last executing test programs: 15.718128991s ago: executing program 4 (id=546): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) pipe2$watch_queue(0x0, 0x80) socket$inet6(0xa, 0x2, 0x0) r2 = memfd_create(&(0x7f0000000480)='[\v\xdbX\xae[5\xa9\x90\xffc\x1f\x1a\xa9\xfd\xfa\xad\xd1md\xe7\xe2\x7f\x9b\xd5R\x10\xf3\xb6\xffT\xbf\xd1\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\x9fc\xda\xa9\x83r\xd8\x98\x00\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9', 0x0) write$binfmt_script(r2, &(0x7f0000000200)={'#! ', './file0', [{0x20, ':,'}, {0x20, '\x00'}]}, 0x10) execveat(r2, 0x0, 0x0, 0x0, 0x1000) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYBLOB=',rootmode=0000000000000', @ANYRESDEC=0x0, @ANYRESDEC=0x0, @ANYBLOB=','], 0x3e, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000020c0)="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", 0x2000, &(0x7f0000000700)={&(0x7f00000005c0)={0x50, 0x0, 0x10, {0x7, 0x2b, 0x7ff7ffff, 0x2188000a, 0x2, 0x6, 0xe9f, 0xffffffff, 0x0, 0x0, 0x0, 0x102}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000060c0)="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", 0x2000, &(0x7f0000001e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000e80)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x10) ioctl$KVM_SET_IRQCHIP(r5, 0x4020aeb2, &(0x7f0000000300)={0x0, 0x12c, @ioapic={0x54000, 0x3, 0x7, 0x1, 0x0, [{0x9, 0x4, 0xe, '\x00', 0x3}, {0x1a, 0xf, 0x31, '\x00', 0xbc}, {0x40, 0x2, 0x8, '\x00', 0x9}, {0x4, 0x5, 0x1f, '\x00', 0x9}, {0x0, 0x4, 0x3, '\x00', 0x3}, {0x0, 0x0, 0x9, '\x00', 0xf}, {0x8d, 0x7, 0xfe, '\x00', 0x7}, {0x10, 0x2}, {0x9, 0x3, 0x40, '\x00', 0x40}, {0x9, 0x6, 0x7f, '\x00', 0x7}, {0x3, 0x4, 0x0, '\x00', 0xba}, {0x7, 0xe, 0x5, '\x00', 0x80}, {0x8, 0x2, 0x43, '\x00', 0x3}, {0x0, 0x9, 0x8, '\x00', 0x3}, {0x7, 0x55, 0x1, '\x00', 0x8}, {0x7, 0xfe, 0xd, '\x00', 0x6}, {0x0, 0x4, 0x6, '\x00', 0x9}, {0x8, 0xff, 0x4, '\x00', 0x4}, {0xff, 0x6, 0x2, '\x00', 0x5}, {0x8, 0x9, 0x9, '\x00', 0x45}, {0x2, 0x9, 0x8, '\x00', 0x9f}, {0x4, 0x8, 0xff, '\x00', 0x2}, {0xc5, 0xc, 0x7, '\x00', 0x3}, {0x0, 0x6, 0x3, '\x00', 0x5}]}}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f000001fec0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000001d600)={0x90, 0x0, 0x5, {0x4, 0x3, 0x7ff, 0x6, 0x96, 0x2, {0x6, 0x800, 0x8, 0x4, 0x5, 0x1, 0xff, 0x4, 0x3, 0x6000, 0x5, 0x0, 0x0, 0x3119, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) renameat2(0xffffffffffffff9c, &(0x7f0000000440)='./file7\x00', r3, &(0x7f0000000480)='./file0\x00', 0x4) 14.575283208s ago: executing program 4 (id=549): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) syz_clone3(&(0x7f0000000140)={0x4000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000800)=""/90}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000001c0)={0x2, 0x0, [{0x0, 0x80, &(0x7f0000000940)=""/128}, {0x1, 0x1000, &(0x7f0000000a80)=""/4096}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000340)=0x1) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000380)={0x0, 0x3ff, 0x5}) socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvfrom$inet6(0xffffffffffffffff, 0x0, 0x0, 0x10001, &(0x7f0000000140)={0xa, 0x4e23, 0x100, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7fffffff}, 0x1c) connect$unix(r2, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r4, 0x84, 0x71, 0x0, 0x0) sendto$inet6(r4, &(0x7f0000847fff)='X', 0xffe4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x1, 0x40, 0x1, 0xb49, 0x9, 0x8, 0x0, 0x6}, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f00000000c0), 0x0) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) ioctl$BLKTRACESETUP(r5, 0xc0481273, &(0x7f0000000b40)={'\x00', 0x8, 0x530, 0xc, 0xfffffffffffffffd, 0x59c}) ioctl$SG_BLKTRACETEARDOWN(r5, 0x1276, 0x20000000) r6 = openat$kvm(0xffffffffffffff9c, 0x0, 0x101000, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) 14.161674418s ago: executing program 1 (id=551): syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000970e5b4035121800eef0000000010902120001000000000904"], 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x130}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r3 = io_uring_setup(0x4630, &(0x7f0000000200)={0x0, 0x6292, 0x1000, 0x3, 0x151}) io_uring_enter(r3, 0x3950, 0xb1e2, 0x0, &(0x7f0000000180)={[0x3, 0x5f2]}, 0x8) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x2642, 0x0) writev(r4, &(0x7f0000000440)=[{&(0x7f0000000140)="93d90400000300", 0x7}, {&(0x7f0000000100)="0000d2bbad5c10", 0x7}], 0x2) r5 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x45e, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x40, 0x11, "", [{{0x9, 0x4, 0x0, 0x0, 0x82, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x6ffd, 0x10, 0x1, {0x22, 0xeb}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0xfc, 0x0, 0xb6}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io$hid(r5, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) 12.66205789s ago: executing program 1 (id=554): socket$inet6(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) syz_usb_connect(0x0, 0x36, 0x0, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) r2 = socket$tipc(0x1e, 0x5, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc0000001900010000000000000000002001", @ANYRES32=0x0, @ANYRES32], 0xfc}}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=@migrate={0x138, 0x21, 0x1, 0x0, 0x4, {{@in6=@mcast1, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@migrate={0xe8, 0x11, [{@in=@multicast1, @in=@local, @in6=@private2, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x33, 0x4, 0x0, 0x34ff, 0x2, 0x2}, {@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in6=@dev={0xfe, 0x80, '\x00', 0x35}, @in=@local, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x3c, 0x0, 0x0, 0x0, 0xa, 0x8}, {@in=@private=0xa010102, @in6=@empty, @in=@local, @in6=@dev={0xfe, 0x80, '\x00', 0x3f}, 0x3c, 0x0, 0x0, 0x3505, 0x2, 0xa}]}]}, 0x138}}, 0x0) bind$tipc(r2, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, 0x0, 0x0) r5 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r5, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x5}}, 0x10) syz_usb_connect$cdc_ncm(0x3, 0x0, 0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r6, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r6, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) sendmsg$NFNL_MSG_CTHELPER_NEW(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x20008041}, 0xc000041) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x2, &(0x7f0000000e80)=@gcm_256={{0x303, 0x36}, "437e509e2d2800", "8b3de2aabceef2a0640000d5a66fd32f419e59f3000000000400", "7d939a3c"}, 0x38) write(0xffffffffffffffff, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) 10.704276331s ago: executing program 4 (id=558): r0 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x1, 0x401, 0x0, 0xa9, 0x8000000000000000, 0x8, 0x7, 0x8000003}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, 0x0}) pipe2$watch_queue(0x0, 0x80) openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) shmctl$IPC_RMID(0x0, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x20, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) flock(r0, 0x2) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/meminfo\x00', 0x0, 0x0) read$FUSE(r3, &(0x7f0000000180)={0x2020}, 0x2020) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000040), 0xe09) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c0000001800dd8d000000000000000002000000000000050400000006001500050000002800168024000100010000dd"], 0x4c}}, 0x0) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, 0x0) 8.475319184s ago: executing program 1 (id=561): r0 = socket$inet_smc(0x2b, 0x1, 0x0) mbind(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1, 0x0, 0x7797, 0x3) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) accept4(r0, 0x0, 0x0, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180), 0x48) r4 = socket$can_bcm(0x1d, 0x2, 0x2) recvmsg$can_bcm(r4, &(0x7f0000001700)={&(0x7f0000000380)=@sco={0x1f, @fixed}, 0xffffffffffffff8c, &(0x7f0000000540)=[{&(0x7f0000001740)=""/4110, 0x100e}, {&(0x7f0000000240)=""/49, 0x31}, {&(0x7f0000000680)=""/156, 0x9c}, {&(0x7f00000004c0)=""/109, 0x6d}], 0x4, &(0x7f0000001680)=""/98, 0x62}, 0x100) unshare(0x2c060000) r5 = syz_open_dev$vim2m(&(0x7f0000000080), 0x3fe, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f0000000580)={0x1, @vbi={0x3, 0x100, 0x0, 0x3231564e, [0x101, 0x9], [0x1fe, 0x101], 0x13a}}) ptrace$PTRACE_GETSIGMASK(0x420a, r2, 0x8, &(0x7f00000002c0)) unshare(0x24020400) symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00') openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0/file0/..\x00', &(0x7f0000000080)={0x200000, 0x0, 0x10}, 0x18) bpf$BPF_GET_MAP_INFO(0x3, &(0x7f0000000080)={r3, 0x58, &(0x7f0000000300)}, 0x10) openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/bus/input/devices\x00', 0x0, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f00000005c0)='syz_tun\x00', 0x10) sendto$inet(r6, 0x0, 0x0, 0x24000840, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) syz_emit_ethernet(0x3a, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb08004504002c0002000000069078ac1414bbac1414aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="0200"/12], 0x0) 8.205986832s ago: executing program 4 (id=564): socketpair$tipc(0x1e, 0x5, 0x0, 0x0) syz_open_dev$vim2m(&(0x7f0000000580), 0x0, 0x2) socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x79af, 0x8, 0x0, 0x272}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x40000, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0x3, 0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x15, 0x2, {{0x6, 0x6b7, 0x80, 0x0, 0x5, 0x91b1}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000400}, 0x24000000) sendmmsg$sock(0xffffffffffffffff, 0x0, 0x0, 0x4) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) r5 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r5, &(0x7f0000000100)={0xa, 0x0, 0x0, @private1, 0x200000}, 0x1c) sendto$inet6(r5, &(0x7f00000001c0), 0x0, 0x80, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @private2}, 0x1c) shutdown(r5, 0x1) syz_io_uring_submit(r3, r4, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r5, 0x0, &(0x7f0000000200)='(', 0x1, 0x10, 0x1}) io_uring_enter(r2, 0x627, 0x4c1, 0x43, 0x0, 0x0) 8.038403287s ago: executing program 2 (id=565): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$key(0xf, 0x3, 0x2) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r1, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) r3 = accept4(r1, 0x0, 0x0, 0x0) sendto(r3, &(0x7f00000001c0)="4821c5eaf3bb85c04b8c64f61f3d79c75f16db859c703b726946d0b0d24748c80cc4e6544859a4779a615dfe39819a5ca43a6c57c6688008b4f3705a50ca07f29a447bf54ff4c3", 0xfffffffffffffffb, 0x8040, 0x0, 0x0) recvmmsg(r2, &(0x7f0000005cc0)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000000c0)=""/71, 0x47}], 0x1}, 0x200}], 0x1, 0x102, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000780)=ANY=[@ANYBLOB="020300090d000000000000000000000005000800000100005185e88789fb365ea4153dfccb0dcd386f714e690ee8b855e9145f9055bbc675010015004e230000020013000700000029bd700002350000030017000000000002004e24e00000020000000000000000d955d2102921a3557e908c3f68fd8520c05e75ff4893e361518ec77374d9b3a91a69875beb693ccc48337ef822b96b38b800fcffffffffffff047843079431ec777e4b460ece49f6f71922f26f3b751cc10d5a3f0f529987"], 0x68}, 0x1, 0x7}, 0x800) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x400002f) ioctl$KVM_TDX_INIT_VM(r4, 0xc004aeba, &(0x7f0000000740)={0x1, 0x0, &(0x7f0000000500)={0x40000000, 0x200, [0x80000000, 0x6d, 0x80000001, 0x50741ce6, 0x800, 0x7f], [0x9, 0xfffffffffffffffd, 0xfffffffffffffe01, 0x9, 0xd1db], [0x6, 0x1, 0x2, 0x1, 0x1, 0x70], '\x00', {0x7, 0x0, [{0x80000007, 0x3, 0xc, 0x4, 0x2, 0x1}, {0x0, 0x4, 0x2, 0xdd3, 0x40, 0x101, 0x3df91c5a}, {0x80000000, 0x3, 0x4, 0x9, 0x87, 0x7, 0x4}, {0x40000000, 0x1, 0x4, 0x7, 0xd9, 0x3ff, 0xe}, {0x1, 0x6, 0x0, 0x5, 0xcd58, 0x1, 0x4800}, {0x40000000, 0xffffffab, 0x5, 0x6, 0x5, 0x80000000, 0x9}, {0x80000019, 0x4, 0x5, 0xb0b, 0x2, 0xae4, 0x1}]}}}) socket$vsock_stream(0x28, 0x1, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) mremap(&(0x7f0000ffa000/0x3000)=nil, 0x1000000000000, 0x1000000000000, 0x0, &(0x7f0000ffa000/0x4000)=nil) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KDSKBENT(0xffffffffffffffff, 0x4b47, &(0x7f0000000080)={0x3, 0x40, 0x4}) bind$inet6(r6, &(0x7f0000000000)={0xa, 0x4e20, 0x85, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x4}, 0x1c) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) setsockopt$inet6_tcp_TCP_MD5SIG(r6, 0x6, 0x20, &(0x7f0000000000)={@in={{0x2, 0x4e21, @broadcast}}, 0x0, 0x0, 0x3a, 0x0, "a30b3b28af4d2f246a016542daa845f387713f4048ff2ece1e75f1fc0100f41e4de6256109383664417165bba0dd5ace522fa788000000000033035551502f07b4001a00"}, 0xd8) bind$inet6(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2, 0x0, &(0x7f0000000340)) ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4040aea0, &(0x7f0000000240)=@x86={0x0, 0xe, 0x3, 0x0, 0x1, 0x4, 0xee, 0x5e, 0x3, 0x4, 0x2, 0x0, 0x0, 0x76, 0x7, 0x7, 0x4, 0x5, 0x5, '\x00', 0x25, 0x7}) r7 = syz_usb_connect(0x0, 0x24, &(0x7f0000001040)=ANY=[@ANYBLOB="1201000040154220a9055015bbe4010203010902120001000000000904"], 0x0) syz_usb_connect$uac2(0x2, 0x147, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000300000020ca15010140000102030109023501030105e000080b02000101204009040000000101200009240107000650000913240d010000eaf6eaf3438bd03400000001000b2407060000060000020007240c070a03060f24070304000300000200030000000c240304010101038001010b07240405066c0a0904010000010220000904010101010220000a2402020300ff7f080c10240102ff02030000000e00000000bb0c240201080108070f4485b70a2402020600fd1c0904092402010702a380f70905010920ed070307082501000308020009840200000102200009040201010102200006240201017f06240201040210240101080001000000081000800012102401ff010101100000000104000005102401030903021000000942070000071024020208000500055416bdd4f93edd09058209ff01f71005082501013c070400"], 0x0) syz_usb_control_io$uac1(r7, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r7, &(0x7f0000000140)={0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="000cc7000000c7036b1dbcd4e72c3ee5ca4a8b1d82091b02aad162cb34376f582b9513c5317da6adba37e0d34a806b56c3c79b49523d3f09882206b6767e8f0b7a36abfe2b2ba0804d3942c98747cbf49966621c89b7c7c53bfe9a3f81f60c4d7be8d6765304f920afbdbe292c1fcefa4b0835da407e75b38b49b844f258e5fb2a8ef5a0bc58fce6e946836f9b09c5746fea941638dffeb8c386de8261a066d03939209d1358a56bd5eca606bac1bed8e65031b0f20b702fa231d627c41329f1a03211b8942260e48c547c0d3d"], &(0x7f0000000100)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000280)={0x10, &(0x7f00000002c0)=ANY=[], &(0x7f0000000180)={0x0, 0xa, 0x1, 0x7f}, &(0x7f0000000240)={0x0, 0x8, 0x1, 0x80}}) 7.358615396s ago: executing program 1 (id=568): socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000140)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$USBDEVFS_REAPURBNDELAY(0xffffffffffffffff, 0x4004550c, 0x0) openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r4 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r4, 0x402, 0x8000003d) mkdir(&(0x7f00000000c0)='./file0\x00', 0x16) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x414801, 0x488) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r5, &(0x7f0000000a00)=[{{&(0x7f0000000240)={0xa, 0x4e20, 0xc52, @local, 0x4}, 0x1c, &(0x7f0000000200)=[{&(0x7f0000000000)="001036ffbd0a077c617f9c475f9526f9f1ce", 0x12}], 0x1}}], 0x1, 0x4000841) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000008b40)={0x34, 0x40, 0x1, 0x7fffc, 0x4, {0x1}, [@nested={0x4, 0x48}, @nested={0x10, 0x1, 0x0, 0x1, [@nested={0xc, 0x10, 0x0, 0x1, [@typed={0x5, 0xb, 0x0, 0x0, @str='\x00'}]}]}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x34}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r6, 0xffffffffffffffff, 0x0) 6.54235913s ago: executing program 4 (id=571): socket$inet6(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) syz_usb_connect(0x0, 0x36, 0x0, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) r2 = socket$tipc(0x1e, 0x5, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc0000001900010000000000000000002001", @ANYRES32=0x0, @ANYRES32], 0xfc}}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=@migrate={0x138, 0x21, 0x1, 0x0, 0x4, {{@in6=@mcast1, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@migrate={0xe8, 0x11, [{@in=@multicast1, @in=@local, @in6=@private2, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x33, 0x4, 0x0, 0x34ff, 0x2, 0x2}, {@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in6=@dev={0xfe, 0x80, '\x00', 0x35}, @in=@local, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x3c, 0x0, 0x0, 0x0, 0xa, 0x8}, {@in=@private=0xa010102, @in6=@empty, @in=@local, @in6=@dev={0xfe, 0x80, '\x00', 0x3f}, 0x3c, 0x0, 0x0, 0x3505, 0x2, 0xa}]}]}, 0x138}}, 0x0) bind$tipc(r2, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, 0x0, 0x0) r5 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r5, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x5}}, 0x10) syz_usb_connect$cdc_ncm(0x3, 0x0, 0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r6, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r6, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) sendmsg$NFNL_MSG_CTHELPER_NEW(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x20008041}, 0xc000041) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x2, &(0x7f0000000e80)=@gcm_256={{0x303, 0x36}, "437e509e2d2800", "8b3de2aabceef2a0640000d5a66fd32f419e59f3000000000400", "7d939a3c"}, 0x38) write(0xffffffffffffffff, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) 5.667550664s ago: executing program 1 (id=572): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) r1 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000280)=ANY=[@ANYBLOB="1b00000000000000000020000000000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x14, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000d73f00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000d000000850000008200000095", @ANYRESHEX], 0x0, 0x4, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) r2 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_DEVICE_INFO(r2, 0xc1007c00, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5b5d}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @empty}]}]}, @IFLA_ALT_IFNAME={0x14, 0x35, 'bridge0\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000180)=r3, 0x4) sendmsg$inet(r5, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f00000002c0)={'ip6_vti0\x00', &(0x7f0000000300)=@ethtool_rxnfc={0x2f, 0x2, 0x6, {0xe, @usr_ip6_spec={@empty, @dev={0xfe, 0x80, '\x00', 0x24}, 0xfffffff8, 0x3d, 0xe}, {0x0, @remote, 0xe, 0x4, [0x7, 0x6]}, @ah_ip4_spec={@remote, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x5}, {0x0, @broadcast, 0x8, 0x5, [0xf, 0x9]}, 0xff, 0x3}}}) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r8, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0xc080) sendmsg$NL80211_CMD_ASSOCIATE(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={0x3c, r9, 0x1, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_USE_MFP={0x8}, @NL80211_ATTR_PREV_BSSID={0xa}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0xc00) r11 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000041436120410e5150e8d5000000010902f98a5c01000000090401001186eee200090582"], 0x0) syz_usb_control_io$sierra_net(r11, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r7, 0x0, &(0x7f0000000040)={{0x77359400}}, 0x0) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r1, 0x8008f512, &(0x7f0000000200)) io_uring_enter(0xffffffffffffffff, 0x234f, 0xb1e6, 0x1, 0x0, 0x0) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_GET(r12, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="01002dbd7000000000002e000000180001801400020064756d6d793000"], 0x2c}}, 0x0) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r12, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x70, r9, 0x10, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r10}, @val={0xc, 0x99, {0xb25, 0x15}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}]}, 0x70}, 0x1, 0x0, 0x0, 0x20004840}, 0x8000) read$hidraw(0xffffffffffffffff, 0x0, 0x0) 5.135559284s ago: executing program 0 (id=573): socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000140)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$USBDEVFS_REAPURBNDELAY(0xffffffffffffffff, 0x4004550c, 0x0) openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r4 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r4, 0x402, 0x8000003d) mkdir(&(0x7f00000000c0)='./file0\x00', 0x16) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x414801, 0x488) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000008b40)={0x34, 0x40, 0x1, 0x7fffc, 0x4, {0x1}, [@nested={0x4, 0x48}, @nested={0x10, 0x1, 0x0, 0x1, [@nested={0xc, 0x10, 0x0, 0x1, [@typed={0x5, 0xb, 0x0, 0x0, @str='\x00'}]}]}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x34}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r5, 0xffffffffffffffff, 0x0) 4.953977669s ago: executing program 2 (id=574): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4) recvmmsg(r0, &(0x7f0000002240)=[{{0x0, 0x0, 0x0}, 0x7}], 0x1, 0x40000000, 0x0) (fail_nth: 1) syz_emit_ethernet(0x2a, &(0x7f0000000340)={@local, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x8}}}}}, 0x0) 4.374780818s ago: executing program 2 (id=576): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x26e1, 0x0) close(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$rtc(&(0x7f0000000140), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x1, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3e}, 0x1c) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000540)={0x24, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x6, 0xfffa}, 0x102b, [0x8000, 0xc95a, 0xffffdff3, 0x1, 0x80, 0x6, 0x3, 0x7f, 0x6, 0x4d, 0x39cc191a, 0x5f, 0x9, 0xfffffff7, 0x0, 0xffffff01, 0x6, 0x3, 0x800, 0x5, 0x4, 0x7, 0x4, 0x3c5b, 0x1, 0x24, 0x9, 0x1, 0x1f461e2c, 0x2, 0xe661, 0x4, 0x7, 0x3, 0x7fff, 0x4c74, 0x101, 0x242, 0xc, 0xe, 0x0, 0x71, 0x7, 0x7, 0x3, 0x2, 0x8005, 0x3f, 0x8f, 0x6, 0x6, 0x0, 0x5, 0x4, 0x3, 0x0, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0xffff, 0x12f, 0x8000, 0x10, 0xfffffff3, 0x529432e6, 0x9, 0xf9, 0xd, 0x2c1, 0x6c9, 0x9, 0xfffffffc, 0x3, 0x0, 0x7, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x9, 0x3, 0x3, 0x8000, 0xa, 0x3ff, 0x401, 0x6, 0x5, 0x8, 0x5, 0x10005, 0x5f31, 0x4, 0x0, 0x2, 0x2, 0xb, 0x4, 0x9, 0x1000008, 0x9, 0x6, 0x7, 0x28, 0x1, 0xfe000000, 0xffff, 0x2, 0x6, 0x9, 0x3ff, 0x3, 0x8, 0x1, 0x3, 0x3, 0x9, 0x48c93690, 0x12000000, 0x2], [0x100007, 0x4, 0x7, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0x2, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x8, 0x8, 0x86, 0x10000003, 0x1000, 0x3e7, 0x9, 0x5, 0x2, 0x9, 0x5, 0x8, 0x4, 0x6d01, 0x5, 0x38, 0x800003, 0x200, 0x80, 0x83, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x8, 0x5, 0x6, 0x2ac8, 0xbf, 0x2, 0x3, 0x7ff, 0xfffffff9, 0x0, 0x1, 0xffff, 0x0, 0x4, 0x1c, 0x120000, 0x3, 0x6, 0xaaed, 0x4, 0x25], [0x9, 0x6, 0x3, 0xb, 0xfffffbff, 0x934, 0x6, 0x6, 0x0, 0xbdfe, 0xce7, 0x1ff, 0xfffffffe, 0x7, 0x5, 0x3, 0x101, 0x10000, 0x6, 0x8003, 0xffff, 0x81, 0xff, 0x5, 0x1, 0xfffffffe, 0x14c, 0x60a7, 0xa71d, 0x6, 0xffffffff, 0x80000000, 0x5, 0x8, 0xc8, 0xee1, 0xfffff000, 0xffff, 0x3, 0x7f, 0x3ff, 0x9602, 0x7, 0x2, 0x7, 0x6, 0x3, 0x8000, 0x5, 0x8, 0x30b1d693, 0xa23, 0xc, 0x7, 0x800001, 0x6c1b, 0x0, 0x4, 0x5, 0x200002, 0x1, 0x7, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 3.97505098s ago: executing program 3 (id=577): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000005ec0), 0xffffffffffffffff) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@ipv6_newrule={0x1c, 0x20, 0x1, 0x70bd2c, 0x25dfdbfe, {0xa, 0x10, 0x80, 0xb8, 0x55, 0x0, 0x0, 0x1, 0x10004}}, 0x1c}, 0x1, 0x0, 0x0, 0x200408f0}, 0x4800) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000005fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002dbd0600ffdbdb25210000002000", @ANYRES32=r3, @ANYBLOB="0600eb00000800000400ec000a00060008021100000100000600f70000ff000008009e"], 0x44}}, 0x28000) 3.686046338s ago: executing program 0 (id=578): r0 = socket$inet_smc(0x2b, 0x1, 0x0) mbind(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1, 0x0, 0x7797, 0x3) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) accept4(r0, 0x0, 0x0, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180), 0x48) r3 = socket$can_bcm(0x1d, 0x2, 0x2) recvmsg$can_bcm(r3, &(0x7f0000001700)={&(0x7f0000000380)=@sco={0x1f, @fixed}, 0xffffffffffffff8c, &(0x7f0000000540)=[{&(0x7f0000001740)=""/4110, 0x100e}, {&(0x7f0000000240)=""/49, 0x31}, {&(0x7f0000000680)=""/156, 0x9c}, {&(0x7f00000004c0)=""/109, 0x6d}], 0x4, &(0x7f0000001680)=""/98, 0x62}, 0x100) unshare(0x2c060000) r4 = syz_open_dev$vim2m(&(0x7f0000000080), 0x3fe, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f0000000580)={0x1, @vbi={0x3, 0x100, 0x0, 0x3231564e, [0x101, 0x9], [0x1fe, 0x101], 0x13a}}) ptrace$PTRACE_GETSIGMASK(0x420a, r1, 0x8, &(0x7f00000002c0)) unshare(0x24020400) symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00') openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0/file0/..\x00', &(0x7f0000000080)={0x200000, 0x0, 0x10}, 0x18) bpf$BPF_GET_MAP_INFO(0x3, &(0x7f0000000080)={r2, 0x58, &(0x7f0000000300)}, 0x10) openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/bus/input/devices\x00', 0x0, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f00000005c0)='syz_tun\x00', 0x10) sendto$inet(r5, 0x0, 0x0, 0x24000840, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) syz_emit_ethernet(0x3a, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb08004504002c0002000000069078ac1414bbac1414aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="0200"/12], 0x0) 3.684228621s ago: executing program 3 (id=579): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20000080) socket(0x10, 0x803, 0x0) r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a80000000060a010400000000000000000a0000010900010073797a310000000054000480500001800b00010074617267657400004000028008000240000000012c0003007339f2f10455afb9fdd672bad09dfb78c7699c74e891a0c70000000000000000000000000000000008000100544545000900020073797a32000000001400000011"], 0xa8}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=@newlink={0x78, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x58, 0x12, 0x0, 0x1, @gre={{0x8}, {0x4c, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x8, 0x6, @local}, @IFLA_GRE_ERSPAN_DIR={0x5}, @IFLA_GRE_TTL={0x5, 0x8, 0x2}, @IFLA_GRE_ERSPAN_INDEX={0x8, 0x15, 0x96590}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0x1}, @IFLA_GRE_PMTUDISC={0x5, 0xa, 0x1}, @IFLA_GRE_REMOTE={0x8, 0x7, @private=0xa010100}, @IFLA_GRE_REMOTE={0x8, 0x7, @loopback}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e22}]}}}]}, 0x78}}, 0x800) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4001, 0xb, @loopback, 0x9}, 0x1c) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newsa={0x16c, 0x10, 0x713, 0x0, 0x25dfdbfc, {{@in6=@mcast2, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x4e21, 0x2, 0x2}, {@in6=@private1, 0xfe, 0x32}, @in6=@dev={0xfe, 0x80, '\x00', 0x1b}, {0x0, 0x0, 0x0, 0x8, 0x0, 0x3, 0x8000000000000000, 0x543}, {0x4, 0x7fffffffffffffff, 0xfffffffffffffffc}, {}, 0x70bd28, 0x3500, 0x2, 0x4}, [@algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x80, "217d66d38547aa140db8a200000000c538c7cb7a"}}, @encap={0x1c, 0x4, {0x0, 0x4e24, 0x4e24, @in=@initdev={0xac, 0x1e, 0x1, 0x0}}}]}, 0x16c}, 0x1, 0x0, 0x0, 0x880}, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r3, 0xfffffffc) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_mptcp(0x2, 0x1, 0x106) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000500)={'syz_tun\x00', &(0x7f0000000180)=@ethtool_link_settings={0x4d, 0x400, 0xf, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, [0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1]}}) 3.406891715s ago: executing program 0 (id=580): r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) read(r0, 0x0, 0x0) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000340)={&(0x7f0000000140)=[{0x63, 0x0, 0x0, 0x0}], 0x1}) 3.40565809s ago: executing program 3 (id=581): socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x169, &(0x7f0000000480)={0x0, 0xa795, 0x1000, 0x1, 0x2f5}, 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) syz_open_dev$sndmidi(0x0, 0x2, 0x143102) r0 = syz_io_uring_setup(0x205, &(0x7f0000000040)={0x0, 0xf2ee, 0x0, 0x804, 0x388}, &(0x7f0000000240)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2e, 0x0, 0x0, 0x5}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_WRITE={0x17, 0x1, 0x2007, @fd, 0xffffffffffffff7f, 0x0, 0x0, 0x4}) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) (fail_nth: 1) 3.278437936s ago: executing program 0 (id=582): socketpair$tipc(0x1e, 0x5, 0x0, 0x0) syz_open_dev$vim2m(&(0x7f0000000580), 0x0, 0x2) socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x79af, 0x8, 0x0, 0x272}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x40000, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0x3, 0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x15, 0x2, {{0x6, 0x6b7, 0x80, 0x0, 0x5, 0x91b1}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000400}, 0x24000000) sendmmsg$sock(0xffffffffffffffff, 0x0, 0x0, 0x4) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) r5 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r5, &(0x7f0000000100)={0xa, 0x0, 0x0, @private1, 0x200000}, 0x1c) sendto$inet6(r5, &(0x7f00000001c0), 0x0, 0x80, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @private2}, 0x1c) shutdown(r5, 0x1) syz_io_uring_submit(r3, r4, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r5, 0x0, &(0x7f0000000200)='(', 0x1, 0x10, 0x1}) io_uring_enter(r2, 0x627, 0x4c1, 0x43, 0x0, 0x0) 3.088929568s ago: executing program 4 (id=583): io_setup(0x5, &(0x7f0000000140)=0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000180), 0x40441, 0x0) io_submit(r0, 0x1, &(0x7f00000000c0)=[&(0x7f0000000200)={0x0, 0x0, 0x20, 0x1, 0x4000, r1, 0x0, 0x0, 0x7, 0x0, 0x2}]) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000280)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) waitid(0x2, 0x0, 0x0, 0x21000006, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r5, 0x29, 0x10, &(0x7f0000000000), 0x4) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x4e21, 0x103, @empty, 0xb}, 0x1c) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000010024bd7000fc0ddf2500000000", @ANYRES32=0x0, @ANYBLOB="1b0b04000300000008001b"], 0x28}, 0x1, 0x0, 0x0, 0x68010}, 0x0) sendto$inet6(r5, 0x0, 0x0, 0xb97, 0x0, 0xfffffd76) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20048000}, 0x400c004) r7 = signalfd4(0xffffffffffffffff, &(0x7f0000000500), 0x8, 0x0) r8 = syz_io_uring_setup(0x437d, &(0x7f0000000580)={0x0, 0x8b2, 0x13500, 0xfffffffe, 0x304}, &(0x7f0000000240), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r8, 0x21, &(0x7f0000000440)=r7, 0x1) 3.026656693s ago: executing program 3 (id=584): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) r1 = socket(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x14) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket(0x11, 0x3, 0x4000000) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) bind$packet(r3, 0x0, 0x0) setsockopt$packet_int(r3, 0x107, 0xf, 0x0, 0x0) sendmsg$netlink(r3, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, 0x0, 0x0) syz_open_dev$dri(0x0, 0x54, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) ftruncate(r4, 0x2000009) sendfile(r0, r4, 0x0, 0x7ffff004) 2.57544646s ago: executing program 3 (id=585): r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$ndb(0x0, 0x0, 0x0) socket(0xa, 0x3, 0x3a) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = openat$rdma_cm(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x4, 0x0, 0x13f, 0x1}}, 0x20) r3 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$6lowpan_control(r3, &(0x7f0000000140)='connect aa:aa:aa:aa:aa:10 1', 0x1b) read$FUSE(0xffffffffffffffff, 0x0, 0x0) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x21) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRESHEX, @ANYBLOB="0000000100000000000100000000000000000000b303621ead77a5567a8a359920425ffdc326bd43b788431f5c8bd53303882be0c66cd7d9dea273f15ea420d5d5fa174a46952ab9065f6f9eec98129e4b19e3dd79644e4b3ca2313cd292680592ca7f6b61fd6d559b36082305fc65c068585eeb8d6bb8fabc00cfb096379d14d21d557301b5f29a87dc4a8a2c7749bf1f8ea095fea48ccecca3d3d983ed15", @ANYRES32, @ANYRES8=r0, @ANYBLOB='\x00'/14], 0x50) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000003bc0)={'\x00', 0xbe4f, 0x8000000, 0x5, 0xc, 0xed8}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) request_key(&(0x7f0000002080)='pkcs7_test\x00', &(0x7f0000001580)={'syz', 0x2}, &(0x7f00000015c0)='syz', 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20008000}, 0x30) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=ANY=[], 0x7c}}, 0x2000c450) writev(r0, &(0x7f0000000280)=[{&(0x7f0000000180)="e9", 0x1}], 0x1) ioctl$sock_SIOCGPGRP(r5, 0x8904, &(0x7f00000000c0)) ioctl$VIDIOC_LOG_STATUS(r0, 0x5646, 0x0) 2.444136733s ago: executing program 1 (id=586): rseq(&(0x7f0000000440)={0x0, 0x0, 0x0, 0x5}, 0x20, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f00000000c0)=0xb0000) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r2, 0x7a8, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x81, 0x0, 0x9, 0xfffffffffffffffd, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000200)={0x48}) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000140)={0xc}) r3 = socket$kcm(0x1e, 0x2, 0x0) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f00000008c0), 0x43) add_key$keyring(&(0x7f0000000400), 0x0, 0x0, 0x0, 0xfffffffffffffffe) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000000c0)=ANY=[], 0xd8}, 0x1, 0x0, 0x0, 0x4044001}, 0x0) syz_io_uring_setup(0xa59, &(0x7f0000000380)={0x0, 0xe4a7, 0x8, 0x0, 0x199, 0x0, r4}, &(0x7f0000000040), &(0x7f00000002c0)) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x6c, 0x2, 0x6, 0x1, 0x6000000, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0x80ffffff}}, @IPSET_ATTR_NETMASK={0x5, 0x14, 0x2}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x6c}}, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)={0x14, 0x0, 0x2, 0x101, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x48, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}]}, 0x48}, 0x1, 0x0, 0x0, 0x4004000}, 0x40080) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, 0x4, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r5, &(0x7f00000006c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x38, 0x2, 0x7, 0x201, 0x0, 0x0, {0x5, 0x0, 0x7}, [@NFACCT_FILTER={0x1c, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0xfffffffa}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x7}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x4}]}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x3}]}, 0x38}, 0x1, 0x0, 0x0, 0xc004}, 0x4040040) 2.314446885s ago: executing program 2 (id=587): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x6ee80, 0x0) io_setup(0x1, &(0x7f00000004c0)=0x0) io_submit(r1, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0x1f, 0x0, 0xfffe, r0, &(0x7f0000000040)="98", 0x17060bb3c, 0x1000000, 0x0, 0x10}]) (async) io_submit(r1, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0x1f, 0x0, 0xfffe, r0, &(0x7f0000000040)="98", 0x17060bb3c, 0x1000000, 0x0, 0x10}]) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="2800000070000100000000000000000007000000", @ANYRES32=r4, @ANYBLOB="100001a0040004800800010000000003786dc153707ed4b2386db26824bf186bc470129bbefbc172fbbc5ffb5b566659ba4498f9abe724ed14608ea21ff006ba4acf5bbebefcc0de2ca11ca30218c93355cb420b4299b59fa097b7b7b2389fae7c7becca74"], 0x28}}, 0x0) socket$kcm(0xa, 0x3, 0x3a) (async) socket$kcm(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$nl_route(0x10, 0x3, 0x0) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@bridge_getneigh={0x34, 0x1e, 0x1, 0x70bd26, 0x25dfdbfb, {0x7, 0x0, 0x0, 0x0, 0x0, 0x2000a}, [@IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_TX_RATE={0xc, 0x3, {0x5, 0xfffffff3}}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008451}, 0x200008b0) r6 = syz_open_dev$vim2m(&(0x7f0000000580), 0x0, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r6, 0xc0cc5605, &(0x7f0000000100)={0x2, @pix_mp={0x9, 0x1, 0x34324258, 0x8, 0xb, [{0x2, 0x8}, {0x7, 0x104}, {0x6, 0x3}, {0x8, 0x3}, {0x8, 0x9}, {0x8, 0x9}, {0xd094, 0xfffffffe}, {0x2, 0x3159}], 0x9, 0xa, 0x3, 0x1, 0x5}}) (async) ioctl$vim2m_VIDIOC_S_FMT(r6, 0xc0cc5605, &(0x7f0000000100)={0x2, @pix_mp={0x9, 0x1, 0x34324258, 0x8, 0xb, [{0x2, 0x8}, {0x7, 0x104}, {0x6, 0x3}, {0x8, 0x3}, {0x8, 0x9}, {0x8, 0x9}, {0xd094, 0xfffffffe}, {0x2, 0x3159}], 0x9, 0xa, 0x3, 0x1, 0x5}}) syz_open_dev$tty1(0xc, 0x4, 0x2) r7 = socket$netlink(0x10, 0x3, 0x4) chdir(&(0x7f0000000040)='./file0\x00') writev(r7, &(0x7f0000000300)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560aff820fffff5bab003a0000002058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd00000003000100030c100000000000224e0000", 0x58}], 0x1) 1.814126001s ago: executing program 3 (id=588): r0 = syz_usb_connect(0x5, 0x239, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e388d640697a01006ba8010203010902270201020010000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x103a, 0x1000, 0x103a, 0xfffffffc, 0xff, 0x80000000}, 0x1c) r2 = syz_open_dev$I2C(&(0x7f0000000180), 0x1, 0x402) writev(r2, &(0x7f0000000140)=[{&(0x7f0000000240)="cc", 0x1}], 0x1) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000000), 0xffffff6a) sendfile(r3, r4, 0x0, 0xffffffff004) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) r6 = socket(0x10, 0x3, 0x5) bpf$PROG_LOAD(0x5, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x14) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r7 = socket$packet(0x11, 0x3, 0x300) r8 = socket(0x11, 0x3, 0x4000000) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, 0x0) bind$packet(r8, 0x0, 0x0) setsockopt$packet_int(r8, 0x107, 0xf, 0x0, 0x0) sendmsg$netlink(r8, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, 0x0, 0x0) syz_open_dev$dri(0x0, 0x54, 0x0) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) 1.6644507s ago: executing program 0 (id=589): syz_open_dev$ndb(0x0, 0x0, 0x4140) socket$inet6_sctp(0xa, 0x801, 0x84) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x200}, 0x0) socket$inet(0x2, 0x2, 0x0) fsopen(&(0x7f00000000c0)='exfat\x00', 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, 0x0, 0x40006) r2 = memfd_create(&(0x7f0000000000)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\x13\xda\xf9\xcd7el\xb7\xe6\b\x00\x00\x00\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\x9c;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x14t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\x04\x00\x00\x00\x00\x00\x00\x00\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\an0\xebB\xb8}&\xdd\xc9\xa7\x1dp\t\x9a\xceb \x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xb0\xc9\b\x00\x81Ks\xba\xbbC6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xe6\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x14\xb1`\x87#X\\W`;\'_4\xc5\xc9\x921<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\x02\x00\x00\x00\x8aeh;F[\xe2\x1c\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\xc2sB\xe7\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00J[\xc4\x04\xc1\xa6\x10\xc2\x9d\x11\t|\xc0\t\xd9(\x80\x14\x16\xaa\x88\x8a\xd6\xa2\x01\x10W]Z\x8d\xf7\xd1P\xf9d\x01|\xa3\x03hSq\x95\x8f\xe1J\xd3#/fcCz\xff\x80\xe2M\xa3-r\xf6\x1a\xd75\xdc\xe1\xe4\xc3\x9dU t}\x02\x9a{C|S\xf4\x98\x05\xb9\x15}\xfa\"\xdc\xc2r\xf9\a\xadnD\xb6\x06\xd3\'\x10\x9f|\x17\xd6\x89O\f\x98@\x85\xa5m\x9d\\&\x17o\x11Z=l\xfb\x93\x8exZ\xa2K\xa1\xb3\xce\x1e\x96{%\xa8\xc7\x93\xdb\x80v+o\xb8\xe8\x1b\x06\xfbwb\x11\xb7\x9fu\xf3\xd3\x7f\x04k\xa0B\xa5\xc9\xb1\xec\xb1\xf6\x11\xc1O\xecG\xe6q5\x97u\x0fl\x90\x9b\x9f\xaf\xfb\xdf\x12^\xc9\x92|\x11\"\xd7\xb5\xf0\xdc\\\f\xec\xfd\xa1\xfdVZ*\xeb\xde\x14\xe0\x8b\x1c\x820b\x89\xbd\xd7\x0e\x9b\xf2\xe9A\xfb\x89\xc6\x84\x14b\xd4\x7f\xdf.\x05\x00S\xf5\x19\xb4fE\x87\xd4E\xc8>\x8f\x05Bg\x15\xe1\x8c\x94ERT\xac\xb4\x00\x00\x00\x00\x00\x00\x00\xc4\x0f\xc1\x9e\xf6#f\x03\xb0\xe4\xb6\xf5\x04z+Pa\xbc\x12a7z\xad6\xf7\xeb\xa7\x88\"\xcf\xf6\xcfP\x12\a;h\x95\x90\x83\x06\xdf\xbd}.\xa6$2D\xf1T\xc9\x8aG\x12\xe51', 0x7) fcntl$addseals(r2, 0x409, 0xb) ptrace$ARCH_SHSTK_DISABLE(0x1e, 0x0, 0x0, 0x5002) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(0xffffffffffffffff, 0x7a5, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ipv6_route\x00') getsockopt(0xffffffffffffffff, 0x200000000114, 0x2716, &(0x7f0000c35fff)=""/1, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan0\x00'}) pread64(r3, &(0x7f000001a240)=""/102400, 0x19000, 0x100008) (fail_nth: 1) 1.527282745s ago: executing program 2 (id=590): r0 = socket$inet_smc(0x2b, 0x1, 0x0) mbind(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1, 0x0, 0x7797, 0x3) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) accept4(r0, 0x0, 0x0, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180), 0x48) r3 = socket$can_bcm(0x1d, 0x2, 0x2) recvmsg$can_bcm(r3, &(0x7f0000001700)={&(0x7f0000000380)=@sco={0x1f, @fixed}, 0xffffffffffffff8c, &(0x7f0000000540)=[{&(0x7f0000001740)=""/4110, 0x100e}, {&(0x7f0000000240)=""/49, 0x31}, {&(0x7f0000000680)=""/156, 0x9c}, {&(0x7f00000004c0)=""/109, 0x6d}], 0x4, &(0x7f0000001680)=""/98, 0x62}, 0x100) unshare(0x2c060000) r4 = syz_open_dev$vim2m(&(0x7f0000000080), 0x3fe, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f0000000580)={0x1, @vbi={0x3, 0x100, 0x0, 0x3231564e, [0x101, 0x9], [0x1fe, 0x101], 0x13a}}) ptrace$PTRACE_GETSIGMASK(0x420a, r1, 0x8, &(0x7f00000002c0)) unshare(0x24020400) symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00') openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0/file0/..\x00', &(0x7f0000000080)={0x200000, 0x0, 0x10}, 0x18) bpf$BPF_GET_MAP_INFO(0x3, &(0x7f0000000080)={r2, 0x58, &(0x7f0000000300)}, 0x10) openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/bus/input/devices\x00', 0x0, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f00000005c0)='syz_tun\x00', 0x10) sendto$inet(r5, 0x0, 0x0, 0x24000840, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) syz_emit_ethernet(0x3a, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb08004504002c0002000000069078ac1414bbac1414aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="0200"/12], 0x0) 942.187ms ago: executing program 2 (id=591): sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="e00000001000010029bd7000ffdbdf256d63727970746428626c656e65726963290001000000000000000000000000000000000000000000000000000000000000000000000044ca85c1a77d7f89e0710c6f740008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000062d1e16f00000000000000aa273fa3198a6c850000000000000000000000000000000000000100"/208], 0xe0}, 0x1, 0x0, 0x0, 0x10}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect(0x2, 0x9a2, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d0241710d8050a81b892000000010902900902000000000904"], 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000140)={&(0x7f0000000100)=[{0x3, 0x8800, 0x3d, &(0x7f0000000080)="132bcf444ef7b8ffb5d2831e173baceec474d397488fbe621a647fa9b74e7320e6d0b2e263515874a4359e81b1f07633468ec7fcee6004045e00ff1ca1"}], 0x1}) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002240)='/proc/sysvipc/msg\x00', 0x0, 0x0) read$FUSE(r2, &(0x7f0000000200)={0x2020}, 0x2020) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000400)={0xffffffffffffffff, 0x20, &(0x7f00000002c0)={&(0x7f0000000540)=""/69, 0x45, 0x0, &(0x7f00000005c0)=""/94, 0x5e}}, 0x10) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000900)=@bpf_lsm={0x1d, 0x8, &(0x7f0000000680)=@framed={{0x18, 0x0, 0x0, 0x0, 0xc93, 0x0, 0x0, 0x0, 0x8}, [@map_val={0x18, 0x2, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}, @jmp={0x5, 0x1, 0x0, 0x5, 0x8, 0xfffffffffffffff9, 0x1}, @cb_func={0x18, 0x76dd2e798c12dcd9, 0x4, 0x0, 0xfffffffffffffff9}]}, &(0x7f00000006c0)='GPL\x00', 0x1, 0xbb, &(0x7f0000000700)=""/187, 0x41000, 0x44, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f00000007c0)={0x2, 0x1}, 0x8, 0x10, &(0x7f0000000800)={0x5, 0x9, 0x4, 0x2}, 0x10, 0x0, 0x0, 0x8, &(0x7f0000000840)=[0xffffffffffffffff], &(0x7f0000000880)=[{0x3, 0x3, 0x2, 0x6}, {0x1, 0x4, 0x0, 0x3}, {0x4, 0x2, 0xa, 0x4}, {0x2, 0x4, 0x6, 0x3}, {0x1, 0x2, 0x2, 0x7}, {0x3, 0x1, 0xd, 0x6}, {0x3, 0x2, 0x8, 0x8}, {0x3, 0x1, 0x2, 0x3}], 0x10, 0x2}, 0x94) r5 = getpgid(0x0) r6 = syz_pidfd_open(r5, 0x0) r7 = pidfd_getfd(r6, r6, 0x0) name_to_handle_at(r7, &(0x7f0000000040)='./file7/file0\x00', &(0x7f00000000c0)=ANY=[], 0x0, 0x1200) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x17, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="0f55f8fff0ffffff85000000025d396a5f0cf5baad000000000000e4e6000000"], &(0x7f00000000c0)='syzkaller\x00', 0x6, 0x0, 0x0, 0x41000, 0x9, '\x00', 0x0, @cgroup_sysctl, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r3, r4, 0x2, &(0x7f00000009c0)=[r7], &(0x7f0000000a00)=[{0x1, 0x1, 0x3, 0xb}, {0x1, 0x2, 0x0, 0x6}], 0x10, 0x2fec}, 0x94) r8 = socket$alg(0x26, 0x5, 0x0) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r9, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r10 = accept4(r9, 0x0, 0x0, 0x800) sendmmsg$alg(r10, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f7", 0x1}], 0x1}], 0x1, 0x40800) recvmsg(r10, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000002c0)=""/90, 0x5a}], 0x1}, 0x0) r11 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r11, 0x107, 0xc, 0x0, 0x0) bind$alg(r8, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'streebog512\x00'}, 0x31) r12 = accept4(r8, 0x0, 0x0, 0x800) sendmmsg$inet6(r12, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000080)="1252e6c149", 0x5}], 0x1}}], 0x1, 0x20048830) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000003700000008000300", @ANYRES32=r13, @ANYBLOB="080026009015000008005700"], 0x2c}}, 0x808) socket$nl_route(0x10, 0x3, 0x0) 0s ago: executing program 0 (id=592): r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) read(r0, 0x0, 0x0) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000340)={&(0x7f0000000140)=[{0x63, 0x0, 0x0, 0x0}], 0x1}) kernel console output (not intermixed with test programs): ][ T6666] vivid-007: Enable Output Scaler: true grabbed [ 148.577351][ T6666] vivid-007: Tx RGB Quantization Range: Automatic grabbed [ 148.589844][ T6666] vivid-007: Transmit Mode: HDMI grabbed [ 149.009367][ T6666] vivid-007: Hotplug Present: 0x00000000 [ 149.053688][ T6666] vivid-007: RxSense Present: 0x00000000 [ 149.059684][ T6666] vivid-007: EDID Present: 0x00000000 [ 149.079822][ T6666] vivid-007: ================== END STATUS ================== [ 149.259983][ T5918] usb 4-1: USB disconnect, device number 6 [ 149.539358][ T796] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 150.179501][ T796] usb 3-1: Using ep0 maxpacket: 8 [ 150.186371][ T796] usb 3-1: config index 0 descriptor too short (expected 30, got 18) [ 150.243898][ T796] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 150.283821][ T796] usb 3-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 150.293260][ T796] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.301754][ T796] usb 3-1: Product: syz [ 150.328900][ T796] usb 3-1: Manufacturer: syz [ 150.353633][ T796] usb 3-1: SerialNumber: syz [ 150.390109][ T796] usb 3-1: config 0 descriptor?? [ 150.626775][ T24] usb 3-1: USB disconnect, device number 4 [ 151.317061][ T6693] FAULT_INJECTION: forcing a failure. [ 151.317061][ T6693] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 151.401023][ T6693] CPU: 0 UID: 0 PID: 6693 Comm: syz.0.211 Not tainted syzkaller #0 PREEMPT(full) [ 151.401050][ T6693] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 151.401060][ T6693] Call Trace: [ 151.401069][ T6693] [ 151.401077][ T6693] dump_stack_lvl+0xe8/0x150 [ 151.401109][ T6693] should_fail_ex+0x412/0x560 [ 151.401142][ T6693] _copy_from_user+0x2d/0xb0 [ 151.401164][ T6693] get_compat_msghdr+0xb3/0x4c0 [ 151.401184][ T6693] ? __lock_acquire+0x6b5/0x2cf0 [ 151.401212][ T6693] ? __pfx_get_compat_msghdr+0x10/0x10 [ 151.401233][ T6693] ? kstrtoull+0x12f/0x1d0 [ 151.401266][ T6693] ___sys_sendmsg+0x201/0x360 [ 151.401293][ T6693] ? __pfx____sys_sendmsg+0x10/0x10 [ 151.401317][ T6693] ? get_pid_task+0x20/0x1f0 [ 151.401334][ T6693] ? get_pid_task+0x20/0x1f0 [ 151.401349][ T6693] ? get_pid_task+0x20/0x1f0 [ 151.401393][ T6693] ? __fget_files+0x2a/0x420 [ 151.401420][ T6693] ? __fget_files+0x3a0/0x420 [ 151.401456][ T6693] __sys_sendmsg+0x183/0x260 [ 151.401480][ T6693] ? __pfx___sys_sendmsg+0x10/0x10 [ 151.401522][ T6693] __do_fast_syscall_32+0x20d/0x640 [ 151.401546][ T6693] ? do_fast_syscall_32+0x33/0x70 [ 151.401564][ T6693] ? asm_int80_emulation+0x1a/0x20 [ 151.401580][ T6693] ? do_int80_emulation+0x274/0x4d0 [ 151.401606][ T6693] ? trace_irq_disable+0x3b/0x150 [ 151.401635][ T6693] do_fast_syscall_32+0x33/0x70 [ 151.401657][ T6693] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 151.401679][ T6693] RIP: 0023:0xf7f03f6c [ 151.401696][ T6693] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 151.401711][ T6693] RSP: 002b:00000000f53c650c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 151.401730][ T6693] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000000 [ 151.401743][ T6693] RDX: 0000000024040810 RSI: 0000000000000000 RDI: 0000000000000000 [ 151.401754][ T6693] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 151.401764][ T6693] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 151.401774][ T6693] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 151.401801][ T6693] [ 151.628245][ T6698] netlink: 4 bytes leftover after parsing attributes in process `syz.1.212'. [ 151.911200][ T6704] loop5: detected capacity change from 0 to 7 [ 151.924727][ T6704] loop5: [ 151.927836][ T6704] loop5: partition table partially beyond EOD, truncated [ 152.004964][ T6708] netlink: 'syz.3.214': attribute type 4 has an invalid length. [ 152.131060][ T6709] vivid-007: ================= START STATUS ================= [ 152.138941][ T6709] vivid-007: Enable Output Cropping: true grabbed [ 152.167665][ T6709] vivid-007: Enable Output Composing: true grabbed [ 152.242330][ T5893] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 152.286482][ T6709] vivid-007: Enable Output Scaler: true grabbed [ 152.368043][ T6709] vivid-007: Tx RGB Quantization Range: Automatic grabbed [ 152.412507][ T5893] usb 1-1: Using ep0 maxpacket: 8 [ 152.427273][ T5893] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 152.428238][ T6709] vivid-007: Transmit Mode: [ 152.449344][ T796] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 152.564629][ T6709] HDMI grabbed [ 152.568175][ T6709] vivid-007: Hotplug Present: 0x00000000 [ 152.574109][ T6709] vivid-007: RxSense Present: 0x00000000 [ 152.580035][ T6709] vivid-007: EDID Present: 0x00000000 [ 152.585647][ T6709] vivid-007: ================== END STATUS ================== [ 153.177890][ T5893] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 153.229663][ T5893] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 153.249683][ T5893] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 153.263858][ T5893] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 153.273748][ T5893] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.439325][ T796] usb 4-1: Using ep0 maxpacket: 16 [ 153.446197][ T796] usb 4-1: config 0 has no interfaces? [ 153.455116][ T796] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 153.465717][ T6723] tipc: Started in network mode [ 153.474458][ T796] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 153.474853][ T6723] tipc: Node identity 9eabeb5804b3, cluster identity 4711 [ 153.494407][ T6723] tipc: Enabled bearer , priority 0 [ 153.522274][ T796] usb 4-1: Manufacturer: syz [ 153.533559][ T796] usb 4-1: config 0 descriptor?? [ 153.575086][ T6723] syzkaller0: entered promiscuous mode [ 153.602707][ T6723] syzkaller0: entered allmulticast mode [ 153.714708][ T5893] usb 1-1: GET_CAPABILITIES returned 0 [ 153.739835][ T5893] usbtmc 1-1:16.0: can't read capabilities [ 153.856700][ T6723] syzkaller0: mtu less than device minimum [ 154.026628][ T6716] tipc: Resetting bearer [ 154.086380][ T6716] tipc: Disabling bearer [ 154.152762][ C0] usbtmc 1-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 154.193784][ T6706] usbtmc 1-1:16.0: Unable to send data, error -71 [ 154.276084][ T5893] usb 1-1: USB disconnect, device number 4 [ 154.761384][ T6741] netlink: 'syz.2.225': attribute type 3 has an invalid length. [ 154.769389][ T6741] netlink: 8 bytes leftover after parsing attributes in process `syz.2.225'. [ 154.855577][ T6737] : renamed from bond_slave_0 (while UP) [ 154.934460][ T6744] netlink: 4 bytes leftover after parsing attributes in process `syz.2.226'. [ 155.513830][ T5893] usb 4-1: USB disconnect, device number 7 [ 155.532100][ T6761] netlink: 'syz.4.231': attribute type 3 has an invalid length. [ 155.556429][ T6762] FAULT_INJECTION: forcing a failure. [ 155.556429][ T6762] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 155.565573][ T6761] netlink: 16 bytes leftover after parsing attributes in process `syz.4.231'. [ 155.601823][ T6756] vivid-007: ================= START STATUS ================= [ 155.619295][ T6756] vivid-007: Enable Output Cropping: true grabbed [ 155.625875][ T6756] vivid-007: Enable Output Composing: true grabbed [ 155.648540][ T6756] vivid-007: Enable Output Scaler: [ 155.652192][ T6762] CPU: 1 UID: 0 PID: 6762 Comm: syz.1.232 Not tainted syzkaller #0 PREEMPT(full) [ 155.652211][ T6762] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 155.652218][ T6762] Call Trace: [ 155.652224][ T6762] [ 155.652229][ T6762] dump_stack_lvl+0xe8/0x150 [ 155.652252][ T6762] should_fail_ex+0x412/0x560 [ 155.652271][ T6762] _copy_to_user+0x31/0xb0 [ 155.652284][ T6762] simple_read_from_buffer+0xe1/0x170 [ 155.652303][ T6762] proc_fail_nth_read+0x1bb/0x230 [ 155.652320][ T6762] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 155.652337][ T6762] ? rw_verify_area+0x2a6/0x4d0 [ 155.652349][ T6762] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 155.652365][ T6762] vfs_read+0x20c/0xa70 [ 155.652376][ T6762] ? fdget_pos+0x246/0x320 [ 155.652391][ T6762] ? __pfx___sys_sendmmsg+0x10/0x10 [ 155.652405][ T6762] ? __pfx___mutex_lock+0x10/0x10 [ 155.652430][ T6762] ? __pfx_vfs_read+0x10/0x10 [ 155.652443][ T6762] ? __fget_files+0x2a/0x420 [ 155.652461][ T6762] ? __fget_files+0x3a0/0x420 [ 155.652475][ T6762] ? __fget_files+0x2a/0x420 [ 155.652495][ T6762] ksys_read+0x150/0x270 [ 155.652508][ T6762] ? __pfx_ksys_read+0x10/0x10 [ 155.652522][ T6762] ? asm_int80_emulation+0x1a/0x20 [ 155.652585][ T6762] do_int80_emulation+0x173/0x4d0 [ 155.652597][ T6762] ? trace_irq_disable+0x3b/0x150 [ 155.652613][ T6762] ? asm_int80_emulation+0x1a/0x20 [ 155.652623][ T6762] ? clear_bhb_loop+0x40/0x90 [ 155.652634][ T6762] ? clear_bhb_loop+0x40/0x90 [ 155.652647][ T6762] asm_int80_emulation+0x1a/0x20 [ 155.652658][ T6762] RIP: 0023:0xf71b5cab [ 155.652669][ T6762] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 155.652678][ T6762] RSP: 002b:00000000f544c4bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 155.652692][ T6762] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f544c5d0 [ 155.652699][ T6762] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 155.652706][ T6762] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 155.652712][ T6762] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 155.652718][ T6762] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 155.652734][ T6762] [ 155.961744][ T6756] true grabbed [ 155.980072][ T6756] vivid-007: Tx RGB Quantization Range: Automatic grabbed [ 156.001506][ T6756] vivid-007: Transmit Mode: HDMI grabbed [ 156.028967][ T6756] vivid-007: Hotplug Present: 0x00000000 [ 156.044794][ T6756] vivid-007: RxSense Present: 0x00000000 [ 156.050552][ T6756] vivid-007: EDID Present: 0x00000000 [ 156.076630][ T6756] vivid-007: ================== END STATUS ================== [ 156.412092][ T6774] openvswitch: netlink: VXLAN extension message has 1 unknown bytes. [ 156.502418][ T6776] fuse: Unknown parameter 'user_i00000000000000000000' [ 157.150743][ T6780] netlink: 4 bytes leftover after parsing attributes in process `syz.0.238'. [ 157.299425][ T5893] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 157.417736][ T6787] FAULT_INJECTION: forcing a failure. [ 157.417736][ T6787] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 157.433037][ T6787] CPU: 1 UID: 0 PID: 6787 Comm: syz.1.240 Not tainted syzkaller #0 PREEMPT(full) [ 157.433065][ T6787] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 157.433076][ T6787] Call Trace: [ 157.433084][ T6787] [ 157.433093][ T6787] dump_stack_lvl+0xe8/0x150 [ 157.433127][ T6787] should_fail_ex+0x412/0x560 [ 157.433162][ T6787] _copy_from_user+0x2d/0xb0 [ 157.433185][ T6787] sctp_getsockopt_default_sndinfo+0xc3/0x650 [ 157.433218][ T6787] ? __pfx_sctp_getsockopt_default_sndinfo+0x10/0x10 [ 157.433246][ T6787] ? sctp_getsockopt+0x12f/0xb90 [ 157.433269][ T6787] ? __local_bh_enable_ip+0xd0/0x130 [ 157.433301][ T6787] sctp_getsockopt+0x360/0xb90 [ 157.433320][ T6787] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 157.433351][ T6787] do_sock_getsockopt+0x2d3/0x3f0 [ 157.433377][ T6787] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 157.433400][ T6787] ? __fget_files+0x2a/0x420 [ 157.433428][ T6787] ? __fget_files+0x3a0/0x420 [ 157.433455][ T6787] ? __fget_files+0x2a/0x420 [ 157.433491][ T6787] __ia32_sys_getsockopt+0x1a4/0x240 [ 157.433523][ T6787] __do_fast_syscall_32+0x20d/0x640 [ 157.433549][ T6787] ? do_fast_syscall_32+0x33/0x70 [ 157.433570][ T6787] ? asm_int80_emulation+0x1a/0x20 [ 157.433589][ T6787] ? do_int80_emulation+0x274/0x4d0 [ 157.433610][ T6787] ? trace_irq_disable+0x3b/0x150 [ 157.433643][ T6787] do_fast_syscall_32+0x33/0x70 [ 157.433665][ T6787] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 157.433689][ T6787] RIP: 0023:0xf707ef6c [ 157.433708][ T6787] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 157.433723][ T6787] RSP: 002b:00000000f546d50c EFLAGS: 00000206 ORIG_RAX: 000000000000016d [ 157.433744][ T6787] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000084 [ 157.433757][ T6787] RDX: 0000000000000022 RSI: 0000000080000380 RDI: 00000000800003c0 [ 157.433769][ T6787] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 157.433780][ T6787] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 157.433791][ T6787] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 157.433822][ T6787] [ 157.754699][ T6788] vivid-007: ================= START STATUS ================= [ 157.762778][ T6788] vivid-007: Enable Output Cropping: true grabbed [ 157.769542][ T6788] vivid-007: Enable Output Composing: true grabbed [ 157.776105][ T6788] vivid-007: Enable Output Scaler: true grabbed [ 157.783663][ T6788] vivid-007: Tx RGB Quantization Range: Automatic grabbed [ 157.790930][ T6788] vivid-007: Transmit Mode: HDMI grabbed [ 157.796829][ T6788] vivid-007: Hotplug Present: 0x00000000 [ 157.803431][ T6788] vivid-007: RxSense Present: 0x00000000 [ 157.809162][ T6788] vivid-007: EDID Present: 0x00000000 [ 157.814724][ T6788] vivid-007: ================== END STATUS ================== [ 157.823904][ T5918] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 157.823927][ T5893] usb 5-1: Using ep0 maxpacket: 8 [ 157.869608][ T5893] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 157.901831][ T5893] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 157.966671][ T5893] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 157.992444][ T5918] usb 3-1: Using ep0 maxpacket: 8 [ 158.002133][ T5893] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 158.012051][ T5918] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 158.026893][ T5893] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 158.037187][ T5893] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.048469][ T5918] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 158.234658][ T5918] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 158.255309][ T5918] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 158.285602][ T5918] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 158.296204][ T5918] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.474496][ T6800] netlink: 'syz.0.244': attribute type 3 has an invalid length. [ 158.482419][ T6800] netlink: 16 bytes leftover after parsing attributes in process `syz.0.244'. [ 158.499596][ T796] usb 4-1: new low-speed USB device number 8 using dummy_hcd [ 158.564913][ T5893] usb 5-1: GET_CAPABILITIES returned 0 [ 158.573707][ T5893] usbtmc 5-1:16.0: can't read capabilities [ 158.661325][ T796] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 158.691786][ T5918] usb 3-1: GET_CAPABILITIES returned 0 [ 158.697552][ T796] usb 4-1: config 0 has no interface number 0 [ 158.706067][ T5918] usbtmc 3-1:16.0: can't read capabilities [ 158.727705][ T796] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 158.809398][ T796] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 158.874687][ T6806] vivid-007: ================= START STATUS ================= [ 158.882690][ T6806] vivid-007: Enable Output Cropping: true grabbed [ 158.899364][ T6806] vivid-007: Enable Output Composing: true grabbed [ 158.948240][ T796] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 158.977201][ T6806] vivid-007: Enable Output Scaler: true grabbed [ 158.988207][ T6806] vivid-007: Tx RGB Quantization Range: Automatic grabbed [ 158.995513][ T6806] vivid-007: Transmit Mode: HDMI grabbed [ 159.024732][ T796] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.056529][ T796] usb 4-1: config 0 descriptor?? [ 159.085426][ T6806] vivid-007: Hotplug Present: 0x00000000 [ 159.091758][ T6796] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 159.160276][ T796] iowarrior 4-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior2 [ 159.171850][ T6806] vivid-007: RxSense Present: 0x00000000 [ 159.199775][ T6806] vivid-007: EDID Present: 0x00000000 [ 159.205752][ T6806] vivid-007: ================== END STATUS ================== [ 159.233961][ C1] usbtmc 5-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 159.244763][ T6784] usbtmc 5-1:16.0: Unable to send data, error -71 [ 159.377206][ T5918] usb 4-1: USB disconnect, device number 8 [ 159.471851][ C0] usbtmc 5-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 159.489368][ T6778] usbtmc 5-1:16.0: Unable to send data, error -71 [ 159.678743][ T5917] usb 5-1: USB disconnect, device number 4 [ 159.795570][ T796] usb 3-1: USB disconnect, device number 5 [ 159.989358][ T5918] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 160.131294][ T6822] fuse: Unknown parameter 'user_i00000000000000000000' [ 160.150411][ T5918] usb 4-1: Using ep0 maxpacket: 32 [ 160.171400][ T5918] usb 4-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 160.181012][ T5918] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.189131][ T5918] usb 4-1: Product: syz [ 160.194005][ T5918] usb 4-1: Manufacturer: syz [ 160.198682][ T5918] usb 4-1: SerialNumber: syz [ 160.248398][ T5918] usb 4-1: config 0 descriptor?? [ 160.262442][ T5918] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 161.037296][ T6840] netlink: 'syz.4.253': attribute type 3 has an invalid length. [ 161.132418][ T6840] netlink: 8 bytes leftover after parsing attributes in process `syz.4.253'. [ 161.143695][ T5918] gspca_ov534_9: reg_w failed -71 [ 161.269460][ T796] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 161.359656][ T6846] vivid-007: ================= START STATUS ================= [ 161.377335][ T6846] vivid-007: Enable Output Cropping: true grabbed [ 161.429354][ T5918] gspca_ov534_9: Unknown sensor 0000 [ 161.429457][ T5918] ov534_9 4-1:0.0: probe with driver ov534_9 failed with error -22 [ 161.448065][ T5918] usb 4-1: USB disconnect, device number 9 [ 161.459374][ T796] usb 3-1: device descriptor read/64, error -71 [ 161.484201][ T6846] vivid-007: Enable Output Composing: true grabbed [ 161.492823][ T6846] vivid-007: Enable Output Scaler: true grabbed [ 161.499310][ T6846] vivid-007: Tx RGB Quantization Range: Automatic grabbed [ 161.506645][ T6846] vivid-007: Transmit Mode: HDMI grabbed [ 161.512556][ T6846] vivid-007: Hotplug Present: 0x00000000 [ 161.518307][ T6846] vivid-007: RxSense Present: 0x00000000 [ 161.524102][ T6846] vivid-007: EDID Present: 0x00000000 [ 161.529641][ T6846] vivid-007: ================== END STATUS ================== [ 161.557420][ T6849] netlink: 'syz.1.256': attribute type 3 has an invalid length. [ 161.567561][ T6849] netlink: 16 bytes leftover after parsing attributes in process `syz.1.256'. [ 161.792216][ T796] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 161.949500][ T796] usb 3-1: device descriptor read/64, error -71 [ 162.076661][ T796] usb usb3-port1: attempt power cycle [ 162.197783][ T6860] vivid-007: ================= START STATUS ================= [ 162.206053][ T6860] vivid-007: Enable Output Cropping: true grabbed [ 162.212730][ T6860] vivid-007: Enable Output Composing: true grabbed [ 162.219517][ T6860] vivid-007: Enable Output Scaler: true grabbed [ 162.225844][ T6860] vivid-007: Tx RGB Quantization Range: Automatic grabbed [ 162.233249][ T6860] vivid-007: Transmit Mode: HDMI grabbed [ 162.238949][ T6860] vivid-007: Hotplug Present: 0x00000000 [ 162.244723][ T6860] vivid-007: RxSense Present: 0x00000000 [ 162.250735][ T6860] vivid-007: EDID Present: 0x00000000 [ 162.256331][ T6860] vivid-007: ================== END STATUS ================== [ 162.673047][ T796] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 162.726607][ T796] usb 3-1: device descriptor read/8, error -71 [ 162.783696][ T6862] fuse: Unknown parameter 'user_id00000000000000000000' [ 163.000928][ T796] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 163.056407][ T796] usb 3-1: device descriptor read/8, error -71 [ 163.071982][ T6866] macvtap1: entered promiscuous mode [ 163.119104][ T6866] macvtap1: entered allmulticast mode [ 163.326559][ T5830] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 163.380357][ T796] usb usb3-port1: unable to enumerate USB device [ 163.669913][ T5830] usb 4-1: Using ep0 maxpacket: 32 [ 163.680430][ T5830] usb 4-1: unable to get BOS descriptor or descriptor too short [ 163.700919][ T5830] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x8C has an invalid bInterval 109, changing to 10 [ 163.728941][ T5830] usb 4-1: New USB device found, idVendor=1235, idProduct=0002, bcdDevice= 0.40 [ 163.757676][ T5830] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.770255][ T5830] usb 4-1: Product: syz [ 163.774528][ T5830] usb 4-1: Manufacturer: syz [ 163.779165][ T5830] usb 4-1: SerialNumber: syz [ 163.949618][ T5880] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 164.034348][ T6886] netlink: 'syz.0.268': attribute type 3 has an invalid length. [ 164.048676][ T5830] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 164.070583][ T5830] usb 4-1: MIDIStreaming interface descriptor not found [ 164.079923][ T6886] netlink: 16 bytes leftover after parsing attributes in process `syz.0.268'. [ 164.156264][ T6888] FAULT_INJECTION: forcing a failure. [ 164.156264][ T6888] name failslab, interval 1, probability 0, space 0, times 0 [ 164.222932][ T6888] CPU: 1 UID: 0 PID: 6888 Comm: syz.2.269 Not tainted syzkaller #0 PREEMPT(full) [ 164.222961][ T6888] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 164.222971][ T6888] Call Trace: [ 164.222979][ T6888] [ 164.222987][ T6888] dump_stack_lvl+0xe8/0x150 [ 164.223020][ T6888] should_fail_ex+0x412/0x560 [ 164.223052][ T6888] should_failslab+0xa8/0x100 [ 164.223079][ T6888] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 164.223102][ T6888] ? __alloc_skb+0x1d0/0x7d0 [ 164.223126][ T6888] __alloc_skb+0x1d0/0x7d0 [ 164.223150][ T6888] tcp_stream_alloc_skb+0x3f/0x580 [ 164.223177][ T6888] tcp_sendmsg_locked+0x1375/0x5490 [ 164.223256][ T6888] ? __pfx_tcp_sendmsg_locked+0x10/0x10 [ 164.223287][ T6888] ? tcp_sendmsg+0x21/0x50 [ 164.223311][ T6888] ? __local_bh_enable_ip+0xd0/0x130 [ 164.223337][ T6888] ? __pfx_inet_sendmsg+0x10/0x10 [ 164.223360][ T6888] tcp_sendmsg+0x2f/0x50 [ 164.223383][ T6888] __sys_sendto+0x5de/0x710 [ 164.223406][ T6888] ? __pfx___sys_sendto+0x10/0x10 [ 164.223451][ T6888] ? fput+0xa0/0xd0 [ 164.223478][ T6888] ? ksys_write+0x242/0x270 [ 164.223505][ T6888] __ia32_sys_sendto+0xdd/0x100 [ 164.223528][ T6888] __do_fast_syscall_32+0x20d/0x640 [ 164.223552][ T6888] ? do_fast_syscall_32+0x33/0x70 [ 164.223570][ T6888] ? asm_int80_emulation+0x1a/0x20 [ 164.223586][ T6888] ? do_int80_emulation+0x274/0x4d0 [ 164.223605][ T6888] ? trace_irq_disable+0x3b/0x150 [ 164.223636][ T6888] do_fast_syscall_32+0x33/0x70 [ 164.223657][ T6888] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 164.223680][ T6888] RIP: 0023:0xf705ef6c [ 164.223697][ T6888] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 164.223712][ T6888] RSP: 002b:00000000f544d50c EFLAGS: 00000206 ORIG_RAX: 0000000000000171 [ 164.223733][ T6888] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000040 [ 164.223745][ T6888] RDX: 00000000ffffffe4 RSI: 0000000000000000 RDI: 0000000000000000 [ 164.223756][ T6888] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 164.223767][ T6888] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 164.223778][ T6888] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 164.223807][ T6888] [ 164.479379][ T5830] usb 4-1: USB disconnect, device number 10 [ 164.543354][ T6893] fuse: Unknown parameter 'user_id00000000000000000000' [ 164.560307][ T5880] usb 2-1: device descriptor read/64, error -71 [ 164.996591][ T6902] vivid-007: ================= START STATUS ================= [ 165.005215][ T6902] vivid-007: Enable Output Cropping: true grabbed [ 165.011817][ T6902] vivid-007: Enable Output Composing: true grabbed [ 165.021089][ T6902] vivid-007: Enable Output Scaler: true grabbed [ 165.043416][ T5880] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 165.046510][ T6902] vivid-007: Tx RGB Quantization Range: Automatic grabbed [ 165.087000][ T6902] vivid-007: Transmit Mode: HDMI grabbed [ 165.116786][ T6902] vivid-007: Hotplug Present: 0x00000000 [ 165.122806][ T6902] vivid-007: RxSense Present: 0x00000000 [ 165.128613][ T6902] vivid-007: EDID Present: 0x00000000 [ 165.134407][ T6902] vivid-007: ================== END STATUS ================== [ 165.429841][ T5880] usb 2-1: device descriptor read/64, error -71 [ 165.502112][ T6911] vivid-007: ================= START STATUS ================= [ 165.510123][ T6911] vivid-007: Enable Output Cropping: true grabbed [ 165.516917][ T6911] vivid-007: Enable Output Composing: true grabbed [ 165.538340][ T6911] vivid-007: Enable Output Scaler: true grabbed [ 165.562959][ T5880] usb usb2-port1: attempt power cycle [ 165.609908][ T6911] vivid-007: Tx RGB Quantization Range: Automatic grabbed [ 165.665477][ T6911] vivid-007: Transmit Mode: HDMI grabbed [ 165.738403][ T6911] vivid-007: Hotplug Present: 0x00000000 [ 165.744721][ T6911] vivid-007: RxSense Present: 0x00000000 [ 165.750479][ T6911] vivid-007: EDID Present: 0x00000000 [ 165.756059][ T6911] vivid-007: ================== END STATUS ================== [ 166.851330][ T6928] Zero length message leads to an empty skb [ 167.079573][ T796] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 167.295914][ T796] usb 3-1: Using ep0 maxpacket: 8 [ 167.494348][ T796] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 167.512900][ T796] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 167.527462][ T796] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 167.539205][ T796] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 167.560528][ T796] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 167.584236][ T796] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.101501][ T796] usb 3-1: GET_CAPABILITIES returned 0 [ 168.148925][ T796] usbtmc 3-1:16.0: can't read capabilities [ 169.033238][ T5880] usb 3-1: USB disconnect, device number 10 [ 169.073390][ T6949] trusted_key: encrypted_key: insufficient parameters specified [ 169.097755][ T29] audit: type=1800 audit(1773716916.849:3): pid=6949 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.284" name="file1" dev="tmpfs" ino=338 res=0 errno=0 [ 169.368164][ T6957] netlink: 4 bytes leftover after parsing attributes in process `syz.1.287'. [ 169.380577][ T6957] netlink: 4 bytes leftover after parsing attributes in process `syz.1.287'. [ 169.925355][ T6966] vivid-007: ================= START STATUS ================= [ 170.101905][ T6966] vivid-007: Enable Output Cropping: true grabbed [ 170.112163][ T6966] vivid-007: Enable Output Composing: true grabbed [ 170.118872][ T6966] vivid-007: Enable Output Scaler: true grabbed [ 170.136265][ T6966] vivid-007: Tx RGB Quantization Range: Automatic grabbed [ 170.160227][ T6966] vivid-007: Transmit Mode: HDMI grabbed [ 170.192592][ T6966] vivid-007: Hotplug Present: 0x00000000 [ 170.204767][ T6966] vivid-007: RxSense Present: 0x00000000 [ 170.211745][ T6966] vivid-007: EDID Present: 0x00000000 [ 170.219131][ T6966] vivid-007: ================== END STATUS ================== [ 170.482829][ T6972] FAULT_INJECTION: forcing a failure. [ 170.482829][ T6972] name failslab, interval 1, probability 0, space 0, times 0 [ 170.569681][ T6972] CPU: 0 UID: 0 PID: 6972 Comm: syz.4.292 Not tainted syzkaller #0 PREEMPT(full) [ 170.569709][ T6972] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 170.569717][ T6972] Call Trace: [ 170.569724][ T6972] [ 170.569731][ T6972] dump_stack_lvl+0xe8/0x150 [ 170.569763][ T6972] should_fail_ex+0x412/0x560 [ 170.569794][ T6972] should_failslab+0xa8/0x100 [ 170.569820][ T6972] __kmalloc_noprof+0xe8/0x760 [ 170.569849][ T6972] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 170.569882][ T6972] tomoyo_realpath_from_path+0xe3/0x5d0 [ 170.569918][ T6972] ? tomoyo_path_number_perm+0x219/0x630 [ 170.569941][ T6972] tomoyo_path_number_perm+0x246/0x630 [ 170.569964][ T6972] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 170.569990][ T6972] ? __lock_acquire+0x6b5/0x2cf0 [ 170.570045][ T6972] ? __fget_files+0x2a/0x420 [ 170.570077][ T6972] ? __fget_files+0x3a0/0x420 [ 170.570100][ T6972] ? __fget_files+0x2a/0x420 [ 170.570128][ T6972] security_file_ioctl_compat+0xc3/0x2a0 [ 170.570154][ T6972] __ia32_compat_sys_ioctl+0x139/0x950 [ 170.570177][ T6972] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 170.570200][ T6972] ? __fget_files+0x3a0/0x420 [ 170.570231][ T6972] ? fput+0xa0/0xd0 [ 170.570253][ T6972] ? ksys_write+0x242/0x270 [ 170.570287][ T6972] __do_fast_syscall_32+0x20d/0x640 [ 170.570311][ T6972] ? do_fast_syscall_32+0x33/0x70 [ 170.570328][ T6972] ? asm_int80_emulation+0x1a/0x20 [ 170.570344][ T6972] ? do_int80_emulation+0x274/0x4d0 [ 170.570362][ T6972] ? trace_irq_disable+0x3b/0x150 [ 170.570391][ T6972] do_fast_syscall_32+0x33/0x70 [ 170.570412][ T6972] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 170.570432][ T6972] RIP: 0023:0xf6feef6c [ 170.570449][ T6972] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 170.570462][ T6972] RSP: 002b:00000000f53dd50c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 170.570482][ T6972] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000000089fd [ 170.570493][ T6972] RDX: 0000000080000900 RSI: 0000000000000000 RDI: 0000000000000000 [ 170.570503][ T6972] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 170.570513][ T6972] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 170.570522][ T6972] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 170.570550][ T6972] [ 170.570779][ T6972] ERROR: Out of memory at tomoyo_realpath_from_path. [ 170.892687][ T6973] vivid-007: ================= START STATUS ================= [ 170.900493][ T6973] vivid-007: Enable Output Cropping: true grabbed [ 170.907101][ T6973] vivid-007: Enable Output Composing: true grabbed [ 170.913810][ T6973] vivid-007: Enable Output Scaler: true grabbed [ 170.920333][ T6973] vivid-007: Tx RGB Quantization Range: Automatic grabbed [ 170.927683][ T6973] vivid-007: Transmit Mode: HDMI grabbed [ 170.933431][ T6973] vivid-007: Hotplug Present: 0x00000000 [ 170.939457][ T6973] vivid-007: RxSense Present: 0x00000000 [ 170.948072][ T6973] vivid-007: EDID Present: 0x00000000 [ 170.959286][ T6973] vivid-007: ================== END STATUS ================== [ 171.483770][ T6990] syz.2.297 uses obsolete (PF_INET,SOCK_PACKET) [ 172.199395][ T5830] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 172.382444][ T5830] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 172.410107][ T5830] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 172.438441][ T5830] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.454456][ T5830] usb 2-1: config 0 descriptor?? [ 172.493396][ T5830] pwc: Askey VC010 type 2 USB webcam detected. [ 172.694513][ T7012] FAULT_INJECTION: forcing a failure. [ 172.694513][ T7012] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 172.708216][ T7012] CPU: 0 UID: 0 PID: 7012 Comm: syz.4.304 Not tainted syzkaller #0 PREEMPT(full) [ 172.708243][ T7012] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 172.708254][ T7012] Call Trace: [ 172.708262][ T7012] [ 172.708269][ T7012] dump_stack_lvl+0xe8/0x150 [ 172.708304][ T7012] should_fail_ex+0x412/0x560 [ 172.708343][ T7012] _copy_from_user+0x2d/0xb0 [ 172.708365][ T7012] get_compat_msghdr+0xb3/0x4c0 [ 172.708385][ T7012] ? __lock_acquire+0x6b5/0x2cf0 [ 172.708414][ T7012] ? __pfx_get_compat_msghdr+0x10/0x10 [ 172.708436][ T7012] ? kstrtoull+0x12f/0x1d0 [ 172.708469][ T7012] ___sys_sendmsg+0x201/0x360 [ 172.708495][ T7012] ? __pfx____sys_sendmsg+0x10/0x10 [ 172.708518][ T7012] ? get_pid_task+0x20/0x1f0 [ 172.708536][ T7012] ? get_pid_task+0x20/0x1f0 [ 172.708551][ T7012] ? get_pid_task+0x20/0x1f0 [ 172.708597][ T7012] ? __fget_files+0x2a/0x420 [ 172.708622][ T7012] ? __fget_files+0x3a0/0x420 [ 172.708660][ T7012] __sys_sendmsg+0x183/0x260 [ 172.708684][ T7012] ? __pfx___sys_sendmsg+0x10/0x10 [ 172.708726][ T7012] __do_fast_syscall_32+0x20d/0x640 [ 172.708794][ T7012] ? do_fast_syscall_32+0x33/0x70 [ 172.708814][ T7012] ? asm_int80_emulation+0x1a/0x20 [ 172.708831][ T7012] ? do_int80_emulation+0x274/0x4d0 [ 172.708856][ T7012] do_fast_syscall_32+0x33/0x70 [ 172.708877][ T7012] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 172.708899][ T7012] RIP: 0023:0xf6feef6c [ 172.708917][ T7012] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 172.708933][ T7012] RSP: 002b:00000000f53dd50c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 172.708953][ T7012] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000200 [ 172.708976][ T7012] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 172.708986][ T7012] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 172.708997][ T7012] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 172.709007][ T7012] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 172.709036][ T7012] [ 172.948290][ T5830] pwc: recv_control_msg error -32 req 02 val 2b00 [ 172.997170][ T5830] pwc: recv_control_msg error -32 req 02 val 2700 [ 173.004887][ T5830] pwc: recv_control_msg error -32 req 02 val 2c00 [ 173.013647][ T5830] pwc: recv_control_msg error -32 req 04 val 1000 [ 173.021336][ T5830] pwc: recv_control_msg error -32 req 04 val 1300 [ 173.238715][ T5830] pwc: recv_control_msg error -32 req 02 val 2000 [ 173.309876][ T6999] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 173.319303][ T5830] pwc: recv_control_msg error -32 req 02 val 2100 [ 173.336303][ T6999] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 173.433277][ T5830] pwc: recv_control_msg error -32 req 04 val 1500 [ 173.446978][ T5830] pwc: recv_control_msg error -32 req 02 val 2500 [ 173.724155][ T5830] pwc: recv_control_msg error -32 req 02 val 2400 [ 174.161836][ T5830] pwc: recv_control_msg error -32 req 02 val 2600 [ 174.169208][ T7032] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 174.513010][ T7036] syz_tun: entered allmulticast mode [ 174.562827][ T7035] syz_tun: left allmulticast mode [ 174.608904][ T7037] vivid-007: ================= START STATUS ================= [ 174.617135][ T7037] vivid-007: Enable Output Cropping: true grabbed [ 174.691595][ T5830] pwc: recv_control_msg error -71 req 04 val 1100 [ 174.709348][ T7037] vivid-007: Enable Output Composing: true grabbed [ 174.715977][ T7037] vivid-007: Enable Output Scaler: true grabbed [ 174.722454][ T7037] vivid-007: Tx RGB Quantization Range: Automatic grabbed [ 174.729692][ T7037] vivid-007: Transmit Mode: HDMI grabbed [ 174.735613][ T7037] vivid-007: Hotplug Present: 0x00000000 [ 174.741593][ T7037] vivid-007: RxSense Present: 0x00000000 [ 174.747388][ T7037] vivid-007: EDID Present: 0x00000000 [ 174.752932][ T7037] vivid-007: ================== END STATUS ================== [ 174.778661][ T5830] pwc: recv_control_msg error -71 req 04 val 1200 [ 174.812102][ T5830] pwc: Registered as video103. [ 174.826778][ T5830] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input7 [ 175.024450][ T5830] usb 2-1: USB disconnect, device number 7 [ 175.349478][ T5918] usb 4-1: new full-speed USB device number 11 using dummy_hcd [ 175.523087][ T5918] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 175.535337][ T5918] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 175.566559][ T5918] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 175.594344][ T5918] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.647806][ T5918] usb 4-1: config 0 descriptor?? [ 175.718112][ T5918] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 175.729509][ T5918] dvb-usb: bulk message failed: -22 (3/0) [ 175.745099][ T5918] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 175.765009][ T5918] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 175.782078][ T5918] usb 4-1: media controller created [ 175.801819][ T5918] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 175.837713][ T5918] dvb-usb: bulk message failed: -22 (6/0) [ 175.854253][ T5918] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 175.874842][ T7041] dibusb: i2c wr: len=61 is too big! [ 175.874842][ T7041] [ 175.904832][ T5918] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input8 [ 175.996094][ T5918] dvb-usb: schedule remote query interval to 150 msecs. [ 176.033242][ T5918] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 176.084857][ T5918] usb 4-1: USB disconnect, device number 11 [ 176.227603][ T5918] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 176.399783][ T7059] netlink: 4 bytes leftover after parsing attributes in process `syz.1.319'. [ 176.507279][ T7061] netlink: 'syz.4.320': attribute type 3 has an invalid length. [ 176.887710][ T5893] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 176.970737][ T7077] FAULT_INJECTION: forcing a failure. [ 176.970737][ T7077] name failslab, interval 1, probability 0, space 0, times 0 [ 177.011819][ T7077] CPU: 0 UID: 0 PID: 7077 Comm: syz.0.327 Tainted: G L syzkaller #0 PREEMPT(full) [ 177.011841][ T7077] Tainted: [L]=SOFTLOCKUP [ 177.011845][ T7077] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 177.011852][ T7077] Call Trace: [ 177.011857][ T7077] [ 177.011862][ T7077] dump_stack_lvl+0xe8/0x150 [ 177.011883][ T7077] should_fail_ex+0x412/0x560 [ 177.011901][ T7077] should_failslab+0xa8/0x100 [ 177.011916][ T7077] __kmalloc_noprof+0xe8/0x760 [ 177.011930][ T7077] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 177.011949][ T7077] tomoyo_realpath_from_path+0xe3/0x5d0 [ 177.011971][ T7077] ? tomoyo_path_number_perm+0x219/0x630 [ 177.011985][ T7077] tomoyo_path_number_perm+0x246/0x630 [ 177.012000][ T7077] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 177.012016][ T7077] ? __lock_acquire+0x6b5/0x2cf0 [ 177.012048][ T7077] ? __fget_files+0x2a/0x420 [ 177.012066][ T7077] ? __fget_files+0x3a0/0x420 [ 177.012080][ T7077] ? __fget_files+0x2a/0x420 [ 177.012097][ T7077] security_file_ioctl_compat+0xc3/0x2a0 [ 177.012112][ T7077] __ia32_compat_sys_ioctl+0x139/0x950 [ 177.012128][ T7077] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 177.012143][ T7077] ? __fget_files+0x3a0/0x420 [ 177.012162][ T7077] ? fput+0xa0/0xd0 [ 177.012177][ T7077] ? ksys_write+0x242/0x270 [ 177.012196][ T7077] __do_fast_syscall_32+0x20d/0x640 [ 177.012210][ T7077] ? do_fast_syscall_32+0x33/0x70 [ 177.012221][ T7077] ? asm_int80_emulation+0x1a/0x20 [ 177.012232][ T7077] ? do_int80_emulation+0x274/0x4d0 [ 177.012246][ T7077] do_fast_syscall_32+0x33/0x70 [ 177.012259][ T7077] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 177.012271][ T7077] RIP: 0023:0xf7f03f6c [ 177.012282][ T7077] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 177.012291][ T7077] RSP: 002b:00000000f53c650c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 177.012304][ T7077] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000002285 [ 177.012312][ T7077] RDX: 00000000800017c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 177.012318][ T7077] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 177.012324][ T7077] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 177.012331][ T7077] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 177.012347][ T7077] [ 177.012352][ T7077] ERROR: Out of memory at tomoyo_realpath_from_path. [ 177.359533][ T5918] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 177.477099][ T5893] usb 5-1: New USB device found, idVendor=0dba, idProduct=3000, bcdDevice=26.ea [ 177.513122][ T5893] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.546586][ T5893] usb 5-1: config 0 descriptor?? [ 177.585200][ T5893] usb 5-1: Invalid firmware size=18. [ 177.629405][ T5918] usb 4-1: Using ep0 maxpacket: 8 [ 177.763172][ T5918] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 177.795041][ T5918] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 177.881592][ T5918] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 177.896059][ T5918] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 177.910747][ T5918] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 177.921773][ T5918] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 178.086348][ T7086] netlink: 'syz.4.323': attribute type 21 has an invalid length. [ 178.278914][ T7086] netlink: 'syz.4.323': attribute type 6 has an invalid length. [ 178.290027][ T7086] netlink: 64 bytes leftover after parsing attributes in process `syz.4.323'. [ 178.322673][ T7066] syzkaller0: entered promiscuous mode [ 178.338455][ T7066] syzkaller0: entered allmulticast mode [ 178.709466][ T5918] usb 4-1: GET_CAPABILITIES returned 0 [ 178.720480][ T5918] usbtmc 4-1:16.0: can't read capabilities [ 179.130813][ C1] usbtmc 4-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 179.163568][ T7074] usbtmc 4-1:16.0: Unable to send data, error -71 [ 179.216675][ T5918] usb 4-1: USB disconnect, device number 12 [ 179.413296][ T7098] netlink: 4 bytes leftover after parsing attributes in process `syz.0.332'. [ 179.790966][ T7103] vivid-007: ================= START STATUS ================= [ 179.842012][ T7103] vivid-007: Enable Output Cropping: true grabbed [ 179.866967][ T7103] vivid-007: Enable Output Composing: true grabbed [ 179.894039][ T7103] vivid-007: Enable Output Scaler: true grabbed [ 179.951762][ T7103] vivid-007: Tx RGB Quantization Range: Automatic grabbed [ 179.977536][ T7107] netlink: 'syz.0.333': attribute type 3 has an invalid length. [ 179.985971][ T7103] vivid-007: Transmit Mode: HDMI grabbed [ 180.011032][ T7103] vivid-007: Hotplug Present: 0x00000000 [ 180.018106][ T7103] vivid-007: RxSense Present: 0x00000000 [ 180.072888][ T796] usb 5-1: USB disconnect, device number 5 [ 180.189373][ T7103] vivid-007: EDID Present: 0x00000000 [ 180.226603][ T7103] vivid-007: ================== END STATUS ================== [ 180.646097][ T7122] openvswitch: netlink: VXLAN extension message has 1 unknown bytes. [ 181.761668][ T5880] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 182.253910][ T5880] usb 3-1: device descriptor read/64, error -71 [ 182.790386][ T5880] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 182.852758][ T7140] netlink: 4 bytes leftover after parsing attributes in process `syz.4.343'. [ 182.919366][ T5880] usb 3-1: device descriptor read/64, error -71 [ 183.079165][ T5880] usb usb3-port1: attempt power cycle [ 183.274908][ T7160] netlink: 'syz.3.347': attribute type 3 has an invalid length. [ 183.389458][ T5830] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 183.545204][ T7167] vivid-007: ================= START STATUS ================= [ 183.552991][ T7167] vivid-007: Enable Output Cropping: true grabbed [ 183.561928][ T7167] vivid-007: Enable Output Composing: true grabbed [ 183.568716][ T7167] vivid-007: Enable Output Scaler: true grabbed [ 183.583896][ T5880] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 183.592485][ T7167] vivid-007: Tx RGB Quantization Range: Automatic grabbed [ 183.610210][ T5880] usb 3-1: device descriptor read/8, error -71 [ 183.616940][ T7167] vivid-007: Transmit Mode: HDMI grabbed [ 183.629160][ T7167] vivid-007: Hotplug Present: 0x00000000 [ 183.657651][ T7167] vivid-007: RxSense Present: 0x00000000 [ 183.667807][ T7167] vivid-007: EDID Present: 0x00000000 [ 183.700190][ T7167] vivid-007: ================== END STATUS ================== [ 183.713114][ T5830] usb 5-1: Using ep0 maxpacket: 8 [ 183.735032][ T5830] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 183.756938][ T5830] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 183.777565][ T5830] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 183.787718][ T5830] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 183.818959][ T5830] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 183.848572][ T5830] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.859564][ T5880] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 183.892682][ T5880] usb 3-1: device descriptor read/8, error -71 [ 184.022700][ T5880] usb usb3-port1: unable to enumerate USB device [ 184.364993][ T5830] usb 5-1: GET_CAPABILITIES returned 0 [ 184.398639][ T5830] usbtmc 5-1:16.0: can't read capabilities [ 184.873866][ T5893] usb 5-1: USB disconnect, device number 6 [ 184.883918][ T7179] fuse: Unknown parameter '0x0000000000000003' [ 184.979398][ T5830] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 185.038937][ T7184] netlink: 4 bytes leftover after parsing attributes in process `syz.2.355'. [ 185.139479][ T5830] usb 4-1: Using ep0 maxpacket: 8 [ 185.146462][ T5830] usb 4-1: config index 0 descriptor too short (expected 30, got 18) [ 185.158437][ T5830] usb 4-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 185.182456][ T5830] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.192831][ T5830] usb 4-1: Product: syz [ 185.197193][ T5830] usb 4-1: Manufacturer: syz [ 185.202294][ T5830] usb 4-1: SerialNumber: syz [ 185.224557][ T5830] usb 4-1: config 0 descriptor?? [ 185.261259][ T5830] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 185.287206][ T5830] usb 4-1: setting power ON [ 185.295913][ T5830] dvb-usb: bulk message failed: -22 (2/0) [ 185.310989][ T5830] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 185.324482][ T5830] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 185.345894][ T5830] usb 4-1: media controller created [ 185.384683][ T5830] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 185.577700][ T7177] dvb-usb: bulk message failed: -22 (3/0) [ 185.593176][ T7177] dvb-usb: bulk message failed: -22 (4/0) [ 185.607230][ T7177] cxusb: i2c read failed [ 185.705574][ T7195] openvswitch: netlink: VXLAN extension message has 1 unknown bytes. [ 185.723263][ T5830] usb 4-1: selecting invalid altsetting 6 [ 185.751204][ T5830] usb 4-1: digital interface selection failed (-22) [ 185.781315][ T5830] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 185.792932][ T5830] usb 4-1: setting power OFF [ 185.797931][ T5830] dvb-usb: bulk message failed: -22 (2/0) [ 185.807880][ T5830] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 185.831584][ T5830] (NULL device *): no alternate interface [ 186.089182][ T5830] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 186.229436][ T7209] netlink: 4 bytes leftover after parsing attributes in process `syz.4.363'. [ 186.403562][ T5830] usb 4-1: USB disconnect, device number 13 [ 187.400285][ T7225] fuse: Unknown parameter '0xffffffffffffffff' [ 188.577198][ T7240] netlink: 'syz.3.372': attribute type 3 has an invalid length. [ 188.587738][ T7240] netlink: 16 bytes leftover after parsing attributes in process `syz.3.372'. [ 189.260816][ T7250] netlink: 'syz.3.374': attribute type 3 has an invalid length. [ 190.008892][ T7259] openvswitch: netlink: VXLAN extension message has 1 unknown bytes. [ 190.069316][ T7261] fuse: Unknown parameter '0x0000000000000003' [ 192.687682][ T7289] netlink: 'syz.0.385': attribute type 3 has an invalid length. [ 193.089681][ T5917] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 193.171282][ T7300] fuse: Unknown parameter '0x0000000000000003' [ 193.259429][ T5917] usb 2-1: Using ep0 maxpacket: 8 [ 193.287176][ T5917] usb 2-1: config index 0 descriptor too short (expected 30, got 18) [ 193.327890][ T5917] usb 2-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 193.351434][ T5917] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.384254][ T5917] usb 2-1: Product: syz [ 193.405196][ T5917] usb 2-1: Manufacturer: syz [ 193.423272][ T5917] usb 2-1: SerialNumber: syz [ 193.436047][ T5917] usb 2-1: config 0 descriptor?? [ 193.448258][ T5917] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 193.457691][ T5917] usb 2-1: setting power ON [ 193.462823][ T5917] dvb-usb: bulk message failed: -22 (2/0) [ 193.662915][ T7313] vivid-007: ================= START STATUS ================= [ 193.671982][ T7293] dvb-usb: bulk message failed: -22 (3/0) [ 193.677889][ T7313] vivid-007: Enable Output Cropping: true grabbed [ 193.684671][ T7313] vivid-007: Enable Output Composing: true grabbed [ 193.691427][ T7313] vivid-007: Enable Output Scaler: true grabbed [ 193.697857][ T7313] vivid-007: Tx RGB Quantization Range: Automatic grabbed [ 193.705366][ T7313] vivid-007: Transmit Mode: HDMI grabbed [ 193.711323][ T7313] vivid-007: Hotplug Present: 0x00000000 [ 193.717235][ T7313] vivid-007: RxSense Present: 0x00000000 [ 193.723426][ T7313] vivid-007: EDID Present: 0x00000000 [ 193.730258][ T7313] vivid-007: ================== END STATUS ================== [ 193.787901][ T7293] dvb-usb: bulk message failed: -22 (4/0) [ 193.797746][ T7293] cxusb: i2c read failed [ 193.804173][ T5917] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 193.815103][ T5917] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 193.985699][ T5917] usb 2-1: media controller created [ 194.091475][ T5917] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 194.200357][ T5917] usb 2-1: selecting invalid altsetting 6 [ 194.207245][ T5917] usb 2-1: digital interface selection failed (-22) [ 194.214393][ T5917] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 194.246214][ T5917] usb 2-1: setting power OFF [ 194.251085][ T5917] dvb-usb: bulk message failed: -22 (2/0) [ 194.256923][ T5917] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 194.266913][ T5917] (NULL device *): no alternate interface [ 194.529910][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.544374][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.717403][ T5917] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 194.769457][ T5917] usb 2-1: USB disconnect, device number 8 [ 194.902950][ T7326] netlink: 'syz.3.398': attribute type 3 has an invalid length. [ 194.979361][ T5830] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 195.129472][ T5830] usb 1-1: Using ep0 maxpacket: 8 [ 195.147996][ T5830] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 195.184294][ T5830] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 195.220788][ T5830] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 195.247169][ T5830] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 195.284037][ T5830] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 195.324595][ T5830] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 195.399923][ T7338] fuse: Unknown parameter '0x0000000000000003' [ 195.609445][ T5917] usb 4-1: new full-speed USB device number 14 using dummy_hcd [ 195.663986][ T7347] openvswitch: netlink: VXLAN extension message has 1 unknown bytes. [ 195.731206][ T5830] usb 1-1: GET_CAPABILITIES returned 0 [ 195.748657][ T5830] usbtmc 1-1:16.0: can't read capabilities [ 195.792897][ T5917] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 195.895697][ T5917] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 195.935445][ T5917] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 195.960831][ T5917] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.029172][ T5917] usb 4-1: config 0 descriptor?? [ 196.053364][ T5917] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 196.063345][ T5917] dvb-usb: bulk message failed: -22 (3/0) [ 196.085075][ T5917] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 196.101995][ T5917] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 196.114005][ T5917] usb 4-1: media controller created [ 196.128151][ T5917] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 196.160749][ T5917] dvb-usb: bulk message failed: -22 (6/0) [ 196.174687][ T5917] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 196.189552][ T796] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 196.191856][ T5917] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input9 [ 196.232962][ T5917] dvb-usb: schedule remote query interval to 150 msecs. [ 196.258966][ T7336] dibusb: i2c wr: len=61 is too big! [ 196.258966][ T7336] [ 196.335167][ T5917] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 196.382124][ T5917] usb 4-1: USB disconnect, device number 14 [ 196.409382][ T796] usb 5-1: Using ep0 maxpacket: 8 [ 196.416944][ T796] usb 5-1: config index 0 descriptor too short (expected 30, got 18) [ 196.474320][ T5917] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 196.474326][ T796] usb 5-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 196.474351][ T796] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 196.474368][ T796] usb 5-1: Product: syz [ 196.572408][ T796] usb 5-1: Manufacturer: syz [ 196.597478][ T796] usb 5-1: SerialNumber: syz [ 196.626699][ T796] usb 5-1: config 0 descriptor?? [ 196.657295][ T796] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 196.669379][ T796] usb 5-1: setting power ON [ 196.686721][ T796] dvb-usb: bulk message failed: -22 (2/0) [ 196.716664][ T24] usb 1-1: USB disconnect, device number 5 [ 196.744054][ T796] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 196.768071][ T796] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 196.787234][ T796] usb 5-1: media controller created [ 196.814154][ T796] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 196.816096][ T7353] FAULT_INJECTION: forcing a failure. [ 196.816096][ T7353] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 196.823204][ T5893] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 196.836132][ T7353] CPU: 1 UID: 0 PID: 7353 Comm: syz.1.407 Tainted: G L syzkaller #0 PREEMPT(full) [ 196.836159][ T7353] Tainted: [L]=SOFTLOCKUP [ 196.836165][ T7353] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 196.836175][ T7353] Call Trace: [ 196.836184][ T7353] [ 196.836192][ T7353] dump_stack_lvl+0xe8/0x150 [ 196.836222][ T7353] should_fail_ex+0x412/0x560 [ 196.836251][ T7353] _copy_from_user+0x2d/0xb0 [ 196.836270][ T7353] get_compat_msghdr+0xb3/0x4c0 [ 196.836288][ T7353] ? __lock_acquire+0x6b5/0x2cf0 [ 196.836312][ T7353] ? __pfx_get_compat_msghdr+0x10/0x10 [ 196.836331][ T7353] ? kstrtoull+0x12f/0x1d0 [ 196.836358][ T7353] ___sys_sendmsg+0x201/0x360 [ 196.836383][ T7353] ? __pfx____sys_sendmsg+0x10/0x10 [ 196.836403][ T7353] ? get_pid_task+0x20/0x1f0 [ 196.836419][ T7353] ? get_pid_task+0x20/0x1f0 [ 196.836432][ T7353] ? get_pid_task+0x20/0x1f0 [ 196.836471][ T7353] ? __fget_files+0x2a/0x420 [ 196.836494][ T7353] ? __fget_files+0x3a0/0x420 [ 196.836526][ T7353] __sys_sendmsg+0x183/0x260 [ 196.836546][ T7353] ? __pfx___sys_sendmsg+0x10/0x10 [ 196.836584][ T7353] __do_fast_syscall_32+0x20d/0x640 [ 196.836605][ T7353] ? do_fast_syscall_32+0x33/0x70 [ 196.836622][ T7353] ? asm_int80_emulation+0x1a/0x20 [ 196.836646][ T7353] ? do_int80_emulation+0x274/0x4d0 [ 196.836662][ T7353] ? trace_irq_disable+0x3b/0x150 [ 196.836689][ T7353] do_fast_syscall_32+0x33/0x70 [ 196.836707][ T7353] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 196.836727][ T7353] RIP: 0023:0xf707ef6c [ 196.836742][ T7353] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 196.836755][ T7353] RSP: 002b:00000000f546d50c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 196.836775][ T7353] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000580 [ 196.836786][ T7353] RDX: 0000000000004000 RSI: 0000000000000000 RDI: 0000000000000000 [ 196.836796][ T7353] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 196.836806][ T7353] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 196.836816][ T7353] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 196.836841][ T7353] [ 197.037017][ T7349] dvb-usb: bulk message failed: -22 (3/0) [ 197.076873][ T7349] dvb-usb: bulk message failed: -22 (4/0) [ 197.088523][ T7349] cxusb: i2c read failed [ 197.135771][ T7357] dvb-usb: bulk message failed: -22 (3/0) [ 197.187656][ T7357] dvb-usb: bulk message failed: -22 (3/0) [ 197.257757][ T796] usb 5-1: selecting invalid altsetting 6 [ 197.263638][ T796] usb 5-1: digital interface selection failed (-22) [ 197.270733][ T796] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 197.280635][ T796] usb 5-1: setting power OFF [ 197.285492][ T796] dvb-usb: bulk message failed: -22 (2/0) [ 197.299372][ T796] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 197.317094][ T796] (NULL device *): no alternate interface [ 197.391831][ T796] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 197.435624][ T5893] usb 3-1: Using ep0 maxpacket: 8 [ 197.453158][ T5893] usb 3-1: config index 0 descriptor too short (expected 30, got 18) [ 197.471483][ T5893] usb 3-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 197.497723][ T796] usb 5-1: USB disconnect, device number 7 [ 197.506861][ T7361] netlink: 'syz.3.410': attribute type 3 has an invalid length. [ 197.515168][ T5893] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 197.515198][ T5893] usb 3-1: Product: syz [ 197.515214][ T5893] usb 3-1: Manufacturer: syz [ 197.515230][ T5893] usb 3-1: SerialNumber: syz [ 197.549987][ T5893] usb 3-1: config 0 descriptor?? [ 197.621981][ T5893] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 197.656138][ T5893] usb 3-1: setting power ON [ 197.663537][ T5893] dvb-usb: bulk message failed: -22 (2/0) [ 197.676182][ T5893] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 197.687599][ T5893] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 197.710505][ T5893] usb 3-1: media controller created [ 197.761776][ T7351] dvb-usb: bulk message failed: -22 (3/0) [ 197.767940][ T7351] dvb-usb: bulk message failed: -22 (4/0) [ 197.773763][ T7351] cxusb: i2c read failed [ 197.814027][ T5893] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 197.877047][ T7370] fuse: Unknown parameter '0x0000000000000003' [ 197.889888][ T5893] usb 3-1: selecting invalid altsetting 6 [ 197.901416][ T5893] usb 3-1: digital interface selection failed (-22) [ 197.908159][ T5893] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 197.920768][ T5893] usb 3-1: setting power OFF [ 197.951156][ T5893] dvb-usb: bulk message failed: -22 (2/0) [ 197.960665][ T5893] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 197.980104][ T5893] (NULL device *): no alternate interface [ 198.102541][ T5893] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 198.161091][ T5893] usb 3-1: USB disconnect, device number 15 [ 198.820916][ T7396] FAULT_INJECTION: forcing a failure. [ 198.820916][ T7396] name failslab, interval 1, probability 0, space 0, times 0 [ 198.937598][ T7396] CPU: 0 UID: 0 PID: 7396 Comm: syz.2.420 Tainted: G L syzkaller #0 PREEMPT(full) [ 198.937622][ T7396] Tainted: [L]=SOFTLOCKUP [ 198.937629][ T7396] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 198.937635][ T7396] Call Trace: [ 198.937641][ T7396] [ 198.937647][ T7396] dump_stack_lvl+0xe8/0x150 [ 198.937669][ T7396] should_fail_ex+0x412/0x560 [ 198.937688][ T7396] should_failslab+0xa8/0x100 [ 198.937704][ T7396] __kmalloc_noprof+0xe8/0x760 [ 198.937718][ T7396] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 198.937738][ T7396] tomoyo_realpath_from_path+0xe3/0x5d0 [ 198.937760][ T7396] ? tomoyo_path_number_perm+0x219/0x630 [ 198.937774][ T7396] tomoyo_path_number_perm+0x246/0x630 [ 198.937796][ T7396] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 198.937812][ T7396] ? __lock_acquire+0x6b5/0x2cf0 [ 198.937844][ T7396] ? __fget_files+0x2a/0x420 [ 198.937862][ T7396] ? __fget_files+0x3a0/0x420 [ 198.937877][ T7396] ? __fget_files+0x2a/0x420 [ 198.937894][ T7396] security_file_ioctl_compat+0xc3/0x2a0 [ 198.937910][ T7396] __ia32_compat_sys_ioctl+0x139/0x950 [ 198.937926][ T7396] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 198.937944][ T7396] ? __fget_files+0x3a0/0x420 [ 198.937975][ T7396] ? fput+0xa0/0xd0 [ 198.937999][ T7396] ? ksys_write+0x242/0x270 [ 198.938029][ T7396] __do_fast_syscall_32+0x20d/0x640 [ 198.938052][ T7396] ? do_fast_syscall_32+0x33/0x70 [ 198.938071][ T7396] ? asm_int80_emulation+0x1a/0x20 [ 198.938089][ T7396] ? do_int80_emulation+0x274/0x4d0 [ 198.938109][ T7396] ? trace_irq_disable+0x3b/0x150 [ 198.938140][ T7396] do_fast_syscall_32+0x33/0x70 [ 198.938162][ T7396] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 198.938183][ T7396] RIP: 0023:0xf705ef6c [ 198.938201][ T7396] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 198.938216][ T7396] RSP: 002b:00000000f544d50c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 198.938258][ T7396] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000008931 [ 198.938272][ T7396] RDX: 0000000080000040 RSI: 0000000000000000 RDI: 0000000000000000 [ 198.938283][ T7396] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 198.938294][ T7396] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 198.938305][ T7396] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 198.938334][ T7396] [ 198.938451][ T7396] ERROR: Out of memory at tomoyo_realpath_from_path. [ 199.734326][ T7398] netlink: 'syz.3.421': attribute type 10 has an invalid length. [ 199.823166][ T7398] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 199.961349][ T7401] netlink: 'syz.2.422': attribute type 3 has an invalid length. [ 199.983537][ T7398] 8021q: adding VLAN 0 to HW filter on device bond1 [ 200.039133][ T7403] bond_slave_0: entered promiscuous mode [ 200.045111][ T7403] bond_slave_1: entered promiscuous mode [ 200.050925][ T7403] syz_tun: entered promiscuous mode [ 200.121062][ T7403] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 200.128643][ T7403] bond1: (slave macvlan2): unknown ethtool speed (30000) for port 1 (set it to 0) [ 200.139386][ T7403] bond1: (slave macvlan2): speed changed to 0 on port 1 [ 200.183909][ T7403] bond1: (slave macvlan2): Enslaving as an active interface with an up link [ 200.523818][ T7412] fuse: Unknown parameter 'fd0x0000000000000003' [ 200.629509][ T5917] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 200.645541][ T7414] netlink: 'syz.1.428': attribute type 3 has an invalid length. [ 200.790172][ T5917] usb 4-1: Using ep0 maxpacket: 8 [ 200.803378][ T5917] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 200.860382][ T5917] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 200.900970][ T5917] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 200.967737][ T5917] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 201.024117][ T5917] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 201.054594][ T5917] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.259371][ T5918] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 201.459968][ T5918] usb 2-1: Using ep0 maxpacket: 8 [ 201.581651][ T5918] usb 2-1: config index 0 descriptor too short (expected 30, got 18) [ 201.593125][ T5918] usb 2-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 201.602890][ T5918] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 201.612885][ T5918] usb 2-1: Product: syz [ 201.617229][ T5918] usb 2-1: Manufacturer: syz [ 201.622325][ T5918] usb 2-1: SerialNumber: syz [ 201.633708][ T5918] usb 2-1: config 0 descriptor?? [ 201.654386][ T5918] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 201.665469][ T5918] usb 2-1: setting power ON [ 201.671827][ T5918] dvb-usb: bulk message failed: -22 (2/0) [ 201.696139][ T5918] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 201.708064][ T5918] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 201.721894][ T5918] usb 2-1: media controller created [ 201.857885][ T5918] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 201.868315][ T7423] dvb-usb: bulk message failed: -22 (3/0) [ 201.887794][ T7423] dvb-usb: bulk message failed: -22 (4/0) [ 201.914717][ T7423] cxusb: i2c read failed [ 202.356602][ T5918] usb 2-1: selecting invalid altsetting 6 [ 202.491178][ T5917] usb 4-1: usb_control_msg returned -71 [ 202.496788][ T5917] usbtmc 4-1:16.0: can't read capabilities [ 202.509453][ T5918] usb 2-1: digital interface selection failed (-22) [ 202.516094][ T5918] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 202.605908][ T5918] usb 2-1: setting power OFF [ 202.615845][ T5918] dvb-usb: bulk message failed: -22 (2/0) [ 202.624274][ T5917] usb 4-1: USB disconnect, device number 15 [ 202.642209][ T5918] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 202.675281][ T5918] (NULL device *): no alternate interface [ 202.816723][ T5918] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 202.888636][ T5918] usb 2-1: USB disconnect, device number 9 [ 202.960204][ T7446] fuse: Unknown parameter 'fd0x0000000000000003' [ 203.216822][ T7454] vivid-007: ================= START STATUS ================= [ 203.286665][ T7454] vivid-007: Enable Output Cropping: true grabbed [ 203.294133][ T7454] vivid-007: Enable Output Composing: true grabbed [ 203.301786][ T7454] vivid-007: Enable Output Scaler: true grabbed [ 203.311009][ T7454] vivid-007: Tx RGB Quantization Range: Automatic grabbed [ 203.326155][ T7454] vivid-007: Transmit Mode: HDMI grabbed [ 203.335480][ T7454] vivid-007: Hotplug Present: 0x00000000 [ 203.344404][ T7454] vivid-007: RxSense Present: 0x00000000 [ 203.355733][ T7454] vivid-007: EDID Present: 0x00000000 [ 203.365770][ T7454] vivid-007: ================== END STATUS ================== [ 204.802664][ T7481] netlink: 72 bytes leftover after parsing attributes in process `syz.1.448'. [ 204.879461][ T5893] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 205.449324][ T5893] usb 1-1: Using ep0 maxpacket: 8 [ 205.481249][ T5893] usb 1-1: config index 0 descriptor too short (expected 30, got 18) [ 205.508975][ T5893] usb 1-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 205.530444][ T5893] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 205.559361][ T5893] usb 1-1: Product: syz [ 205.570937][ T5893] usb 1-1: Manufacturer: syz [ 205.579443][ T7487] fuse: Unknown parameter 'fd0x0000000000000003' [ 205.585862][ T5893] usb 1-1: SerialNumber: syz [ 205.606053][ T5893] usb 1-1: config 0 descriptor?? [ 205.632634][ T5893] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 205.663764][ T5893] usb 1-1: setting power ON [ 205.671162][ T5893] dvb-usb: bulk message failed: -22 (2/0) [ 205.685733][ T5893] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 205.696536][ T5893] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 205.712861][ T5893] usb 1-1: media controller created [ 205.852209][ T7475] dvb-usb: bulk message failed: -22 (3/0) [ 205.858080][ T7475] dvb-usb: bulk message failed: -22 (4/0) [ 205.877309][ T7475] cxusb: i2c read failed [ 205.891519][ T5893] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 206.054518][ T5893] usb 1-1: selecting invalid altsetting 6 [ 206.063556][ T5893] usb 1-1: digital interface selection failed (-22) [ 206.074523][ T5893] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 206.090236][ T5893] usb 1-1: setting power OFF [ 206.098112][ T5893] dvb-usb: bulk message failed: -22 (2/0) [ 206.111690][ T5893] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 206.121941][ T5911] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 206.145324][ T5893] (NULL device *): no alternate interface [ 206.238284][ T5893] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 206.281054][ T5911] usb 5-1: Using ep0 maxpacket: 8 [ 206.300059][ T5911] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 206.318147][ T5893] usb 1-1: USB disconnect, device number 6 [ 206.382945][ T5911] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 206.398064][ T5911] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 206.409187][ T5911] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 206.475492][ T5911] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 206.538944][ T5911] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 206.903338][ T5836] Bluetooth: hci4: command 0x0406 tx timeout [ 206.905089][ T5838] Bluetooth: hci3: command 0x0406 tx timeout [ 206.909625][ T5836] Bluetooth: hci0: command 0x0406 tx timeout [ 206.917463][ T5838] Bluetooth: hci1: command 0x0406 tx timeout [ 206.927967][ T5838] Bluetooth: hci2: command 0x0406 tx timeout [ 207.084621][ T7502] openvswitch: netlink: VXLAN extension message has 1 unknown bytes. [ 207.879917][ T7508] vivid-007: ================= START STATUS ================= [ 207.887632][ T7508] vivid-007: Enable Output Cropping: true grabbed [ 207.925095][ T7508] vivid-007: Enable Output Composing: true grabbed [ 207.970049][ T7508] vivid-007: Enable Output Scaler: true grabbed [ 207.996095][ T7508] vivid-007: Tx RGB Quantization Range: Automatic grabbed [ 208.035217][ T7508] vivid-007: Transmit Mode: HDMI grabbed [ 208.112141][ T7508] vivid-007: Hotplug Present: 0x00000000 [ 208.129309][ T7508] vivid-007: RxSense Present: 0x00000000 [ 208.146766][ T7508] vivid-007: EDID Present: 0x00000000 [ 208.157030][ T7508] vivid-007: ================== END STATUS ================== [ 208.295538][ T5911] usb 5-1: usb_control_msg returned -71 [ 208.314746][ T5911] usbtmc 5-1:16.0: can't read capabilities [ 208.370772][ T5911] usb 5-1: USB disconnect, device number 8 [ 208.754403][ T7529] FAULT_INJECTION: forcing a failure. [ 208.754403][ T7529] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 208.784248][ T7529] CPU: 1 UID: 0 PID: 7529 Comm: syz.2.463 Tainted: G L syzkaller #0 PREEMPT(full) [ 208.784280][ T7529] Tainted: [L]=SOFTLOCKUP [ 208.784287][ T7529] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 208.784297][ T7529] Call Trace: [ 208.784305][ T7529] [ 208.784313][ T7529] dump_stack_lvl+0xe8/0x150 [ 208.784349][ T7529] should_fail_ex+0x412/0x560 [ 208.784369][ T7529] _copy_from_user+0x2d/0xb0 [ 208.784388][ T7529] __sys_connect+0x156/0x450 [ 208.784410][ T7529] ? __pfx___sys_connect+0x10/0x10 [ 208.784448][ T7529] __ia32_sys_connect+0x7a/0x90 [ 208.784467][ T7529] __do_fast_syscall_32+0x20d/0x640 [ 208.784491][ T7529] ? do_fast_syscall_32+0x33/0x70 [ 208.784508][ T7529] ? asm_int80_emulation+0x1a/0x20 [ 208.784525][ T7529] ? do_int80_emulation+0x274/0x4d0 [ 208.784543][ T7529] ? trace_irq_disable+0x3b/0x150 [ 208.784570][ T7529] do_fast_syscall_32+0x33/0x70 [ 208.784591][ T7529] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 208.784612][ T7529] RIP: 0023:0xf705ef6c [ 208.784630][ T7529] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 208.784645][ T7529] RSP: 002b:00000000f540b50c EFLAGS: 00000206 ORIG_RAX: 000000000000016a [ 208.784674][ T7529] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800002c0 [ 208.784686][ T7529] RDX: 000000000000006e RSI: 0000000000000000 RDI: 0000000000000000 [ 208.784697][ T7529] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 208.784706][ T7529] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 208.784713][ T7529] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 208.784730][ T7529] [ 209.279317][ T5911] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 209.456137][ T5911] usb 5-1: Using ep0 maxpacket: 8 [ 209.464261][ T5911] usb 5-1: config index 0 descriptor too short (expected 30, got 18) [ 209.475968][ T5911] usb 5-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 209.485519][ T5911] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 209.513034][ T7538] openvswitch: netlink: VXLAN extension message has 1 unknown bytes. [ 209.692706][ T5911] usb 5-1: Product: syz [ 209.696966][ T5911] usb 5-1: Manufacturer: syz [ 209.866466][ T5911] usb 5-1: SerialNumber: syz [ 210.224190][ T5911] usb 5-1: config 0 descriptor?? [ 210.253561][ T5911] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 210.289637][ T5911] usb 5-1: setting power ON [ 210.295154][ T5911] dvb-usb: bulk message failed: -22 (2/0) [ 210.477438][ T5918] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 210.521470][ T5911] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 210.851147][ T5911] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 210.879355][ T5911] usb 5-1: media controller created [ 210.923050][ T5911] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 210.960611][ T5918] usb 3-1: Using ep0 maxpacket: 8 [ 210.968467][ T5918] usb 3-1: config index 0 descriptor too short (expected 30, got 18) [ 210.979841][ T5918] usb 3-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 210.989165][ T5918] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 211.026598][ T5911] usb 5-1: selecting invalid altsetting 6 [ 211.039338][ T5918] usb 3-1: Product: syz [ 211.054943][ T5911] usb 5-1: digital interface selection failed (-22) [ 211.065192][ T5918] usb 3-1: Manufacturer: syz [ 211.091017][ T5918] usb 3-1: SerialNumber: syz [ 211.091362][ T5911] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 211.128287][ T5918] usb 3-1: config 0 descriptor?? [ 211.167252][ T5911] usb 5-1: setting power OFF [ 211.199946][ T5918] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 211.203119][ T5911] dvb-usb: bulk message failed: -22 (2/0) [ 211.208026][ T5918] usb 3-1: setting power ON [ 211.294041][ T5911] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 211.339338][ T5911] (NULL device *): no alternate interface [ 211.351299][ T7554] dvb-usb: bulk message failed: -22 (3/0) [ 211.363106][ T5918] dvb-usb: bulk message failed: -22 (2/0) [ 211.384508][ T5918] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 211.410709][ T7554] dvb-usb: bulk message failed: -22 (64/0) [ 211.416790][ T7543] dvb-usb: bulk message failed: -22 (4/0) [ 211.423865][ T7543] cxusb: i2c read failed [ 211.433145][ T7555] vivid-007: ================= START STATUS ================= [ 211.442032][ T7555] vivid-007: Enable Output Cropping: true grabbed [ 211.454527][ T7555] vivid-007: Enable Output Composing: true grabbed [ 211.481501][ T7555] vivid-007: Enable Output Scaler: true grabbed [ 211.643692][ T7555] vivid-007: Tx RGB Quantization Range: Automatic grabbed [ 211.646950][ T5918] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 211.660729][ T7555] vivid-007: Transmit Mode: HDMI grabbed [ 211.666596][ T7555] vivid-007: Hotplug Present: 0x00000000 [ 211.672751][ T5918] usb 3-1: media controller created [ 211.679611][ T7555] vivid-007: RxSense Present: 0x00000000 [ 211.689021][ T7555] vivid-007: EDID Present: 0x00000000 [ 211.696780][ T7555] vivid-007: ================== END STATUS ================== [ 211.786847][ T5918] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 211.841687][ T5911] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 211.878210][ T5918] usb 3-1: selecting invalid altsetting 6 [ 211.888485][ T5911] usb 5-1: USB disconnect, device number 9 [ 212.462618][ T5918] usb 3-1: digital interface selection failed (-22) [ 212.518368][ T5918] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 212.555662][ T5918] usb 3-1: setting power OFF [ 212.608267][ T5918] dvb-usb: bulk message failed: -22 (2/0) [ 212.663639][ T5918] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 212.686506][ T5918] (NULL device *): no alternate interface [ 212.724948][ T5918] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 212.804883][ T5918] usb 3-1: USB disconnect, device number 16 [ 213.159450][ T5918] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 213.569299][ T5918] usb 3-1: Using ep0 maxpacket: 8 [ 213.577268][ T5918] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 213.611369][ T5918] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 213.700151][ T5918] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 213.717463][ T5918] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 213.732603][ T5918] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 213.743708][ T5918] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 214.009331][ T5911] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 214.139592][ T796] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 214.159343][ T5911] usb 5-1: Using ep0 maxpacket: 8 [ 214.166486][ T5911] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 214.268564][ T5918] usb 3-1: usb_control_msg returned -71 [ 214.274211][ T5918] usbtmc 3-1:16.0: can't read capabilities [ 214.289950][ T5918] usb 3-1: USB disconnect, device number 17 [ 214.328986][ T5911] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 214.339621][ T796] usb 2-1: Using ep0 maxpacket: 8 [ 214.436632][ T5911] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 214.488007][ T796] usb 2-1: config index 0 descriptor too short (expected 30, got 18) [ 214.501023][ T5911] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 214.517387][ T796] usb 2-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 214.528627][ T796] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.537310][ T5911] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 214.554448][ T796] usb 2-1: Product: syz [ 214.558803][ T796] usb 2-1: Manufacturer: syz [ 214.563517][ T5911] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 214.574069][ T796] usb 2-1: SerialNumber: syz [ 214.599979][ T796] usb 2-1: config 0 descriptor?? [ 214.609511][ T796] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 214.622690][ T796] usb 2-1: setting power ON [ 214.627603][ T796] dvb-usb: bulk message failed: -22 (2/0) [ 214.638228][ T796] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 214.661586][ T796] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 214.677383][ T796] usb 2-1: media controller created [ 214.704559][ T796] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 214.741835][ T796] usb 2-1: selecting invalid altsetting 6 [ 214.754021][ T796] usb 2-1: digital interface selection failed (-22) [ 214.767638][ T796] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 214.785604][ T796] usb 2-1: setting power OFF [ 214.793803][ T796] dvb-usb: bulk message failed: -22 (2/0) [ 214.804667][ T796] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 215.239429][ T796] (NULL device *): no alternate interface [ 215.322083][ T7587] dvb-usb: bulk message failed: -22 (3/0) [ 215.351574][ T7587] dvb-usb: bulk message failed: -22 (4/0) [ 215.367052][ T7587] cxusb: i2c read failed [ 215.402745][ T796] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 215.459464][ T5911] usb 5-1: GET_CAPABILITIES returned 0 [ 215.472446][ T5911] usbtmc 5-1:16.0: can't read capabilities [ 215.519653][ T796] usb 2-1: USB disconnect, device number 10 [ 215.670138][ T5918] usb 3-1: new full-speed USB device number 18 using dummy_hcd [ 215.857656][ T5917] usb 5-1: USB disconnect, device number 10 [ 215.957102][ T5918] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 215.977261][ T5918] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 216.009449][ T5918] usb 3-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 216.021121][ T5918] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 216.042337][ T5918] usb 3-1: config 0 descriptor?? [ 216.054693][ T5918] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 216.062363][ T5918] dvb-usb: bulk message failed: -22 (3/0) [ 216.075860][ T5918] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 216.088120][ T7606] vivid-007: ================= START STATUS ================= [ 216.096001][ T7606] vivid-007: Enable Output Cropping: true grabbed [ 216.102585][ T7606] vivid-007: Enable Output Composing: true grabbed [ 216.111670][ T7606] vivid-007: Enable Output Scaler: true grabbed [ 216.130307][ T7606] vivid-007: Tx RGB Quantization Range: Automatic grabbed [ 216.143732][ T7606] vivid-007: Transmit Mode: HDMI grabbed [ 216.159540][ T7606] vivid-007: Hotplug Present: 0x00000000 [ 216.170537][ T7606] vivid-007: RxSense Present: 0x00000000 [ 216.177501][ T7606] vivid-007: EDID Present: 0x00000000 [ 216.185529][ T7606] vivid-007: ================== END STATUS ================== [ 216.197602][ T24] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 216.209734][ T5918] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 216.217223][ T5918] usb 3-1: media controller created [ 216.225554][ T5918] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 216.256022][ T7596] dibusb: i2c wr: len=61 is too big! [ 216.256022][ T7596] [ 216.270232][ T5918] dvb-usb: bulk message failed: -22 (6/0) [ 216.286790][ T5918] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 216.315338][ T5918] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input10 [ 216.343039][ T5918] dvb-usb: schedule remote query interval to 150 msecs. [ 216.350350][ T24] usb 1-1: Using ep0 maxpacket: 8 [ 216.358941][ T24] usb 1-1: config index 0 descriptor too short (expected 30, got 18) [ 216.368294][ T5918] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 216.385847][ T24] usb 1-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 216.411380][ T5918] usb 3-1: USB disconnect, device number 18 [ 216.417459][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 216.433951][ T24] usb 1-1: Product: syz [ 216.441906][ T24] usb 1-1: Manufacturer: syz [ 216.461638][ T24] usb 1-1: SerialNumber: syz [ 216.488996][ T5918] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 216.500368][ T24] usb 1-1: config 0 descriptor?? [ 216.513157][ T24] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 216.535797][ T24] usb 1-1: setting power ON [ 216.550136][ T24] dvb-usb: bulk message failed: -22 (2/0) [ 216.746102][ T24] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 216.767733][ T24] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 216.787207][ T24] usb 1-1: media controller created [ 216.856770][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 216.951487][ T24] usb 1-1: selecting invalid altsetting 6 [ 216.981911][ T24] usb 1-1: digital interface selection failed (-22) [ 217.004099][ T24] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 217.034828][ T24] usb 1-1: setting power OFF [ 217.064918][ T24] dvb-usb: bulk message failed: -22 (2/0) [ 217.084611][ T24] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 217.171431][ T24] (NULL device *): no alternate interface [ 217.466811][ T24] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 217.928014][ T24] usb 1-1: USB disconnect, device number 7 [ 218.600083][ T10] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 218.703463][ T796] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 219.096035][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 219.124905][ T10] usb 4-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 219.135599][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 219.209518][ T10] usb 4-1: Product: syz [ 219.213721][ T10] usb 4-1: Manufacturer: syz [ 219.218449][ T10] usb 4-1: SerialNumber: syz [ 219.224648][ T796] usb 1-1: Using ep0 maxpacket: 8 [ 219.231944][ T796] usb 1-1: config index 0 descriptor too short (expected 30, got 18) [ 219.248591][ T796] usb 1-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 219.257865][ T796] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 219.268780][ T10] usb 4-1: config 0 descriptor?? [ 219.276744][ T796] usb 1-1: Product: syz [ 219.289271][ T796] usb 1-1: Manufacturer: syz [ 219.302675][ T796] usb 1-1: SerialNumber: syz [ 219.340902][ T796] usb 1-1: config 0 descriptor?? [ 219.362069][ T796] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 219.373901][ T796] usb 1-1: setting power ON [ 219.386249][ T796] dvb-usb: bulk message failed: -22 (2/0) [ 219.398600][ T796] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 219.410448][ T796] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 219.479601][ T796] usb 1-1: media controller created [ 219.496571][ T796] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 219.579311][ T24] usb 5-1: new full-speed USB device number 11 using dummy_hcd [ 219.584383][ T7639] dvb-usb: bulk message failed: -22 (3/0) [ 219.937385][ T7639] dvb-usb: bulk message failed: -22 (4/0) [ 219.969357][ T7639] cxusb: i2c read failed [ 219.977836][ T796] usb 1-1: selecting invalid altsetting 6 [ 219.988222][ T796] usb 1-1: digital interface selection failed (-22) [ 220.007527][ T796] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 220.027621][ T796] usb 1-1: setting power OFF [ 220.033880][ T796] dvb-usb: bulk message failed: -22 (2/0) [ 220.040370][ T796] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 220.054997][ T24] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 220.055415][ T796] (NULL device *): no alternate interface [ 220.080265][ T24] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 220.115238][ T7649] netlink: 24 bytes leftover after parsing attributes in process `syz.2.499'. [ 220.142629][ T24] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 220.166742][ T796] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 220.188411][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 220.202076][ T796] usb 1-1: USB disconnect, device number 8 [ 220.270543][ T24] usb 5-1: config 0 descriptor?? [ 220.291405][ T24] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 220.308334][ T24] dvb-usb: bulk message failed: -22 (3/0) [ 220.332708][ T24] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 220.366398][ T24] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 220.373919][ T24] usb 5-1: media controller created [ 220.389385][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 220.491970][ T24] dvb-usb: bulk message failed: -22 (6/0) [ 220.498396][ T24] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 220.508485][ T7647] dibusb: i2c wr: len=61 is too big! [ 220.508485][ T7647] [ 220.510608][ T24] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input11 [ 220.564861][ T24] dvb-usb: schedule remote query interval to 150 msecs. [ 220.648952][ T24] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 220.695676][ T24] usb 5-1: USB disconnect, device number 11 [ 220.786195][ T24] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 220.951597][ T5918] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 221.084909][ T10] peak_usb 4-1:0.0 can0: unable to request usb[type=0 value=1] err=-71 [ 221.131513][ T5918] usb 3-1: Using ep0 maxpacket: 8 [ 221.161813][ T5918] usb 3-1: config index 0 descriptor too short (expected 30, got 18) [ 221.179467][ T10] peak_usb 4-1:0.0: unable to read PCAN-USB Pro firmware info (err -71) [ 221.281303][ T5918] usb 3-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 221.296783][ T5918] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 221.340875][ T5918] usb 3-1: Product: syz [ 221.345092][ T5918] usb 3-1: Manufacturer: syz [ 221.351748][ T10] peak_usb 4-1:0.0: probe with driver peak_usb failed with error -71 [ 221.401209][ T5918] usb 3-1: SerialNumber: syz [ 221.451510][ T5918] usb 3-1: config 0 descriptor?? [ 221.459292][ T10] usb 4-1: USB disconnect, device number 16 [ 221.464339][ T5918] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 221.504983][ T5918] usb 3-1: setting power ON [ 221.528642][ T5918] dvb-usb: bulk message failed: -22 (2/0) [ 221.561619][ T5918] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 221.616805][ T5918] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 221.668771][ T7660] dvb-usb: bulk message failed: -22 (3/0) [ 221.676029][ T5918] usb 3-1: media controller created [ 221.680805][ T7660] dvb-usb: bulk message failed: -22 (4/0) [ 221.695996][ T5918] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 221.699565][ T7660] cxusb: i2c read failed [ 221.910923][ T5918] usb 3-1: selecting invalid altsetting 6 [ 221.916927][ T5918] usb 3-1: digital interface selection failed (-22) [ 221.932029][ T5918] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 221.972837][ T5918] usb 3-1: setting power OFF [ 222.017046][ T5918] dvb-usb: bulk message failed: -22 (2/0) [ 222.023144][ T5918] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 222.034881][ T5918] (NULL device *): no alternate interface [ 222.173298][ T5918] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 222.414214][ T5918] usb 3-1: USB disconnect, device number 19 [ 222.951212][ T796] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 222.969181][ T7698] netlink: 28 bytes leftover after parsing attributes in process `syz.4.514'. [ 223.139649][ T796] usb 2-1: Using ep0 maxpacket: 8 [ 223.186385][ T796] usb 2-1: config index 0 descriptor too short (expected 30, got 18) [ 223.201875][ T796] usb 2-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 223.226327][ T796] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.246583][ T796] usb 2-1: Product: syz [ 223.269445][ T796] usb 2-1: Manufacturer: syz [ 223.287137][ T796] usb 2-1: SerialNumber: syz [ 223.299565][ T796] usb 2-1: config 0 descriptor?? [ 223.335384][ T796] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 223.355332][ T796] usb 2-1: setting power ON [ 223.368864][ T796] dvb-usb: bulk message failed: -22 (2/0) [ 223.390522][ T796] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 223.474480][ T7708] netlink: 72 bytes leftover after parsing attributes in process `syz.2.516'. [ 223.575844][ T7689] dvb-usb: bulk message failed: -22 (3/0) [ 223.586294][ T7706] netlink: 72 bytes leftover after parsing attributes in process `syz.4.515'. [ 223.637213][ T7689] dvb-usb: bulk message failed: -22 (4/0) [ 223.864201][ T796] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 223.883161][ T796] usb 2-1: media controller created [ 223.883218][ T7689] cxusb: i2c read failed [ 224.003287][ T796] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 224.046892][ T796] usb 2-1: selecting invalid altsetting 6 [ 224.055623][ T796] usb 2-1: digital interface selection failed (-22) [ 224.079573][ T796] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 224.179132][ T796] usb 2-1: setting power OFF [ 224.193867][ T796] dvb-usb: bulk message failed: -22 (2/0) [ 224.218467][ T796] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 224.274474][ T796] (NULL device *): no alternate interface [ 224.700579][ T796] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 224.862124][ T7720] vivid-007: ================= START STATUS ================= [ 224.871475][ T7720] vivid-007: Enable Output Cropping: true grabbed [ 224.881881][ T7720] vivid-007: Enable Output Composing: true grabbed [ 224.912222][ T796] usb 2-1: USB disconnect, device number 11 [ 224.967410][ T7720] vivid-007: Enable Output Scaler: true grabbed [ 224.974252][ T7720] vivid-007: Tx RGB Quantization Range: Automatic grabbed [ 224.981767][ T7720] vivid-007: Transmit Mode: HDMI grabbed [ 224.997018][ T7720] vivid-007: Hotplug Present: 0x00000000 [ 225.011896][ T7720] vivid-007: RxSense Present: 0x00000000 [ 225.021786][ T7720] vivid-007: EDID Present: 0x00000000 [ 225.034026][ T7720] vivid-007: ================== END STATUS ================== [ 225.499363][ T24] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 225.669847][ T24] usb 4-1: Using ep0 maxpacket: 8 [ 225.679664][ T24] usb 4-1: config index 0 descriptor too short (expected 30, got 18) [ 225.696904][ T24] usb 4-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 225.706342][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 225.926066][ T24] usb 4-1: Product: syz [ 225.942454][ T24] usb 4-1: Manufacturer: syz [ 225.964040][ T24] usb 4-1: SerialNumber: syz [ 226.059079][ T24] usb 4-1: config 0 descriptor?? [ 226.087427][ T24] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 226.100838][ T24] usb 4-1: setting power ON [ 226.105497][ T24] dvb-usb: bulk message failed: -22 (2/0) [ 226.161522][ T24] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 226.186817][ T24] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 226.207832][ T24] usb 4-1: media controller created [ 226.472922][ T7739] netlink: 28 bytes leftover after parsing attributes in process `syz.1.525'. [ 226.491641][ T7737] FAULT_INJECTION: forcing a failure. [ 226.491641][ T7737] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 226.568938][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 226.694189][ T24] usb 4-1: selecting invalid altsetting 6 [ 226.709717][ T24] usb 4-1: digital interface selection failed (-22) [ 226.729287][ T24] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 226.729287][ T7737] CPU: 0 UID: 0 PID: 7737 Comm: syz.2.526 Tainted: G L syzkaller #0 PREEMPT(full) [ 226.729317][ T7737] Tainted: [L]=SOFTLOCKUP [ 226.729324][ T7737] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 226.729333][ T7737] Call Trace: [ 226.729340][ T7737] [ 226.729348][ T7737] dump_stack_lvl+0xe8/0x150 [ 226.729377][ T7737] should_fail_ex+0x412/0x560 [ 226.729406][ T7737] copy_fpstate_to_sigframe+0xad2/0xd90 [ 226.729430][ T7737] ? copy_fpstate_to_sigframe+0x196/0xd90 [ 226.729456][ T7737] ? __pfx_copy_fpstate_to_sigframe+0x10/0x10 [ 226.729477][ T7737] ? __lock_acquire+0x6b5/0x2cf0 [ 226.729510][ T7737] ? lapic_next_event+0x11/0x20 [ 226.729531][ T7737] ? clockevents_program_event+0x247/0x350 [ 226.729555][ T7737] ? fpu__alloc_mathframe+0xac/0x130 [ 226.729578][ T7737] get_sigframe+0x5f7/0x820 [ 226.729605][ T7737] ? __pfx_get_sigframe+0x10/0x10 [ 226.729631][ T7737] ? posixtimer_deliver_signal+0x304/0x410 [ 226.729659][ T7737] ia32_setup_rt_frame+0x110/0xae0 [ 226.729687][ T7737] ? _raw_spin_unlock_irq+0x2e/0x50 [ 226.729703][ T7737] ? get_signal+0x114f/0x1330 [ 226.729729][ T7737] ? __pfx_ia32_setup_rt_frame+0x10/0x10 [ 226.729761][ T7737] arch_do_signal_or_restart+0x460/0x830 [ 226.729783][ T7737] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 226.729809][ T7737] ? ksys_write+0x242/0x270 [ 226.729835][ T7737] exit_to_user_mode_loop+0x86/0x480 [ 226.729854][ T7737] ? rcu_is_watching+0x15/0xb0 [ 226.729875][ T7737] ? asm_int80_emulation+0x1a/0x20 [ 226.729893][ T7737] ? asm_int80_emulation+0x1a/0x20 [ 226.729909][ T7737] do_int80_emulation+0x2ef/0x4d0 [ 226.729928][ T7737] ? asm_int80_emulation+0x1a/0x20 [ 226.729943][ T7737] ? clear_bhb_loop+0x40/0x90 [ 226.729958][ T7737] ? clear_bhb_loop+0x40/0x90 [ 226.729978][ T7737] asm_int80_emulation+0x1a/0x20 [ 226.729993][ T7737] RIP: 0023:0xf7195cab [ 226.730009][ T7737] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 226.730023][ T7737] RSP: 002b:00000000f544d4bc EFLAGS: 00000246 ORIG_RAX: 0000000000000004 [ 226.730042][ T7737] RAX: 0000000000000001 RBX: 0000000000000003 RCX: 00000000f544d5c0 [ 226.730053][ T7737] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 226.730062][ T7737] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 226.730071][ T7737] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 226.730081][ T7737] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 226.730106][ T7737] [ 227.376874][ T24] usb 4-1: setting power OFF [ 227.385570][ T24] dvb-usb: bulk message failed: -22 (2/0) [ 227.395141][ T24] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 227.534707][ T24] (NULL device *): no alternate interface [ 227.915582][ T24] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 227.966251][ T24] usb 4-1: USB disconnect, device number 17 [ 228.760112][ T5918] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 228.899335][ T5918] usb 3-1: device descriptor read/64, error -71 [ 229.182542][ T5918] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 229.297129][ T7767] vivid-007: ================= START STATUS ================= [ 229.305334][ T7767] vivid-007: Enable Output Cropping: true grabbed [ 229.327392][ T7767] vivid-007: Enable Output Composing: true grabbed [ 229.369329][ T5918] usb 3-1: device descriptor read/64, error -71 [ 229.375882][ T7767] vivid-007: Enable Output Scaler: true grabbed [ 229.393819][ T7767] vivid-007: Tx RGB Quantization Range: Automatic grabbed [ 229.438389][ T7767] vivid-007: Transmit Mode: HDMI grabbed [ 229.458389][ T7767] vivid-007: Hotplug Present: 0x00000000 [ 229.472517][ T7774] netlink: 72 bytes leftover after parsing attributes in process `syz.1.534'. [ 229.509087][ T5918] usb usb3-port1: attempt power cycle [ 229.556195][ T7767] vivid-007: RxSense Present: 0x00000000 [ 229.567668][ T7767] vivid-007: EDID Present: 0x00000000 [ 229.574875][ T7767] vivid-007: ================== END STATUS ================== [ 229.849573][ T5918] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 229.880872][ T5918] usb 3-1: device descriptor read/8, error -71 [ 230.191408][ T5918] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 230.266744][ T5918] usb 3-1: device descriptor read/8, error -71 [ 230.390374][ T5918] usb usb3-port1: unable to enumerate USB device [ 231.154114][ T7789] netlink: 28 bytes leftover after parsing attributes in process `syz.2.537'. [ 231.900434][ T5918] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 232.179545][ T24] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 232.270281][ T5918] usb 5-1: Using ep0 maxpacket: 8 [ 232.301127][ T5918] usb 5-1: config index 0 descriptor too short (expected 30, got 18) [ 232.342647][ T24] usb 3-1: Using ep0 maxpacket: 16 [ 232.358283][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 232.375281][ T5918] usb 5-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 232.385390][ T5918] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 232.395808][ T5918] usb 5-1: Product: syz [ 232.395917][ T24] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 232.432683][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 232.440912][ T5918] usb 5-1: Manufacturer: syz [ 232.445548][ T5918] usb 5-1: SerialNumber: syz [ 232.450647][ T24] usb 3-1: Product: syz [ 232.458620][ T24] usb 3-1: Manufacturer: syz [ 232.464956][ T5918] usb 5-1: config 0 descriptor?? [ 232.489296][ T24] usb 3-1: SerialNumber: syz [ 232.648404][ T5918] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 232.664179][ T5918] usb 5-1: setting power ON [ 232.673793][ T24] usb 3-1: config 0 descriptor?? [ 232.679177][ T5918] dvb-usb: bulk message failed: -22 (2/0) [ 232.691986][ T24] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 232.706013][ T5918] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 232.716885][ T24] em28xx 3-1:0.0: DVB interface 0 found: bulk [ 232.730909][ T5918] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 232.869666][ T5918] usb 5-1: media controller created [ 232.911570][ T5918] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 232.949098][ T5918] usb 5-1: selecting invalid altsetting 6 [ 232.954977][ T5918] usb 5-1: digital interface selection failed (-22) [ 232.962056][ T5918] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 233.051708][ T5918] usb 5-1: setting power OFF [ 233.056429][ T5918] dvb-usb: bulk message failed: -22 (2/0) [ 233.064186][ T5918] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 233.078891][ T5918] (NULL device *): no alternate interface [ 233.138182][ T5918] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 233.186317][ T5918] usb 5-1: USB disconnect, device number 12 [ 233.491595][ T24] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 233.811984][ T7816] bridge0: entered promiscuous mode [ 233.817320][ T7816] bridge0: entered allmulticast mode [ 234.043374][ T24] em28xx 3-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 234.052436][ T24] em28xx 3-1:0.0: board has no eeprom [ 234.174838][ T5911] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 234.349481][ T5911] usb 4-1: Using ep0 maxpacket: 32 [ 234.362878][ T5911] usb 4-1: config index 0 descriptor too short (expected 35577, got 27) [ 234.371670][ T5911] usb 4-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 234.382549][ T5911] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 234.396688][ T5911] usb 4-1: config 1 has no interface number 0 [ 234.404678][ T5911] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 234.416323][ T5911] usb 4-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 234.432660][ T5911] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 234.444414][ T5911] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 234.472690][ T5911] snd_usb_pod 4-1:1.1: Line 6 Pocket POD found [ 234.619348][ T5918] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 234.673430][ T5911] snd_usb_pod 4-1:1.1: invalid control EP [ 234.688221][ T5911] snd_usb_pod 4-1:1.1: cannot start listening: -22 [ 234.701429][ T5911] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now disconnected [ 234.728303][ T5911] snd_usb_pod 4-1:1.1: probe with driver snd_usb_pod failed with error -22 [ 234.769556][ T5918] usb 1-1: device descriptor read/64, error -71 [ 235.080375][ T5918] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 235.162866][ T7798] em28xx 3-1:0.0: writing to i2c device at 0xfffe failed (error=-5) [ 235.219524][ T24] em28xx 3-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 235.227953][ T24] em28xx 3-1:0.0: dvb set to bulk mode. [ 235.231813][ T796] usb 4-1: USB disconnect, device number 18 [ 235.236089][ T5880] em28xx 3-1:0.0: Binding DVB extension [ 235.264414][ T24] usb 3-1: USB disconnect, device number 24 [ 235.279329][ T5918] usb 1-1: device descriptor read/64, error -71 [ 235.295891][ T24] em28xx 3-1:0.0: Disconnecting em28xx [ 235.329962][ T5880] em28xx 3-1:0.0: Registering input extension [ 235.336348][ T24] em28xx 3-1:0.0: Closing input extension [ 235.360184][ T24] em28xx 3-1:0.0: Freeing device [ 235.399642][ T5918] usb usb1-port1: attempt power cycle [ 235.449391][ T5911] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 235.513797][ T7833] netlink: 28 bytes leftover after parsing attributes in process `syz.1.550'. [ 235.629368][ T5911] usb 5-1: Using ep0 maxpacket: 8 [ 235.635888][ T5911] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 235.644236][ T5911] usb 5-1: config 179 has no interface number 0 [ 235.650606][ T5911] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 235.661741][ T5911] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 235.673003][ T5911] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 235.684311][ T5911] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 235.695927][ T5911] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 235.710937][ T5911] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 235.720365][ T5911] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 235.732225][ T7828] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 235.749347][ T5918] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 235.788158][ T5918] usb 1-1: device descriptor read/8, error -71 [ 235.795083][ T24] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 235.977983][ T24] usb 2-1: New USB device found, idVendor=1235, idProduct=0018, bcdDevice=f0.ee [ 235.998636][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 236.012731][ T7841] vivid-007: ================= START STATUS ================= [ 236.026990][ T7841] vivid-007: Enable Output Cropping: true grabbed [ 236.039909][ T24] usb 2-1: config 0 descriptor?? [ 236.049681][ T5918] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 236.075956][ T24] usb 2-1: selecting invalid altsetting 1 [ 236.099355][ T5880] usb 4-1: new full-speed USB device number 19 using dummy_hcd [ 236.108988][ T5918] usb 1-1: device descriptor read/8, error -71 [ 236.128014][ T7841] vivid-007: Enable Output Composing: true grabbed [ 236.159486][ T7841] vivid-007: Enable Output Scaler: true grabbed [ 236.198702][ T7841] vivid-007: Tx RGB Quantization Range: Automatic grabbed [ 236.241905][ T7841] vivid-007: Transmit Mode: HDMI grabbed [ 236.249799][ T5918] usb usb1-port1: unable to enumerate USB device [ 236.287033][ T24] snd-usb-audio 2-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 236.306481][ T5880] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 236.328891][ T7835] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 236.338839][ T7841] vivid-007: Hotplug Present: 0x00000000 [ 236.361776][ T7835] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 236.369749][ T5880] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 236.378770][ T5880] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 236.400011][ T7841] vivid-007: RxSense Present: 0x00000000 [ 236.427405][ T7841] vivid-007: EDID Present: 0x00000000 [ 236.432965][ T5880] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 236.443979][ T5880] usb 4-1: config 0 descriptor?? [ 236.452829][ T5880] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 236.479932][ T24] usb 2-1: USB disconnect, device number 12 [ 236.492535][ T5880] dvb-usb: bulk message failed: -22 (3/0) [ 236.506949][ T7841] vivid-007: ================== END STATUS ================== [ 236.529577][ T5880] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 236.638184][ T5880] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 236.648239][ T5880] usb 4-1: media controller created [ 236.656549][ T7839] dibusb: i2c wr: len=61 is too big! [ 236.656549][ T7839] [ 236.670011][ T5880] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 236.715552][ T5880] dvb-usb: bulk message failed: -22 (6/0) [ 236.752867][ T5880] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 236.772092][ T5880] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input13 [ 236.801716][ T5880] dvb-usb: schedule remote query interval to 150 msecs. [ 236.829308][ T5880] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 236.869573][ T5880] usb 4-1: USB disconnect, device number 19 [ 236.961622][ T5880] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 237.220009][ T7849] netlink: 72 bytes leftover after parsing attributes in process `syz.1.554'. [ 237.779394][ T5880] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 237.940437][ T5880] usb 4-1: Using ep0 maxpacket: 8 [ 237.967088][ T5880] usb 4-1: config index 0 descriptor too short (expected 30, got 18) [ 238.001478][ T5880] usb 4-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 238.034953][ T5880] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 238.113596][ T5880] usb 4-1: Product: syz [ 238.130540][ T5880] usb 4-1: Manufacturer: syz [ 238.154693][ T5880] usb 4-1: SerialNumber: syz [ 238.300173][ T7859] netlink: 72 bytes leftover after parsing attributes in process `syz.2.557'. [ 238.430382][ T5880] usb 4-1: config 0 descriptor?? [ 238.469056][ T5880] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 238.506284][ T5880] usb 4-1: setting power ON [ 238.524209][ T5880] dvb-usb: bulk message failed: -22 (2/0) [ 238.578589][ T5880] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 238.626205][ T5880] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 238.652612][ T5880] usb 4-1: media controller created [ 238.691707][ C0] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 238.700224][ C0] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 238.717285][ T796] usb 5-1: USB disconnect, device number 13 [ 238.762636][ T5880] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 238.917682][ T5880] usb 4-1: selecting invalid altsetting 6 [ 238.931014][ T5880] usb 4-1: digital interface selection failed (-22) [ 238.969365][ T5880] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 239.014234][ T5880] usb 4-1: setting power OFF [ 239.018979][ T5880] dvb-usb: bulk message failed: -22 (2/0) [ 239.061802][ T5880] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 239.105818][ T5880] (NULL device *): no alternate interface [ 239.208519][ T5880] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 239.432545][ T5880] usb 4-1: USB disconnect, device number 20 [ 241.605239][ T7882] KVM: debugfs: duplicate directory 7882-5 [ 241.761488][ T7885] openvswitch: netlink: IP tunnel dst address not specified [ 241.961920][ T7891] netlink: 16 bytes leftover after parsing attributes in process `syz.3.566'. [ 242.080269][ T24] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 242.219319][ T24] usb 3-1: device descriptor read/64, error -71 [ 242.409567][ T7895] vivid-007: ================= START STATUS ================= [ 242.428949][ T7895] vivid-007: Enable Output Cropping: true grabbed [ 242.519358][ T24] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 242.541697][ T7895] vivid-007: Enable Output Composing: true grabbed [ 242.888205][ T7895] vivid-007: Enable Output Scaler: true grabbed [ 242.915129][ T7895] vivid-007: Tx RGB Quantization Range: Automatic grabbed [ 242.933686][ T7895] vivid-007: Transmit Mode: HDMI grabbed [ 242.979509][ T24] usb 3-1: device descriptor read/64, error -71 [ 243.093113][ T24] usb usb3-port1: attempt power cycle [ 243.274351][ T7895] vivid-007: Hotplug Present: 0x00000000 [ 243.312412][ T7895] vivid-007: RxSense Present: 0x00000000 [ 243.318225][ T7895] vivid-007: EDID Present: 0x00000000 [ 243.569964][ T7911] netlink: 72 bytes leftover after parsing attributes in process `syz.4.571'. [ 243.639873][ T24] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 243.653691][ T7895] vivid-007: ================== END STATUS ================== [ 243.683840][ T24] usb 3-1: device descriptor read/8, error -71 [ 244.010597][ T24] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 244.180173][ T24] usb 3-1: device descriptor read/8, error -71 [ 244.293247][ T24] usb usb3-port1: unable to enumerate USB device [ 244.448177][ T7915] bridge0: entered promiscuous mode [ 244.483484][ T7915] bridge0: entered allmulticast mode [ 244.796962][ T7924] FAULT_INJECTION: forcing a failure. [ 244.796962][ T7924] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 244.827334][ T7924] CPU: 1 UID: 0 PID: 7924 Comm: syz.2.574 Tainted: G L syzkaller #0 PREEMPT(full) [ 244.827357][ T7924] Tainted: [L]=SOFTLOCKUP [ 244.827362][ T7924] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 244.827369][ T7924] Call Trace: [ 244.827374][ T7924] [ 244.827380][ T7924] dump_stack_lvl+0xe8/0x150 [ 244.827401][ T7924] should_fail_ex+0x412/0x560 [ 244.827420][ T7924] _copy_from_user+0x2d/0xb0 [ 244.827433][ T7924] get_compat_msghdr+0xb3/0x4c0 [ 244.827444][ T7924] ? __lock_acquire+0x6b5/0x2cf0 [ 244.827465][ T7924] ? __pfx_get_compat_msghdr+0x10/0x10 [ 244.827482][ T7924] ___sys_recvmsg+0x1dd/0x590 [ 244.827498][ T7924] ? __lock_acquire+0x6b5/0x2cf0 [ 244.827511][ T7924] ? __pfx____sys_recvmsg+0x10/0x10 [ 244.827536][ T7924] ? __fget_files+0x3a0/0x420 [ 244.827559][ T7924] do_recvmmsg+0x3a5/0x800 [ 244.827588][ T7924] ? __pfx_do_recvmmsg+0x10/0x10 [ 244.827621][ T7924] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 244.827649][ T7924] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 244.827671][ T7924] __sys_recvmmsg+0x1a5/0x290 [ 244.827685][ T7924] ? __pfx___sys_recvmmsg+0x10/0x10 [ 244.827699][ T7924] ? ksys_write+0x242/0x270 [ 244.827715][ T7924] __ia32_compat_sys_recvmmsg_time32+0xbf/0xe0 [ 244.827729][ T7924] __do_fast_syscall_32+0x20d/0x640 [ 244.827744][ T7924] ? do_fast_syscall_32+0x33/0x70 [ 244.827755][ T7924] ? asm_int80_emulation+0x1a/0x20 [ 244.827765][ T7924] ? do_int80_emulation+0x274/0x4d0 [ 244.827777][ T7924] ? trace_irq_disable+0x3b/0x150 [ 244.827794][ T7924] do_fast_syscall_32+0x33/0x70 [ 244.827807][ T7924] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 244.827826][ T7924] RIP: 0023:0xf705ef6c [ 244.827838][ T7924] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 244.827848][ T7924] RSP: 002b:00000000f544d50c EFLAGS: 00000206 ORIG_RAX: 0000000000000151 [ 244.827861][ T7924] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080002240 [ 244.827869][ T7924] RDX: 0000000000000001 RSI: 0000000040000000 RDI: 0000000000000000 [ 244.827876][ T7924] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 244.827882][ T7924] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 244.827889][ T7924] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 244.827905][ T7924] [ 245.119283][ T5918] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 245.410643][ T5918] usb 2-1: Using ep0 maxpacket: 32 [ 245.420018][ T5918] usb 2-1: config index 0 descriptor too short (expected 35577, got 27) [ 245.428652][ T5918] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 245.439813][ T5918] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 245.651658][ T5918] usb 2-1: config 1 has no interface number 0 [ 245.658356][ T5918] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 245.689808][ T5918] usb 2-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 245.763865][ T5918] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 245.787460][ T5918] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 245.799319][ T796] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 245.830253][ T7934] netlink: 16 bytes leftover after parsing attributes in process `syz.3.577'. [ 245.866554][ T5918] snd_usb_pod 2-1:1.1: Line 6 Pocket POD found [ 246.097320][ T5918] snd_usb_pod 2-1:1.1: invalid control EP [ 246.104920][ T5918] snd_usb_pod 2-1:1.1: cannot start listening: -22 [ 246.114454][ T5918] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now disconnected [ 246.119479][ T796] usb 3-1: Using ep0 maxpacket: 8 [ 246.127917][ T5918] snd_usb_pod 2-1:1.1: probe with driver snd_usb_pod failed with error -22 [ 246.144197][ T796] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 246.163869][ T796] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 246.186072][ T7936] netlink: 4 bytes leftover after parsing attributes in process `syz.3.579'. [ 246.202724][ T796] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 246.226526][ T796] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 246.270962][ T796] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 246.305772][ T796] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 246.553268][ T796] usb 3-1: GET_CAPABILITIES returned 0 [ 246.559384][ T796] usbtmc 3-1:16.0: can't read capabilities [ 246.591364][ T5918] usb 2-1: USB disconnect, device number 13 [ 246.829831][ T796] usb 3-1: USB disconnect, device number 29 [ 247.663651][ T7955] vivid-007: ================= START STATUS ================= [ 247.671536][ T7955] vivid-007: Enable Output Cropping: true grabbed [ 247.695556][ T7955] vivid-007: Enable Output Composing: true grabbed [ 247.714574][ T7955] vivid-007: Enable Output Scaler: true grabbed [ 247.721284][ T7955] vivid-007: Tx RGB Quantization Range: Automatic grabbed [ 247.728478][ T7955] vivid-007: Transmit Mode: HDMI grabbed [ 247.734240][ T7955] vivid-007: Hotplug Present: 0x00000000 [ 247.739947][ T7955] vivid-007: RxSense Present: 0x00000000 [ 247.745810][ T7955] vivid-007: EDID Present: 0x00000000 [ 247.751519][ T7955] vivid-007: ================== END STATUS ================== [ 248.499298][ T5918] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 249.057032][ T5918] usb 4-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 249.091431][ T5918] usb 4-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 249.101072][ T5918] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 249.119361][ T5918] usb 4-1: Product: syz [ 249.125533][ T5918] usb 4-1: Manufacturer: syz [ 249.135039][ T5918] usb 4-1: SerialNumber: syz [ 249.171898][ T5918] usb 4-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 249.199532][ T7979] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 249.219480][ T5880] usb 3-1: new full-speed USB device number 30 using dummy_hcd [ 249.461811][ T5880] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 249.505833][ T5880] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 249.519346][ T5880] usb 3-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 249.538915][ T5880] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 249.573659][ T5918] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 249.597378][ T5918] dvbdev: DVB: registering new adapter (774 Friio White ISDB-T USB2.0) [ 249.614877][ T5880] usb 3-1: config 0 descriptor?? [ 249.659608][ T5918] usb 4-1: media controller created [ 249.669553][ T5880] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 249.686990][ T5880] dvb-usb: bulk message failed: -22 (3/0) [ 249.731091][ T5880] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 249.752755][ T5918] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 249.793053][ T5880] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 249.800758][ T5880] usb 3-1: media controller created [ 249.808036][ T5880] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 249.852965][ T5880] dvb-usb: bulk message failed: -22 (6/0) [ 249.875349][ T5880] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 249.879453][ T7986] ------------[ cut here ]------------ [ 249.888501][ T7986] usb 4-1: BOGUS control dir, pipe 80001580 doesn't match bRequestType c0 [ 249.897654][ T7986] WARNING: drivers/usb/core/urb.c:413 at usb_submit_urb+0x1052/0x18b0, CPU#0: syz.0.592/7986 [ 249.899637][ T5880] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input14 [ 249.908169][ T7986] Modules linked in: [ 249.923401][ T7986] CPU: 0 UID: 0 PID: 7986 Comm: syz.0.592 Tainted: G L syzkaller #0 PREEMPT(full) [ 249.934275][ T7986] Tainted: [L]=SOFTLOCKUP [ 249.938706][ T7986] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 249.949853][ T7986] RIP: 0010:usb_submit_urb+0x1114/0x18b0 [ 249.955682][ T7986] Code: 00 00 00 00 00 fc ff df 0f b6 44 05 00 84 c0 0f 85 91 05 00 00 45 0f b6 45 00 48 8b 7c 24 18 48 8b 74 24 10 4c 89 fa 44 89 f1 <67> 48 0f b9 3a 49 bf 00 00 00 00 00 fc ff df e9 c2 f2 ff ff 89 e9 [ 249.976195][ T7986] RSP: 0018:ffffc90002e876e8 EFLAGS: 00010246 [ 249.982418][ T7986] RAX: 0000000000000000 RBX: ffff888035c06d00 RCX: 0000000080001580 [ 249.990452][ T7986] RDX: ffff88802af3f6e0 RSI: ffffffff8c7f1320 RDI: ffffffff901ed5d0 [ 249.998435][ T7986] RBP: 1ffff1100adf0620 R08: 00000000000000c0 R09: 0000000000000000 [ 250.006556][ T7986] R10: ffffc90002e877e0 R11: fffff520005d0f08 R12: ffff88807b861100 [ 250.014638][ T7986] R13: ffff888056f83100 R14: 0000000080001580 R15: ffff88802af3f6e0 [ 250.022649][ T7986] FS: 0000000000000000(0000) GS:ffff888125460000(0063) knlGS:00000000f53c6b40 [ 250.031673][ T7986] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 250.038259][ T7986] CR2: 00000000f53c5ff4 CR3: 00000000580b0000 CR4: 00000000003526f0 [ 250.046960][ T7986] Call Trace: [ 250.050793][ T7986] [ 250.053754][ T7986] ? __init_swait_queue_head+0xa9/0x150 [ 250.059408][ T7986] usb_start_wait_urb+0x13f/0x5b0 [ 250.064443][ T7986] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 250.070020][ T7986] usb_control_msg+0x234/0x3e0 [ 250.074788][ T7986] gl861_ctrl_msg+0x207/0x420 [ 250.079504][ T7986] ? __pfx_gl861_ctrl_msg+0x10/0x10 [ 250.084706][ T7986] ? aa_file_perm+0x50e/0x15e0 [ 250.089510][ T7986] gl861_i2c_master_xfer+0x439/0x6a0 [ 250.094800][ T7986] __i2c_transfer+0x79a/0x2020 [ 250.099590][ T7986] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 250.105402][ T7986] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 250.111345][ T7986] ? i2c_transfer+0xc8/0x2d0 [ 250.115948][ T7986] i2c_transfer+0x1cc/0x2d0 [ 250.120637][ T7986] i2c_transfer_buffer_flags+0x10d/0x1a0 [ 250.126283][ T7986] ? __pfx_i2c_transfer_buffer_flags+0x10/0x10 [ 250.132547][ T7986] ? i2cdev_read+0xe8/0x250 [ 250.137066][ T7986] i2cdev_read+0x10d/0x250 [ 250.141530][ T7986] ? __pfx_i2cdev_read+0x10/0x10 [ 250.147520][ T7986] vfs_read+0x20c/0xa70 [ 250.152237][ T7986] ? __pfx_vfs_read+0x10/0x10 [ 250.156939][ T7986] ? __fget_files+0x2a/0x420 [ 250.161598][ T7986] ? __fget_files+0x2a/0x420 [ 250.166209][ T7986] ? __fget_files+0x3a0/0x420 [ 250.170918][ T7986] ? __fget_files+0x2a/0x420 [ 250.175534][ T7986] ksys_read+0x150/0x270 [ 250.179799][ T7986] ? __pfx_ksys_read+0x10/0x10 [ 250.184563][ T7986] __do_fast_syscall_32+0x20d/0x640 [ 250.189804][ T7986] ? do_fast_syscall_32+0x33/0x70 [ 250.194824][ T7986] ? asm_int80_emulation+0x1a/0x20 [ 250.200234][ T7986] ? do_int80_emulation+0x274/0x4d0 [ 250.205566][ T7986] do_fast_syscall_32+0x33/0x70 [ 250.210553][ T7986] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 250.216883][ T7986] RIP: 0023:0xf7f03f6c [ 250.221446][ T7986] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 250.241138][ T7986] RSP: 002b:00000000f53c650c EFLAGS: 00000206 ORIG_RAX: 0000000000000003 [ 250.250558][ T7986] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000000 [ 250.258552][ T7986] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 250.267069][ T7986] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 250.275135][ T7986] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 250.283199][ T7986] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 250.291213][ T7986] [ 250.294240][ T7986] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 250.301515][ T7986] CPU: 0 UID: 0 PID: 7986 Comm: syz.0.592 Tainted: G L syzkaller #0 PREEMPT(full) [ 250.312267][ T7986] Tainted: [L]=SOFTLOCKUP [ 250.316592][ T7986] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 250.326672][ T7986] Call Trace: [ 250.329948][ T7986] [ 250.332876][ T7986] vpanic+0x56c/0xa60 [ 250.336876][ T7986] ? __pfx__printk+0x10/0x10 [ 250.341502][ T7986] ? __pfx_vpanic+0x10/0x10 [ 250.346097][ T7986] ? is_bpf_text_address+0x292/0x2b0 [ 250.351391][ T7986] ? is_bpf_text_address+0x26/0x2b0 [ 250.356616][ T7986] panic+0xc5/0xd0 [ 250.360348][ T7986] ? __pfx_panic+0x10/0x10 [ 250.364791][ T7986] __warn+0x315/0x4f0 [ 250.368783][ T7986] ? usb_submit_urb+0x1052/0x18b0 [ 250.373812][ T7986] ? usb_submit_urb+0x1052/0x18b0 [ 250.378846][ T7986] __report_bug+0x29a/0x540 [ 250.383367][ T7986] ? usb_submit_urb+0x1052/0x18b0 [ 250.388403][ T7986] ? __pfx___report_bug+0x10/0x10 [ 250.393457][ T7986] ? lockdep_hardirqs_on+0x7a/0x110 [ 250.398707][ T7986] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 250.404630][ T7986] report_bug_entry+0x19a/0x290 [ 250.409565][ T7986] ? usb_submit_urb+0x1114/0x18b0 [ 250.414585][ T7986] ? usb_submit_urb+0x1119/0x18b0 [ 250.419629][ T7986] handle_bug+0xce/0x200 [ 250.423889][ T7986] exc_invalid_op+0x1a/0x50 [ 250.428477][ T7986] asm_exc_invalid_op+0x1a/0x20 [ 250.433321][ T7986] RIP: 0010:usb_submit_urb+0x1114/0x18b0 [ 250.439080][ T7986] Code: 00 00 00 00 00 fc ff df 0f b6 44 05 00 84 c0 0f 85 91 05 00 00 45 0f b6 45 00 48 8b 7c 24 18 48 8b 74 24 10 4c 89 fa 44 89 f1 <67> 48 0f b9 3a 49 bf 00 00 00 00 00 fc ff df e9 c2 f2 ff ff 89 e9 [ 250.458691][ T7986] RSP: 0018:ffffc90002e876e8 EFLAGS: 00010246 [ 250.464768][ T7986] RAX: 0000000000000000 RBX: ffff888035c06d00 RCX: 0000000080001580 [ 250.472740][ T7986] RDX: ffff88802af3f6e0 RSI: ffffffff8c7f1320 RDI: ffffffff901ed5d0 [ 250.480704][ T7986] RBP: 1ffff1100adf0620 R08: 00000000000000c0 R09: 0000000000000000 [ 250.488669][ T7986] R10: ffffc90002e877e0 R11: fffff520005d0f08 R12: ffff88807b861100 [ 250.496631][ T7986] R13: ffff888056f83100 R14: 0000000080001580 R15: ffff88802af3f6e0 [ 250.504607][ T7986] ? usb_submit_urb+0x10a3/0x18b0 [ 250.509642][ T7986] ? __init_swait_queue_head+0xa9/0x150 [ 250.515181][ T7986] usb_start_wait_urb+0x13f/0x5b0 [ 250.520235][ T7986] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 250.525785][ T7986] usb_control_msg+0x234/0x3e0 [ 250.530554][ T7986] gl861_ctrl_msg+0x207/0x420 [ 250.535232][ T7986] ? __pfx_gl861_ctrl_msg+0x10/0x10 [ 250.540425][ T7986] ? aa_file_perm+0x50e/0x15e0 [ 250.545199][ T7986] gl861_i2c_master_xfer+0x439/0x6a0 [ 250.550483][ T7986] __i2c_transfer+0x79a/0x2020 [ 250.555243][ T7986] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 250.561046][ T7986] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 250.566865][ T7986] ? i2c_transfer+0xc8/0x2d0 [ 250.571476][ T7986] i2c_transfer+0x1cc/0x2d0 [ 250.575977][ T7986] i2c_transfer_buffer_flags+0x10d/0x1a0 [ 250.581783][ T7986] ? __pfx_i2c_transfer_buffer_flags+0x10/0x10 [ 250.587939][ T7986] ? i2cdev_read+0xe8/0x250 [ 250.592531][ T7986] i2cdev_read+0x10d/0x250 [ 250.596940][ T7986] ? __pfx_i2cdev_read+0x10/0x10 [ 250.601871][ T7986] vfs_read+0x20c/0xa70 [ 250.606024][ T7986] ? __pfx_vfs_read+0x10/0x10 [ 250.610705][ T7986] ? __fget_files+0x2a/0x420 [ 250.615297][ T7986] ? __fget_files+0x2a/0x420 [ 250.619877][ T7986] ? __fget_files+0x3a0/0x420 [ 250.624738][ T7986] ? __fget_files+0x2a/0x420 [ 250.629331][ T7986] ksys_read+0x150/0x270 [ 250.633570][ T7986] ? __pfx_ksys_read+0x10/0x10 [ 250.638332][ T7986] __do_fast_syscall_32+0x20d/0x640 [ 250.643526][ T7986] ? do_fast_syscall_32+0x33/0x70 [ 250.648568][ T7986] ? asm_int80_emulation+0x1a/0x20 [ 250.653841][ T7986] ? do_int80_emulation+0x274/0x4d0 [ 250.659047][ T7986] do_fast_syscall_32+0x33/0x70 [ 250.664004][ T7986] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 250.670352][ T7986] RIP: 0023:0xf7f03f6c [ 250.674425][ T7986] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 250.696034][ T7986] RSP: 002b:00000000f53c650c EFLAGS: 00000206 ORIG_RAX: 0000000000000003 [ 250.704457][ T7986] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000000 [ 250.712434][ T7986] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 250.720428][ T7986] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 250.728402][ T7986] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 250.736365][ T7986] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 250.744340][ T7986] [ 250.747531][ T7986] Kernel Offset: disabled [ 250.751850][ T7986] Rebooting in 86400 seconds..