.731527][ T8569] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 270.496198][ T5827] Bluetooth: hci1: unexpected event for opcode 0x1003 [ 271.336047][ T8612] netlink: 48 bytes leftover after parsing attributes in process `syz.2.765'. [ 271.554252][ T8621] netlink: 8 bytes leftover after parsing attributes in process `syz.2.770'. [ 273.566962][ T8708] netlink: 32 bytes leftover after parsing attributes in process `syz.1.805'. [ 273.956207][ T8718] netlink: 4 bytes leftover after parsing attributes in process `syz.4.809'. [ 273.999855][ T8718] IPv6: Can't replace route, no match found [ 274.165050][ T5827] Bluetooth: Wrong link type (-57) [ 274.292305][ T8727] macvtap1: entered promiscuous mode [ 274.297728][ T8727] macvtap1: entered allmulticast mode [ 274.520688][ T5827] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 274.534112][ T5827] Bluetooth: hci1: Injecting HCI hardware error event [ 274.543316][ T5827] Bluetooth: hci1: hardware error 0x00 [ 274.568926][ T8736] netlink: 32 bytes leftover after parsing attributes in process `syz.3.817'. [ 274.630478][ T8742] netlink: 8 bytes leftover after parsing attributes in process `syz.4.819'. [ 274.756005][ T8742] bridge0: port 2(bridge_slave_1) entered disabled state [ 274.764926][ T8742] bridge0: port 1(bridge_slave_0) entered disabled state [ 275.226900][ T8756] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 275.377020][ T8759] xt_connbytes: Forcing CT accounting to be enabled [ 276.599158][ T5827] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 277.239583][ T116] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 277.327198][ T8811] xt_CT: No such helper "netbios-ns" [ 277.411850][ T116] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 277.440048][ T8820] netlink: 4 bytes leftover after parsing attributes in process `syz.3.848'. [ 277.459111][ T116] usb 2-1: config 0 has no interfaces? [ 277.468716][ T116] usb 2-1: New USB device found, idVendor=05f3, idProduct=0240, bcdDevice=1b.24 [ 277.489287][ T116] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 277.497768][ T116] usb 2-1: Product: syz [ 277.503750][ T116] usb 2-1: Manufacturer: syz [ 277.508480][ T116] usb 2-1: SerialNumber: syz [ 277.517794][ T116] usb 2-1: config 0 descriptor?? [ 277.720935][ T8828] netlink: 8 bytes leftover after parsing attributes in process `syz.4.851'. [ 277.795192][ T116] usb 2-1: USB disconnect, device number 21 [ 278.471534][ T8857] netlink: 8 bytes leftover after parsing attributes in process `syz.1.864'. [ 278.555911][ T8862] netlink: 32 bytes leftover after parsing attributes in process `syz.2.867'. [ 278.695498][ T8868] xt_CT: You must specify a L4 protocol and not use inversions on it [ 279.021971][ T8884] batman_adv: batadv0: Adding interface: dummy0 [ 279.028355][ T8884] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 279.110229][ T8884] batman_adv: batadv0: Interface activated: dummy0 [ 279.147618][ T8884] batadv0: mtu less than device minimum [ 279.178644][ T8884] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 279.190859][ T8884] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 279.202790][ T8884] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 279.214712][ T8884] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 279.226690][ T8884] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 279.238577][ T8884] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 279.250506][ T8884] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 279.262452][ T8884] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 279.274483][ T8884] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 279.866047][ T8910] bridge0: port 2(bridge_slave_1) entered blocking state [ 279.873287][ T8910] bridge0: port 2(bridge_slave_1) entered listening state [ 279.881624][ T8910] bridge0: port 1(bridge_slave_0) entered blocking state [ 279.888814][ T8910] bridge0: port 1(bridge_slave_0) entered listening state [ 279.942974][ T8914] netlink: 4 bytes leftover after parsing attributes in process `syz.4.889'. [ 280.321006][ T8925] x_tables: ip_tables: socket match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT [ 280.502327][ T8931] netlink: 32 bytes leftover after parsing attributes in process `syz.1.899'. [ 281.053664][ T8957] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 281.060233][ T8957] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 281.076928][ T8960] netdevsim netdevsim4: Direct firmware load for nel/config failed with error -2 [ 281.141075][ T8957] vhci_hcd vhci_hcd.0: Device attached [ 281.150746][ T8960] netdevsim netdevsim4: Falling back to sysfs fallback for: nel/config [ 281.275660][ T8965] netlink: 20 bytes leftover after parsing attributes in process `syz.0.911'. [ 281.307899][ T8965] netlink: 8 bytes leftover after parsing attributes in process `syz.0.911'. [ 281.379173][ T5923] usb 41-1: new low-speed USB device number 4 using vhci_hcd [ 281.709336][ T8958] vhci_hcd: connection reset by peer [ 281.725431][ T2902] vhci_hcd: stop threads [ 281.735542][ T2902] vhci_hcd: release socket [ 281.779482][ T2902] vhci_hcd: disconnect device [ 282.121816][ T8993] netlink: 20 bytes leftover after parsing attributes in process `syz.2.924'. [ 282.140621][ T8993] netlink: 8 bytes leftover after parsing attributes in process `syz.2.924'. [ 282.458952][ T5888] IPVS: starting estimator thread 0... [ 282.559194][ T9008] IPVS: using max 33 ests per chain, 79200 per kthread [ 282.945747][ T9022] __nla_validate_parse: 1 callbacks suppressed [ 282.945766][ T9022] netlink: 20 bytes leftover after parsing attributes in process `syz.3.938'. [ 283.006816][ T9022] netlink: 8 bytes leftover after parsing attributes in process `syz.3.938'. [ 283.133642][ T9024] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 283.171908][ T9026] netlink: 32 bytes leftover after parsing attributes in process `syz.4.940'. [ 284.042037][ T9056] netlink: 8 bytes leftover after parsing attributes in process `syz.3.952'. [ 284.182759][ T9059] netlink: 32 bytes leftover after parsing attributes in process `syz.1.954'. [ 284.341013][ T9061] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 284.989104][ T5915] usb 4-1: new full-speed USB device number 24 using dummy_hcd [ 285.165134][ T5915] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 285.173603][ T5915] usb 4-1: config 0 has no interface number 0 [ 285.193740][ T5915] usb 4-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 285.211923][ T5915] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 285.252004][ T5915] usb 4-1: config 0 descriptor?? [ 285.284537][ T5915] usb 4-1: selecting invalid altsetting 1 [ 285.301600][ T5915] dvb_ttusb_budget: ttusb_init_controller: error [ 285.325036][ T5915] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 285.492399][ T9072] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 285.510715][ T9072] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 285.592315][ T30] audit: type=1400 audit(1759888516.761:92): apparmor="DENIED" operation="change_onexec" class="file" info="label not found" error=-2 profile="unconfined" name=3AA009F5 pid=9065 comm="syz.3.957" [ 285.651238][ T9090] netlink: 8 bytes leftover after parsing attributes in process `syz.0.965'. [ 285.704424][ T9091] netlink: 'syz.2.964': attribute type 1 has an invalid length. [ 285.862599][ T9094] macvlan2: entered promiscuous mode [ 285.869071][ T9094] macvlan2: entered allmulticast mode [ 285.882178][ T9094] bond2: entered promiscuous mode [ 285.892109][ T9094] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 285.959467][ T9094] bond2: left promiscuous mode [ 285.976307][ T5915] DVB: Unable to find symbol cx22700_attach() [ 286.123316][ T5915] DVB: Unable to find symbol tda10046_attach() [ 286.130315][ T5915] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 286.255539][ T9099] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 286.262179][ T9099] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 286.839738][ T9099] vhci_hcd vhci_hcd.0: Device attached [ 286.896835][ T5923] vhci_hcd: vhci_device speed not set [ 286.925416][ T9098] netdevsim netdevsim0: Direct firmware load for nel/config failed with error -2 [ 286.995948][ T9098] netdevsim netdevsim0: Falling back to sysfs fallback for: nel/config [ 287.081674][ T9100] vhci_hcd: connection closed [ 287.082030][ T12] vhci_hcd: stop threads [ 287.091152][ T43] usb 33-1: new low-speed USB device number 2 using vhci_hcd [ 287.099318][ T12] vhci_hcd: release socket [ 287.103861][ T12] vhci_hcd: disconnect device [ 287.716116][ T9106] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 288.281447][ T5908] usb 4-1: USB disconnect, device number 24 [ 288.979800][ T9125] fuse: Bad value for 'fd' [ 289.070656][ T9127] netlink: 8 bytes leftover after parsing attributes in process `syz.2.976'. [ 289.302002][ T9134] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 289.490868][ T9140] netlink: 8 bytes leftover after parsing attributes in process `syz.1.981'. [ 289.860711][ T116] usb 1-1: new full-speed USB device number 17 using dummy_hcd [ 289.939255][ T5888] usb 3-1: new full-speed USB device number 23 using dummy_hcd [ 290.039361][ T5841] usb 5-1: new full-speed USB device number 25 using dummy_hcd [ 290.109270][ T116] usb 1-1: config 0 has an invalid interface number: 113 but max is 0 [ 290.185874][ T116] usb 1-1: config 0 has no interface number 0 [ 290.269734][ T5908] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 290.274421][ T116] usb 1-1: config 0 interface 113 altsetting 2 has an endpoint descriptor with address 0xE7, changing to 0x87 [ 290.289984][ T116] usb 1-1: config 0 interface 113 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 290.307948][ T116] usb 1-1: config 0 interface 113 has no altsetting 0 [ 290.324666][ T5841] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 290.337086][ T5841] usb 5-1: config 0 has no interface number 0 [ 290.367147][ T116] usb 1-1: New USB device found, idVendor=054c, idProduct=02e1, bcdDevice=e2.c8 [ 290.391628][ T5841] usb 5-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 290.405932][ T116] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 290.422356][ T9161] netlink: 'syz.1.987': attribute type 1 has an invalid length. [ 290.476488][ T5908] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 290.487764][ T5841] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 290.534566][ T9161] macvlan2: entered promiscuous mode [ 290.548793][ T9161] macvlan2: entered allmulticast mode [ 290.557031][ T5908] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 290.559470][ T5841] usb 5-1: config 0 descriptor?? [ 290.572136][ T116] usb 1-1: Product: syz [ 290.576375][ T116] usb 1-1: Manufacturer: syz [ 290.581297][ T116] usb 1-1: SerialNumber: syz [ 290.590120][ T116] usb 1-1: config 0 descriptor?? [ 290.600241][ T116] pn533_usb 1-1:0.113: NFC: Could not find bulk-in or bulk-out endpoint [ 290.614714][ T5841] usb 5-1: selecting invalid altsetting 1 [ 290.622956][ T5841] dvb_ttusb_budget: ttusb_init_controller: error [ 290.630187][ T5841] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 290.674338][ T5908] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 290.756019][ T5908] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 290.794550][ T5908] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 290.849203][ T5841] DVB: Unable to find symbol cx22700_attach() [ 290.872411][ T5908] usb 4-1: config 0 descriptor?? [ 290.940240][ T9166] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 290.956804][ T5841] DVB: Unable to find symbol tda10046_attach() [ 290.965530][ T9166] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 290.994055][ T30] audit: type=1400 audit(1759888522.201:93): apparmor="DENIED" operation="change_onexec" class="file" info="label not found" error=-2 profile="unconfined" name=3AA009F5 pid=9143 comm="syz.4.983" [ 291.055908][ T5841] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 291.368931][ T5908] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 292.198556][ T5915] usb 1-1: USB disconnect, device number 17 [ 292.259734][ T43] vhci_hcd: vhci_device speed not set [ 292.755312][ T5888] usb 3-1: unable to get BOS descriptor or descriptor too short [ 292.767548][ T5888] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 292.799099][ T5888] usb 3-1: can't read configurations, error -71 [ 292.840959][ T9179] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 293.476467][ T5841] usb 4-1: USB disconnect, device number 25 [ 293.593167][ T9194] netlink: 8 bytes leftover after parsing attributes in process `syz.0.999'. [ 293.644167][ T5915] usb 5-1: USB disconnect, device number 25 [ 293.889193][ T5841] usb 4-1: new full-speed USB device number 26 using dummy_hcd [ 294.064052][ T5841] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 294.095306][ T5841] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 294.107695][ T5841] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 294.156609][ T5841] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 294.198190][ T5841] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 294.206597][ T5841] usb 4-1: Manufacturer: syz [ 294.227134][ T5841] usb 4-1: config 0 descriptor?? [ 294.828065][ T5841] usb 4-1: USB disconnect, device number 26 [ 295.115292][ T9228] batman_adv: batadv0: Adding interface: dummy0 [ 295.168076][ T9228] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 295.309135][ T9228] batman_adv: batadv0: Interface activated: dummy0 [ 295.358930][ T9230] net_ratelimit: 11 callbacks suppressed [ 295.358949][ T9230] batadv0: mtu less than device minimum [ 295.383015][ T9230] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 295.395037][ T9230] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 295.406941][ T9230] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 295.418874][ T9230] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 295.430774][ T9230] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 295.442662][ T9230] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 295.454586][ T9230] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 295.466212][ T9230] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 295.477415][ T9230] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 295.949759][ T9245] ipip0: entered promiscuous mode [ 295.957156][ T9245] ipip0: entered allmulticast mode [ 296.599186][ T116] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 296.793303][ T116] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 296.817678][ T116] usb 3-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 296.853052][ T5915] usb 1-1: new full-speed USB device number 18 using dummy_hcd [ 296.886523][ T116] usb 3-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 296.979375][ T116] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 297.011245][ T5915] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 297.029121][ T5915] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 297.029334][ T116] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 297.065952][ T5915] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 297.104190][ T116] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 297.158506][ T5915] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 297.259692][ T5915] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 297.274748][ T5915] usb 1-1: Manufacturer: syz [ 297.290538][ T116] snd-usb-audio 3-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 297.294960][ T5915] usb 1-1: config 0 descriptor?? [ 297.318526][ T9259] fuse: Bad value for 'fd' [ 297.523192][ T9280] ipip0: entered promiscuous mode [ 297.529343][ T9280] ipip0: entered allmulticast mode [ 297.541298][ T5915] usb 3-1: USB disconnect, device number 25 [ 297.725176][ T116] usb 1-1: USB disconnect, device number 18 [ 297.939151][ T5908] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 298.107179][ T5908] usb 4-1: Using ep0 maxpacket: 32 [ 298.121717][ T5908] usb 4-1: config 0 has no interfaces? [ 298.127551][ T5908] usb 4-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 298.138641][ T5908] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 298.152464][ T5908] usb 4-1: config 0 descriptor?? [ 298.414443][ T9282] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 298.426260][ T9282] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 298.466099][ T9282] netlink: 'syz.3.1032': attribute type 180 has an invalid length. [ 298.644332][ T116] usb 4-1: USB disconnect, device number 27 [ 298.765775][ T9303] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 298.772327][ T9303] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 298.784923][ T9303] vhci_hcd vhci_hcd.0: Device attached [ 298.795717][ T9303] netdevsim netdevsim1: Direct firmware load for nel/config failed with error -2 [ 298.805865][ T9303] netdevsim netdevsim1: Falling back to sysfs fallback for: nel/config [ 299.169129][ T5908] usb 35-1: new low-speed USB device number 5 using vhci_hcd [ 299.905990][ T9304] vhci_hcd: connection reset by peer [ 299.920160][ T2902] vhci_hcd: stop threads [ 299.924458][ T2902] vhci_hcd: release socket [ 299.942514][ T2902] vhci_hcd: disconnect device [ 300.279184][ T43] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 300.447645][ T43] usb 1-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 300.478957][ T43] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 300.506838][ T43] usb 1-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 300.614010][ T43] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 300.683336][ T43] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 300.755734][ T43] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 300.767001][ T43] usb 1-1: invalid MIDI out EP 0 [ 300.879666][ T9336] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1050'. [ 300.899139][ T43] snd-usb-audio 1-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 300.980898][ T9323] fuse: Bad value for 'fd' [ 301.012267][ T5940] udevd[5940]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 301.130330][ T9341] xt_hashlimit: max too large, truncated to 1048576 [ 301.203539][ T116] usb 1-1: USB disconnect, device number 19 [ 301.483188][ T9352] netlink: 'syz.1.1053': attribute type 1 has an invalid length. [ 301.608902][ T9350] macvlan2: entered promiscuous mode [ 301.615580][ T9350] macvlan2: entered allmulticast mode [ 301.868300][ T9357] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1057'. [ 301.951487][ T9362] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1057'. [ 302.559387][ T5923] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 302.808517][ T5923] usb 1-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 302.819304][ T5923] usb 1-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 302.836466][ T5923] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 302.872961][ T5923] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 302.937468][ T9384] xt_hashlimit: max too large, truncated to 1048576 [ 303.191236][ T5841] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 303.366438][ T5841] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 303.430226][ T5841] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 303.510662][ T5841] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 303.534450][ T5841] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 303.549586][ T5841] usb 5-1: SerialNumber: syz [ 303.832056][ T9382] kvm: vcpu 2: requested 128 ns lapic timer period limited to 200000 ns [ 303.842404][ T9382] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 304.574100][ T5908] vhci_hcd: vhci_device speed not set [ 306.051647][ T5841] usb 5-1: 0:2 : does not exist [ 306.056619][ T5841] usb 5-1: unit 5: unexpected type 0x09 [ 306.155672][ T5841] usb 5-1: USB disconnect, device number 26 [ 306.304938][ T5923] usb 1-1: USB disconnect, device number 20 [ 306.327388][ T9371] delete_channel: no stack [ 306.619624][ T5841] usb 5-1: new full-speed USB device number 27 using dummy_hcd [ 306.807273][ T5841] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 306.819361][ T5841] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 306.849404][ T5841] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 306.880830][ T5841] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 306.899139][ T5841] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 306.925353][ T5841] usb 5-1: Manufacturer: syz [ 306.956394][ T9430] fuse: Bad value for 'fd' [ 307.044339][ T5841] usb 5-1: config 0 descriptor?? [ 307.070774][ T9413] binder: 9412:9413 ioctl c0306201 200000000080 returned -14 [ 307.120844][ T9413] binder: BINDER_SET_CONTEXT_MGR already set [ 307.149316][ T9413] binder: 9412:9413 ioctl 4018620d 200000000040 returned -16 [ 307.159309][ T9425] binder: 9412:9425 ioctl c0306201 2000000003c0 returned -22 [ 307.442852][ T43] usb 5-1: USB disconnect, device number 27 [ 309.591508][ T9469] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1092'. [ 310.200319][ C0] bridge0: port 1(bridge_slave_0) entered learning state [ 310.208319][ C0] bridge0: port 2(bridge_slave_1) entered learning state [ 310.557205][ T9488] netdevsim netdevsim3: Direct firmware load for nel/config failed with error -2 [ 310.644681][ T9490] fuse: Bad value for 'fd' [ 310.829267][ T9488] netdevsim netdevsim3: Falling back to sysfs fallback for: nel/config [ 310.842665][ T9492] ipip0: entered promiscuous mode [ 310.847705][ T9492] ipip0: entered allmulticast mode [ 310.856474][ T9484] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 310.862996][ T9484] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 310.972338][ T9484] vhci_hcd vhci_hcd.0: Device attached [ 311.108013][ T9495] bridge0: port 3(syz_tun) entered blocking state [ 311.118142][ T9495] bridge0: port 3(syz_tun) entered disabled state [ 311.131169][ T9495] syz_tun: entered allmulticast mode [ 311.163918][ T9495] syz_tun: entered promiscuous mode [ 311.219130][ T43] usb 39-1: new low-speed USB device number 4 using vhci_hcd [ 311.267663][ T9485] vhci_hcd: connection reset by peer [ 311.273414][ T50] vhci_hcd: stop threads [ 311.277746][ T50] vhci_hcd: release socket [ 311.284093][ T50] vhci_hcd: disconnect device [ 312.059212][ T9523] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1112'. [ 312.740966][ T5923] usb 3-1: new full-speed USB device number 26 using dummy_hcd [ 312.799221][ T5915] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 312.923438][ T5923] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 312.941897][ T5923] usb 3-1: config 0 has no interface number 0 [ 312.948015][ T5923] usb 3-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 312.958237][ T5923] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 313.018943][ T30] audit: type=1326 audit(1759888544.221:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9536 comm="syz.4.1117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb09c38eec9 code=0x7ffc0000 [ 313.211856][ C0] vkms_vblank_simulate: vblank timer overrun [ 313.289157][ T5915] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 313.325899][ T30] audit: type=1326 audit(1759888544.221:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9536 comm="syz.4.1117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7fb09c38eec9 code=0x7ffc0000 [ 313.348108][ C0] vkms_vblank_simulate: vblank timer overrun [ 313.368041][ T5923] usb 3-1: config 0 descriptor?? [ 313.386211][ T5915] usb 2-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 313.415773][ T5915] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 313.441353][ T5923] usb 3-1: selecting invalid altsetting 1 [ 313.447204][ T5923] dvb_ttusb_budget: ttusb_init_controller: error [ 313.459132][ T5915] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 313.462405][ T9542] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1118'. [ 313.500845][ T5923] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 313.529083][ T30] audit: type=1326 audit(1759888544.221:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9536 comm="syz.4.1117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb09c38eec9 code=0x7ffc0000 [ 313.588098][ T9540] pim6reg: entered allmulticast mode [ 313.688577][ T9532] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 313.708739][ T9532] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 313.815855][ T9535] fuse: Bad value for 'fd' [ 313.899065][ T30] audit: type=1326 audit(1759888544.221:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9536 comm="syz.4.1117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7fb09c38eec9 code=0x7ffc0000 [ 313.964078][ T9547] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1119'. [ 314.004756][ T30] audit: type=1326 audit(1759888544.221:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9536 comm="syz.4.1117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb09c38eec9 code=0x7ffc0000 [ 314.004890][ T5923] DVB: Unable to find symbol cx22700_attach() [ 314.027006][ C0] vkms_vblank_simulate: vblank timer overrun [ 314.062141][ T30] audit: type=1326 audit(1759888544.221:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9536 comm="syz.4.1117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=188 compat=0 ip=0x7fb09c38eec9 code=0x7ffc0000 [ 314.103083][ T5841] usb 2-1: USB disconnect, device number 22 [ 314.132651][ T30] audit: type=1326 audit(1759888544.221:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9536 comm="syz.4.1117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb09c38eec9 code=0x7ffc0000 [ 314.155186][ T5923] DVB: Unable to find symbol tda10046_attach() [ 314.167576][ T5923] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 314.183166][ T9552] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1119'. [ 314.298393][ T30] audit: type=1326 audit(1759888544.221:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9536 comm="syz.4.1117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=189 compat=0 ip=0x7fb09c38eec9 code=0x7ffc0000 [ 314.360414][ T30] audit: type=1326 audit(1759888544.221:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9536 comm="syz.4.1117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb09c38eec9 code=0x7ffc0000 [ 314.384144][ T30] audit: type=1326 audit(1759888544.221:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9536 comm="syz.4.1117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=192 compat=0 ip=0x7fb09c38eec9 code=0x7ffc0000 [ 314.410495][ T9556] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 314.417002][ T9556] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 314.425976][ T9556] vhci_hcd vhci_hcd.0: Device attached [ 314.435680][ T9556] netdevsim netdevsim4: Direct firmware load for nel/config failed with error -2 [ 314.445263][ T9556] netdevsim netdevsim4: Falling back to sysfs fallback for: nel/config [ 314.589175][ T5841] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 314.669274][ T5923] usb 41-1: new low-speed USB device number 5 using vhci_hcd [ 314.719105][ T5841] usb 1-1: device descriptor read/64, error -71 [ 314.979210][ T5841] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 315.030832][ T9565] fuse: Bad value for 'fd' [ 315.043456][ T9557] vhci_hcd: connection reset by peer [ 315.050655][ T2902] vhci_hcd: stop threads [ 315.055113][ T2902] vhci_hcd: release socket [ 315.064547][ T2902] vhci_hcd: disconnect device [ 315.119203][ T5841] usb 1-1: device descriptor read/64, error -71 [ 315.249541][ T5841] usb usb1-port1: attempt power cycle [ 315.482800][ T5915] usb 3-1: USB disconnect, device number 26 [ 315.609181][ T5841] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 315.651198][ T5841] usb 1-1: device descriptor read/8, error -71 [ 315.919408][ T5841] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 315.978900][ T5841] usb 1-1: device descriptor read/8, error -71 [ 316.106715][ T5841] usb usb1-port1: unable to enumerate USB device [ 316.706249][ T43] vhci_hcd: vhci_device speed not set [ 317.069416][ T9598] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1134'. [ 317.242579][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.259767][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.500727][ T9606] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 317.507255][ T9606] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 317.532801][ T9606] vhci_hcd vhci_hcd.0: Device attached [ 317.545622][ T9606] netdevsim netdevsim4: Direct firmware load for nel/config failed with error -2 [ 317.556051][ T9606] netdevsim netdevsim4: Falling back to sysfs fallback for: nel/config [ 317.572293][ T9610] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1137'. [ 318.285857][ T9607] vhci_hcd: connection closed [ 318.286087][ T60] vhci_hcd: stop threads [ 318.297056][ T60] vhci_hcd: release socket [ 318.304980][ T60] vhci_hcd: disconnect device [ 319.159366][ T116] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 319.330093][ T43] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 319.399227][ T116] usb 2-1: device descriptor read/64, error -71 [ 319.469983][ T9643] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 319.491938][ T43] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 319.514783][ T43] usb 1-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 319.529112][ T43] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 319.538323][ T43] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 319.592387][ T43] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 319.604212][ T43] usb 1-1: invalid MIDI out EP 0 [ 319.806061][ T5841] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 319.869957][ T5923] vhci_hcd: vhci_device speed not set [ 319.891566][ T116] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 319.946362][ T5940] udevd[5940]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 319.973387][ T9640] fuse: Bad value for 'fd' [ 319.980874][ T5841] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 319.990857][ T5841] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 319.994427][ T43] snd-usb-audio 1-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 320.002940][ T5841] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 320.106003][ T5841] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 320.115282][ T116] usb 2-1: device descriptor read/64, error -71 [ 320.127927][ T5841] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 320.136214][ T5841] usb 5-1: Product: syz [ 320.147295][ T5841] usb 5-1: Manufacturer: syz [ 320.160491][ T5841] usb 5-1: SerialNumber: syz [ 320.188326][ T5887] usb 1-1: USB disconnect, device number 25 [ 320.204259][ T5841] hub 5-1:1.0: bad descriptor, ignoring hub [ 320.213560][ T5841] hub 5-1:1.0: probe with driver hub failed with error -5 [ 320.240595][ T116] usb usb2-port1: attempt power cycle [ 320.540695][ T5841] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 28 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 320.846570][ T43] usb 5-1: USB disconnect, device number 28 [ 320.979717][ T116] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 321.010405][ T116] usb 2-1: device descriptor read/8, error -71 [ 321.019925][ T43] usblp0: removed [ 321.261447][ T116] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 321.295956][ T9666] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1156'. [ 321.306098][ T116] usb 2-1: device descriptor read/8, error -71 [ 321.421549][ T116] usb usb2-port1: unable to enumerate USB device [ 321.949213][ T116] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 322.274204][ T116] usb 3-1: Using ep0 maxpacket: 16 [ 322.339450][ T116] usb 3-1: config 0 has no interfaces? [ 322.385241][ T116] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 322.404813][ T116] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 322.433068][ T116] usb 3-1: Manufacturer: syz [ 322.577874][ T116] usb 3-1: config 0 descriptor?? [ 323.656773][ T9702] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1168'. [ 323.702198][ T9704] bridge0: port 3(syz_tun) entered blocking state [ 323.711799][ T9704] bridge0: port 3(syz_tun) entered disabled state [ 323.718451][ T9704] syz_tun: entered allmulticast mode [ 323.725668][ T9704] syz_tun: entered promiscuous mode [ 324.410413][ T9732] : entered promiscuous mode [ 324.527803][ T9738] ipip0: entered promiscuous mode [ 324.533203][ T9738] ipip0: entered allmulticast mode [ 324.547406][ T9740] fuse: Bad value for 'fd' [ 324.663072][ T9747] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 324.919777][ T9752] netlink: 'syz.0.1189': attribute type 1 has an invalid length. [ 325.163253][ T116] usb 3-1: USB disconnect, device number 27 [ 325.345861][ T9755] macvlan2: entered promiscuous mode [ 325.351716][ T9755] macvlan2: entered allmulticast mode [ 325.365931][ T9755] bond4: entered promiscuous mode [ 325.375223][ T9755] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 325.566823][ T9755] bond4: left promiscuous mode [ 325.695173][ T9767] batman_adv: batadv0: Interface deactivated: dummy0 [ 325.715089][ T9767] batman_adv: batadv0: Removing interface: dummy0 [ 325.956348][ T9774] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 325.962904][ T9774] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 325.992633][ T9778] fuse: Bad value for 'fd' [ 326.069775][ T9779] netdevsim netdevsim3: Direct firmware load for nel/config failed with error -2 [ 326.088354][ T9774] vhci_hcd vhci_hcd.0: Device attached [ 326.121923][ T9779] netdevsim netdevsim3: Falling back to sysfs fallback for: nel/config [ 326.346738][ T116] usb 39-1: new low-speed USB device number 5 using vhci_hcd [ 326.704391][ T9775] vhci_hcd: connection reset by peer [ 326.712033][ T7106] vhci_hcd: stop threads [ 326.716614][ T7106] vhci_hcd: release socket [ 326.722748][ T7106] vhci_hcd: disconnect device [ 327.949265][ T43] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 328.170189][ T43] usb 5-1: Using ep0 maxpacket: 16 [ 328.203932][ T43] usb 5-1: config 0 has no interfaces? [ 328.252511][ T43] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 328.300602][ T43] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 328.313268][ T43] usb 5-1: Manufacturer: syz [ 328.330038][ T43] usb 5-1: config 0 descriptor?? [ 328.339516][ T9818] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1209'. [ 329.247406][ T9833] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1216'. [ 329.284650][ T9833] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1216'. [ 329.799754][ T5841] usb 3-1: new full-speed USB device number 28 using dummy_hcd [ 329.981840][ T9843] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1219'. [ 329.991938][ T9843] netlink: 'syz.1.1219': attribute type 30 has an invalid length. [ 330.037205][ T7106] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 330.037763][ T5923] IPVS: starting estimator thread 0... [ 330.054457][ T7106] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 330.064985][ T7106] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 330.075216][ T7106] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 330.106972][ T5841] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 330.137546][ T5841] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 330.189233][ T9844] IPVS: using max 40 ests per chain, 96000 per kthread [ 330.205614][ T5841] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 330.268369][ T5841] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 330.284877][ T5841] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 330.354944][ T5841] usb 3-1: Manufacturer: syz [ 330.379523][ T5841] usb 3-1: config 0 descriptor?? [ 330.715263][ T5923] usb 3-1: USB disconnect, device number 28 [ 330.964555][ T5841] usb 5-1: USB disconnect, device number 29 [ 331.469529][ T116] vhci_hcd: vhci_device speed not set [ 333.229215][ T43] usb 5-1: new full-speed USB device number 30 using dummy_hcd [ 334.171673][ T116] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 334.549176][ T116] usb 3-1: Using ep0 maxpacket: 16 [ 334.564626][ T116] usb 3-1: config 0 has no interfaces? [ 334.783529][ T116] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 334.802986][ T116] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 334.841025][ T116] usb 3-1: Manufacturer: syz [ 335.053503][ T116] usb 3-1: config 0 descriptor?? [ 335.318518][ T9921] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1242'. [ 335.346422][ T9919] fuse: Bad value for 'fd' [ 335.840493][ T9926] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1245'. [ 335.924302][ T43] usb 5-1: unable to get BOS descriptor or descriptor too short [ 335.938816][ T43] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 335.947006][ T43] usb 5-1: can't read configurations, error -71 [ 335.986409][ T9930] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1245'. [ 336.569678][ T5841] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 336.779204][ T5841] usb 4-1: Using ep0 maxpacket: 8 [ 336.864231][ T5841] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 336.890651][ T5841] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 336.971458][ T5841] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 239, changing to 11 [ 337.019502][ T5841] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 9059, setting to 1024 [ 337.074998][ T5841] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 337.120984][ T5841] usb 4-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 337.138178][ T5841] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 337.178788][ T5841] usb 4-1: Product: syz [ 337.188956][ T5841] usb 4-1: Manufacturer: syz [ 337.193676][ T5841] usb 4-1: SerialNumber: syz [ 337.214749][ T5923] usb 3-1: USB disconnect, device number 29 [ 337.252708][ T5841] usb 4-1: config 0 descriptor?? [ 337.693012][ T9959] sysfs: cannot create duplicate filename '/class/ieee80211/!' [ 337.700902][ T9959] CPU: 1 UID: 0 PID: 9959 Comm: syz.3.1247 Not tainted syzkaller #0 PREEMPT(full) [ 337.700925][ T9959] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 337.700950][ T9959] Call Trace: [ 337.700959][ T9959] [ 337.700968][ T9959] dump_stack_lvl+0x189/0x250 [ 337.700999][ T9959] ? __pfx_dump_stack_lvl+0x10/0x10 [ 337.701020][ T9959] ? __pfx__printk+0x10/0x10 [ 337.701046][ T9959] ? kernfs_path_from_node+0x2f/0x290 [ 337.701069][ T9959] ? kernfs_path_from_node+0x250/0x290 [ 337.701089][ T9959] ? kernfs_path_from_node+0x2f/0x290 [ 337.701116][ T9959] sysfs_warn_dup+0x8e/0xa0 [ 337.701137][ T9959] sysfs_do_create_link_sd+0xc0/0x110 [ 337.701161][ T9959] device_add_class_symlinks+0x1cf/0x240 [ 337.701192][ T9959] device_add+0x475/0xb50 [ 337.701221][ T9959] wiphy_register+0x1c81/0x2aa0 [ 337.701262][ T9959] ? __pfx_wiphy_register+0x10/0x10 [ 337.701281][ T9959] ? minstrel_ht_alloc+0x6e0/0x7e0 [ 337.701312][ T9959] ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0 [ 337.701339][ T9959] ieee80211_register_hw+0x3473/0x40d0 [ 337.701376][ T9959] ? ieee80211_register_hw+0x1441/0x40d0 [ 337.701405][ T9959] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 337.701423][ T9959] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 337.701442][ T9959] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 337.701457][ T9959] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 337.701478][ T9959] ? __hrtimer_setup+0x187/0x210 [ 337.701492][ T9959] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 337.701525][ T9959] mac80211_hwsim_new_radio+0x2f7a/0x5220 [ 337.701568][ T9959] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 337.701583][ T9959] ? trace_kmalloc+0x1f/0xd0 [ 337.701600][ T9959] ? __kmalloc_node_track_caller_noprof+0x587/0x800 [ 337.701621][ T9959] ? kstrndup+0xbf/0x160 [ 337.701648][ T9959] hwsim_new_radio_nl+0xf5b/0x1bd0 [ 337.701671][ T9959] ? __pfx___nla_validate_parse+0x10/0x10 [ 337.701702][ T9959] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 337.701723][ T9959] ? rcu_is_watching+0x15/0xb0 [ 337.701742][ T9959] ? __nla_parse+0x40/0x60 [ 337.701763][ T9959] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 337.701794][ T9959] genl_family_rcv_msg_doit+0x215/0x300 [ 337.701818][ T9959] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 337.701846][ T9959] ? bpf_lsm_capable+0x9/0x20 [ 337.701862][ T9959] ? security_capable+0x7e/0x2e0 [ 337.701884][ T9959] genl_rcv_msg+0x60e/0x790 [ 337.701907][ T9959] ? __pfx_genl_rcv_msg+0x10/0x10 [ 337.701928][ T9959] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 337.701946][ T9959] ? __asan_memcpy+0x40/0x70 [ 337.701962][ T9959] ? __pfx_ref_tracker_free+0x10/0x10 [ 337.701986][ T9959] netlink_rcv_skb+0x208/0x470 [ 337.701998][ T9959] ? __lock_acquire+0xab9/0xd20 [ 337.702012][ T9959] ? __pfx_genl_rcv_msg+0x10/0x10 [ 337.702031][ T9959] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 337.702065][ T9959] ? down_read+0x1ad/0x2e0 [ 337.702086][ T9959] genl_rcv+0x28/0x40 [ 337.702101][ T9959] netlink_unicast+0x82c/0x9e0 [ 337.702130][ T9959] ? __pfx_netlink_unicast+0x10/0x10 [ 337.702152][ T9959] ? netlink_sendmsg+0x642/0xb30 [ 337.702165][ T9959] ? skb_put+0x11b/0x210 [ 337.702182][ T9959] netlink_sendmsg+0x805/0xb30 [ 337.702210][ T9959] ? __pfx_netlink_sendmsg+0x10/0x10 [ 337.702228][ T9959] ? aa_sock_msg_perm+0xf1/0x1d0 [ 337.702248][ T9959] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 337.702261][ T9959] ? __pfx_netlink_sendmsg+0x10/0x10 [ 337.702276][ T9959] __sock_sendmsg+0x21c/0x270 [ 337.702297][ T9959] ____sys_sendmsg+0x505/0x830 [ 337.702318][ T9959] ? __pfx_____sys_sendmsg+0x10/0x10 [ 337.702365][ T9959] ? import_iovec+0x74/0xa0 [ 337.702381][ T9959] ___sys_sendmsg+0x21f/0x2a0 [ 337.702399][ T9959] ? __pfx____sys_sendmsg+0x10/0x10 [ 337.702420][ T9959] ? futex_wait+0x285/0x360 [ 337.702472][ T9959] __x64_sys_sendmsg+0x19b/0x260 [ 337.702495][ T9959] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 337.702532][ T9959] ? do_syscall_64+0xbe/0xfa0 [ 337.702551][ T9959] do_syscall_64+0xfa/0xfa0 [ 337.702571][ T9959] ? lockdep_hardirqs_on+0x9c/0x150 [ 337.702588][ T9959] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 337.702602][ T9959] ? clear_bhb_loop+0x60/0xb0 [ 337.702621][ T9959] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 337.702639][ T9959] RIP: 0033:0x7fe9a3d8eec9 [ 337.702654][ T9959] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 337.702667][ T9959] RSP: 002b:00007fe9a4c40038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 337.702684][ T9959] RAX: ffffffffffffffda RBX: 00007fe9a3fe6180 RCX: 00007fe9a3d8eec9 [ 337.702695][ T9959] RDX: 0000000000000310 RSI: 0000200000000040 RDI: 0000000000000007 [ 337.702704][ T9959] RBP: 00007fe9a3e11f91 R08: 0000000000000000 R09: 0000000000000000 [ 337.702714][ T9959] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 337.702722][ T9959] R13: 00007fe9a3fe6218 R14: 00007fe9a3fe6180 R15: 00007fe9a410fa28 [ 337.702748][ T9959] [ 339.264925][ T9970] netlink: 'syz.2.1253': attribute type 1 has an invalid length. [ 339.359902][ T9971] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1253'. [ 339.483135][ T9971] macvlan2: entered promiscuous mode [ 339.488486][ T9971] macvlan2: entered allmulticast mode [ 340.279128][ C0] bridge0: port 2(bridge_slave_1) entered forwarding state [ 340.286506][ C0] bridge0: topology change detected, propagating [ 340.293754][ C0] bridge0: port 1(bridge_slave_0) entered forwarding state [ 340.301029][ C0] bridge0: topology change detected, propagating [ 340.520002][ T43] usb 5-1: new full-speed USB device number 32 using dummy_hcd [ 341.297076][ T9989] fuse: Bad value for 'fd' [ 342.949090][ T5841] rc_core: IR keymap rc-imon-rsc not found [ 342.954989][ T5841] Registered IR keymap rc-empty [ 343.023278][ T5841] rc rc0: iMON Station as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 343.030290][ T5923] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 343.070875][ T5841] input: iMON Station as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input12 [ 343.200948][ T5841] usb 4-1: USB disconnect, device number 28 [ 343.219135][ T5923] usb 2-1: Using ep0 maxpacket: 8 [ 343.226440][ T5923] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 343.260285][ T5923] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 343.339234][ T5923] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 239, changing to 11 [ 343.373036][ T43] usb 5-1: unable to get BOS descriptor or descriptor too short [ 343.442221][ T5923] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 9059, setting to 1024 [ 343.460513][ T43] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 343.479792][ T43] usb 5-1: can't read configurations, error -71 [ 343.493147][ T5923] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 343.554735][ T5923] usb 2-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 343.573178][ T5923] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 344.060739][ T5923] usb 2-1: Product: syz [ 344.099339][ T5923] usb 2-1: Manufacturer: syz [ 344.266326][ T5908] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 344.276320][ T5923] usb 2-1: SerialNumber: syz [ 344.296630][ T5923] usb 2-1: config 0 descriptor?? [ 344.443901][ T5908] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 344.454797][ T5908] usb 3-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 344.472746][ T5908] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 344.529424][ T5908] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 344.671269][T10023] sysfs: cannot create duplicate filename '/class/ieee80211/!' [ 344.678925][T10023] CPU: 1 UID: 0 PID: 10023 Comm: syz.1.1261 Not tainted syzkaller #0 PREEMPT(full) [ 344.678990][T10023] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 344.679001][T10023] Call Trace: [ 344.679010][T10023] [ 344.679020][T10023] dump_stack_lvl+0x189/0x250 [ 344.679049][T10023] ? __pfx_dump_stack_lvl+0x10/0x10 [ 344.679067][T10023] ? __pfx__printk+0x10/0x10 [ 344.679088][T10023] ? kernfs_path_from_node+0x2f/0x290 [ 344.679101][T10023] ? kernfs_path_from_node+0x250/0x290 [ 344.679112][T10023] ? kernfs_path_from_node+0x2f/0x290 [ 344.679125][T10023] sysfs_warn_dup+0x8e/0xa0 [ 344.679138][T10023] sysfs_do_create_link_sd+0xc0/0x110 [ 344.679151][T10023] device_add_class_symlinks+0x1cf/0x240 [ 344.679168][T10023] device_add+0x475/0xb50 [ 344.679184][T10023] wiphy_register+0x1c81/0x2aa0 [ 344.679209][T10023] ? __pfx_wiphy_register+0x10/0x10 [ 344.679221][T10023] ? minstrel_ht_alloc+0x6e0/0x7e0 [ 344.679241][T10023] ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0 [ 344.679259][T10023] ieee80211_register_hw+0x3473/0x40d0 [ 344.679282][T10023] ? ieee80211_register_hw+0x1441/0x40d0 [ 344.679301][T10023] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 344.679314][T10023] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 344.679328][T10023] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 344.679338][T10023] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 344.679353][T10023] ? __hrtimer_setup+0x187/0x210 [ 344.679363][T10023] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 344.679378][T10023] mac80211_hwsim_new_radio+0x2f7a/0x5220 [ 344.679407][T10023] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 344.679418][T10023] ? trace_kmalloc+0x1f/0xd0 [ 344.679429][T10023] ? __kmalloc_node_track_caller_noprof+0x587/0x800 [ 344.679443][T10023] ? kstrndup+0xbf/0x160 [ 344.679460][T10023] hwsim_new_radio_nl+0xf5b/0x1bd0 [ 344.679480][T10023] ? __pfx___nla_validate_parse+0x10/0x10 [ 344.679516][T10023] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 344.679535][T10023] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 344.679557][T10023] ? __nla_parse+0x24/0x60 [ 344.679582][T10023] ? __nla_parse+0x40/0x60 [ 344.679607][T10023] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 344.679630][T10023] genl_family_rcv_msg_doit+0x215/0x300 [ 344.679647][T10023] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 344.679667][T10023] ? bpf_lsm_capable+0x9/0x20 [ 344.679679][T10023] ? security_capable+0x7e/0x2e0 [ 344.679695][T10023] genl_rcv_msg+0x60e/0x790 [ 344.679711][T10023] ? __pfx_genl_rcv_msg+0x10/0x10 [ 344.679722][T10023] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 344.679742][T10023] netlink_rcv_skb+0x208/0x470 [ 344.679750][T10023] ? __lock_acquire+0xab9/0xd20 [ 344.679760][T10023] ? __pfx_genl_rcv_msg+0x10/0x10 [ 344.679773][T10023] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 344.679794][T10023] ? down_read+0x1ad/0x2e0 [ 344.679808][T10023] genl_rcv+0x28/0x40 [ 344.679819][T10023] netlink_unicast+0x82c/0x9e0 [ 344.679839][T10023] ? __pfx_netlink_unicast+0x10/0x10 [ 344.679854][T10023] ? netlink_sendmsg+0x642/0xb30 [ 344.679862][T10023] ? skb_put+0x11b/0x210 [ 344.679874][T10023] netlink_sendmsg+0x805/0xb30 [ 344.679890][T10023] ? __pfx_netlink_sendmsg+0x10/0x10 [ 344.679902][T10023] ? aa_sock_msg_perm+0xf1/0x1d0 [ 344.679916][T10023] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 344.679925][T10023] ? __pfx_netlink_sendmsg+0x10/0x10 [ 344.679935][T10023] __sock_sendmsg+0x21c/0x270 [ 344.679957][T10023] ____sys_sendmsg+0x505/0x830 [ 344.679972][T10023] ? __pfx_____sys_sendmsg+0x10/0x10 [ 344.679990][T10023] ? import_iovec+0x74/0xa0 [ 344.680002][T10023] ___sys_sendmsg+0x21f/0x2a0 [ 344.680014][T10023] ? __pfx____sys_sendmsg+0x10/0x10 [ 344.680030][T10023] ? futex_wake+0x4b2/0x560 [ 344.680065][T10023] __x64_sys_sendmsg+0x19b/0x260 [ 344.680078][T10023] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 344.680099][T10023] ? do_syscall_64+0xbe/0xfa0 [ 344.680112][T10023] do_syscall_64+0xfa/0xfa0 [ 344.680123][T10023] ? lockdep_hardirqs_on+0x9c/0x150 [ 344.680133][T10023] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 344.680143][T10023] ? clear_bhb_loop+0x60/0xb0 [ 344.680155][T10023] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 344.680165][T10023] RIP: 0033:0x7f2c3538eec9 [ 344.680176][T10023] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 344.680185][T10023] RSP: 002b:00007f2c36193038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 344.680197][T10023] RAX: ffffffffffffffda RBX: 00007f2c355e6180 RCX: 00007f2c3538eec9 [ 344.680207][T10023] RDX: 0000000000000310 RSI: 0000200000000040 RDI: 0000000000000007 [ 344.680213][T10023] RBP: 00007f2c35411f91 R08: 0000000000000000 R09: 0000000000000000 [ 344.680219][T10023] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 344.680225][T10023] R13: 00007f2c355e6218 R14: 00007f2c355e6180 R15: 00007f2c3570fa28 [ 344.680242][T10023] [ 345.149531][ C1] vkms_vblank_simulate: vblank timer overrun [ 345.268932][T10023] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1261'. [ 345.719281][ T5908] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 345.973251][ T5908] usb 4-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 346.042333][ T5908] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 346.122844][ T5908] usb 4-1: Product: syz [ 346.178344][ T5908] usb 4-1: Manufacturer: syz [ 346.240324][T10036] fuse: Bad value for 'fd' [ 346.259771][ T5908] usb 4-1: SerialNumber: syz [ 346.347581][ T5908] usb 4-1: config 0 descriptor?? [ 346.597766][ T5908] usb 4-1: USB disconnect, device number 29 [ 346.841518][ T5841] usb 3-1: USB disconnect, device number 30 [ 346.854802][T10015] delete_channel: no stack [ 348.060759][ T5923] rc_core: IR keymap rc-imon-rsc not found [ 348.066591][ T5923] Registered IR keymap rc-empty [ 348.072605][ T5923] rc rc0: iMON Station as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 348.095365][ T5923] input: iMON Station as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input13 [ 348.249307][ T43] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 348.292920][ T5923] usb 2-1: USB disconnect, device number 27 [ 348.479273][ T43] usb 1-1: Using ep0 maxpacket: 16 [ 348.488247][ T43] usb 1-1: config 0 has no interfaces? [ 348.511226][ T43] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 348.550475][ T43] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 348.714137][ T43] usb 1-1: Manufacturer: syz [ 348.769212][ T43] usb 1-1: config 0 descriptor?? [ 348.934002][T10062] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 349.239665][ T43] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 349.404280][ T43] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 349.429146][ T43] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 349.447359][ T43] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 349.467740][ T43] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 349.480181][ T43] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 349.489807][ T43] usb 4-1: Product: syz [ 349.494296][ T43] usb 4-1: Manufacturer: syz [ 349.499820][ T43] usb 4-1: SerialNumber: syz [ 349.525052][ T43] hub 4-1:1.0: bad descriptor, ignoring hub [ 349.533781][ T43] hub 4-1:1.0: probe with driver hub failed with error -5 [ 349.802379][ T43] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 30 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 349.859148][ T5946] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 350.031616][ T5946] usb 2-1: config 0 has an invalid interface number: 197 but max is 4 [ 350.049105][ T5946] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 350.069659][ T5946] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 5 [ 350.084140][ T5946] usb 2-1: config 0 has no interface number 0 [ 350.098535][ T5946] usb 2-1: config 0 interface 197 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 8 [ 350.109797][ T43] usb 4-1: USB disconnect, device number 30 [ 350.151835][ T43] usblp0: removed [ 350.156672][ T5946] usb 2-1: config 0 interface 197 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 350.198930][ T5946] usb 2-1: config 0 interface 197 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 350.224188][ T5946] usb 2-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=bb.42 [ 350.234203][ T5946] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 350.243427][ T5946] usb 2-1: Product: syz [ 350.247987][ T5946] usb 2-1: Manufacturer: syz [ 350.252798][ T5946] usb 2-1: SerialNumber: syz [ 350.275953][ T5946] usb 2-1: config 0 descriptor?? [ 350.292177][T10078] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 350.515394][T10078] netlink: 124 bytes leftover after parsing attributes in process `syz.1.1282'. [ 350.880725][ T5888] usb 1-1: USB disconnect, device number 26 [ 351.778570][ T5946] usb 1-1: new full-speed USB device number 27 using dummy_hcd [ 352.189112][ T116] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 352.487042][ T5888] usb 2-1: USB disconnect, device number 28 [ 352.509315][ T116] usb 4-1: Using ep0 maxpacket: 32 [ 352.590543][ T116] usb 4-1: config 0 has no interfaces? [ 352.658804][ T116] usb 4-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 352.964572][T10121] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1295'. [ 352.973973][ T116] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 353.036056][ T116] usb 4-1: config 0 descriptor?? [ 353.101697][T10121] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1295'. [ 353.325304][T10111] netlink: 'syz.3.1293': attribute type 180 has an invalid length. [ 353.517009][ T5923] usb 4-1: USB disconnect, device number 31 [ 354.311471][ T5946] usb 1-1: unable to get BOS descriptor or descriptor too short [ 354.359560][ T5946] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 354.382181][ T5946] usb 1-1: can't read configurations, error -71 [ 354.390449][ T116] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 354.659120][ T116] usb 5-1: Using ep0 maxpacket: 16 [ 354.741124][ T116] usb 5-1: config 0 has no interfaces? [ 354.776069][ T116] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 354.807380][ T116] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 354.838874][ T116] usb 5-1: Manufacturer: syz [ 354.864686][ T116] usb 5-1: config 0 descriptor?? [ 355.301439][ T5946] usb 1-1: new full-speed USB device number 28 using dummy_hcd [ 355.608881][ T5946] usb 1-1: config 0 has an invalid interface number: 113 but max is 0 [ 355.631763][ T5946] usb 1-1: config 0 has no interface number 0 [ 355.655096][ T5946] usb 1-1: config 0 interface 113 altsetting 2 has an endpoint descriptor with address 0xE7, changing to 0x87 [ 355.695615][ T5946] usb 1-1: config 0 interface 113 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 355.729729][ T5946] usb 1-1: config 0 interface 113 has no altsetting 0 [ 355.761482][ T5946] usb 1-1: New USB device found, idVendor=054c, idProduct=02e1, bcdDevice=e2.c8 [ 355.783492][ T5946] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 355.818828][ T5946] usb 1-1: Product: syz [ 355.834735][ T5946] usb 1-1: Manufacturer: syz [ 355.907497][ T5946] usb 1-1: SerialNumber: syz [ 355.934558][ T5946] usb 1-1: config 0 descriptor?? [ 355.946232][ T5946] pn533_usb 1-1:0.113: NFC: Could not find bulk-in or bulk-out endpoint [ 356.669425][ T5887] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 356.891502][ T5887] usb 3-1: config 0 has an invalid interface number: 197 but max is 4 [ 356.900005][ T5887] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 356.933661][ T5887] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 5 [ 357.237429][ T5887] usb 3-1: config 0 has no interface number 0 [ 357.249140][ T5887] usb 3-1: config 0 interface 197 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 8 [ 357.275360][ T5887] usb 3-1: config 0 interface 197 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 357.286244][ T5887] usb 3-1: config 0 interface 197 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 357.376447][ T5887] usb 3-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=bb.42 [ 357.519775][ T5887] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 357.532520][ T5946] usb 5-1: USB disconnect, device number 34 [ 357.537950][ T5887] usb 3-1: Product: syz [ 357.542897][ T5887] usb 3-1: Manufacturer: syz [ 357.552008][ T5887] usb 3-1: SerialNumber: syz [ 357.572985][ T5887] usb 3-1: config 0 descriptor?? [ 357.592931][T10163] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 357.842438][T10163] netlink: 124 bytes leftover after parsing attributes in process `syz.2.1305'. [ 358.829458][ T5841] usb 1-1: USB disconnect, device number 28 [ 359.359210][ T5923] usb 1-1: new full-speed USB device number 29 using dummy_hcd [ 359.577035][ T5841] usb 3-1: USB disconnect, device number 31 [ 362.409120][ T5841] usb 4-1: new full-speed USB device number 32 using dummy_hcd [ 362.647486][ T5841] usb 4-1: config 0 has an invalid interface number: 113 but max is 0 [ 362.657579][ T5841] usb 4-1: config 0 has no interface number 0 [ 362.676316][ T5841] usb 4-1: config 0 interface 113 altsetting 2 has an endpoint descriptor with address 0xE7, changing to 0x87 [ 362.701449][ T5841] usb 4-1: config 0 interface 113 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 362.731697][ T5841] usb 4-1: config 0 interface 113 has no altsetting 0 [ 362.812224][ T5841] usb 4-1: New USB device found, idVendor=054c, idProduct=02e1, bcdDevice=e2.c8 [ 362.831860][ T5841] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 362.902694][ T5841] usb 4-1: Product: syz [ 362.907608][ T5841] usb 4-1: Manufacturer: syz [ 362.920868][ T5923] usb 1-1: unable to get BOS descriptor or descriptor too short [ 362.942883][ T5841] usb 4-1: SerialNumber: syz [ 362.987086][ T5841] usb 4-1: config 0 descriptor?? [ 363.035851][ T5923] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 363.055962][ T5923] usb 1-1: can't read configurations, error -71 [ 363.121415][ T5841] pn533_usb 4-1:0.113: NFC: Could not find bulk-in or bulk-out endpoint [ 363.389481][ T5888] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 363.563568][ T5888] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 363.596226][ T5888] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 363.616243][ T5888] usb 2-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 363.632690][ T5888] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 363.644244][ T5888] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 363.673367][ T5888] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 363.682104][ T5888] usb 2-1: invalid MIDI out EP 0 [ 363.868294][T10232] fuse: Bad value for 'fd' [ 363.927908][ T5888] snd-usb-audio 2-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 364.097632][ T5908] usb 2-1: USB disconnect, device number 29 [ 365.692167][ T5923] usb 4-1: USB disconnect, device number 32 [ 367.500579][T10292] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 367.855037][ T5923] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 368.079240][ T5923] usb 4-1: Using ep0 maxpacket: 16 [ 368.261194][ T5841] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 368.362059][ T5923] usb 4-1: config 0 has no interfaces? [ 368.369159][ T5923] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 368.378294][ T5923] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 368.454897][ T5923] usb 4-1: Manufacturer: syz [ 368.459614][ T5841] usb 2-1: Using ep0 maxpacket: 16 [ 368.472729][ T5841] usb 2-1: config 0 has no interfaces? [ 368.478720][ T5923] usb 4-1: config 0 descriptor?? [ 368.494974][ T5841] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 368.525268][ T5841] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 368.555109][ T5841] usb 2-1: Manufacturer: syz [ 368.625912][ T5841] usb 2-1: config 0 descriptor?? [ 368.659332][ T5841] IPVS: starting estimator thread 0... [ 368.667500][T10318] net_ratelimit: 10 callbacks suppressed [ 368.667520][T10318] IPVS: sh: SCTP 172.20.20.187:0 - no destination available [ 369.112398][T10319] IPVS: using max 51 ests per chain, 122400 per kthread [ 369.949079][ T5887] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 370.231769][ T5887] usb 1-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 370.242108][ T5887] usb 1-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 370.264606][ T5887] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 370.294345][ T5887] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 370.553615][ T5923] usb 4-1: USB disconnect, device number 33 [ 371.947581][ T43] usb 2-1: USB disconnect, device number 30 [ 372.496996][T10355] batman_adv: batadv0: Interface deactivated: dummy0 [ 372.517244][T10355] batman_adv: batadv0: Removing interface: dummy0 [ 372.854617][ T5888] usb 1-1: USB disconnect, device number 31 [ 372.882333][T10325] delete_channel: no stack [ 374.029131][ T5908] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 374.139120][ T5887] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 374.398358][ T5908] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 374.399061][ T5887] usb 3-1: Using ep0 maxpacket: 32 [ 374.455642][ T5908] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 374.520755][ T5908] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 374.526120][ T5887] usb 3-1: config 0 has no interfaces? [ 374.529877][ T5908] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 374.533394][T10388] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 374.550908][ C1] vkms_vblank_simulate: vblank timer overrun [ 374.721987][ T5887] usb 3-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 374.756022][ T5887] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 374.773038][ T5887] usb 3-1: config 0 descriptor?? [ 374.788584][ T5908] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 375.201360][T10388] fuse: Bad value for 'fd' [ 375.237630][T10391] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 375.314054][T10391] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 375.412601][ T5887] usb 5-1: USB disconnect, device number 35 [ 375.535991][T10391] netlink: 'syz.2.1375': attribute type 180 has an invalid length. [ 375.679808][T10415] ptrace attach of "./syz-executor exec"[5836] was attempted by "./syz-executor exec"[10415] [ 375.698003][T10415] netlink: 88 bytes leftover after parsing attributes in process `syz.3.1379'. [ 375.716101][T10415] netlink: 'syz.3.1379': attribute type 21 has an invalid length. [ 375.727053][T10415] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1379'. [ 375.799278][ T30] kauditd_printk_skb: 14 callbacks suppressed [ 375.799296][ T30] audit: type=1326 audit(1759888606.961:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10407 comm="syz.0.1380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3033d8eec9 code=0x7ffc0000 [ 375.845482][T10415] netlink: 'syz.3.1379': attribute type 4 has an invalid length. [ 375.871013][T10415] netlink: 3 bytes leftover after parsing attributes in process `syz.3.1379'. [ 375.898546][ T5888] usb 3-1: USB disconnect, device number 32 [ 375.919067][ T30] audit: type=1326 audit(1759888606.961:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10407 comm="syz.0.1380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3033d8eec9 code=0x7ffc0000 [ 375.966963][ T30] audit: type=1326 audit(1759888606.961:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10407 comm="syz.0.1380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f3033d8eec9 code=0x7ffc0000 [ 376.010204][ T30] audit: type=1326 audit(1759888606.961:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10407 comm="syz.0.1380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3033d8eec9 code=0x7ffc0000 [ 376.046203][T10423] netlink: 80 bytes leftover after parsing attributes in process `syz.4.1383'. [ 376.060402][ T30] audit: type=1326 audit(1759888606.961:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10407 comm="syz.0.1380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3033d8eec9 code=0x7ffc0000 [ 376.092201][ T30] audit: type=1326 audit(1759888606.971:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10407 comm="syz.0.1380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=188 compat=0 ip=0x7f3033d8eec9 code=0x7ffc0000 [ 376.116009][ T30] audit: type=1326 audit(1759888606.971:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10407 comm="syz.0.1380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3033d8eec9 code=0x7ffc0000 [ 376.154257][T10417] batadv3: entered promiscuous mode [ 376.163456][T10417] 8021q: adding VLAN 0 to HW filter on device batadv3 [ 376.184185][T10422] fuse: Bad value for 'fd' [ 376.322042][ T30] audit: type=1326 audit(1759888606.971:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10407 comm="syz.0.1380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3033d8eec9 code=0x7ffc0000 [ 376.553170][ T30] audit: type=1326 audit(1759888606.971:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10407 comm="syz.0.1380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=189 compat=0 ip=0x7f3033d8eec9 code=0x7ffc0000 [ 376.749993][ T30] audit: type=1326 audit(1759888606.971:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10407 comm="syz.0.1380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3033d8eec9 code=0x7ffc0000 [ 377.027053][T10434] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1386'. [ 378.293104][T10461] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1394'. [ 378.303885][T10461] bridge0: port 2(bridge_slave_1) entered blocking state [ 378.311081][T10461] bridge0: port 2(bridge_slave_1) entered listening state [ 378.318461][T10461] bridge0: port 1(bridge_slave_0) entered blocking state [ 378.325604][T10461] bridge0: port 1(bridge_slave_0) entered listening state [ 378.347239][T10461] batman_adv: batadv0: Interface activated: vlan2 [ 378.713583][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.720100][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.879395][ T5908] usb 4-1: new full-speed USB device number 34 using dummy_hcd [ 378.999086][ T5946] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 379.151598][ T5946] usb 5-1: config 0 has an invalid interface number: 197 but max is 4 [ 379.160550][ T5946] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 379.182631][ T5946] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 5 [ 379.291911][ T5946] usb 5-1: config 0 has no interface number 0 [ 379.307827][ T5946] usb 5-1: config 0 interface 197 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 8 [ 379.339297][ T5946] usb 5-1: config 0 interface 197 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 379.357652][ T5946] usb 5-1: config 0 interface 197 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 379.393181][ T5946] usb 5-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=bb.42 [ 379.428896][ T5946] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 379.459148][ T5841] usb 1-1: new full-speed USB device number 32 using dummy_hcd [ 379.475510][ T5946] usb 5-1: Product: syz [ 379.484562][ T5946] usb 5-1: Manufacturer: syz [ 379.502130][ T5946] usb 5-1: SerialNumber: syz [ 379.536869][ T5946] usb 5-1: config 0 descriptor?? [ 379.551232][T10472] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 379.949682][T10472] netlink: 124 bytes leftover after parsing attributes in process `syz.4.1395'. [ 380.870980][ T30] kauditd_printk_skb: 35 callbacks suppressed [ 380.871020][ T30] audit: type=1326 audit(1759888612.051:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10487 comm="syz.2.1401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f068b78eec9 code=0x7ffc0000 [ 380.900287][ C1] vkms_vblank_simulate: vblank timer overrun [ 381.138563][ T30] audit: type=1326 audit(1759888612.051:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10487 comm="syz.2.1401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f068b78eec9 code=0x7ffc0000 [ 381.217353][ T30] audit: type=1326 audit(1759888612.051:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10487 comm="syz.2.1401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f068b78eec9 code=0x7ffc0000 [ 381.344346][T10491] pim6reg: entered allmulticast mode [ 381.382577][ T30] audit: type=1326 audit(1759888612.051:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10487 comm="syz.2.1401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f068b78eec9 code=0x7ffc0000 [ 381.526582][ T5908] usb 4-1: unable to get BOS descriptor or descriptor too short [ 381.619444][ T5908] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 381.659174][ T5908] usb 4-1: can't read configurations, error -71 [ 381.703441][ T30] audit: type=1326 audit(1759888612.051:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10487 comm="syz.2.1401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f068b78eec9 code=0x7ffc0000 [ 381.815621][ T30] audit: type=1326 audit(1759888612.061:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10487 comm="syz.2.1401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=188 compat=0 ip=0x7f068b78eec9 code=0x7ffc0000 [ 381.885584][ T30] audit: type=1326 audit(1759888612.061:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10487 comm="syz.2.1401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f068b78eec9 code=0x7ffc0000 [ 382.082081][ T30] audit: type=1326 audit(1759888612.061:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10487 comm="syz.2.1401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f068b78eec9 code=0x7ffc0000 [ 382.227399][ T30] audit: type=1326 audit(1759888612.061:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10487 comm="syz.2.1401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=189 compat=0 ip=0x7f068b78eec9 code=0x7ffc0000 [ 382.314161][ T30] audit: type=1326 audit(1759888612.061:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10487 comm="syz.2.1401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f068b78eec9 code=0x7ffc0000 [ 382.373002][ T5923] usb 5-1: USB disconnect, device number 36 [ 382.709495][ T5946] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 382.813948][ T5841] usb 1-1: unable to get BOS descriptor or descriptor too short [ 382.824897][ T5841] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 382.848837][ T5841] usb 1-1: can't read configurations, error -71 [ 382.879308][ T5946] usb 2-1: Using ep0 maxpacket: 8 [ 382.888689][ T5946] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 382.900767][ T5946] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 382.913028][ T5946] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 239, changing to 11 [ 382.930574][ T5946] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 9059, setting to 1024 [ 382.954138][ T5946] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 383.430516][ T5946] usb 2-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 383.459076][ T5946] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 383.467118][ T5946] usb 2-1: Product: syz [ 383.593880][ T5946] usb 2-1: Manufacturer: syz [ 383.634279][ T5946] usb 2-1: SerialNumber: syz [ 384.034963][ T5946] usb 2-1: config 0 descriptor?? [ 384.614295][T10521] sysfs: cannot create duplicate filename '/class/ieee80211/!' [ 384.622116][T10521] CPU: 0 UID: 0 PID: 10521 Comm: syz.1.1403 Not tainted syzkaller #0 PREEMPT(full) [ 384.622142][T10521] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 384.622158][T10521] Call Trace: [ 384.622168][T10521] [ 384.622177][T10521] dump_stack_lvl+0x189/0x250 [ 384.622208][T10521] ? __pfx_dump_stack_lvl+0x10/0x10 [ 384.622228][T10521] ? __pfx__printk+0x10/0x10 [ 384.622253][T10521] ? kernfs_path_from_node+0x2f/0x290 [ 384.622276][T10521] ? kernfs_path_from_node+0x250/0x290 [ 384.622297][T10521] ? kernfs_path_from_node+0x2f/0x290 [ 384.622323][T10521] sysfs_warn_dup+0x8e/0xa0 [ 384.622345][T10521] sysfs_do_create_link_sd+0xc0/0x110 [ 384.622369][T10521] device_add_class_symlinks+0x1cf/0x240 [ 384.622400][T10521] device_add+0x475/0xb50 [ 384.622430][T10521] wiphy_register+0x1c81/0x2aa0 [ 384.622471][T10521] ? __pfx_wiphy_register+0x10/0x10 [ 384.622493][T10521] ? minstrel_ht_alloc+0x6e0/0x7e0 [ 384.622528][T10521] ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0 [ 384.622559][T10521] ieee80211_register_hw+0x3473/0x40d0 [ 384.622601][T10521] ? ieee80211_register_hw+0x1441/0x40d0 [ 384.622638][T10521] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 384.622663][T10521] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 384.622688][T10521] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 384.622707][T10521] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 384.622735][T10521] ? __hrtimer_setup+0x187/0x210 [ 384.622754][T10521] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 384.622782][T10521] mac80211_hwsim_new_radio+0x2f7a/0x5220 [ 384.622835][T10521] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 384.622855][T10521] ? trace_kmalloc+0x1f/0xd0 [ 384.622876][T10521] ? __kmalloc_node_track_caller_noprof+0x587/0x800 [ 384.622902][T10521] ? kstrndup+0xbf/0x160 [ 384.622940][T10521] hwsim_new_radio_nl+0xf5b/0x1bd0 [ 384.622969][T10521] ? __pfx___nla_validate_parse+0x10/0x10 [ 384.623010][T10521] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 384.623040][T10521] ? rcu_is_watching+0x15/0xb0 [ 384.623065][T10521] ? __nla_parse+0x40/0x60 [ 384.623092][T10521] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 384.623126][T10521] genl_family_rcv_msg_doit+0x215/0x300 [ 384.623156][T10521] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 384.623194][T10521] ? bpf_lsm_capable+0x9/0x20 [ 384.623215][T10521] ? security_capable+0x7e/0x2e0 [ 384.623244][T10521] genl_rcv_msg+0x60e/0x790 [ 384.623274][T10521] ? __pfx_genl_rcv_msg+0x10/0x10 [ 384.623297][T10521] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 384.623319][T10521] ? __asan_memcpy+0x40/0x70 [ 384.623341][T10521] ? __pfx_ref_tracker_free+0x10/0x10 [ 384.623373][T10521] netlink_rcv_skb+0x208/0x470 [ 384.623389][T10521] ? __lock_acquire+0xab9/0xd20 [ 384.623408][T10521] ? __pfx_genl_rcv_msg+0x10/0x10 [ 384.623432][T10521] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 384.623471][T10521] ? down_read+0x1ad/0x2e0 [ 384.623502][T10521] genl_rcv+0x28/0x40 [ 384.623523][T10521] netlink_unicast+0x82c/0x9e0 [ 384.623559][T10521] ? __pfx_netlink_unicast+0x10/0x10 [ 384.623588][T10521] ? netlink_sendmsg+0x642/0xb30 [ 384.623604][T10521] ? skb_put+0x11b/0x210 [ 384.623629][T10521] netlink_sendmsg+0x805/0xb30 [ 384.623658][T10521] ? __pfx_netlink_sendmsg+0x10/0x10 [ 384.623691][T10521] ? aa_sock_msg_perm+0xf1/0x1d0 [ 384.623717][T10521] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 384.623735][T10521] ? __pfx_netlink_sendmsg+0x10/0x10 [ 384.623755][T10521] __sock_sendmsg+0x21c/0x270 [ 384.623784][T10521] ____sys_sendmsg+0x505/0x830 [ 384.623811][T10521] ? __pfx_____sys_sendmsg+0x10/0x10 [ 384.623843][T10521] ? import_iovec+0x74/0xa0 [ 384.623864][T10521] ___sys_sendmsg+0x21f/0x2a0 [ 384.623888][T10521] ? __pfx____sys_sendmsg+0x10/0x10 [ 384.623923][T10521] ? futex_wait+0x285/0x360 [ 384.623991][T10521] __x64_sys_sendmsg+0x19b/0x260 [ 384.624015][T10521] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 384.624055][T10521] ? do_syscall_64+0xbe/0xfa0 [ 384.624082][T10521] do_syscall_64+0xfa/0xfa0 [ 384.624101][T10521] ? lockdep_hardirqs_on+0x9c/0x150 [ 384.624122][T10521] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 384.624140][T10521] ? clear_bhb_loop+0x60/0xb0 [ 384.624162][T10521] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 384.624189][T10521] RIP: 0033:0x7f2c3538eec9 [ 384.624208][T10521] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 384.624224][T10521] RSP: 002b:00007f2c36193038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 384.624244][T10521] RAX: ffffffffffffffda RBX: 00007f2c355e6180 RCX: 00007f2c3538eec9 [ 384.624258][T10521] RDX: 0000000000000310 RSI: 0000200000000040 RDI: 0000000000000007 [ 384.624270][T10521] RBP: 00007f2c35411f91 R08: 0000000000000000 R09: 0000000000000000 [ 384.624282][T10521] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 384.624294][T10521] R13: 00007f2c355e6218 R14: 00007f2c355e6180 R15: 00007f2c3570fa28 [ 384.624327][T10521] [ 385.100257][ C0] vkms_vblank_simulate: vblank timer overrun [ 385.404284][T10521] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1403'. [ 385.989319][ T5841] usb 3-1: new full-speed USB device number 33 using dummy_hcd [ 388.599170][ T5946] rc_core: IR keymap rc-imon-rsc not found [ 388.610030][ T5946] Registered IR keymap rc-empty [ 388.659808][ T5946] rc rc0: iMON Station as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 388.713917][ T5946] input: iMON Station as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input14 [ 388.839250][ T5946] usb 2-1: USB disconnect, device number 31 [ 388.907761][ T5841] usb 3-1: unable to get BOS descriptor or descriptor too short [ 388.918044][ T5841] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 389.009581][ T5841] usb 3-1: can't read configurations, error -71 [ 389.387014][ T30] kauditd_printk_skb: 30 callbacks suppressed [ 389.387026][ T30] audit: type=1326 audit(1759888620.571:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10569 comm="syz.2.1419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f068b78eec9 code=0x7ffc0000 [ 389.580005][ T43] usb 1-1: new full-speed USB device number 34 using dummy_hcd [ 389.699182][ T30] audit: type=1326 audit(1759888620.571:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10569 comm="syz.2.1419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f068b78eec9 code=0x7ffc0000 [ 389.729155][ T5946] usb 2-1: new full-speed USB device number 32 using dummy_hcd [ 389.799164][ T30] audit: type=1326 audit(1759888620.571:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10569 comm="syz.2.1419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f068b78eec9 code=0x7ffc0000 [ 389.869863][ T43] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 389.892653][ T30] audit: type=1326 audit(1759888620.571:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10569 comm="syz.2.1419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f068b78eec9 code=0x7ffc0000 [ 389.929550][ T5841] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 389.989239][ T43] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 390.023985][ T43] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 390.065817][ T43] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 390.075062][ T43] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 390.088665][ T43] usb 1-1: Manufacturer: syz [ 390.096879][ T30] audit: type=1326 audit(1759888620.571:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10569 comm="syz.2.1419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f068b78eec9 code=0x7ffc0000 [ 390.126743][ T43] usb 1-1: config 0 descriptor?? [ 390.156170][ T30] audit: type=1326 audit(1759888620.571:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10569 comm="syz.2.1419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f068b78eec9 code=0x7ffc0000 [ 390.222927][ T30] audit: type=1326 audit(1759888620.981:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10569 comm="syz.2.1419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f068b78eec9 code=0x7ffc0000 [ 390.279207][ T5841] usb 3-1: device descriptor read/64, error -71 [ 390.299340][ T30] audit: type=1326 audit(1759888620.981:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10569 comm="syz.2.1419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f068b78eec9 code=0x7ffc0000 [ 390.483001][ T5841] usb usb3-port1: attempt power cycle [ 390.826805][ T116] usb 1-1: USB disconnect, device number 34 [ 391.119608][ T5841] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 391.179196][ T5841] usb 3-1: device descriptor read/8, error -71 [ 391.439592][ T5841] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 391.485688][ T5841] usb 3-1: device descriptor read/8, error -71 [ 391.620114][ T5841] usb usb3-port1: unable to enumerate USB device [ 391.685493][T10597] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1426'. [ 392.114479][ T5946] usb 2-1: unable to get BOS descriptor or descriptor too short [ 392.124751][ T5946] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 392.147000][ T5946] usb 2-1: can't read configurations, error -71 [ 392.724408][ T5841] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 392.992367][ T5841] usb 4-1: config 0 has an invalid interface number: 197 but max is 4 [ 393.001277][ T5841] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 393.033135][ T5841] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 5 [ 393.067582][ T5841] usb 4-1: config 0 has no interface number 0 [ 393.096339][ T5841] usb 4-1: config 0 interface 197 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 8 [ 393.324712][ T5841] usb 4-1: config 0 interface 197 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 393.439295][ T5841] usb 4-1: config 0 interface 197 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 394.018672][ T5841] usb 4-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=bb.42 [ 394.037131][ T5841] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 394.056103][ T5841] usb 4-1: Product: syz [ 394.064505][ T5841] usb 4-1: Manufacturer: syz [ 394.073659][ T5841] usb 4-1: SerialNumber: syz [ 394.092064][ T5841] usb 4-1: config 0 descriptor?? [ 394.102446][T10610] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 394.150734][ T116] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 394.331471][T10610] netlink: 124 bytes leftover after parsing attributes in process `syz.3.1429'. [ 394.385402][ T116] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 394.400433][ T116] usb 5-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 394.419377][ T116] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 394.443619][ T116] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 396.158583][T10655] netlink: 'syz.0.1441': attribute type 1 has an invalid length. [ 396.266317][T10657] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1441'. [ 396.377911][T10657] macvlan2: entered promiscuous mode [ 396.387391][T10657] macvlan2: entered allmulticast mode [ 396.632749][ T5887] usb 4-1: USB disconnect, device number 36 [ 396.899028][ T30] audit: type=1326 audit(1759888628.071:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10658 comm="syz.3.1442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9a3d8eec9 code=0x7ffc0000 [ 397.406473][ T30] audit: type=1326 audit(1759888628.071:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10658 comm="syz.3.1442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9a3d8eec9 code=0x7ffc0000 [ 397.561673][ T30] audit: type=1326 audit(1759888628.071:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10658 comm="syz.3.1442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7fe9a3d8eec9 code=0x7ffc0000 [ 397.613730][ T30] audit: type=1326 audit(1759888628.081:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10658 comm="syz.3.1442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9a3d8eec9 code=0x7ffc0000 [ 397.862686][ T30] audit: type=1326 audit(1759888628.081:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10658 comm="syz.3.1442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7fe9a3d8eec9 code=0x7ffc0000 [ 397.876396][T10668] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1444'. [ 397.929604][ T5887] usb 5-1: USB disconnect, device number 37 [ 397.938934][T10632] delete_channel: no stack [ 397.995597][ T30] audit: type=1326 audit(1759888628.081:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10658 comm="syz.3.1442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9a3d8eec9 code=0x7ffc0000 [ 398.192108][ T30] audit: type=1326 audit(1759888628.131:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10658 comm="syz.3.1442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=188 compat=0 ip=0x7fe9a3d8eec9 code=0x7ffc0000 [ 398.338779][ T30] audit: type=1326 audit(1759888628.131:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10658 comm="syz.3.1442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9a3d8eec9 code=0x7ffc0000 [ 398.420277][ T30] audit: type=1326 audit(1759888628.131:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10658 comm="syz.3.1442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=189 compat=0 ip=0x7fe9a3d8eec9 code=0x7ffc0000 [ 398.444446][ T116] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 398.494763][ T30] audit: type=1326 audit(1759888628.141:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10658 comm="syz.3.1442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9a3d8eec9 code=0x7ffc0000 [ 398.620701][ T116] usb 5-1: Using ep0 maxpacket: 16 [ 398.628239][ T116] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 398.666475][ T116] usb 5-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 398.681571][ T116] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 398.699371][ T116] usb 5-1: Product: syz [ 398.706007][ T116] usb 5-1: Manufacturer: syz [ 398.729816][ T116] usb 5-1: SerialNumber: syz [ 398.850919][ T116] usb 5-1: config 0 descriptor?? [ 399.042156][T10687] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1449'. [ 399.821896][ T5908] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 399.999143][ T5908] usb 3-1: Using ep0 maxpacket: 32 [ 400.033104][ T5908] usb 3-1: config 0 has no interfaces? [ 400.049261][ T116] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 400.087385][ T5908] usb 3-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 400.127479][T10702] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 400.219077][ T116] usb 1-1: config 0 has an invalid interface number: 197 but max is 4 [ 400.228130][ T116] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 400.239908][ T5908] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 400.241287][ T116] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 5 [ 400.261379][ T116] usb 1-1: config 0 has no interface number 0 [ 400.262320][ T5908] usb 3-1: config 0 descriptor?? [ 400.274467][ T116] usb 1-1: config 0 interface 197 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 8 [ 400.287657][ T116] usb 1-1: config 0 interface 197 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 400.361781][ T116] usb 1-1: config 0 interface 197 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 400.382172][ T116] usb 1-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=bb.42 [ 400.391621][ T116] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 400.399999][ T116] usb 1-1: Product: syz [ 400.404227][ T116] usb 1-1: Manufacturer: syz [ 400.509178][ T116] usb 1-1: SerialNumber: syz [ 400.512962][T10691] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 400.527183][T10691] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 400.571078][ T116] usb 1-1: config 0 descriptor?? [ 400.602808][T10697] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 400.674207][T10691] netlink: 'syz.2.1450': attribute type 180 has an invalid length. [ 400.844936][ T5841] usb 3-1: USB disconnect, device number 37 [ 400.873276][T10697] netlink: 124 bytes leftover after parsing attributes in process `syz.0.1452'. [ 401.318788][ T5908] usb 5-1: USB disconnect, device number 38 [ 402.270585][ T30] kauditd_printk_skb: 30 callbacks suppressed [ 402.270599][ T30] audit: type=1326 audit(1759888633.451:251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10733 comm="syz.2.1464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f068b78eec9 code=0x7ffc0000 [ 402.404253][ T30] audit: type=1326 audit(1759888633.451:252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10733 comm="syz.2.1464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f068b78eec9 code=0x7ffc0000 [ 402.426750][ C1] vkms_vblank_simulate: vblank timer overrun [ 402.619519][ T30] audit: type=1326 audit(1759888633.451:253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10733 comm="syz.2.1464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f068b78eec9 code=0x7ffc0000 [ 402.801866][ T30] audit: type=1326 audit(1759888633.451:254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10733 comm="syz.2.1464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f068b78eec9 code=0x7ffc0000 [ 402.953919][ T116] usb 1-1: USB disconnect, device number 35 [ 403.276693][T10746] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 403.333236][ T30] audit: type=1326 audit(1759888633.451:255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10733 comm="syz.2.1464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f068b78eec9 code=0x7ffc0000 [ 403.477500][ T30] audit: type=1326 audit(1759888633.461:256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10733 comm="syz.2.1464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=188 compat=0 ip=0x7f068b78eec9 code=0x7ffc0000 [ 403.865617][ T30] audit: type=1326 audit(1759888633.461:257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10733 comm="syz.2.1464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f068b78eec9 code=0x7ffc0000 [ 403.993692][ T30] audit: type=1326 audit(1759888633.461:258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10733 comm="syz.2.1464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f068b78eec9 code=0x7ffc0000 [ 404.139593][ T30] audit: type=1326 audit(1759888633.461:259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10733 comm="syz.2.1464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=189 compat=0 ip=0x7f068b78eec9 code=0x7ffc0000 [ 404.162383][ T5887] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 404.251675][ T30] audit: type=1326 audit(1759888633.461:260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10733 comm="syz.2.1464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f068b78eec9 code=0x7ffc0000 [ 404.371358][ T5887] usb 5-1: Using ep0 maxpacket: 16 [ 404.400291][ T5887] usb 5-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 404.409894][ T5887] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 404.422189][ T5887] usb 5-1: Product: syz [ 404.426464][ T5887] usb 5-1: Manufacturer: syz [ 404.468707][ T5887] usb 5-1: SerialNumber: syz [ 404.476870][ T5887] usb 5-1: config 0 descriptor?? [ 405.012404][ T5887] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 405.030884][ T5887] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 405.121102][ T5887] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 405.139066][ T5887] usb 5-1: media controller created [ 405.573351][ T5887] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 405.724894][ T5887] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 405.738219][ T5887] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 406.209141][ T5887] usb 3-1: new full-speed USB device number 38 using dummy_hcd [ 406.384392][ T5887] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 406.397661][ T5887] usb 3-1: config 0 has no interface number 0 [ 406.411209][ T5887] usb 3-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 406.422050][ T5887] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 406.442288][ T5887] usb 3-1: config 0 descriptor?? [ 406.458865][ T5887] usb 3-1: selecting invalid altsetting 1 [ 406.465272][ T5887] dvb_ttusb_budget: ttusb_init_controller: error [ 406.472234][ T5887] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 406.689127][T10790] ------------[ cut here ]------------ [ 406.694927][T10790] usb 5-1: BOGUS control dir, pipe 80002780 doesn't match bRequestType c0 [ 406.722722][T10790] WARNING: CPU: 0 PID: 10790 at drivers/usb/core/urb.c:414 usb_submit_urb+0x114d/0x18b0 [ 406.732919][T10790] Modules linked in: [ 406.737373][T10790] CPU: 0 UID: 0 PID: 10790 Comm: syz.2.1482 Not tainted syzkaller #0 PREEMPT(full) [ 406.747088][T10790] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 406.757463][T10790] RIP: 0010:usb_submit_urb+0x114d/0x18b0 [ 406.763375][T10790] Code: df 0f b6 44 05 00 84 c0 0f 85 2a 06 00 00 45 0f b6 45 00 48 c7 c7 00 72 12 8c 48 8b 34 24 4c 89 fa 44 89 f1 e8 24 6f 89 fa 90 <0f> 0b 90 90 49 bf 00 00 00 00 00 fc ff df e9 95 f2 ff ff 89 e9 80 [ 406.783080][T10790] RSP: 0018:ffffc9001adff800 EFLAGS: 00010246 [ 406.789224][T10790] RAX: 6a0752b1609dbb00 RBX: ffff88802589e000 RCX: 0000000000080000 [ 406.797240][T10790] RDX: ffffc9000f0d1000 RSI: 000000000000569a RDI: 000000000000569b [ 406.805371][T10790] RBP: 1ffff11006600080 R08: 0000000000000003 R09: 0000000000000004 [ 406.813610][T10790] R10: dffffc0000000000 R11: fffffbfff1bfa658 R12: ffff888077c4d100 [ 406.821817][T10790] R13: ffff888033000400 R14: 0000000080002780 R15: ffff88807b560e00 [ 406.829854][T10790] FS: 00007f06899f66c0(0000) GS:ffff888125d12000(0000) knlGS:0000000000000000 [ 406.838808][T10790] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 406.845622][T10790] CR2: 00002000002b1030 CR3: 0000000052518000 CR4: 00000000003526f0 [ 406.853683][T10790] Call Trace: [ 406.856200][T10797] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 406.856976][T10790] [ 406.868342][T10790] usb_start_wait_urb+0x114/0x4c0 [ 406.873659][T10790] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 406.879808][T10790] usb_control_msg+0x232/0x3e0 [ 406.884869][T10790] dtv5100_i2c_msg+0x250/0x330 [ 406.889732][T10790] dtv5100_i2c_xfer+0x269/0x3c0 [ 406.894616][T10790] __i2c_transfer+0x871/0x2170 [ 406.899502][T10790] ? preempt_schedule_thunk+0x16/0x30 [ 406.904893][T10790] ? __pfx___i2c_transfer+0x10/0x10 [ 406.910260][T10790] ? rt_mutex_lock_nested+0x15e/0x1e0 [ 406.915650][T10790] ? i2c_transfer+0x120/0x3a0 [ 406.920458][T10790] i2c_transfer+0x25b/0x3a0 [ 406.924987][T10790] ? __pfx_i2c_transfer+0x10/0x10 [ 406.930189][T10790] ? _copy_from_user+0x94/0xb0 [ 406.934963][T10790] i2cdev_ioctl_rdwr+0x460/0x740 [ 406.939976][T10790] i2cdev_ioctl+0x64b/0x7f0 [ 406.944490][T10790] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 406.949823][T10790] ? __fget_files+0x3a0/0x420 [ 406.954503][T10790] ? __fget_files+0x2a/0x420 [ 406.959177][T10790] ? bpf_lsm_file_ioctl+0x9/0x20 [ 406.964124][T10790] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 406.969209][T10790] __se_sys_ioctl+0xfc/0x170 [ 406.973807][T10790] do_syscall_64+0xfa/0xfa0 [ 406.978300][T10790] ? lockdep_hardirqs_on+0x9c/0x150 [ 406.983557][T10790] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 406.989654][T10790] ? clear_bhb_loop+0x60/0xb0 [ 406.994331][T10790] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 407.000636][T10790] RIP: 0033:0x7f068b78eec9 [ 407.005087][T10790] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 407.024800][T10790] RSP: 002b:00007f06899f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 407.033386][T10790] RAX: ffffffffffffffda RBX: 00007f068b9e6180 RCX: 00007f068b78eec9 [ 407.041474][T10790] RDX: 0000200000000a40 RSI: 0000000000000707 RDI: 0000000000000008 [ 407.049498][T10790] RBP: 00007f068b811f91 R08: 0000000000000000 R09: 0000000000000000 [ 407.057547][T10790] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 407.065566][T10790] R13: 00007f068b9e6218 R14: 00007f068b9e6180 R15: 00007f068bb0fa28 [ 407.073571][T10790] [ 407.076595][T10790] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 407.083856][T10790] CPU: 0 UID: 0 PID: 10790 Comm: syz.2.1482 Not tainted syzkaller #0 PREEMPT(full) [ 407.093215][T10790] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 407.103395][T10790] Call Trace: [ 407.106775][T10790] [ 407.109697][T10790] dump_stack_lvl+0x99/0x250 [ 407.114272][T10790] ? __asan_memcpy+0x40/0x70 [ 407.118847][T10790] ? __pfx_dump_stack_lvl+0x10/0x10 [ 407.124040][T10790] ? __pfx__printk+0x10/0x10 [ 407.128624][T10790] vpanic+0x237/0x6d0 [ 407.132616][T10790] ? __pfx_vpanic+0x10/0x10 [ 407.137113][T10790] panic+0xb9/0xc0 [ 407.140818][T10790] ? __pfx_panic+0x10/0x10 [ 407.145221][T10790] __warn+0x31b/0x4b0 [ 407.149201][T10790] ? usb_submit_urb+0x114d/0x18b0 [ 407.154211][T10790] ? usb_submit_urb+0x114d/0x18b0 [ 407.159217][T10790] report_bug+0x2be/0x4f0 [ 407.163531][T10790] ? usb_submit_urb+0x114d/0x18b0 [ 407.168532][T10790] ? usb_submit_urb+0x114d/0x18b0 [ 407.173531][T10790] ? usb_submit_urb+0x114f/0x18b0 [ 407.178538][T10790] handle_bug+0x84/0x160 [ 407.182766][T10790] exc_invalid_op+0x1a/0x50 [ 407.187428][T10790] asm_exc_invalid_op+0x1a/0x20 [ 407.192257][T10790] RIP: 0010:usb_submit_urb+0x114d/0x18b0 [ 407.197867][T10790] Code: df 0f b6 44 05 00 84 c0 0f 85 2a 06 00 00 45 0f b6 45 00 48 c7 c7 00 72 12 8c 48 8b 34 24 4c 89 fa 44 89 f1 e8 24 6f 89 fa 90 <0f> 0b 90 90 49 bf 00 00 00 00 00 fc ff df e9 95 f2 ff ff 89 e9 80 [ 407.217462][T10790] RSP: 0018:ffffc9001adff800 EFLAGS: 00010246 [ 407.223543][T10790] RAX: 6a0752b1609dbb00 RBX: ffff88802589e000 RCX: 0000000000080000 [ 407.231503][T10790] RDX: ffffc9000f0d1000 RSI: 000000000000569a RDI: 000000000000569b [ 407.239471][T10790] RBP: 1ffff11006600080 R08: 0000000000000003 R09: 0000000000000004 [ 407.247434][T10790] R10: dffffc0000000000 R11: fffffbfff1bfa658 R12: ffff888077c4d100 [ 407.255386][T10790] R13: ffff888033000400 R14: 0000000080002780 R15: ffff88807b560e00 [ 407.263360][T10790] usb_start_wait_urb+0x114/0x4c0 [ 407.268396][T10790] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 407.273934][T10790] usb_control_msg+0x232/0x3e0 [ 407.278785][T10790] dtv5100_i2c_msg+0x250/0x330 [ 407.283545][T10790] dtv5100_i2c_xfer+0x269/0x3c0 [ 407.288392][T10790] __i2c_transfer+0x871/0x2170 [ 407.293137][T10790] ? preempt_schedule_thunk+0x16/0x30 [ 407.298499][T10790] ? __pfx___i2c_transfer+0x10/0x10 [ 407.303680][T10790] ? rt_mutex_lock_nested+0x15e/0x1e0 [ 407.309039][T10790] ? i2c_transfer+0x120/0x3a0 [ 407.313702][T10790] i2c_transfer+0x25b/0x3a0 [ 407.318211][T10790] ? __pfx_i2c_transfer+0x10/0x10 [ 407.323242][T10790] ? _copy_from_user+0x94/0xb0 [ 407.327991][T10790] i2cdev_ioctl_rdwr+0x460/0x740 [ 407.332920][T10790] i2cdev_ioctl+0x64b/0x7f0 [ 407.337498][T10790] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 407.342599][T10790] ? __fget_files+0x3a0/0x420 [ 407.347352][T10790] ? __fget_files+0x2a/0x420 [ 407.352108][T10790] ? bpf_lsm_file_ioctl+0x9/0x20 [ 407.357032][T10790] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 407.362040][T10790] __se_sys_ioctl+0xfc/0x170 [ 407.366616][T10790] do_syscall_64+0xfa/0xfa0 [ 407.371117][T10790] ? lockdep_hardirqs_on+0x9c/0x150 [ 407.376296][T10790] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 407.382344][T10790] ? clear_bhb_loop+0x60/0xb0 [ 407.387017][T10790] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 407.392897][T10790] RIP: 0033:0x7f068b78eec9 [ 407.397316][T10790] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 407.417000][T10790] RSP: 002b:00007f06899f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 407.425762][T10790] RAX: ffffffffffffffda RBX: 00007f068b9e6180 RCX: 00007f068b78eec9 [ 407.433738][T10790] RDX: 0000200000000a40 RSI: 0000000000000707 RDI: 0000000000000008 [ 407.441707][T10790] RBP: 00007f068b811f91 R08: 0000000000000000 R09: 0000000000000000 [ 407.449763][T10790] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 407.457727][T10790] R13: 00007f068b9e6218 R14: 00007f068b9e6180 R15: 00007f068bb0fa28 [ 407.465742][T10790] [ 407.469101][T10790] Kernel Offset: disabled [ 407.473451][T10790] Rebooting in 86400 seconds..