last executing test programs: 6.302196663s ago: executing program 3 (id=611): sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_usb_connect(0x1, 0x24, &(0x7f0000000300)=ANY=[@ANYBLOB="120110010928fc10ac059102254301020301090212000100004000090484000003e102"], 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000003880), 0x4, 0x2) syz_usb_disconnect(r1) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000440)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x1, 0x7fff7ffc}]}) syz_open_procfs(0x0, &(0x7f0000000000)='gid_map\x00') close_range(r3, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x24008004) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff0f0000}, 0x0) timer_create(0x3, 0x0, 0x0) ioctl$XFS_IOC_FD_TO_HANDLE(r2, 0xc038586a, &(0x7f00000001c0)={r0, &(0x7f0000000040)='\x00', 0x290401, &(0x7f0000000080)={@_ha_fsid={[0x7d, 0x1ff]}, {0x8, 0x21, 0x8, 0x5}}, 0x8, &(0x7f00000000c0), &(0x7f0000000100)=0x3}) ioctl$USBDEVFS_CONTROL(r5, 0xc0185500, &(0x7f0000000240)={0x0, 0x13, 0x5, 0x8, 0x35, 0x2, &(0x7f0000000200)="f73771f3eafabcc54881b14adf09635a226fce5e4e7e649d279c959c79643223dfd6875c226d868ca54680dc1cf801694272bf9cb9"}) socket$packet(0x11, 0x2, 0x300) r6 = syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00') setsockopt$RDS_GET_MR_FOR_DEST(r6, 0x114, 0x7, &(0x7f0000000380)={@ll={0x11, 0x4, r4, 0x1, 0x5, 0x6, @random="5e93fce84e87"}, {&(0x7f0000000280)=""/88, 0x58}, &(0x7f0000000340), 0x40}, 0xa0) socket$nl_route(0x10, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) 6.212167588s ago: executing program 2 (id=613): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="bd7000fcdbdf250a008000090000051e45a6f1229ba236e07f80020014000200fc02000000000000000000000000001e2f056f22aeb1b8c1a13f90e3b1daa0bd1364aeb5776c101a94b30f1520858fb62e5d32963083b24ef61d2049ba43ef722edbf2a70747fad8e57ac269eed277e012368036199b225098ca2ea6126f6c4c576a27982253411a3fff3ee42183d63e7f2e"], 0x38}}, 0x480d0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x19, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0x1000000000000f, &(0x7f0000000080)=0x7fffffff, 0x4) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2800001, 0xc3072, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x34, &(0x7f0000000040)=r1, 0x4) r3 = dup2(r1, r1) setsockopt$sock_attach_bpf(r2, 0x1, 0x34, &(0x7f00000000c0)=r3, 0x4) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000a00)=ANY=[@ANYBLOB="5c0000001000390400"/20, @ANYRES32=0x0], 0x5c}, 0x1, 0x0, 0x0, 0x50}, 0x0) 6.110201471s ago: executing program 2 (id=614): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=ANY=[@ANYBLOB="b40000001800dd8d000000000000000002000000000000060000000006001500040000009000168004000880"], 0xb4}, 0x1, 0x0, 0x0, 0x841}, 0x0) (async) r1 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000404c05f20dafd60000000109022400010000000009040000010300010009210101000122050009058103"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f00000003c0)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="000657"], 0x0, 0x0, 0x0, 0x0}, 0x0) (async) syz_usb_control_io$hid(r1, 0x0, &(0x7f00000007c0)={0x2c, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x20, 0x1, 0x14, "a922c296ef4b83417e9f5fafee8f60a9cde2c695"}, 0x0}) 5.0695109s ago: executing program 4 (id=620): socket$netlink(0x10, 0x3, 0x0) (async) socket$xdp(0x2c, 0x3, 0x0) (async) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) (async) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) (async) epoll_create1(0x80000) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x0, 0x0, &(0x7f0000001440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000)={0x0, 0x20000}, 0xfffffffffffffe95, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) unshare(0x400) (async) r1 = syz_open_dev$vcsn(&(0x7f0000000080), 0x1f, 0x80000) (async) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r2, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r3, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$NONE(r2, 0x3b89, &(0x7f0000000180)={0x28, 0x1, r5, r3, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)}) ioctl$IOMMU_HWPT_ALLOC$TEST(r2, 0x3b89, &(0x7f0000000200)={0x28, 0x0, r5, r6, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000240)}) ioctl$IOMMU_HWPT_INVALIDATE$TEST(r2, 0x3b8d, &(0x7f0000000280)={0x20, r7, &(0x7f00000002c0)=[{}], 0xdeadbeef, 0x8, 0x1}) (async) ioctl$IOMMU_DESTROY$hwpt(r2, 0x3b80, &(0x7f0000000300)={0x8, r7}) (async) ioctl$IOMMU_DESTROY$hwpt(r2, 0x3b80, &(0x7f0000000340)={0x8, r6}) (async) ioctl$IOMMU_GET_HW_INFO(r2, 0x3b8a, &(0x7f0000000380)={0x24, 0x0, r5, 0x1c, &(0x7f00000003c0)=""/28}) (async) ioctl$IOMMU_DESTROY$stdev(r2, 0x3b80, &(0x7f0000000400)={0x8, r4}) (async) ioctl$IOMMU_DESTROY$ioas(r1, 0x3b80, &(0x7f0000001480)={0x8, r3}) (async) close(r2) (async) io_uring_enter(r1, 0x1a0, 0x91a0, 0x7c, &(0x7f00000000c0)={[0x1]}, 0x8) (async) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd, 0x400000, 0x0, 0xffffffffffffff1b, 0x5}, 0x0, &(0x7f0000000280)={0x3fc, 0x0, 0x1, 0x1, 0x0, 0x0, 0x7fffffff, 0x7}, 0x0, 0x0) (async) bind$inet(0xffffffffffffffff, &(0x7f0000e15000)={0x2, 0x4e20, @empty}, 0x10) (async) socket$inet(0x2, 0x1, 0x0) (async) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) (async) recvmmsg(r0, &(0x7f0000001740)=[{{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000400)=""/4096, 0x10c4}], 0x1}}], 0x4000210, 0x2, 0x0) 4.869295901s ago: executing program 4 (id=621): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = open(&(0x7f0000000180)='./bus\x00', 0x10157f, 0x68) readahead(r0, 0x0, 0x6) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts-aes-aesni\x00'}, 0x58) clock_adjtime(0x6, &(0x7f00000004c0)={0x10, 0x1, 0x8001, 0x3, 0x6f7, 0x8, 0x956, 0x2, 0x5, 0x9, 0x4, 0x9, 0xe, 0xff, 0x8, 0x4, 0x2, 0x4, 0xe0000000, 0x6, 0x0, 0x1, 0x2, 0x0, 0xb3, 0x10000}) openat$dsp(0xffffffffffffff9c, &(0x7f00000003c0), 0x101a02, 0x0) accept$alg(r1, 0x0, 0x0) unshare(0x22020400) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000100), 0x4880, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x7) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f00000000c0)=ANY=[@ANYBLOB="12"], 0x1000f) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2}, 0x28) ioctl$KVM_RUN(r4, 0xae80, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, 0x0}, 0x4048043) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x1800) setrlimit(0xf, &(0x7f0000000000)={0x1, 0x5}) getpeername(0xffffffffffffffff, &(0x7f0000000240)=@ethernet={0x0, @remote}, &(0x7f0000000080)=0xfffffeb1) 4.750301969s ago: executing program 1 (id=622): syz_clone3(&(0x7f0000000680)={0x40000, 0x0, 0x0, 0x0, {0x800000b}, 0x0, 0x0, 0x0, 0x0}, 0x58) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xfe, 0x7fff0006}]}) r2 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa2003, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, &(0x7f0000000100)={0x20004, r1}) r4 = syz_open_dev$dri(&(0x7f0000000280), 0x1ff, 0x140) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_COMPAT={0x2c, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x5c}, @NFTA_RULE_COMPAT_FLAGS={0x8}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x6}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x2e}]}, @NFTA_RULE_EXPRESSIONS={0x10, 0x4, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @dup_ipv4={{0x8}, @void}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, "ba"}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x8c}, 0x1, 0x0, 0x0, 0x4004850}, 0x20080) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$DRM_IOCTL_GEM_FLINK(r4, 0xc00864d2, &(0x7f0000000300)={r5}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) recvmmsg(r0, &(0x7f0000001440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40002002, 0x0) ioctl$VIDIOC_S_FREQUENCY(r3, 0x402c5639, &(0x7f0000000040)={0x4, 0x2, 0x2}) 4.700475071s ago: executing program 4 (id=624): mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x5) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) 4.593954394s ago: executing program 4 (id=625): r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000001d00), 0x8002, 0x0) r1 = syz_usb_connect$uac1(0x2, 0x90, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0xff, 0x499, 0x1053, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7e, 0x3, 0x1, 0x6, 0x40, 0x7, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x2, 0x16}, [@input_terminal={0xc, 0x24, 0x2, 0x1, 0x401, 0x5, 0xd, 0xaf, 0x2}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x1, 0x2, 0x0, 0x4, "f2cf", "ed"}]}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x2, 0x5, 0x6, {0x7, 0x25, 0x1, 0x8, 0x8, 0xc22}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x7, 0xe6, 0x4}]}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x4, 0xa, 0x3, {0x7, 0x25, 0x1, 0xc, 0x7, 0x3}}}}}}}}]}}, &(0x7f0000000500)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x250, 0xf, 0x1, 0x9, 0x8, 0xdc}, 0xcd, &(0x7f0000000100)={0x5, 0xf, 0xcd, 0x3, [@generic={0xb1, 0x10, 0xb, "c40798ac1cda75006185b444716f1dacdffdd74933064eb54970304b72a84f99fbbdf0ff1658db6cba9de20cbf1ff434252343f601b983c8c91ca6d60653530f9be92ff138ace361913eb3d5d57e37c7158690945acd53f8ea702b42f84ba6957058bf5360f224cf14ae9c7101e72e82bc0fa1adc4ac1131f71f44de750d1a263cbf428af0a3f1dbfcaf107bbc33249117551dacb77467a416923cde4887371bd882e8fa1eac1fc0c84ad261d295"}, @ssp_cap={0x10, 0x10, 0xa, 0x10, 0x1, 0x1, 0x0, 0x2, [0x30]}, @ext_cap={0x7, 0x10, 0x2, 0x1a, 0xe, 0x4, 0x9}]}, 0x6, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x3409}}, {0xb3, &(0x7f0000000240)=@string={0xb3, 0x3, "dfb43b6a3c1d7ef4233c2f7615e020d4abaf4a374c9550ba36e905fd98ec079211d17182fc07cc072b014e7ae8deafe495703e50a2899b86b8717aaa6a39b0261505d4b6dc1779f73fb3fec87a8be8b511aa0a10a4a8ef47cc2bd213c28e36925c2f49588c4a7076112c3e809e9dfb67fcb4aac13a594e5ffbc33560d360321bb35cf0355520dc579ff2ca732c5936b847f14bebf70bcd8488b5b38f7ac87a09d4a79f584983317049d0803a4d98aecb64"}}, {0xe3, &(0x7f0000000300)=@string={0xe3, 0x3, "3e012d2d606247d5be7232727efbe44e248c0191b51b64b6079091ea7dd63ebcd4d35824ec3ac8b2e75bd51183d8abeee42c7346089f20566a13f45f777f92143c19650ce38cddbd011ae98373c0d172266e1a66965d905376d20e7db3c495767a28379082d47380511b74f7d5fb1758805d8158fa4416e909d808a24423a7d5e01f3bf4a85adadc5b895d2f40a525fe14c0c5fec52f165a1ad510c6a8e844f6e9ebb52f123ffd05ba396bec23c77ef3261a760cd3c37f2f9c0436f4e2e48dc9fc671d560f0388b4a4ebb1b06ce5f534e2a9e85ab8b434762c3c9ed6513efcf475"}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0xe9b6b37d26f18702}}, {0x49, &(0x7f0000000440)=@string={0x49, 0x3, "ddfe81639821f14a5fdc2071e4a4c726acdc9b125a742dc7bbf885d06015951aeba6b5d5ae212d86e5969e861fb5a7c8e24246211a6de536520ebda057c9296218c2880ac2b5b3"}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x140a}}]}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a40)={{0x1, 0xffffffffffffffff}, &(0x7f00000009c0), &(0x7f0000000a00)}, 0x20) syz_open_dev$dri(&(0x7f0000002180), 0x8000, 0xc000) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)={0x2c, r3, 0x1, 0x70bd28, 0x1, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x4}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}]}, 0x2c}}, 0x80) pipe2(&(0x7f0000001b00)={0xffffffffffffffff}, 0x4800) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001e80)={0x6, 0x22, &(0x7f0000001bc0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4}, {}, {}, [@call={0x85, 0x0, 0x0, 0xc3}, @initr0={0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x3}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x100}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @call={0x85, 0x0, 0x0, 0xb3}, @initr0={0x18, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x871}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001d80)='syzkaller\x00', 0x400, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000001dc0)={0x9, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000001e00)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1], &(0x7f00000021c0)=[{0x1, 0x5, 0x4, 0x2}]}, 0x94) pipe2$watch_queue(&(0x7f0000001f40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001f80)={0x1, 0xffffffffffffffff}, 0x4) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) r11 = dup(r10) ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000020c0)=@bpf_ext={0x1c, 0x8, &(0x7f0000000a80)=@raw=[@btf_id={0x18, 0xb, 0x3, 0x0, 0x3}, @tail_call={{0x18, 0x2, 0x1, 0x0, r2}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}], &(0x7f0000000ac0)='syzkaller\x00', 0x9e, 0x1000, &(0x7f0000000b00)=""/4096, 0x40f00, 0x3e, '\x00', r4, 0x0, r5, 0x8, &(0x7f0000001b40)={0x7, 0x5}, 0x8, 0x10, &(0x7f0000001b80)={0x2, 0xa, 0xc5, 0x9}, 0x10, 0x5e46, r6, 0x9, &(0x7f0000001fc0)=[r7, r8, 0x1, 0x1, 0xffffffffffffffff, r11], &(0x7f0000002000)=[{0x0, 0x4, 0x5, 0x5}, {0x2, 0x1, 0x7, 0xc}, {0x5, 0x1, 0x5, 0x2}, {0x5, 0x2, 0x1, 0xc}, {0x4, 0x5, 0x0, 0x6}, {0x1, 0x5, 0xa, 0x5}, {0x4, 0x3, 0x0, 0xc}, {0x0, 0x4, 0xf, 0x6}, {0x0, 0x3, 0xf, 0x7}], 0x10, 0x2}, 0x94) syz_usb_control_io$uac1(r1, &(0x7f00000006c0)={0x14, &(0x7f0000000580)={0x40, 0x21, 0xc4, {0xc4, 0x10, "d8cbd1b80af2b35ddb9c73343d8ecc87fb6a21dbb1ce4621a3079a718c30325e8e6b559cee9eeb670c4368661ea83073f0e238ac7d93712e57f450c755972a80b249bd7cbc14bb2df20cc82e4a7c84d5cc272ed82ec40cf299c09a35e79beea812374cb4c50113256274dd0ff25f8955dd258ee51b365a141344e0506011d15b6c362e15086565e0949504931ea489eb6664888121efbd887fd0696159d5631e6d265251a3aa071a146d6c53c47c8bb04c5d9ceea98c743ccae1922b07f384a733fe"}}, &(0x7f0000000680)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x425}}}, &(0x7f0000000940)={0x44, &(0x7f0000000700)={0x0, 0xa, 0x5c, "6096e97a7ce6e05ad3e6f316dae3969e3757708dc28df101881383225f1b60b4d3f5b9c1814f77b04773a98d345faddd7119ddd79891528e0cd673e48696363be927ee9cdcc9a194a0d5a2456e9c9459adb2954630082b27a895e865"}, &(0x7f0000000780)={0x0, 0xa, 0x1, 0x7f}, &(0x7f00000007c0)={0x0, 0x8, 0x1, 0x81}, &(0x7f0000000800)={0x20, 0x81, 0x2, 'J0'}, &(0x7f0000000840)={0x20, 0x82, 0x2, "8367"}, &(0x7f0000000880)={0x20, 0x83, 0x1, "81"}, &(0x7f00000008c0)={0x20, 0x84, 0x2, "f43c"}, &(0x7f0000000900)={0x20, 0x85, 0x3, "71d512"}}) ioctl$SNDCTL_SYNTH_MEMAVL(r0, 0xc004510e, &(0x7f0000001d40)) 4.138924556s ago: executing program 2 (id=626): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x40000) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@ipv4_delroute={0x2c, 0x19, 0x1, 0x1, 0x25dfdbfd, {0x2, 0x14, 0x0, 0x4, 0xff, 0x0, 0x48, 0xb, 0x2000}, [@RTA_GATEWAY={0x8, 0x5, @empty}, @RTA_DST={0x8, 0x1, @private=0xa010101}]}, 0x2c}, 0x1, 0xba01}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndctrl(&(0x7f0000000e00), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r2, 0xc1105511, &(0x7f00000000c0)={{0xc, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x0, [0x0, 0x100, 0x7ffc, 0x0, 0x9, 0x100000000, 0x0, 0x4, 0x8, 0x0, 0xc3, 0x7f, 0x1, 0x0, 0x8000000, 0x0, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x100000000, 0xffffffffffffffff, 0x0, 0x5, 0x4, 0x4, 0x10000002, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0xfffffffe, 0x0, 0x6, 0xfffffdfffffffffe, 0x4, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3fd, 0xb4e, 0xffffffff, 0x0, 0xfffffffc, 0x1, 0x0, 0x0, 0xd87, 0x0, 0x41, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x0, 0xdf9cd8e, 0x8000200, 0x6, 0x5, 0x0, 0x3ec, 0x0, 0xbb, 0x200000, 0x0, 0x0, 0xfffffffe, 0x7, 0x7ffffffd, 0x3, 0x0, 0xffffffffffff2328, 0x2, 0x3, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x8, 0x4, 0x0, 0x0, 0xb, 0x1, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff]}) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r3 = io_uring_setup(0xd71, &(0x7f0000000080)={0x0, 0x0, 0x2}) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f00000002c0), 0x0) mremap(&(0x7f00003eb000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000003000/0x1000)=nil) fsopen(&(0x7f00000029c0)='cifs\x00', 0x0) socketpair$tipc(0x1e, 0x1, 0x0, 0x0) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}, 0x4000041) r4 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x1, 0x183003) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r4, 0x80dc5521, &(0x7f00000011c0)=""/230) 4.087532177s ago: executing program 2 (id=627): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000580)="d8000000200081044e81f782db44b90402000000e8fe55a11800150006001c0000000e120900100000000401a80016000a0011400600000003080000004dcf5c0468c1d67f6f94007134cf6ee08088568ab35d6e7016bb234841ef52b49816277ce06bbace806069438e6fb599e0ced72a6ba86cf917cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b10d414f00004d9db22fe7c9f8775730d16a4683f1aea4edbb57a5025ccca9e00360db70100000040fad95667e006d8df969b3ef35ce34d4a13821f4fbb9ad809d561cdce81ed0bffece0b42a9e", 0xd8}], 0x1}, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000040}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) socket(0x200000000000011, 0x2, 0x1) r1 = socket(0x2b, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000180)={@loopback, 0x8000000, 0x0, 0xff, 0x1}, 0x20) sched_setscheduler(0x0, 0x1, 0x0) r3 = getpid() bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000180)=r4, 0x4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xfc}}, 0x0) sched_setscheduler(r3, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet(0x2, 0x2, 0x1) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000180)={@mcast1, 0x8000000, 0x0, 0xff, 0x0, 0x4}, 0x20) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r6, 0xffffffffffffffff, 0x0) 3.998131009s ago: executing program 2 (id=628): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) setsockopt$TIPC_CONN_TIMEOUT(r2, 0x10f, 0x8a, 0x0, 0x2e) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CAP_DISABLE_QUIRKS(r4, 0x4068aea3, &(0x7f0000000200)={0x74, 0x0, 0x10}) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) setfsuid(0xffffffffffffffff) r5 = syz_clone(0x100011, 0x0, 0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x24048055}, 0x0) wait4(r5, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) socketpair$unix(0x1, 0x1, 0x0, 0x0) mincore(&(0x7f00001b0000/0x3000)=nil, 0x3000, &(0x7f0000000480)=""/153) syz_usb_connect(0x3, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="12011200b5403340861a2275363501020301090212000100000000"], 0x0) r6 = socket$inet(0x2, 0x3, 0x6) ioctl$sock_inet_SIOCSARP(r6, 0x8955, &(0x7f0000000000)={{0x2, 0x0, @dev}, {0x1, @local}, 0x4a, {0x2, 0x0, @dev}}) 3.879421613s ago: executing program 1 (id=629): socket$igmp6(0xa, 0x3, 0x2) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'ecryptfs', 0x20, 'trusted:', 'syz', 0x20, 0x8000000000000001}, 0x23, 0xfffffffffffffffa) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000040)={0xa}, 0x1) r1 = accept$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000000c0)=0x14) sendto$packet(r1, &(0x7f0000000180), 0x0, 0x0, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000100)="b8", 0xffe0, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) 3.666086109s ago: executing program 1 (id=631): syz_mount_image$fuse(0x0, 0x0, 0x8, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x1f0}}, 0x0) (fail_nth: 5) 3.322023152s ago: executing program 1 (id=632): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0xe26, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000000200)={r4, 0x1}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f00000000c0)={r4, 0x400}, 0x8) connect$inet(r0, &(0x7f00000002c0)={0x2, 0x461f, @private=0xa010100}, 0x10) setsockopt$IP_VS_SO_SET_DEL(r0, 0x0, 0x484, &(0x7f0000000040)={0x5c, @private=0xa010101, 0x4e22, 0x2, 'lblcr\x00', 0xc, 0xc, 0x3f}, 0x2c) r5 = socket$inet(0xa, 0x801, 0x84) listen(r5, 0xfff7fffd) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(0xffffffffffffffff, 0xa3d, 0x0, 0x0, 0x0, 0xff39) 3.212895622s ago: executing program 3 (id=633): openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x41, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) syz_open_dev$sndmidi(0x0, 0x2, 0x141101) (async, rerun: 32) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 32) connect$unix(r0, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) (async) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') (async) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x11c0, 0x0) (async) r3 = io_uring_setup(0x6001, &(0x7f0000000080)={0x0, 0xeec2, 0x800, 0x2, 0x116}) close_range(r3, r3, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40041, 0x0) (async, rerun: 32) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) (rerun: 32) lseek(r2, 0x6, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r6 = socket(0x400000000010, 0x3, 0x0) (async) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=@newtfilter={0x84, 0x2c, 0xd27, 0x70bd26, 0x25dfdc00, {0x0, 0x0, 0x0, r8, {0x2, 0x4}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x6, 0x1000, 0x20000000, 0xfffffffc, 0x7ff}}]}, {0x4}, {0x2, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) (async, rerun: 64) r9 = getpid() (rerun: 64) prctl$PR_SCHED_CORE(0x3e, 0x0, r9, 0x1, &(0x7f0000000140)) (async, rerun: 64) sendmsg$nl_route_sched(r4, &(0x7f0000000700)={0x0, 0x1e5, &(0x7f00000006c0)={&(0x7f0000000440)=@deltaction={0x28, 0x32, 0x101, 0x0, 0x0, {}, [@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}]}]}, 0x28}}, 0x0) (async, rerun: 64) unshare(0x2040400) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) (async) unshare(0x2000400) 2.89404371s ago: executing program 1 (id=634): sendmmsg$unix(0xffffffffffffffff, &(0x7f000000a3c0)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000002700)="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", 0xff9}, {&(0x7f0000003700)="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", 0x7d1}, {0x0}], 0x3, 0x0, 0x38, 0x4000}}], 0x1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) (fail_nth: 5) 2.387178156s ago: executing program 0 (id=635): syz_mount_image$fuse(0x0, 0x0, 0x8, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000140)='.\x00', 0x400000b2) r1 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x80) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = memfd_create(&(0x7f00000000c0)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\x13\xda\xf9\xcd7el\xb7\xe6\b\x00\x00\x00\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\x9c;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x14t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xf9\x02S;C\x99\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\an0\xebB\xb8}&\xdd\xc9\xa7\x1dp\t\x9a\xceb \x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xa0\xc9\b\x00\x81Ks\xba\xbbC6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xe6\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x14\xb1`\x87#X\\W`;\'_4\xc5\xc9\x921<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\x02\x00\x00\x00\x8aeh;F[\xe2\x1c\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\xc2sB\xe7\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00J[\xc4\x04\xc1\xa6\x10\xc2\x9d\x11\t|\xc0\t\xd9(\x80\xe6s\xaa\x88\x8a\xd6\xa2\x01\x10W]Z\x8d\xf7\xd1P\xf9d\x01|\xa3\x03hSq\x95\x8f\xe1J\xd3#/fcCz\xff\x80\xe2M\xa3-r\xf6\x1a\xd74\xdc\xe1\xe4\xc3\x9dU t}\x02\x9a{C|S\xf4\x98\x05\xb9\x15}\xfa\"\xdc\xc2r\xf9\a\xadnD\xb6\x06\xd3\'\x10\x9f|\x17\xd6\x89O\f\x98@\x85\xa5m\x9d\\&\x17o\x11Z=l\xfb\x93\x8exZ', 0x6) ftruncate(r4, 0x7fffffffffffffff) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4000000004002, 0x0) r6 = syz_io_uring_setup(0xcaf, &(0x7f0000000100)={0x0, 0xb601, 0x0, 0x0, 0x17a}, &(0x7f0000000240)=0x0, &(0x7f00000000c0)=0x0) ioctl$SNDRV_PCM_IOCTL_CHANNEL_INFO(r6, 0x80184132, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r5, 0xc000000, &(0x7f00000001c0)=[{&(0x7f0000000280)=""/4096, 0x1000}], 0x1, 0x1e}) io_uring_enter(r6, 0x847ba, 0x20000000, 0xe, 0x0, 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x901900, 0x0) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001380)=@expire={0x1e4, 0x18, 0x100, 0x70bd27, 0x25dfdbfc, {{{@in6=@mcast1, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e23, 0x0, 0x4e24, 0x0, 0x14, 0x80, 0x1e0}, {@in6=@remote, 0x4d6, 0x2b}, @in6=@local, {0x1000, 0x9, 0x7, 0x7fffffffffffffff, 0xffc0, 0x6, 0x1000, 0x7ff}, {0x5, 0x8, 0x101, 0x5}, {0x523, 0x401, 0xc}, 0x70bd27, 0x4, 0xa, 0x4, 0x6, 0x4}, 0x35}, [@XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x1}, @sa={0xe4, 0x6, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@remote, 0x4e21, 0x7, 0x4e20, 0xfe00, 0xa, 0x80, 0xa0, 0x89}, {@in=@loopback, 0x4d6, 0x2b}, @in=@remote, {0x5, 0x7, 0x9, 0x1, 0x314f, 0xe8, 0x9, 0x4}, {0x40, 0x4, 0xdf6, 0x10001}, {0xfffffc01, 0x3, 0x81}, 0x70bd2c, 0x34ff, 0xa, 0x1, 0x4, 0x6}}]}, 0x1e4}, 0x1, 0x0, 0x0, 0x20000000}, 0x84) r11 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000040)={0x0, 0x100}, 0x0) ioctl$KVM_GET_STATS_FD_vm(r11, 0xaece) fcntl$notify(r1, 0x402, 0x1e) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r12, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x1f0}}, 0x0) r13 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r1) sendmsg$BATADV_CMD_GET_NEIGHBORS(r1, &(0x7f0000000300)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x24, r13, 0x200, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x100}]}, 0x24}, 0x1, 0x0, 0x0, 0x44000}, 0x40000) 2.26900779s ago: executing program 1 (id=636): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket(0x1d, 0x2, 0x6) r2 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe) keyctl$read(0xb, r2, &(0x7f0000001300)=""/4096, 0xffffffffffffffd2) r3 = epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000200)={0x10}) ioctl$VIDIOC_S_SELECTION(0xffffffffffffffff, 0xc040565f, &(0x7f0000000040)={0x9, 0x100, 0x0, {0xfffffffd, 0x4, 0xb, 0x8001}}) r5 = open(0x0, 0x64842, 0x389b0d52417bb201) pwritev2(r5, &(0x7f0000000240), 0x0, 0x7000, 0x0, 0x3) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_i', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r7, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x102) r8 = socket$qrtr(0x2a, 0x2, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newlink={0x38, 0x10, 0x401, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x137b, 0xc001}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_PDP_HASHSIZE={0x8, 0x3, 0xfffffffb}]}}}]}, 0x38}}, 0x20000844) r10 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000000c0), 0x92e82) write$binfmt_aout(r10, 0x0, 0xc8) sendmsg$sock(r8, &(0x7f0000001540)={&(0x7f0000000140)=@pppoe={0x2a, 0x0, {0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3c}, 'lo\x00'}}, 0x80, 0x0}, 0x40000c0) r11 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r11, 0xffffffffffffffff, 0x0) r12 = syz_usb_connect(0x3, 0x3c, &(0x7f0000000380)=ANY=[@ANYBLOB="120101000814c910be0632a2f333010203010902120001000000000904"], 0x0) syz_usb_control_io(r12, 0x0, 0x0) syz_usb_control_io$uac1(r12, 0x0, 0x0) 1.753562949s ago: executing program 3 (id=637): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x40000) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@ipv4_delroute={0x2c, 0x19, 0x1, 0x1, 0x25dfdbfd, {0x2, 0x14, 0x0, 0x4, 0xff, 0x0, 0x48, 0xb, 0x2000}, [@RTA_GATEWAY={0x8, 0x5, @empty}, @RTA_DST={0x8, 0x1, @private=0xa010101}]}, 0x2c}, 0x1, 0xba01}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndctrl(&(0x7f0000000e00), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r2, 0xc1105511, &(0x7f00000000c0)={{0xc, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x0, [0x0, 0x100, 0x7ffc, 0x0, 0x9, 0x100000000, 0x0, 0x4, 0x8, 0x0, 0xc3, 0x7f, 0x1, 0x0, 0x8000000, 0x0, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x100000000, 0xffffffffffffffff, 0x0, 0x5, 0x4, 0x4, 0x10000002, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0xfffffffe, 0x0, 0x6, 0xfffffdfffffffffe, 0x4, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3fd, 0xb4e, 0xffffffff, 0x0, 0xfffffffc, 0x1, 0x0, 0x0, 0xd87, 0x0, 0x41, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x0, 0xdf9cd8e, 0x8000200, 0x6, 0x5, 0x0, 0x3ec, 0x0, 0xbb, 0x200000, 0x0, 0x0, 0xfffffffe, 0x7, 0x7ffffffd, 0x3, 0x0, 0xffffffffffff2328, 0x2, 0x3, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x8, 0x4, 0x0, 0x0, 0xb, 0x1, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff]}) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r3 = io_uring_setup(0xd71, &(0x7f0000000080)={0x0, 0x0, 0x2}) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f00000002c0), 0x0) mremap(&(0x7f00003eb000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000003000/0x1000)=nil) fsopen(&(0x7f00000029c0)='cifs\x00', 0x0) socketpair$tipc(0x1e, 0x1, 0x0, 0x0) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}, 0x4000041) r4 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x1, 0x183003) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r4, 0x80dc5521, &(0x7f00000011c0)=""/230) 1.668930578s ago: executing program 3 (id=638): close(0x3) 1.5975326s ago: executing program 4 (id=639): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="28000000190001000000000000000000021800000000ff000000000008"], 0x28}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0xef, &(0x7f00000000c0)={0x0}, 0x9, 0x0, 0x400000000000000, 0x4000001}, 0x40000) 1.509788505s ago: executing program 3 (id=640): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000400)='net/ip_tables_names\x00') r0 = socket$nl_route(0x10, 0x3, 0x0) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) openat$drirender128(0xffffffffffffff9c, &(0x7f00000003c0), 0x101000, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_open_dev$video4linux(&(0x7f0000000040), 0x7fff, 0x48b03) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r2, 0x80085665, &(0x7f00000000c0)={0x3, 0x1ff, 0x2}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_open_dev$video4linux(0x0, 0x3, 0x3cf281) syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) close(r3) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) getpid() syz_80211_join_ibss(&(0x7f0000000200)='wlan0\x00', &(0x7f00000002c0)=@default_ap_ssid, 0x6, 0x1) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="54000000020601080000000000000000000000000c00078008000640000000000500010006000000050005000a00000005000400000000000900020073797a31000000000d000300686173683a6e6574"], 0x54}, 0x1, 0x0, 0x0, 0x48000}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c0007801800018014000240"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) sendmsg$IPSET_CMD_DESTROY(r5, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x4080) fsetxattr$security_capability(r4, &(0x7f0000000300), &(0x7f0000000340)=@v2={0x2000000, [{0x4be76ba2}, {0x4, 0xfffffffd}]}, 0x14, 0x3) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYRES8], 0x3c}, 0x1, 0x0, 0x0, 0x20008800}, 0x200000a0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=@newlink={0x38, 0x10, 0x1, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x1181}, [@IFLA_IFNAME={0x14, 0x3, 'bridge_slave_0\x00'}, @IFLA_IFALIASn={0x4}]}, 0x38}}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040), 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) 1.446570464s ago: executing program 4 (id=641): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r0 = getpgid(0x0) r1 = syz_pidfd_open(r0, 0x0) pidfd_send_signal(r1, 0x21, 0x0, 0x4) syz_usb_connect(0x5, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000024917720042322023f77010203010902120001000010000904"], 0x0) r2 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003) ioctl$I2C_RDWR(r2, 0x707, &(0x7f00000001c0)={&(0x7f0000000200)=[{0xe4, 0x2239, 0x0, 0x0}, {0x101, 0x201, 0x0, 0x0}], 0x2}) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) r5 = syz_open_dev$media(&(0x7f00000006c0), 0x4007, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r5, 0x80047c05, &(0x7f0000000940)=0xffffffffffffffff) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r6, 0x7c80, 0x0) unshare(0x600) r7 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r7, 0x4008af00, &(0x7f0000000000)=0x200000000) r8 = syz_open_dev$video4linux(&(0x7f0000000140), 0x6, 0x40440) ioctl$VIDIOC_G_DV_TIMINGS(r8, 0xc0845658, &(0x7f0000000280)={0x0, @bt={0x3, 0x10000, 0x0, 0x1, 0x80, 0x2, 0x8, 0xfff, 0x8001, 0x3, 0x8, 0x1, 0x5, 0x1, 0x14, 0xa, {0x7a1c, 0x4}, 0x6, 0xaf}}) write$vhost_msg_v2(r7, &(0x7f0000000200)={0x2, 0x0, {&(0x7f0000000340)=""/185, 0xb9, 0x0, 0x2, 0x2}}, 0x48) write$vhost_msg_v2(r7, &(0x7f0000000640)={0x2, 0x0, {&(0x7f0000001900)=""/4096, 0x1000, 0x0, 0x2, 0x2}}, 0x48) write$vhost_msg(r7, &(0x7f0000000100)={0x1, {&(0x7f00000007c0)=""/194, 0xc2, 0x0, 0x3, 0x2}}, 0x48) write$vhost_msg(r7, &(0x7f0000000540)={0x1, {&(0x7f0000000040)=""/62, 0x3e, 0x0, 0x2, 0x2}}, 0x48) write$vhost_msg_v2(r7, &(0x7f00000008c0)={0x2, 0x0, {&(0x7f0000000600)=""/13, 0xd, 0x0, 0x2, 0x2}}, 0x48) write$vhost_msg_v2(r7, &(0x7f00000004c0)={0x2, 0x0, {&(0x7f00000006c0)=""/192, 0xc0, 0x0, 0x3, 0x2}}, 0x48) write$vhost_msg_v2(r7, &(0x7f0000000180)={0x2, 0x0, {&(0x7f0000000280)=""/184, 0x2562bac182d8b35a, 0x0, 0x2, 0x3}}, 0x48) setsockopt$inet6_udp_int(r4, 0x11, 0x67, &(0x7f0000000180)=0x3, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'macsec0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="440000001000010030000000ffdbdf2500000000", @ANYRES32=r10, @ANYBLOB="0000000000100000240012800b0001006d616373656300001400028005000f"], 0x44}}, 0x0) 1.419387401s ago: executing program 0 (id=642): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xefff, &(0x7f0000000500)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef43c000000e3bd6efb440009000e000a0010000000ba8000001201", 0x2e}], 0x1}, 0x0) 1.109856935s ago: executing program 0 (id=643): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x100000}, 0x0, &(0x7f0000000240)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6a9}, 0x0, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x50, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x50}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="7400000009060102f9ef000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) recvmmsg(r4, &(0x7f0000003840)=[{{0x0, 0x0, &(0x7f0000002780)=[{&(0x7f00000002c0)=""/127, 0x7f}, {&(0x7f0000000340)=""/240, 0xf0}, {&(0x7f0000000440)=""/96, 0x60}, {&(0x7f00000004c0)=""/77, 0x4d}, {&(0x7f00000016c0)=""/4096, 0x1000}], 0x5}, 0x1}], 0x400000000000141, 0x20, 0x0) bind$unix(r1, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r5 = socket$pppoe(0x18, 0x1, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x24, 0x40, 0x107, 0xfffffffe, 0x0, {0x2, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x40800}, 0xc000) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_CONFIG(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x1c, r8, 0x1, 0x0, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x90) sendmsg$IPVS_CMD_DEL_DEST(r6, &(0x7f0000000540)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r8, 0x300, 0x70bd2d, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000010}, 0x804) getsockopt$sock_buf(r5, 0x1, 0x1c, &(0x7f0000000280)=""/126, &(0x7f0000000240)=0x7e) connect$unix(r0, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 567.559885ms ago: executing program 3 (id=644): setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000001280)=ANY=[@ANYBLOB="12010003001f66088f0510660548020003010902120001049570810904008100ffffff02"], &(0x7f0000001700)={0xffffffa0, 0x0, 0x0, 0x0, 0x23}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$apparmor_current(r2, &(0x7f00000003c0)=ANY=[], 0x1b) vmsplice(r1, &(0x7f0000000ac0)=[{&(0x7f0000000540)="ee97d1cdcd", 0x5}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0xff96}, {0x0}, {0x0}, {0x0}], 0x9, 0x0) r3 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) writev(r3, &(0x7f0000000180)=[{&(0x7f0000000040)="e2", 0x1}], 0x1) ioctl$HIDIOCGUSAGES(0xffffffffffffffff, 0xd01c4813, &(0x7f0000001740)={{0x2, 0x100, 0x8, 0x5, 0x7, 0x5}, 0x2cf, [0x5, 0xfd1, 0x0, 0xfffffffc, 0x3, 0x2, 0xd, 0x400000, 0x1ff, 0x6, 0xfff, 0x800, 0xa, 0x5, 0x2, 0x8, 0x7ff, 0x200, 0x8, 0x6, 0xbc10, 0x9, 0x3, 0x3, 0x1, 0x8d1, 0x4, 0x3, 0x0, 0xe9d4, 0x4, 0x0, 0x4, 0x63a, 0x2, 0xd, 0x8, 0x8a800, 0x80, 0x6, 0xa, 0x1b0, 0x0, 0x8, 0xfffff9b7, 0xff, 0x7, 0x2, 0xfa, 0x3, 0x5e2, 0xffffffc0, 0x6, 0x2, 0xfffffffc, 0x6ee0, 0xf, 0x5, 0x16c9fc0a, 0x7, 0x27d38e92, 0x5, 0x2, 0x1, 0xf2, 0x4, 0x5, 0x7, 0x9, 0x6, 0xfc1, 0xe8, 0x0, 0x1, 0x2, 0x1, 0x1, 0x9, 0x1, 0xffffc56c, 0x6, 0x63, 0x6, 0x80, 0x3, 0x152, 0x52, 0x2, 0x3, 0xcf0, 0x1, 0x5f7d7f0b, 0x3, 0x4, 0x1, 0x1, 0x3b, 0x5, 0x5, 0x0, 0x5, 0x913, 0x4805d5d9, 0x3, 0x8000000, 0x58, 0x4, 0x1ff, 0x6, 0x5, 0x2, 0x2, 0x1, 0x6, 0x5, 0x400, 0x10001, 0x800, 0x200, 0x476b, 0xfffffc00, 0x7fff, 0xee, 0x8, 0x9, 0x8, 0x1, 0x9, 0x2, 0xffff0001, 0x80000000, 0x1, 0x0, 0x3, 0x3, 0x7, 0x5, 0x3, 0xb05, 0x9, 0x7, 0x8, 0x2, 0x7fff, 0x2, 0x0, 0x2, 0x5, 0x9, 0xc5e, 0xa8, 0xb, 0x4, 0x2fd4, 0x1, 0x10001, 0x6, 0x0, 0x7fff, 0x1, 0x8001, 0x5, 0x3a, 0x5, 0x2b, 0x4, 0x1, 0x10000, 0xca7a, 0x80000000, 0xb, 0x3, 0x1, 0xcb, 0x2, 0xfb59, 0x8001, 0x7e9, 0x8, 0x0, 0x7ff, 0x0, 0xd5, 0x3, 0xffff, 0x0, 0xffffff00, 0x2, 0x7, 0x8, 0x4, 0x432, 0x7, 0x9, 0x5, 0x1, 0xd, 0x2, 0x80000001, 0x6, 0x400, 0x5, 0x1, 0x6, 0xf6d3, 0x7, 0x4f, 0x2, 0x1, 0x10000, 0x43, 0x3b, 0xb1, 0x0, 0xff, 0x385, 0x800, 0x400, 0x0, 0x2, 0xe, 0x896, 0x7d, 0xe, 0x1, 0x80000001, 0x0, 0x1, 0x6, 0xffffffff, 0xc, 0x10000, 0xfffffe28, 0xfffffff5, 0x4, 0x5, 0x8, 0x8, 0x0, 0x546b, 0x7, 0x7, 0x1, 0xcd, 0x7fffffff, 0xffffff80, 0x5, 0x18, 0x0, 0x9, 0x9, 0x8, 0xfba4, 0x6, 0xd, 0x80000000, 0x9, 0x92, 0x4, 0xf, 0x2, 0xda, 0x1, 0x3, 0x7fff, 0x0, 0x131, 0x0, 0xfffffffa, 0x1, 0x1, 0x7, 0x1, 0x3, 0x6, 0x8, 0xff, 0x7, 0x7, 0x8, 0x1, 0x7, 0x80000000, 0xfffffff7, 0x4, 0x8f, 0x10000, 0x100, 0x80, 0x1, 0xb42, 0x795, 0x9, 0x2, 0x5, 0x69b8, 0x3, 0x401, 0x101, 0x7, 0x8, 0x6, 0x5, 0x5f, 0x9, 0x2, 0xd62, 0x1cb800, 0xaf8, 0xc65, 0x100, 0x5, 0x200, 0x3, 0x3, 0x1, 0x6, 0x401, 0x3, 0x10001, 0x8, 0x6, 0x7, 0x2, 0x3, 0x389429be, 0x401, 0x1, 0x6, 0x4, 0x7, 0x4, 0xfff, 0xa, 0xcaaf, 0x5, 0x3, 0x8, 0x0, 0x3, 0x1, 0x8, 0x5, 0x5, 0x80000000, 0x0, 0x5, 0xa7f, 0xe, 0x7, 0x4, 0x80, 0x7, 0x3, 0x3, 0x7, 0x1ad, 0x2, 0x0, 0x5, 0x10, 0x6, 0x10, 0x4, 0x0, 0x384, 0x9, 0x3, 0x4, 0x6, 0x10001, 0x0, 0x1ff, 0x1, 0x9, 0x200, 0x3247, 0x6, 0xfffffff9, 0x5, 0x1, 0xda5, 0x1, 0x2, 0x6, 0xd, 0x4, 0x61de, 0x8, 0x21b, 0x80000000, 0x8, 0x18a7, 0x1ff, 0x7, 0x0, 0x3, 0x400, 0x1, 0x1, 0xaa, 0xa, 0xc, 0x3, 0x5, 0x3ff, 0x6, 0xf, 0x7f, 0x8, 0x4, 0x3, 0x40, 0xfffffffd, 0x8, 0x7c, 0x9, 0x0, 0x8, 0x400, 0xee, 0xffffffff, 0x1, 0x6, 0x6, 0x0, 0x7, 0x8, 0x8, 0x6, 0x80, 0x9, 0x0, 0x2, 0x6, 0xe08, 0xa, 0x96d1, 0x5, 0x6, 0x3, 0xb, 0x3, 0x6, 0x8, 0x5, 0x7f, 0x101, 0x4b, 0xff, 0x0, 0x50f, 0x5b, 0x0, 0x6, 0x1e4, 0x2b7, 0x1, 0x0, 0x13, 0x101, 0xd, 0x8, 0x8, 0x9a, 0x8, 0x401, 0x100, 0x2, 0x9, 0x371f, 0x5, 0x1, 0x7, 0xa93, 0x1, 0x7, 0x8, 0x4, 0x6, 0x7, 0x1, 0x1, 0x3, 0x4, 0x101, 0x10001, 0x10, 0x7f, 0x9, 0x6, 0xd, 0x9, 0xb36, 0xf0, 0x5, 0x5, 0x2, 0x10, 0x8bb, 0x2, 0x9, 0x6, 0x5, 0x9, 0x2, 0x8, 0x4b, 0x4df4cf30, 0x7fffffff, 0x0, 0x5, 0xfffeffff, 0x5, 0x9, 0x591bce37, 0x0, 0x1ff00, 0x3285, 0x6, 0x4000000, 0x80000001, 0xfa7, 0xb8, 0x14b, 0x20, 0xe59f, 0x46, 0x5, 0x1f, 0x1, 0x40, 0x80000000, 0x7, 0x1, 0x8, 0x3, 0xffff2cb8, 0x0, 0x0, 0x9, 0x80000000, 0x0, 0x3, 0x0, 0x6, 0x70000, 0x71e1, 0xffff, 0xc9e, 0x7fff, 0xd, 0x5, 0x1, 0x4e5, 0x7c5fdc4c, 0x5, 0x48d, 0x7, 0x4, 0xfffffffb, 0x700, 0x1, 0x4, 0xfffffffc, 0x4, 0x3, 0x9, 0x9, 0x7, 0x5, 0x7ff, 0x0, 0x7f, 0x4, 0x200, 0x4, 0xb, 0x3, 0x1, 0x4ab, 0x1000, 0x1, 0x4, 0x92dd, 0x0, 0x0, 0xffff, 0x0, 0xed60, 0x586, 0x4, 0x3000000, 0x6, 0x6, 0x1, 0x3, 0x3, 0x2e8, 0xab7a, 0x7f, 0x3, 0x8, 0xf, 0x5f, 0x6, 0x4000, 0x1, 0x9, 0x1, 0x9, 0x1, 0x80000000, 0xa, 0x0, 0x101, 0x9, 0x7, 0x400, 0x10, 0xfffffffd, 0x2, 0x8, 0x6, 0x8, 0x1, 0x6, 0x7, 0xffffc000, 0xb54, 0x0, 0x2, 0x4, 0x608, 0x3, 0x8, 0x6, 0x3a, 0x1, 0x0, 0x2, 0x4, 0x0, 0x7, 0x3f7d3e9f, 0x5bca, 0x401, 0x10, 0x8, 0x1, 0x6, 0x9, 0x7, 0x2, 0x4e, 0x1000, 0xd419, 0x5, 0xc0, 0x1, 0x9, 0x4, 0x7f, 0x7, 0x6, 0x6, 0x7, 0x0, 0x12820a69, 0x8, 0x3, 0x10, 0xffff, 0x8000800, 0x7, 0x3, 0x2, 0x9, 0x9, 0x1, 0x10000, 0x2, 0x1, 0x0, 0xfffffffd, 0x101, 0x0, 0x9, 0x7e, 0x1, 0x7, 0x80000001, 0x2, 0x5bcb810c, 0x5, 0x1d65, 0x3, 0x6, 0x2, 0x2, 0x800, 0x2, 0x8, 0x2384, 0x400, 0x1, 0x6, 0x2ae, 0x7, 0x2, 0x8, 0x4, 0x8, 0xe, 0x80, 0x10000, 0x5, 0x6, 0x5, 0x40, 0x8, 0x5, 0x2, 0x4, 0x2, 0x9, 0x4, 0x4, 0xffffff9d, 0x400, 0x2, 0xffffffff, 0x7, 0x401, 0x7, 0x40, 0x9, 0x9, 0xffffff80, 0xe, 0x9, 0x9, 0x401, 0x99e, 0x3, 0x3, 0x81, 0x101, 0x80000001, 0x0, 0x7, 0xfff, 0x5, 0x8000, 0x0, 0x7, 0x0, 0x7, 0x5, 0x1, 0x0, 0xff, 0x6, 0xd, 0x3, 0x0, 0x6, 0x2, 0x7, 0x0, 0x7, 0x3, 0x6, 0x8, 0x9, 0x8, 0x8000, 0xf, 0xfe2, 0x6, 0x26b1, 0x0, 0x7, 0x4, 0x200, 0xb, 0xc8, 0x4, 0x7fffffff, 0x5, 0x5668, 0x6, 0x8001, 0xfffff466, 0x6, 0x1, 0x0, 0xb, 0x400, 0x200, 0x10001, 0x3a8, 0x8, 0x2, 0x8, 0x3, 0x9, 0x5, 0x3, 0x7ff, 0x79, 0x2, 0x80, 0x7, 0x80, 0x6, 0x10, 0x478, 0x8, 0x3, 0x80000000, 0x6, 0x3, 0x0, 0x6, 0x7, 0x881d, 0xf8, 0xebe6, 0x7f, 0x7fff, 0x7ff, 0x4, 0x7, 0x800, 0x17, 0x0, 0x3ff, 0xffff, 0x9, 0xfff, 0x10, 0x6, 0x1, 0xffff, 0x5d15f75e, 0x9, 0xfff, 0x4, 0x2, 0xfffffffd, 0x484, 0x400, 0x3, 0x7, 0x4, 0x0, 0x9, 0x3, 0x8, 0x8, 0x2, 0x8, 0x5, 0x1, 0x3, 0x1, 0x7fffffff, 0x6, 0x9000000, 0x200, 0x2, 0x1, 0x46c8, 0x6, 0x8000, 0x1, 0xf1e, 0xb416, 0xb6b, 0x7, 0x1, 0x5, 0x3, 0x8, 0xffff, 0x7, 0x6, 0x1, 0x9ec, 0xc, 0x81, 0xc7e, 0x1, 0x2a4, 0x3, 0x8, 0x8, 0x0, 0x1, 0x9, 0x8dd6, 0x80000001, 0x0, 0xb50, 0x3, 0x200, 0x7, 0x8, 0x9, 0x1, 0x1, 0x0, 0x9, 0x2, 0x9, 0x0, 0x4, 0x8, 0x7, 0x8, 0x2, 0x5598, 0xffff, 0xe57, 0xfffff016, 0xfff, 0x6d028a56, 0xff, 0x7, 0x6, 0xdcf, 0x6, 0x383e, 0x8, 0x1, 0x5, 0x7ff, 0x9, 0x1, 0xc0cd, 0x8, 0x10001, 0x4, 0x3, 0x7, 0x238, 0xf8f4, 0xd, 0x22, 0x3, 0x6, 0x400, 0x3, 0x7a4, 0x5, 0x3, 0x3, 0x4, 0x4, 0x0, 0x1a, 0x9, 0x5, 0x9, 0x8, 0x1, 0x3, 0xfff, 0x31a4, 0xfff, 0x3, 0x5, 0x7f, 0x8, 0xdf, 0x3, 0x9, 0x5, 0x79f, 0x7, 0x4, 0x4, 0xf5, 0xffffffff, 0x3, 0x0, 0x5, 0x0, 0x5, 0x200, 0x2, 0x1fc00, 0x2, 0x10001, 0xfffff800, 0xfffffffc, 0xe, 0x6, 0x101, 0x4, 0x9, 0x5, 0x8, 0x8000, 0x5, 0xc22, 0x31, 0x6, 0x5, 0x1000, 0x80000001, 0x9, 0x279, 0x6, 0x0, 0xfffffffa, 0x3, 0x0, 0x2, 0xa, 0xbab, 0x1, 0x8c16]}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000640)={0x44, &(0x7f0000000400)=ANY=[@ANYBLOB="400e4000009d"], 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="2009014092a1c0"], 0x0, 0x0}) socket$nl_route(0x10, 0x3, 0x0) openat$kvm(0xffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000300)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f00000000c0), 0x4) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="0c04000010000104000000000000000000480000", @ANYRES32=r6, @ANYBLOB="10100000000000000800002005000000e4031680a40001800c00070000000000adffffff0c00", @ANYRES16=r6], 0x40c}}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000000140)}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x18000000, 0x0, 0x5, 0x9, 0x8, 0x80000001, 0x5}, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x40000021, 0x0, 0x0) syz_usb_connect(0x3, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000061c2f20c81403006c050102030109021b00010000000009040000018ea44300090585", @ANYRES8], 0x0) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000140)={0x0, 0x5, 0x1, {0xa, @pix_mp={0x9, 0x81, 0x0, 0x8, 0xa, [{0xd, 0x2}, {0x3, 0x8000}, {0xa64a80ed, 0x7fffffff}, {0x200, 0x3ff}, {0x5, 0x1}, {0x4ce, 0x8}, {0x7ff, 0x9}, {0x6, 0x1}], 0x7, 0xff, 0x6, 0x1, 0x5}}}) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000003, 0x6031, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x1, &(0x7f0000002600)=[&(0x7f0000ffc000/0x1000)=nil], &(0x7f0000002640)=[0x1], &(0x7f0000000000), 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) 320.231369ms ago: executing program 2 (id=645): ioctl$USBDEVFS_DISCONNECT_CLAIM(0xffffffffffffffff, 0x8108551b, 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) shutdown(0xffffffffffffffff, 0x1) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0xe26, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10) connect$inet(r0, &(0x7f00000002c0)={0x2, 0x4620, @empty}, 0x10) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) setsockopt$IP_VS_SO_SET_TIMEOUT(r0, 0x0, 0x48a, &(0x7f00000003c0)={0xb, 0x9, 0x9}, 0xc) 194.017918ms ago: executing program 0 (id=646): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'veth0_macvtap\x00', 0x10}) r1 = socket$inet_sctp(0x2, 0x1, 0x84) dup2(r0, r1) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) close(0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r5 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89d, 0xc000, 0xa, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0xfff0}, {0xe, 0xffff}}}, 0x24}}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r6 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r5, 0x2219, 0x7721, 0x16, 0x0, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0x5}, {0x1, 0xffe0}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r8) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff}, 0x80) ioctl$XFS_IOC_START_COMMIT(r9, 0x80585882, &(0x7f0000000600)) socket$kcm(0x11, 0x3, 0x0) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) 101.080903ms ago: executing program 0 (id=647): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x9}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x6, 0x4, 0x1, 0x0, r1, 0x4}, 0x50) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo/4\x00') preadv(r2, &(0x7f00000000c0)=[{&(0x7f0000000580)=""/128, 0x80}], 0x1, 0xb6, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x50, 0x10, 0x1, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x1181}, [@IFLA_IFNAME={0x14, 0x3, 'team0\x00'}, @IFLA_MTU={0x8, 0x4, 0xd4}, @IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_TX_RATE={0xc, 0x3, {0x8, 0x8}}]}]}]}, 0x50}}, 0x20040010) 0s ago: executing program 0 (id=648): socket$inet6(0xa, 0x3, 0x8000000003c) socket$igmp6(0xa, 0x3, 0x2) socket$nl_route(0x10, 0x3, 0x0) openat$kvm(0xffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x18000000, 0x0, 0xb47, 0x9, 0x8, 0x80000001, 0x3}, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r2, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000640)="985e44efeabe001cabcf3d8673c3a254a9a2d3197970cb347b70a243bf77139a94bc3ae91684aaf7b7dff691deb8f8aef2d915fb3a0794a9a9b431a819bca6122c350637808dde804a048fd8696e524b2934126c443ce93d82e931eb9918e6c0827686e59209d2e02c9210fd8048f04ad6c42200fd9232f5aa6a361816bf21afb8473a064f1988536d4b5888807b3aaafaf59f53121782a0a9370dc0feae13c8c2a1dcc8a3122aaa3dcd5b9247a915378e6492e5b94073dcdc87e7c794fb262a7e9ee0b9432f74331c6e9412ac6557c54c6ac72bc24ff70ca2f8", 0xda}], 0x1}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000040)="bf", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000800)="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", 0x1e5}], 0x1}}], 0x3, 0x2090) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r2, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) syz_open_procfs$userns(r3, &(0x7f0000000580)) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x40000021, 0x0, 0x0) r4 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x8fff, 0x0) move_pages(0x0, 0x20a0, &(0x7f0000000040), &(0x7f0000001180), &(0x7f0000000000), 0x0) execve(&(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000b80)={[&(0x7f0000000800)='.-\\:!\x00\x00\x00\x00\x00y\xa5\x91\x9d:)\x0f\x9d/\xf8\f\xad\xdb|\xcf\x1cHB\xc8\xa3Qo{\xc5|\xa5z\x0e\x0f\xdee\xc2>\xb6\xfe\xeaZ~\xa3\x15\x16l\x00\x00\x00\x00\x00', &(0x7f00000000c0)='-\xf3\x00']}) ioctl$VIDIOC_CREATE_BUFS(r4, 0xc100565c, &(0x7f0000000140)={0x0, 0x5, 0x1, {0xa, @pix_mp={0x9, 0x81, 0x0, 0x8, 0xa, [{0xd, 0x2}, {0x3, 0x8000}, {0xa64a80ed, 0x7fffffff}, {0x200, 0x3ff}, {0x5, 0x1}, {0x4ce, 0x8}, {0x7ff, 0x9}, {0x6, 0x1}], 0x7, 0xff, 0x6, 0x1, 0x5}}}) kernel console output (not intermixed with test programs): _pos+0x246/0x320 [ 120.094409][ T6714] ? __pfx___mutex_lock+0x10/0x10 [ 120.094428][ T6714] ? __pfx_vfs_read+0x10/0x10 [ 120.094446][ T6714] ? __fget_files+0x2a/0x420 [ 120.094471][ T6714] ? __fget_files+0x3a0/0x420 [ 120.094495][ T6714] ? __fget_files+0x2a/0x420 [ 120.094527][ T6714] ksys_read+0x150/0x270 [ 120.094545][ T6714] ? __pfx_ksys_read+0x10/0x10 [ 120.094573][ T6714] do_syscall_64+0x14d/0xf80 [ 120.094589][ T6714] ? trace_irq_disable+0x3b/0x150 [ 120.094615][ T6714] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.094634][ T6714] ? clear_bhb_loop+0x40/0x90 [ 120.094653][ T6714] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.094668][ T6714] RIP: 0033:0x7ff4ac75cfce [ 120.094693][ T6714] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 120.094706][ T6714] RSP: 002b:00007ff4ad5e9fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 120.094732][ T6714] RAX: ffffffffffffffda RBX: 00007ff4ad5ea6c0 RCX: 00007ff4ac75cfce [ 120.094744][ T6714] RDX: 000000000000000f RSI: 00007ff4ad5ea0a0 RDI: 0000000000000004 [ 120.094753][ T6714] RBP: 00007ff4ad5ea090 R08: 0000000000000000 R09: 0000000000000000 [ 120.094762][ T6714] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 120.094771][ T6714] R13: 00007ff4aca16128 R14: 00007ff4aca16090 R15: 00007ff4acb3fa48 [ 120.094796][ T6714] [ 120.096605][ T42] dvb-usb: bulk message failed: -22 (4/0) [ 120.166647][ T5934] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 120.178468][ T42] dvb-usb: error -22 while querying for an remote control event. [ 120.368835][ T5934] usb 1-1: unable to get BOS descriptor or descriptor too short [ 120.413859][ T5934] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 37, changing to 7 [ 120.425346][ T5934] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 116, changing to 7 [ 120.444692][ T5934] usb 1-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 120.454740][ T5934] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.489448][ T5883] usb 4-1: USB disconnect, device number 8 [ 120.497759][ T6724] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 120.513328][ T5934] usb 1-1: Product: ᔫ௩뗴⇰슿墥﹌ [ 120.529580][ T5934] usb 1-1: Manufacturer: 觙⣻ﴉ浼뫻軋猵詊â½á› î» [ 120.703038][ T5883] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected. [ 120.815388][ T5934] usb 1-1: Can't get UAC3 power state for id 10 [ 120.850473][ T5934] usb 1-1: 2:0: failed to get current value for ch 0 (-71) [ 120.890111][ T5934] usb 1-1: 2:0: cannot get min/max values for control 2 (id 2) [ 121.150772][ T5934] usb 1-1: USB disconnect, device number 9 [ 121.244288][ T5832] udevd[5832]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 121.801749][ T6748] netlink: 4 bytes leftover after parsing attributes in process `syz.3.206'. [ 121.939330][ T6753] fuse: Unknown parameter 'user_i00000000000000000000' [ 122.380513][ T6761] rtc_cmos 00:00: Alarms can be up to one day in the future [ 122.404540][ T6758] netlink: 8 bytes leftover after parsing attributes in process `syz.3.209'. [ 122.525804][ T6765] usb usb8: usbfs: process 6765 (syz.1.211) did not claim interface 0 before use [ 122.798597][ T6775] netlink: 'syz.2.213': attribute type 1 has an invalid length. [ 122.883541][ T6779] netlink: 40 bytes leftover after parsing attributes in process `syz.2.213'. [ 122.919641][ T6777] fuse: Unknown parameter 'no' [ 123.236863][ T24] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 123.426243][ T24] usb 1-1: Using ep0 maxpacket: 32 [ 123.435489][ T24] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 123.485776][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.527314][ T24] usb 1-1: config 0 descriptor?? [ 123.782052][ T24] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 123.833015][ T24] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 123.943803][ T24] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 123.969409][ T24] usb 1-1: media controller created [ 124.031842][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 124.077384][ T6792] netlink: 4 bytes leftover after parsing attributes in process `syz.1.219'. [ 124.318936][ T6795] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 124.677209][ T6797] fuse: Unknown parameter '000000000000000000000030x0000000000000003' [ 124.956273][ T24] az6027: usb out operation failed. (-71) [ 124.965245][ T24] stb0899_attach: Driver disabled by Kconfig [ 124.968496][ T6800] fuse: Unknown parameter 'user_i00000000000000000000' [ 124.980204][ T24] az6027: no front-end attached [ 124.980204][ T24] [ 125.136536][ T797] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 125.141005][ T24] az6027: usb out operation failed. (-71) [ 125.197761][ T24] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 125.251651][ T24] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input9 [ 125.298356][ T24] dvb-usb: schedule remote query interval to 400 msecs. [ 125.307141][ T797] usb 2-1: Using ep0 maxpacket: 32 [ 125.316288][ T24] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 125.332967][ T24] usb 1-1: USB disconnect, device number 10 [ 125.342774][ T797] usb 2-1: config 0 has an invalid interface number: 170 but max is 1 [ 125.450207][ T797] usb 2-1: config 0 has an invalid interface number: 242 but max is 1 [ 125.481132][ T797] usb 2-1: config 0 has no interface number 0 [ 125.501451][ T797] usb 2-1: config 0 has no interface number 1 [ 125.526334][ T797] usb 2-1: config 0 interface 170 has no altsetting 0 [ 125.587176][ T797] usb 2-1: config 0 interface 242 has no altsetting 0 [ 125.628489][ T797] usb 2-1: New USB device found, idVendor=0bfd, idProduct=0114, bcdDevice=51.d5 [ 125.640600][ T6807] bond1: option lp_interval: invalid value (18446744073709551610) [ 125.686382][ T797] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.710328][ T797] usb 2-1: Product: syz [ 125.714543][ T797] usb 2-1: Manufacturer: syz [ 125.796804][ T797] usb 2-1: SerialNumber: syz [ 125.801602][ T6807] bond1: option lp_interval: allowed values 1 - 2147483647 [ 125.809692][ T797] usb 2-1: config 0 descriptor?? [ 125.844153][ T24] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 125.915418][ T6807] bond1 (unregistering): Released all slaves [ 126.242994][ T6798] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 126.272316][ T6798] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 126.504771][ T6823] netlink: 40 bytes leftover after parsing attributes in process `syz.0.227'. [ 126.786375][ T24] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 126.946516][ T24] usb 1-1: Using ep0 maxpacket: 16 [ 126.958921][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 126.983096][ T24] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 127.014349][ T24] usb 1-1: New USB device found, idVendor=0c12, idProduct=0030, bcdDevice= 0.00 [ 127.039019][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.069472][ T24] usb 1-1: config 0 descriptor?? [ 127.426444][ T5934] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 127.496941][ T24] zeroplus 0003:0C12:0030.0005: unknown main item tag 0x0 [ 127.516903][ T24] zeroplus 0003:0C12:0030.0005: unknown main item tag 0x0 [ 127.535361][ T24] zeroplus 0003:0C12:0030.0005: unknown main item tag 0x0 [ 127.552248][ T24] zeroplus 0003:0C12:0030.0005: unknown main item tag 0x0 [ 127.571795][ T24] zeroplus 0003:0C12:0030.0005: unknown main item tag 0x0 [ 127.590010][ T24] zeroplus 0003:0C12:0030.0005: unknown main item tag 0x0 [ 127.596249][ T5934] usb 4-1: Using ep0 maxpacket: 8 [ 127.603538][ T24] zeroplus 0003:0C12:0030.0005: unknown main item tag 0x3 [ 127.614755][ T5934] usb 4-1: unable to get BOS descriptor or descriptor too short [ 127.631001][ T5934] usb 4-1: config index 0 descriptor too short (expected 25909, got 18) [ 127.651382][ T24] zeroplus 0003:0C12:0030.0005: unknown main item tag 0x2 [ 127.670813][ T24] zeroplus 0003:0C12:0030.0005: unbalanced collection at end of report description [ 127.675918][ T5934] usb 4-1: config 55 has too many interfaces: 97, using maximum allowed: 32 [ 127.682229][ T24] zeroplus 0003:0C12:0030.0005: parse failed [ 127.717756][ T6823] program syz.0.227 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 127.718472][ T5934] usb 4-1: config 55 has an invalid descriptor of length 53, skipping remainder of the config [ 127.746795][ T24] zeroplus 0003:0C12:0030.0005: probe with driver zeroplus failed with error -22 [ 127.784328][ T5934] usb 4-1: config 55 has 0 interfaces, different from the descriptor's value: 97 [ 127.794820][ T797] kvaser_usb 2-1:0.170: error -ENODEV: Cannot get usb endpoint(s) [ 127.805399][ T24] usb 1-1: USB disconnect, device number 11 [ 127.818060][ T797] kvaser_usb 2-1:0.242: error -ENODEV: Cannot get usb endpoint(s) [ 127.844161][ T5934] usb 4-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 127.857270][ T5934] usb 4-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 127.871323][ T797] usb 2-1: USB disconnect, device number 9 [ 127.877498][ T5934] usb 4-1: Manufacturer: syz [ 127.906316][ T5934] usb 4-1: SerialNumber: syz [ 128.033613][ T6840] fuse: Unknown parameter 'user_i00000000000000000000' [ 128.334574][ T5934] usb 4-1: USB disconnect, device number 9 [ 128.626747][ T10] usb 5-1: new low-speed USB device number 8 using dummy_hcd [ 128.922565][ T10] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 128.956825][ T10] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 129.016302][ T10] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 129.036360][ T10] usb 5-1: config 1 interface 0 has no altsetting 0 [ 129.082527][ T10] usb 5-1: string descriptor 0 read error: -22 [ 129.090863][ T10] usb 5-1: New USB device found, idVendor=0644, idProduct=800e, bcdDevice= 0.40 [ 129.120479][ T10] usb 5-1: New USB device strings: Mfr=1, Product=3, SerialNumber=3 [ 129.170867][ T10] usb 5-1: 0:2 : does not exist [ 129.496481][ T10] usb-storage 5-1:1.1: USB Mass Storage device detected [ 129.567973][ T6865] FAULT_INJECTION: forcing a failure. [ 129.567973][ T6865] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 129.646720][ T6865] CPU: 0 UID: 0 PID: 6865 Comm: syz.2.240 Not tainted syzkaller #0 PREEMPT(full) [ 129.646750][ T6865] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 129.646761][ T6865] Call Trace: [ 129.646769][ T6865] [ 129.646777][ T6865] dump_stack_lvl+0xe8/0x150 [ 129.646809][ T6865] should_fail_ex+0x412/0x560 [ 129.646838][ T6865] _copy_from_user+0x2d/0xb0 [ 129.646867][ T6865] ___sys_sendmsg+0x1c6/0x360 [ 129.646890][ T6865] ? __pfx____sys_sendmsg+0x10/0x10 [ 129.646942][ T6865] ? __fget_files+0x2a/0x420 [ 129.646967][ T6865] ? __fget_files+0x3a0/0x420 [ 129.646999][ T6865] __x64_sys_sendmsg+0x1bd/0x2a0 [ 129.647019][ T6865] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 129.647045][ T6865] ? __pfx_ksys_write+0x10/0x10 [ 129.647075][ T6865] do_syscall_64+0x14d/0xf80 [ 129.647092][ T6865] ? trace_irq_disable+0x3b/0x150 [ 129.647117][ T6865] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.647135][ T6865] ? clear_bhb_loop+0x40/0x90 [ 129.647156][ T6865] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.647173][ T6865] RIP: 0033:0x7fe6e859c799 [ 129.647191][ T6865] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 129.647205][ T6865] RSP: 002b:00007fe6e94aa028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 129.647224][ T6865] RAX: ffffffffffffffda RBX: 00007fe6e8815fa0 RCX: 00007fe6e859c799 [ 129.647237][ T6865] RDX: 0000000020000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 129.647249][ T6865] RBP: 00007fe6e94aa090 R08: 0000000000000000 R09: 0000000000000000 [ 129.647260][ T6865] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 129.647270][ T6865] R13: 00007fe6e8816038 R14: 00007fe6e8815fa0 R15: 00007fe6e893fa48 [ 129.647296][ T6865] [ 129.996330][ T24] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 130.225841][ T24] usb 1-1: Using ep0 maxpacket: 32 [ 130.323994][ T24] usb 1-1: New USB device found, idVendor=1235, idProduct=8203, bcdDevice= 0.40 [ 130.333266][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.363640][ T24] usb 1-1: Product: syz [ 130.381733][ T24] usb 1-1: Manufacturer: syz [ 130.391862][ T24] usb 1-1: SerialNumber: syz [ 130.662875][ T24] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 130.695037][ T24] usb 1-1: MIDIStreaming interface descriptor not found [ 130.882719][ T6875] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 130.945688][ T24] usb 1-1: USB disconnect, device number 12 [ 131.095258][ T6879] fuse: Unknown parameter 'user_id00000000000000000000' [ 131.147163][ T42] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 131.149092][ T10] usb 5-1: us122l: couldn't allocate write buffer [ 131.164433][ T10] snd-usb-us122l 5-1:1.1: probe with driver snd-usb-us122l failed with error -22 [ 131.321865][ T42] usb 4-1: config 1 interface 0 altsetting 127 bulk endpoint 0x81 has invalid maxpacket 64 [ 131.332429][ T42] usb 4-1: config 1 interface 0 altsetting 127 bulk endpoint 0x2 has invalid maxpacket 32 [ 131.348262][ T42] usb 4-1: config 1 interface 0 has no altsetting 0 [ 131.355254][ T6888] netlink: 1216 bytes leftover after parsing attributes in process `syz.0.246'. [ 131.369679][ T6888] netlink: 4436 bytes leftover after parsing attributes in process `syz.0.246'. [ 131.381488][ T42] usb 4-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.40 [ 131.521745][ T42] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.562785][ T24] usb 5-1: USB disconnect, device number 8 [ 131.610421][ T42] usb 4-1: Product: syz [ 131.635404][ T42] usb 4-1: Manufacturer: syz [ 131.722844][ T42] usb 4-1: SerialNumber: syz [ 131.787982][ T6875] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 131.795329][ T6875] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 131.910694][ T6894] FAULT_INJECTION: forcing a failure. [ 131.910694][ T6894] name failslab, interval 1, probability 0, space 0, times 0 [ 131.927196][ T6894] CPU: 1 UID: 0 PID: 6894 Comm: syz.0.248 Not tainted syzkaller #0 PREEMPT(full) [ 131.927222][ T6894] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 131.927233][ T6894] Call Trace: [ 131.927240][ T6894] [ 131.927248][ T6894] dump_stack_lvl+0xe8/0x150 [ 131.927281][ T6894] should_fail_ex+0x412/0x560 [ 131.927312][ T6894] should_failslab+0xa8/0x100 [ 131.927334][ T6894] ? mas_alloc_nodes+0x291/0x350 [ 131.927359][ T6894] kmem_cache_alloc_noprof+0x87/0x650 [ 131.927386][ T6894] mas_alloc_nodes+0x291/0x350 [ 131.927413][ T6894] mas_preallocate+0x2d6/0x640 [ 131.927442][ T6894] ? __pfx_mas_preallocate+0x10/0x10 [ 131.927477][ T6894] ? __mas_set_range+0x12f/0x3c0 [ 131.927514][ T6894] __split_vma+0x318/0xa40 [ 131.927548][ T6894] ? __pfx___split_vma+0x10/0x10 [ 131.927585][ T6894] ? can_vma_merge_left+0x11a/0x3e0 [ 131.927609][ T6894] vma_modify+0xa30/0x2060 [ 131.927648][ T6894] vma_modify_flags+0x24b/0x330 [ 131.927673][ T6894] ? __pfx_vma_modify_flags+0x10/0x10 [ 131.927707][ T6894] ? rcu_is_watching+0x15/0xb0 [ 131.927731][ T6894] ? percpu_counter_add_batch+0xea/0x1d0 [ 131.927756][ T6894] ? __vm_enough_memory+0x11b/0x380 [ 131.927782][ T6894] mprotect_fixup+0x47a/0xa80 [ 131.927811][ T6894] ? __pfx_mprotect_fixup+0x10/0x10 [ 131.927834][ T6894] ? apparmor_file_mprotect+0x1d0/0x400 [ 131.927852][ T6894] ? security_file_mprotect+0x1a/0x290 [ 131.927879][ T6894] do_mprotect_pkey+0x8ab/0xcd0 [ 131.927908][ T6894] ? __pfx_do_mprotect_pkey+0x10/0x10 [ 131.927950][ T6894] ? rcu_is_watching+0x15/0xb0 [ 131.927981][ T6894] __x64_sys_mprotect+0x80/0x90 [ 131.928002][ T6894] do_syscall_64+0x14d/0xf80 [ 131.928018][ T6894] ? trace_irq_disable+0x3b/0x150 [ 131.928043][ T6894] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.928060][ T6894] ? clear_bhb_loop+0x40/0x90 [ 131.928080][ T6894] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.928096][ T6894] RIP: 0033:0x7f98d2f9c597 [ 131.928113][ T6894] Code: 89 38 eb 84 0f 1f 80 00 00 00 00 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff e9 7a ff ff ff b8 0a 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 131.928126][ T6894] RSP: 002b:00007f98d3db7d18 EFLAGS: 00000217 ORIG_RAX: 000000000000000a [ 131.928146][ T6894] RAX: ffffffffffffffda RBX: 00007f98cc000000 RCX: 00007f98d2f9c597 [ 131.928158][ T6894] RDX: 0000000000000003 RSI: 0000000000021000 RDI: 00007f98cc000000 [ 131.928169][ T6894] RBP: 0000000000021000 R08: 00000000ffffffff R09: 0000000000000000 [ 131.928179][ T6894] R10: 0000000000000022 R11: 0000000000000217 R12: 0000000004000000 [ 131.928189][ T6894] R13: 0000000000001000 R14: 00007f98d0000000 R15: 0000000003000000 [ 131.928213][ T6894] [ 132.773850][ T5934] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 132.788541][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.795079][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.937012][ T5934] usb 2-1: Using ep0 maxpacket: 32 [ 132.944246][ T5934] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 132.953651][ T5934] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.965733][ T5934] usb 2-1: config 0 descriptor?? [ 133.074282][ T42] (unnamed net_device) (uninitialized): Assigned a random MAC address: 5a:d4:eb:fa:e1:ca [ 133.115589][ T42] rtl8150 4-1:1.0: eth1: rtl8150 is detected [ 133.144305][ T42] usb 4-1: USB disconnect, device number 10 [ 133.243394][ T5934] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 133.260614][ T5934] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 133.287733][ T5934] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 133.425338][ T5934] usb 2-1: media controller created [ 133.439615][ T5934] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 133.620229][ T5934] az6027: usb out operation failed. (-71) [ 133.631096][ T5934] az6027: usb out operation failed. (-71) [ 133.647286][ T5934] stb0899_attach: Driver disabled by Kconfig [ 133.677259][ T5934] az6027: no front-end attached [ 133.677259][ T5934] [ 133.708188][ T5934] az6027: usb out operation failed. (-71) [ 133.723869][ T5934] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 133.741895][ T5934] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input10 [ 133.793569][ T6930] netlink: 1216 bytes leftover after parsing attributes in process `syz.4.258'. [ 133.818517][ T5934] dvb-usb: schedule remote query interval to 400 msecs. [ 133.827531][ T6930] netlink: 4436 bytes leftover after parsing attributes in process `syz.4.258'. [ 133.840142][ T5934] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 133.989483][ T5934] usb 2-1: USB disconnect, device number 10 [ 134.206048][ T5934] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 134.427463][ T42] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 134.496301][ T10] usb 4-1: new full-speed USB device number 11 using dummy_hcd [ 134.596613][ T42] usb 5-1: Using ep0 maxpacket: 16 [ 134.612459][ T42] usb 5-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 134.621225][ T6944] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 134.626624][ T42] usb 5-1: config 0 interface 0 has no altsetting 0 [ 134.653505][ T42] usb 5-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 134.672422][ T42] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.694685][ T42] usb 5-1: config 0 descriptor?? [ 134.708353][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 134.785446][ T10] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 134.811626][ T10] usb 4-1: New USB device strings: Mfr=172, Product=0, SerialNumber=0 [ 134.831590][ T10] usb 4-1: Manufacturer: syz [ 134.850106][ T10] usb 4-1: config 0 descriptor?? [ 134.922273][ T10] hub 4-1:0.0: USB hub found [ 135.116304][ T24] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 135.131721][ T10] hub 4-1:0.0: 1 port detected [ 135.256035][ T42] usbhid 5-1:0.0: can't add hid device: -71 [ 135.267641][ T42] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 135.328336][ T42] usb 5-1: USB disconnect, device number 9 [ 135.347268][ T24] usb 3-1: Using ep0 maxpacket: 8 [ 135.354943][ T24] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 135.365451][ T24] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 135.410713][ T24] usb 3-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 135.420178][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.431066][ T24] usb 3-1: Product: syz [ 135.437227][ T24] usb 3-1: Manufacturer: syz [ 135.453420][ T24] usb 3-1: SerialNumber: syz [ 135.472801][ T24] usb 3-1: config 0 descriptor?? [ 136.337750][ T6969] FAULT_INJECTION: forcing a failure. [ 136.337750][ T6969] name failslab, interval 1, probability 0, space 0, times 0 [ 136.380811][ T6969] CPU: 1 UID: 0 PID: 6969 Comm: syz.4.269 Not tainted syzkaller #0 PREEMPT(full) [ 136.380840][ T6969] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 136.380849][ T6969] Call Trace: [ 136.380854][ T6969] [ 136.380860][ T6969] dump_stack_lvl+0xe8/0x150 [ 136.380895][ T6969] should_fail_ex+0x412/0x560 [ 136.380925][ T6969] should_failslab+0xa8/0x100 [ 136.380951][ T6969] __kmalloc_cache_noprof+0x88/0x660 [ 136.380964][ T6969] ? __asan_memset+0x22/0x50 [ 136.380974][ T6969] ? alloc_netdev_mqs+0xb97/0x11b0 [ 136.380987][ T6969] ? __xdp_rxq_info_reg+0x171/0x280 [ 136.381004][ T6969] alloc_netdev_mqs+0xb97/0x11b0 [ 136.381023][ T6969] rtnl_create_link+0x31f/0xd70 [ 136.381049][ T6969] rtnl_newlink_create+0x277/0xb70 [ 136.381075][ T6969] ? __pfx___nla_validate_parse+0x10/0x10 [ 136.381116][ T6969] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 136.381144][ T6969] ? __pfx___mutex_lock+0x10/0x10 [ 136.381162][ T6969] ? ns_capable+0x89/0xe0 [ 136.381183][ T6969] rtnl_newlink+0x1666/0x1be0 [ 136.381221][ T6969] ? __pfx_rtnl_newlink+0x10/0x10 [ 136.381242][ T6969] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 136.381280][ T6969] ? kasan_quarantine_put+0xbb/0x1f0 [ 136.381291][ T6969] ? lockdep_hardirqs_on+0x7a/0x110 [ 136.381309][ T6969] ? kmem_cache_free+0x187/0x630 [ 136.381319][ T6969] ? nlmon_xmit+0xb0/0x100 [ 136.381356][ T6969] ? __lock_acquire+0x6b5/0x2cf0 [ 136.381384][ T6969] ? __local_bh_enable_ip+0xd0/0x130 [ 136.381406][ T6969] ? lockdep_hardirqs_on+0x7a/0x110 [ 136.381423][ T6969] ? __dev_queue_xmit+0x277/0x3890 [ 136.381433][ T6969] ? __local_bh_enable_ip+0xd0/0x130 [ 136.381444][ T6969] ? __dev_queue_xmit+0x277/0x3890 [ 136.381466][ T6969] ? __pfx_rtnl_newlink+0x10/0x10 [ 136.381485][ T6969] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 136.381512][ T6969] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 136.381534][ T6969] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 136.381554][ T6969] ? ref_tracker_free+0x693/0x840 [ 136.381569][ T6969] ? __copy_skb_header+0xa3/0x4a0 [ 136.381580][ T6969] ? __pfx_ref_tracker_free+0x10/0x10 [ 136.381591][ T6969] ? __skb_clone+0x63/0x7a0 [ 136.381607][ T6969] netlink_rcv_skb+0x232/0x4b0 [ 136.381623][ T6969] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 136.381648][ T6969] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 136.381681][ T6969] ? netlink_deliver_tap+0x2e/0x1b0 [ 136.381708][ T6969] netlink_unicast+0x80f/0x9b0 [ 136.381733][ T6969] ? __pfx_netlink_unicast+0x10/0x10 [ 136.381754][ T6969] ? netlink_sendmsg+0x650/0xb40 [ 136.381775][ T6969] ? skb_put+0x11b/0x210 [ 136.381802][ T6969] netlink_sendmsg+0x813/0xb40 [ 136.381834][ T6969] ? __pfx_netlink_sendmsg+0x10/0x10 [ 136.381855][ T6969] ? aa_sock_msg_perm+0xf1/0x1b0 [ 136.381869][ T6969] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 136.381883][ T6969] ____sys_sendmsg+0x972/0x9f0 [ 136.381897][ T6969] ? __pfx_____sys_sendmsg+0x10/0x10 [ 136.381914][ T6969] ? import_iovec+0x73/0xa0 [ 136.381944][ T6969] ___sys_sendmsg+0x2a5/0x360 [ 136.381967][ T6969] ? __pfx____sys_sendmsg+0x10/0x10 [ 136.382008][ T6969] ? __fget_files+0x2a/0x420 [ 136.382022][ T6969] ? __fget_files+0x3a0/0x420 [ 136.382041][ T6969] __x64_sys_sendmsg+0x1bd/0x2a0 [ 136.382051][ T6969] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 136.382073][ T6969] ? __pfx_ksys_write+0x10/0x10 [ 136.382110][ T6969] do_syscall_64+0x14d/0xf80 [ 136.382126][ T6969] ? trace_irq_disable+0x3b/0x150 [ 136.382151][ T6969] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 136.382168][ T6969] ? clear_bhb_loop+0x40/0x90 [ 136.382189][ T6969] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 136.382207][ T6969] RIP: 0033:0x7ff4ac79c799 [ 136.382225][ T6969] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 136.382239][ T6969] RSP: 002b:00007ff4ad60b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 136.382259][ T6969] RAX: ffffffffffffffda RBX: 00007ff4aca15fa0 RCX: 00007ff4ac79c799 [ 136.382272][ T6969] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000004 [ 136.382282][ T6969] RBP: 00007ff4ad60b090 R08: 0000000000000000 R09: 0000000000000000 [ 136.382290][ T6969] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 136.382296][ T6969] R13: 00007ff4aca16038 R14: 00007ff4aca15fa0 R15: 00007ff4acb3fa48 [ 136.382311][ T6969] [ 136.854308][ T10] hub 4-1:0.0: hub_ext_port_status failed (err = -71) [ 136.866242][ T10] hub_port_connect: 57 callbacks suppressed [ 136.866257][ T10] usb 4-1-port1: connect-debounce failed [ 136.887888][ T5883] usb 4-1: USB disconnect, device number 11 [ 136.989776][ T6972] netlink: 1216 bytes leftover after parsing attributes in process `syz.0.270'. [ 137.029706][ T6972] netlink: 4436 bytes leftover after parsing attributes in process `syz.0.270'. [ 137.634552][ T6986] input: syz0 as /devices/virtual/input/input11 [ 137.642059][ T6986] input: failed to attach handler leds to device input11, error: -6 [ 138.044948][ T42] usb 3-1: USB disconnect, device number 9 [ 138.142060][ T6996] netlink: 76 bytes leftover after parsing attributes in process `syz.2.278'. [ 139.045860][ T7011] capability: warning: `syz.0.283' uses 32-bit capabilities (legacy support in use) [ 139.255360][ T29] audit: type=1326 audit(1773208692.047:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7014 comm="syz.0.285" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f98d2f9c799 code=0x0 [ 139.938578][ T7034] netlink: 8 bytes leftover after parsing attributes in process `syz.3.290'. [ 140.746276][ T24] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 140.906637][ T24] usb 1-1: device descriptor read/64, error -71 [ 141.006419][ T5883] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 141.146374][ T24] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 141.167928][ T5883] usb 5-1: config 1 interface 0 has no altsetting 0 [ 141.179612][ T5883] usb 5-1: New USB device found, idVendor=04f2, idProduct=1123, bcdDevice= 0.40 [ 141.351406][ T24] usb 1-1: device descriptor read/64, error -71 [ 141.674479][ T24] usb usb1-port1: attempt power cycle [ 141.704004][ T5883] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.803574][ T5883] usb 5-1: Product: syz [ 142.185079][ T5883] usb 5-1: Manufacturer: syz [ 142.276386][ T24] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 142.303831][ T5883] usb 5-1: SerialNumber: syz [ 142.306895][ T7062] netlink: 'syz.3.298': attribute type 10 has an invalid length. [ 142.318069][ T24] usb 1-1: device descriptor read/8, error -71 [ 142.392842][ T7062] team0: Port device netdevsim0 added [ 142.571512][ T7050] netlink: 48 bytes leftover after parsing attributes in process `syz.4.295'. [ 142.580527][ T24] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 142.617664][ T5883] usbhid 5-1:1.0: can't add hid device: -71 [ 142.623741][ T5883] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 142.639801][ T24] usb 1-1: device descriptor read/8, error -71 [ 142.703827][ T5883] usb 5-1: USB disconnect, device number 10 [ 142.777462][ T24] usb usb1-port1: unable to enumerate USB device [ 143.088556][ T7069] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 143.096262][ T5883] usb 4-1: new low-speed USB device number 12 using dummy_hcd [ 143.267650][ T7065] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 143.276743][ T7065] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 143.396958][ T7076] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 143.406093][ T7076] netlink: 'syz.2.302': attribute type 2 has an invalid length. [ 143.414033][ T7076] netlink: 132 bytes leftover after parsing attributes in process `syz.2.302'. [ 143.625983][ T5883] usb 4-1: unable to get BOS descriptor or descriptor too short [ 143.635554][ T5883] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 143.655500][ T5883] usb 4-1: can't read configurations, error -71 [ 143.962928][ T7089] netlink: 64 bytes leftover after parsing attributes in process `syz.0.306'. [ 144.554251][ T10] usb 1-1: new full-speed USB device number 17 using dummy_hcd [ 144.757982][ T10] usb 1-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 144.770749][ T10] usb 1-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 144.781085][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.790245][ T10] usb 1-1: Product: syz [ 144.810366][ T10] usb 1-1: Manufacturer: syz [ 144.840734][ T10] usb 1-1: SerialNumber: syz [ 144.913704][ T10] usb 1-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 144.928656][ T7101] netlink: 'syz.2.310': attribute type 10 has an invalid length. [ 144.960659][ T7101] netdevsim netdevsim2 netdevsim0: left allmulticast mode [ 145.006019][ T7101] team0: Port device netdevsim0 added [ 145.213775][ T10] usb 1-1: dvb_usb_v2: this USB2.0 device cannot be run on a USB1.1 port (it lacks a hardware PID filter) [ 145.267128][ T7106] 8021q: VLANs not supported on vxcan0 [ 145.301875][ T10] usb 1-1: USB disconnect, device number 17 [ 146.427849][ T10] usb 1-1: new full-speed USB device number 18 using dummy_hcd [ 146.718361][ T10] usb 1-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 146.744703][ T10] usb 1-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 146.764623][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.803593][ T10] usb 1-1: Product: à°‰ [ 146.844962][ T10] usb 1-1: Manufacturer: ã Š [ 146.854349][ T10] usb 1-1: SerialNumber: 䈜쥬ï¹ç›‚즺ଈﰮ7躹湵㨺ڙ盻曩蛜à¨ï°¦è™‹è¡‰â’¯ìªŠë›³è¥à¶šã†¥ï´¼ìƒ‹í™±î™¹ç¾Ÿå¢™è¯¡ï¨°â­è‘è­¹ãŽæ¨©ì¿„榺䴵⼢䀗僎㞬䕥헹汕勢î»ã·•ë»« [ 146.948620][ T7142] netlink: 64 bytes leftover after parsing attributes in process `syz.4.323'. [ 147.356309][ T10] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 147.483404][ T10] usb 1-1: USB disconnect, device number 18 [ 147.557500][ T5832] udevd[5832]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 148.399162][ T7164] netlink: 20 bytes leftover after parsing attributes in process `syz.4.329'. [ 148.408540][ T7164] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 148.442328][ T29] audit: type=1800 audit(1773208701.237:72): pid=7166 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.329" name="file0" dev="fuse" ino=0 res=0 errno=0 [ 148.994337][ T7177] netlink: 20 bytes leftover after parsing attributes in process `syz.0.332'. [ 149.004601][ T7177] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 149.037569][ T29] audit: type=1800 audit(1773208701.827:73): pid=7178 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.332" name="file0" dev="fuse" ino=0 res=0 errno=0 [ 149.177541][ T7184] netlink: 4 bytes leftover after parsing attributes in process `syz.2.334'. [ 149.551343][ T29] audit: type=1326 audit(1773208702.347:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7196 comm="syz.4.336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4ac79c799 code=0x7ffc0000 [ 149.699835][ T29] audit: type=1326 audit(1773208702.347:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7196 comm="syz.4.336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4ac79c799 code=0x7ffc0000 [ 149.754880][ T29] audit: type=1326 audit(1773208702.347:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7196 comm="syz.4.336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4ac79c799 code=0x7ffc0000 [ 149.884090][ T29] audit: type=1326 audit(1773208702.347:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7196 comm="syz.4.336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7ff4ac79c799 code=0x7ffc0000 [ 149.992717][ T29] audit: type=1326 audit(1773208702.347:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7196 comm="syz.4.336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4ac79c799 code=0x7ffc0000 [ 150.128644][ T29] audit: type=1326 audit(1773208702.347:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7196 comm="syz.4.336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4ac79c799 code=0x7ffc0000 [ 150.178294][ T5896] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 150.331281][ T29] audit: type=1326 audit(1773208702.347:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7196 comm="syz.4.336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4ac79c799 code=0x7ffc0000 [ 150.406236][ T29] audit: type=1326 audit(1773208702.367:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7196 comm="syz.4.336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4ac79c799 code=0x7ffc0000 [ 150.447012][ T5896] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 150.481396][ T5896] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 150.552558][ T5896] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 150.639326][ T5896] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 150.750679][ T5896] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.170683][ T5896] usb 2-1: config 0 descriptor?? [ 151.764350][ T5896] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 151.841307][ T10] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 151.861966][ T5896] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 151.889680][ T5896] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 152.019614][ T5896] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 152.026380][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 152.040211][ T5896] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 152.049854][ T7231] netlink: 20 bytes leftover after parsing attributes in process `syz.2.346'. [ 152.064366][ T7237] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 152.071198][ T10] usb 5-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 152.082823][ T7231] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 152.161571][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.174304][ T10] usb 5-1: Product: syz [ 152.179912][ T10] usb 5-1: Manufacturer: syz [ 152.202947][ T10] usb 5-1: SerialNumber: syz [ 152.208137][ T5896] plantronics 0003:047F:FFFF.0006: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 152.235861][ T10] usb 5-1: config 0 descriptor?? [ 152.734447][ T10] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 152.760638][ T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 152.771835][ T10] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 152.792927][ T10] usb 5-1: media controller created [ 152.840943][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 152.852487][ T797] usb 2-1: USB disconnect, device number 11 [ 152.923871][ T7223] FAULT_INJECTION: forcing a failure. [ 152.923871][ T7223] name failslab, interval 1, probability 0, space 0, times 0 [ 152.971149][ T7223] CPU: 1 UID: 0 PID: 7223 Comm: syz.4.347 Not tainted syzkaller #0 PREEMPT(full) [ 152.971178][ T7223] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 152.971189][ T7223] Call Trace: [ 152.971196][ T7223] [ 152.971205][ T7223] dump_stack_lvl+0xe8/0x150 [ 152.971235][ T7223] should_fail_ex+0x412/0x560 [ 152.971263][ T7223] should_failslab+0xa8/0x100 [ 152.971287][ T7223] __kmalloc_noprof+0xe8/0x760 [ 152.971306][ T7223] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 152.971335][ T7223] tomoyo_realpath_from_path+0xe3/0x5d0 [ 152.971365][ T7223] ? tomoyo_path_number_perm+0x219/0x630 [ 152.971385][ T7223] tomoyo_path_number_perm+0x246/0x630 [ 152.971405][ T7223] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 152.971425][ T7223] ? __lock_acquire+0x6b5/0x2cf0 [ 152.971455][ T7223] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 152.971492][ T7223] ? __fget_files+0x2a/0x420 [ 152.971518][ T7223] ? __fget_files+0x2a/0x420 [ 152.971539][ T7223] ? __fget_files+0x3a0/0x420 [ 152.971559][ T7223] ? __fget_files+0x2a/0x420 [ 152.971585][ T7223] security_file_ioctl+0xc3/0x2a0 [ 152.971605][ T7223] __se_sys_ioctl+0x47/0x170 [ 152.971627][ T7223] do_syscall_64+0x14d/0xf80 [ 152.971642][ T7223] ? trace_irq_disable+0x3b/0x150 [ 152.971665][ T7223] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 152.971683][ T7223] ? clear_bhb_loop+0x40/0x90 [ 152.971702][ T7223] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 152.971719][ T7223] RIP: 0033:0x7ff4ac79c799 [ 152.971737][ T7223] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 152.971753][ T7223] RSP: 002b:00007ff4ad60b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 152.971774][ T7223] RAX: ffffffffffffffda RBX: 00007ff4aca15fa0 RCX: 00007ff4ac79c799 [ 152.971786][ T7223] RDX: 0000200000000000 RSI: 0000000000000707 RDI: 0000000000000005 [ 152.971797][ T7223] RBP: 00007ff4ad60b090 R08: 0000000000000000 R09: 0000000000000000 [ 152.971807][ T7223] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 152.971816][ T7223] R13: 00007ff4aca16038 R14: 00007ff4aca15fa0 R15: 00007ff4acb3fa48 [ 152.971843][ T7223] [ 152.971868][ T7223] ERROR: Out of memory at tomoyo_realpath_from_path. [ 153.017224][ T7249] netlink: 'syz.3.351': attribute type 29 has an invalid length. [ 153.208776][ T7249] netlink: 8 bytes leftover after parsing attributes in process `syz.3.351'. [ 153.460137][ T10] zl10353_read_register: readreg error (reg=127, ret==0) [ 153.466270][ T7223] dtv5100: wlen = 0, aborting. [ 153.468180][ T10] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 153.493675][ T10] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 153.523430][ T10] usb 5-1: USB disconnect, device number 11 [ 153.645620][ T10] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 153.920741][ T42] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 154.216242][ T42] usb 4-1: Using ep0 maxpacket: 8 [ 154.261917][ T42] usb 4-1: config 0 has an invalid interface number: 8 but max is 0 [ 154.284900][ T7267] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 154.315269][ T42] usb 4-1: config 0 has no interface number 0 [ 154.315324][ T42] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 154.343889][ T7270] use of bytesused == 0 is deprecated and will be removed in the future, [ 154.343950][ T7270] use the actual size instead. [ 154.359684][ T42] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 154.359710][ T42] usb 4-1: New USB device strings: Mfr=0, Product=128, SerialNumber=0 [ 154.359721][ T42] usb 4-1: Product: syz [ 154.370550][ T42] usb 4-1: config 0 descriptor?? [ 154.475088][ T7275] netlink: 'syz.4.358': attribute type 14 has an invalid length. [ 154.496770][ T42] iowarrior 4-1:0.8: IOWarrior product=0x1512, serial= interface=8 now attached to iowarrior0 [ 154.736590][ T797] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 154.823703][ T7282] netlink: 24 bytes leftover after parsing attributes in process `syz.0.360'. [ 154.876760][ T797] usb 5-1: device descriptor read/64, error -71 [ 155.017956][ T9] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 155.101993][ T5934] usb 4-1: USB disconnect, device number 14 [ 155.121719][ T797] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 155.176245][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 155.183409][ T9] usb 2-1: config 162 has an invalid interface number: 79 but max is 1 [ 155.192870][ T9] usb 2-1: config 162 has an invalid interface number: 183 but max is 1 [ 155.203464][ T9] usb 2-1: config 162 has an invalid descriptor of length 0, skipping remainder of the config [ 155.214258][ T9] usb 2-1: config 162 has no interface number 0 [ 155.228766][ T9] usb 2-1: config 162 has no interface number 1 [ 155.241947][ T9] usb 2-1: config 162 interface 79 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 155.272286][ T9] usb 2-1: config 162 interface 183 altsetting 1 has a duplicate endpoint with address 0x9, skipping [ 155.286438][ T797] usb 5-1: device descriptor read/64, error -71 [ 155.292717][ T10] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 155.304541][ T9] usb 2-1: config 162 interface 183 altsetting 1 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 155.320126][ T9] usb 2-1: config 162 interface 183 altsetting 1 endpoint 0x86 has invalid wMaxPacketSize 0 [ 155.331934][ T9] usb 2-1: config 162 interface 183 altsetting 1 bulk endpoint 0x86 has invalid maxpacket 0 [ 155.342562][ T9] usb 2-1: config 162 interface 79 has no altsetting 0 [ 155.351524][ T9] usb 2-1: config 162 interface 183 has no altsetting 0 [ 155.366007][ T9] usb 2-1: New USB device found, idVendor=056e, idProduct=5004, bcdDevice=db.d1 [ 155.375604][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.384005][ T9] usb 2-1: Product: syz [ 155.389108][ T9] usb 2-1: Manufacturer: syz [ 155.401129][ T9] usb 2-1: SerialNumber: syz [ 155.406593][ T797] usb usb5-port1: attempt power cycle [ 155.466922][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 155.489666][ T10] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 155.505787][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.532752][ T10] usb 3-1: Product: syz [ 155.540581][ T10] usb 3-1: Manufacturer: syz [ 155.547588][ T10] usb 3-1: SerialNumber: syz [ 155.573533][ T10] usb 3-1: config 0 descriptor?? [ 155.746241][ T797] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 155.767304][ T797] usb 5-1: device descriptor read/8, error -71 [ 155.804535][ T10] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 155.907711][ T42] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 156.018480][ T797] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 156.047015][ T797] usb 5-1: device descriptor read/8, error -71 [ 156.066247][ T42] usb 1-1: Using ep0 maxpacket: 8 [ 156.073471][ T42] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 156.084711][ T42] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 156.094426][ T42] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 156.104227][ T42] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024 [ 156.120762][ T42] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 156.130956][ T42] usb 1-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 156.140052][ T42] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.150849][ T42] usb 1-1: config 0 descriptor?? [ 156.158598][ T797] usb usb5-port1: unable to enumerate USB device [ 156.158822][ T7298] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 156.592187][ T29] kauditd_printk_skb: 41 callbacks suppressed [ 156.592207][ T29] audit: type=1326 audit(1773208709.387:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7297 comm="syz.0.366" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f98d2f9c799 code=0x0 [ 156.758144][ T7304] bond1: option tlb_dynamic_lb: invalid value (255) [ 156.768216][ T7304] bond1 (unregistering): Released all slaves [ 157.104674][ T7311] netlink: 'syz.3.369': attribute type 10 has an invalid length. [ 157.114733][ T7311] bond0: (slave wlan1): Opening slave failed [ 157.225845][ T7285] netlink: 8 bytes leftover after parsing attributes in process `syz.2.362'. [ 157.269948][ T7285] netlink: 1084 bytes leftover after parsing attributes in process `syz.2.362'. [ 157.280627][ T7285] netlink: 16 bytes leftover after parsing attributes in process `syz.2.362'. [ 157.294485][ T10] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 157.321619][ T10] usb 3-1: USB disconnect, device number 10 [ 157.934721][ T9] pl2303 2-1:162.79: required endpoints missing [ 157.961778][ T9] pl2303 2-1:162.183: required interrupt-in endpoint missing [ 157.982195][ T7317] netlink: 4 bytes leftover after parsing attributes in process `syz.2.371'. [ 158.045016][ T9] usb 2-1: USB disconnect, device number 12 [ 158.177355][ T7322] netlink: 'syz.3.373': attribute type 29 has an invalid length. [ 158.185489][ T7322] netlink: 8 bytes leftover after parsing attributes in process `syz.3.373'. [ 158.267018][ T5823] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 158.398781][ T7324] syzkaller1: entered promiscuous mode [ 158.404318][ T7324] syzkaller1: entered allmulticast mode [ 158.556239][ T797] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 158.683893][ T5896] usb 1-1: USB disconnect, device number 19 [ 158.716352][ T797] usb 4-1: Using ep0 maxpacket: 8 [ 158.755789][ T797] usb 4-1: config 0 has an invalid interface number: 8 but max is 0 [ 158.780002][ T797] usb 4-1: config 0 has no interface number 0 [ 158.814471][ T797] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 158.864206][ T797] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 158.874096][ T797] usb 4-1: New USB device strings: Mfr=0, Product=128, SerialNumber=0 [ 158.900224][ T797] usb 4-1: Product: syz [ 158.915091][ T797] usb 4-1: config 0 descriptor?? [ 158.939936][ T797] iowarrior 4-1:0.8: IOWarrior product=0x1512, serial= interface=8 now attached to iowarrior0 [ 159.546545][ T5896] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 159.647042][ T9] usb 4-1: USB disconnect, device number 15 [ 159.698780][ T5896] usb 3-1: device descriptor read/64, error -71 [ 159.785161][ T7349] netlink: 4 bytes leftover after parsing attributes in process `syz.0.380'. [ 159.854816][ T7351] binder: 7350:7351 ioctl c0046209 200000000000000 returned -22 [ 159.931735][ T7356] syz_tun: entered allmulticast mode [ 159.976299][ T5896] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 160.024744][ T7358] netlink: 4 bytes leftover after parsing attributes in process `syz.1.384'. [ 160.106572][ T5896] usb 3-1: device descriptor read/64, error -71 [ 160.156338][ T42] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 160.217181][ T5896] usb usb3-port1: attempt power cycle [ 160.316230][ T42] usb 4-1: Using ep0 maxpacket: 8 [ 160.325011][ T42] usb 4-1: config 21 has an invalid interface number: 70 but max is 0 [ 160.334230][ T42] usb 4-1: config 21 has no interface number 0 [ 160.340824][ T42] usb 4-1: config 21 interface 70 altsetting 5 endpoint 0x4 has invalid maxpacket 1024, setting to 64 [ 160.352153][ T42] usb 4-1: config 21 interface 70 altsetting 5 has an invalid descriptor for endpoint zero, skipping [ 160.363193][ T42] usb 4-1: config 21 interface 70 altsetting 5 has an invalid descriptor for endpoint zero, skipping [ 160.374331][ T42] usb 4-1: config 21 interface 70 altsetting 5 endpoint 0x5 has invalid maxpacket 1023, setting to 64 [ 160.385488][ T42] usb 4-1: config 21 interface 70 altsetting 5 has a duplicate endpoint with address 0xA, skipping [ 160.386433][ T9] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 160.396612][ T42] usb 4-1: config 21 interface 70 altsetting 5 has a duplicate endpoint with address 0x5, skipping [ 160.415040][ T42] usb 4-1: config 21 interface 70 altsetting 5 endpoint 0x1 has invalid maxpacket 1023, setting to 64 [ 160.426245][ T42] usb 4-1: config 21 interface 70 altsetting 5 has a duplicate endpoint with address 0x4, skipping [ 160.437413][ T42] usb 4-1: config 21 interface 70 has no altsetting 0 [ 160.446050][ T42] usb 4-1: New USB device found, idVendor=0421, idProduct=0007, bcdDevice=27.e1 [ 160.455214][ T42] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.463289][ T42] usb 4-1: Product: syz [ 160.467539][ T42] usb 4-1: Manufacturer: syz [ 160.472229][ T42] usb 4-1: SerialNumber: syz [ 160.566296][ T5896] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 160.568146][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 160.586113][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 160.597410][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 160.611110][ T5896] usb 3-1: device descriptor read/8, error -71 [ 160.611154][ T9] usb 2-1: New USB device found, idVendor=045f, idProduct=ffff, bcdDevice= 0.00 [ 160.627146][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.638299][ T9] usb 2-1: config 0 descriptor?? [ 160.692576][ T7355] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 160.701546][ T7355] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 160.721379][ T42] rndis_host 4-1:21.70: skipping garbage [ 160.736963][ T42] rndis_host 4-1:21.70: skipping garbage [ 160.744389][ T42] usb 4-1: bad CDC descriptors [ 160.752425][ T42] cdc_acm 4-1:21.70: skipping garbage [ 160.768038][ T42] cdc_acm 4-1:21.70: skipping garbage [ 160.788700][ T42] usb 4-1: USB disconnect, device number 16 [ 160.876337][ T5896] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 160.897075][ T5896] usb 3-1: device descriptor read/8, error -71 [ 160.946022][ T7367] syzkaller1: entered promiscuous mode [ 160.951687][ T7367] syzkaller1: entered allmulticast mode [ 161.007882][ T5896] usb usb3-port1: unable to enumerate USB device [ 161.056600][ T9] hid-generic 0003:045F:FFFF.0007: unknown main item tag 0x0 [ 161.071163][ T9] hid-generic 0003:045F:FFFF.0007: unknown main item tag 0x0 [ 161.086940][ T9] hid-generic 0003:045F:FFFF.0007: unknown main item tag 0x0 [ 161.100325][ T9] hid-generic 0003:045F:FFFF.0007: unknown main item tag 0x0 [ 161.113795][ T9] hid-generic 0003:045F:FFFF.0007: unknown main item tag 0x0 [ 161.128623][ T9] hid-generic 0003:045F:FFFF.0007: unknown main item tag 0x0 [ 161.144312][ T9] hid-generic 0003:045F:FFFF.0007: collection stack underflow [ 161.160191][ T9] hid-generic 0003:045F:FFFF.0007: item 0 2 0 12 parsing failed [ 161.175763][ T9] hid-generic 0003:045F:FFFF.0007: probe with driver hid-generic failed with error -22 [ 161.277460][ T5896] usb 2-1: USB disconnect, device number 13 [ 161.877316][ T7379] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 162.175765][ T29] audit: type=1326 audit(1773208714.967:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7384 comm="syz.1.394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20b4f9c799 code=0x7ffc0000 [ 162.262711][ T29] audit: type=1326 audit(1773208714.967:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7384 comm="syz.1.394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20b4f9c799 code=0x7ffc0000 [ 162.409535][ T29] audit: type=1326 audit(1773208715.027:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7384 comm="syz.1.394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f20b4f9c799 code=0x7ffc0000 [ 162.437887][ T29] audit: type=1326 audit(1773208715.037:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7384 comm="syz.1.394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20b4f9c799 code=0x7ffc0000 [ 162.481899][ T7393] Invalid logical block size (26707) [ 162.482887][ T7388] pim6reg1: entered promiscuous mode [ 162.498451][ T29] audit: type=1326 audit(1773208715.037:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7384 comm="syz.1.394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20b4f9c799 code=0x7ffc0000 [ 162.522958][ T7388] pim6reg1: entered allmulticast mode [ 162.536595][ T29] audit: type=1326 audit(1773208715.037:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7384 comm="syz.1.394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f20b4f9c799 code=0x7ffc0000 [ 162.630510][ T29] audit: type=1326 audit(1773208715.037:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7384 comm="syz.1.394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20b4f9c799 code=0x7ffc0000 [ 162.828395][ T7401] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 162.835579][ T29] audit: type=1326 audit(1773208715.037:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7384 comm="syz.1.394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20b4f9c799 code=0x7ffc0000 [ 162.871814][ T7403] syzkaller1: entered promiscuous mode [ 162.877405][ T7403] syzkaller1: entered allmulticast mode [ 162.904119][ T29] audit: type=1326 audit(1773208715.037:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7384 comm="syz.1.394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f20b4f9c799 code=0x7ffc0000 [ 162.968529][ T29] audit: type=1326 audit(1773208715.037:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7384 comm="syz.1.394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20b4f9c799 code=0x7ffc0000 [ 163.107315][ T5896] usb 1-1: new full-speed USB device number 20 using dummy_hcd [ 163.285961][ T5896] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 163.311143][ T5896] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 163.335460][ T5896] usb 1-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 163.566202][ T5896] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.618601][ T5896] usb 1-1: config 0 descriptor?? [ 163.628025][ T5896] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 163.639491][ T5896] dvb-usb: bulk message failed: -22 (3/0) [ 164.000975][ T7401] kvm: pic: level sensitive irq not supported [ 164.001172][ T7401] kvm: pic: non byte read [ 164.024484][ T5896] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 164.113032][ T5896] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 164.126030][ T5896] usb 1-1: media controller created [ 164.140688][ T5896] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 164.227321][ T5896] dvb-usb: bulk message failed: -22 (6/0) [ 164.280627][ T5896] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 164.312192][ T7426] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 164.330062][ T7426] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 164.422960][ T7426] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 164.431517][ T7426] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 164.488040][ T5896] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input12 [ 164.524542][ T5896] dvb-usb: schedule remote query interval to 150 msecs. [ 164.547586][ T5896] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 164.843365][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 164.856552][ T9] dvb-usb: error while querying for an remote control event. [ 164.923257][ T5896] usb 1-1: USB disconnect, device number 20 [ 165.046001][ T5896] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 165.788130][ T7445] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.410'. [ 166.253836][ T7448] syzkaller1: entered promiscuous mode [ 166.268681][ T7448] syzkaller1: entered allmulticast mode [ 167.440150][ T7462] netlink: 4 bytes leftover after parsing attributes in process `syz.3.415'. [ 167.650304][ T7469] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 167.663390][ T7469] netlink: 8 bytes leftover after parsing attributes in process `syz.4.417'. [ 168.013127][ T7477] netlink: 80 bytes leftover after parsing attributes in process `syz.1.421'. [ 168.067007][ T24] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 168.093848][ T7477] FAULT_INJECTION: forcing a failure. [ 168.093848][ T7477] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 168.197720][ T7477] CPU: 0 UID: 0 PID: 7477 Comm: syz.1.421 Tainted: G L syzkaller #0 PREEMPT(full) [ 168.197743][ T7477] Tainted: [L]=SOFTLOCKUP [ 168.197747][ T7477] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 168.197754][ T7477] Call Trace: [ 168.197759][ T7477] [ 168.197764][ T7477] dump_stack_lvl+0xe8/0x150 [ 168.197786][ T7477] should_fail_ex+0x412/0x560 [ 168.197804][ T7477] _copy_from_user+0x2d/0xb0 [ 168.197821][ T7477] kstrtouint_from_user+0xd6/0x180 [ 168.197836][ T7477] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 168.197857][ T7477] proc_fail_nth_write+0x8e/0x210 [ 168.197872][ T7477] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 168.197889][ T7477] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 168.197909][ T7477] vfs_write+0x29a/0xb90 [ 168.197926][ T7477] ? __pfx_vfs_write+0x10/0x10 [ 168.197938][ T7477] ? __fget_files+0x2a/0x420 [ 168.197955][ T7477] ? __fget_files+0x3a0/0x420 [ 168.197968][ T7477] ? __fget_files+0x2a/0x420 [ 168.197987][ T7477] ksys_write+0x150/0x270 [ 168.197999][ T7477] ? __pfx_ksys_write+0x10/0x10 [ 168.198015][ T7477] do_syscall_64+0x14d/0xf80 [ 168.198026][ T7477] ? trace_irq_disable+0x3b/0x150 [ 168.198041][ T7477] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 168.198052][ T7477] ? clear_bhb_loop+0x40/0x90 [ 168.198064][ T7477] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 168.198074][ T7477] RIP: 0033:0x7f20b4f5cfce [ 168.198085][ T7477] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 168.198094][ T7477] RSP: 002b:00007f20b5e66fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 168.198107][ T7477] RAX: ffffffffffffffda RBX: 00007f20b5e676c0 RCX: 00007f20b4f5cfce [ 168.198114][ T7477] RDX: 0000000000000001 RSI: 00007f20b5e670a0 RDI: 0000000000000004 [ 168.198121][ T7477] RBP: 00007f20b5e67090 R08: 0000000000000000 R09: 0000000000000000 [ 168.198127][ T7477] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 168.198133][ T7477] R13: 00007f20b5216038 R14: 00007f20b5215fa0 R15: 00007f20b533fa48 [ 168.198149][ T7477] [ 168.359082][ T24] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 168.454141][ T7479] syzkaller1: entered promiscuous mode [ 168.459909][ T7479] syzkaller1: entered allmulticast mode [ 168.468450][ T24] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 168.480154][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 168.683197][ T24] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 168.761360][ T24] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 168.781123][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.832281][ T24] usb 3-1: Product: syz [ 168.846747][ T24] usb 3-1: Manufacturer: syz [ 168.851421][ T24] usb 3-1: SerialNumber: syz [ 168.877377][ T24] usb 3-1: config 0 descriptor?? [ 168.901509][ T24] garmin_gps 3-1:0.0: Garmin GPS usb/tty converter detected [ 168.955259][ T24] garmin_gps ttyUSB0: garmin_write_bulk - usb_submit_urb(write bulk) failed with status = -8 [ 169.112146][ T24] garmin_gps ttyUSB0: probe with driver garmin_gps failed with error -8 [ 169.114973][ T7492] loop2: detected capacity change from 0 to 7 [ 169.215858][ T24] usb 3-1: USB disconnect, device number 15 [ 169.241078][ T5837] Dev loop2: unable to read RDB block 7 [ 169.275152][ T5837] loop2: unable to read partition table [ 169.275222][ T24] garmin_gps 3-1:0.0: device disconnected [ 169.351896][ T5837] loop2: partition table beyond EOD, truncated [ 169.657467][ T7504] netlink: 4 bytes leftover after parsing attributes in process `syz.1.429'. [ 169.676359][ T7492] Dev loop2: unable to read RDB block 7 [ 169.773830][ T7492] loop2: unable to read partition table [ 169.814124][ T7492] loop2: partition table beyond EOD, truncated [ 169.859232][ T7492] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 171.178824][ T7533] netlink: 20 bytes leftover after parsing attributes in process `syz.2.436'. [ 171.216802][ T29] kauditd_printk_skb: 44 callbacks suppressed [ 171.216821][ T29] audit: type=1800 audit(1773208723.987:178): pid=7532 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.436" name="file0" dev="fuse" ino=0 res=0 errno=0 [ 171.416291][ T797] usb 5-1: new low-speed USB device number 16 using dummy_hcd [ 171.673812][ T7537] syzkaller0: entered promiscuous mode [ 171.693071][ T7537] syzkaller0: entered allmulticast mode [ 171.771266][ T797] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 171.794601][ T797] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 171.811774][ T797] usb 5-1: New USB device found, idVendor=0c70, idProduct=f0b6, bcdDevice= 0.00 [ 171.822330][ T797] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.833853][ T797] usb 5-1: config 0 descriptor?? [ 171.966236][ T9] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 172.140462][ T9] usb 2-1: config 3 has an invalid interface number: 135 but max is 0 [ 172.161765][ T9] usb 2-1: config 3 has no interface number 0 [ 172.176095][ T9] usb 2-1: config 3 interface 135 has no altsetting 0 [ 172.200023][ T9] usb 2-1: New USB device found, idVendor=07c9, idProduct=b010, bcdDevice=16.4b [ 172.225456][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 172.251083][ T9] usb 2-1: Product: syz [ 172.268340][ T9] usb 2-1: Manufacturer: syz [ 172.286644][ T797] aquacomputer_d5next 0003:0C70:F0B6.0008: hidraw0: USB HID v0.00 Device [HID 0c70:f0b6] on usb-dummy_hcd.4-1/input0 [ 172.299082][ T9] usb 2-1: SerialNumber: syz [ 172.306411][ T24] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 172.486347][ T24] usb 1-1: Using ep0 maxpacket: 16 [ 172.498284][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 172.527104][ T24] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 172.552323][ T9] kaweth 2-1:3.135: couldn't find required endpoints [ 172.560711][ T24] usb 1-1: New USB device found, idVendor=046d, idProduct=c295, bcdDevice= 0.00 [ 172.579342][ T7552] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 172.582916][ T9] usb 2-1: USB disconnect, device number 14 [ 172.609330][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.635339][ T7552] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 172.693841][ T24] usb 1-1: config 0 descriptor?? [ 173.137055][ T24] logitech 0003:046D:C295.0009: unknown main item tag 0x0 [ 173.144275][ T24] logitech 0003:046D:C295.0009: unknown main item tag 0x0 [ 173.156229][ T24] logitech 0003:046D:C295.0009: unknown main item tag 0x0 [ 173.163468][ T24] logitech 0003:046D:C295.0009: unknown main item tag 0x0 [ 173.191157][ T24] logitech 0003:046D:C295.0009: unknown main item tag 0x0 [ 173.216878][ T24] logitech 0003:046D:C295.0009: unknown main item tag 0x0 [ 173.224233][ T24] logitech 0003:046D:C295.0009: unknown main item tag 0x0 [ 173.236309][ T24] logitech 0003:046D:C295.0009: unknown main item tag 0x0 [ 173.243512][ T24] logitech 0003:046D:C295.0009: unknown main item tag 0x0 [ 173.267179][ T24] logitech 0003:046D:C295.0009: unknown main item tag 0x0 [ 173.287849][ T24] logitech 0003:046D:C295.0009: hidraw1: USB HID v0.fe Device [HID 046d:c295] on usb-dummy_hcd.0-1/input0 [ 173.320305][ T24] logitech 0003:046D:C295.0009: no inputs found [ 173.335156][ T7542] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 173.363721][ T7542] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 173.420728][ T10] usb 1-1: USB disconnect, device number 21 [ 173.587744][ T7565] netlink: 156 bytes leftover after parsing attributes in process `syz.1.448'. [ 173.716233][ T797] usb 5-1: reset low-speed USB device number 16 using dummy_hcd [ 174.247573][ T7579] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 174.261193][ T7579] netlink: 'syz.0.452': attribute type 2 has an invalid length. [ 174.269460][ T7579] netlink: 132 bytes leftover after parsing attributes in process `syz.0.452'. [ 174.865884][ T7588] bond1: option lacp_rate: invalid value (128) [ 175.001790][ T7588] bond1 (unregistering): Released all slaves [ 175.128847][ T7596] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 175.141102][ T7596] netlink: 'syz.1.457': attribute type 2 has an invalid length. [ 175.149148][ T7596] netlink: 132 bytes leftover after parsing attributes in process `syz.1.457'. [ 175.315018][ T10] usb 5-1: USB disconnect, device number 16 [ 175.886980][ T7613] FAULT_INJECTION: forcing a failure. [ 175.886980][ T7613] name failslab, interval 1, probability 0, space 0, times 0 [ 175.906442][ T7613] CPU: 0 UID: 0 PID: 7613 Comm: syz.3.463 Tainted: G L syzkaller #0 PREEMPT(full) [ 175.906474][ T7613] Tainted: [L]=SOFTLOCKUP [ 175.906480][ T7613] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 175.906490][ T7613] Call Trace: [ 175.906498][ T7613] [ 175.906505][ T7613] dump_stack_lvl+0xe8/0x150 [ 175.906537][ T7613] should_fail_ex+0x412/0x560 [ 175.906563][ T7613] should_failslab+0xa8/0x100 [ 175.906589][ T7613] __kmalloc_node_track_caller_noprof+0xeb/0x7b0 [ 175.906610][ T7613] ? __kasan_kmalloc+0x93/0xb0 [ 175.906630][ T7613] ? __request_module+0x2ec/0x660 [ 175.906652][ T7613] ? __kmalloc_cache_noprof+0x31c/0x660 [ 175.906673][ T7613] kstrdup+0x42/0x100 [ 175.906695][ T7613] __request_module+0x2ec/0x660 [ 175.906718][ T7613] ? rtnl_link_ops_get+0x23/0x250 [ 175.906736][ T7613] ? __pfx___request_module+0x10/0x10 [ 175.906754][ T7613] ? rtnl_link_ops_get+0x23/0x250 [ 175.906767][ T7613] ? rtnl_link_ops_get+0x23/0x250 [ 175.906781][ T7613] ? rtnl_link_ops_get+0x215/0x250 [ 175.906796][ T7613] rtnl_newlink+0x620/0x1be0 [ 175.906810][ T7613] ? kasan_save_track+0x4f/0x80 [ 175.906819][ T7613] ? kasan_save_track+0x3e/0x80 [ 175.906828][ T7613] ? kasan_save_free_info+0x46/0x50 [ 175.906842][ T7613] ? __kasan_slab_free+0x5c/0x80 [ 175.906853][ T7613] ? __netlink_deliver_tap+0x5ad/0x850 [ 175.906866][ T7613] ? netlink_deliver_tap+0x19c/0x1b0 [ 175.906878][ T7613] ? netlink_unicast+0x7e3/0x9b0 [ 175.906888][ T7613] ? netlink_sendmsg+0x813/0xb40 [ 175.906900][ T7613] ? __pfx_rtnl_newlink+0x10/0x10 [ 175.906912][ T7613] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 175.906938][ T7613] ? kasan_quarantine_put+0xbb/0x1f0 [ 175.906948][ T7613] ? lockdep_hardirqs_on+0x7a/0x110 [ 175.906966][ T7613] ? kmem_cache_free+0x187/0x630 [ 175.906976][ T7613] ? nlmon_xmit+0xb0/0x100 [ 175.906997][ T7613] ? __lock_acquire+0x6b5/0x2cf0 [ 175.907013][ T7613] ? __local_bh_enable_ip+0xd0/0x130 [ 175.907027][ T7613] ? lockdep_hardirqs_on+0x7a/0x110 [ 175.907040][ T7613] ? __dev_queue_xmit+0x277/0x3890 [ 175.907051][ T7613] ? __local_bh_enable_ip+0xd0/0x130 [ 175.907063][ T7613] ? __dev_queue_xmit+0x277/0x3890 [ 175.907084][ T7613] ? __pfx_rtnl_newlink+0x10/0x10 [ 175.907096][ T7613] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 175.907111][ T7613] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 175.907123][ T7613] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 175.907135][ T7613] ? ref_tracker_free+0x693/0x840 [ 175.907148][ T7613] ? __copy_skb_header+0xa3/0x4a0 [ 175.907159][ T7613] ? __pfx_ref_tracker_free+0x10/0x10 [ 175.907171][ T7613] ? __skb_clone+0x63/0x7a0 [ 175.907183][ T7613] netlink_rcv_skb+0x232/0x4b0 [ 175.907197][ T7613] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 175.907210][ T7613] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 175.907227][ T7613] ? netlink_deliver_tap+0x2e/0x1b0 [ 175.907243][ T7613] netlink_unicast+0x80f/0x9b0 [ 175.907259][ T7613] ? __pfx_netlink_unicast+0x10/0x10 [ 175.907271][ T7613] ? netlink_sendmsg+0x650/0xb40 [ 175.907282][ T7613] ? skb_put+0x11b/0x210 [ 175.907304][ T7613] netlink_sendmsg+0x813/0xb40 [ 175.907321][ T7613] ? __pfx_netlink_sendmsg+0x10/0x10 [ 175.907335][ T7613] ? aa_sock_msg_perm+0xf1/0x1b0 [ 175.907349][ T7613] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 175.907363][ T7613] ____sys_sendmsg+0x972/0x9f0 [ 175.907377][ T7613] ? __pfx_____sys_sendmsg+0x10/0x10 [ 175.907390][ T7613] ? import_iovec+0x73/0xa0 [ 175.907408][ T7613] ___sys_sendmsg+0x2a5/0x360 [ 175.907420][ T7613] ? __pfx____sys_sendmsg+0x10/0x10 [ 175.907445][ T7613] ? __fget_files+0x2a/0x420 [ 175.907459][ T7613] ? __fget_files+0x3a0/0x420 [ 175.907478][ T7613] __x64_sys_sendmsg+0x1bd/0x2a0 [ 175.907489][ T7613] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 175.907502][ T7613] ? __pfx_ksys_write+0x10/0x10 [ 175.907519][ T7613] do_syscall_64+0x14d/0xf80 [ 175.907528][ T7613] ? trace_irq_disable+0x3b/0x150 [ 175.907543][ T7613] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 175.907552][ T7613] ? clear_bhb_loop+0x40/0x90 [ 175.907564][ T7613] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 175.907574][ T7613] RIP: 0033:0x7fb44cd9c799 [ 175.907585][ T7613] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 175.907595][ T7613] RSP: 002b:00007fb44db90028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 175.907607][ T7613] RAX: ffffffffffffffda RBX: 00007fb44d015fa0 RCX: 00007fb44cd9c799 [ 175.907615][ T7613] RDX: 0000000000000000 RSI: 00002000000006c0 RDI: 0000000000000003 [ 175.907621][ T7613] RBP: 00007fb44db90090 R08: 0000000000000000 R09: 0000000000000000 [ 175.907627][ T7613] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 175.907633][ T7613] R13: 00007fb44d016038 R14: 00007fb44d015fa0 R15: 00007fb44d13fa48 [ 175.907648][ T7613] [ 176.387121][ T29] audit: type=1326 audit(1773208729.187:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7604 comm="syz.0.461" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f98d2f9c799 code=0x0 [ 176.777978][ T7625] netlink: 28 bytes leftover after parsing attributes in process `syz.3.465'. [ 176.787148][ T7625] netlink: 28 bytes leftover after parsing attributes in process `syz.3.465'. [ 177.126784][ T7635] vivid-000: disconnect [ 177.139655][ T7634] vivid-000: reconnect [ 177.652944][ T7645] netlink: 32 bytes leftover after parsing attributes in process `syz.4.475'. [ 179.087616][ T7693] tipc: Enabling of bearer rejected, failed to enable media [ 179.374906][ T7699] macvlan1: entered promiscuous mode [ 179.381250][ T7699] macvlan1: entered allmulticast mode [ 179.387497][ T7699] veth1_vlan: entered allmulticast mode [ 179.579809][ T7677] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 179.587690][ T7677] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 179.602987][ T7677] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 179.614587][ T7677] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 179.623946][ T7677] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 179.640337][ T7677] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 179.752515][ T7677] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 179.765405][ T7677] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 179.774855][ T7677] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 179.782496][ T7677] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 179.977760][ T7677] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 179.990597][ T7677] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 180.003182][ T7677] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 180.010895][ T7677] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 180.027722][ T7677] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 180.654759][ T7715] netlink: 8 bytes leftover after parsing attributes in process `syz.0.490'. [ 180.816359][ T42] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 180.913927][ T5823] Bluetooth: hci1: command 0x0c1a tx timeout [ 181.006983][ T42] usb 2-1: device descriptor read/64, error -71 [ 181.406237][ T42] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 181.546439][ T42] usb 2-1: device descriptor read/64, error -71 [ 181.630574][ T5823] Bluetooth: hci0: command 0x0c1a tx timeout [ 181.660889][ T42] usb usb2-port1: attempt power cycle [ 181.768538][ T7736] netlink: 4 bytes leftover after parsing attributes in process `syz.3.495'. [ 181.786481][ T5823] Bluetooth: hci3: command 0x0c1a tx timeout [ 181.792686][ T5823] Bluetooth: hci2: command 0x0c1a tx timeout [ 181.971906][ T7743] IPVS: set_ctl: invalid protocol: 92 10.1.1.1:20002 [ 182.026376][ T42] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 182.026407][ T5823] Bluetooth: hci4: command 0x0c1a tx timeout [ 182.118885][ T42] usb 2-1: device descriptor read/8, error -71 [ 182.386516][ T42] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 182.421914][ T42] usb 2-1: device descriptor read/8, error -71 [ 182.546631][ T42] usb usb2-port1: unable to enumerate USB device [ 182.586500][ T10] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 182.751342][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 182.787554][ T10] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 182.832648][ T10] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 182.878325][ T10] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 182.913940][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.934357][ T10] usb 5-1: Product: syz [ 182.938928][ T10] usb 5-1: Manufacturer: syz [ 182.943525][ T10] usb 5-1: SerialNumber: syz [ 182.988563][ T5823] Bluetooth: hci1: command 0x0c1a tx timeout [ 183.316350][ T797] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 183.396023][ T10] usb 5-1: 0:2 : does not exist [ 183.499722][ T797] usb 1-1: Using ep0 maxpacket: 32 [ 183.528183][ T797] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 183.566982][ T797] usb 1-1: config 0 has no interface number 0 [ 183.594246][ T797] usb 1-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 183.606574][ T7750] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 183.633970][ T7750] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 183.642207][ T797] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.655892][ T797] usb 1-1: Product: syz [ 183.673143][ T797] usb 1-1: Manufacturer: syz [ 183.678939][ T797] usb 1-1: SerialNumber: syz [ 183.706493][ T5823] Bluetooth: hci0: command 0x0c1a tx timeout [ 183.723715][ T797] usb 1-1: config 0 descriptor?? [ 183.744092][ T797] usb 1-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 183.753402][ T797] usb 1-1: selecting invalid altsetting 1 [ 183.766268][ T797] usb 1-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 183.787937][ T797] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 183.799122][ T797] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 183.816473][ T797] usb 1-1: media controller created [ 183.839922][ T797] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 183.866437][ T5823] Bluetooth: hci2: command 0x0c1a tx timeout [ 183.872716][ T5830] Bluetooth: hci3: command 0x0c1a tx timeout [ 184.106814][ T5830] Bluetooth: hci4: command 0x0c1a tx timeout [ 184.769925][ T7777] FAULT_INJECTION: forcing a failure. [ 184.769925][ T7777] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 184.825095][ T7777] CPU: 0 UID: 0 PID: 7777 Comm: syz.3.509 Tainted: G L syzkaller #0 PREEMPT(full) [ 184.825127][ T7777] Tainted: [L]=SOFTLOCKUP [ 184.825132][ T7777] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 184.825138][ T7777] Call Trace: [ 184.825144][ T7777] [ 184.825149][ T7777] dump_stack_lvl+0xe8/0x150 [ 184.825170][ T7777] should_fail_ex+0x412/0x560 [ 184.825189][ T7777] strncpy_from_user+0x36/0x2b0 [ 184.825205][ T7777] do_getname+0x77/0x250 [ 184.825220][ T7777] __se_sys_rmdir+0x1e/0x140 [ 184.825235][ T7777] do_syscall_64+0x14d/0xf80 [ 184.825245][ T7777] ? trace_irq_disable+0x3b/0x150 [ 184.825261][ T7777] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 184.825271][ T7777] ? clear_bhb_loop+0x40/0x90 [ 184.825284][ T7777] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 184.825294][ T7777] RIP: 0033:0x7fb44cd9c799 [ 184.825305][ T7777] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 184.825314][ T7777] RSP: 002b:00007fb44db90028 EFLAGS: 00000246 ORIG_RAX: 0000000000000054 [ 184.825326][ T7777] RAX: ffffffffffffffda RBX: 00007fb44d015fa0 RCX: 00007fb44cd9c799 [ 184.825333][ T7777] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000100 [ 184.825339][ T7777] RBP: 00007fb44db90090 R08: 0000000000000000 R09: 0000000000000000 [ 184.825346][ T7777] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 184.825351][ T7777] R13: 00007fb44d016038 R14: 00007fb44d015fa0 R15: 00007fb44d13fa48 [ 184.825372][ T7777] [ 184.987934][ T797] usb 1-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 184.995331][ T797] zl10353_read_register: readreg error (reg=127, ret==-110) [ 185.067096][ T5830] Bluetooth: hci1: command 0x0c1a tx timeout [ 185.417413][ T10] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 185.541735][ T797] usb 1-1: USB disconnect, device number 22 [ 185.663257][ T10] usb 5-1: USB disconnect, device number 17 [ 185.744795][ T5822] udevd[5822]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 185.788224][ T5830] Bluetooth: hci0: command 0x0c1a tx timeout [ 185.946359][ T5830] Bluetooth: hci3: command 0x0c1a tx timeout [ 185.946801][ T5823] Bluetooth: hci2: command 0x0c1a tx timeout [ 185.984354][ T7789] rdma_op ffff88805981a9f0 conn xmit_rdma 0000000000000000 [ 186.066101][ T7790] input: syz0 as /devices/virtual/input/input13 [ 186.109247][ T29] audit: type=1326 audit(1773208738.907:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7788 comm="syz.4.513" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff4ac79c799 code=0x0 [ 186.186274][ T5823] Bluetooth: hci4: command 0x0c1a tx timeout [ 186.530816][ T7800] netlink: 4 bytes leftover after parsing attributes in process `syz.3.515'. [ 186.548175][ T7801] netlink: 4 bytes leftover after parsing attributes in process `syz.0.516'. [ 186.886332][ T42] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 187.065724][ T42] usb 3-1: Using ep0 maxpacket: 8 [ 187.104480][ T42] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 187.131548][ T42] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 187.161368][ T42] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 187.322137][ T42] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 187.419878][ T42] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 187.454507][ T42] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.916325][ T42] usb 3-1: GET_CAPABILITIES returned 0 [ 187.921852][ T42] usbtmc 3-1:16.0: can't read capabilities [ 188.014647][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 188.024780][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 188.034346][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 188.043961][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 188.053345][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 188.062922][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 188.072357][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 188.081892][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 188.091357][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 188.100890][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 188.110628][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 188.120228][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 188.129611][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 188.138740][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 188.147839][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 188.156956][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 189.186767][ T7841] loop2: detected capacity change from 0 to 7 [ 189.206582][ T7841] Dev loop2: unable to read RDB block 7 [ 189.212343][ T7841] loop2: AHDI p2 p3 [ 189.216538][ T7841] loop2: partition table partially beyond EOD, truncated [ 189.303897][ T7841] netlink: 52 bytes leftover after parsing attributes in process `syz.0.526'. [ 190.271461][ T7846] netlink: 148 bytes leftover after parsing attributes in process `syz.1.529'. [ 190.281112][ T7846] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 190.670764][ T797] usb 3-1: USB disconnect, device number 16 [ 190.758750][ T7860] netlink: 4 bytes leftover after parsing attributes in process `syz.1.532'. [ 191.448515][ T7875] openvswitch: netlink: Missing key (keys=40, expected=80) [ 192.271797][ T7881] netlink: 4 bytes leftover after parsing attributes in process `syz.2.538'. [ 194.045031][ T7904] loop2: detected capacity change from 0 to 7 [ 194.097642][ T24] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 194.156228][ T10] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 194.200306][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.256412][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.258619][ T797] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 194.298529][ T7904] Dev loop2: unable to read RDB block 7 [ 194.304752][ T7904] loop2: AHDI p2 p3 [ 194.319286][ T7904] loop2: partition table partially beyond EOD, truncated [ 194.440167][ T24] usb 2-1: config 0 has an invalid interface number: 168 but max is 0 [ 194.453709][ T24] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 194.467514][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 194.472894][ T24] usb 2-1: config 0 has no interface number 0 [ 194.485721][ T24] usb 2-1: config 0 interface 168 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 194.498356][ T24] usb 2-1: config 0 interface 168 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 194.530596][ T24] usb 2-1: config 0 interface 168 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 16 [ 194.556852][ T24] usb 2-1: New USB device found, idVendor=0959, idProduct=2bd0, bcdDevice=48.98 [ 194.566689][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 194.606335][ T797] usb 1-1: Using ep0 maxpacket: 16 [ 194.613752][ T10] usb 4-1: device descriptor read/all, error -71 [ 194.626348][ T797] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 194.677012][ T797] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 194.737230][ T797] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 194.738126][ T24] usb 2-1: config 0 descriptor?? [ 194.748520][ T797] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 194.769251][ T797] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 194.778581][ T797] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 194.788964][ T797] usb 1-1: Product: syz [ 194.794430][ T797] usb 1-1: Manufacturer: syz [ 194.817244][ T797] usb 1-1: SerialNumber: syz [ 194.875455][ T24] HFC-S_USB 2-1:0.168: probe with driver HFC-S_USB failed with error -5 [ 195.099435][ T9] usb 2-1: USB disconnect, device number 19 [ 195.287722][ T7912] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 195.297454][ T7912] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 196.000582][ T7918] fuse: Bad value for 'fd' [ 196.266299][ T10] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 196.446255][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 196.485441][ T10] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 196.630969][ T7933] netlink: 20 bytes leftover after parsing attributes in process `syz.4.549'. [ 196.733547][ T29] audit: type=1800 audit(1773208749.447:181): pid=7932 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.549" name="file0" dev="fuse" ino=0 res=0 errno=0 [ 196.768479][ T10] usb 2-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 196.806601][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 196.815306][ T10] usb 2-1: Product: syz [ 196.822205][ T10] usb 2-1: Manufacturer: syz [ 196.858977][ T10] usb 2-1: SerialNumber: syz [ 196.872374][ T10] usb 2-1: config 0 descriptor?? [ 196.891560][ T10] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 197.425139][ T797] usb 1-1: 0:2 : does not exist [ 197.789990][ T797] usb 1-1: USB disconnect, device number 23 [ 197.914062][ T5822] udevd[5822]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 198.183718][ T7921] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 198.201139][ T7921] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 198.249051][ T7921] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 198.258018][ T7921] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 198.372554][ T7951] netlink: 'syz.3.552': attribute type 1 has an invalid length. [ 199.216367][ T10] gspca_zc3xx: reg_w_i err -110 [ 199.352229][ T7968] FAULT_INJECTION: forcing a failure. [ 199.352229][ T7968] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 199.367023][ T7968] CPU: 0 UID: 0 PID: 7968 Comm: syz.3.557 Tainted: G L syzkaller #0 PREEMPT(full) [ 199.367052][ T7968] Tainted: [L]=SOFTLOCKUP [ 199.367058][ T7968] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 199.367068][ T7968] Call Trace: [ 199.367076][ T7968] [ 199.367083][ T7968] dump_stack_lvl+0xe8/0x150 [ 199.367115][ T7968] should_fail_ex+0x412/0x560 [ 199.367143][ T7968] _copy_from_user+0x2d/0xb0 [ 199.367170][ T7968] ___sys_sendmsg+0x1c6/0x360 [ 199.367193][ T7968] ? __pfx____sys_sendmsg+0x10/0x10 [ 199.367238][ T7968] ? __fget_files+0x2a/0x420 [ 199.367263][ T7968] ? __fget_files+0x3a0/0x420 [ 199.367296][ T7968] __x64_sys_sendmsg+0x1bd/0x2a0 [ 199.367323][ T7968] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 199.367349][ T7968] ? __pfx_ksys_write+0x10/0x10 [ 199.367379][ T7968] do_syscall_64+0x14d/0xf80 [ 199.367395][ T7968] ? trace_irq_disable+0x3b/0x150 [ 199.367421][ T7968] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 199.367439][ T7968] ? clear_bhb_loop+0x40/0x90 [ 199.367460][ T7968] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 199.367477][ T7968] RIP: 0033:0x7fb44cd9c799 [ 199.367492][ T7968] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 199.367506][ T7968] RSP: 002b:00007fb44db90028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 199.367524][ T7968] RAX: ffffffffffffffda RBX: 00007fb44d015fa0 RCX: 00007fb44cd9c799 [ 199.367536][ T7968] RDX: 0000000000008050 RSI: 00002000000000c0 RDI: 0000000000000004 [ 199.367548][ T7968] RBP: 00007fb44db90090 R08: 0000000000000000 R09: 0000000000000000 [ 199.367559][ T7968] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 199.367570][ T7968] R13: 00007fb44d016038 R14: 00007fb44d015fa0 R15: 00007fb44d13fa48 [ 199.367595][ T7968] [ 199.850649][ T10] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 199.858723][ T10] gspca_zc3xx 2-1:0.0: probe with driver gspca_zc3xx failed with error -110 [ 200.014977][ T7978] tipc: Started in network mode [ 200.022971][ T7978] tipc: Node identity , cluster identity 4711 [ 200.059442][ T7978] tipc: Failed to obtain node identity [ 200.071237][ T7978] tipc: Enabling of bearer rejected, failed to enable media [ 200.365796][ T5896] usb 2-1: USB disconnect, device number 20 [ 200.570662][ T7996] syzkaller1: entered promiscuous mode [ 200.576390][ T7996] syzkaller1: entered allmulticast mode [ 201.118230][ T29] audit: type=1326 audit(1773208753.917:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8007 comm="syz.2.569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6e859c799 code=0x7ffc0000 [ 201.145076][ T8010] fuse: Bad value for 'group_id' [ 201.160930][ T8010] fuse: Bad value for 'group_id' [ 201.257649][ T29] audit: type=1326 audit(1773208753.917:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8007 comm="syz.2.569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6e859c799 code=0x7ffc0000 [ 201.424107][ T29] audit: type=1326 audit(1773208753.917:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8007 comm="syz.2.569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6e859c799 code=0x7ffc0000 [ 201.450011][ T8016] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 201.491294][ T8016] batadv_slave_0: entered promiscuous mode [ 201.503671][ T29] audit: type=1326 audit(1773208753.917:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8007 comm="syz.2.569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6e859c799 code=0x7ffc0000 [ 201.632774][ T29] audit: type=1326 audit(1773208753.917:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8007 comm="syz.2.569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe6e859c799 code=0x7ffc0000 [ 201.705379][ T29] audit: type=1326 audit(1773208753.917:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8007 comm="syz.2.569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6e859c799 code=0x7ffc0000 [ 201.875488][ T29] audit: type=1326 audit(1773208753.917:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8007 comm="syz.2.569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6e859c799 code=0x7ffc0000 [ 201.976756][ T29] audit: type=1326 audit(1773208753.917:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8007 comm="syz.2.569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6e859c799 code=0x7ffc0000 [ 202.100174][ T29] audit: type=1326 audit(1773208753.917:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8007 comm="syz.2.569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6e859c799 code=0x7ffc0000 [ 202.441005][ T29] audit: type=1326 audit(1773208753.917:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8007 comm="syz.2.569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fe6e859b607 code=0x7ffc0000 [ 202.519671][ T8036] PKCS7: Unknown OID: [4] 5.25.43183(bad) [ 202.531723][ T29] audit: type=1326 audit(1773208753.917:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8007 comm="syz.2.569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7fe6e859da0a code=0x7ffc0000 [ 202.578573][ T8036] PKCS7: Only support pkcs7_signedData type [ 202.595843][ T29] audit: type=1326 audit(1773208753.937:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8007 comm="syz.2.569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7fe6e855cfce code=0x7ffc0000 [ 202.733997][ T29] audit: type=1326 audit(1773208753.937:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8007 comm="syz.2.569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6e859c799 code=0x7ffc0000 [ 202.797433][ T8040] netlink: 16 bytes leftover after parsing attributes in process `syz.0.575'. [ 202.915910][ T8048] netlink: 28 bytes leftover after parsing attributes in process `syz.1.581'. [ 202.935507][ T8049] netlink: 8 bytes leftover after parsing attributes in process `syz.4.580'. [ 202.956189][ T29] audit: type=1326 audit(1773208753.937:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8007 comm="syz.2.569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6e859c799 code=0x7ffc0000 [ 202.992828][ T29] audit: type=1326 audit(1773208753.937:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8007 comm="syz.2.569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6e859c799 code=0x7ffc0000 [ 203.222357][ T29] audit: type=1326 audit(1773208753.937:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8007 comm="syz.2.569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7fe6e855cfce code=0x7ffc0000 [ 203.245922][ T8050] SET target dimension over the limit! [ 203.649329][ T8064] netlink: 4 bytes leftover after parsing attributes in process `syz.3.583'. [ 203.667246][ T8067] FAULT_INJECTION: forcing a failure. [ 203.667246][ T8067] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 203.680421][ T8067] CPU: 1 UID: 0 PID: 8067 Comm: syz.2.586 Tainted: G L syzkaller #0 PREEMPT(full) [ 203.680440][ T8067] Tainted: [L]=SOFTLOCKUP [ 203.680444][ T8067] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 203.680451][ T8067] Call Trace: [ 203.680456][ T8067] [ 203.680462][ T8067] dump_stack_lvl+0xe8/0x150 [ 203.680482][ T8067] should_fail_ex+0x412/0x560 [ 203.680500][ T8067] _copy_to_user+0x31/0xb0 [ 203.680518][ T8067] simple_read_from_buffer+0xe1/0x170 [ 203.680540][ T8067] proc_fail_nth_read+0x1bb/0x230 [ 203.680557][ T8067] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 203.680573][ T8067] ? rw_verify_area+0x2a6/0x4d0 [ 203.680591][ T8067] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 203.680620][ T8067] vfs_read+0x20c/0xa70 [ 203.680636][ T8067] ? fdget_pos+0x246/0x320 [ 203.680664][ T8067] ? __pfx___mutex_lock+0x10/0x10 [ 203.680678][ T8067] ? __pfx_vfs_read+0x10/0x10 [ 203.680689][ T8067] ? __fget_files+0x2a/0x420 [ 203.680705][ T8067] ? __fget_files+0x3a0/0x420 [ 203.680718][ T8067] ? __fget_files+0x2a/0x420 [ 203.680736][ T8067] ksys_read+0x150/0x270 [ 203.680748][ T8067] ? __pfx_ksys_read+0x10/0x10 [ 203.680763][ T8067] do_syscall_64+0x14d/0xf80 [ 203.680773][ T8067] ? trace_irq_disable+0x3b/0x150 [ 203.680788][ T8067] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 203.680798][ T8067] ? clear_bhb_loop+0x40/0x90 [ 203.680810][ T8067] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 203.680820][ T8067] RIP: 0033:0x7fe6e855cfce [ 203.680831][ T8067] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 203.680840][ T8067] RSP: 002b:00007fe6e94a9fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 203.680852][ T8067] RAX: ffffffffffffffda RBX: 00007fe6e94aa6c0 RCX: 00007fe6e855cfce [ 203.680860][ T8067] RDX: 000000000000000f RSI: 00007fe6e94aa0a0 RDI: 0000000000000004 [ 203.680866][ T8067] RBP: 00007fe6e94aa090 R08: 0000000000000000 R09: 0000000000000000 [ 203.680872][ T8067] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 203.680878][ T8067] R13: 00007fe6e8816038 R14: 00007fe6e8815fa0 R15: 00007fe6e893fa48 [ 203.680893][ T8067] [ 204.157396][ T8072] faux_driver vgem: [drm] Unknown color mode 13; guessing buffer size. [ 204.262225][ T8075] FAULT_INJECTION: forcing a failure. [ 204.262225][ T8075] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 204.275632][ T8075] CPU: 1 UID: 0 PID: 8075 Comm: syz.3.588 Tainted: G L syzkaller #0 PREEMPT(full) [ 204.275651][ T8075] Tainted: [L]=SOFTLOCKUP [ 204.275655][ T8075] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 204.275661][ T8075] Call Trace: [ 204.275668][ T8075] [ 204.275673][ T8075] dump_stack_lvl+0xe8/0x150 [ 204.275694][ T8075] should_fail_ex+0x412/0x560 [ 204.275712][ T8075] _copy_from_iter+0x1d3/0x1670 [ 204.275728][ T8075] ? __alloc_frozen_pages_noprof+0x1de/0x380 [ 204.275744][ T8075] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 204.275759][ T8075] ? __pfx__copy_from_iter+0x10/0x10 [ 204.275771][ T8075] ? __pfx___mutex_lock+0x10/0x10 [ 204.275783][ T8075] ? aa_file_perm+0x50e/0x15e0 [ 204.275799][ T8075] ? page_copy_sane+0x4e/0x270 [ 204.275813][ T8075] copy_page_from_iter+0xdd/0x170 [ 204.275829][ T8075] anon_pipe_write+0xa0b/0x1480 [ 204.275843][ T8075] ? __pfx_aa_file_perm+0x10/0x10 [ 204.275870][ T8075] ? __pfx_anon_pipe_write+0x10/0x10 [ 204.275889][ T8075] ? apparmor_file_permission+0x1f4/0x300 [ 204.275911][ T8075] ? bpf_lsm_file_permission+0x9/0x20 [ 204.275933][ T8075] ? security_file_permission+0x75/0x260 [ 204.275960][ T8075] vfs_write+0x61d/0xb90 [ 204.275984][ T8075] ? __pfx_vfs_write+0x10/0x10 [ 204.275999][ T8075] ? __fget_files+0x2a/0x420 [ 204.276018][ T8075] ksys_write+0x150/0x270 [ 204.276030][ T8075] ? __pfx_ksys_write+0x10/0x10 [ 204.276046][ T8075] do_syscall_64+0x14d/0xf80 [ 204.276056][ T8075] ? trace_irq_disable+0x3b/0x150 [ 204.276071][ T8075] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 204.276081][ T8075] ? clear_bhb_loop+0x40/0x90 [ 204.276100][ T8075] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 204.276114][ T8075] RIP: 0033:0x7fb44cd9c799 [ 204.276131][ T8075] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 204.276145][ T8075] RSP: 002b:00007fb44db90028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 204.276165][ T8075] RAX: ffffffffffffffda RBX: 00007fb44d015fa0 RCX: 00007fb44cd9c799 [ 204.276176][ T8075] RDX: 00000000fffffecc RSI: 0000200000000000 RDI: 0000000000000004 [ 204.276186][ T8075] RBP: 00007fb44db90090 R08: 0000000000000000 R09: 0000000000000000 [ 204.276197][ T8075] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 204.276208][ T8075] R13: 00007fb44d016038 R14: 00007fb44d015fa0 R15: 00007fb44d13fa48 [ 204.276223][ T8075] [ 205.216239][ T797] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 205.228057][ T5896] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 205.290674][ T8088] netdevsim netdevsim2 netdevsim0: left allmulticast mode [ 205.299574][ T8088] syzkaller0: left allmulticast mode [ 205.356399][ T24] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 205.440759][ T797] usb 1-1: device descriptor read/64, error -71 [ 205.563984][ T5896] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 205.574237][ T24] usb 4-1: Using ep0 maxpacket: 8 [ 205.579524][ T5896] usb 5-1: config 0 has no interfaces? [ 205.589479][ T5896] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 205.600632][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 205.613893][ T24] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xB3, changing to 0x83 [ 205.625963][ T5896] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 205.639284][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 205.696756][ T797] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 205.905078][ T797] usb 1-1: device descriptor read/64, error -71 [ 206.036775][ T797] usb usb1-port1: attempt power cycle [ 206.037650][ T5896] usb 5-1: config 0 descriptor?? [ 206.108835][ T24] usb 4-1: New USB device found, idVendor=077d, idProduct=627a, bcdDevice= 0.01 [ 206.199474][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 206.229109][ T24] usb 4-1: Product: syz [ 206.314596][ T24] usb 4-1: Manufacturer: syz [ 206.349100][ T24] usb 4-1: SerialNumber: syz [ 206.367462][ T24] usb 4-1: config 0 descriptor?? [ 206.380600][ T24] radioshark 4-1:0.0: Invalid radioSHARK device [ 206.396225][ T24] radioshark 4-1:0.0: probe with driver radioshark failed with error -22 [ 206.408315][ T24] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 206.428863][ T797] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 206.474546][ T797] usb 1-1: device descriptor read/8, error -71 [ 206.487497][ T8094] vxcan0: tx drop: invalid sa for name 0x0000000000000001 [ 206.606758][ T8084] netlink: 'syz.3.590': attribute type 2 has an invalid length. [ 206.630829][ T8084] @„;: entered promiscuous mode [ 206.806239][ T797] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 206.827214][ T797] usb 1-1: device descriptor read/8, error -71 [ 206.864407][ T5896] usb 4-1: USB disconnect, device number 19 [ 207.006363][ T797] usb usb1-port1: unable to enumerate USB device [ 207.053262][ T8106] netlink: 'syz.1.597': attribute type 9 has an invalid length. [ 207.070090][ T8106] netlink: 4 bytes leftover after parsing attributes in process `syz.1.597'. [ 207.753583][ T24] usb 5-1: USB disconnect, device number 18 [ 207.964794][ T8127] syzkaller1: entered promiscuous mode [ 207.970518][ T8127] syzkaller1: entered allmulticast mode [ 208.632136][ T8140] netlink: 20 bytes leftover after parsing attributes in process `syz.1.603'. [ 208.718935][ T29] kauditd_printk_skb: 36 callbacks suppressed [ 208.718965][ T29] audit: type=1800 audit(1773208761.447:234): pid=8139 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.603" name="file0" dev="fuse" ino=0 res=0 errno=0 [ 209.172906][ T8148] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 209.183369][ T8148] netlink: 'syz.2.606': attribute type 2 has an invalid length. [ 209.191415][ T8148] netlink: 132 bytes leftover after parsing attributes in process `syz.2.606'. [ 210.266618][ T797] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 210.398641][ T8170] netlink: 136 bytes leftover after parsing attributes in process `syz.2.614'. [ 210.426750][ T797] usb 2-1: Using ep0 maxpacket: 8 [ 210.436500][ T797] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 210.448406][ T797] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 210.458858][ T797] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 210.469059][ T10] usb 4-1: new low-speed USB device number 20 using dummy_hcd [ 210.478099][ T797] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 20203, setting to 1024 [ 210.490321][ T797] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 210.501554][ T797] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 210.517277][ T797] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 210.526526][ T797] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.636258][ T10] usb 4-1: Invalid ep0 maxpacket: 16 [ 210.656287][ T5883] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 210.740326][ T797] usb 2-1: usb_control_msg returned -32 [ 210.746176][ T797] usbtmc 2-1:16.0: can't read capabilities [ 210.824817][ T10] usb 4-1: new low-speed USB device number 21 using dummy_hcd [ 210.891068][ T5883] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 210.903916][ T5883] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 210.914821][ T5883] usb 3-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 210.926533][ T5883] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.945441][ T5883] usb 3-1: config 0 descriptor?? [ 211.060496][ T10] usb 4-1: Invalid ep0 maxpacket: 16 [ 211.066249][ T10] usb usb4-port1: attempt power cycle [ 211.098762][ T8189] usbtmc 2-1:16.0: usb_control_msg returned -32 [ 211.114036][ T797] usb 2-1: USB disconnect, device number 21 [ 211.356512][ T5883] hid_parser_main: 28 callbacks suppressed [ 211.356536][ T5883] playstation 0003:054C:0DF2.000A: unknown main item tag 0x0 [ 211.370466][ T5883] playstation 0003:054C:0DF2.000A: unknown main item tag 0x0 [ 211.381640][ T5883] playstation 0003:054C:0DF2.000A: unknown main item tag 0x0 [ 211.392737][ T5883] playstation 0003:054C:0DF2.000A: unknown main item tag 0x0 [ 211.406270][ T10] usb 4-1: new low-speed USB device number 22 using dummy_hcd [ 211.427988][ T10] usb 4-1: Invalid ep0 maxpacket: 16 [ 211.433561][ T5883] playstation 0003:054C:0DF2.000A: unknown main item tag 0x0 [ 211.470137][ T5883] playstation 0003:054C:0DF2.000A: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.2-1/input0 [ 211.487655][ T8191] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 211.597137][ T10] usb 4-1: new low-speed USB device number 23 using dummy_hcd [ 211.619790][ T10] usb 4-1: Invalid ep0 maxpacket: 16 [ 211.628470][ T5883] playstation 0003:054C:0DF2.000A: Invalid reportID received, expected 9 got 169 [ 211.646352][ T10] usb usb4-port1: unable to enumerate USB device [ 211.656907][ T5883] playstation 0003:054C:0DF2.000A: Failed to retrieve DualSense pairing info: -22 [ 211.673639][ T5883] playstation 0003:054C:0DF2.000A: Failed to get MAC address from DualSense [ 211.722145][ T5883] playstation 0003:054C:0DF2.000A: Failed to create dualsense. [ 211.768437][ T5883] playstation 0003:054C:0DF2.000A: probe with driver playstation failed with error -22 [ 211.829578][ T5883] usb 3-1: USB disconnect, device number 17 [ 212.116218][ T10] usb 5-1: new full-speed USB device number 19 using dummy_hcd [ 212.246330][ T10] usb 5-1: device descriptor read/64, error -71 [ 212.488461][ T10] usb 5-1: new full-speed USB device number 20 using dummy_hcd [ 212.626741][ T10] usb 5-1: device descriptor read/64, error -71 [ 212.653423][ T29] audit: type=1326 audit(1773208765.447:235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8214 comm="syz.2.628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6e859c799 code=0x7ffc0000 [ 212.679713][ T29] audit: type=1326 audit(1773208765.447:236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8214 comm="syz.2.628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=122 compat=0 ip=0x7fe6e859c799 code=0x7ffc0000 [ 212.718189][ T29] audit: type=1326 audit(1773208765.447:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8214 comm="syz.2.628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6e859c799 code=0x7ffc0000 [ 212.743810][ T29] audit: type=1326 audit(1773208765.447:238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8214 comm="syz.2.628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7fe6e859c799 code=0x7ffc0000 [ 212.756507][ T10] usb usb5-port1: attempt power cycle [ 212.800811][ T8222] FAULT_INJECTION: forcing a failure. [ 212.800811][ T8222] name failslab, interval 1, probability 0, space 0, times 0 [ 212.813667][ T8222] CPU: 1 UID: 0 PID: 8222 Comm: syz.1.631 Tainted: G L syzkaller #0 PREEMPT(full) [ 212.813687][ T8222] Tainted: [L]=SOFTLOCKUP [ 212.813691][ T8222] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 212.813697][ T8222] Call Trace: [ 212.813703][ T8222] [ 212.813708][ T8222] dump_stack_lvl+0xe8/0x150 [ 212.813729][ T8222] should_fail_ex+0x412/0x560 [ 212.813748][ T8222] should_failslab+0xa8/0x100 [ 212.813762][ T8222] ? skb_clone+0x212/0x3a0 [ 212.813774][ T8222] kmem_cache_alloc_noprof+0x87/0x650 [ 212.813785][ T8222] ? __netlink_lookup+0xc6/0x8b0 [ 212.813804][ T8222] skb_clone+0x212/0x3a0 [ 212.813815][ T8222] __netlink_deliver_tap+0x404/0x850 [ 212.813834][ T8222] ? netlink_deliver_tap+0x2e/0x1b0 [ 212.813848][ T8222] netlink_deliver_tap+0x19c/0x1b0 [ 212.813861][ T8222] netlink_unicast+0x7e3/0x9b0 [ 212.813877][ T8222] ? __pfx_netlink_unicast+0x10/0x10 [ 212.813889][ T8222] ? netlink_sendmsg+0x650/0xb40 [ 212.813901][ T8222] ? skb_put+0x11b/0x210 [ 212.813917][ T8222] netlink_sendmsg+0x813/0xb40 [ 212.813934][ T8222] ? __pfx_netlink_sendmsg+0x10/0x10 [ 212.813949][ T8222] ? aa_sock_msg_perm+0xf1/0x1b0 [ 212.813963][ T8222] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 212.813977][ T8222] ____sys_sendmsg+0x972/0x9f0 [ 212.813992][ T8222] ? __pfx_____sys_sendmsg+0x10/0x10 [ 212.814006][ T8222] ? import_iovec+0x73/0xa0 [ 212.814024][ T8222] ___sys_sendmsg+0x2a5/0x360 [ 212.814036][ T8222] ? __pfx____sys_sendmsg+0x10/0x10 [ 212.814068][ T8222] ? __fget_files+0x2a/0x420 [ 212.814083][ T8222] ? __fget_files+0x3a0/0x420 [ 212.814102][ T8222] __x64_sys_sendmsg+0x1bd/0x2a0 [ 212.814113][ T8222] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 212.814127][ T8222] ? __pfx_ksys_write+0x10/0x10 [ 212.814145][ T8222] do_syscall_64+0x14d/0xf80 [ 212.814154][ T8222] ? trace_irq_disable+0x3b/0x150 [ 212.814169][ T8222] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 212.814180][ T8222] ? clear_bhb_loop+0x40/0x90 [ 212.814192][ T8222] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 212.814202][ T8222] RIP: 0033:0x7f20b4f9c799 [ 212.814213][ T8222] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 212.814222][ T8222] RSP: 002b:00007f20b5e67028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 212.814234][ T8222] RAX: ffffffffffffffda RBX: 00007f20b5215fa0 RCX: 00007f20b4f9c799 [ 212.814242][ T8222] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 212.814248][ T8222] RBP: 00007f20b5e67090 R08: 0000000000000000 R09: 0000000000000000 [ 212.814254][ T8222] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 212.814260][ T8222] R13: 00007f20b5216038 R14: 00007f20b5215fa0 R15: 00007f20b533fa48 [ 212.814275][ T8222] [ 212.814296][ T8222] netlink: 140 bytes leftover after parsing attributes in process `syz.1.631'. [ 213.016342][ T29] audit: type=1326 audit(1773208765.497:239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8214 comm="syz.2.628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6e859c799 code=0x7ffc0000 [ 213.120296][ T8222] netlink: 56 bytes leftover after parsing attributes in process `syz.1.631'. [ 213.187642][ T10] usb 5-1: new full-speed USB device number 21 using dummy_hcd [ 213.228203][ T10] usb 5-1: device descriptor read/8, error -71 [ 213.357331][ T29] audit: type=1326 audit(1773208765.497:240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8214 comm="syz.2.628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6e859c799 code=0x7ffc0000 [ 213.380440][ T29] audit: type=1326 audit(1773208765.877:241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8214 comm="syz.2.628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fe6e859c799 code=0x7ffc0000 [ 213.404002][ T29] audit: type=1326 audit(1773208765.877:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8214 comm="syz.2.628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6e859c799 code=0x7ffc0000 [ 213.429122][ T8229] IPVS: set_ctl: invalid protocol: 92 10.1.1.1:20002 [ 213.432739][ T29] audit: type=1326 audit(1773208765.877:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8214 comm="syz.2.628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6e859c799 code=0x7ffc0000 [ 213.491795][ T10] usb 5-1: new full-speed USB device number 22 using dummy_hcd [ 213.491794][ T42] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 213.593597][ T10] usb 5-1: device descriptor read/8, error -71 [ 213.690626][ T42] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 213.700257][ T8236] FAULT_INJECTION: forcing a failure. [ 213.700257][ T8236] name failslab, interval 1, probability 0, space 0, times 0 [ 213.713689][ T10] usb usb5-port1: unable to enumerate USB device [ 213.724760][ T8236] CPU: 0 UID: 0 PID: 8236 Comm: syz.1.634 Tainted: G L syzkaller #0 PREEMPT(full) [ 213.724789][ T8236] Tainted: [L]=SOFTLOCKUP [ 213.724796][ T8236] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 213.724802][ T8236] Call Trace: [ 213.724807][ T8236] [ 213.724812][ T8236] dump_stack_lvl+0xe8/0x150 [ 213.724833][ T8236] should_fail_ex+0x412/0x560 [ 213.724852][ T8236] should_failslab+0xa8/0x100 [ 213.724866][ T8236] ? skb_clone+0x212/0x3a0 [ 213.724879][ T8236] kmem_cache_alloc_noprof+0x87/0x650 [ 213.724890][ T8236] ? __netlink_lookup+0xc6/0x8b0 [ 213.724908][ T8236] skb_clone+0x212/0x3a0 [ 213.724920][ T8236] __netlink_deliver_tap+0x404/0x850 [ 213.724939][ T8236] ? netlink_deliver_tap+0x2e/0x1b0 [ 213.724952][ T8236] netlink_deliver_tap+0x19c/0x1b0 [ 213.724965][ T8236] netlink_unicast+0x7e3/0x9b0 [ 213.724980][ T8236] ? __pfx_netlink_unicast+0x10/0x10 [ 213.724993][ T8236] ? netlink_sendmsg+0x650/0xb40 [ 213.725004][ T8236] ? skb_put+0x11b/0x210 [ 213.725020][ T8236] netlink_sendmsg+0x813/0xb40 [ 213.725038][ T8236] ? __pfx_netlink_sendmsg+0x10/0x10 [ 213.725053][ T8236] ? aa_sock_msg_perm+0xf1/0x1b0 [ 213.725069][ T8236] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 213.725084][ T8236] ____sys_sendmsg+0x972/0x9f0 [ 213.725099][ T8236] ? __pfx_____sys_sendmsg+0x10/0x10 [ 213.725113][ T8236] ? import_iovec+0x73/0xa0 [ 213.725131][ T8236] ___sys_sendmsg+0x2a5/0x360 [ 213.725144][ T8236] ? __pfx____sys_sendmsg+0x10/0x10 [ 213.725172][ T8236] ? __fget_files+0x2a/0x420 [ 213.725187][ T8236] ? __fget_files+0x3a0/0x420 [ 213.725205][ T8236] __x64_sys_sendmsg+0x1bd/0x2a0 [ 213.725216][ T8236] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 213.725230][ T8236] ? __pfx_ksys_write+0x10/0x10 [ 213.725248][ T8236] do_syscall_64+0x14d/0xf80 [ 213.725258][ T8236] ? trace_irq_disable+0x3b/0x150 [ 213.725273][ T8236] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 213.725283][ T8236] ? clear_bhb_loop+0x40/0x90 [ 213.725296][ T8236] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 213.725306][ T8236] RIP: 0033:0x7f20b4f9c799 [ 213.725316][ T8236] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 213.725325][ T8236] RSP: 002b:00007f20b5e67028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 213.725337][ T8236] RAX: ffffffffffffffda RBX: 00007f20b5215fa0 RCX: 00007f20b4f9c799 [ 213.725345][ T8236] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 213.725351][ T8236] RBP: 00007f20b5e67090 R08: 0000000000000000 R09: 0000000000000000 [ 213.725357][ T8236] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 213.725363][ T8236] R13: 00007f20b5216038 R14: 00007f20b5215fa0 R15: 00007f20b533fa48 [ 213.725378][ T8236] [ 213.725408][ T8236] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.634'. [ 213.837659][ T42] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 214.161789][ T42] usb 3-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 214.170998][ T42] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.179103][ T42] usb 3-1: Product: syz [ 214.183407][ T42] usb 3-1: Manufacturer: syz [ 214.196598][ T42] usb 3-1: SerialNumber: syz [ 214.204919][ T42] usb 3-1: config 0 descriptor?? [ 214.379819][ T8245] fuse: Unknown parameter 'group_i00000000000000000000' [ 214.518055][ T29] kauditd_printk_skb: 6 callbacks suppressed [ 214.518075][ T29] audit: type=1326 audit(1773208767.297:250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8214 comm="syz.2.628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe6e859c799 code=0x7ffc0000 [ 214.600937][ T29] audit: type=1326 audit(1773208767.297:251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8214 comm="syz.2.628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6e859c799 code=0x7ffc0000 [ 214.679206][ T10] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 214.693961][ T29] audit: type=1326 audit(1773208767.297:252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8214 comm="syz.2.628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6e859c799 code=0x7ffc0000 [ 214.761538][ T29] audit: type=1326 audit(1773208767.297:253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8214 comm="syz.2.628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe6e859c799 code=0x7ffc0000 [ 214.856290][ T29] audit: type=1326 audit(1773208767.297:254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8214 comm="syz.2.628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6e859c799 code=0x7ffc0000 [ 214.903562][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 214.920544][ T29] audit: type=1326 audit(1773208767.307:255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8214 comm="syz.2.628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6e859c799 code=0x7ffc0000 [ 214.955047][ T10] usb 2-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 214.967471][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.998800][ T10] usb 2-1: Product: syz [ 215.015727][ T10] usb 2-1: Manufacturer: syz [ 215.042659][ T10] usb 2-1: SerialNumber: syz [ 215.088365][ T10] usb 2-1: config 0 descriptor?? [ 215.251988][ T8260] netlink: 'syz.0.642': attribute type 10 has an invalid length. [ 215.283980][ T8260] team0: Device ipvlan1 failed to register rx_handler [ 215.416251][ T5883] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 215.537837][ T10] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 215.548031][ T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 215.562586][ T10] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 215.570921][ T10] usb 2-1: media controller created [ 215.580372][ T5883] usb 5-1: Using ep0 maxpacket: 32 [ 215.600767][ T5883] usb 5-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 215.621606][ T5883] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 215.633257][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 215.646414][ T5883] usb 5-1: Product: syz [ 215.663408][ T5883] usb 5-1: Manufacturer: syz [ 215.668254][ T5883] usb 5-1: SerialNumber: syz [ 215.688189][ T5883] usb 5-1: config 0 descriptor?? [ 215.699911][ T5883] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 215.711237][ T5883] dvb-usb: bulk message failed: -22 (4/0) [ 215.717227][ T5883] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 215.728160][ T5883] dvb-usb: bulk message failed: -22 (5/0) [ 215.735426][ T5883] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 215.753391][ T5883] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 215.765759][ T5883] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 215.774360][ T5883] usb 5-1: media controller created [ 215.830889][ T5883] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 215.855681][ T5883] usb 5-1: selecting invalid altsetting 3 [ 215.866057][ T5883] ttusb2: set interface to alts=3 failed [ 215.990796][ T5883] DVB: Unable to find symbol tda10086_attach() [ 215.999973][ T8267] No buffer was provided with the request [ 216.018715][ T8268] netlink: 8 bytes leftover after parsing attributes in process `syz.4.641'. [ 216.055946][ T5883] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 216.085153][ T5883] dvb-usb: bulk message failed: -22 (4/0) [ 216.103134][ T5883] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 216.118577][ T797] usb 3-1: USB disconnect, device number 18 [ 216.148090][ T5883] dvb-usb: bulk message failed: -22 (5/0) [ 216.154971][ T5883] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 216.193199][ T5883] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 216.218137][ T10] zl10353_read_register: readreg error (reg=127, ret==0) [ 216.225272][ T8258] dtv5100: wlen = 0, aborting. [ 216.235497][ T10] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 216.280436][ T10] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 216.286586][ T42] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 216.440439][ T8277] team0: entered promiscuous mode [ 216.445523][ T8277] team_slave_0: entered promiscuous mode [ 216.457738][ T8277] team_slave_1: entered promiscuous mode [ 216.464078][ T8277] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 216.496192][ T42] usb 4-1: Using ep0 maxpacket: 8 [ 216.503354][ T42] usb 4-1: unable to get BOS descriptor or descriptor too short [ 216.513110][ T42] usb 4-1: config 4 interface 0 has no altsetting 0 [ 216.530590][ T42] usb 4-1: string descriptor 0 read error: -22 [ 216.539196][ T42] usb 4-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 216.549436][ T42] usb 4-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 216.564812][ T42] usb 4-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 216.577924][ T42] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 216.591066][ T42] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 216.599407][ T42] usb 4-1: media controller created [ 216.617183][ T42] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 216.787116][ T8270] ------------[ cut here ]------------ [ 216.792698][ T8270] usb 2-1: BOGUS control dir, pipe 80001680 doesn't match bRequestType c0 [ 216.801298][ T8270] WARNING: drivers/usb/core/urb.c:413 at usb_submit_urb+0x1052/0x18b0, CPU#1: syz.3.644/8270 [ 216.811546][ T8270] Modules linked in: [ 216.815863][ T8270] CPU: 1 UID: 0 PID: 8270 Comm: syz.3.644 Tainted: G L syzkaller #0 PREEMPT(full) [ 216.826674][ T8270] Tainted: [L]=SOFTLOCKUP [ 216.831003][ T8270] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 216.841174][ T8270] RIP: 0010:usb_submit_urb+0x1114/0x18b0 [ 216.846881][ T8270] Code: 00 00 00 00 00 fc ff df 0f b6 44 05 00 84 c0 0f 85 91 05 00 00 45 0f b6 45 00 48 8b 7c 24 18 48 8b 74 24 10 4c 89 fa 44 89 f1 <67> 48 0f b9 3a 49 bf 00 00 00 00 00 fc ff df e9 c2 f2 ff ff 89 e9 [ 216.866609][ T8270] RSP: 0018:ffffc900040976e8 EFLAGS: 00010246 [ 216.872689][ T8270] RAX: 0000000000000000 RBX: ffff88803643d400 RCX: 0000000080001680 [ 216.880745][ T8270] RDX: ffff8880216a7820 RSI: ffffffff8c7f05a0 RDI: ffffffff901ec600 [ 216.888773][ T8270] RBP: 1ffff110477c1000 R08: 00000000000000c0 R09: 0000000000000000 [ 216.897023][ T8270] R10: ffffc900040977e0 R11: fffff52000812f08 R12: ffff888058820100 [ 216.905100][ T8270] R13: ffff88823be08000 R14: 0000000080001680 R15: ffff8880216a7820 [ 216.913089][ T8270] FS: 00007fb44db906c0(0000) GS:ffff888125563000(0000) knlGS:0000000000000000 [ 216.922041][ T8270] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 216.928654][ T8270] CR2: 0000001b30a1dff8 CR3: 000000002a94a000 CR4: 00000000003526f0 [ 216.936693][ T8270] Call Trace: [ 216.939973][ T8270] [ 216.942896][ T8270] ? __init_swait_queue_head+0xa9/0x150 [ 216.948477][ T8270] usb_start_wait_urb+0x12b/0x510 [ 216.953501][ T8270] ? irqentry_exit+0x59e/0x620 [ 216.958433][ T8270] ? irqentry_exit+0x59e/0x620 [ 216.963216][ T8270] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 216.968838][ T8270] ? usb_alloc_urb+0x80/0x150 [ 216.973555][ T8270] usb_control_msg+0x232/0x3e0 [ 216.978414][ T8270] dtv5100_i2c_msg+0x231/0x2f0 [ 216.983214][ T8270] dtv5100_i2c_xfer+0x1a4/0x3c0 [ 216.988191][ T8270] __i2c_transfer+0x79a/0x2020 [ 216.992977][ T8270] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 216.998858][ T8270] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 217.004685][ T8270] ? i2c_transfer+0xc8/0x2d0 [ 217.009321][ T8270] i2c_transfer+0x1cc/0x2d0 [ 217.013843][ T8270] i2c_transfer_buffer_flags+0x10d/0x1a0 [ 217.019545][ T8270] ? __pfx_i2c_transfer_buffer_flags+0x10/0x10 [ 217.025720][ T8270] ? _copy_from_user+0x94/0xb0 [ 217.030538][ T8270] i2cdev_write+0x113/0x1e0 [ 217.035083][ T8270] vfs_writev+0x4bd/0x990 [ 217.039472][ T8270] ? __pfx_i2cdev_write+0x10/0x10 [ 217.044519][ T8270] ? __pfx_vfs_writev+0x10/0x10 [ 217.049456][ T8270] ? __fget_files+0x2a/0x420 [ 217.054084][ T8270] ? __fget_files+0x3a0/0x420 [ 217.058818][ T8270] ? __fget_files+0x2a/0x420 [ 217.063440][ T8270] do_writev+0x154/0x2e0 [ 217.067764][ T8270] ? __pfx_do_writev+0x10/0x10 [ 217.072556][ T8270] do_syscall_64+0x14d/0xf80 [ 217.077413][ T8270] ? trace_irq_disable+0x3b/0x150 [ 217.082454][ T8270] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 217.088595][ T8270] ? clear_bhb_loop+0x40/0x90 [ 217.093293][ T8270] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 217.099239][ T8270] RIP: 0033:0x7fb44cd9c799 [ 217.103682][ T8270] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 217.123428][ T8270] RSP: 002b:00007fb44db90028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 217.131919][ T8270] RAX: ffffffffffffffda RBX: 00007fb44d015fa0 RCX: 00007fb44cd9c799 [ 217.139945][ T8270] RDX: 0000000000000001 RSI: 0000200000000180 RDI: 0000000000000006 [ 217.148210][ T8270] RBP: 00007fb44ce32c99 R08: 0000000000000000 R09: 0000000000000000 [ 217.156314][ T8270] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 217.164283][ T8270] R13: 00007fb44d016038 R14: 00007fb44d015fa0 R15: 00007fb44d13fa48 [ 217.172281][ T8270] [ 217.175314][ T8270] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 217.182590][ T8270] CPU: 1 UID: 0 PID: 8270 Comm: syz.3.644 Tainted: G L syzkaller #0 PREEMPT(full) [ 217.193336][ T8270] Tainted: [L]=SOFTLOCKUP [ 217.197653][ T8270] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 217.207805][ T8270] Call Trace: [ 217.211076][ T8270] [ 217.213990][ T8270] vpanic+0x56c/0xa60 [ 217.217969][ T8270] ? __pfx__printk+0x10/0x10 [ 217.222606][ T8270] ? __pfx_vpanic+0x10/0x10 [ 217.227124][ T8270] ? is_bpf_text_address+0x292/0x2b0 [ 217.232407][ T8270] ? is_bpf_text_address+0x26/0x2b0 [ 217.237599][ T8270] panic+0xc5/0xd0 [ 217.241321][ T8270] ? __pfx_panic+0x10/0x10 [ 217.245736][ T8270] __warn+0x315/0x4f0 [ 217.249731][ T8270] ? usb_submit_urb+0x1052/0x18b0 [ 217.254764][ T8270] ? usb_submit_urb+0x1052/0x18b0 [ 217.259782][ T8270] __report_bug+0x29a/0x540 [ 217.264310][ T8270] ? usb_submit_urb+0x1052/0x18b0 [ 217.269326][ T8270] ? __pfx___report_bug+0x10/0x10 [ 217.274347][ T8270] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 217.280318][ T8270] ? lockdep_hardirqs_on+0x7a/0x110 [ 217.285505][ T8270] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 217.291319][ T8270] ? stack_depot_save_flags+0x3f3/0x810 [ 217.296956][ T8270] report_bug_entry+0x19a/0x290 [ 217.301822][ T8270] ? usb_submit_urb+0x1114/0x18b0 [ 217.306846][ T8270] ? usb_submit_urb+0x1119/0x18b0 [ 217.311969][ T8270] handle_bug+0xce/0x200 [ 217.316300][ T8270] exc_invalid_op+0x1a/0x50 [ 217.320809][ T8270] asm_exc_invalid_op+0x1a/0x20 [ 217.325676][ T8270] RIP: 0010:usb_submit_urb+0x1114/0x18b0 [ 217.331303][ T8270] Code: 00 00 00 00 00 fc ff df 0f b6 44 05 00 84 c0 0f 85 91 05 00 00 45 0f b6 45 00 48 8b 7c 24 18 48 8b 74 24 10 4c 89 fa 44 89 f1 <67> 48 0f b9 3a 49 bf 00 00 00 00 00 fc ff df e9 c2 f2 ff ff 89 e9 [ 217.350928][ T8270] RSP: 0018:ffffc900040976e8 EFLAGS: 00010246 [ 217.357009][ T8270] RAX: 0000000000000000 RBX: ffff88803643d400 RCX: 0000000080001680 [ 217.365068][ T8270] RDX: ffff8880216a7820 RSI: ffffffff8c7f05a0 RDI: ffffffff901ec600 [ 217.373028][ T8270] RBP: 1ffff110477c1000 R08: 00000000000000c0 R09: 0000000000000000 [ 217.380992][ T8270] R10: ffffc900040977e0 R11: fffff52000812f08 R12: ffff888058820100 [ 217.388953][ T8270] R13: ffff88823be08000 R14: 0000000080001680 R15: ffff8880216a7820 [ 217.396944][ T8270] ? usb_submit_urb+0x10a3/0x18b0 [ 217.401977][ T8270] ? __init_swait_queue_head+0xa9/0x150 [ 217.407547][ T8270] usb_start_wait_urb+0x12b/0x510 [ 217.412640][ T8270] ? irqentry_exit+0x59e/0x620 [ 217.417398][ T8270] ? irqentry_exit+0x59e/0x620 [ 217.422172][ T8270] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 217.427721][ T8270] ? usb_alloc_urb+0x80/0x150 [ 217.432395][ T8270] usb_control_msg+0x232/0x3e0 [ 217.437159][ T8270] dtv5100_i2c_msg+0x231/0x2f0 [ 217.441917][ T8270] dtv5100_i2c_xfer+0x1a4/0x3c0 [ 217.446758][ T8270] __i2c_transfer+0x79a/0x2020 [ 217.451514][ T8270] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 217.457313][ T8270] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 217.463133][ T8270] ? i2c_transfer+0xc8/0x2d0 [ 217.467758][ T8270] i2c_transfer+0x1cc/0x2d0 [ 217.472254][ T8270] i2c_transfer_buffer_flags+0x10d/0x1a0 [ 217.477878][ T8270] ? __pfx_i2c_transfer_buffer_flags+0x10/0x10 [ 217.484023][ T8270] ? _copy_from_user+0x94/0xb0 [ 217.488776][ T8270] i2cdev_write+0x113/0x1e0 [ 217.493272][ T8270] vfs_writev+0x4bd/0x990 [ 217.497595][ T8270] ? __pfx_i2cdev_write+0x10/0x10 [ 217.502606][ T8270] ? __pfx_vfs_writev+0x10/0x10 [ 217.507447][ T8270] ? __fget_files+0x2a/0x420 [ 217.512025][ T8270] ? __fget_files+0x3a0/0x420 [ 217.516694][ T8270] ? __fget_files+0x2a/0x420 [ 217.521293][ T8270] do_writev+0x154/0x2e0 [ 217.525523][ T8270] ? __pfx_do_writev+0x10/0x10 [ 217.530278][ T8270] do_syscall_64+0x14d/0xf80 [ 217.534849][ T8270] ? trace_irq_disable+0x3b/0x150 [ 217.539858][ T8270] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 217.545924][ T8270] ? clear_bhb_loop+0x40/0x90 [ 217.550630][ T8270] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 217.556533][ T8270] RIP: 0033:0x7fb44cd9c799 [ 217.560943][ T8270] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 217.580549][ T8270] RSP: 002b:00007fb44db90028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 217.588957][ T8270] RAX: ffffffffffffffda RBX: 00007fb44d015fa0 RCX: 00007fb44cd9c799 [ 217.596940][ T8270] RDX: 0000000000000001 RSI: 0000200000000180 RDI: 0000000000000006 [ 217.604901][ T8270] RBP: 00007fb44ce32c99 R08: 0000000000000000 R09: 0000000000000000 [ 217.612865][ T8270] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 217.620914][ T8270] R13: 00007fb44d016038 R14: 00007fb44d015fa0 R15: 00007fb44d13fa48 [ 217.628888][ T8270] [ 217.632186][ T8270] Kernel Offset: disabled [ 217.636502][ T8270] Rebooting in 86400 seconds..