last executing test programs: 13.348459363s ago: executing program 2 (id=435): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) syz_open_dev$video4linux(&(0x7f0000000480), 0xffffffffffffff52, 0x450202) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000001080)={0x0, 0x1c02, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="6c00000002060104db406e3e0004000200000000100003006269746d61703a706f72740005000400000000000900020073797a32000000000500050000006c00050001000600000024000780080008400000137906000440fffff000060005400000000008000640"], 0x6c}}, 0x0) write$binfmt_misc(r3, &(0x7f0000000000), 0xfffffecc) splice(r2, 0x0, r4, 0x0, 0x400000004ffe6, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r6 = socket$vsock_stream(0x28, 0x1, 0x0) r7 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r7, 0x7a7, &(0x7f00000000c0)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r7, 0x7a0, &(0x7f0000000000)={@hyper}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r7, 0x7a8, &(0x7f0000000080)={{@local, 0x2}, @local, 0x4, 0x0, 0x5e, 0x200000000000, 0x100000000000006}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0) close_range(r6, 0xffffffffffffffff, 0x0) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, 0x0, 0x0) accept4(r8, 0x0, 0x0, 0x0) process_madvise(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000100)="00a15331fbb2327345e533542536616d1494db45cbee9fc5ba6909df34d3686dbd5aac43e14df8020654277f9255e596052b2caf824b2762193728d28c70", 0x3e}], 0x1, 0x14, 0x0) 11.126297261s ago: executing program 2 (id=448): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000400)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(sm4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000005c0)="b7f2288a911993f08d3aaea2bc0000de", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000001bc0)=[{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000600)="00aaa953059aee236b68387b55d87d0df4b4f1db35a401cd888610e75a815c2206c02ad4465c1e9c69ff68da6bba73e37fa758cedcdd5eb6126af54fa2476a23a984", 0x42}], 0x1, 0x0, 0x0, 0x81}], 0x1, 0x24041410) recvmsg(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f00000002c0)=""/65, 0x41}], 0x1, 0x0, 0x4000}, 0x40012143) 10.997837496s ago: executing program 2 (id=449): r0 = socket$inet6(0xa, 0x3, 0x1) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@loopback, @in6=@local, 0x4e22, 0xfffc, 0x4e25, 0x1, 0xa, 0x0, 0x10, 0x0, 0x0, r1}, {0x100000000, 0x2, 0x3, 0x40000, 0xffffffffffffffff, 0x6, 0x8, 0x1}, {0x800, 0xfffffffffffffffc, 0x0, 0xd}, 0xd6, 0x0, 0x0, 0x0, 0x3, 0x1}, {{@in=@broadcast, 0x20004d3, 0x32}, 0x0, @in6=@mcast1, 0x40000000, 0x0, 0x0, 0x6, 0x0, 0x0, 0xfffffffb}}, 0xe8) r2 = fanotify_init(0x0, 0x101000) statfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)=""/4096) ioctl$XFS_IOC_PATH_TO_HANDLE(r0, 0xc0385869, &(0x7f00000001c0)={r0, &(0x7f00000000c0)='..[\x00', 0x0, &(0x7f0000000100)={@align=0x101, {0x8, 0x6, 0x71, 0x7b}}, 0x9, &(0x7f0000000140), &(0x7f0000000180)=0x5}) fanotify_mark(r2, 0x400, 0x3, r3, 0x0) writev(r0, &(0x7f0000000100), 0x0) r4 = socket(0x2, 0x80805, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_int(r5, 0x29, 0x11, 0x0, &(0x7f0000000200)) sendmmsg$inet(r4, &(0x7f0000005f40)=[{{&(0x7f0000000100)={0x2, 0x4e22, @private=0xa010101}, 0x10, &(0x7f0000000240)=[{&(0x7f0000002280)="c4", 0x1}], 0x1}}], 0x1, 0x50004) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f00000003c0)={r6}, 0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000200)={r6, @in={{0x2, 0x4e21, @broadcast}}, 0x5, 0x8}, 0x90) poll(&(0x7f0000000300)=[{r4, 0x3916a4f2dae08d21}, {r4, 0x8080}, {r5, 0x3}, {r3, 0x1100}, {r4}, {r4, 0x100}], 0x6, 0x7) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0xffe0) 10.901634473s ago: executing program 2 (id=451): r0 = memfd_create(&(0x7f00000000c0)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU', 0x1) r1 = dup(r0) r2 = fanotify_init(0x200, 0x101000) fanotify_mark(r2, 0x1, 0x8001021, r1, 0x0) r3 = memfd_create(&(0x7f00000000c0)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU', 0x1) dup(r3) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r6 = socket(0x10, 0x803, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r8 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r10 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x84, 0x2c, 0xd27, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0xb, 0x3}, {}, {0xfff2, 0xfff1}}, [@filter_kind_options=@f_basic={{0xa}, {0x54, 0x2, [@TCA_BASIC_ACT={0x50, 0x3, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x4, 0xffff, 0x6, 0x6, 0x6}, 0x4}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x10}, 0x4) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$unix(0x1, 0x1, 0x0) socket$kcm(0x11, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r12, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) 10.691636789s ago: executing program 0 (id=452): open_by_handle_at(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="1c000000810000000000000006"], 0xfeffffff) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="50000000100039042abd70000000300000000000", @ANYRES32=0x0, @ANYBLOB="b96b00003537a940300012800b00010065727370616e0000200002800400120005001600020000000600180008000000050017"], 0x50}, 0x1, 0x0, 0x0, 0x410c0}, 0x4000020) 10.620756819s ago: executing program 0 (id=453): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000004280)='/proc/partitions\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x0, 0x1) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYRES8=r0, @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000940)={0x50, 0x2, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x5}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x0, 0x0, 0xffffffff}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x50}}, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x4, 0x2}, 0x28) ioctl$KVM_RUN(r5, 0xae80, 0x0) syz_emit_ethernet(0x2e, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c20000010180c20000000800450000200000000000119078000000000000004e20000c907801080000"], 0x0) setrlimit(0xf, &(0x7f0000000000)={0x1, 0x5}) close(r1) pread64(r0, &(0x7f0000002100)=""/171, 0xab, 0x9a) socket$nl_netfilter(0x10, 0x3, 0xc) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f00000009c0), 0x7}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, 0x0}}, {{&(0x7f0000000d80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e23, @local}, 0x2, 0x3, 0x1, 0x3}}, 0x80, 0x0}}], 0x3, 0x20000044) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vlan1\x00'}) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r6 = socket(0x2, 0x805, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e20, @rand_addr=0x64010102}]}, &(0x7f00000007c0)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r6, 0x84, 0x6c, &(0x7f0000000340)={r7, 0x10, "c74029dde70a2b6f35d4644363b136aa"}, &(0x7f0000000240)=0x18) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) 10.613942335s ago: executing program 2 (id=454): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0x4296}, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200), 0xa2442, 0x0) ioctl$SNDCTL_DSP_SETFMT(r2, 0xc0045005, &(0x7f00000000c0)=0x40) r3 = syz_io_uring_setup(0x4384, &(0x7f00000004c0)={0x0, 0x5ff4, 0x20, 0x2, 0x3e2}, &(0x7f0000000540), &(0x7f0000000580), &(0x7f00000005c0)) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000600)=""/244, 0xf4}, {&(0x7f0000000740)=""/123, 0x7b}, {&(0x7f00000007c0)=""/40, 0x28}, {&(0x7f0000000800)=""/95, 0x5f}, {&(0x7f0000000880)=""/255, 0xff}, {&(0x7f0000000980)=""/11, 0xb}], 0x6) write$dsp(r2, &(0x7f0000000180)="000d3d4b70619d999b8e940fbb106766d384e6642530a36bc3f04790e104b7a90d03f1cc4b057c9b93d9d09e9145857900186d546a9149b12bd028c1e9b10f23e8716e0490a9af3ddcb2f6f2a19e010838f396564b31a47dca2c9452d9945ef2186de7dbaf5612033ac4c753", 0x6c) ioctl$SNDCTL_DSP_SYNC(r2, 0x5001, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x83, 0x0, &(0x7f0000000300)) setsockopt$inet_sctp_SCTP_ADD_STREAMS(0xffffffffffffffff, 0x84, 0x79, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES16=0x0], 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x20008084) socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r6 = accept4(r5, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) recvmmsg(r6, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) 9.389520813s ago: executing program 0 (id=461): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) r1 = inotify_init() poll(&(0x7f0000000000)=[{r1, 0xd408}], 0x1, 0x1) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000180)={&(0x7f0000000040)=[0x0], 0x1}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x400) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r5 = syz_open_dev$sndpcmp(&(0x7f0000000b00), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r5, 0xc2604110, &(0x7f0000000040)={0x0, [[0x89ef8], [0x207], [0x7]], '\x00', [{}, {}, {}, {0x0, 0x0, 0x0, 0x1, 0x1}, {}, {}, {}, {}, {0xfffffc00}], '\x00', 0x1000}) rename(&(0x7f0000000580)='./file0\x00', &(0x7f0000000780)='./file2\x00') symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00') sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x40, 0x8001, 0x0, 0x9, 0x0, 0xcc3, 0xfa11, 0xffffffff}, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000100)={0x1, 0x0, @ioapic={0x8082801, 0x5fa, 0x8, 0x1ff, 0x0, [{0x3, 0x6, 0x9, '\x00', 0xe}, {0x5, 0xb, 0x72, '\x00', 0x6}, {0xfe, 0x5, 0x9, '\x00', 0x5}, {0x81, 0x3, 0x8, '\x00', 0x5}, {0xb, 0x50, 0x7f, '\x00', 0x60}, {0x0, 0x0, 0x2}, {0x1, 0x9, 0x9, '\x00', 0xa}, {0xd, 0x7, 0xb, '\x00', 0x45}, {0x8, 0x5, 0x0, '\x00', 0xff}, {0x6, 0x3, 0x0, '\x00', 0x6}, {0x40, 0x4, 0x2, '\x00', 0xa3}, {0x8, 0x4, 0x19, '\x00', 0xff}, {0x3, 0x86, 0xa, '\x00', 0xf9}, {0x5, 0x4f, 0x2}, {0x64, 0x87, 0x96, '\x00', 0x7}, {0xb, 0x0, 0x23, '\x00', 0x7b}, {0x3, 0x7, 0xd1}, {0x68, 0x3, 0x2, '\x00', 0x3}, {0x8, 0x9e, 0xc0, '\x00', 0x2}, {0x3e, 0x48, 0xa, '\x00', 0x2}, {0x7, 0x1, 0x2, '\x00', 0x1}, {0x3, 0x7, 0x6, '\x00', 0x4}, {0x93, 0x9, 0x4, '\x00', 0xe6}, {0x3, 0x7f, 0xe0, '\x00', 0x47}]}}) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r8, 0x4008ae8a, &(0x7f0000000040)={0x1, 0x0, [{0x1, 0x9, 0x4b9, 0x4f1b04e0, 0x1000}]}) ioctl$KVM_SET_LAPIC(r8, 0x4400ae8f, &(0x7f0000000400)={"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"}) ioctl$KVM_SET_IRQCHIP(r7, 0x8208ae63, &(0x7f0000000100)={0x2, 0x0, @pic={0x0, 0x7, 0x5, 0x4, 0x0, 0x0, 0x4, 0xbb, 0x2, 0xc0, 0x6d, 0x26, 0x61, 0x7, 0x95, 0xd}}) ioctl$KVM_X86_SETUP_MCE(r8, 0x4008ae9c, &(0x7f0000000000)={0x16, 0x5}) 6.371483157s ago: executing program 4 (id=467): r0 = syz_usb_connect(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, 0x0) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0) ioctl$EVIOCSFF(r1, 0x40304580, &(0x7f00000001c0)={0x51, 0x81, 0x560c, {0x803, 0x5d5}, {0xfffa, 0x2}, @const={0x1, {0x4, 0x5, 0x9c, 0xf914}}}) 6.357764224s ago: executing program 3 (id=468): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20004015}, 0x0) (async) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0xd, 0x20000000000000bb, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb714000008"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x800, 0x0, 0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_LINKS(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r2, 0x8, 0x70bd25, 0x25dfdbfc, {{}, {}, {0x8, 0x11, 0x5}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x20044851}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x3, 0x0, 0x0, 0x0, 0x2000004, 0x0, 0x0, 0x1f00, 0x39, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x6, 0x200008, 0x5, 0x20003}, 0x10}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a600000000000000500000014000500200100000000000000000300000000001c00090008000000", @ANYRES32=r0], 0x4c}}, 0x0) (async) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) r4 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_CONG_MONITOR(r4, 0x114, 0x6, &(0x7f0000000200)=0x1, 0x4) 6.214180606s ago: executing program 0 (id=469): r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) r1 = inotify_init() prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r2 = io_uring_setup(0xc, &(0x7f0000000040)={0x0, 0xc8a1, 0xdb00, 0x8, 0x29}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) io_uring_enter(r2, 0x2219, 0x7721, 0x1f, 0x0, 0x0) io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0xa, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x8, 0xffff}, {0xe, 0x10}}}, 0x24}}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="280100001700010000000000000000007f00b421bd230000000000400000f3ffffff000000000000fe8000000000000000000000000000bbac1e0101000000000000000000000000ffffffff0000000000000000000000004e21000000000000000000640000000059daa2c5d6d01377b63e7cd035623b260e8ed513c4b8bcd55ca098a178ac7444b95c6ea3263772c49a0e06a08251f418b9a1d5239b46", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc0200000000000000000000000000000000000000000000000000000000000100000000000000000a008020b8000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdffffff0200010200000000f9ffffff00"/128], 0x128}}, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) inotify_add_watch(r1, &(0x7f0000000000)='./file0\x00', 0x4200004b) close(r0) r5 = socket$can_j1939(0x1d, 0x2, 0x7) r6 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup\x00', 0x0, 0x0) open_by_handle_at(r6, &(0x7f0000000000)=ANY=[@ANYRES32=r6], 0x12000) bind$can_j1939(r5, &(0x7f0000000340)={0x1d, 0x0, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) sendmmsg(r5, &(0x7f0000003dc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x48010) 6.031223454s ago: executing program 3 (id=470): futex(0x0, 0xd, 0x1, &(0x7f0000000440), 0x0, 0x1) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x3, &(0x7f0000000080)=0x1000, 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$video4linux(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x2245, 0xfa11, 0xffffffff}, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000002c0)) unshare(0x8040480) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) fstat(0xffffffffffffffff, 0x0) r3 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r3, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f911, 0x7, '\x00', @string=&(0x7f00000000c0)}}) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x3c1, 0x3, 0x260, 0xc8, 0xc8, 0x8, 0x0, 0x5803, 0x190, 0x2e8, 0x2e8, 0x190, 0x2e8, 0x3, 0x0, {[{{@ipv6={@private0={0xfc, 0x0, '\x00', 0x41}, @private1={0xfc, 0x1, '\x00', 0xfd}, [0xffffff00, 0xff000000, 0x0, 0xff000000], [0xff, 0x34da508f3e8fb0eb, 0xffffff00, 0xff], 'veth0_to_batadv\x00', 'batadv_slave_1\x00', {0xff}, {0xff}, 0x8, 0x7, 0x7, 0x4a}, 0x0, 0xa8, 0xc8, 0x0, {0x0, 0x2000000000000}}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xa8, 0xc8}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x31d) setsockopt$inet_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x33}}}, 0x0, 0x0, 0x4, 0x0, "e83ae75240c2d658ec87bb53679fd0450078548ceb6c4414fab0919616e19aecedec1b76aea5922406b64cddaeb9d339ba3c01c2c7d0df8e61740b9af2d4e499d58654a4cf0fa0ce1f830c3279cffcfd"}, 0xd8) setsockopt$inet_tcp_int(r4, 0x6, 0x2, &(0x7f0000000040)=0xce, 0x4) connect$inet(r4, &(0x7f0000000080)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) sendmsg$inet(r4, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xa2732}], 0x1}, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') ioctl$XFS_IOC_FD_TO_HANDLE(r2, 0xc038586a, &(0x7f0000000800)={r5, &(0x7f0000000700)='.-^\x00', 0x121800, &(0x7f0000000740)={@_ha_fsid={[0x147, 0x80]}, {0xfff3, 0x61, 0x6, 0x6}}, 0x7fff, &(0x7f0000000780)={@_ha_fsid}, &(0x7f00000007c0)=0x22acd7f6}) pread64(r6, &(0x7f0000019240)=""/102356, 0x18fd4, 0x200) socket$inet_sctp(0x2, 0x1, 0x84) socket$nl_route(0x10, 0x3, 0x0) 5.877279101s ago: executing program 0 (id=471): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000001ac0)={{0x14, 0x10, 0x1, 0x0, 0x1000000, {0x3}}, [@NFT_MSG_DELRULE={0x34, 0x8, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x1}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x5c}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) 5.689197355s ago: executing program 0 (id=472): mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x11c0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000380), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000240)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x202, 0x0, 0x0, 0x2}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x109081, 0x34) syz_fuse_handle_req(r0, &(0x7f0000006380)="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", 0x2000, &(0x7f0000001200)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x28, 0x0, 0xffffffffffff6262, {{0x20000040000, 0x6c2}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fcntl$lock(r2, 0x5, &(0x7f0000000200)={0x1, 0x2}) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000000000404c05a00b00000000000109022400010000000009040000010300000009210000000122070009058103"], 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee01, 0xffffffffffffffff}}, './file0\x00'}) ioctl$MEDIA_IOC_DEVICE_INFO(r4, 0xc1007c00, &(0x7f0000000640)) bpf$MAP_CREATE(0x300000000000011, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000040001000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="024000000500"/28], 0x48) r5 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r5, 0x89e3, &(0x7f0000000000)) r6 = syz_usb_connect$uac3(0x0, 0xa0, &(0x7f0000000480)=ANY=[@ANYBLOB="12011003000000403512100040e10102030109028e000301002040080b0201012130c60904000000010130000a2401042a00ff0f0000132403050403020602030000000700100002"], &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r6, &(0x7f0000000140)={0x14, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"]}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000840)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fe9000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ff2000/0x2000)=nil, &(0x7f0000fe7000/0x4000)=nil, &(0x7f0000fea000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000feb000/0x4000)=nil, &(0x7f0000000740)="7be93b4d715f0e309b4c6d03165e19b5448b68cabf1c9dd679fe35eeb958ca3207fadea4c7e96b681b7094dc0e14ef641d88774c033ba28ac9c93e6a6e0823a0ba389c2df50a1b00addd898db46f57804e84d4f2374dd3c0b093ca02944c62f79d8e23f50fdcf140c1457f21009057c5077d322c553a6ce1a91cff94d4f617e481d695b2ac31a8c4159f1ad18f8b559ee857e2db56e95f4df89c81d3fa1975a3790228cf461649b2f667e655c075e7b529d3180657e0fcb8658547f8cd9aa8f070441d5fa64eebb8ba288238e2c25754c74dea9baa0003198e6f4145bb1db968", 0xe0, r7}, 0x68) openat$vcs(0xffffffffffffff9c, &(0x7f0000000580), 0x62941, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000fe9000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r8 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0x9fef, 0x80, 0x1000008, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x17, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_enter(r8, 0x2219, 0x7721, 0x16, 0x0, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) r9 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x1ff, 0x1501) ioctl$USBDEVFS_SUBMITURB(r9, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x82, &(0x7f0000000300)={0x4b5a9da54893e123, 0x16, 0x14}, 0x8, 0x2, 0x4, 0x0, 0x0, 0x80000, 0x0}) syz_usb_control_io(r6, &(0x7f0000000040)={0x2c, &(0x7f0000000080)=ANY=[@ANYRES32=r9, @ANYRES16=r1], 0x0, 0x0, 0x0, 0x0}, 0x0) 3.571600527s ago: executing program 4 (id=474): r0 = add_key(&(0x7f0000000000)='cifs.idmap\x00', &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$read(0x20, r0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=@base={0x5, 0x1, 0x3a0, 0x2}, 0x50) r2 = getpid() r3 = openat$cgroup(r1, &(0x7f0000001a00)='syz0\x00', 0x200002, 0x0) syz_clone3(&(0x7f0000001a40)={0x86000600, &(0x7f0000000340), &(0x7f0000000380), &(0x7f00000003c0), {}, &(0x7f0000000900)=""/4096, 0x1000, &(0x7f0000001900)=""/172, &(0x7f00000019c0)=[r2], 0x1, {r3}}, 0x58) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@bloom_filter={0x1e, 0x0, 0x0, 0x7, 0x4102, r1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x1, 0xd}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1}, &(0x7f0000000100), &(0x7f0000000140)}, 0x20) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup/syz1\x00', 0x1ff) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0xfffc}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x6}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @range={{0xa}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_RANGE_SREG={0x8, 0x1, 0x1, 0x0, 0x10}, @NFTA_RANGE_FROM_DATA={0x4}, @NFTA_RANGE_OP={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xc8}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000001c0)={'wlan1\x00'}) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f0000000080), &(0x7f00000002c0), 0x1800, r1}, 0x38) bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000000640)={r1, &(0x7f0000000080), &(0x7f0000000540)=""/240}, 0x20) 3.33097786s ago: executing program 3 (id=475): r0 = memfd_create(&(0x7f00000000c0)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU', 0x1) r1 = dup(r0) r2 = fanotify_init(0x200, 0x101000) fanotify_mark(r2, 0x1, 0x8001021, r1, 0x0) r3 = memfd_create(&(0x7f00000000c0)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU', 0x1) dup(r3) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r6 = socket(0x10, 0x803, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r8 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r10 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x84, 0x2c, 0xd27, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0xb, 0x3}, {}, {0xfff2, 0xfff1}}, [@filter_kind_options=@f_basic={{0xa}, {0x54, 0x2, [@TCA_BASIC_ACT={0x50, 0x3, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x4, 0xffff, 0x6, 0x6, 0x6}, 0x4}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x10}, 0x4) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$unix(0x1, 0x1, 0x0) socket$kcm(0x11, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r12, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) 3.0590131s ago: executing program 4 (id=476): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000003640)={0x0, 'hsr0\x00', {0x1}, 0x7}) r1 = socket$kcm(0x2, 0xa, 0x2) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) read$FUSE(0xffffffffffffffff, &(0x7f0000000540)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) (async) stat(&(0x7f0000002580)='./file0\x00', &(0x7f00000025c0)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000002640)={{0x1, 0x1, 0x18, r3, {0xee00, 0xee00}}, './file0\x00'}) (async, rerun: 64) r8 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x2000) (rerun: 64) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r8, 0xc03064ca, &(0x7f0000000140)={0x0, 0x0}) r9 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) sendmsg$unix(r2, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002680)=[@rights={{0x14, 0x1, 0x1, [r2]}}, @cred={{0x1c, 0x1, 0x2, {r4, r5, r7}}}, @rights={{0x18, 0x1, 0x1, [r6, r2]}}, @rights={{0x2c, 0x1, 0x1, [r0, r0, r3, r1, r9, r6, r1]}}, @rights={{0x10}}], 0x90}, 0x8841) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000500)={'hsr0\x00', &(0x7f00000004c0)=@ethtool_sfeatures={0x3b, 0x2, [{0x200, 0x4a39b33c}, {0x2, 0xb}]}}) 3.057871004s ago: executing program 1 (id=477): r0 = socket(0x11, 0xa, 0x5) r1 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f0000000280)=0x2000) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x100000f, 0x11, r1, 0x0) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f0000000200)=0x10000) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r2, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x2}, {}, {}, {}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x8, 0x0, 0xfffffffd}) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000040)={'ipvlan0\x00', {0x2, 0x4e20, @broadcast}}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r6 = syz_genetlink_get_family_id$wireguard(&(0x7f00000000c0), r0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000001c0)={'wg0\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000200)=ANY=[@ANYBLOB="a4000000", @ANYRES16=r6, @ANYBLOB="100027bd7000fbdbdf25010000000800050001000000140002007767320000000000000000000000000008000700030000001400020077673200000000000000000000000000080005000100000008b03e00010000001400020077673000000000000000000000000000060006004e20000008000100", @ANYRES32=r7, @ANYBLOB="24000300b08073e8d44e91e3da922c22438244bb885c69e269c8e9d835b114293a4ddc6e"], 0xa4}, 0x1, 0x0, 0x0, 0x1}, 0x8000) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000000)={0x2, 0x0, [{0x10a}, {0x908, 0x0, 0x7}]}) r8 = socket(0x10, 0x803, 0x0) r9 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$sequencer(r9, &(0x7f0000000040)=[@t={0x81, 0x8, 0x8, 0x9, @generic=0x8}], 0x8) ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2}}) sendto$inet(r0, 0x0, 0x5ee, 0x800, &(0x7f0000000040)={0x2, 0x4e20, @remote}, 0x10) 2.898772472s ago: executing program 3 (id=478): r0 = socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$loop(&(0x7f0000000240), 0x1, 0x102) (async) r1 = syz_open_dev$loop(&(0x7f0000000240), 0x1, 0x102) ioctl$IOC_PR_PREEMPT(r1, 0x401870cb, &(0x7f00000002c0)={0x9f0, 0x80, 0x8001, 0x100}) (async) ioctl$IOC_PR_PREEMPT(r1, 0x401870cb, &(0x7f00000002c0)={0x9f0, 0x80, 0x8001, 0x100}) r2 = socket$nl_route(0x10, 0x3, 0x0) mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xc) (async) mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xc) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@ipv6_newrule={0x24, 0x20, 0x1, 0x70bd27, 0x25dfdbfb, {0xa, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x7, 0x6}, [@FIB_RULE_POLICY=@FRA_DPORT_RANGE={0x8, 0x18, {0x4e23, 0x4e21}}]}, 0x24}, 0x1, 0x0, 0x0, 0x24048860}, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000200)={{0x1, 0x1, 0x18, r2, {0xe2}}, './file0\x00'}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000280)={'wg1\x00'}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x1000, &(0x7f0000000300)) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x3, 0xdc, 0x48, 0x10, 0x55f, 0xa800, 0xdcfd, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x9, 0x80, 0x10, 0x18, "", [{{0x9, 0x4, 0xe2, 0x4, 0x0, 0xa, 0xf4, 0x4d, 0xb}}]}}]}}, 0x0) getgid() (async) getgid() ioctl$DVB_DEMUX_DMX_EXPBUF(0xffffffffffffffff, 0xc00c6f3e, &(0x7f0000000000)={0x6, 0x80000, r0}) (async) ioctl$DVB_DEMUX_DMX_EXPBUF(0xffffffffffffffff, 0xc00c6f3e, &(0x7f0000000000)={0x6, 0x80000, r0}) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_CURSOR(r3, 0xc01c64a3, &(0x7f0000000140)={0x1, r4, 0x6, 0x82, 0xfe, 0x8, 0xb}) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x80101, 0x0) r6 = syz_open_dev$loop(&(0x7f0000000280), 0xffff, 0x14f600) ioctl$LOOP_CONFIGURE(r6, 0xc0c0128e, &(0x7f0000000140)={0xffffffffffffffff, 0x1ff, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x8, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe10859894822800800000000000097bdb22d0000b420a1a83c5240f45f819e01177d94f98dd4992861acdfffffff160000000400002000", "0000000000000000113ddb2802e7234f00000000ddff00", [0x100000000, 0x82]}}) ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f00000000c0)) (async) ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMRRU(r5, 0x4004743b, &(0x7f0000000780)=0x9a0) socket$nl_route(0x10, 0x3, 0x0) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="60000000210000082dbd7000fbdbdf250a80140e26fd7da22c40ecde765b000004100000001400010000000000000000000000ffffe000000114000200fe8000000000000000000000000000aa08000400f8ffffff140002000000e0ffffffff"], 0x60}, 0x1, 0xffffff7f, 0x0, 0x20008000}, 0x4048004) 2.619129457s ago: executing program 1 (id=479): bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES16, @ANYBLOB="208ccd1c197cc8d6c600000000000000000000000000c654000587000000", @ANYRESDEC, @ANYRES32, @ANYRES32], 0x48) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r0 = getpid() (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000200)=@file={0x0, './cgroup\x00'}, 0x6e) (async) sendmmsg$unix(r3, &(0x7f00000bd000), 0x40000000000017d, 0x0) (async) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async, rerun: 32) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (rerun: 32) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(0xffffffffffffffff, 0x3ba0, &(0x7f0000000180)={0x2, 0x2, r5}) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) (rerun: 32) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01000000000000000000010000002400018006000500000000000600010002000000080003"], 0x38}}, 0x0) (async) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) r8 = userfaultfd(0x80001) ioctl$UFFDIO_API(r8, 0xc018aa3f, &(0x7f0000000100)) (async) ioctl$UFFDIO_REGISTER(r8, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) (async) ioctl$UFFDIO_CONTINUE(r8, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) (async) r9 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) ioctl$PAGEMAP_SCAN(r9, 0xc0606610, &(0x7f00000003c0)={0x60, 0x0, &(0x7f0000b19000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x4, &(0x7f0000000280), 0x0, 0x5514, 0x12, 0x20, 0x48, 0x1d}) (async, rerun: 32) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) (rerun: 32) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0xffb2) (async) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, 0x0, 0x0) (async) syz_pidfd_open(r0, 0x0) r10 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup\x00', 0x8000, 0x0) getdents64(r10, &(0x7f0000001f00)=""/4093, 0xffd) getdents(r10, 0x0, 0x0) setns(r10, 0x0) 2.423205376s ago: executing program 4 (id=480): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x34, r0, 0x507, 0x70bd2a, 0x25dfdbfc, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x1c, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x8002}, 0x20000054) r2 = socket(0x2, 0x80805, 0x0) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000001040), 0x20000, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) r6 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt(r6, 0x28, 0x6, 0xfffffffffffffffc, &(0x7f0000000000)=0x5e) setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000000000000, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0xe501, 0x3, 0x4e0, 0x320, 0x6affffff, 0x3403000b, 0x320, 0x7, 0x448, 0x230, 0x230, 0x448, 0x223, 0x3, 0x0, {[{{@ip={@remote, @local, 0x0, 0xff000000, 'veth1_macvtap\x00', 'veth1_to_team\x00', {0xff}, {}, 0x6}, 0x0, 0x2d8, 0x320, 0x0, {0x1000000}, [@common=@unspec=@bpf0={{0x230}, {0x1, [{0x6}, {}, {}, {}, {}, {}, {0xfffe}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x2}, {}, {}, {0x0, 0x0, 0x1, 0x3}, {}, {}, {0x251}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {}, {0xfffe}, {}, {}, {0x0, 0x0, 0xfe}, {0x0, 0x0, 0x1}, {}, {}, {}, {0x0, 0x40}, {}, {0xfffc}, {0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0x0, 0x1000}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0xfc}]}}, @common=@unspec=@time={{0x38}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0xc0, 0x128, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}, {0x4}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x3, 'syz0\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x540) connect$unix(r3, &(0x7f0000001100)=@file={0x2, './file0\x00'}, 0x6e) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000010c0)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) r7 = socket(0x2, 0x80805, 0x0) getsockopt$bt_hci(r7, 0x84, 0x80, &(0x7f0000000000)=""/4103, &(0x7f0000001080)=0x1007) 2.269768637s ago: executing program 1 (id=481): r0 = socket(0x11, 0xa, 0x5) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000040)={'ipvlan0\x00', {0x2, 0x4e20, @broadcast}}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) sendto$inet(r0, 0x0, 0x5ee, 0x800, &(0x7f0000000040)={0x2, 0x4e20, @remote}, 0x10) (fail_nth: 2) 2.214405652s ago: executing program 4 (id=482): ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x4) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0) openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x602, 0x0) socket$kcm(0x10, 0x3, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000002c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x1, 0x6, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) syz_open_dev$radio(&(0x7f0000000100), 0x3, 0x2) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/stat\x00', 0x0, 0x0) accept4$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0xffffffff, @local}, 0x10, 0x800) io_uring_enter(0xffffffffffffffff, 0x627, 0x4c1, 0x43, 0x0, 0x30) add_key$fscrypt_provisioning(&(0x7f0000000000), 0x0, 0x0, 0x18, 0xfffffffffffffff9) request_key(&(0x7f0000000480)='asymmetric\x00', &(0x7f00000004c0)={'syz', 0x0}, &(0x7f0000000500)='cdefghijklmnop\x00\x00', 0x0) request_key(&(0x7f0000001d40)='asymmetric\x00', &(0x7f0000000080)={'syz', 0x0}, 0x0, 0xfffffffffffffffe) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0x439, 0x70bd3d, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x9801}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MTU={0x8, 0x4, 0x9}]}, 0x40}, 0x1, 0x0, 0x0, 0x24000007}, 0x40) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, &(0x7f0000000400)}) socket$nl_generic(0x10, 0x3, 0x10) r4 = open_tree(0xffffffffffffff9c, &(0x7f00000002c0)='\x00', 0x89901) move_mount(r4, 0x0, r4, 0x0, 0x276) syz_usb_disconnect(0xffffffffffffffff) 2.011713223s ago: executing program 1 (id=483): r0 = fsopen(&(0x7f0000000000)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000080)='source', &(0x7f0000000400)='//\\/\x06\b\xa30\\\xea\\\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas\x9d\x14\xe3\v\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7Gl\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\n\x8c0x0, 0x4, 0x8, 0x8, 0x0, 0x0, @loopback, @ipv4={'\x00', '\xff\xff', @remote}, 0x1, 0x7, 0xfffff214}}) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x2c}}, 0x800) bind$can_raw(r0, &(0x7f00000004c0)={0x1d, r7}, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r3) 615.471195ms ago: executing program 3 (id=487): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) syz_open_dev$video4linux(&(0x7f0000000480), 0xffffffffffffff52, 0x450202) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000001080)={0x0, 0x1c02, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="6c00000002060104db406e3e0004000200000000100003006269746d61703a706f72740005000400000000000900020073797a32000000000500050000006c00050001000600000024000780080008400000137906000440fffff000060005400000000008000640"], 0x6c}}, 0x0) write$binfmt_misc(r3, &(0x7f0000000000), 0xfffffecc) splice(r2, 0x0, r4, 0x0, 0x400000004ffe6, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r6 = socket$vsock_stream(0x28, 0x1, 0x0) r7 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r7, 0x7a7, &(0x7f00000000c0)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r7, 0x7a0, &(0x7f0000000000)={@hyper}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r7, 0x7a8, &(0x7f0000000080)={{@local, 0x2}, @local, 0x4, 0x0, 0x5e, 0x200000000000, 0x100000000000006}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0) close_range(r6, 0xffffffffffffffff, 0x0) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x7, &(0x7f00000014c0)=0x10000b, 0x4) process_madvise(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000100)="00a15331fbb2327345e533542536616d1494db45cbee9fc5ba6909df34d3686dbd5aac43e14df8020654277f9255e596052b2caf824b2762193728d28c70", 0x3e}], 0x1, 0x14, 0x0) 89.586099ms ago: executing program 4 (id=488): sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x2400c854) syz_usb_connect(0x5, 0x7b, &(0x7f0000000000)=ANY=[@ANYRES8=0x0], 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000180)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x3, 0x0, {0x0, 0x0, 0x0, r0, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x8004) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x3}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f0000001400)={0x0, 0x0, 0x7a}, 0x8) mount$fuse(0x0, 0x0, &(0x7f0000000100), 0x0, 0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x0, 0x10400}}, 0x50) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000180)={0x8, 'veth0_to_team\x00', {'batadv0\x00'}, 0x7ff}) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newqdisc={0x44, 0x24, 0x100, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x2}, {0x6}, {0xb}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_NAT={0x8, 0xb, 0x1}, @TCA_CAKE_RAW={0x8, 0xc, 0x2}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000884}, 0x48000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff752b056800080000faff8141", @ANYRES32=0x0, @ANYBLOB="67a9fde500000000280012800a00010076786c616e"], 0x3}}, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) close(r6) socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(r5, &(0x7f0000000000), 0xfffffecc) splice(r4, 0x0, r6, 0x0, 0x4ffe6, 0x8) r7 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7ffffffe}]}) linkat(r9, &(0x7f0000000040)='\x00', 0xffffffffffffff9c, 0x0, 0x1000) 0s ago: executing program 1 (id=489): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newlink={0x54, 0x10, 0x1, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0xffa1, 0x0, 0x6b24d, 0x49a00}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_VFINFO_LIST={0x18, 0x16, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN={0x10, 0x2, {0x5, 0x907, 0x3f}}]}]}, @IFLA_LINKMODE={0x5, 0x11, 0x7}]}, 0x54}, 0x1, 0x0, 0x0, 0xc1}, 0x4040084) kernel console output (not intermixed with test programs): 116.392101][ T5997] netlink: 76 bytes leftover after parsing attributes in process `syz.3.62'. [ 116.434930][ T5994] pim6reg: entered allmulticast mode [ 116.454135][ T5994] team0: entered allmulticast mode [ 116.464267][ T5994] team_slave_0: entered allmulticast mode [ 116.478830][ T5994] team_slave_1: entered allmulticast mode [ 116.479950][ T5699] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 116.498171][ T5994] sg_write: data in/out 439260/178 bytes for SCSI command 0x0-- guessing data in; [ 116.498171][ T5994] program syz.0.61 not setting count and/or reply_len properly [ 116.541146][ T5699] usb 3-1: device descriptor read/8, error -71 [ 116.651324][ T5699] usb usb3-port1: unable to enumerate USB device [ 116.867517][ T6004] syz.0.64 (6004): drop_caches: 0 [ 117.275955][ T30] audit: type=1326 audit(1777593299.586:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6012 comm="syz.0.69" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1994f9cdd9 code=0x0 [ 117.335652][ T6021] kvm: emulating exchange as write [ 117.499454][ T30] audit: type=1400 audit(1777593299.806:3): apparmor="DENIED" operation="setprocattr" info="exec" error=-22 profile="unconfined" pid=6024 comm="syz.4.70" [ 117.515332][ T6026] usb usb9: usbfs: interface 0 claimed by hub while 'syz.4.70' resets device [ 117.683648][ T6032] FAULT_INJECTION: forcing a failure. [ 117.683648][ T6032] name failslab, interval 1, probability 0, space 0, times 0 [ 117.725432][ T6032] CPU: 0 UID: 0 PID: 6032 Comm: syz.3.72 Tainted: G L syzkaller #0 PREEMPT(full) [ 117.725468][ T6032] Tainted: [L]=SOFTLOCKUP [ 117.725476][ T6032] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 117.725488][ T6032] Call Trace: [ 117.725497][ T6032] [ 117.725506][ T6032] dump_stack_lvl+0xe8/0x150 [ 117.725550][ T6032] should_fail_ex+0x412/0x560 [ 117.725584][ T6032] should_failslab+0xa8/0x100 [ 117.725621][ T6032] __kmalloc_noprof+0xe8/0x760 [ 117.725652][ T6032] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 117.725696][ T6032] genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 117.725739][ T6032] genl_family_rcv_msg_doit+0xd9/0x330 [ 117.725778][ T6032] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 117.725817][ T6032] ? __pfx_genl_get_cmd+0x10/0x10 [ 117.725846][ T6032] ? __pfx_ovs_dp_cmd_get+0x10/0x10 [ 117.725867][ T6032] ? __pfx_ovs_dp_cmd_dump+0x10/0x10 [ 117.725906][ T6032] genl_rcv_msg+0x61c/0x7a0 [ 117.725946][ T6032] ? __pfx_genl_rcv_msg+0x10/0x10 [ 117.725977][ T6032] ? __pfx_ovs_dp_cmd_get+0x10/0x10 [ 117.726000][ T6032] ? __pfx_ref_tracker_free+0x10/0x10 [ 117.726027][ T6032] ? __asan_memcpy+0x40/0x70 [ 117.726051][ T6032] ? __skb_clone+0x63/0x7a0 [ 117.726087][ T6032] netlink_rcv_skb+0x232/0x4b0 [ 117.726115][ T6032] ? __pfx_genl_rcv_msg+0x10/0x10 [ 117.726148][ T6032] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 117.726203][ T6032] ? down_read+0x270/0x2e0 [ 117.726230][ T6032] ? genl_rcv+0xd/0x40 [ 117.726263][ T6032] genl_rcv+0x28/0x40 [ 117.726293][ T6032] netlink_unicast+0x75c/0x8e0 [ 117.726338][ T6032] netlink_sendmsg+0x813/0xb40 [ 117.726375][ T6032] ? __pfx_netlink_sendmsg+0x10/0x10 [ 117.726406][ T6032] ? aa_sock_msg_perm+0xf1/0x1b0 [ 117.726435][ T6032] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 117.726468][ T6032] ____sys_sendmsg+0x972/0x9f0 [ 117.726496][ T6032] ? __might_fault+0xaf/0x130 [ 117.726530][ T6032] ? __pfx_____sys_sendmsg+0x10/0x10 [ 117.726569][ T6032] ? import_iovec+0x73/0xa0 [ 117.726604][ T6032] ___sys_sendmsg+0x2a5/0x360 [ 117.726631][ T6032] ? __lock_acquire+0x6b5/0x2cf0 [ 117.726658][ T6032] ? __pfx____sys_sendmsg+0x10/0x10 [ 117.726725][ T6032] ? __fget_files+0x2a/0x420 [ 117.726750][ T6032] ? __fget_files+0x3a0/0x420 [ 117.726787][ T6032] __x64_sys_sendmsg+0x1bd/0x2a0 [ 117.726819][ T6032] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 117.726857][ T6032] ? __pfx_ksys_write+0x10/0x10 [ 117.726897][ T6032] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.726920][ T6032] do_syscall_64+0x15f/0xf80 [ 117.726944][ T6032] ? trace_irq_disable+0x3b/0x140 [ 117.726976][ T6032] ? clear_bhb_loop+0x40/0x90 [ 117.727003][ T6032] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.727024][ T6032] RIP: 0033:0x7f6638f9cdd9 [ 117.727051][ T6032] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 117.727073][ T6032] RSP: 002b:00007f6639e55028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 117.727103][ T6032] RAX: ffffffffffffffda RBX: 00007f6639215fa0 RCX: 00007f6638f9cdd9 [ 117.727119][ T6032] RDX: 000000000000c000 RSI: 0000200000000080 RDI: 0000000000000003 [ 117.727132][ T6032] RBP: 00007f6639e55090 R08: 0000000000000000 R09: 0000000000000000 [ 117.727144][ T6032] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 117.727156][ T6032] R13: 00007f6639216038 R14: 00007f6639215fa0 R15: 00007f663933fa48 [ 117.727190][ T6032] [ 118.440072][ T5739] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 118.569874][ T5739] usb 4-1: device descriptor read/64, error -71 [ 118.831363][ T5739] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 118.979930][ T5739] usb 4-1: device descriptor read/64, error -71 [ 119.005486][ T6053] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 119.102639][ T5739] usb usb4-port1: attempt power cycle [ 119.464493][ T5739] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 119.501812][ T807] IPVS: starting estimator thread 0... [ 119.513530][ T5739] usb 4-1: device descriptor read/8, error -71 [ 119.557091][ T6062] IPVS: lblc: FWM 3 0x00000003 - no destination available [ 119.610029][ T6067] IPVS: using max 37 ests per chain, 88800 per kthread [ 119.769921][ T5739] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 119.818973][ T5739] usb 4-1: device descriptor read/8, error -71 [ 119.963312][ T5739] usb usb4-port1: unable to enumerate USB device [ 120.469919][ T5692] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 120.610008][ T5692] usb 1-1: device descriptor read/64, error -71 [ 120.616367][ T24] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 120.827704][ T24] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 120.870282][ T24] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 120.891249][ T5692] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 120.898808][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.929666][ T24] usb 5-1: config 0 descriptor?? [ 120.955567][ T24] pwc: Askey VC010 type 2 USB webcam detected. [ 121.030016][ T5692] usb 1-1: device descriptor read/64, error -71 [ 121.150412][ T5692] usb usb1-port1: attempt power cycle [ 121.383258][ T24] pwc: recv_control_msg error -32 req 02 val 2b00 [ 121.414042][ T24] pwc: recv_control_msg error -32 req 02 val 2700 [ 121.416417][ T30] audit: type=1400 audit(1777593303.726:4): apparmor="DENIED" operation="setprocattr" info="exec" error=-22 profile="unconfined" pid=6075 comm="syz.3.85" [ 121.441571][ T24] pwc: recv_control_msg error -32 req 02 val 2c00 [ 121.459419][ T6076] usb usb9: usbfs: interface 0 claimed by hub while 'syz.3.85' resets device [ 121.484663][ T24] pwc: recv_control_msg error -32 req 04 val 1000 [ 121.506491][ T24] pwc: recv_control_msg error -32 req 04 val 1300 [ 121.526027][ T24] pwc: recv_control_msg error -32 req 04 val 1400 [ 121.534488][ T5692] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 121.557727][ T24] pwc: recv_control_msg error -32 req 02 val 2000 [ 121.570684][ T5692] usb 1-1: device descriptor read/8, error -71 [ 121.584925][ T24] pwc: recv_control_msg error -32 req 02 val 2100 [ 121.710430][ T6082] netlink: 'syz.2.86': attribute type 1 has an invalid length. [ 121.830196][ T5692] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 121.870789][ T5692] usb 1-1: device descriptor read/8, error -71 [ 121.900227][ T5739] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 122.000207][ T5692] usb usb1-port1: unable to enumerate USB device [ 122.061867][ T5739] usb 2-1: config 0 has no interfaces? [ 122.067594][ T5739] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 122.077137][ T5739] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.092322][ T5739] usb 2-1: config 0 descriptor?? [ 122.220067][ T807] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 122.313279][ T1568] usb 2-1: USB disconnect, device number 2 [ 122.379890][ T807] usb 4-1: Using ep0 maxpacket: 16 [ 122.387909][ T807] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 122.398997][ T807] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 122.408829][ T807] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 122.422103][ T807] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 122.431417][ T807] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.443875][ T807] usb 4-1: config 0 descriptor?? [ 122.782196][ T5692] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 122.962588][ T5692] usb 2-1: unable to get BOS descriptor or descriptor too short [ 122.995824][ T5692] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 37, changing to 7 [ 123.007496][ T5692] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 116, changing to 7 [ 123.028029][ T5692] usb 2-1: string descriptor 0 read error: -22 [ 123.038242][ T5692] usb 2-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 123.048284][ T5692] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.281193][ T5692] usb 2-1: Can't get UAC3 power state for id 10 [ 123.334565][ T6089] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 123.360440][ T6089] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 123.480094][ T24] pwc: recv_control_msg error -71 req 02 val 2500 [ 123.509163][ T24] pwc: recv_control_msg error -71 req 02 val 2400 [ 123.531546][ T24] pwc: recv_control_msg error -71 req 02 val 2600 [ 123.556273][ T24] pwc: recv_control_msg error -71 req 02 val 2900 [ 123.583665][ T24] pwc: recv_control_msg error -71 req 02 val 2800 [ 123.601435][ T24] pwc: recv_control_msg error -71 req 04 val 1100 [ 123.617634][ T24] pwc: recv_control_msg error -71 req 04 val 1200 [ 123.657878][ T24] pwc: Registered as video103. [ 123.678915][ T24] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input6 [ 123.746206][ T24] usb 5-1: USB disconnect, device number 8 [ 123.922574][ T5692] usb 2-1: 2:0: failed to get current value for ch 0 (-32) [ 123.935922][ T5699] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 123.978288][ T6108] netlink: 56 bytes leftover after parsing attributes in process `syz.4.95'. [ 124.092735][ T6110] FAULT_INJECTION: forcing a failure. [ 124.092735][ T6110] name failslab, interval 1, probability 0, space 0, times 0 [ 124.109128][ T6110] CPU: 0 UID: 0 PID: 6110 Comm: syz.4.96 Tainted: G L syzkaller #0 PREEMPT(full) [ 124.109163][ T6110] Tainted: [L]=SOFTLOCKUP [ 124.109171][ T6110] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 124.109184][ T6110] Call Trace: [ 124.109193][ T6110] [ 124.109202][ T6110] dump_stack_lvl+0xe8/0x150 [ 124.109232][ T6110] should_fail_ex+0x412/0x560 [ 124.109266][ T6110] should_failslab+0xa8/0x100 [ 124.109302][ T6110] __kmalloc_noprof+0xe8/0x760 [ 124.109334][ T6110] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 124.109372][ T6110] tomoyo_realpath_from_path+0xe3/0x5d0 [ 124.109405][ T6110] ? tomoyo_domain+0xd7/0x130 [ 124.109441][ T6110] ? tomoyo_path_number_perm+0x219/0x630 [ 124.109467][ T6110] tomoyo_path_number_perm+0x246/0x630 [ 124.109495][ T6110] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 124.109519][ T6110] ? __lock_acquire+0x6b5/0x2cf0 [ 124.109559][ T6110] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 124.109611][ T6110] ? __fget_files+0x2a/0x420 [ 124.109641][ T6110] ? __fget_files+0x2a/0x420 [ 124.109664][ T6110] ? __fget_files+0x3a0/0x420 [ 124.109698][ T6110] ? __fget_files+0x2a/0x420 [ 124.109729][ T6110] security_file_ioctl+0xc3/0x2a0 [ 124.109754][ T6110] __se_sys_ioctl+0x47/0x170 [ 124.109786][ T6110] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.109809][ T6110] do_syscall_64+0x15f/0xf80 [ 124.109834][ T6110] ? trace_irq_disable+0x3b/0x140 [ 124.109867][ T6110] ? clear_bhb_loop+0x40/0x90 [ 124.109894][ T6110] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.109917][ T6110] RIP: 0033:0x7f273c39cdd9 [ 124.109937][ T6110] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 124.109954][ T6110] RSP: 002b:00007f273d217028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 124.109977][ T6110] RAX: ffffffffffffffda RBX: 00007f273c615fa0 RCX: 00007f273c39cdd9 [ 124.109993][ T6110] RDX: 0000200000000600 RSI: 00000000c0d05604 RDI: 0000000000000003 [ 124.110007][ T6110] RBP: 00007f273d217090 R08: 0000000000000000 R09: 0000000000000000 [ 124.110019][ T6110] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 124.110032][ T6110] R13: 00007f273c616038 R14: 00007f273c615fa0 R15: 00007f273c73fa48 [ 124.110066][ T6110] [ 124.141231][ T5699] usb 3-1: config 0 has an invalid interface number: 106 but max is 0 [ 124.144092][ T6110] ERROR: Out of memory at tomoyo_realpath_from_path. [ 124.157373][ T5699] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 124.463950][ T5699] usb 3-1: config 0 has no interface number 0 [ 124.470395][ T5699] usb 3-1: config 0 interface 106 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 216 [ 124.485322][ T5699] usb 3-1: config 0 interface 106 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 124.498504][ T5699] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb [ 124.532785][ T5699] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.587113][ T5699] usb 3-1: config 0 descriptor?? [ 124.613194][ T6114] input: syz1 as /devices/virtual/input/input7 [ 124.684326][ T6094] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 124.738682][ T5699] usb 3-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 124.783923][ T30] audit: type=1400 audit(1777593307.096:5): apparmor="DENIED" operation="setprocattr" info="exec" error=-22 profile="unconfined" pid=6115 comm="syz.0.98" [ 124.828362][ T6116] usb usb9: usbfs: interface 0 claimed by hub while 'syz.0.98' resets device [ 125.064375][ T6081] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 125.101395][ T6081] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 125.229826][ T807] usbhid 4-1:0.0: can't add hid device: -71 [ 125.257769][ T807] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 125.355311][ T807] usb 4-1: USB disconnect, device number 7 [ 125.465668][ T808] usb 3-1: USB disconnect, device number 6 [ 125.472035][ T3307] usb 3-1: Failed to submit usb control message: -71 [ 125.498656][ T3307] usb 3-1: unable to send the bmi data to the device: -71 [ 125.501814][ T6127] netlink: 'syz.0.99': attribute type 5 has an invalid length. [ 125.543818][ T3307] usb 3-1: unable to get target info from device [ 125.554653][ T5692] usb 2-1: USB disconnect, device number 3 [ 125.576374][ T3307] usb 3-1: could not get target info (-71) [ 125.605468][ T3307] usb 3-1: could not probe fw (-71) [ 126.619899][ T5692] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 126.723436][ T6140] syzkaller1: entered promiscuous mode [ 126.759719][ T6140] syzkaller1: entered allmulticast mode [ 126.780192][ T5692] usb 1-1: device descriptor read/64, error -71 [ 126.811435][ T30] audit: type=1326 audit(1777593309.116:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6139 comm="syz.2.104" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f875659cdd9 code=0x7ffc0000 [ 126.891768][ T30] audit: type=1326 audit(1777593309.126:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6139 comm="syz.2.104" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=98 compat=0 ip=0x7f875659cdd9 code=0x7ffc0000 [ 126.967987][ T30] audit: type=1326 audit(1777593309.126:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6139 comm="syz.2.104" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f875659cdd9 code=0x7ffc0000 [ 127.090946][ T5692] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 127.099518][ T30] audit: type=1326 audit(1777593309.126:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6139 comm="syz.2.104" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=51 compat=0 ip=0x7f875659cdd9 code=0x7ffc0000 [ 127.220036][ T5692] usb 1-1: device descriptor read/64, error -71 [ 127.260921][ T30] audit: type=1326 audit(1777593309.126:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6139 comm="syz.2.104" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f875659cdd9 code=0x7ffc0000 [ 127.327036][ T30] audit: type=1326 audit(1777593309.126:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6139 comm="syz.2.104" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f875659cdd9 code=0x7ffc0000 [ 127.363946][ T5692] usb usb1-port1: attempt power cycle [ 127.540252][ T6155] usb usb9: usbfs: interface 0 claimed by hub while 'syz.4.109' resets device [ 127.564402][ T30] audit: type=1326 audit(1777593309.316:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6139 comm="syz.2.104" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f875659cdd9 code=0x7ffc0000 [ 127.676964][ T30] audit: type=1326 audit(1777593309.326:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6139 comm="syz.2.104" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f875659cdd9 code=0x7ffc0000 [ 127.780285][ T5692] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 127.817131][ T30] audit: type=1326 audit(1777593309.326:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6139 comm="syz.2.104" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f875659cdd9 code=0x7ffc0000 [ 127.821953][ T5692] usb 1-1: device descriptor read/8, error -71 [ 128.090900][ T6158] syzkaller1: entered promiscuous mode [ 128.119190][ T6158] syzkaller1: entered allmulticast mode [ 128.190842][ T5692] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 128.220359][ T5692] usb 1-1: device descriptor read/8, error -71 [ 128.331082][ T5692] usb usb1-port1: unable to enumerate USB device [ 128.515796][ T6165] netlink: 72 bytes leftover after parsing attributes in process `syz.1.113'. [ 128.855558][ T6175] netlink: 'syz.1.116': attribute type 6 has an invalid length. [ 129.067130][ T6179] netlink: 12 bytes leftover after parsing attributes in process `syz.1.118'. [ 129.093830][ T6179] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 129.102100][ T6179] IPv6: NLM_F_CREATE should be set when creating new route [ 129.458159][ T6185] usb usb9: usbfs: interface 0 claimed by hub while 'syz.0.120' resets device [ 129.977403][ T6193] syzkaller0: entered promiscuous mode [ 129.998910][ T6193] syzkaller0: entered allmulticast mode [ 130.033663][ T6193] netlink: 76 bytes leftover after parsing attributes in process `syz.1.124'. [ 130.119055][ T6201] netlink: 104 bytes leftover after parsing attributes in process `syz.4.127'. [ 130.410625][ T6205] netlink: 12 bytes leftover after parsing attributes in process `syz.4.129'. [ 130.447719][ T6205] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 130.455060][ T6205] IPv6: NLM_F_CREATE should be set when creating new route [ 130.500472][ T5692] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 130.528892][ T6209] syzkaller0: entered promiscuous mode [ 130.670397][ T5692] usb 3-1: Using ep0 maxpacket: 16 [ 130.697742][ T5692] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 33437, setting to 1024 [ 130.728867][ T5692] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0xF has invalid maxpacket 1024 [ 130.740371][ T807] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 130.766366][ T5692] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 130.795241][ T5692] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 130.822912][ T5692] usb 3-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=c2.87 [ 130.838521][ T5692] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.872460][ T5692] usb 3-1: Product: syz [ 130.880160][ T807] usb 2-1: device descriptor read/64, error -71 [ 130.906342][ T5692] usb 3-1: Manufacturer: syz [ 130.923442][ T5692] usb 3-1: SerialNumber: syz [ 130.942795][ T5692] usb 3-1: config 0 descriptor?? [ 130.961811][ T6203] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 130.990545][ C1] port100 3-1:0.0: NFC: Urb failure (status -71) [ 130.999111][ T5692] port100 3-1:0.0: NFC: Could not get supported command types [ 131.143358][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 131.143376][ T30] audit: type=1400 audit(1777593313.456:17): apparmor="DENIED" operation="setprocattr" info="exec" error=-22 profile="unconfined" pid=6220 comm="syz.0.135" [ 131.167216][ T807] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 131.181842][ T6221] usb usb9: usbfs: interface 0 claimed by hub while 'syz.0.135' resets device [ 131.197675][ T6203] Cannot find add_set index 0 as target [ 131.211169][ T9] usb 3-1: USB disconnect, device number 7 [ 131.262477][ T5739] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 131.299975][ T807] usb 2-1: device descriptor read/64, error -71 [ 131.410822][ T807] usb usb2-port1: attempt power cycle [ 131.440996][ T5739] usb 5-1: Using ep0 maxpacket: 32 [ 131.462792][ T5739] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 131.477521][ T5739] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 131.489467][ T5739] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 131.501462][ T5739] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.520549][ T5739] usb 5-1: config 0 descriptor?? [ 131.548621][ T5739] hub 5-1:0.0: USB hub found [ 131.742121][ T5739] hub 5-1:0.0: 1 port detected [ 131.771939][ T807] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 131.801077][ T807] usb 2-1: device descriptor read/8, error -71 [ 132.039916][ T807] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 132.081244][ T807] usb 2-1: device descriptor read/8, error -71 [ 132.200449][ T807] usb usb2-port1: unable to enumerate USB device [ 132.743107][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.751318][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.105332][ T5739] hub 5-1:0.0: hub_ext_port_status failed (err = -32) [ 133.179312][ T6240] netlink: 4 bytes leftover after parsing attributes in process `syz.0.142'. [ 133.233163][ T6240] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 133.240515][ T6240] IPv6: NLM_F_CREATE should be set when creating new route [ 133.693862][ T6242] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 133.961129][ T5739] usb 5-1: USB disconnect, device number 9 [ 134.540129][ T5739] usb 5-1: new full-speed USB device number 10 using dummy_hcd [ 134.702061][ T5739] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 134.714520][ T5739] usb 5-1: config 0 interface 0 has no altsetting 0 [ 134.743473][ T5739] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 134.769492][ T5739] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 134.805462][ T5739] usb 5-1: Product: syz [ 134.827524][ T5739] usb 5-1: Manufacturer: syz [ 134.842388][ T5739] usb 5-1: SerialNumber: syz [ 134.878857][ T5739] usb 5-1: config 0 descriptor?? [ 134.894155][ T5739] usb 5-1: selecting invalid altsetting 0 [ 135.061953][ T5699] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 135.119286][ T6266] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 135.186579][ T6266] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 135.246592][ T5692] usb 5-1: USB disconnect, device number 10 [ 135.261260][ T5699] usb 2-1: New USB device found, idVendor=0403, idProduct=f850, bcdDevice= 0.00 [ 135.303165][ T5699] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.407084][ T5699] usb 2-1: config 0 descriptor?? [ 135.477250][ T5699] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 135.541045][ T5699] usb 2-1: Detected SIO [ 135.598751][ T5699] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 135.673160][ T5699] usb 2-1: USB disconnect, device number 8 [ 135.740057][ T5699] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 135.767551][ T5699] ftdi_sio 2-1:0.0: device disconnected [ 135.984481][ T6276] netlink: 4 bytes leftover after parsing attributes in process `syz.0.153'. [ 136.001919][ T6276] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 136.283874][ T6283] fuse: Bad value for 'fd' [ 136.463398][ T5692] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 136.619945][ T5692] usb 3-1: device descriptor read/64, error -71 [ 136.724635][ T6292] process 'syz.4.158' launched '/dev/fd/3' with NULL argv: empty string added [ 136.802453][ T5739] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 136.879913][ T5692] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 136.973254][ T5739] usb 1-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 136.993707][ T5739] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.013579][ T5739] usb 1-1: Product: syz [ 137.024558][ T5739] usb 1-1: Manufacturer: syz [ 137.031456][ T5692] usb 3-1: device descriptor read/64, error -71 [ 137.045517][ T5739] usb 1-1: SerialNumber: syz [ 137.068799][ T5739] usb 1-1: config 0 descriptor?? [ 137.085682][ T5739] hub 1-1:0.0: bad descriptor, ignoring hub [ 137.096827][ T5739] hub 1-1:0.0: probe with driver hub failed with error -5 [ 137.151037][ T5692] usb usb3-port1: attempt power cycle [ 137.170493][ T5699] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 137.296951][ T5739] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 137.340119][ T5699] usb 5-1: Using ep0 maxpacket: 8 [ 137.349499][ T5699] usb 5-1: config 2 has an invalid interface number: 31 but max is 0 [ 137.363254][ T5699] usb 5-1: config 2 has no interface number 0 [ 137.373158][ T5699] usb 5-1: config 2 interface 31 has no altsetting 0 [ 137.387490][ T5739] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 137.395553][ T5699] usb 5-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 137.430611][ T5699] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.450299][ T5739] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 137.472921][ T5739] usb 1-1: media controller created [ 137.484571][ T5699] usb 5-1: Product: syz [ 137.497644][ T5699] usb 5-1: Manufacturer: syz [ 137.514751][ T5699] usb 5-1: SerialNumber: syz [ 137.521657][ T5692] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 137.561452][ T5692] usb 3-1: device descriptor read/8, error -71 [ 137.587036][ T5739] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 137.687495][ T5739] DVB: Unable to find symbol dib7000p_attach() [ 137.695389][ T5739] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 137.802182][ T5739] rc_core: IR keymap rc-dib0700-rc5 not found [ 137.810753][ T5739] Registered IR keymap rc-empty [ 137.816767][ T5739] dvb-usb: could not initialize remote control. [ 137.828489][ T5739] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 137.849871][ T5692] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 137.902585][ T5692] usb 3-1: device descriptor read/8, error -71 [ 138.040180][ T5692] usb usb3-port1: unable to enumerate USB device [ 138.172697][ T6294] netlink: 12 bytes leftover after parsing attributes in process `syz.4.160'. [ 138.280702][ T5699] ch9200 5-1:2.31: probe with driver ch9200 failed with error -22 [ 138.307169][ T5699] usb 5-1: USB disconnect, device number 11 [ 138.810027][ T5699] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 138.950015][ T5699] usb 4-1: device descriptor read/64, error -71 [ 139.160668][ T5724] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 139.201878][ T5699] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 139.268348][ T6316] FAULT_INJECTION: forcing a failure. [ 139.268348][ T6316] name failslab, interval 1, probability 0, space 0, times 0 [ 139.292834][ T6316] CPU: 1 UID: 0 PID: 6316 Comm: syz.2.167 Tainted: G L syzkaller #0 PREEMPT(full) [ 139.292859][ T6316] Tainted: [L]=SOFTLOCKUP [ 139.292864][ T6316] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 139.292873][ T6316] Call Trace: [ 139.292879][ T6316] [ 139.292885][ T6316] dump_stack_lvl+0xe8/0x150 [ 139.292906][ T6316] should_fail_ex+0x412/0x560 [ 139.292930][ T6316] should_failslab+0xa8/0x100 [ 139.292955][ T6316] __kmalloc_cache_noprof+0x88/0x660 [ 139.292977][ T6316] ? nfnetlink_rcv+0xfdf/0x27b0 [ 139.292998][ T6316] nfnetlink_rcv+0xfdf/0x27b0 [ 139.293039][ T6316] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 139.293068][ T6316] ? ref_tracker_free+0x693/0x840 [ 139.293111][ T6316] ? __netlink_deliver_tap+0x807/0x850 [ 139.293137][ T6316] ? netlink_deliver_tap+0x2e/0x1b0 [ 139.293154][ T6316] ? netlink_deliver_tap+0x2e/0x1b0 [ 139.293176][ T6316] netlink_unicast+0x75c/0x8e0 [ 139.293200][ T6316] netlink_sendmsg+0x813/0xb40 [ 139.293225][ T6316] ? __pfx_netlink_sendmsg+0x10/0x10 [ 139.293246][ T6316] ? aa_sock_msg_perm+0xf1/0x1b0 [ 139.293266][ T6316] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 139.293288][ T6316] ____sys_sendmsg+0x972/0x9f0 [ 139.293308][ T6316] ? __might_fault+0xaf/0x130 [ 139.293334][ T6316] ? __pfx_____sys_sendmsg+0x10/0x10 [ 139.293366][ T6316] ? import_iovec+0x73/0xa0 [ 139.293403][ T6316] ___sys_sendmsg+0x2a5/0x360 [ 139.293420][ T6316] ? __lock_acquire+0x6b5/0x2cf0 [ 139.293439][ T6316] ? __pfx____sys_sendmsg+0x10/0x10 [ 139.293481][ T6316] ? __fget_files+0x2a/0x420 [ 139.293497][ T6316] ? __fget_files+0x3a0/0x420 [ 139.293521][ T6316] __x64_sys_sendmsg+0x1bd/0x2a0 [ 139.293541][ T6316] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 139.293566][ T6316] ? __pfx_ksys_write+0x10/0x10 [ 139.293593][ T6316] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.293608][ T6316] do_syscall_64+0x15f/0xf80 [ 139.293625][ T6316] ? trace_irq_disable+0x3b/0x140 [ 139.293646][ T6316] ? clear_bhb_loop+0x40/0x90 [ 139.293663][ T6316] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.293677][ T6316] RIP: 0033:0x7f875659cdd9 [ 139.293690][ T6316] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 139.293702][ T6316] RSP: 002b:00007f87573cc028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 139.293717][ T6316] RAX: ffffffffffffffda RBX: 00007f8756815fa0 RCX: 00007f875659cdd9 [ 139.293728][ T6316] RDX: 0000000000000000 RSI: 0000200000000380 RDI: 0000000000000003 [ 139.293737][ T6316] RBP: 00007f87573cc090 R08: 0000000000000000 R09: 0000000000000000 [ 139.293745][ T6316] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 139.293753][ T6316] R13: 00007f8756816038 R14: 00007f8756815fa0 R15: 00007f875693fa48 [ 139.293776][ T6316] [ 139.714439][ T5724] usb 2-1: device descriptor read/64, error -71 [ 139.720879][ T5699] usb 4-1: device descriptor read/64, error -71 [ 139.831778][ T5699] usb usb4-port1: attempt power cycle [ 139.970091][ T5724] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 140.121415][ T5724] usb 2-1: device descriptor read/64, error -71 [ 140.149257][ T5739] usb 1-1: USB disconnect, device number 10 [ 140.180518][ T5699] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 140.200673][ T5699] usb 4-1: device descriptor read/8, error -71 [ 140.235834][ T5724] usb usb2-port1: attempt power cycle [ 140.268963][ T5739] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 140.445813][ T5699] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 140.456612][ T808] usb 3-1: new full-speed USB device number 12 using dummy_hcd [ 140.480676][ T5699] usb 4-1: device descriptor read/8, error -71 [ 140.600252][ T5699] usb usb4-port1: unable to enumerate USB device [ 140.621700][ T808] usb 3-1: config 14 has an invalid interface number: 128 but max is 0 [ 140.642688][ T808] usb 3-1: config 14 has no interface number 0 [ 140.649949][ T5724] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 140.671761][ T808] usb 3-1: New USB device found, idVendor=1de1, idProduct=c102, bcdDevice=fb.9d [ 140.685351][ T5724] usb 2-1: device descriptor read/8, error -71 [ 140.709956][ T808] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.729311][ T808] usb 3-1: Product: syz [ 140.734023][ T808] usb 3-1: Manufacturer: syz [ 140.738755][ T808] usb 3-1: SerialNumber: syz [ 140.940253][ T5724] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 140.993135][ T5724] usb 2-1: device descriptor read/8, error -71 [ 141.016596][ T6322] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 141.042788][ T6322] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 141.110243][ T6322] netlink: 'syz.2.170': attribute type 4 has an invalid length. [ 141.131402][ T5724] usb usb2-port1: unable to enumerate USB device [ 141.155544][ T808] usb-storage 3-1:14.128: USB Mass Storage device detected [ 141.192945][ T808] usb-storage 3-1:14.128: device ignored [ 141.272055][ T808] usb 3-1: USB disconnect, device number 12 [ 141.459024][ T6338] Invalid logical block size (253) [ 142.120808][ T808] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 142.188923][ T6354] netlink: 'syz.0.180': attribute type 1 has an invalid length. [ 142.291118][ T808] usb 3-1: device descriptor read/64, error -71 [ 142.549880][ T808] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 142.699913][ T808] usb 3-1: device descriptor read/64, error -71 [ 142.810684][ T808] usb usb3-port1: attempt power cycle [ 143.150440][ T808] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 143.190799][ T808] usb 3-1: device descriptor read/8, error -71 [ 143.450889][ T808] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 143.468270][ T6381] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 143.500603][ T808] usb 3-1: device descriptor read/8, error -71 [ 143.605220][ T6381] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 143.670567][ T808] usb usb3-port1: unable to enumerate USB device [ 143.715017][ T6381] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 145.147996][ T6421] capability: warning: `syz.0.200' uses deprecated v2 capabilities in a way that may be insecure [ 145.430953][ T6426] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 145.471099][ T6426] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 145.511640][ T6426] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 145.566687][ T6432] trusted_key: encrypted_key: insufficient parameters specified [ 145.719894][ T1568] usb 2-1: new low-speed USB device number 13 using dummy_hcd [ 145.900883][ T1568] usb 2-1: Invalid ep0 maxpacket: 9 [ 146.032941][ T30] audit: type=1326 audit(1777593328.326:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6433 comm="syz.2.204" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f875659cdd9 code=0x7ff00000 [ 146.081848][ T1568] usb 2-1: new low-speed USB device number 14 using dummy_hcd [ 146.165843][ T30] audit: type=1326 audit(1777593328.326:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6433 comm="syz.2.204" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f875659cdd9 code=0x7ff00000 [ 146.281046][ T1568] usb 2-1: Invalid ep0 maxpacket: 9 [ 146.296692][ T1568] usb usb2-port1: attempt power cycle [ 146.308894][ T30] audit: type=1326 audit(1777593328.326:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6433 comm="syz.2.204" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f875659cdd9 code=0x7ff00000 [ 146.399873][ T807] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 146.446624][ T30] audit: type=1326 audit(1777593328.326:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6433 comm="syz.2.204" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f875659cdd9 code=0x7ff00000 [ 146.524045][ T30] audit: type=1326 audit(1777593328.326:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6433 comm="syz.2.204" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f875659cdd9 code=0x7ff00000 [ 146.600166][ T807] usb 1-1: Using ep0 maxpacket: 8 [ 146.610863][ T30] audit: type=1326 audit(1777593328.326:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6433 comm="syz.2.204" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f875659cdd9 code=0x7ff00000 [ 146.651559][ T807] usb 1-1: config index 0 descriptor too short (expected 6427, got 27) [ 146.663996][ T807] usb 1-1: config 0 has an invalid interface number: 21 but max is 0 [ 146.700043][ T1568] usb 2-1: new low-speed USB device number 15 using dummy_hcd [ 146.715454][ T807] usb 1-1: config 0 has no interface number 0 [ 146.743799][ T30] audit: type=1326 audit(1777593328.326:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6433 comm="syz.2.204" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f875659cdd9 code=0x7ff00000 [ 146.770182][ T807] usb 1-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 146.786879][ T1568] usb 2-1: Invalid ep0 maxpacket: 9 [ 146.802200][ T807] usb 1-1: config 0 interface 21 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 146.824087][ T30] audit: type=1326 audit(1777593328.326:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6433 comm="syz.2.204" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f875659cdd9 code=0x7ff00000 [ 146.860216][ T807] usb 1-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 146.872777][ T30] audit: type=1326 audit(1777593328.326:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6433 comm="syz.2.204" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f875659cdd9 code=0x7ff00000 [ 146.901471][ T807] usb 1-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=c3.d4 [ 146.924572][ T807] usb 1-1: New USB device strings: Mfr=78, Product=1, SerialNumber=0 [ 146.932782][ T1568] usb 2-1: new low-speed USB device number 16 using dummy_hcd [ 146.965876][ T807] usb 1-1: Product: syz [ 146.977302][ T30] audit: type=1326 audit(1777593328.326:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6433 comm="syz.2.204" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f875659cdd9 code=0x7ff00000 [ 147.001948][ T807] usb 1-1: Manufacturer: syz [ 147.010546][ T1568] usb 2-1: Invalid ep0 maxpacket: 9 [ 147.016648][ T807] usb 1-1: config 0 descriptor?? [ 147.025355][ T1568] usb usb2-port1: unable to enumerate USB device [ 147.033834][ T6439] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 147.100739][ T5630] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 147.251043][ T807] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.21/input/input11 [ 147.281642][ T5630] usb 5-1: Using ep0 maxpacket: 8 [ 147.318821][ T5630] usb 5-1: config 179 has an invalid descriptor of length 0, skipping remainder of the config [ 147.356486][ T5630] usb 5-1: config 179 has 0 interfaces, different from the descriptor's value: 1 [ 147.399093][ T5630] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 147.444506][ T5630] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.459830][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 147.660866][ T5724] usb 1-1: USB disconnect, device number 11 [ 147.660863][ C0] keyspan_remote 1-1:0.21: keyspan_irq_recv - usb_submit_urb failed with result: -19 [ 147.760690][ T5630] usb 5-1: USB disconnect, device number 12 [ 147.799428][ T6456] fuse: Bad value for 'fd' [ 147.825038][ T6456] ======================================================= [ 147.825038][ T6456] WARNING: The mand mount option has been deprecated and [ 147.825038][ T6456] and is ignored by this kernel. Remove the mand [ 147.825038][ T6456] option from the mount to silence this warning. [ 147.825038][ T6456] ======================================================= [ 148.664983][ T6467] netdevsim netdevsim0: Direct firmware load for ./file0 failed with error -2 [ 148.713417][ T6467] netdevsim netdevsim0: Falling back to sysfs fallback for: ./file0 [ 148.890279][ T807] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 149.050096][ T807] usb 5-1: device descriptor read/64, error -71 [ 149.309917][ T807] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 149.460300][ T807] usb 5-1: device descriptor read/64, error -71 [ 149.585179][ T807] usb usb5-port1: attempt power cycle [ 149.999977][ T807] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 150.042303][ T807] usb 5-1: device descriptor read/8, error -71 [ 150.140041][ T5630] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 150.302550][ T807] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 150.323557][ T5630] usb 1-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 150.347095][ T5630] usb 1-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 150.362211][ T807] usb 5-1: device descriptor read/8, error -71 [ 150.374707][ T5630] usb 1-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 150.400920][ T5630] usb 1-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 150.425405][ T5630] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.448160][ T6485] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 150.471756][ T807] usb usb5-port1: unable to enumerate USB device [ 150.784283][ T6494] fuse: Bad value for 'fd' [ 151.004553][ T6498] FAULT_INJECTION: forcing a failure. [ 151.004553][ T6498] name failslab, interval 1, probability 0, space 0, times 0 [ 151.017716][ T6498] CPU: 0 UID: 0 PID: 6498 Comm: syz.3.224 Tainted: G L syzkaller #0 PREEMPT(full) [ 151.017754][ T6498] Tainted: [L]=SOFTLOCKUP [ 151.017760][ T6498] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 151.017768][ T6498] Call Trace: [ 151.017774][ T6498] [ 151.017781][ T6498] dump_stack_lvl+0xe8/0x150 [ 151.017803][ T6498] should_fail_ex+0x412/0x560 [ 151.017827][ T6498] should_failslab+0xa8/0x100 [ 151.017851][ T6498] ? radix_tree_node_alloc+0x7e/0x3a0 [ 151.017867][ T6498] kmem_cache_alloc_noprof+0x87/0x650 [ 151.017887][ T6498] ? radix_tree_node_alloc+0x7e/0x3a0 [ 151.017903][ T6498] ? kmem_cache_alloc_noprof+0x15a/0x650 [ 151.017926][ T6498] radix_tree_node_alloc+0x7e/0x3a0 [ 151.017946][ T6498] idr_get_free+0x2b3/0xa70 [ 151.017971][ T6498] idr_alloc_u32+0x18d/0x320 [ 151.018004][ T6498] ? __pfx_idr_alloc_u32+0x10/0x10 [ 151.018023][ T6498] ? tcf_exts_init_ex+0x414/0x7c0 [ 151.018041][ T6498] ? __kmalloc_cache_noprof+0x31c/0x660 [ 151.018068][ T6498] basic_change+0x3de/0xfc0 [ 151.018085][ T6498] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 151.018112][ T6498] ? __pfx_basic_change+0x10/0x10 [ 151.018142][ T6498] tc_new_tfilter+0xff8/0x1780 [ 151.018182][ T6498] ? __pfx_tc_new_tfilter+0x10/0x10 [ 151.018214][ T6498] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 151.018242][ T6498] ? __pfx_tc_new_tfilter+0x10/0x10 [ 151.018264][ T6498] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 151.018284][ T6498] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 151.018301][ T6498] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 151.018316][ T6498] ? ref_tracker_free+0x693/0x840 [ 151.018339][ T6498] ? __pfx_ref_tracker_free+0x10/0x10 [ 151.018366][ T6498] netlink_rcv_skb+0x232/0x4b0 [ 151.018386][ T6498] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 151.018404][ T6498] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 151.018421][ T6498] ? lockdep_hardirqs_on+0x7a/0x110 [ 151.018455][ T6498] netlink_unicast+0x75c/0x8e0 [ 151.018480][ T6498] netlink_sendmsg+0x813/0xb40 [ 151.018505][ T6498] ? __pfx_netlink_sendmsg+0x10/0x10 [ 151.018527][ T6498] ? aa_sock_msg_perm+0xf1/0x1b0 [ 151.018547][ T6498] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 151.018571][ T6498] ____sys_sendmsg+0x972/0x9f0 [ 151.018591][ T6498] ? __might_fault+0xaf/0x130 [ 151.018614][ T6498] ? __pfx_____sys_sendmsg+0x10/0x10 [ 151.018640][ T6498] ? import_iovec+0x73/0xa0 [ 151.018664][ T6498] ___sys_sendmsg+0x2a5/0x360 [ 151.018683][ T6498] ? __lock_acquire+0x6b5/0x2cf0 [ 151.018702][ T6498] ? __pfx____sys_sendmsg+0x10/0x10 [ 151.018780][ T6498] ? __fget_files+0x2a/0x420 [ 151.018806][ T6498] ? __fget_files+0x3a0/0x420 [ 151.018843][ T6498] __x64_sys_sendmsg+0x1bd/0x2a0 [ 151.018865][ T6498] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 151.018892][ T6498] ? __pfx_ksys_write+0x10/0x10 [ 151.018920][ T6498] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 151.018936][ T6498] do_syscall_64+0x15f/0xf80 [ 151.018954][ T6498] ? trace_irq_disable+0x3b/0x140 [ 151.018977][ T6498] ? clear_bhb_loop+0x40/0x90 [ 151.019000][ T6498] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 151.019015][ T6498] RIP: 0033:0x7f6638f9cdd9 [ 151.019029][ T6498] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 151.019041][ T6498] RSP: 002b:00007f6639e55028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 151.019058][ T6498] RAX: ffffffffffffffda RBX: 00007f6639215fa0 RCX: 00007f6638f9cdd9 [ 151.019069][ T6498] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000004 [ 151.019078][ T6498] RBP: 00007f6639e55090 R08: 0000000000000000 R09: 0000000000000000 [ 151.019087][ T6498] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 151.019095][ T6498] R13: 00007f6639216038 R14: 00007f6639215fa0 R15: 00007f663933fa48 [ 151.019118][ T6498] [ 151.470814][ T808] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 151.615030][ T6485] syzkaller0: entered promiscuous mode [ 151.650357][ T808] usb 3-1: Using ep0 maxpacket: 8 [ 151.655594][ T6485] syzkaller0: entered allmulticast mode [ 151.685771][ T808] usb 3-1: config 179 has an invalid descriptor of length 0, skipping remainder of the config [ 151.742518][ T808] usb 3-1: config 179 has 0 interfaces, different from the descriptor's value: 1 [ 151.771950][ T5630] aiptek 1-1:17.0: Aiptek using 400 ms programming speed [ 151.780981][ T5630] input: Aiptek as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:17.0/input/input12 [ 151.821347][ T808] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 151.841822][ T6505] kAFS: unable to lookup cell 'ÿ' [ 151.858914][ T5630] usb 1-1: USB disconnect, device number 12 [ 151.865093][ C0] aiptek 1-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 151.880366][ T808] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.922716][ T6509] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 152.168934][ T1568] usb 3-1: USB disconnect, device number 17 [ 152.895924][ T6522] netlink: 56 bytes leftover after parsing attributes in process `syz.2.230'. [ 152.904922][ T1568] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 153.090252][ T1568] usb 4-1: Using ep0 maxpacket: 32 [ 153.106358][ T1568] usb 4-1: config 0 has an invalid interface number: 89 but max is 0 [ 153.126391][ T1568] usb 4-1: config 0 has no interface number 0 [ 153.155161][ T1568] usb 4-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 153.185988][ T1568] usb 4-1: config 0 interface 89 has no altsetting 0 [ 153.210300][ T1568] usb 4-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 153.223530][ T6528] fuse: Bad value for 'fd' [ 153.232048][ T1568] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.253649][ T1568] usb 4-1: Product: syz [ 153.268046][ T1568] usb 4-1: Manufacturer: syz [ 153.293720][ T1568] usb 4-1: SerialNumber: syz [ 153.324312][ T1568] usb 4-1: config 0 descriptor?? [ 153.360130][ T1568] em28xx 4-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 153.405502][ T1568] em28xx 4-1:0.89: Video interface 89 found: [ 153.809914][ T808] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 153.955862][ T6516] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 153.974946][ T6516] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 153.982894][ T808] usb 5-1: device descriptor read/64, error -71 [ 154.013154][ T1568] em28xx 4-1:0.89: unknown em28xx chip ID (0) [ 154.239884][ T808] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 154.390009][ T808] usb 5-1: device descriptor read/64, error -71 [ 154.533439][ T808] usb usb5-port1: attempt power cycle [ 154.651474][ T6516] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 154.671905][ T6516] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 154.703979][ T1568] em28xx 4-1:0.89: failed to get i2c transfer status from bridge register (error=-5) [ 154.734354][ T1568] em28xx 4-1:0.89: board has no eeprom [ 154.809875][ T1568] em28xx 4-1:0.89: Identified as Terratec Grabby (card=67) [ 154.829670][ T1568] em28xx 4-1:0.89: analog set to bulk mode. [ 154.843864][ T807] em28xx 4-1:0.89: Registering V4L2 extension [ 154.887569][ T1568] usb 4-1: USB disconnect, device number 12 [ 154.909883][ T808] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 154.933424][ T1568] em28xx 4-1:0.89: Disconnecting em28xx [ 154.962655][ T808] usb 5-1: device descriptor read/8, error -71 [ 154.984558][ T807] em28xx 4-1:0.89: Config register raw data: 0xffffffed [ 154.992620][ T807] em28xx 4-1:0.89: AC97 chip type couldn't be determined [ 155.009847][ T807] em28xx 4-1:0.89: No AC97 audio processor [ 155.039666][ T807] usb 4-1: Decoder not found [ 155.049839][ T807] em28xx 4-1:0.89: failed to create media graph [ 155.065212][ T807] em28xx 4-1:0.89: V4L2 device video103 deregistered [ 155.109536][ T807] em28xx 4-1:0.89: Registering snapshot button... [ 155.144548][ T807] input: em28xx snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.89/input/input13 [ 155.180197][ T807] em28xx 4-1:0.89: Remote control support is not available for this card. [ 155.200167][ T1568] em28xx 4-1:0.89: Closing input extension [ 155.220137][ T808] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 155.221075][ T1568] em28xx 4-1:0.89: Deregistering snapshot button [ 155.261581][ T808] usb 5-1: device descriptor read/8, error -71 [ 155.380265][ T808] usb usb5-port1: unable to enumerate USB device [ 155.927082][ T1568] em28xx 4-1:0.89: Freeing device [ 156.035401][ T6555] loop6: detected capacity change from 0 to 2640 [ 156.067026][ T6555] buffer_io_error: 11 callbacks suppressed [ 156.067045][ T6555] Buffer I/O error on dev loop6, logical block 0, async page read [ 156.132003][ T6555] Buffer I/O error on dev loop6, logical block 0, async page read [ 156.220238][ T6555] Buffer I/O error on dev loop6, logical block 0, async page read [ 156.251247][ T6555] Buffer I/O error on dev loop6, logical block 0, async page read [ 156.270011][ T6555] Buffer I/O error on dev loop6, logical block 0, async page read [ 156.292993][ T6555] Buffer I/O error on dev loop6, logical block 0, async page read [ 156.331029][ T6555] Buffer I/O error on dev loop6, logical block 0, async page read [ 156.360229][ T6555] Buffer I/O error on dev loop6, logical block 0, async page read [ 156.422703][ T6555] ldm_validate_partition_table(): Disk read failed. [ 156.464914][ T6555] Buffer I/O error on dev loop6, logical block 0, async page read [ 156.470122][ T1568] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 156.500499][ T6555] Buffer I/O error on dev loop6, logical block 0, async page read [ 156.518770][ T6555] Dev loop6: unable to read RDB block 0 [ 156.533163][ T6555] loop6: unable to read partition table [ 156.566284][ T6555] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 156.639271][ T1568] usb 1-1: Using ep0 maxpacket: 16 [ 156.677364][ T1568] usb 1-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.88 [ 156.709968][ T1568] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.733584][ T1568] usb 1-1: Product: syz [ 156.738008][ T1568] usb 1-1: Manufacturer: syz [ 156.748049][ T1568] usb 1-1: SerialNumber: syz [ 156.775274][ T1568] usb 1-1: config 0 descriptor?? [ 157.037754][ T1568] speedtch 1-1:0.0: speedtch_bind: data interface not found! [ 157.064406][ T1568] speedtch 1-1:0.0: usbatm_usb_probe: bind failed: -19! [ 157.269273][ T1568] usb 1-1: USB disconnect, device number 13 [ 158.053779][ T6577] netlink: 56 bytes leftover after parsing attributes in process `syz.1.243'. [ 158.460627][ T6582] Failed to get privilege flags for destination (handle=0x2:0x0) [ 158.568594][ T6584] netlink: 20 bytes leftover after parsing attributes in process `syz.0.247'. [ 158.600973][ T6584] netlink: 20 bytes leftover after parsing attributes in process `syz.0.247'. [ 159.300497][ T4946] Bluetooth: hci1: command 0x2016 tx timeout [ 159.422389][ T6602] netlink: 4 bytes leftover after parsing attributes in process `syz.1.253'. [ 159.671369][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807b17d400: rx timeout, send abort [ 160.009941][ T5630] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 160.171646][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807b17dc00: rx timeout, send abort [ 160.181206][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807b17d400: abort rx timeout. Force session deactivation [ 160.198667][ T5630] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 160.221923][ T5630] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 2 [ 160.267438][ T5630] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 160.295326][ T5630] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.312874][ T5630] usb 1-1: Product: syz [ 160.318102][ T5630] usb 1-1: Manufacturer: syz [ 160.326942][ T5630] usb 1-1: SerialNumber: syz [ 160.440171][ T6616] tipc: Started in network mode [ 160.446552][ T6616] tipc: Node identity 6265150a0b92, cluster identity 4711 [ 160.455790][ T6616] tipc: Enabled bearer , priority 0 [ 160.464490][ T6618] syzkaller0: entered promiscuous mode [ 160.474559][ T6618] syzkaller0: entered allmulticast mode [ 160.490355][ T6629] netlink: 44 bytes leftover after parsing attributes in process `syz.4.255'. [ 160.502401][ T6631] tipc: Resetting bearer [ 160.566759][ T6610] netlink: 48 bytes leftover after parsing attributes in process `syz.0.254'. [ 160.686945][ T6631] tipc: Resetting bearer [ 160.710245][ T6631] tipc: Disabling bearer [ 160.995342][ T6633] netlink: 4 bytes leftover after parsing attributes in process `syz.4.260'. [ 160.996531][ T6610] syzkaller0: entered promiscuous mode [ 161.028301][ T6610] syzkaller0: entered allmulticast mode [ 161.093938][ T6636] netlink: 8 bytes leftover after parsing attributes in process `syz.4.260'. [ 161.147816][ T6633] syz_tun: entered promiscuous mode [ 161.160546][ T5630] usb 1-1: USB disconnect, device number 14 [ 161.199521][ T6633] macvtap1: entered promiscuous mode [ 161.217342][ T6633] macvtap1: entered allmulticast mode [ 161.226024][ T6633] syz_tun: entered allmulticast mode [ 161.350422][ T9] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 161.380604][ T4946] Bluetooth: hci1: command 0x2016 tx timeout [ 161.519954][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 161.537956][ T9] usb 4-1: config 0 has an invalid interface number: 12 but max is 0 [ 161.560620][ T9] usb 4-1: config 0 has no interface number 0 [ 161.568021][ T9] usb 4-1: config 0 interface 12 has no altsetting 0 [ 161.581474][ T9] usb 4-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 161.591640][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.607996][ T9] usb 4-1: Product: syz [ 161.623892][ T9] usb 4-1: Manufacturer: syz [ 161.641039][ T9] usb 4-1: SerialNumber: syz [ 161.669151][ T9] usb 4-1: config 0 descriptor?? [ 162.140649][ T5724] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 162.344375][ T5724] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 162.375147][ T5724] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 162.418027][ T5724] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 162.448508][ T5724] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 162.477894][ T5724] usb 3-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 162.507381][ T5724] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.538418][ T5724] usb 3-1: config 0 descriptor?? [ 163.114611][ T5724] hdpvr 3-1:0.0: firmware version 0xd dated —jl;™S11´Ôø!ºvOp³ [ 163.114611][ T5724] 4(r¥ý [ 163.114611][ T5724] d×Å2}±dæ~ýýŠÙ­^r¤ [ 163.713893][ T9] f81534 4-1:0.12: f81534_set_register: reg: 1002 data: 3 failed: -32 [ 163.722513][ T9] f81534 4-1:0.12: f81534_find_config_idx: read failed: -32 [ 163.739591][ T9] f81534 4-1:0.12: f81534_calc_num_ports: find idx failed: -32 [ 163.753050][ T9] f81534 4-1:0.12: probe with driver f81534 failed with error -32 [ 163.863267][ T1568] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 164.027409][ T1568] usb 2-1: Using ep0 maxpacket: 8 [ 164.051168][ T1568] usb 2-1: config 0 has too many interfaces: 217, using maximum allowed: 32 [ 164.061737][ T1568] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 217 [ 164.073896][ T1568] usb 2-1: New USB device found, idVendor=041e, idProduct=401c, bcdDevice=1d.9c [ 164.087045][ T1568] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.096689][ T1568] usb 2-1: Product: syz [ 164.109149][ T1568] usb 2-1: Manufacturer: syz [ 164.114286][ T1568] usb 2-1: SerialNumber: syz [ 164.135461][ T1568] usb 2-1: config 0 descriptor?? [ 164.147933][ T1568] gspca_main: gspca_zc3xx-2.14.0 probing 041e:401c [ 164.355779][ T6663] openvswitch: netlink: Multiple metadata blocks provided [ 164.670150][ T1568] gspca_zc3xx: reg_w_i err -110 [ 164.851220][ T6652] syzkaller0: entered promiscuous mode [ 164.857115][ T6652] syzkaller0: entered allmulticast mode [ 165.148610][ T6668] fuse: Unknown parameter 'Droup_id' [ 165.157888][ T5724] hdpvr 3-1:0.0: device init failed [ 165.179516][ T5724] hdpvr 3-1:0.0: probe with driver hdpvr failed with error -12 [ 165.232090][ T5724] usb 3-1: USB disconnect, device number 18 [ 165.429896][ T1568] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 165.437624][ T1568] gspca_zc3xx 2-1:0.0: probe with driver gspca_zc3xx failed with error -110 [ 165.464495][ T1568] usb 2-1: USB disconnect, device number 17 [ 165.534810][ T6674] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 165.840947][ T1568] usb 4-1: USB disconnect, device number 13 [ 166.509906][ T1568] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 166.533952][ T6705] xt_TPROXY: Can be used only with -p tcp or -p udp [ 166.559133][ T6705] netlink: 'syz.0.279': attribute type 10 has an invalid length. [ 166.634945][ T6705] veth0_to_hsr: entered allmulticast mode [ 166.660304][ T1568] usb 4-1: Using ep0 maxpacket: 16 [ 166.673068][ T1568] usb 4-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 166.692239][ T1568] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.713606][ T6705] team0: Port device veth0_to_hsr added [ 166.727936][ T1568] usb 4-1: config 0 descriptor?? [ 166.761899][ T1568] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 167.090631][ T5630] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 167.252450][ T5630] usb 2-1: config 0 has no interfaces? [ 167.265401][ T5630] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 167.286030][ T5630] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.303312][ T5630] usb 2-1: config 0 descriptor?? [ 167.980065][ T5724] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 168.161408][ T5724] usb 1-1: Using ep0 maxpacket: 16 [ 168.185751][ T5724] usb 1-1: config 0 has an invalid interface number: 213 but max is 1 [ 168.207142][ T5724] usb 1-1: config 0 has no interface number 1 [ 168.220933][ T5724] usb 1-1: config 0 interface 0 has no altsetting 0 [ 168.240315][ T5724] usb 1-1: New USB device found, idVendor=413c, idProduct=81d2, bcdDevice=25.e8 [ 168.256140][ T5724] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.275026][ T5724] usb 1-1: Product: syz [ 168.286415][ T5724] usb 1-1: Manufacturer: syz [ 168.296055][ T5724] usb 1-1: SerialNumber: syz [ 168.319576][ T5724] usb 1-1: config 0 descriptor?? [ 168.356524][ T5724] usb 1-1: selecting invalid altsetting 0 [ 168.370275][ T5724] usb 1-1: Could not set interface, error -22 [ 168.407949][ T6726] netlink: 56 bytes leftover after parsing attributes in process `syz.4.286'. [ 168.983688][ T6695] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2988763953 (5977527906 ns) > initial count (1530137536 ns). Using initial count to start timer. [ 169.046704][ T6695] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 169.087661][ T6695] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 169.169899][ T1568] gspca_sonixj: i2c_w8 err -71 [ 169.189413][ T1568] sonixj 4-1:0.0: probe with driver sonixj failed with error -71 [ 169.242373][ T1568] usb 4-1: USB disconnect, device number 14 [ 169.417398][ T6733] netlink: 8 bytes leftover after parsing attributes in process `syz.4.288'. [ 169.866831][ T807] usb 2-1: USB disconnect, device number 18 [ 170.023116][ T6748] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 170.242270][ T6751] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 170.319880][ T807] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 170.485750][ T807] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 170.520727][ T807] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.544826][ T807] usb 2-1: Product: syz [ 170.558075][ T807] usb 2-1: Manufacturer: syz [ 170.575949][ T807] usb 2-1: SerialNumber: syz [ 170.604512][ T807] usb 2-1: config 0 descriptor?? [ 170.789450][ T6757] netlink: 56 bytes leftover after parsing attributes in process `syz.4.297'. [ 171.287597][ T6749] veth1_to_hsr: entered promiscuous mode [ 171.322010][ T6749] macsec1: entered promiscuous mode [ 171.360192][ T6749] macsec1: entered allmulticast mode [ 171.409860][ T6749] veth1_to_hsr: entered allmulticast mode [ 171.409886][ T5630] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 171.433186][ T5724] usb 1-1: USB disconnect, device number 15 [ 171.580678][ T807] usb 2-1: Firmware version (0.0) predates our first public release. [ 171.605105][ T807] usb 2-1: Please update to version 0.2 or newer [ 171.629882][ T5630] usb 5-1: Using ep0 maxpacket: 8 [ 171.652141][ T5630] usb 5-1: New USB device found, idVendor=0c45, idProduct=614a, bcdDevice=c4.6d [ 171.670057][ T5630] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.690145][ T5630] usb 5-1: Product: syz [ 171.780780][ T5630] usb 5-1: Manufacturer: syz [ 171.802629][ T5630] usb 5-1: SerialNumber: syz [ 171.865207][ T5630] usb 5-1: config 0 descriptor?? [ 171.944855][ T5630] gspca_main: sonixj-2.14.0 probing 0c45:614a [ 173.009187][ T5724] usb 2-1: USB disconnect, device number 19 [ 173.167987][ T6759] fuse: Bad value for 'fd' [ 173.187651][ T6795] netlink: 56 bytes leftover after parsing attributes in process `syz.1.308'. [ 173.404665][ T6797] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 173.450929][ T5630] gspca_sonixj: reg_w1 err -110 [ 173.458422][ T6797] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 173.478970][ T5630] sonixj 5-1:0.0: probe with driver sonixj failed with error -110 [ 173.851237][ T6805] syz_tun: entered allmulticast mode [ 173.963533][ T6804] syz_tun: left allmulticast mode [ 174.322880][ T6816] netlink: 4 bytes leftover after parsing attributes in process `syz.0.314'. [ 174.384795][ T6818] binder: 6817:6818 ioctl c018620c 200000000240 returned -22 [ 174.530154][ T5721] usb 4-1: new full-speed USB device number 15 using dummy_hcd [ 174.593869][ T807] usb 5-1: USB disconnect, device number 21 [ 174.690295][ T5721] usb 4-1: device descriptor read/64, error -71 [ 174.849931][ T5724] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 174.875658][ T6826] netlink: 56 bytes leftover after parsing attributes in process `syz.4.319'. [ 174.949883][ T5721] usb 4-1: new full-speed USB device number 16 using dummy_hcd [ 175.025252][ T5724] usb 2-1: Using ep0 maxpacket: 32 [ 175.063994][ T5724] usb 2-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 175.083241][ T5724] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.095644][ T5721] usb 4-1: device descriptor read/64, error -71 [ 175.142358][ T5724] usb 2-1: config 0 descriptor?? [ 175.183484][ T5724] as10x_usb: device has been detected [ 175.197804][ T5724] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 175.212012][ T5721] usb usb4-port1: attempt power cycle [ 175.242103][ T5724] usb 2-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 175.432984][ T5724] as10x_usb: error during firmware upload part1 [ 175.451751][ T5724] Registered device nBox DVB-T Dongle [ 175.579869][ T5721] usb 4-1: new full-speed USB device number 17 using dummy_hcd [ 175.631845][ T5721] usb 4-1: device descriptor read/8, error -71 [ 175.858159][ T6821] CUSE: info not properly terminated [ 175.879917][ T5721] usb 4-1: new full-speed USB device number 18 using dummy_hcd [ 175.920630][ T5721] usb 4-1: device descriptor read/8, error -71 [ 176.042631][ T5721] usb usb4-port1: unable to enumerate USB device [ 176.168064][ T5721] usb 2-1: USB disconnect, device number 20 [ 176.293277][ T5721] Unregistered device nBox DVB-T Dongle [ 176.306903][ T5721] as10x_usb: device has been disconnected [ 176.979343][ T6851] netlink: 76 bytes leftover after parsing attributes in process `syz.1.326'. [ 177.547694][ T6860] netlink: 56 bytes leftover after parsing attributes in process `syz.1.330'. [ 177.873006][ T6870] syz.4.331 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 178.045043][ T6870] netlink: 12 bytes leftover after parsing attributes in process `syz.4.331'. [ 178.067419][ T5630] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 178.247041][ T5630] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 178.311068][ T5630] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.344970][ T5630] usb 2-1: Product: syz [ 178.369969][ T5630] usb 2-1: Manufacturer: syz [ 178.389993][ T5630] usb 2-1: SerialNumber: syz [ 178.857273][ T6869] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 178.872050][ T5630] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 178.899525][ T6869] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 178.929950][ T5630] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 179.614751][ T6889] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 179.642285][ T6889] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 179.813684][ T6889] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 179.851635][ T6889] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 179.889036][ T6889] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 179.905310][ T6889] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 179.919513][ T5630] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000000. ret = -EPROTO [ 179.949460][ T5630] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 179.966863][ T6889] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 179.978787][ T6889] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 179.989492][ T5630] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 180.001119][ T807] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 180.014586][ T6889] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 180.030987][ T5630] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -71 [ 180.047687][ T6889] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 180.084753][ T5630] usb 2-1: USB disconnect, device number 21 [ 180.190443][ T807] usb 1-1: Using ep0 maxpacket: 32 [ 180.213490][ T807] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 180.239733][ T807] usb 1-1: config 0 has no interface number 0 [ 180.251974][ T807] usb 1-1: config 0 interface 184 has no altsetting 0 [ 180.278239][ T807] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 180.289455][ T807] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.298344][ T807] usb 1-1: Product: syz [ 180.305223][ T807] usb 1-1: Manufacturer: syz [ 180.310543][ T807] usb 1-1: SerialNumber: syz [ 180.350344][ T807] usb 1-1: config 0 descriptor?? [ 180.892838][ T6915] netlink: 56 bytes leftover after parsing attributes in process `syz.3.342'. [ 181.416080][ T807] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -71 [ 181.452173][ T807] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 181.477234][ T807] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 181.742421][ T807] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 181.770972][ T807] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 181.838409][ T807] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 181.881605][ T807] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -71 [ 181.963527][ T807] usb 1-1: USB disconnect, device number 16 [ 181.970145][ T5699] usb 3-1: new low-speed USB device number 19 using dummy_hcd [ 182.184703][ T5699] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 182.218782][ T5699] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 182.260703][ T5699] usb 3-1: New USB device found, idVendor=0c70, idProduct=f0b6, bcdDevice= 0.00 [ 182.332802][ T5699] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.387691][ T5699] usb 3-1: config 0 descriptor?? [ 182.964131][ T5699] hid (null): usage index exceeded [ 182.987873][ T5699] aquacomputer_d5next 0003:0C70:F0B6.0001: ignoring exceeding usage max [ 183.012302][ T5699] aquacomputer_d5next 0003:0C70:F0B6.0001: ignoring exceeding usage max [ 183.039298][ T5699] aquacomputer_d5next 0003:0C70:F0B6.0001: usage index exceeded [ 183.058931][ T5699] aquacomputer_d5next 0003:0C70:F0B6.0001: item 0 1 2 2 parsing failed [ 183.095456][ T5699] aquacomputer_d5next 0003:0C70:F0B6.0001: probe with driver aquacomputer_d5next failed with error -22 [ 183.117354][ T6929] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 183.162462][ T6929] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 183.386309][ T807] usb 3-1: USB disconnect, device number 19 [ 184.151264][ T6977] netlink: 'syz.2.350': attribute type 10 has an invalid length. [ 184.247418][ T6977] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 184.561226][ T6977] 8021q: adding VLAN 0 to HW filter on device bond1 [ 185.110742][ T6998] netlink: 56 bytes leftover after parsing attributes in process `syz.0.353'. [ 185.524418][ T7004] netlink: 5268 bytes leftover after parsing attributes in process `syz.0.355'. [ 186.264471][ T5724] IPVS: starting estimator thread 0... [ 186.380934][ T7031] IPVS: using max 38 ests per chain, 91200 per kthread [ 186.389909][ T5699] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 186.579883][ T5699] usb 4-1: Using ep0 maxpacket: 32 [ 186.617481][ T5699] usb 4-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 186.638031][ T5699] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.655670][ T5699] usb 4-1: Product: syz [ 186.664521][ T5699] usb 4-1: Manufacturer: syz [ 186.671763][ T5699] usb 4-1: SerialNumber: syz [ 186.705961][ T5699] usb 4-1: config 0 descriptor?? [ 186.738545][ T5699] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 186.760823][ T5699] dvb-usb: bulk message failed: -22 (4/0) [ 186.791785][ T5699] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 186.840018][ T5699] dvb-usb: bulk message failed: -22 (5/0) [ 186.873074][ T5699] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 186.932904][ T7021] netlink: 4 bytes leftover after parsing attributes in process `syz.3.360'. [ 186.943228][ T5699] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 186.968976][ T7021] ttusb2: i2c wr len=58 too high [ 186.985437][ T5699] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 187.005624][ T5699] usb 4-1: media controller created [ 187.082176][ T5699] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 187.177444][ T5699] usb 4-1: selecting invalid altsetting 3 [ 187.205713][ T5699] ttusb2: set interface to alts=3 failed [ 187.372646][ T5699] DVB: Unable to find symbol tda10086_attach() [ 187.385035][ T5699] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 187.418249][ T5699] dvb-usb: bulk message failed: -22 (4/0) [ 187.439040][ T5699] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 187.492633][ T5699] dvb-usb: bulk message failed: -22 (5/0) [ 187.528640][ T5699] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 187.539039][ T5699] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 188.207246][ T5699] usb 4-1: USB disconnect, device number 19 [ 188.443766][ T30] kauditd_printk_skb: 57 callbacks suppressed [ 188.443783][ T30] audit: type=1400 audit(1777593370.756:85): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name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dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 188.716175][ T7066] netlink: 20 bytes leftover after parsing attributes in process `syz.4.364'. [ 188.839618][ T7068] netlink: 56 bytes leftover after parsing attributes in process `syz.0.365'. [ 189.835087][ T7093] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 189.989896][ T5699] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 190.173490][ T5699] usb 2-1: Using ep0 maxpacket: 32 [ 190.195624][ T5699] usb 2-1: config 2 has an invalid interface number: 88 but max is 0 [ 190.215110][ T5699] usb 2-1: config 2 has no interface number 0 [ 190.227364][ T5699] usb 2-1: config 2 interface 88 altsetting 7 bulk endpoint 0x6 has invalid maxpacket 256 [ 190.267651][ T5699] usb 2-1: config 2 interface 88 has no altsetting 0 [ 190.304080][ T5699] usb 2-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.1e [ 190.328373][ T5699] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.366589][ T5699] usb 2-1: Product: syz [ 190.374079][ T5699] usb 2-1: Manufacturer: syz [ 190.388595][ T5699] usb 2-1: SerialNumber: syz [ 190.414570][ T7095] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 190.648573][ T7095] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 191.080230][ T7109] syzkaller0: entered promiscuous mode [ 191.680316][ T5699] asix 2-1:2.88 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 191.714168][ T5699] asix 2-1:2.88: probe with driver asix failed with error -71 [ 191.765219][ T5699] usb 2-1: USB disconnect, device number 22 [ 191.984800][ T7120] netlink: 24 bytes leftover after parsing attributes in process `syz.0.378'. [ 192.007120][ T7123] netlink: 56 bytes leftover after parsing attributes in process `syz.4.379'. [ 192.156222][ T7120] xt_hashlimit: size too large, truncated to 1048576 [ 193.045688][ T7145] netlink: 40 bytes leftover after parsing attributes in process `syz.4.386'. [ 193.626751][ T807] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 193.790149][ T807] usb 5-1: Using ep0 maxpacket: 8 [ 193.815746][ T807] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 193.837194][ T807] usb 5-1: config 179 has no interface number 0 [ 193.866469][ T807] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 193.900833][ T807] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 193.942931][ T807] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 193.982884][ T807] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 194.028027][ T807] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 194.083219][ T807] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 194.116132][ T807] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 194.157070][ T7159] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 194.199431][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.208113][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.222491][ T807] xpad 5-1:179.65: probe with driver xpad failed with error -5 [ 194.413715][ T5724] usb 5-1: USB disconnect, device number 22 [ 194.780609][ T807] usb 1-1: new full-speed USB device number 17 using dummy_hcd [ 194.985479][ T807] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 195.046031][ T807] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 195.089203][ T807] usb 1-1: New USB device found, idVendor=1822, idProduct=3202, bcdDevice=13.4a [ 195.113598][ T807] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.161253][ T807] usb 1-1: Product: syz [ 195.168509][ T807] usb 1-1: Manufacturer: syz [ 195.178658][ T807] usb 1-1: SerialNumber: syz [ 195.188502][ T7184] FAULT_INJECTION: forcing a failure. [ 195.188502][ T7184] name failslab, interval 1, probability 0, space 0, times 0 [ 195.230751][ T807] usb 1-1: config 0 descriptor?? [ 195.257456][ T7184] CPU: 1 UID: 0 PID: 7184 Comm: syz.4.396 Tainted: G L syzkaller #0 PREEMPT(full) [ 195.257488][ T7184] Tainted: [L]=SOFTLOCKUP [ 195.257496][ T7184] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 195.257509][ T7184] Call Trace: [ 195.257518][ T7184] [ 195.257527][ T7184] dump_stack_lvl+0xe8/0x150 [ 195.257555][ T7184] should_fail_ex+0x412/0x560 [ 195.257589][ T7184] should_failslab+0xa8/0x100 [ 195.257624][ T7184] __kmalloc_cache_node_noprof+0x8a/0x6b0 [ 195.257654][ T7184] ? __pfx_css_rstat_updated+0x10/0x10 [ 195.257676][ T7184] ? __get_vm_area_node+0x13f/0x300 [ 195.257707][ T7184] __get_vm_area_node+0x13f/0x300 [ 195.257737][ T7184] ? mod_memcg_lruvec_state+0xe3/0x220 [ 195.257757][ T7184] __vmalloc_node_range_noprof+0x36a/0x1750 [ 195.257778][ T7184] ? copy_process+0x89b/0x4450 [ 195.257839][ T7184] ? __memcg_slab_post_alloc_hook+0x493/0xe80 [ 195.257874][ T7184] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 195.257907][ T7184] ? rcu_is_watching+0x15/0xb0 [ 195.257927][ T7184] ? memcpy_and_pad+0x48/0x80 [ 195.257946][ T7184] __vmalloc_node_noprof+0xc2/0x100 [ 195.257988][ T7184] ? copy_process+0x89b/0x4450 [ 195.258008][ T7184] ? copy_process+0x89b/0x4450 [ 195.258032][ T7184] dup_task_struct+0x298/0x840 [ 195.258062][ T7184] copy_process+0x89b/0x4450 [ 195.258099][ T7184] ? __pfx_copy_process+0x10/0x10 [ 195.258145][ T7184] ? mutex_init_lockdep+0xdf/0x110 [ 195.258176][ T7184] vhost_task_create+0x1f9/0x380 [ 195.258204][ T7184] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 195.258233][ T7184] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 195.258255][ T7184] ? __pfx_vhost_task_create+0x10/0x10 [ 195.258300][ T7184] ? __pfx_vhost_task_fn+0x10/0x10 [ 195.258334][ T7184] ? __lock_acquire+0x6b5/0x2cf0 [ 195.258359][ T7184] ? kasan_save_track+0x4f/0x80 [ 195.258386][ T7184] ? kasan_save_track+0x3e/0x80 [ 195.258405][ T7184] ? kasan_save_free_info+0x46/0x50 [ 195.258420][ T7184] ? __kasan_slab_free+0x5c/0x80 [ 195.258474][ T7184] ? kfree+0x1c5/0x640 [ 195.258501][ T7184] kvm_mmu_post_init_vm+0x147/0x2d0 [ 195.258540][ T7184] kvm_arch_vcpu_ioctl_run+0x106/0x20d0 [ 195.258570][ T7184] ? __mutex_trylock_common+0x158/0x260 [ 195.258590][ T7184] ? look_up_lock_class+0x57/0x110 [ 195.258630][ T7184] ? register_lock_class+0x31/0x2e0 [ 195.258652][ T7184] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 195.258686][ T7184] ? __lock_acquire+0x6b5/0x2cf0 [ 195.258712][ T7184] ? __mutex_lock+0x319/0x1550 [ 195.258735][ T7184] ? kasan_quarantine_put+0xbb/0x1f0 [ 195.258783][ T7184] ? do_raw_write_lock+0x11d/0x260 [ 195.258831][ T7184] kvm_vcpu_ioctl+0xa62/0xfd0 [ 195.258869][ T7184] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 195.258888][ T7184] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 195.258941][ T7184] ? __fget_files+0x2a/0x420 [ 195.258972][ T7184] ? __fget_files+0x2a/0x420 [ 195.258996][ T7184] ? __fget_files+0x3a0/0x420 [ 195.259020][ T7184] ? __fget_files+0x2a/0x420 [ 195.259048][ T7184] ? bpf_lsm_file_ioctl+0x9/0x20 [ 195.259081][ T7184] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 195.259112][ T7184] __se_sys_ioctl+0xfc/0x170 [ 195.259144][ T7184] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.259166][ T7184] do_syscall_64+0x15f/0xf80 [ 195.259194][ T7184] ? trace_irq_disable+0x3b/0x140 [ 195.259217][ T7184] ? clear_bhb_loop+0x40/0x90 [ 195.259235][ T7184] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.259268][ T7184] RIP: 0033:0x7f273c39cdd9 [ 195.259288][ T7184] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 195.259305][ T7184] RSP: 002b:00007f273d1f5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 195.259326][ T7184] RAX: ffffffffffffffda RBX: 00007f273c616090 RCX: 00007f273c39cdd9 [ 195.259345][ T7184] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 195.259354][ T7184] RBP: 00007f273d1f5090 R08: 0000000000000000 R09: 0000000000000000 [ 195.259363][ T7184] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 195.259371][ T7184] R13: 00007f273c616128 R14: 00007f273c616090 R15: 00007f273c73fa48 [ 195.259395][ T7184] [ 195.662980][ T7184] syz.4.396: vmalloc error: size 32768, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 195.678033][ T7184] CPU: 1 UID: 0 PID: 7184 Comm: syz.4.396 Tainted: G L syzkaller #0 PREEMPT(full) [ 195.678055][ T7184] Tainted: [L]=SOFTLOCKUP [ 195.678061][ T7184] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 195.678069][ T7184] Call Trace: [ 195.678075][ T7184] [ 195.678081][ T7184] dump_stack_lvl+0xe8/0x150 [ 195.678102][ T7184] warn_alloc+0x249/0x340 [ 195.678128][ T7184] ? __pfx_warn_alloc+0x10/0x10 [ 195.678151][ T7184] ? __get_vm_area_node+0x13f/0x300 [ 195.678173][ T7184] ? __get_vm_area_node+0x2b5/0x300 [ 195.678189][ T7184] ? mod_memcg_lruvec_state+0xe3/0x220 [ 195.678210][ T7184] __vmalloc_node_range_noprof+0x38f/0x1750 [ 195.678245][ T7184] ? __memcg_slab_post_alloc_hook+0x493/0xe80 [ 195.678269][ T7184] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 195.678291][ T7184] ? rcu_is_watching+0x15/0xb0 [ 195.678310][ T7184] ? memcpy_and_pad+0x48/0x80 [ 195.678328][ T7184] __vmalloc_node_noprof+0xc2/0x100 [ 195.678348][ T7184] ? copy_process+0x89b/0x4450 [ 195.678362][ T7184] ? copy_process+0x89b/0x4450 [ 195.678378][ T7184] dup_task_struct+0x298/0x840 [ 195.678402][ T7184] copy_process+0x89b/0x4450 [ 195.678439][ T7184] ? __pfx_copy_process+0x10/0x10 [ 195.678460][ T7184] ? mutex_init_lockdep+0xdf/0x110 [ 195.678481][ T7184] vhost_task_create+0x1f9/0x380 [ 195.678501][ T7184] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 195.678521][ T7184] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 195.678542][ T7184] ? __pfx_vhost_task_create+0x10/0x10 [ 195.678567][ T7184] ? __pfx_vhost_task_fn+0x10/0x10 [ 195.678590][ T7184] ? __lock_acquire+0x6b5/0x2cf0 [ 195.678608][ T7184] ? kasan_save_track+0x4f/0x80 [ 195.678626][ T7184] ? kasan_save_track+0x3e/0x80 [ 195.678643][ T7184] ? kasan_save_free_info+0x46/0x50 [ 195.678659][ T7184] ? __kasan_slab_free+0x5c/0x80 [ 195.678678][ T7184] ? kfree+0x1c5/0x640 [ 195.678697][ T7184] kvm_mmu_post_init_vm+0x147/0x2d0 [ 195.678721][ T7184] kvm_arch_vcpu_ioctl_run+0x106/0x20d0 [ 195.678749][ T7184] ? __mutex_trylock_common+0x158/0x260 [ 195.678769][ T7184] ? look_up_lock_class+0x57/0x110 [ 195.678788][ T7184] ? register_lock_class+0x31/0x2e0 [ 195.678803][ T7184] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 195.678827][ T7184] ? __lock_acquire+0x6b5/0x2cf0 [ 195.678844][ T7184] ? __mutex_lock+0x319/0x1550 [ 195.678867][ T7184] ? kasan_quarantine_put+0xbb/0x1f0 [ 195.678895][ T7184] ? do_raw_write_lock+0x11d/0x260 [ 195.678928][ T7184] kvm_vcpu_ioctl+0xa62/0xfd0 [ 195.678952][ T7184] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 195.678970][ T7184] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 195.679003][ T7184] ? __fget_files+0x2a/0x420 [ 195.679022][ T7184] ? __fget_files+0x2a/0x420 [ 195.679037][ T7184] ? __fget_files+0x3a0/0x420 [ 195.679053][ T7184] ? __fget_files+0x2a/0x420 [ 195.679076][ T7184] ? bpf_lsm_file_ioctl+0x9/0x20 [ 195.679098][ T7184] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 195.679118][ T7184] __se_sys_ioctl+0xfc/0x170 [ 195.679140][ T7184] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.679156][ T7184] do_syscall_64+0x15f/0xf80 [ 195.679173][ T7184] ? trace_irq_disable+0x3b/0x140 [ 195.679195][ T7184] ? clear_bhb_loop+0x40/0x90 [ 195.679213][ T7184] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.679227][ T7184] RIP: 0033:0x7f273c39cdd9 [ 195.679240][ T7184] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 195.679252][ T7184] RSP: 002b:00007f273d1f5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 195.679267][ T7184] RAX: ffffffffffffffda RBX: 00007f273c616090 RCX: 00007f273c39cdd9 [ 195.679277][ T7184] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 195.679286][ T7184] RBP: 00007f273d1f5090 R08: 0000000000000000 R09: 0000000000000000 [ 195.679294][ T7184] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 195.679302][ T7184] R13: 00007f273c616128 R14: 00007f273c616090 R15: 00007f273c73fa48 [ 195.679325][ T7184] [ 195.679381][ T7184] Mem-Info: [ 196.074496][ T7184] active_anon:23548 inactive_anon:0 isolated_anon:0 [ 196.074496][ T7184] active_file:13267 inactive_file:40518 isolated_file:0 [ 196.074496][ T7184] unevictable:768 dirty:292 writeback:0 [ 196.074496][ T7184] slab_reclaimable:10319 slab_unreclaimable:101537 [ 196.074496][ T7184] mapped:33504 shmem:17863 pagetables:1223 [ 196.074496][ T7184] sec_pagetables:0 bounce:0 [ 196.074496][ T7184] kernel_misc_reclaimable:0 [ 196.074496][ T7184] free:1294235 free_pcp:10771 free_cma:0 [ 196.150589][ T7184] Node 0 active_anon:94192kB inactive_anon:0kB active_file:53068kB inactive_file:161856kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:134016kB dirty:1160kB writeback:0kB shmem:69916kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:2048kB kernel_stack:12944kB pagetables:4736kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 196.223075][ T5630] usb 1-1: USB disconnect, device number 17 [ 196.293819][ T7184] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:216kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:8kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:156kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 196.377821][ T7184] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 196.488129][ T7184] lowmem_reserve[]: 0 2492 2493 2493 2493 [ 196.515223][ T7184] Node 0 DMA32 free:1206920kB boost:0kB min:34188kB low:42732kB high:51276kB reserved_highatomic:0KB free_highatomic:0KB active_anon:98588kB inactive_anon:0kB active_file:53068kB inactive_file:161856kB unevictable:1536kB writepending:1168kB zspages:0kB present:3129332kB managed:2552680kB mlocked:0kB bounce:0kB free_pcp:38092kB local_pcp:18152kB free_cma:0kB [ 196.569927][ T7184] lowmem_reserve[]: 0 0 0 0 0 [ 196.575816][ T7184] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:672kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:4kB free_cma:0kB [ 196.730216][ T7184] lowmem_reserve[]: 0 0 0 0 0 [ 196.742379][ T7184] Node 1 Normal free:3954780kB boost:0kB min:55704kB low:69628kB high:83552kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:216kB unevictable:1536kB writepending:8kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 196.877626][ T7184] lowmem_reserve[]: 0 0 0 0 0 [ 196.908331][ T7184] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 196.944904][ T7184] Node 0 DMA32: 2006*4kB (UME) 1546*8kB (UME) 658*16kB (UME) 131*32kB (UME) 33*64kB (UE) 21*128kB (UE) 13*256kB (U) 19*512kB (U) 9*1024kB (UM) 5*2048kB (UE) 277*4096kB (M) = 1207016kB [ 196.966131][ T7184] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 196.985831][ T7184] Node 1 Normal: 1*4kB (U) 7*8kB (UM) 10*16kB (UM) 8*32kB (UM) 8*64kB (UM) 3*128kB (UM) 3*256kB (UM) 2*512kB (M) 1*1024kB (M) 1*2048kB (U) 964*4096kB (M) = 3954780kB [ 197.006006][ T7184] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 197.020648][ T7184] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 197.032330][ T7184] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 197.051109][ T7184] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 197.090371][ T7184] 73361 total pagecache pages [ 197.130784][ T7184] 0 pages in swap cache [ 197.179172][ T7184] Free swap = 124996kB [ 197.200928][ T7184] Total swap = 124996kB [ 197.214528][ T7184] 2097051 pages RAM [ 197.229907][ T7184] 0 pages HighMem/MovableOnly [ 197.259456][ T7184] 427098 pages reserved [ 197.278797][ T7184] 0 pages cma reserved [ 197.449883][ T5630] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 197.469074][ T7183] input: syz1 as /devices/virtual/input/input15 [ 197.562523][ T59] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.610116][ T5630] usb 2-1: Using ep0 maxpacket: 16 [ 197.633860][ T5630] usb 2-1: unable to get BOS descriptor or descriptor too short [ 197.652811][ T5630] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7 [ 197.678777][ T5630] usb 2-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 197.700122][ T5630] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 197.722786][ T5630] usb 2-1: Product: syz [ 197.732627][ T5630] usb 2-1: Manufacturer: syz [ 197.742757][ T5630] usb 2-1: SerialNumber: syz [ 197.929533][ T7198] netlink: 56 bytes leftover after parsing attributes in process `syz.4.400'. [ 197.980770][ T5630] usb 2-1: Audio class v2/v3 interfaces need an interface association [ 198.012656][ T5630] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 198.204412][ T7190] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 198.229922][ T1568] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 198.249440][ T7190] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 198.450406][ T1568] usb 5-1: Using ep0 maxpacket: 16 [ 198.463785][ T1568] usb 5-1: config 0 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 198.478879][ T1568] usb 5-1: config 0 interface 0 has no altsetting 0 [ 198.488071][ T1568] usb 5-1: New USB device found, idVendor=046d, idProduct=c50c, bcdDevice= 0.00 [ 198.501248][ T1568] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.511854][ T5630] usb 2-1: 2:1 : can't get Cluster Descriptor [ 198.527171][ T1568] usb 5-1: config 0 descriptor?? [ 198.765704][ T5630] usb 2-1: USB disconnect, device number 23 [ 198.920311][ T5724] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 198.961287][ T1568] logitech 0003:046D:C50C.0002: unknown main item tag 0x0 [ 198.983017][ T1568] logitech 0003:046D:C50C.0002: unknown main item tag 0x0 [ 198.993145][ T1568] logitech 0003:046D:C50C.0002: unknown main item tag 0x0 [ 199.000443][ T1568] logitech 0003:046D:C50C.0002: unknown main item tag 0x0 [ 199.007707][ T1568] logitech 0003:046D:C50C.0002: unknown main item tag 0x0 [ 199.017604][ T1568] logitech 0003:046D:C50C.0002: unknown main item tag 0x0 [ 199.021707][ T5699] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 199.025466][ T1568] logitech 0003:046D:C50C.0002: unknown main item tag 0x0 [ 199.042652][ T1568] logitech 0003:046D:C50C.0002: unknown main item tag 0x0 [ 199.052574][ T1568] logitech 0003:046D:C50C.0002: unknown main item tag 0x0 [ 199.063154][ T1568] logitech 0003:046D:C50C.0002: unknown main item tag 0x0 [ 199.119870][ T5724] usb 3-1: Using ep0 maxpacket: 8 [ 199.136886][ T5724] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 199.162191][ T1568] logitech 0003:046D:C50C.0002: hidraw0: USB HID v0.00 Device [HID 046d:c50c] on usb-dummy_hcd.4-1/input0 [ 199.192822][ T5724] usb 3-1: config 179 has no interface number 0 [ 199.213204][ T5724] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 199.215329][ T1568] usb 5-1: USB disconnect, device number 23 [ 199.240956][ T5699] usb 4-1: Using ep0 maxpacket: 32 [ 199.272151][ T5699] usb 4-1: config 7 has an invalid interface number: 208 but max is 0 [ 199.282320][ T5724] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 199.307142][ T5699] usb 4-1: config 7 has no interface number 0 [ 199.324746][ T5724] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 199.336255][ T5699] usb 4-1: config 7 interface 208 altsetting 0 endpoint 0xD has an invalid bInterval 252, changing to 7 [ 199.366421][ T5724] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 199.407547][ T5699] usb 4-1: New USB device found, idVendor=05ac, idProduct=022a, bcdDevice=5f.ef [ 199.420763][ T5699] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 199.429316][ T5724] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 199.456617][ T5699] usb 4-1: Product: syz [ 199.471186][ T5699] usb 4-1: Manufacturer: syz [ 199.480505][ T5724] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 199.495817][ T5699] usb 4-1: SerialNumber: syz [ 199.512260][ T5724] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.520846][ T7218] netlink: 28 bytes leftover after parsing attributes in process `syz.0.407'. [ 199.557450][ T7212] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 199.568500][ T7216] fido_id[7216]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 199.597133][ T5724] xpad 3-1:179.65: probe with driver xpad failed with error -5 [ 199.713425][ T7220] FAULT_INJECTION: forcing a failure. [ 199.713425][ T7220] name failslab, interval 1, probability 0, space 0, times 0 [ 199.727344][ T7220] CPU: 1 UID: 0 PID: 7220 Comm: syz.1.408 Tainted: G L syzkaller #0 PREEMPT(full) [ 199.727376][ T7220] Tainted: [L]=SOFTLOCKUP [ 199.727383][ T7220] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 199.727395][ T7220] Call Trace: [ 199.727403][ T7220] [ 199.727411][ T7220] dump_stack_lvl+0xe8/0x150 [ 199.727442][ T7220] should_fail_ex+0x412/0x560 [ 199.727475][ T7220] should_failslab+0xa8/0x100 [ 199.727510][ T7220] __kmalloc_noprof+0xe8/0x760 [ 199.727541][ T7220] ? flow_action_cookie_create+0x26/0x90 [ 199.727571][ T7220] flow_action_cookie_create+0x26/0x90 [ 199.727605][ T7220] ? tc_setup_action+0x1b6/0xae0 [ 199.727628][ T7220] tc_setup_action+0x330/0xae0 [ 199.727660][ T7220] ? __kmalloc_noprof+0x37d/0x760 [ 199.727685][ T7220] ? __pfx___mutex_trylock_common+0x10/0x10 [ 199.727708][ T7220] ? flow_rule_alloc+0x2d/0x180 [ 199.727733][ T7220] ? __pfx_tc_setup_action+0x10/0x10 [ 199.727758][ T7220] ? flow_rule_alloc+0x136/0x180 [ 199.727783][ T7220] ? tc_setup_offload_action+0x89/0xe0 [ 199.727809][ T7220] mall_replace_hw_filter+0x2d7/0x920 [ 199.727840][ T7220] ? __pfx_mall_replace_hw_filter+0x10/0x10 [ 199.727862][ T7220] ? tcf_exts_validate_ex+0x246/0x540 [ 199.727885][ T7220] ? tcf_exts_validate_ex+0x267/0x540 [ 199.727911][ T7220] ? __pfx_tcf_exts_validate_ex+0x10/0x10 [ 199.727960][ T7220] mall_change+0x536/0x8a0 [ 199.727990][ T7220] ? __pfx_mall_change+0x10/0x10 [ 199.728024][ T7220] tc_new_tfilter+0xff8/0x1780 [ 199.728074][ T7220] ? __pfx_tc_new_tfilter+0x10/0x10 [ 199.728112][ T7220] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 199.728145][ T7220] ? __pfx_tc_new_tfilter+0x10/0x10 [ 199.728169][ T7220] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 199.728195][ T7220] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 199.728229][ T7220] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 199.728248][ T7220] ? ref_tracker_free+0x693/0x840 [ 199.728275][ T7220] ? __pfx_ref_tracker_free+0x10/0x10 [ 199.728297][ T7220] ? __asan_memcpy+0x40/0x70 [ 199.728318][ T7220] ? __skb_clone+0x63/0x7a0 [ 199.728348][ T7220] netlink_rcv_skb+0x232/0x4b0 [ 199.728373][ T7220] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 199.728394][ T7220] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 199.728424][ T7220] ? netlink_deliver_tap+0x2e/0x1b0 [ 199.728445][ T7220] ? netlink_deliver_tap+0x2e/0x1b0 [ 199.728472][ T7220] netlink_unicast+0x75c/0x8e0 [ 199.728503][ T7220] netlink_sendmsg+0x813/0xb40 [ 199.728534][ T7220] ? __pfx_netlink_sendmsg+0x10/0x10 [ 199.728559][ T7220] ? aa_sock_msg_perm+0xf1/0x1b0 [ 199.728583][ T7220] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 199.728611][ T7220] ____sys_sendmsg+0x972/0x9f0 [ 199.728634][ T7220] ? __might_fault+0xaf/0x130 [ 199.728662][ T7220] ? __pfx_____sys_sendmsg+0x10/0x10 [ 199.728692][ T7220] ? import_iovec+0x73/0xa0 [ 199.728721][ T7220] ___sys_sendmsg+0x2a5/0x360 [ 199.728746][ T7220] ? __lock_acquire+0x6b5/0x2cf0 [ 199.728773][ T7220] ? __pfx____sys_sendmsg+0x10/0x10 [ 199.728837][ T7220] ? __fget_files+0x2a/0x420 [ 199.728862][ T7220] ? __fget_files+0x3a0/0x420 [ 199.728899][ T7220] __x64_sys_sendmsg+0x1bd/0x2a0 [ 199.728930][ T7220] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 199.728968][ T7220] ? __pfx_ksys_write+0x10/0x10 [ 199.729008][ T7220] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 199.729031][ T7220] do_syscall_64+0x15f/0xf80 [ 199.729060][ T7220] ? clear_bhb_loop+0x40/0x90 [ 199.729086][ T7220] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 199.729107][ T7220] RIP: 0033:0x7fc7c8d9cdd9 [ 199.729128][ T7220] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 199.729146][ T7220] RSP: 002b:00007fc7c9bf6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 199.729168][ T7220] RAX: ffffffffffffffda RBX: 00007fc7c9015fa0 RCX: 00007fc7c8d9cdd9 [ 199.729184][ T7220] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 000000000000000b [ 199.729197][ T7220] RBP: 00007fc7c9bf6090 R08: 0000000000000000 R09: 0000000000000000 [ 199.729216][ T7220] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 199.729229][ T7220] R13: 00007fc7c9016038 R14: 00007fc7c9015fa0 R15: 00007fc7c913fa48 [ 199.729263][ T7220] [ 200.177650][ T808] usb 3-1: USB disconnect, device number 20 [ 201.090401][ T1568] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 201.243476][ T1568] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 201.273071][ T1568] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.316828][ T1568] usb 2-1: config 0 descriptor?? [ 201.352089][ T1568] cp210x 2-1:0.0: cp210x converter detected [ 201.639998][ T808] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 201.772417][ T1568] cp210x 2-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 201.789434][ T1568] cp210x 2-1:0.0: failed to get vendor val 0x370c size 73: -32 [ 201.814381][ T1568] cp210x 2-1:0.0: GPIO initialisation failed: -32 [ 201.847146][ T1568] usb 2-1: cp210x converter now attached to ttyUSB0 [ 201.876783][ T1568] usb 2-1: USB disconnect, device number 24 [ 201.933884][ T808] usb 1-1: unable to get BOS descriptor or descriptor too short [ 201.963041][ T1568] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 201.993270][ T808] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 202.004460][ T1568] cp210x 2-1:0.0: device disconnected [ 202.037863][ T808] usb 1-1: can't read configurations, error -71 [ 202.336614][ T5699] appletouch 4-1:7.208: Could not find int-in endpoint [ 202.358285][ T5699] appletouch 4-1:7.208: probe with driver appletouch failed with error -5 [ 202.370157][ T9] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 202.392862][ T5699] usbhid 4-1:7.208: couldn't find an input interrupt endpoint [ 202.442672][ T5699] usb 4-1: USB disconnect, device number 20 [ 202.540142][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 202.566224][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 202.612420][ T7266] netlink: 4 bytes leftover after parsing attributes in process `syz.3.421'. [ 202.633596][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 202.653472][ T30] audit: type=1400 audit(1777593384.956:86): apparmor="DENIED" operation="change_hat" class="file" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=7265 comm="syz.1.422" [ 202.688682][ T9] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 202.721516][ T9] usb 5-1: New USB device found, idVendor=045e, idProduct=9994, bcdDevice=fc.3c [ 202.762436][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.787250][ T9] usb 5-1: config 0 descriptor?? [ 202.901266][ T7271] loop9: detected capacity change from 0 to 2640 [ 202.945168][ T7214] buffer_io_error: 11 callbacks suppressed [ 202.945187][ T7214] Buffer I/O error on dev loop9, logical block 0, async page read [ 202.946003][ T7214] Buffer I/O error on dev loop9, logical block 0, async page read [ 202.948371][ T7214] Buffer I/O error on dev loop9, logical block 0, async page read [ 202.948819][ T7214] Buffer I/O error on dev loop9, logical block 0, async page read [ 202.949321][ T7214] Buffer I/O error on dev loop9, logical block 0, async page read [ 202.971913][ T7271] Buffer I/O error on dev loop9, logical block 0, async page read [ 202.973449][ T7271] Buffer I/O error on dev loop9, logical block 0, async page read [ 202.973570][ T7271] Buffer I/O error on dev loop9, logical block 0, async page read [ 202.973667][ T7271] Buffer I/O error on dev loop9, logical block 0, async page read [ 202.973771][ T7271] Buffer I/O error on dev loop9, logical block 0, async page read [ 202.979037][ T7266] team0: Port device team_slave_0 removed [ 203.002178][ T7271] ldm_validate_partition_table(): Disk read failed. [ 203.002560][ T7271] Dev loop9: unable to read RDB block 0 [ 203.018493][ T7271] loop9: unable to read partition table [ 203.018678][ T7271] loop_reread_partitions: partition scan of loop9 (3Ÿ ¾‚³˜) failed (rc=-5) [ 203.150882][ T808] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 203.199603][ T7260] program syz.4.420 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 203.236057][ T9] usbhid 5-1:0.0: can't add hid device: -71 [ 203.236173][ T9] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 203.240713][ T9] usb 5-1: USB disconnect, device number 24 [ 203.305933][ T7278] netlink: 44 bytes leftover after parsing attributes in process `syz.2.425'. [ 203.305960][ T7278] netlink: 44 bytes leftover after parsing attributes in process `syz.2.425'. [ 203.305986][ T7278] netlink: 5 bytes leftover after parsing attributes in process `syz.2.425'. [ 203.324766][ T808] usb 1-1: Using ep0 maxpacket: 8 [ 203.327604][ T808] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 203.327622][ T808] usb 1-1: config 179 has no interface number 0 [ 203.327652][ T808] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 203.327686][ T808] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 203.327705][ T808] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 203.327723][ T808] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 203.327738][ T808] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 203.327783][ T808] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 203.327799][ T808] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 203.331622][ T7270] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 203.338557][ T808] xpad 1-1:179.65: probe with driver xpad failed with error -5 [ 203.560948][ T808] usb 1-1: USB disconnect, device number 19 [ 204.129929][ T1568] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 204.269911][ T1568] usb 2-1: device descriptor read/64, error -71 [ 204.275674][ T808] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 204.350815][ T7308] netlink: 16 bytes leftover after parsing attributes in process `syz.0.436'. [ 204.429904][ T808] usb 5-1: Using ep0 maxpacket: 32 [ 204.458368][ T808] usb 5-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 204.491834][ T808] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 204.511285][ T1568] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 204.515767][ T808] usb 5-1: Product: syz [ 204.537201][ T808] usb 5-1: Manufacturer: syz [ 204.553154][ T808] usb 5-1: SerialNumber: syz [ 204.576687][ T808] usb 5-1: config 0 descriptor?? [ 204.605478][ T808] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state. [ 204.620654][ T808] dvb-usb: bulk message failed: -22 (2/0) [ 204.641890][ T808] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 204.666338][ T808] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold) [ 204.670153][ T1568] usb 2-1: device descriptor read/64, error -71 [ 204.704754][ T808] usb 5-1: media controller created [ 204.744974][ T808] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 204.823795][ T7291] dvb-usb: bulk message failed: -22 (3/0) [ 204.832398][ T1568] usb usb2-port1: attempt power cycle [ 204.847501][ T808] usb 5-1: selecting invalid altsetting 7 [ 204.859641][ T808] cxusb: set interface failed [ 204.876481][ T808] dvb-usb: bulk message failed: -22 (1/0) [ 205.017667][ T808] DVB: Unable to find symbol lgdt330x_attach() [ 205.035472][ T808] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold' [ 205.103145][ T7326] FAULT_INJECTION: forcing a failure. [ 205.103145][ T7326] name failslab, interval 1, probability 0, space 0, times 0 [ 205.175979][ T7326] CPU: 0 UID: 0 PID: 7326 Comm: syz.0.441 Tainted: G L syzkaller #0 PREEMPT(full) [ 205.176013][ T7326] Tainted: [L]=SOFTLOCKUP [ 205.176039][ T7326] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 205.176052][ T7326] Call Trace: [ 205.176061][ T7326] [ 205.176069][ T7326] dump_stack_lvl+0xe8/0x150 [ 205.176102][ T7326] should_fail_ex+0x412/0x560 [ 205.176135][ T7326] should_failslab+0xa8/0x100 [ 205.176170][ T7326] __kvmalloc_node_noprof+0x178/0x8a0 [ 205.176200][ T7326] ? rcu_is_watching+0x15/0xb0 [ 205.176225][ T7326] ? nf_hook_entries_grow+0x288/0x720 [ 205.176264][ T7326] nf_hook_entries_grow+0x288/0x720 [ 205.176296][ T7326] ? netlink_sendmsg+0x813/0xb40 [ 205.176333][ T7326] __nf_register_net_hook+0x2c9/0x930 [ 205.176375][ T7326] nf_register_net_hook+0xb2/0x190 [ 205.176406][ T7326] nf_register_net_hooks+0x44/0x1b0 [ 205.176452][ T7326] nf_ct_netns_do_get+0x363/0x5c0 [ 205.176487][ T7326] ? __pfx_nf_ct_netns_do_get+0x10/0x10 [ 205.176533][ T7326] nf_ct_netns_get+0x8b/0x320 [ 205.176565][ T7326] nft_connlimit_do_init+0x1de/0x2e0 [ 205.176598][ T7326] nft_set_elem_expr_alloc+0x213/0x5f0 [ 205.176629][ T7326] ? __pfx_nft_set_elem_expr_alloc+0x10/0x10 [ 205.176670][ T7326] ? nft_rhash_init+0x2c0/0x3b0 [ 205.176700][ T7326] ? __pfx_nft_rhash_init+0x10/0x10 [ 205.176724][ T7326] ? kasan_quarantine_put+0xbb/0x1f0 [ 205.176752][ T7326] ? __pfx_nft_rhash_key+0x10/0x10 [ 205.176778][ T7326] ? __pfx_nft_rhash_obj+0x10/0x10 [ 205.176804][ T7326] ? __pfx_nft_rhash_cmp+0x10/0x10 [ 205.176836][ T7326] nft_set_expr_alloc+0x4da/0x760 [ 205.176871][ T7326] nf_tables_newset+0x1c6b/0x2580 [ 205.176919][ T7326] ? __pfx_nf_tables_newset+0x10/0x10 [ 205.176976][ T7326] ? __nla_parse+0x40/0x60 [ 205.177012][ T7326] nfnetlink_rcv+0x123e/0x27b0 [ 205.177075][ T7326] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 205.177119][ T7326] ? ref_tracker_free+0x693/0x840 [ 205.177181][ T7326] ? __netlink_deliver_tap+0x807/0x850 [ 205.177217][ T7326] ? netlink_deliver_tap+0x2e/0x1b0 [ 205.177243][ T7326] ? netlink_deliver_tap+0x2e/0x1b0 [ 205.177274][ T7326] netlink_unicast+0x75c/0x8e0 [ 205.177321][ T7326] netlink_sendmsg+0x813/0xb40 [ 205.177357][ T7326] ? __pfx_netlink_sendmsg+0x10/0x10 [ 205.177386][ T7326] ? aa_sock_msg_perm+0xf1/0x1b0 [ 205.177423][ T7326] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 205.177456][ T7326] ____sys_sendmsg+0x972/0x9f0 [ 205.177482][ T7326] ? __might_fault+0xaf/0x130 [ 205.177516][ T7326] ? __pfx_____sys_sendmsg+0x10/0x10 [ 205.177553][ T7326] ? import_iovec+0x73/0xa0 [ 205.177586][ T7326] ___sys_sendmsg+0x2a5/0x360 [ 205.177612][ T7326] ? __lock_acquire+0x6b5/0x2cf0 [ 205.177640][ T7326] ? __pfx____sys_sendmsg+0x10/0x10 [ 205.177705][ T7326] ? __fget_files+0x2a/0x420 [ 205.177732][ T7326] ? __fget_files+0x3a0/0x420 [ 205.177757][ T7326] __x64_sys_sendmsg+0x1bd/0x2a0 [ 205.177778][ T7326] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 205.177804][ T7326] ? __pfx_ksys_write+0x10/0x10 [ 205.177830][ T7326] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 205.177846][ T7326] do_syscall_64+0x15f/0xf80 [ 205.177863][ T7326] ? trace_irq_disable+0x3b/0x140 [ 205.177884][ T7326] ? clear_bhb_loop+0x40/0x90 [ 205.177902][ T7326] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 205.177916][ T7326] RIP: 0033:0x7f1994f9cdd9 [ 205.177930][ T7326] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 205.177942][ T7326] RSP: 002b:00007f1995f19028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 205.177957][ T7326] RAX: ffffffffffffffda RBX: 00007f1995215fa0 RCX: 00007f1994f9cdd9 [ 205.177968][ T7326] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 205.177977][ T7326] RBP: 00007f1995f19090 R08: 0000000000000000 R09: 0000000000000000 [ 205.177986][ T7326] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 205.177994][ T7326] R13: 00007f1995216038 R14: 00007f1995215fa0 R15: 00007f199533fa48 [ 205.178016][ T7326] [ 205.567156][ T808] rc_core: IR keymap rc-dvico-portable not found [ 205.573690][ T808] Registered IR keymap rc-empty [ 205.583225][ T808] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0 [ 205.595328][ T808] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0/input16 [ 205.615708][ T808] dvb-usb: schedule remote query interval to 100 msecs. [ 205.623433][ T808] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected. [ 205.637035][ T1568] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 205.660722][ T1568] usb 2-1: device descriptor read/8, error -71 [ 205.675113][ T808] usb 5-1: USB disconnect, device number 25 [ 205.901965][ T1568] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 205.930533][ T1568] usb 2-1: device descriptor read/8, error -71 [ 206.017667][ T808] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected. [ 206.044813][ T1568] usb usb2-port1: unable to enumerate USB device [ 206.370074][ T5724] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 206.391480][ T808] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 206.524872][ T5724] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 206.555449][ T5724] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 206.563974][ T808] usb 5-1: Using ep0 maxpacket: 8 [ 206.580331][ T808] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 206.594953][ T808] usb 5-1: config 179 has no interface number 0 [ 206.602580][ T5724] usb 4-1: config 0 descriptor?? [ 206.617865][ T808] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 206.632679][ T808] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 206.665421][ T808] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 206.684126][ T808] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 206.696315][ T808] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 206.710085][ T808] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 206.719238][ T808] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 206.738892][ T7335] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 206.870165][ T7338] tipc: Enabling of bearer rejected, failed to enable media [ 206.887272][ T5724] udl 4-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 206.991379][ T808] usb 5-1: USB disconnect, device number 26 [ 206.991439][ C1] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 207.005680][ C1] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 207.195665][ T5724] [drm] Initialized udl 0.0.1 for 4-1:0.0 on minor 2 [ 207.208789][ T5724] [drm] Initialized udl on minor 2 [ 207.306126][ T7338] sctp: [Deprecated]: syz.3.445 (pid 7338) Use of int in maxseg socket option. [ 207.306126][ T7338] Use struct sctp_assoc_value instead [ 207.331476][ T5724] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed [ 207.393088][ T5724] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 207.411082][ T7365] netlink: 4 bytes leftover after parsing attributes in process `syz.1.456'. [ 207.563980][ T808] usb 4-1: USB disconnect, device number 21 [ 207.571016][ T5699] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 207.594071][ T7365] team0: Port device team_slave_0 removed [ 207.615604][ T5699] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 208.225953][ T5699] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 208.443509][ T5699] usb 5-1: New USB device found, idVendor=0c45, idProduct=6005, bcdDevice=b5.55 [ 208.482024][ T5699] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 208.513953][ T5699] usb 5-1: Product: syz [ 208.533488][ T5699] usb 5-1: Manufacturer: syz [ 208.548037][ T5699] usb 5-1: SerialNumber: syz [ 208.577485][ T5699] usb 5-1: config 0 descriptor?? [ 208.602859][ T5699] gspca_main: sonixb-2.14.0 probing 0c45:6005 [ 209.310979][ T5699] sonixb 5-1:0.0: Error writing register 01: -110 [ 209.326808][ T5699] sonixb 5-1:0.0: probe with driver sonixb failed with error -110 [ 210.890621][ T5630] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 211.083385][ T5630] usb 2-1: Using ep0 maxpacket: 16 [ 211.098175][ T5630] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 211.144774][ T808] usb 5-1: USB disconnect, device number 27 [ 211.158105][ T5630] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 211.219988][ T5630] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 211.249028][ T5630] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 211.309081][ T5630] usb 2-1: Product: syz [ 211.331115][ T5630] usb 2-1: Manufacturer: syz [ 211.343160][ T7401] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 211.350559][ T7401] IPv6: NLM_F_CREATE should be set when creating new route [ 211.390921][ T5630] usb 2-1: SerialNumber: syz [ 211.458605][ T5630] usb 2-1: 0:2 : does not exist [ 211.650122][ T5630] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 211.890664][ T5630] usb 2-1: USB disconnect, device number 29 [ 212.389938][ T808] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 212.409861][ T9] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 212.602540][ T808] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 212.619086][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 212.634498][ T9] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 212.649882][ T808] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 212.668749][ T9] usb 5-1: config 179 has no interface number 0 [ 212.688123][ T9] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 212.699289][ T808] usb 1-1: New USB device found, idVendor=054c, idProduct=0ba0, bcdDevice= 0.00 [ 212.699318][ T808] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.765788][ T808] usb 1-1: config 0 descriptor?? [ 212.781332][ T9] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 212.820096][ T9] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 212.863308][ T9] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 212.896567][ T9] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 212.952696][ T9] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 212.985750][ T7415] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 213.023119][ T7415] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 213.049319][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.102486][ T7419] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 213.353063][ T9] usb 5-1: USB disconnect, device number 28 [ 213.353144][ C0] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 213.353185][ C0] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 215.060215][ T9] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 215.208777][ T7447] xt_CT: You must specify a L4 protocol and not use inversions on it [ 215.239849][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 215.252164][ T9] usb 4-1: config 9 has an invalid interface number: 226 but max is 0 [ 215.267487][ T9] usb 4-1: config 9 has no interface number 0 [ 215.296870][ T9] usb 4-1: config 9 interface 226 has no altsetting 0 [ 215.325779][ T9] usb 4-1: New USB device found, idVendor=055f, idProduct=a800, bcdDevice=dc.fd [ 215.345281][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 215.363242][ T9] usb 4-1: Product: syz [ 215.386742][ T9] usb 4-1: Manufacturer: syz [ 215.405223][ T9] usb 4-1: SerialNumber: syz [ 215.603780][ T7454] CIFS: VFS: UNC: path must begin with // or \\ [ 215.626731][ T7454] CIFS: VFS: Malformed UNC in devname [ 215.845488][ T9] mdc800 4-1:9.226: probe fails -> wrong Interface [ 215.886184][ T9] usb 4-1: USB disconnect, device number 22 [ 216.102579][ T5699] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 216.270062][ T5699] usb 2-1: Using ep0 maxpacket: 8 [ 216.288441][ T5699] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 216.313535][ T5699] usb 2-1: config 179 has no interface number 0 [ 216.332060][ T5699] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 216.369711][ T5699] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 216.401252][ T5699] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 216.451857][ T5699] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 216.508953][ T5699] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 216.567850][ T5699] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 216.589857][ T5699] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 216.635851][ T7457] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 216.855494][ T9] usb 2-1: USB disconnect, device number 30 [ 216.855539][ C1] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 216.870061][ C1] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 217.090258][ T807] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 217.271533][ T807] usb 3-1: Using ep0 maxpacket: 32 [ 217.303539][ T807] usb 3-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 217.341551][ T807] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.382919][ T807] usb 3-1: config 0 descriptor?? [ 217.480032][ T807] as10x_usb: device has been detected [ 217.504458][ T807] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 217.601551][ T807] usb 3-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 217.652663][ T7477] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 217.663488][ T7468] ------------[ cut here ]------------ [ 217.669025][ T7468] DEBUG_LOCKS_WARN_ON(lock->magic != lock) [ 217.669051][ T7468] WARNING: kernel/locking/mutex.c:625 at __mutex_lock+0x1303/0x1550, CPU#0: syz.2.486/7468 [ 217.685616][ T7468] Modules linked in: [ 217.689604][ T7468] CPU: 0 UID: 0 PID: 7468 Comm: syz.2.486 Tainted: G L syzkaller #0 PREEMPT(full) [ 217.700968][ T7468] Tainted: [L]=SOFTLOCKUP [ 217.706081][ T7468] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 217.716250][ T7468] RIP: 0010:__mutex_lock+0x130a/0x1550 [ 217.722081][ T7468] Code: 30 90 48 c1 e8 03 42 0f b6 04 30 84 c0 0f 85 1b 02 00 00 83 3d da 38 87 04 00 75 13 48 8d 3d cd 50 8a 04 48 c7 c6 a0 da cc 8b <67> 48 0f b9 3a 90 e9 50 ee ff ff 90 0f 0b 90 e9 4e f2 ff ff 90 0f [ 217.742124][ T7468] RSP: 0018:ffffc9000205fa20 EFLAGS: 00010246 [ 217.748348][ T7468] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000080000 [ 217.756427][ T7477] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 217.772793][ T7468] RDX: ffffc90010eaf000 RSI: ffffffff8bccdaa0 RDI: ffffffff9033ecc0 [ 217.781023][ T7468] RBP: ffffc9000205fbd8 R08: ffffffff9030d4c3 R09: 1ffffffff2061a98 [ 217.789048][ T7468] R10: dffffc0000000000 R11: fffffbfff2061a99 R12: ffff8880252c0b30 [ 217.797399][ T7468] R13: 0000000000000000 R14: dffffc0000000000 R15: 1ffff9200040bf5c [ 217.805438][ T7468] FS: 00007f875738a6c0(0000) GS:ffff888125290000(0000) knlGS:0000000000000000 [ 217.815376][ T7468] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 217.822059][ T7468] CR2: 0000001b34a1bff8 CR3: 00000000771cc000 CR4: 00000000003526f0 [ 217.830613][ T7468] Call Trace: [ 217.833984][ T7468] [ 217.837131][ T7468] ? trace_contention_end+0x3d/0x140 [ 217.842545][ T7468] ? __mutex_lock+0x319/0x1550 [ 217.847358][ T7468] ? as102_dvb_dmx_start_feed+0x70/0x290 [ 217.853479][ T7468] ? __pfx___mutex_lock+0x10/0x10 [ 217.858586][ T7468] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 217.864466][ T7468] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 217.870891][ T7468] ? do_raw_spin_lock+0x12b/0x2f0 [ 217.875975][ T7468] as102_dvb_dmx_start_feed+0x70/0x290 [ 217.881831][ T7468] dmx_section_feed_start_filtering+0x518/0x6c0 [ 217.888139][ T7468] dvb_dmxdev_filter_start+0xcf4/0x10e0 [ 217.894072][ T7468] ? dvb_dmxdev_filter_set+0x2d1/0x580 [ 217.899664][ T7468] dvb_demux_do_ioctl+0x470/0x540 [ 217.904788][ T7468] dvb_usercopy+0x199/0x2e0 [ 217.909382][ T7468] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 217.915398][ T7468] ? __pfx_dvb_usercopy+0x10/0x10 [ 217.920501][ T7468] ? __fget_files+0x3a0/0x420 [ 217.925220][ T7468] ? __fget_files+0x2a/0x420 [ 217.930209][ T7468] ? __pfx_dvb_demux_ioctl+0x10/0x10 [ 217.935547][ T7468] dvb_demux_ioctl+0x29/0x40 [ 217.940224][ T7468] __se_sys_ioctl+0xfc/0x170 [ 217.944871][ T7468] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 217.951528][ T7468] do_syscall_64+0x15f/0xf80 [ 217.956171][ T7468] ? trace_irq_disable+0x3b/0x140 [ 217.961264][ T7468] ? clear_bhb_loop+0x40/0x90 [ 217.966094][ T7468] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 217.972369][ T7468] RIP: 0033:0x7f875659cdd9 [ 217.976839][ T7468] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 217.996893][ T7468] RSP: 002b:00007f875738a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 218.005387][ T7468] RAX: ffffffffffffffda RBX: 00007f8756816180 RCX: 00007f875659cdd9 [ 218.013719][ T7468] RDX: 0000200000000200 RSI: 00000000403c6f2b RDI: 0000000000000007 [ 218.025021][ T7468] RBP: 00007f8756632d69 R08: 0000000000000000 R09: 0000000000000000 [ 218.033510][ T7468] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 218.041579][ T7468] R13: 00007f8756816218 R14: 00007f8756816180 R15: 00007f875693fa48 [ 218.049605][ T7468] [ 218.052993][ T7468] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 218.060307][ T7468] CPU: 0 UID: 0 PID: 7468 Comm: syz.2.486 Tainted: G L syzkaller #0 PREEMPT(full) [ 218.071375][ T7468] Tainted: [L]=SOFTLOCKUP [ 218.075759][ T7468] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 218.085839][ T7468] Call Trace: [ 218.089160][ T7468] [ 218.092125][ T7468] vpanic+0x56c/0xa60 [ 218.096152][ T7468] ? __pfx__printk+0x10/0x10 [ 218.100784][ T7468] ? __pfx_vpanic+0x10/0x10 [ 218.105321][ T7468] ? is_bpf_text_address+0x292/0x2b0 [ 218.110670][ T7468] ? is_bpf_text_address+0x26/0x2b0 [ 218.115903][ T7468] panic+0xc5/0xd0 [ 218.119699][ T7468] ? __pfx_panic+0x10/0x10 [ 218.124165][ T7468] __warn+0x315/0x4c0 [ 218.128186][ T7468] ? __mutex_lock+0x1303/0x1550 [ 218.133170][ T7468] ? __mutex_lock+0x1303/0x1550 [ 218.138070][ T7468] __report_bug+0x29a/0x540 [ 218.142606][ T7468] ? __mutex_lock+0x1303/0x1550 [ 218.147525][ T7468] ? __pfx___report_bug+0x10/0x10 [ 218.152602][ T7468] ? __lock_acquire+0x6b5/0x2cf0 [ 218.157569][ T7468] ? __page_table_check_ptes_set+0x6f/0x320 [ 218.163508][ T7468] ? pfn_valid+0x125/0x4c0 [ 218.167960][ T7468] ? pfn_valid+0x440/0x4c0 [ 218.172431][ T7468] report_bug_entry+0x19a/0x290 [ 218.177322][ T7468] ? __mutex_lock+0x130a/0x1550 [ 218.182293][ T7468] ? __mutex_lock+0x130f/0x1550 [ 218.187196][ T7468] handle_bug+0xce/0x200 [ 218.191553][ T7468] exc_invalid_op+0x1a/0x50 [ 218.196098][ T7468] asm_exc_invalid_op+0x1a/0x20 [ 218.200980][ T7468] RIP: 0010:__mutex_lock+0x130a/0x1550 [ 218.206475][ T7468] Code: 30 90 48 c1 e8 03 42 0f b6 04 30 84 c0 0f 85 1b 02 00 00 83 3d da 38 87 04 00 75 13 48 8d 3d cd 50 8a 04 48 c7 c6 a0 da cc 8b <67> 48 0f b9 3a 90 e9 50 ee ff ff 90 0f 0b 90 e9 4e f2 ff ff 90 0f [ 218.226115][ T7468] RSP: 0018:ffffc9000205fa20 EFLAGS: 00010246 [ 218.232294][ T7468] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000080000 [ 218.240315][ T7468] RDX: ffffc90010eaf000 RSI: ffffffff8bccdaa0 RDI: ffffffff9033ecc0 [ 218.248336][ T7468] RBP: ffffc9000205fbd8 R08: ffffffff9030d4c3 R09: 1ffffffff2061a98 [ 218.256333][ T7468] R10: dffffc0000000000 R11: fffffbfff2061a99 R12: ffff8880252c0b30 [ 218.264339][ T7468] R13: 0000000000000000 R14: dffffc0000000000 R15: 1ffff9200040bf5c [ 218.272376][ T7468] ? trace_contention_end+0x3d/0x140 [ 218.277711][ T7468] ? __mutex_lock+0x319/0x1550 [ 218.282564][ T7468] ? as102_dvb_dmx_start_feed+0x70/0x290 [ 218.288246][ T7468] ? __pfx___mutex_lock+0x10/0x10 [ 218.293306][ T7468] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 218.298985][ T7468] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 218.304997][ T7468] ? do_raw_spin_lock+0x12b/0x2f0 [ 218.310079][ T7468] as102_dvb_dmx_start_feed+0x70/0x290 [ 218.315591][ T7468] dmx_section_feed_start_filtering+0x518/0x6c0 [ 218.321872][ T7468] dvb_dmxdev_filter_start+0xcf4/0x10e0 [ 218.327455][ T7468] ? dvb_dmxdev_filter_set+0x2d1/0x580 [ 218.332960][ T7468] dvb_demux_do_ioctl+0x470/0x540 [ 218.338064][ T7468] dvb_usercopy+0x199/0x2e0 [ 218.342665][ T7468] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 218.348250][ T7468] ? __pfx_dvb_usercopy+0x10/0x10 [ 218.353335][ T7468] ? __fget_files+0x3a0/0x420 [ 218.358154][ T7468] ? __fget_files+0x2a/0x420 [ 218.362800][ T7468] ? __pfx_dvb_demux_ioctl+0x10/0x10 [ 218.368141][ T7468] dvb_demux_ioctl+0x29/0x40 [ 218.372795][ T7468] __se_sys_ioctl+0xfc/0x170 [ 218.377430][ T7468] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 218.383870][ T7468] do_syscall_64+0x15f/0xf80 [ 218.388600][ T7468] ? trace_irq_disable+0x3b/0x140 [ 218.393704][ T7468] ? clear_bhb_loop+0x40/0x90 [ 218.398419][ T7468] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 218.404334][ T7468] RIP: 0033:0x7f875659cdd9 [ 218.408862][ T7468] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 218.428557][ T7468] RSP: 002b:00007f875738a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 218.437066][ T7468] RAX: ffffffffffffffda RBX: 00007f8756816180 RCX: 00007f875659cdd9 [ 218.445159][ T7468] RDX: 0000200000000200 RSI: 00000000403c6f2b RDI: 0000000000000007 [ 218.453179][ T7468] RBP: 00007f8756632d69 R08: 0000000000000000 R09: 0000000000000000 [ 218.461187][ T7468] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 218.469190][ T7468] R13: 00007f8756816218 R14: 00007f8756816180 R15: 00007f875693fa48 [ 218.477195][ T7468] [ 218.480901][ T7468] Kernel Offset: disabled [ 218.485239][ T7468] Rebooting in 86400 seconds..