last executing test programs: 19.162744007s ago: executing program 1 (id=615): r0 = socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x1ff, 0x1501) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x80, &(0x7f00000004c0)={0x4b5a9da54893e123, 0x3, 0x12}, 0x8, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0}) connect$unix(r1, &(0x7f0000000440)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = syz_clone3(&(0x7f0000000600)={0x2000000, &(0x7f0000000140), &(0x7f0000000240), &(0x7f00000002c0), {0x20}, &(0x7f0000000500)=""/94, 0x5e, &(0x7f0000000580)=""/87, &(0x7f0000000300)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff], 0x5}, 0x58) ptrace$cont(0x20, r5, 0x40, 0x1) r6 = socket$inet_udplite(0x2, 0x2, 0x88) syz_usb_connect(0x0, 0x0, 0x0, 0x0) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000040)={0xffffffffffffffff, 0x1, 0x3}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_GET(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010020bd7000fbdbdf2526000000180001801400020064756d6d7930"], 0x2c}}, 0x20000000) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000080)=0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xe, &(0x7f00000004c0)=ANY=[@ANYRES32=r0], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x94) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0xfffffffc, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x1503}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r10}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x44}, 0x1, 0x0, 0x0, 0x2004d821}, 0x24000000) bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=@base={0x6, 0x4, 0x1010, 0x89, 0x10800}, 0x50) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) r12 = socket(0x10, 0x80002, 0x0) bind$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) sendmsg$nl_route(r12, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000280)={'#! ', './file0'}, 0xb) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r11, {0x0, 0xf}, {}, {0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) setsockopt$MRT6_FLUSH(r12, 0x29, 0xd4, &(0x7f0000000680)=0x1, 0x4) 16.918050663s ago: executing program 3 (id=622): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = gettid() fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000200)={0x0, 0x0, 0x1006, 0xffffffffffffffff, r2}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), 0x0, 0x0, 0xfffffffffffffffe) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='load user:'], 0x2b, 0xfffffffffffffff9) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000200)={0x48}) openat$fb0(0xffffffffffffff9c, 0x0, 0x2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$RTC_IRQP_SET(r4, 0x4008700c, 0x10) r5 = dup(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r5, 0x0) sendfile(r5, r5, 0x0, 0xffffffff) 14.425117793s ago: executing program 1 (id=627): pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$KVM_SET_REGS(r0, 0x4090ae82, &(0x7f0000000400)={[0x2, 0xffffffffffff8000, 0xb, 0x1c, 0xd802, 0x5, 0xff, 0x4, 0xffffffffd3d32f95, 0xd, 0x7fffffff, 0x80000001, 0x5, 0x1, 0x5, 0x97], 0xc000, 0x82}) syz_open_dev$radio(&(0x7f0000000940), 0xffffffffffffffff, 0x2) bpf$MAP_GET_NEXT_KEY(0x15, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x3, 0x0, 0xfffffe0000000001, 0xfa0f, 0xffffffff}, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0x48000, 0x0) ioctl$TIOCMGET(r4, 0x5415, &(0x7f0000000280)) connect$tipc(0xffffffffffffffff, 0x0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r7, 0x4138ae84, &(0x7f00000001c0)={{0x30000, 0x1000, 0xc, 0xf0, 0x0, 0xfd, 0xd4, 0xd4, 0x0, 0x4, 0x7, 0x10}, {0x2, 0x1000, 0x3, 0x9, 0x8, 0xb, 0x9, 0xa, 0x5, 0x0, 0x3, 0xc4}, {0xd000, 0x98ddb7fb0f345f3, 0xb, 0x0, 0x2, 0x7, 0x4, 0x0, 0xc, 0x0, 0x6, 0x3}, {0xb000, 0x80a0000, 0x8, 0xfc, 0x40, 0x4f, 0x2, 0xd, 0x2, 0x3, 0x3}, {0x2, 0x26000, 0x9, 0x1, 0x7, 0x9, 0x9, 0x5, 0x5, 0x46, 0xe, 0x4b}, {0x1000, 0xd000, 0x0, 0x0, 0x6, 0x6c, 0x1, 0x8, 0x4, 0x8d, 0x21, 0x3}, {0x6000, 0xeeef0000, 0x8, 0x9d, 0xd, 0xfe, 0x0, 0xf, 0x5, 0x7, 0x0, 0xf8}, {0x100000, 0xd000, 0xd, 0x17, 0x3, 0x2, 0xff, 0x0, 0x14, 0x6, 0x2, 0x7}, {0x4000, 0x5}, {0x2, 0x9}, 0x40010002, 0x0, 0xf000, 0x300, 0x5, 0x2000, 0xeeef0000, [0xffffffffffffff47, 0x401, 0x8, 0x5]}) r8 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB], 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000002780)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3400000040000120fcff0700040000000100000804004880100001800c0010800400088004002a800c0002000000000000"], 0x34}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$KVM_GET_SUPPORTED_HV_CPUID_sys(0xffffffffffffffff, 0xc008aec1, &(0x7f00000000c0)={0x2, 0x0, [{0x7, 0x3, 0x4, 0x6, 0xe, 0x3, 0x4b}, {0x7, 0x1000, 0x2, 0xa, 0x10000, 0x5, 0x2}]}) syz_usb_disconnect(r8) close_range(r1, 0xffffffffffffffff, 0x0) 14.346071178s ago: executing program 4 (id=628): r0 = socket$alg(0x26, 0x5, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'streebog256-generic\x00'}, 0x58) r3 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmmsg$sock(r3, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000000340)="8224aca5f41b9e0ec5e7a706c919e7c0e343f0cd0a779c17e7f992396b09252009d2d12e9475a57ec39f71417044cf4151af34ac1dfd5d87cdd80bc4c24478821f64d4d971bbc1fc7bdd181a839344917165bb9cd0fa568aac55d8e38ee30fd3a9bc63e2656b6941c812e6ea0692ec276deb2b7b817906cf8c5429a42164e8bb521e216e554d509a0fd0d86729b5f4b9a01fb336bef1be8a68a628452b83a7404087d4bcb64f6ecad05459d12595d5b8b2657f2f29656a15e5a18e3168946dcb5faa59f7b404bad393ba06734d170b0513aeb0d051", 0xd5}, {&(0x7f00000004c0)="62c99e05d98775ed1beb5d67431ead896f7060f03e5b8671b283168d0df1573bef271f3a22b9cac06e27c7e87b34a19188d3e10e670bc070f0d3eb88d2f891d242747e0deec4a10609b12d4058b0fbff28bb01e6e49b533b03b11288ff4da1ab3226a2e3ba5fc47969142f1a1a0ca9ba4cece2ac9a5fcd89343de7e57dfcbb6216499555bd04f2fcb91c3c6c72868a3797ec63f8138ab74b5034878812df8b0445704cb33f81bffed93c3e645a206db1", 0xb0}, {&(0x7f00000005c0)="f2b314c96d500b66f7fd46493862d9eb11d188464208592330ac482436286448", 0x20}], 0x3}}], 0x1, 0x0) 13.233193292s ago: executing program 0 (id=629): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000480), 0xc0d00) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="b700000012edfffebfa30000000000000703000028feffff620af0fff8ffffff61a4f0ff000000003e040000000000003f000000000000005504000001ed0a002500000017ffffff4c040000000000007b0a00fe000000006e04000000000000c6000000000000009500000000000000023bc065b7a379d17cf9333379fc9e84af69912435f1b6a693002e7f3be3619184e50b91f32050e436fe275daf51efd601b6482a0800000098efd2a102ee010400006e7a1de4a21f379dbf01de00b1b564fef3bef70548aed0d600c095199fe3ff3128e599b0eaebbdbd7359a48f5b0afc532ef58de3c1b7646cb7798b3e6440c2fbdb00a3e35208b0bbf12cd8dff095edc710e4000000000000009fbe4b61a615c6c57a2b649dc74a1a610643b08d9e104d4d91af25b8123deda8a3658d42ecbf28bf6d8e8afcb913466aaa7f6df70252e79166d8582755a314d31a76e42f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0800000000000000d5f728d236619074d6ebdf098bc908f50ae728a40f9411fe7226a4040b96e37c4f46010400000000c3da29faf75ddd1aa96960bca97af133824b881cc1f62c0f8f8f0e8d76b86f9c45636614786f5a2cb77230a874640dcbe0b20bb77c022d4cab080078fce8c5c81b7037181fc2f18f781aaa6e2957d7e39cc1baddcb7ec6667e699f24e41697ee7ea23e4b29a8b6cc9a1f5a7b3caae05f1300010000949b3aab06b1e042ff2164d80c8ab1c156b97e5889685a96949e4cb40df77b8bb84b0e733a63784ccc214d930cbb7e090df9a2867b3acec439c163fc8706869ada11390d4dbcf840fa68e7d7071b53ac29df826f8ae6d6e18c1e0600bf870768d5217e9bb5a05d9e224e67f1231bd236ed200073824d93c4e1a0f50a74bb4850486727d970acc546087acbf30f2f8165b47ba56dfadd14b306e98931485747292c6fe6e188750cf4f87cce2aa7d67c7133a9f05954cde298a35ea6d715ba80aee6330000000000000000000000000000000000004000000000000000038600008fb854adb4f8080064e8407c6bdb37114c80fbaa4a0ec5aaf4b0ac6f2128668279eb6fc144344e2d461c9a1be8fa0061ea9d55ee4716bea8e1cebf9ed39325ab4c5530dd6ee9fffc00000000000000d7c5af73c683625aaad5eda5004a76c9f8975ed4c5e4eb3e77e9885f69754932609f19e2f615a01cb6d17fbf5cb539403cb0572534f054d5514ad8264f7b029b2bdf2ca4958a62a6e744f9a4c1e646e1dd2ca19583f0f8b0dc53debd7d44f334e6ed7445a9580f970e483b307c4b3c018bc194b23d37e6a2e52d8265e5aab6fec586d52386e8c07a88c88e8faec5f1b16b2014f6952ce7d6be12c6bdb9651ca6fc907061be311d1354e6295698594a73136237bee068d3819400e43544830a3f74b7942f22336953978a5b2032da4238cc61162c04c1297395b73e18c9387615a2bc87d9e2445f3d323d3fac347926a4bac694c55fe9d145906d410f58f1951405d10504efe402cae085afef5dbd617e87ddbd239e4a50d7eb8e327fb5db12cbd6a9efe8e671c4f251cafffe3400a670d14b9b3cd8d86e492997a0168c022ef3536bd1dc731f4f9f8cb66701f4578ba4cb9b706e605a88c3857fb8aaaa95024f8da775f72950212b84fc6133ae14d1429cd4905dabb52e43af7e65acf97b4951fa1e967d16a5ed642efc855a4a46b85cd079934ad3188276efae9387eaa232697526e24b5d4fded86c3811ccd00520150b16000080122965558074956da5e4c3bbefcb64aa8be4456ed2caf0f467b6bbf3aa4371f5e76ab3f6a20278a3c779e03afd9a6af6fd518e5dce030f88ec5a5cb7601a161da0f80893220800c523040d13e1f1300c2c6555bce60d95dd3288e53435713f03add23f14c8db5555c62de4f626483632a2ab547f88dd6efec73a0271a19ca3aa860aa4dcaeeb9bd91a0cb429efae2a5fcc08b3a572969bbe917d1767e38ba49e3e57fafea83e495a6a1d1a4ebf83434986091dd66ffe3ffed0c39552a312e2db596d9c827e02f6fc13c8ddbb50bfd7dd8aa2f35f259fc83e007fe79d2d25e30830b92fca00a292dd3b856faa4b7e66e1b64505f65900839df71a97d4d07d37f7ecf8ed9a22da26ae674bba16c204f6b2f8f74fc56b7126d7c11ece6e88ec41192aaee75415c58d264a2b6adae02c821b62428902aad499825ab85a348638384cd12e61dbde5c47056f0a20b4e2a2328d5db5cf026657a129e6be231acf5f57995c60d9fca5f63a0dfd18054717120bda466d04774b53208ad8b022719ca77a4e0a66b4708f791d849a5e2aaa0074a9560ede2600df5a5c41392fe9460080fcb1e65233fb8dbeec4c86dbcf6a0673e38d2d3615e5bfbde44afe0fa7564231fff7e7f1f3ad68492dd2cccb15b5d7d3e37e8b7d28921c4b9280979521173f322df408d9818b6cc400090300000021911480a876fbba698801937e8b4264eb6f5137bdaa075f1488d22230592a79000000000000000000000000000000000000000000110000000000000000000000000000000000000000000000000000000000000000002f316aa0886c174b73decb46c1c85edf50d8fcbac5ff76b365611666da86a8e65b308706bd7c000000000000003f7cd4d5cb9076b81b7741ec03877afb5237ea1694addebc14c3ae49f88c462ea2050acf2d9a97d3be29a5614d1eba2c98cf0236401e02d7c445e50f76419ab4f78f67a09e63dd4faa2e7b59399f055f2fa278783f26d0a52aefb0a5ef0b41e14a6fe6ba306206670b84894e901a523fcbadfeff535f2514bc834e876810d9a6a78e70a9e22860c36a724770b4185de44db6bf21fef32a8d5b36d9014f38fee012365f963b2a85e7d8075c333475b9f0284405e3127dde7e41285fbe0bdd370c06c6a41744c3d24eab511317f97b7b4a1c2ec33fedc46e9bf0fa640eebd3d58f0ebdb7cb8ccffd6d6ab7e0e843591d2618e2d2cdc7081c8fafffe9c3500800000087de4ee7aac6478d99de7dd82bef044a6d33c789d566c90c46ad581aa22f910547a77d55e26bf19f1d4661550b177ef53933a305e69b8a95119dcf5bda599d625054776151b2cd1fcde238bdc527594a6c17aa9728af24e2bb7a3830e7092b01b119ea4e7e7f0e21527d622cc29c9f0c8720195368f8374337ab4d130619d93c5ef37e7ddd0b2da147e6e513455b88753452de959a6cbfa1ffbc7ad5d8c3b48017fd31dcf72f337b639253f44cb27a12174bc4c191e21015d0c431a71906eb9c6a14c8a060459ef26787ce3d1cbfd5cc459f0048b5d06f6cbd3e9b34c89f3fb2f951ae81d7fcc8bc0000000000000000000000000000000000000000009231feef3117197c796369f776c8b2ea3970f358107945d9e74e9bdfa58e68b65a8f01bc4b73cc31df5aa29f363917f90e3fa1eaf553db1c761dd9b634a9c4d7c21c24fe6d953ed9438cad0f8dfe03e5e2f73019352f1fb682a5a6ebbf24ebc49e3d7058e696eb3f4b642f36c9006c0067e24a64aa8c53dd824a3c08bfda74a143c855030ae004ac797c575c202d8091eb77565212548ead770d68000000000099347593f67da85d1c962bfb320d1553a74ec3bf003ba62b1784dbf0168a7e85f28b77bdebce96bf386a6dd5df162a16f2b7e8a4de0ffc464a87f91f81866d2ef0af71ebb07a739c3cb1b7000000000000"], &(0x7f00000001c0)='GPL\x00'}, 0x48) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f0000000180)={0x80, 0x2b, 0x5, 0x400, 0xff, 0x105}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f0000000040)={0x80, 0x2b, 0x5, 0x0, 0x9, 0x8}) syz_open_dev$evdev(&(0x7f0000000140), 0x400, 0xae803) ioctl$XFS_IOC_INUMBERS(r0, 0x80405880, &(0x7f0000000080)={{0x90, 0x4, 0x3, 0xc8d, 0x4f}, [{0x2, 0x5, 0x1, 0x58}, {0xfffffffffffff1d3, 0x1, 0x9, 0x5}, {0x6, 0x10000, 0x0, 0x2}, {0x8, 0x0, 0xb7, 0x2}, {0x80000001, 0x3ff, 0xf7, 0x9}]}) r1 = io_uring_setup(0x7ee1, &(0x7f0000000bc0)={0x0, 0x1cc1, 0x40, 0x2, 0x383}) ioctl$sock_inet_sctp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f00000003c0)) io_setup(0x3f, &(0x7f0000000140)=0x0) r3 = timerfd_create(0x0, 0x0) io_submit(r2, 0x2, &(0x7f0000000440)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x2, r3, &(0x7f0000000200)="2d9e43e23c7a0db511f8eb360e4e0d4fabd9179964f886e633afe9bec7416f3e0638ef869f38f207c4f4e6e340b34e7b0dc3bb8bf7e0a2c53d778599b04b5223f6d644a7e55650963b7aa4250046ee988db59099cfc32deafee6102aa9211dce5dee6f82a237e834fd133fa9de432e80c5055a94615c7bcc2f9e264bfed86447004239c40b674e3aba19d9d68748556b7b296a1c4d4ec82befc428e8da67689980c161b20bf69851e645527e109b79ab9e05dcb91cb2594b5238c60520c5074771b9dfab08d5f486906eaf063ae7ea", 0xcf, 0x3, 0x0, 0x2}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x3, 0x8, r1, &(0x7f0000000340)="23edb8b141d8c680e0e1bd1fe62b7c8e4108c9e0a7674b9fcd78603b4ad1959f34cb3dfd71564e9f73cfb68d79f5eafa366ed1813083fbb4cf0fa08eb4a9f36009ad13d1382760816defb15c33d141d27d4c42f6688ecabecc82efa467c8bbdc76f1da38795b4bb3fd2e76dd310678fb97b1", 0x72, 0x1bd5}]) close_range(r1, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x2) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) r4 = syz_open_procfs$pagemap(0x0, &(0x7f0000000080)) ioctl$PAGEMAP_SCAN(r4, 0xc0606610, &(0x7f0000000000)={0x20, 0x2, &(0x7f000011d000/0x2000)=nil, &(0x7f00004fa000/0x4000)=nil, 0x7, 0x0, 0x0, 0x1c3, 0x0, 0x2, 0x0, 0x6}) socket$inet6_sctp(0xa, 0x1, 0x84) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) fsopen(&(0x7f0000000100)='configfs\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) socket$inet6(0xa, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00') socket$unix(0x1, 0x2, 0x0) socket(0x400000000010, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0), 0x111, 0x6}}, 0x20) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) 12.406005375s ago: executing program 0 (id=630): socket$inet6_tcp(0xa, 0x1, 0x0) socket$l2tp6(0xa, 0x2, 0x73) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x28, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}]}, 0x28}}, 0x0) connect$unix(r0, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_io_uring_setup(0x8d5, &(0x7f00000000c0)={0x0, 0x6669, 0x80, 0x2, 0x37a}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000240)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r4, 0x47b6, 0xa463, 0x69, 0x0, 0x0) 11.37777168s ago: executing program 4 (id=633): pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$KVM_SET_REGS(r0, 0x4090ae82, &(0x7f0000000400)={[0x2, 0xffffffffffff8000, 0xb, 0x1c, 0xd802, 0x5, 0xff, 0x4, 0xffffffffd3d32f95, 0xd, 0x7fffffff, 0x80000001, 0x5, 0x1, 0x5, 0x97], 0xc000, 0x82}) r4 = syz_open_dev$radio(&(0x7f0000000940), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_QUERYMENU(r4, 0xc02c5625, &(0x7f0000000040)={0x98f904, 0x2, @value=0x5}) bpf$MAP_GET_NEXT_KEY(0x15, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x3, 0x0, 0xfffffe0000000001, 0xfa0f, 0xffffffff}, 0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0x48000, 0x0) ioctl$TIOCMGET(r5, 0x5415, &(0x7f0000000280)) connect$tipc(0xffffffffffffffff, 0x0, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r8, 0x4138ae84, &(0x7f00000001c0)={{0x30000, 0x1000, 0xc, 0xf0, 0x0, 0xfd, 0xd4, 0xd4, 0x0, 0x4, 0x7, 0x10}, {0x2, 0x1000, 0x3, 0x9, 0x8, 0xb, 0x9, 0xa, 0x5, 0x0, 0x3, 0xc4}, {0xd000, 0x98ddb7fb0f345f3, 0xb, 0x0, 0x2, 0x7, 0x4, 0x0, 0xc, 0x0, 0x6, 0x3}, {0xb000, 0x80a0000, 0x8, 0xfc, 0x40, 0x4f, 0x2, 0xd, 0x2, 0x3, 0x3}, {0x2, 0x26000, 0x9, 0x1, 0x7, 0x9, 0x9, 0x5, 0x5, 0x46, 0xe, 0x4b}, {0x1000, 0xd000, 0x0, 0x0, 0x6, 0x6c, 0x1, 0x8, 0x4, 0x8d, 0x21, 0x3}, {0x6000, 0xeeef0000, 0x8, 0x9d, 0xd, 0xfe, 0x0, 0xf, 0x5, 0x7, 0x0, 0xf8}, {0x100000, 0xd000, 0xd, 0x17, 0x3, 0x2, 0xff, 0x0, 0x14, 0x6, 0x2, 0x7}, {0x4000, 0x5}, {0x2, 0x9}, 0x40010002, 0x0, 0xf000, 0x300, 0x5, 0x2000, 0xeeef0000, [0xffffffffffffff47, 0x401, 0x8, 0x5]}) r9 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581"], 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f0000002780)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3400000040000120fcff0700040000000100000804004880100001800c0010800400088004002a800c0002000000000000000000"], 0x34}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$KVM_GET_SUPPORTED_HV_CPUID_sys(0xffffffffffffffff, 0xc008aec1, &(0x7f00000000c0)={0x2, 0x0, [{0x7, 0x3, 0x4, 0x6, 0xe, 0x3, 0x4b}, {0x7, 0x1000, 0x2, 0xa, 0x10000, 0x5, 0x2}]}) syz_usb_disconnect(r9) close_range(r1, 0xffffffffffffffff, 0x0) 10.243208397s ago: executing program 1 (id=635): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000), 0x20000328) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000180), 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) ioctl$KVM_CAP_SYNC_REGS(r1, 0x4068aea3, &(0x7f0000000040)) openat$rtc(0xffffffffffffff9c, &(0x7f0000000100), 0x2000, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x21800, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r4 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000000)=0xd) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r4, r5, 0x0, 0x2000fb) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000300)=0x11) keyctl$dh_compute(0x17, &(0x7f0000000380), &(0x7f0000000480)=""/82, 0x52, 0x0) r6 = socket(0x1d, 0x2, 0x6) pipe(&(0x7f0000000600)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) socket$nl_route(0x10, 0x3, 0x0) setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r6, 0x110, 0x3) r7 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r7, 0x40345410, &(0x7f00000083c0)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r7, 0x54a2) 9.752098545s ago: executing program 0 (id=636): socket$inet6(0xa, 0x800000000000002, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_dev$dvb_demux(&(0x7f0000000140), 0x0, 0x62400) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000080)=0x400) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x640100ff, 0x4e20, 0x3, 'ovf\x00', 0x1, 0xa7e, 0x70}, 0x2c) r2 = socket$kcm(0xa, 0x2, 0x0) sendmsg$sock(r2, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = socket(0x2b, 0x1, 0x0) r6 = syz_io_uring_setup(0x110, &(0x7f0000000480)={0x0, 0xfad6, 0x400, 0x2}, &(0x7f0000000240)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r5}) io_uring_enter(r6, 0xdb4, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r6, 0x18, &(0x7f0000000000)={0xfeffffff, r5, 0x3, {0x3b4, 0x6d3}, 0x6}, 0x1) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x4084) ioprio_get$pid(0x5, 0x0) ioctl$DVB_DEMUX_DMX_SET_FILTER(r1, 0x403c6f2b, &(0x7f0000000040)={0x5, {"4e068be8035430cf8aa115d0d8d0f21c", "af86a7d62fdce0b68c2a7502b5b00c9f", "faef725a066e767106fa1a96391039d1"}, 0xe, 0x5}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r10 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d0020073f0000", @ANYRES32=r9, @ANYBLOB="00000000100000001c001a800800", @ANYRES16=r10], 0x44}}, 0x2000040) 8.471246714s ago: executing program 3 (id=638): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000000)={r1, @in={{0x2, 0x0, @empty}}, 0x0, 0x7ffe}, 0x90) socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) r4 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r5 = socket(0x22, 0x2, 0x3) getsockopt$packet_buf(r5, 0x107, 0x1, 0x0, 0x0) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_PORT_GET(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x3c, r6, 0x1, 0x0, 0x0, {0x54}, [{{@nsim={{0xe, 0x2}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8001}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1b, 0x3, &(0x7f0000000100)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0xc, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14}, 0x94) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="74000000020601010000000000000000000000124000060000080008400000003708001340000000ed08000b4000000101050014000400000008000640ffffffff050003000700000010000300686173683a69702c6d6163000900020073797a3100000000050001000700"/116], 0x74}}, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000580)=@ipv4_newroute={0x38, 0x18, 0x1, 0x70bd2b, 0x2, {0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfd, 0x6, 0x300}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x1}, @RTA_ENCAP={0x14, 0x16, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x5, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, @LWTUNNEL_IP_OPT_ERSPAN_VER={0x5, 0x1, 0x1}}}}]}, 0x38}}, 0x0) r10 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x141100, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r10, 0xc0285700, &(0x7f0000000140)={0xffc, "340b7832ceefd131b8e6498c2df58fad9987ffe93bbabd18cf501922de974a27", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, &(0x7f00000000c0)={"3c24139ed44aec57f2e2ad238a7b448ed886923c31d4b8affbf514fd00", r11, 0xffffffffffffffff}) ppoll(&(0x7f0000000000), 0x0, 0x0, 0x0, 0x0) close_range(r4, r12, 0x0) 7.582974733s ago: executing program 0 (id=639): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000000)={r1, @in={{0x2, 0x0, @empty}}, 0x0, 0x7ffe}, 0x90) socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) r4 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socket(0x22, 0x2, 0x3) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_PORT_GET(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x3c, r5, 0x1, 0x0, 0x0, {0x54}, [{{@nsim={{0xe, 0x2}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8001}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1b, 0x3, &(0x7f0000000100)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0xc, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14}, 0x94) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="74000000020601010000000000000000000000124000060000080008400000003708001340000000ed08000b4000000101050014000400000008000640ffffffff050003000700000010000300686173683a69702c6d6163000900020073797a3100000000050001000700"/116], 0x74}}, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000580)=@ipv4_newroute={0x38, 0x18, 0x1, 0x70bd2b, 0x2, {0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfd, 0x6, 0x300}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x1}, @RTA_ENCAP={0x14, 0x16, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x5, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, @LWTUNNEL_IP_OPT_ERSPAN_VER={0x5, 0x1, 0x1}}}}]}, 0x38}}, 0x0) 6.802581256s ago: executing program 2 (id=641): r0 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000100)={0x0, &(0x7f0000000440)=[@code={0xa, 0x58, {"0f380a669766ba6100b000eeb98f090000b88c000000ba000000000f30c4827941fac4e1f96e42e46505e7ee1921b9500b00000f328fe9209b7ce100c403790cde08c461f8ae18"}}], 0x58}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f00000000c0)={0x3}) ioctl$KVM_SET_PIT2(r2, 0x4070aea0, &(0x7f0000000140)={[{0xffffffff, 0xc, 0x6, 0x3, 0x40, 0x2, 0x42, 0x9, 0x1, 0x4, 0x2, 0x8, 0x9}, {0x1, 0x8080, 0x7, 0x0, 0x8, 0x4, 0x49, 0x7f, 0x2, 0x1, 0x9, 0xf, 0x20000000006}, {0x2, 0x5, 0x5, 0x84, 0x2, 0x9, 0xfd, 0x40, 0x5, 0x1, 0x2, 0x3}], 0xf87}) ioctl$KVM_CAP_DIRTY_LOG_RING(r2, 0x4068aea3, &(0x7f0000000000)={0xc0, 0x0, 0x6000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r4, &(0x7f0000002dc0)={&(0x7f0000001640)=@l2tp6={0xa, 0x0, 0x7fff, @local, 0x8}, 0x80, &(0x7f0000000340)=[{&(0x7f00000003c0)='`', 0x1}], 0x1}, 0x41) setsockopt$sock_attach_bpf(r4, 0x84, 0x1e, &(0x7f0000000000), 0x4) socket$kcm(0x10, 0x2, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000040)={0x8, 0xfff, 0x4, {0x9, @pix_mp={0x12, 0x6, 0x3436324d, 0x6, 0xb, [{0x80000004, 0x7}, {0x1, 0x9}, {0x10000001, 0x1}, {0x63d, 0x7fd}, {0x1, 0xb}, {0x7, 0x489aa92e}, {0x5, 0xc}, {0xff, 0x6}], 0x5, 0xc, 0x2, 0x0, 0x1}}, 0xfffffffd}) ioctl$KVM_SET_SREGS(r0, 0x4138ae84, &(0x7f00000004c0)={{0x5000, 0xf6c00000, 0xc, 0x0, 0x6, 0x8, 0x0, 0x3, 0x9, 0x4e, 0x4, 0x9}, {0x54000, 0xeeee0000, 0x8, 0x7, 0x4, 0x4, 0xb, 0x9, 0x6, 0x1, 0x7, 0x8f}, {0x80a0000, 0x8080000, 0x3, 0x5, 0xe, 0x4, 0x5, 0x0, 0x4, 0x80, 0x6, 0x10}, {0x0, 0x26000, 0xb, 0x8, 0x1, 0x4, 0x1, 0x0, 0x6, 0x1, 0xf6, 0xff}, {0xffffffff, 0x8000000, 0x10, 0x2, 0x3, 0x72, 0x9a, 0x3a, 0x8, 0x7f, 0x1, 0x6}, {0xdddd1000, 0x26000, 0x10, 0x7, 0x2, 0x78, 0x80, 0x3e, 0x5, 0x0, 0x4}, {0x2000, 0x80a0000, 0x4, 0x0, 0xa, 0xf9, 0x5, 0x6, 0x1, 0x30, 0x1, 0x6}, {0x0, 0x9000, 0xd, 0x1, 0x2, 0x6, 0x1, 0x0, 0xff, 0x8, 0x1, 0xf}, {0x4000, 0x1}, {0x70000, 0xa}, 0x80010010, 0x0, 0xeeee8000, 0x510, 0xe, 0x4000, 0x0, [0x1, 0x9ef, 0x7, 0x9]}) r8 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r8, 0x10e, 0xc, &(0x7f00000002c0)={0x8400001e}, 0x10) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x4, 0x2, 0x9}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x58, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r9, {}, {}, {0xe, 0x1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x6, 0xfffffffa, 0x6, 0x7, 0x9, 0x40, 0xffffffff, 0x2, 0xd}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x24040098}, 0x4000) 6.470390825s ago: executing program 2 (id=642): ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, 0x0, 0x4000000) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000800}, 0x4000000) r0 = socket$igmp(0x2, 0x3, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000005fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002dbd0600ffdbdb252100000020000300", @ANYRES32=r4, @ANYBLOB], 0x44}}, 0x28000) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_SET_KEY(0xffffffffffffffff, 0x0, 0x8081) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r6, @ANYRES32=r7, @ANYBLOB="1f003300d0000000080211000001080211000000505050505050"], 0x3c}, 0x1, 0x0, 0x0, 0x4008840}, 0x10) 6.277417556s ago: executing program 4 (id=643): r0 = socket$alg(0x26, 0x5, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'streebog256-generic\x00'}, 0x58) r3 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmmsg$sock(r3, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000000340)="8224aca5f41b9e0ec5e7a706c919e7c0e343f0cd0a779c17e7f992396b09252009d2d12e9475a57ec39f71417044cf4151af34ac1dfd5d87cdd80bc4c24478821f64d4d971bbc1fc7bdd181a839344917165bb9cd0fa568aac55d8e38ee30fd3a9bc63e2656b6941c812e6ea0692ec276deb2b7b817906cf8c5429a42164e8bb521e216e554d509a0fd0d86729b5f4b9a01fb336bef1be8a68a628452b83a7404087d4bcb64f6ecad05459d12595d5b8b2657f2f29656a15e5a18e3168946dcb5faa59f7b404bad393ba06734d170b0513aeb0d051", 0xd5}, {&(0x7f00000004c0)="62c99e05d98775ed1beb5d67431ead896f7060f03e5b8671b283168d0df1573bef271f3a22b9cac06e27c7e87b34a19188d3e10e670bc070f0d3eb88d2f891d242747e0deec4a10609b12d4058b0fbff28bb01e6e49b533b03b11288ff4da1ab3226a2e3ba5fc47969142f1a1a0ca9ba4cece2ac9a5fcd89343de7e57dfcbb6216499555bd04f2fcb91c3c6c72868a3797ec63f8138ab74b5034878812df8b0445704cb33f81bffed93c3e645a206db134f626a59f4fac53fbf23489cf2f45d05d735e64033376671da045df97", 0xcd}, {&(0x7f00000005c0)="f2b314c96d500b66f7fd46493862d9eb11d188464208592330ac482436286448", 0x20}], 0x3}}], 0x1, 0x0) 6.221911448s ago: executing program 3 (id=644): r0 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe) rseq(&(0x7f0000000100)={0x0, 0x0, 0x0, 0x3}, 0x20, 0x0, 0x0) msgrcv(0x0, 0x0, 0x0, 0x0, 0x2000) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x3, &(0x7f0000000040)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = syz_io_uring_setup(0x44cf, &(0x7f00000004c0)={0x0, 0x5331, 0x40, 0x1000005, 0x85}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='8'], 0x38}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}) io_uring_enter(r1, 0x2d3e, 0xec84, 0x0, 0x0, 0x0) msgctl$IPC_RMID(0x0, 0x0) keyctl$read(0xb, r0, &(0x7f0000001300)=""/4096, 0xffffffffffffffd2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) socket(0x10, 0x3, 0x0) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[], 0x50}}, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'ip_vti0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c0000005e0001002bbd7000ffdbdf2500000000", @ANYRES32=r6], 0x1c}, 0x1, 0x0, 0x0, 0x831e368c771a0719}, 0x400c080) sendmmsg(0xffffffffffffffff, &(0x7f0000000000), 0x35, 0x0) r7 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) ioctl$MON_IOCG_STATS(r7, 0xc0109207, &(0x7f0000000180)) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB='\a\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010025bd7000000000000200000008000300", @ANYRES32=r9, @ANYBLOB="08002600b40900000800a0000700000008009f0007000000"], 0x34}, 0x1, 0x0, 0x0, 0x4c854}, 0x4040000) keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f0000000080)={r0, 0x1000, 0x2a}, 0x0, &(0x7f0000000680)="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", &(0x7f0000000100)=""/42) socket$inet6(0xa, 0x2, 0x0) keyctl$reject(0x13, 0x0, 0xf0, 0xffffffff, r0) socket$inet_udplite(0x2, 0x2, 0x88) 6.154236107s ago: executing program 2 (id=645): r0 = syz_open_dev$loop(&(0x7f0000000000), 0x93, 0xebc2) socketpair$unix(0x1, 0x2, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r3, 0x3ba0, &(0x7f0000000740)={0x48, 0x2, r4}) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f00000007c0)={0x28, 0x3, r4, 0x0, &(0x7f0000000000/0x800000)=nil, 0x800000, 0x1004000}) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c0000001400010125bd7000fddbdf25010f08074e244e22030000003100000001ffffffc30000000600", @ANYRES32=0x0, @ANYBLOB="de0000000100"], 0x4c}, 0x1, 0x0, 0x0, 0x24048084}, 0x40000) r5 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockname$inet(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) r2 = getuid() getgroups(0x3, &(0x7f0000001400)=[0x0, 0xee00, 0xee01]) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000001880)="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", 0x2000, &(0x7f0000001580)={&(0x7f00000009c0)={0x50, 0x0, 0xca, {0x7, 0x2d, 0x7, 0x40, 0x8, 0x9, 0x0, 0x2, 0x0, 0x0, 0x4, 0x13941c4d}}, &(0x7f0000000a40)={0x18, 0x0, 0xfffffffffffff013, {0x4}}, 0x0, &(0x7f0000000ac0)={0x18, 0x0, 0x9, {0x7}}, &(0x7f0000000b00)={0x18, 0x0, 0x1, {0x7}}, &(0x7f0000000b40)={0x28, 0x0, 0x9, {{0x80000001, 0x1, 0x2}}}, &(0x7f0000000b80)={0x60, 0xffffffffffffffda, 0x6, {{0x9, 0x7f, 0x2, 0x9, 0x7fff, 0x5, 0xc82, 0xff0000}}}, 0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB="111b81cc9c300d00000000000044073dff"], &(0x7f0000000c80)={0x20, 0x0, 0x6, {0x0, 0x8}}, &(0x7f0000000d40)={0x78, 0x0, 0x1b5, {0x4, 0x100, 0x0, {0x2, 0x401, 0xfffffffffffffffa, 0x5, 0x7, 0x8000000000000000, 0x7, 0xfffff7a6, 0x3ff, 0x8000, 0x40, 0x0, 0x0, 0x5, 0x80}}}, &(0x7f0000000f00)={0x90, 0xfffffffffffffffe, 0x8000, {0x3, 0x3, 0x100000000, 0x3780000000000000, 0x101, 0x6, {0x6, 0x7, 0x2, 0x2, 0x7, 0x401, 0x7, 0x8, 0x3, 0x4000, 0x2, 0x0, 0x0, 0x80000001, 0x621}}}, 0x0, &(0x7f0000001640)=ANY=[], &(0x7f0000001300)={0xa0, 0x0, 0xfffffffffffffff7, {{0x3, 0x3, 0x7c1b, 0x4, 0xffff, 0x290, {0x3, 0x3635, 0xfffffffffffffffb, 0x5, 0x4, 0x51e7ca5f, 0x2, 0x0, 0x200, 0x4000, 0xf, 0x0, 0x0, 0x6, 0x2}}, {0x0, 0x1}}}, &(0x7f00000013c0)={0x20, 0x0, 0x4, {0xe, 0x4, 0x1e8, 0x4}}, &(0x7f0000001440)={0x130, 0x0, 0x3e, {0xe5, 0x9, 0x0, '\x00', {0x100, 0xffff, 0x5, 0xfff, r2, r3, 0x8000, '\x00', 0x1, 0x71, 0x8, 0x8, {0x3, 0xfffffff8}, {0x7, 0x5}, {0x2, 0x81}, {0x8, 0x4}, 0x800, 0x1, 0x54b8cb33, 0x23e}}}}) sched_setscheduler(0x0, 0x2, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c000000020603000000000000000000000000001400078008001240000000000500150002000000050001000600000005000500020000000500040000000000090002"], 0x4c}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140011001000010000000000000000000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a03000000000000000000050000000900010073797a30000000000900030073797a300000000008000c40000000032800048008000240000000120800014000000000140004"], 0xa4}}, 0x0) r5 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r5, &(0x7f00000000c0)={0x18, 0x0, {0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x35}, 'macvlan1\x00'}}, 0x1e) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, 0x0) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@ipv4_newroute={0x2c, 0x1a, 0x1, 0x70bd28, 0x0, {0x2, 0x20, 0x20, 0x0, 0xff, 0x0, 0x0, 0x7, 0x200}, [@RTA_IIF={0x8}, @RTA_DST={0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x33}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0xea5bc50b6199d77e) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b700000001000000bfa30000000000000703000000feffff720af0fff8ffffff71a4f0ff000000004e040100000000002d400200000000004704000001ed00007b130000000000001d440200000000007a0a00fe00ffffffc3030000e1000000b5b00000000000009500000000000000023bc065b7a379d17cf9333379fc9e94af69912435f1a864a710aad58db6a6c3692e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c5181554a090f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5be14ecf7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e347a8ad880d2cd829b847400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c35b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af8612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5e69048ddff6da409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03fb8a63e089679216da18ec0ae564162a27afea62d84f3a10746443d64364f50000e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc286463a2b1e992894269f478341d02d0f5ad4bcb524a5a17f48a7382f13d000000225d85ae49cee383dc5049076b98fb6853ab39e415140200000020cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d710b651f898ba749e40bc6980fe78683ac5c0c31030699ddd71063be9261b2e1aab1675b34a22048516d6aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe0e669e5e20100005353193f82ade69d0540059fe6c7fe7cd8697502c7596566d6740300da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44022a579dfc02290beaeb883418f562ae00003ea96d10f172c0374d6eed82641687f3b3a70bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24c87afce829ba0f85da6d8a8f18ea40ab959f6074ab2a4009b9e5f07ab5138aa6e3d37fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0cbe02b6e4114f244a9bf93f04beb72f0861f7580e6b0b384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a9b702cc1b6912a1e717d29135753208160fb04c98375b9cdbae2ed9dc7358f0ebadde0b728fe26e37037f27feeb741680f6f2f9a6a8346962a350845ffa0d829e4f79ad7d87906943408e6df3adbfd03aac93df8866fb010aecfed9092ca4d0f3e1116a0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a530600d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91114a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe92c7719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a9037d2283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b1dba94a6ea80c33ead5722c3293986e02c8e0a6dda1eca493f14795bd068826fe8df15efaaeea831555877f958a19e499666a38d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a8784d0899ed888141e2fae6691d1aee1da02ba516467df3e7d1daac19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa57d2c93f49c47944fec01a8aa7749f3187e9efb00000000e0884160b765b07ec9ba020362310223c81e48d6d3b6e5b50d45248efe43a409773e3ed01cd663f3aaab9e1c0000f43b64bb54e5b30be3399e3dd1eb1cfd1935a323023fe5792879833c7eb356b95cfb135045b1d8f7da2fa5bfedef411d0791523a9e64c884e9dfed9cd413afe66bd8ee831cdb34726fe0434fbf44c7b33a853330bcaf37ba4e36705807468b37d32087e599165f1bce015145444ef5967b443222f46173cc876015b2d1874be9846f7c1653c02d2ef9a75fdc45820c69bbe1cb575f9aa21aa9d3d58bd5e5fe026142a72e24049b8400c4a28b2d5db8d5f53cb354fba19975fb0b3739baae51cb4b034993ef1463dcdba2da419b320420efdd091d7f6e83c8ac2ccc6c9392a42a33907421ab847c9590c213eda9a7e1db598a23e75a3c0933fc803ca994a86476b995c37c445f68fd99fb4d335ff00d15bc4630c993fffffe000000000000a236a791bcb6eff8d488041db6b8f2c158c2c3f4baacd0c8cc7eb1fd7f"], &(0x7f00000001c0)='GPL\x00', 0xa, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) sendmmsg$inet6(r7, &(0x7f0000000500)=[{{&(0x7f0000000240)={0xa, 0x4e28, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x6}, 0x1c, &(0x7f0000000680)}}, {{&(0x7f0000000000)={0xa, 0x4e24, 0x9, @initdev={0xfe, 0x88, '\x00', 0x4, 0x0}, 0x2}, 0x1c, &(0x7f0000000100)=[{&(0x7f00000006c0)="9ad1", 0x2}], 0x1}}], 0x2, 0x4000840) shutdown(r7, 0x1) setsockopt(r7, 0x84, 0x7f, 0x0, 0x0) 4.73103085s ago: executing program 0 (id=647): socket$inet6_tcp(0xa, 0x1, 0x0) socket$l2tp6(0xa, 0x2, 0x73) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x28, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}]}, 0x28}}, 0x0) connect$unix(r0, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_io_uring_setup(0x8d5, &(0x7f00000000c0)={0x0, 0x6669, 0x80, 0x2, 0x37a}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000240)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r4, 0x47b6, 0xa463, 0x69, 0x0, 0x0) 3.613080662s ago: executing program 4 (id=648): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a88000000060a0b040000000000000000020000005c000480580001800a000100696e6e6572001e004800028008000240000000840800034000000007080004400000000f080001400000000024000580090001006d4574610000000014000280080001400000000908000240000000100900010073797a30000000000900020073"], 0xb0}}, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x6, 0x8201) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_all\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x2000000000001]}}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x6c}, [@ldst={0x4}]}, &(0x7f0000003ff6)='GPL\x00', 0xa, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) 3.570830816s ago: executing program 2 (id=649): socket$inet6(0xa, 0x800000000000002, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_dev$dvb_demux(&(0x7f0000000140), 0x0, 0x62400) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000080)=0x400) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x640100ff, 0x4e20, 0x3, 'ovf\x00', 0x1, 0xa7e, 0x70}, 0x2c) r2 = socket$kcm(0xa, 0x2, 0x0) sendmsg$sock(r2, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = socket(0x2b, 0x1, 0x0) r6 = syz_io_uring_setup(0x110, &(0x7f0000000480)={0x0, 0xfad6, 0x400, 0x2}, &(0x7f0000000240)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r5}) io_uring_enter(r6, 0xdb4, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r6, 0x18, &(0x7f0000000000)={0xfeffffff, r5, 0x3, {0x3b4, 0x6d3}, 0x6}, 0x1) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x4084) ioprio_get$pid(0x5, 0x0) ioctl$DVB_DEMUX_DMX_SET_FILTER(r1, 0x403c6f2b, &(0x7f0000000040)={0x5, {"4e068be8035430cf8aa115d0d8d0f21c", "af86a7d62fdce0b68c2a7502b5b00c9f", "faef725a066e767106fa1a96391039d1"}, 0xe, 0x5}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00'}) socket(0x10, 0x80002, 0x0) 3.28227552s ago: executing program 4 (id=650): r0 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x202000, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r3, &(0x7f00000002c0)="9e", 0x1, 0x40011, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback, 0x2}, 0x1c) r4 = socket(0x80000000000000a, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000780)={'batadv0\x00', &(0x7f0000000680)=@ethtool_link_settings={0x4c, 0x2, 0x0, 0x0, 0xf, 0xeb, 0x38, 0x2, 0x0, 0x4, [0xffffffff, 0xffffe022, 0xfffffe00, 0xfffff000, 0xe3a0, 0x4ac, 0x3c85aa8b, 0x6]}}) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f00000010c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x460, 0x280, 0x268, 0x300, 0x280, 0x268, 0x390, 0x460, 0x460, 0x390, 0x460, 0x9, 0x0, {[{{@uncond, 0x0, 0x240, 0x280, 0x0, {0x9401}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x100000000000, 0xb, 0x0, 0x3, 0x0, 0x5, 0x9}}}, @common=@unspec=@limit={{0x48}, {0xfff, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x2}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x8, 0x21, "6bb6778f9bdec125b0fb4f26be757b1e6f2fb8e9079627dc6726c4bc85e9"}}}, {{@ipv6={@private2, @remote, [], [], 'ip6gretap0\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x511) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, 0x0, 0x0) sendmsg$inet6(r3, 0x0, 0x0) sendto$inet6(r3, &(0x7f0000000900)="8d", 0x0, 0xf21bb4d410ace81, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001840)=[{{&(0x7f0000000300)={0x2, 0x4e24, @multicast2}, 0x10, &(0x7f00000003c0)=[{&(0x7f00000007c0)="6ae43b3f62a2372b2968aa53fe1a59432eda4faa9d7faba86d6f4d7fcceeef8fd8a5bd08ef3dba611ec104c94c90b4bf0931e3fe520c67ec7960876675c16e068a4b221ab6e06a000512b216c357f873cff642d828d6d0e44f566ea62f8ee4dbd9b91a2b187f2d06695a940e5490ecc7379cebf5a185cf11fc1c900e60abcdad23605ffe6026d32193950ee1f77a5ccfd73d69367b99623955f900a035844c2ba28c2effdc6b6d5a802e2767f9e2f9a574f0a2bb2bc0ac461fefdcde2345fe4ed7d737a69c921788222d104918b6db6b4e66f88a286e5ed490d7f09051989366ff2fad9451e01a1565012970a1446c61", 0xf0}, {&(0x7f0000000340)="01a4b18042e280227b4e46b45430eb66989c1c097d1c099658202a4bd1a28e7c3e6b1c22b0d59d1a3103a76d0c7bcf82b6a7c409736acdfd8c5479966147b895e92cb1", 0x43}], 0x2, &(0x7f0000000940)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x40}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x18}}, @ip_ttl={{0x14, 0x0, 0x2, 0xdcf4}}, @ip_ttl={{0x14, 0x0, 0x2, 0x8}}, @ip_retopts={{0x5c, 0x0, 0x7, {[@lsrr={0x83, 0x23, 0x3e, [@multicast2, @rand_addr=0x64010102, @rand_addr=0x64010102, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @rand_addr=0x64010101, @remote]}, @lsrr={0x83, 0x27, 0xb0, [@initdev={0xac, 0x1e, 0x0, 0x0}, @empty, @multicast2, @multicast1, @multicast1, @dev={0xac, 0x14, 0x14, 0x12}, @private=0x9, @dev={0xac, 0x14, 0x14, 0x36}, @empty]}]}}}, @ip_tos_u8={{0x11}}], 0xd8}}, {{&(0x7f0000000440)={0x2, 0x4e20, @empty}, 0x10, &(0x7f00000004c0)=[{&(0x7f00000006c0)="46b9a0bd505fda78657b53b503111509ed69e420edc36d8e4c099e92813f5f1df59eb56f7bb1a7b03df1084eb6fb2fca4d3ef92204de55a0079938465ae29bbe9c2a239aef68226161e14e1348ae8f17aca5fcde814b35648f8148ca96e083b6e26aef38d4d7d969f6372b3f52e3b9460b1823a0dcecff796d18a92ca5be9cfa5f15d68994", 0x85}, {&(0x7f0000000480)="d6ab86f7acda002ba2e815561eaf5f1a5e371f6c4f1a09c7f373a92df08a30f54028eb84c042f2ae20a3e35d9ec439fc5506e47f", 0x34}], 0x2}}, {{&(0x7f0000000540)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000600)=[{&(0x7f0000000a40)="315d15b307296314df4c992ad6a8e99289f9047421f229c7b48f79b276958c505d9502ea7c83424ab43958b0caec68dbdddaad7b1c37adbba33b94a7656d6a73bf3976c5a127d797a623eae4e441efc400d6c4c7a301cbd6385fbd2b22019b1d3dd6af195d76a9362a56324620f2c779cef75b3359e48d79d1789cbf6f21", 0x7e}, {&(0x7f0000000580)="5908fd73659c6bdb9f60c45cd84acfb22deeb8f0a79f27b774473302839fd30686fe48184655b7e4e3b6ad5c8f0137a5427a11ca296e873fbe75ad5c8bdec5", 0x3f}], 0x2, &(0x7f00000008c0)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x1d}}], 0x18}}, {{&(0x7f0000000e40)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10, &(0x7f0000000f00)=[{&(0x7f0000000e80)="f219fc83455b40b0b4a3cfd9e76ee618e691748bdfd0475f2a0c77299a1f10ab40d2627205d24f3a4ec14c9e000b31202c338576e7bfe004b4220447b50971afab532b18a1f4faa9d590a0bfb52511f0fd8ea2fd5cec912678fc282b78f907955b7afee9b007d3f6ee03f1dba56f", 0x6e}], 0x1, &(0x7f0000000f40)=[@ip_ttl={{0x14, 0x0, 0x2, 0x4180}}, @ip_ttl={{0x14, 0x0, 0x2, 0x7}}, @ip_retopts={{0x84, 0x0, 0x7, {[@lsrr={0x83, 0x17, 0x32, [@private=0xa010102, @multicast2, @multicast1, @local, @broadcast]}, @noop, @cipso={0x86, 0x39, 0x1, [{0x7, 0x5, "720fa0"}, {0x0, 0x2}, {0x1, 0x10, "c45b6f07b8de8d55d5c4282a635e"}, {0x0, 0x9, "90b5e4ab1a8f13"}, {0x6, 0x5, '_v)'}, {0x0, 0x9, "0967ca07796b20"}, {0x7, 0x5, "46c4a7"}]}, @rr={0x7, 0x17, 0xec, [@private=0xa010102, @private=0xa010102, @remote, @loopback, @remote]}, @timestamp_addr={0x44, 0xc, 0x3b, 0x1, 0x0, [{@dev={0xac, 0x14, 0x14, 0x42}, 0x16f40000}]}]}}}], 0xb8}}, {{&(0x7f0000001000)={0x2, 0x4e23, @private=0xa010101}, 0x10, &(0x7f0000001080)=[{&(0x7f0000001580)="6699f4d81805b394e5f4c02413c78292276dc44b1eeb4dbadb64f13b4ad0b91af2abf4e00ada037f154a63731cb8a500887c43c24ca0d317602ac606b0a5e9dee90987f22b23119131b54cc9004b7bf00841a50f597a15aa4f909b0d0ff09132e3249c30e6064e8f575f5e1fb1aa12337896e75a6fd6cbdb2d67f87c309e98bd3b9814253b73a1ab0dffb6730d04db05148384360727343254033c0d67ef6590cc4fcceb8c8c3a8b4d3417949a927d7dde00cc24f762dea11331c3bd2c7251c6828cc9f63f72798dbe0ab9042d3647728144f06c", 0xd4}, {&(0x7f0000001040)="ec87beb53a", 0x5}, {&(0x7f0000001680)="4f3c345b165dbb3df795bbd2bc8b0c7f4e861ddc9f8f16bf0d6bd4164756daecc1aaeb22b269189c131e2de4d5b50b948c19c1daa58dbbd48c7b53dbd90ba43c0e71f8b523762a637655fb759d7c1d322c20c4fb2f2fcb27a27f207c84a0503e1ce8475d47776fa41acc699b76b203d10180dd0331c8bbc3d14756c73cc78fed794df4d3cb8855a34122489731688aef7be3ebf7931feaf82935c7132dc3063b9425b24afca8fe5cbe4714c6fe537ea97e9a324763275911975f2c18ceae0157b334a052f02ddb1717dfda3f1f020ab1c251", 0xd2}, {&(0x7f0000001780)="1abee2c1b46ea72635b0d7b58eba309d83f8dccd57edca88199b7a09a410e29eba679ddcec77e7aaacd91bb00237299b868df3b3903b3a41409d019ccedf8dd776d3e5a37dbe88a2457115e7198d9747bf9b01266c3ce9598d1b817cdae80db0a481b612266eb05dd218f27be2aa34868e120eba4a5c4293b038deacd84b802495757f816675b44d06ea74", 0x8b}], 0x4}}], 0x5, 0x4000820) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2}, 0x28) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f511, &(0x7f0000000280)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) sendmsg$NL80211_CMD_SET_NOACK_MAP(r4, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="4400000e39340dec0a2ab4c1105f1b3b", @ANYRES16=0x0, @ANYBLOB="11022dbd7000ffdbdf255700000008000300", @ANYRES32=0x0, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x804}, 0x0) 3.114909554s ago: executing program 3 (id=651): syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x8401) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) capset(0x0, &(0x7f0000000200)={0x200002, 0x200003, 0x9, 0x8000004, 0x7, 0x4}) r2 = syz_clone(0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone3(&(0x7f0000002980)={0x4002000, 0x0, 0x0, 0x0, {0xa}, 0x0, 0x0, 0x0, &(0x7f0000002940)=[r2], 0x1}, 0x58) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'team_slave_1\x00'}) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x802}, 0x24040084) r5 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) bind$inet(0xffffffffffffffff, 0x0, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) process_mrelease(0xffffffffffffffff, 0x0) request_key(&(0x7f00000011c0)='big_key\x00', &(0x7f0000001200)={'syz', 0x1}, &(0x7f0000001240)='\x00', 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$VIDIOC_G_FREQUENCY(r5, 0xc02c5638, &(0x7f0000000040)={0x9, 0x4, 0x6}) add_key(&(0x7f0000000080)='big_key\x00', &(0x7f00000005c0)={'syz', 0x1}, &(0x7f0000000980)="475a251b", 0x4, 0xfffffffffffffffb) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x400000) ioctl$TCSETS(r6, 0x40045431, 0x0) 2.26608916s ago: executing program 1 (id=652): syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/crypto\x00', 0x0, 0x0) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @loopback}, 0x10) r1 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000001c0), 0x2) r2 = memfd_create(&(0x7f00000003c0)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\xea7\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\x0f<\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xcd\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\xd5\xf3\\\x00\xbe]Et\xad*\xecj\x02\xc8\xc4\f\x04\x99\xf6\xfc', 0x3) ftruncate(r2, 0xffff) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_GET(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x18, 0x1409, 0x1, 0x70bd2d, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x18}}, 0x0) fcntl$addseals(r2, 0x409, 0x7) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x412000) ioctl$UDMABUF_CREATE_LIST(r1, 0x40087543, &(0x7f00000009c0)=ANY=[@ANYBLOB="0020000002000000", @ANYRES32=r2, @ANYBLOB="0000000000000000000000000080000000000000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 ']) r4 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r4}, &(0x7f0000000000)) r5 = syz_clone3(&(0x7f0000000700)={0xa0000080, &(0x7f0000000340), &(0x7f0000000380), &(0x7f0000000500), {0x1f}, &(0x7f0000000540)=""/250, 0xfa, &(0x7f0000000640)=""/68, &(0x7f00000006c0)=[0x0], 0x1, {r0}}, 0x58) ioctl$KVM_TRANSLATE(r0, 0xc018ae85, &(0x7f0000000840)={0x200000, 0xeeee8000, 0x3, 0x5, 0x7}) r6 = gettid() rt_sigqueueinfo(r6, 0x21, &(0x7f0000002d00)={0x0, 0x0, 0xffffffff}) r7 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r7, 0xc0d05605, &(0x7f0000000140)={0x1, @pix={0x9, 0x0, 0x20363159, 0x6, 0x0, 0x2000000, 0x3, 0x1, 0x0, 0x0, 0x0, 0x3}}) syz_clone3(&(0x7f00000007c0)={0x200, &(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280), {0x31}, &(0x7f00000002c0)=""/42, 0x2a, &(0x7f0000000300)=""/51, &(0x7f0000000780)=[r4, r5, r6, 0x0], 0x4, {r0}}, 0x58) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043e131d"], 0x16) 1.646102429s ago: executing program 1 (id=653): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r6 = open(0x0, 0x0, 0x0) fcntl$notify(r6, 0x402, 0x8000003d) mkdir(&(0x7f00000000c0)='./file0\x00', 0x16) openat(0xffffffffffffff9c, &(0x7f0000001740)='.\x00', 0x515001, 0x488) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r7, &(0x7f0000000a00)=[{{&(0x7f0000000240)={0xa, 0x4e20, 0xc52, @local, 0x4}, 0x1c, &(0x7f0000000200)=[{&(0x7f0000000000)="001036ffbd0a077c617f9c475f9526f9f1ce846e737358f5", 0x18}], 0x1}}], 0x1, 0x4000841) openat(0xffffffffffffff9c, 0x0, 0x0, 0x20) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c0000004000625eca60a2f7240b5b73827a942e2801"], 0x1c}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r8, 0x0, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x420, 0x288, 0x43, 0xa0, 0x288, 0x98, 0x388, 0x178, 0x178, 0x388, 0x178, 0x49, 0x0, {[{{@ip={@loopback, @multicast1, 0x0, 0x0, 'bridge_slave_1\x00', 'ip6erspan0\x00'}, 0x12a, 0x228, 0x288, 0x0, {0x0, 0x7a010000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x8, 0x0, 'syz0\x00'}}, @common=@unspec=@string={{0xc0}, {0x0, 0x3, 'kmp\x00', "7af8bdb4c056dc65949041982abfe9ed51b01289c0026e2e6034ed587be5f09017b907388134b0ede40eb8d493f20d534fc37f23ec524d91a7a041f36bb1d1c3ab474544c5ef3f2fa69a80a0d967ee4464257d28d31e6843bc1221dfb9a6a27ad13af7061b737fd97d94f50942c68242819c941c0b4d9ec154c7d327187e8198", 0x38, 0x2, {0x1}}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x4, 0x7, 0x5, 0x4, 0x3, 0x4], 0x2, 0x4}, {0xffffffffffffffff, [0x1, 0x1, 0x1, 0x1, 0x1, 0x2], 0x4}}}}, {{@uncond, 0x0, 0xe0, 0x100, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x1b, 0x408, 0xfffffffb}}, @common=@set={{0x40}, {{0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x300], 0x0, 0x1}}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x480) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x50, &(0x7f00000001c0), 0x4) listen(0xffffffffffffffff, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000100)={'veth0_to_batadv\x00', &(0x7f0000000900)=@ethtool_drvinfo={0x3, "143971f82697566b8c301c020a6afbd488fc7c279edf83c0dd0b5d5862d48e14", "2f91bb33e18d1ba6b06de2126d961310f99044ebaf20ad0a30f47c8714432ce5", "3776a301fdc26f620368bb3bb03fbf73f447ef3d56332f5c5da76d8227f25bad", "8b1c16a072ef1528de28568d35d41999e6adefd5f25317dc6393c688cf387214", "41673ab1377f94110ef87c555b0f2081cd971d04cb7465a8bd0f211b696fffda", "ca554e638c9589669c5fc085", 0x80, 0xf, 0x7, 0x4b}}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x6, 0x51}}}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x30}}, 0x0) socket(0x200000000000011, 0x4000000000080002, 0x0) r9 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r9, &(0x7f0000000200)='asymmetric\x00', &(0x7f0000000000)) 1.496039802s ago: executing program 0 (id=654): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000000)={r1, @in={{0x2, 0x0, @empty}}, 0x0, 0x7ffe}, 0x90) socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) r4 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r5 = socket(0x22, 0x2, 0x3) getsockopt$packet_buf(r5, 0x107, 0x1, 0x0, 0x0) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_PORT_GET(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x3c, r6, 0x1, 0x0, 0x0, {0x54}, [{{@nsim={{0xe, 0x2}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8001}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1b, 0x3, &(0x7f0000000100)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0xc, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14}, 0x94) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="74000000020601010000000000000000000000124000060000080008400000003708001340000000ed08000b4000000101050014000400000008000640ffffffff050003000700000010000300686173683a69702c6d6163000900020073797a3100000000050001000700"/116], 0x74}}, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000580)=@ipv4_newroute={0x38, 0x18, 0x1, 0x70bd2b, 0x2, {0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfd, 0x6, 0x300}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x1}, @RTA_ENCAP={0x14, 0x16, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x5, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, @LWTUNNEL_IP_OPT_ERSPAN_VER={0x5, 0x1, 0x1}}}}]}, 0x38}}, 0x0) r10 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x141100, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r10, 0xc0285700, &(0x7f0000000140)={0xffc, "340b7832ceefd131b8e6498c2df58fad9987ffe93bbabd18cf501922de974a27", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, &(0x7f00000000c0)={"3c24139ed44aec57f2e2ad238a7b448ed886923c31d4b8affbf514fd00", r11, 0xffffffffffffffff}) ppoll(&(0x7f0000000000), 0x0, 0x0, 0x0, 0x0) close_range(r4, r12, 0x0) 804.041848ms ago: executing program 2 (id=655): ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, 0x0, 0x4000000) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000800}, 0x4000000) r0 = socket$igmp(0x2, 0x3, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000005fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002dbd0600ffdbdb252100000020000300", @ANYRES32=r4, @ANYBLOB], 0x44}}, 0x28000) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_SET_KEY(0xffffffffffffffff, 0x0, 0x8081) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r6, @ANYRES32=r7, @ANYBLOB="1f003300d0000000080211000001080211000000505050505050"], 0x3c}, 0x1, 0x0, 0x0, 0x4008840}, 0x10) 673.959762ms ago: executing program 4 (id=656): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) (async) close(r0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_clone(0x648e7000, 0x0, 0x0, 0x0, 0x0, 0x0) (async, rerun: 32) syz_usb_disconnect(r0) (rerun: 32) 448.583517ms ago: executing program 2 (id=657): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000000)={r1, @in={{0x2, 0x0, @empty}}, 0x0, 0x7ffe}, 0x90) socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) r4 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_PORT_GET(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x3c, r5, 0x1, 0x0, 0x0, {0x54}, [{{@nsim={{0xe, 0x2}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8001}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1b, 0x3, &(0x7f0000000100)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0xc, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14}, 0x94) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="74000000020601010000000000000000000000124000060000080008400000003708001340000000ed08000b4000000101050014000400000008000640ffffffff050003000700000010000300686173683a69702c6d6163000900020073797a3100000000050001000700"/116], 0x74}}, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000580)=@ipv4_newroute={0x38, 0x18, 0x1, 0x70bd2b, 0x2, {0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfd, 0x6, 0x300}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x1}, @RTA_ENCAP={0x14, 0x16, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x5, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, @LWTUNNEL_IP_OPT_ERSPAN_VER={0x5, 0x1, 0x1}}}}]}, 0x38}}, 0x0) 142.060211ms ago: executing program 3 (id=658): setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x18, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000240)={0x38, 0x6, 0x8, 0x8000, 0x0, 0xb3, 0x4, 0xfffffe0000000001, 0x7, 0x2}, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="44000000190001090000000024000000021800000002fd010000000008000100ac1414000800050064010100100016800c000100030801080200000006001500", @ANYRES32=r1, @ANYRES64=r2, @ANYRES8=r1], 0x44}}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) socketpair(0x2b, 0x1, 0x0, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=@bridge_dellink={0x2c, 0x13, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r4, 0x4189f}, [@IFLA_AF_SPEC={0xc, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x4, 0x0, 0x1, {0x4}}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4015}, 0x0) setresuid(0x0, 0xee00, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="40010000", @ANYRES16=r7, @ANYBLOB="01000000000004000000010000002400030000000000000000000000000000000000000000000000000000000000000000001400020077673100000000000000000000000000f4000880"], 0x140}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$WG_CMD_SET_DEVICE(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x4c, r7, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20d0}, 0x44000) socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x3516, 0x3e44, 0x8, 0x0, 0x0) semget$private(0x0, 0x6, 0x0) socket$netlink(0x10, 0x3, 0x0) 0s ago: executing program 1 (id=659): r0 = syz_open_dev$sndpcmp(&(0x7f0000000180), 0x0, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000280)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f00006d3000/0x4000)=nil, 0x4000, 0x66) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000240), 0x8041, 0x0) write$dsp(r3, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) ioctl$SNDCTL_DSP_SYNC(r3, 0x5001, 0x0) r4 = gettid() syz_open_dev$sndpcmc(&(0x7f0000000480), 0x1, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000440)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(r3, 0xc0045009, &(0x7f0000000040)=0x2fff) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_group_source_req(r5, 0x0, 0x2b, &(0x7f0000000140)={0x200024, {{0x2, 0x4e23, @multicast2}}, {{0x2, 0x0, @local}}}, 0x108) r6 = syz_open_procfs(0x0, &(0x7f0000000280)='net/tcp6\x00') lseek(r6, 0x9, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r0, 0xc2604110, &(0x7f0000000380)={0x80, [[0x3, 0x2, 0x0, 0x9000, 0x2, 0x0, 0x0, 0x9], [0x4, 0x1, 0x3, 0x0, 0x0, 0x80, 0x0, 0xfffffff9], [0x2, 0x0, 0x30f, 0xaa83, 0x2, 0x0, 0x0, 0x8000000]], '\x00', [{0x9, 0x15}, {0x0, 0xa}, {0x0, 0x1efb660a}, {}, {0x61e}, {0xfffffff9}, {}, {0xbffffffd, 0x9}, {0x8, 0x1000008}, {}, {0x0, 0x1000000}, {0x0, 0xb}], '\x00', 0x5, 0x0, 0x0, 0x500, 0x0, 0x2}) kernel console output (not intermixed with test programs): 70:930c [ 138.611113][ T5881] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 138.784469][ T5881] usb 3-1: config 0 has no interfaces? [ 138.797880][ T5881] usb 3-1: New USB device found, idVendor=0b05, idProduct=1abe, bcdDevice= 0.00 [ 138.808667][ T5911] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 138.825471][ T5881] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.861059][ T5881] usb 3-1: config 0 descriptor?? [ 138.968131][ T5911] usb 1-1: Using ep0 maxpacket: 8 [ 138.975187][ T5911] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 138.988723][ T5911] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 138.997710][ T5911] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 139.011722][ T5911] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 139.021168][ T5911] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.081475][ T5911] hub 1-1:1.0: bad descriptor, ignoring hub [ 139.089717][ T5911] hub 1-1:1.0: probe with driver hub failed with error -5 [ 139.097491][ T5911] cdc_wdm 1-1:1.0: skipping garbage [ 139.129147][ T5911] cdc_wdm 1-1:1.0: skipping garbage [ 139.138284][ T5911] cdc_wdm 1-1:1.0: probe with driver cdc_wdm failed with error -22 [ 139.293720][ T6532] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 139.306118][ T6532] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 139.418471][ T5911] usb 1-1: USB disconnect, device number 6 [ 139.529554][ T24] gspca_sq930x: ucbus_write failed -71 [ 139.749992][ T24] gspca_sq930x: Sensor ov9630 not yet treated [ 139.757208][ T24] sq930x 2-1:0.0: probe with driver sq930x failed with error -22 [ 139.777299][ T24] usb 2-1: USB disconnect, device number 6 [ 139.799064][ T5919] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 139.948085][ T5919] usb 1-1: device descriptor read/64, error -71 [ 140.188724][ T5919] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 140.228912][ T5911] usb 4-1: USB disconnect, device number 5 [ 140.319274][ T5919] usb 1-1: device descriptor read/64, error -71 [ 140.330699][ T6550] netlink: 68 bytes leftover after parsing attributes in process `syz.1.162'. [ 140.430679][ T5919] usb usb1-port1: attempt power cycle [ 140.648137][ T24] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 140.778145][ T5919] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 140.810566][ T5919] usb 1-1: device descriptor read/8, error -71 [ 140.819882][ T24] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 140.840851][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 140.862407][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 140.884325][ T24] usb 2-1: New USB device found, idVendor=056a, idProduct=0010, bcdDevice= 0.00 [ 140.897000][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.913585][ T24] usb 2-1: config 0 descriptor?? [ 141.078859][ T5919] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 141.111088][ T5919] usb 1-1: device descriptor read/8, error -71 [ 141.219758][ T5919] usb usb1-port1: unable to enumerate USB device [ 141.264174][ T5911] usb 3-1: USB disconnect, device number 11 [ 141.337523][ T6563] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 141.360912][ T24] wacom 0003:056A:0010.0005: Unknown device_type for 'HID 056a:0010'. Assuming pen. [ 141.378352][ T24] wacom 0003:056A:0010.0005: hidraw0: USB HID v0.00 Device [HID 056a:0010] on usb-dummy_hcd.1-1/input0 [ 141.391054][ T6563] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 141.409338][ T24] input: Wacom Graphire Pen as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:056A:0010.0005/input/input10 [ 141.556602][ T24] usb 2-1: USB disconnect, device number 7 [ 141.818884][ T6577] syz.1.169 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 142.808805][ T6584] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 143.072254][ T5938] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 143.269065][ T5938] usb 5-1: Using ep0 maxpacket: 32 [ 143.284271][ T5938] usb 5-1: config 0 has an invalid interface number: 89 but max is 0 [ 143.298546][ T5938] usb 5-1: config 0 has no interface number 0 [ 143.339163][ T5938] usb 5-1: config 0 interface 89 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 143.380547][ T5938] usb 5-1: config 0 interface 89 has no altsetting 0 [ 143.432372][ T5938] usb 5-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 143.451020][ T5938] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.510881][ T5938] usb 5-1: Product: syz [ 143.538122][ T5938] usb 5-1: Manufacturer: syz [ 143.563435][ T5938] usb 5-1: SerialNumber: syz [ 143.611663][ T5938] usb 5-1: config 0 descriptor?? [ 143.850423][ T6604] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 144.129589][ T6604] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 144.276816][ T6589] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 144.330274][ T6589] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 144.390722][ T5827] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 144.400120][ T5827] Bluetooth: hci4: Injecting HCI hardware error event [ 144.556525][ T5827] Bluetooth: hci4: hardware error 0x00 [ 144.608189][ T6589] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 144.656348][ T6589] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 145.399098][ T6612] mmap: syz.3.179 (6612) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 145.830532][ T5919] usb 5-1: USB disconnect, device number 3 [ 145.922284][ T5938] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 146.218260][ T5938] usb 2-1: Using ep0 maxpacket: 32 [ 146.257471][ T5938] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 146.286502][ T5938] usb 2-1: config 0 has no interface number 0 [ 146.326033][ T5938] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 146.368099][ T5938] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.407489][ T5938] usb 2-1: Product: syz [ 146.417739][ T5938] usb 2-1: Manufacturer: syz [ 146.483847][ T5938] usb 2-1: SerialNumber: syz [ 146.537792][ T5938] usb 2-1: config 0 descriptor?? [ 146.630389][ T5827] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 146.729639][ T5938] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 146.899135][ T5938] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 146.941742][ T5938] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 148.368153][ T5919] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 148.525692][ T5919] usb 5-1: config 0 has no interfaces? [ 148.532709][ T5919] usb 5-1: New USB device found, idVendor=0b05, idProduct=1abe, bcdDevice= 0.00 [ 148.547495][ T5919] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.579114][ T797] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 148.605717][ T5919] usb 5-1: config 0 descriptor?? [ 148.748648][ T797] usb 1-1: Using ep0 maxpacket: 32 [ 148.764918][ T797] usb 1-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 148.774977][ T797] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.822629][ T797] usb 1-1: config 0 descriptor?? [ 148.877472][ T797] gspca_main: sunplus-2.14.0 probing 041e:400b [ 149.218134][ T5938] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 149.433219][ T5938] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 149.468171][ T5938] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.498144][ T5938] usb 3-1: Product: syz [ 149.502514][ T5938] usb 3-1: Manufacturer: syz [ 149.515162][ T5938] usb 3-1: SerialNumber: syz [ 149.592575][ C0] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 149.593890][ T5925] usb 2-1: USB disconnect, device number 8 [ 149.689390][ T5925] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 149.753168][ T5925] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 149.778860][ T6701] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 149.815970][ T5925] quatech2 2-1:0.51: device disconnected [ 149.978442][ T797] gspca_sunplus: reg_w_riv err -110 [ 149.983881][ T797] sunplus 1-1:0.0: probe with driver sunplus failed with error -110 [ 150.027941][ T29] kauditd_printk_skb: 132 callbacks suppressed [ 150.027961][ T29] audit: type=1326 audit(1773261979.622:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6694 comm="syz.0.187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33f6f9c799 code=0x7ffc0000 [ 150.061676][ T29] audit: type=1326 audit(1773261979.662:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6694 comm="syz.0.187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f33f6f9c799 code=0x7ffc0000 [ 150.086506][ T29] audit: type=1326 audit(1773261979.662:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6694 comm="syz.0.187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33f6f9c799 code=0x7ffc0000 [ 150.121148][ T29] audit: type=1326 audit(1773261979.662:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6694 comm="syz.0.187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=120 compat=0 ip=0x7f33f6f9c799 code=0x7ffc0000 [ 150.146946][ T29] audit: type=1326 audit(1773261979.662:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6694 comm="syz.0.187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33f6f9c799 code=0x7ffc0000 [ 150.171024][ T29] audit: type=1326 audit(1773261979.662:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6694 comm="syz.0.187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7f33f6f9c799 code=0x7ffc0000 [ 150.198099][ T29] audit: type=1326 audit(1773261979.662:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6694 comm="syz.0.187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33f6f9c799 code=0x7ffc0000 [ 150.227190][ T29] audit: type=1326 audit(1773261979.662:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6694 comm="syz.0.187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f33f6f9c42b code=0x7ffc0000 [ 150.254449][ T29] audit: type=1326 audit(1773261979.662:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6694 comm="syz.0.187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f33f6f9c42b code=0x7ffc0000 [ 150.311053][ T5938] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 150.360390][ T5938] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 150.434997][ T5938] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 150.476631][ T5938] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -71 [ 150.532424][ T5938] usb 3-1: USB disconnect, device number 12 [ 150.813211][ T6717] x_tables: duplicate underflow at hook 3 [ 150.858241][ T5938] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 150.887792][ T797] usb 5-1: USB disconnect, device number 4 [ 151.018162][ T5938] usb 3-1: Using ep0 maxpacket: 16 [ 151.026235][ T5938] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 1024 [ 151.041778][ T5938] usb 3-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 151.056014][ T5938] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.075874][ T5938] usb 3-1: Product: syz [ 151.087491][ T5938] usb 3-1: Manufacturer: syz [ 151.100129][ T5938] usb 3-1: SerialNumber: syz [ 151.117452][ T6715] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 151.234474][ T6722] usb usb8: usbfs: interface 0 claimed by hub while 'syz.4.193' sets config #0 [ 151.326992][ T6715] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 151.342809][ T6715] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 151.369829][ T6715] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 151.446727][ T6715] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 151.457310][ T6715] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 151.480458][ T5911] usb 1-1: USB disconnect, device number 11 [ 151.484919][ T6715] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 151.518540][ T5881] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 151.579627][ T6715] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 151.593359][ T6724] netlink: 'syz.0.194': attribute type 21 has an invalid length. [ 151.614826][ T6724] netlink: 'syz.0.194': attribute type 6 has an invalid length. [ 151.627661][ T6724] netlink: 132 bytes leftover after parsing attributes in process `syz.0.194'. [ 151.632181][ T6715] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 151.720763][ T5881] usb 5-1: Using ep0 maxpacket: 32 [ 151.736850][ T5881] usb 5-1: config 0 has an invalid interface number: 89 but max is 0 [ 151.736944][ T6715] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 151.757548][ T5881] usb 5-1: config 0 has no interface number 0 [ 151.763971][ T6715] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 151.780855][ T5881] usb 5-1: config 0 interface 89 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 151.820801][ T5881] usb 5-1: config 0 interface 89 has no altsetting 0 [ 151.850170][ T5938] usb 3-1: selecting invalid altsetting 1 [ 151.868487][ T5881] usb 5-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 151.881269][ T5881] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.925244][ T5881] usb 5-1: Product: syz [ 151.939796][ T5881] usb 5-1: Manufacturer: syz [ 151.954969][ T5881] usb 5-1: SerialNumber: syz [ 151.984768][ T5881] usb 5-1: config 0 descriptor?? [ 152.027024][ T5938] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 152.056588][ T5938] usb 3-1: USB disconnect, device number 13 [ 152.100820][ T5837] udevd[5837]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 152.481956][ T5925] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 152.560003][ T6737] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 152.583229][ T6737] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 152.599177][ T6737] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 152.611730][ T6737] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 152.646619][ T6739] syzkaller0: entered promiscuous mode [ 152.652757][ T6739] syzkaller0: entered allmulticast mode [ 152.657096][ T5925] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 152.686221][ T5925] usb 4-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.11 [ 152.705995][ T5925] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.719575][ T5925] usb 4-1: Product: syz [ 152.723842][ T5925] usb 4-1: Manufacturer: syz [ 152.741468][ T5925] usb 4-1: SerialNumber: syz [ 152.765094][ T5925] usb 4-1: config 0 descriptor?? [ 152.783694][ T5925] usb 4-1: no audio or video endpoints found [ 152.997320][ T29] audit: type=1400 audit(1773261982.592:163): apparmor="DENIED" operation="setprocattr" info="invalid" error=-22 profile="unconfined" pid=6744 comm="syz.1.202" [ 153.099724][ T6730] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 153.120489][ T6730] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 153.148115][ T43] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 153.198461][ T6730] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 153.212405][ T6730] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 153.223382][ T6730] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 153.247975][ T6730] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 153.259047][ T6730] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 153.267173][ T6730] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 153.281970][ T6730] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 153.292443][ T6730] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 153.299807][ T6730] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 153.310774][ T43] usb 1-1: Using ep0 maxpacket: 32 [ 153.322865][ T6730] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 153.369840][ T43] usb 1-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 153.382581][ T43] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.454128][ T43] usb 1-1: Product: syz [ 153.456406][ T5938] usb 4-1: USB disconnect, device number 6 [ 153.470186][ T43] usb 1-1: Manufacturer: syz [ 153.479480][ T43] usb 1-1: SerialNumber: syz [ 153.524960][ T43] usb 1-1: config 0 descriptor?? [ 153.543821][ T43] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 154.263651][ T6766] xt_hashlimit: overflow, try lower: 17592186044416/11 [ 154.272375][ T6747] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 154.321441][ T6747] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 154.701275][ T5938] usb 5-1: USB disconnect, device number 5 [ 154.809996][ T43] gspca_ov534_9: reg_w failed -71 [ 155.131730][ T5827] Bluetooth: hci0: command 0x0c1a tx timeout [ 155.218100][ T43] gspca_ov534_9: Unknown sensor 0000 [ 155.218204][ T43] ov534_9 1-1:0.0: probe with driver ov534_9 failed with error -22 [ 155.269356][ T5827] Bluetooth: hci2: command 0x0c1a tx timeout [ 155.269371][ T5825] Bluetooth: hci1: command 0x0c1a tx timeout [ 155.323594][ T43] usb 1-1: USB disconnect, device number 12 [ 155.358160][ T5827] Bluetooth: hci3: command 0x0c1a tx timeout [ 155.499393][ T6779] ======================================================= [ 155.499393][ T6779] WARNING: The mand mount option has been deprecated and [ 155.499393][ T6779] and is ignored by this kernel. Remove the mand [ 155.499393][ T6779] option from the mount to silence this warning. [ 155.499393][ T6779] ======================================================= [ 156.996726][ T6802] usb usb8: usbfs: interface 0 claimed by hub while 'syz.0.219' sets config #0 [ 157.090478][ T6804] loop7: detected capacity change from 0 to 7 [ 157.192881][ T5827] Bluetooth: hci0: command 0x0c1a tx timeout [ 157.242293][ T5827] Bluetooth: hci0: SCO packet for unknown connection handle 201 [ 157.285433][ T6804] Dev loop7: unable to read RDB block 7 [ 157.300182][ T6804] loop7: unable to read partition table [ 157.307527][ T6804] loop7: partition table beyond EOD, truncated [ 157.314920][ T6804] loop_reread_partitions: partition scan of loop7 (úùƒå¡™‰ü¾CêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆ{í©Ö˜Èµ4FLQkÝŠ) failed (rc=-5) [ 157.348680][ T5827] Bluetooth: hci2: command 0x0c1a tx timeout [ 157.348911][ T5825] Bluetooth: hci1: command 0x0c1a tx timeout [ 157.398148][ T43] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 157.429424][ T5825] Bluetooth: hci3: command 0x0c1a tx timeout [ 157.571790][ T6805] program syz.1.214 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 157.605793][ T43] usb 1-1: Using ep0 maxpacket: 32 [ 157.809353][ T43] usb 1-1: config 0 has an invalid interface number: 89 but max is 0 [ 157.838586][ T43] usb 1-1: config 0 has no interface number 0 [ 157.844728][ T43] usb 1-1: config 0 interface 89 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 157.877373][ T6816] netlink: 280 bytes leftover after parsing attributes in process `syz.2.222'. [ 157.906957][ T43] usb 1-1: config 0 interface 89 has no altsetting 0 [ 157.939361][ T43] usb 1-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 157.962582][ T43] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.978462][ T43] usb 1-1: Product: syz [ 157.986323][ T43] usb 1-1: Manufacturer: syz [ 158.003439][ T43] usb 1-1: SerialNumber: syz [ 158.030031][ T43] usb 1-1: config 0 descriptor?? [ 158.078134][ T5911] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 158.094069][ T6820] trusted_key: encrypted_key: keyword 'load' not allowed when called from .update method [ 158.261844][ T5911] usb 5-1: Using ep0 maxpacket: 16 [ 158.281127][ T5911] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 158.302052][ T5911] usb 5-1: config 0 interface 0 has no altsetting 0 [ 158.312793][ T5911] usb 5-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=9d.3d [ 158.330592][ T5911] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.353715][ T5911] usb 5-1: Product: syz [ 158.358177][ T5911] usb 5-1: Manufacturer: syz [ 158.364308][ T5911] usb 5-1: SerialNumber: syz [ 158.381073][ T5911] usb 5-1: config 0 descriptor?? [ 158.427062][ T5911] usb 5-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 158.597777][ T6803] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 158.606807][ T6803] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 158.626398][ T6803] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 158.685562][ T6803] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 159.050096][ T6832] xt_hashlimit: overflow, try lower: 17592186044416/11 [ 159.104103][ T6835] FAULT_INJECTION: forcing a failure. [ 159.104103][ T6835] name failslab, interval 1, probability 0, space 0, times 0 [ 159.143331][ T6835] CPU: 1 UID: 0 PID: 6835 Comm: syz.2.227 Tainted: G L syzkaller #0 PREEMPT(full) [ 159.143368][ T6835] Tainted: [L]=SOFTLOCKUP [ 159.143374][ T6835] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 159.143385][ T6835] Call Trace: [ 159.143392][ T6835] [ 159.143407][ T6835] dump_stack_lvl+0xe8/0x150 [ 159.143437][ T6835] should_fail_ex+0x412/0x560 [ 159.143465][ T6835] should_failslab+0xa8/0x100 [ 159.143489][ T6835] __kmalloc_noprof+0xe8/0x760 [ 159.143509][ T6835] ? tomoyo_encode+0x28b/0x550 [ 159.143537][ T6835] tomoyo_encode+0x28b/0x550 [ 159.143566][ T6835] tomoyo_realpath_from_path+0x58d/0x5d0 [ 159.143599][ T6835] ? tomoyo_path_number_perm+0x219/0x630 [ 159.143619][ T6835] tomoyo_path_number_perm+0x246/0x630 [ 159.143642][ T6835] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 159.143664][ T6835] ? __lock_acquire+0x6b5/0x2cf0 [ 159.143696][ T6835] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 159.143729][ T6835] ? __fget_files+0x2a/0x420 [ 159.143757][ T6835] ? __fget_files+0x2a/0x420 [ 159.143782][ T6835] ? __fget_files+0x3a0/0x420 [ 159.143807][ T6835] ? __fget_files+0x2a/0x420 [ 159.143835][ T6835] security_file_ioctl+0xc3/0x2a0 [ 159.143857][ T6835] __se_sys_ioctl+0x47/0x170 [ 159.143880][ T6835] do_syscall_64+0x14d/0xf80 [ 159.143895][ T6835] ? trace_irq_disable+0x3b/0x150 [ 159.143923][ T6835] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 159.143941][ T6835] ? clear_bhb_loop+0x40/0x90 [ 159.143962][ T6835] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 159.143980][ T6835] RIP: 0033:0x7f8b81d9c799 [ 159.143996][ T6835] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 159.144010][ T6835] RSP: 002b:00007f8b82d26028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 159.144029][ T6835] RAX: ffffffffffffffda RBX: 00007f8b82015fa0 RCX: 00007f8b81d9c799 [ 159.144042][ T6835] RDX: 0000200000000240 RSI: 00000000c0305602 RDI: 0000000000000003 [ 159.144053][ T6835] RBP: 00007f8b82d26090 R08: 0000000000000000 R09: 0000000000000000 [ 159.144063][ T6835] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 159.144073][ T6835] R13: 00007f8b82016038 R14: 00007f8b82015fa0 R15: 00007f8b8213fa48 [ 159.144100][ T6835] [ 159.144299][ T6835] ERROR: Out of memory at tomoyo_realpath_from_path. [ 159.309152][ T5825] Bluetooth: hci0: command 0x0c1a tx timeout [ 159.428414][ T5825] Bluetooth: hci2: command 0x0c1a tx timeout [ 159.434596][ T5825] Bluetooth: hci1: command 0x0c1a tx timeout [ 159.478348][ T6679] usb 5-1: Failed to submit usb control message: -110 [ 159.500023][ T6679] usb 5-1: unable to send the bmi data to the device: -110 [ 159.547817][ T5827] Bluetooth: hci3: command 0x0c1a tx timeout [ 159.580408][ T6679] usb 5-1: unable to get target info from device [ 159.605547][ T6679] usb 5-1: could not get target info (-110) [ 159.627224][ T6679] usb 5-1: could not probe fw (-110) [ 159.669595][ T5911] usb 5-1: USB disconnect, device number 6 [ 159.894882][ T6839] bond1: entered promiscuous mode [ 160.073910][ T43] usb 1-1: USB disconnect, device number 13 [ 160.138951][ T5911] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 160.318298][ T5911] usb 3-1: Using ep0 maxpacket: 8 [ 160.342642][ T5911] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 160.377585][ T5911] usb 3-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 160.437352][ T5911] usb 3-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 160.447283][ T5911] usb 3-1: Product: syz [ 160.455705][ T5911] usb 3-1: Manufacturer: syz [ 160.465854][ T5911] usb 3-1: SerialNumber: syz [ 160.774386][ T5911] usb 3-1: Invalid connection information received from device [ 160.868244][ T43] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 161.000202][ T6839] netlink: 20 bytes leftover after parsing attributes in process `syz.2.228'. [ 161.066774][ T43] usb 5-1: unable to get BOS descriptor or descriptor too short [ 161.111069][ T43] usb 5-1: not running at top speed; connect to a high speed hub [ 161.153753][ T43] usb 5-1: New USB device found, idVendor=1235, idProduct=0018, bcdDevice= 0.40 [ 161.203154][ T43] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.237597][ T5911] usb 3-1: USB disconnect, device number 14 [ 161.255726][ T43] usb 5-1: Product: syz [ 161.262938][ T43] usb 5-1: Manufacturer: syz [ 161.267602][ T43] usb 5-1: SerialNumber: syz [ 161.479081][ T6866] netlink: 280 bytes leftover after parsing attributes in process `syz.3.235'. [ 161.490511][ T43] usb 5-1: selecting invalid altsetting 1 [ 161.497090][ T43] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 161.595189][ T43] usb 5-1: selecting invalid altsetting 1 [ 161.629295][ T43] snd-usb-audio 5-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 161.679482][ T43] usb 5-1: selecting invalid altsetting 1 [ 161.798531][ T43] snd-usb-audio 5-1:1.2: probe with driver snd-usb-audio failed with error -22 [ 161.822890][ T43] usb 5-1: USB disconnect, device number 7 [ 162.118686][ T5837] udevd[5837]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 162.385225][ T6876] netlink: 292 bytes leftover after parsing attributes in process `syz.0.238'. [ 162.428380][ T6878] usb usb8: usbfs: interface 0 claimed by hub while 'syz.2.239' sets config #0 [ 162.708263][ T5911] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 162.826770][ T5938] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 162.868386][ T5911] usb 3-1: Using ep0 maxpacket: 32 [ 162.881306][ T5911] usb 3-1: config 0 has an invalid interface number: 89 but max is 0 [ 162.898213][ T5911] usb 3-1: config 0 has no interface number 0 [ 162.904813][ T5911] usb 3-1: config 0 interface 89 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 162.978236][ T5911] usb 3-1: config 0 interface 89 has no altsetting 0 [ 162.993417][ T5911] usb 3-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 163.007119][ T5911] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.015729][ T5911] usb 3-1: Product: syz [ 163.020008][ T5881] usb 1-1: new full-speed USB device number 14 using dummy_hcd [ 163.028152][ T5938] usb 4-1: device descriptor read/64, error -71 [ 163.040165][ T5911] usb 3-1: Manufacturer: syz [ 163.058156][ T5911] usb 3-1: SerialNumber: syz [ 163.138167][ T5911] usb 3-1: config 0 descriptor?? [ 163.193635][ T5881] usb 1-1: unable to get BOS descriptor or descriptor too short [ 163.204662][ T5881] usb 1-1: not running at top speed; connect to a high speed hub [ 163.219532][ T5881] usb 1-1: config 1 has an invalid interface number: 152 but max is 0 [ 163.227948][ T5881] usb 1-1: config 1 has no interface number 0 [ 163.282356][ T5881] usb 1-1: config 1 interface 152 has no altsetting 0 [ 163.338306][ T5938] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 163.370947][ T5881] usb 1-1: New USB device found, idVendor=2c7c, idProduct=0900, bcdDevice=17.6d [ 163.381679][ T5881] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.392116][ T5881] usb 1-1: Product: syz [ 163.396330][ T5881] usb 1-1: Manufacturer: syz [ 163.401644][ T5881] usb 1-1: SerialNumber: syz [ 163.468390][ T5938] usb 4-1: device descriptor read/64, error -71 [ 163.578431][ T5938] usb usb4-port1: attempt power cycle [ 163.711408][ T6902] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 163.749875][ T6902] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 163.767632][ T6903] netlink: 280 bytes leftover after parsing attributes in process `syz.4.247'. [ 163.781555][ T6902] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 163.799294][ T6902] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 164.098136][ T5938] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 164.121593][ T5938] usb 4-1: device descriptor read/8, error -71 [ 164.568187][ T5938] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 164.602318][ T5938] usb 4-1: device descriptor read/8, error -71 [ 164.718342][ T5938] usb usb4-port1: unable to enumerate USB device [ 165.460394][ T5925] usb 3-1: USB disconnect, device number 15 [ 165.788643][ T6925] IPv6: sit1: Disabled Multicast RS [ 165.801826][ T6925] sit1: entered allmulticast mode [ 166.080208][ T5881] option 1-1:1.152: GSM modem (1-port) converter detected [ 166.092912][ T5881] usb 1-1: USB disconnect, device number 14 [ 166.117152][ T5881] option 1-1:1.152: device disconnected [ 166.173759][ T6929] netlink: 32 bytes leftover after parsing attributes in process `syz.2.253'. [ 166.214136][ T6929] netem: unknown loss type 13 [ 166.234242][ T6929] netem: change failed [ 166.731501][ T6943] netlink: 32 bytes leftover after parsing attributes in process `syz.2.257'. [ 166.836864][ T6938] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 167.001625][ T6948] netlink: 280 bytes leftover after parsing attributes in process `syz.3.258'. [ 167.048244][ T5938] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 167.382361][ T5938] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 167.447581][ T5938] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 167.474092][ T5938] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.533509][ T5938] usb 3-1: config 0 descriptor?? [ 167.653120][ T6957] usb usb8: usbfs: interface 0 claimed by hub while 'syz.0.260' sets config #0 [ 167.918222][ T797] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 167.999200][ T5938] ath6kl: Failed to read usb control message: -71 [ 168.005728][ T5938] ath6kl: Unable to read the bmi data from the device: -71 [ 168.028128][ T5938] ath6kl: Unable to recv target info: -71 [ 168.034721][ T5938] ath6kl: Failed to init ath6kl core: -71 [ 168.041076][ T5938] ath6kl_usb 3-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 168.109018][ T5938] usb 3-1: USB disconnect, device number 16 [ 168.120837][ T797] usb 1-1: Using ep0 maxpacket: 32 [ 168.130537][ T797] usb 1-1: config 0 has an invalid interface number: 89 but max is 0 [ 168.142871][ T797] usb 1-1: config 0 has no interface number 0 [ 168.152861][ T797] usb 1-1: config 0 interface 89 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 168.195778][ T797] usb 1-1: config 0 interface 89 has no altsetting 0 [ 168.213408][ T797] usb 1-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 168.223612][ T797] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.238659][ T797] usb 1-1: Product: syz [ 168.242959][ T797] usb 1-1: Manufacturer: syz [ 168.269247][ T797] usb 1-1: SerialNumber: syz [ 168.296125][ T797] usb 1-1: config 0 descriptor?? [ 168.939914][ T6981] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 169.028888][ T6983] FAULT_INJECTION: forcing a failure. [ 169.028888][ T6983] name failslab, interval 1, probability 0, space 0, times 0 [ 169.041802][ T6983] CPU: 1 UID: 0 PID: 6983 Comm: syz.1.264 Tainted: G L syzkaller #0 PREEMPT(full) [ 169.041836][ T6983] Tainted: [L]=SOFTLOCKUP [ 169.041844][ T6983] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 169.041857][ T6983] Call Trace: [ 169.041866][ T6983] [ 169.041875][ T6983] dump_stack_lvl+0xe8/0x150 [ 169.041912][ T6983] should_fail_ex+0x412/0x560 [ 169.041947][ T6983] should_failslab+0xa8/0x100 [ 169.041978][ T6983] __kmalloc_noprof+0xe8/0x760 [ 169.042003][ T6983] ? tomoyo_encode+0x28b/0x550 [ 169.042038][ T6983] tomoyo_encode+0x28b/0x550 [ 169.042081][ T6983] tomoyo_realpath_from_path+0x58d/0x5d0 [ 169.042124][ T6983] ? tomoyo_path_number_perm+0x219/0x630 [ 169.042150][ T6983] tomoyo_path_number_perm+0x246/0x630 [ 169.042180][ T6983] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 169.042208][ T6983] ? __lock_acquire+0x6b5/0x2cf0 [ 169.042248][ T6983] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 169.042293][ T6983] ? __fget_files+0x2a/0x420 [ 169.042328][ T6983] ? __fget_files+0x2a/0x420 [ 169.042359][ T6983] ? __fget_files+0x3a0/0x420 [ 169.042390][ T6983] ? __fget_files+0x2a/0x420 [ 169.042426][ T6983] security_file_ioctl+0xc3/0x2a0 [ 169.042453][ T6983] __se_sys_ioctl+0x47/0x170 [ 169.042482][ T6983] do_syscall_64+0x14d/0xf80 [ 169.042502][ T6983] ? trace_irq_disable+0x3b/0x150 [ 169.042533][ T6983] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 169.042555][ T6983] ? clear_bhb_loop+0x40/0x90 [ 169.042582][ T6983] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 169.042604][ T6983] RIP: 0033:0x7f174899c799 [ 169.042625][ T6983] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 169.042642][ T6983] RSP: 002b:00007f17497be028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 169.042665][ T6983] RAX: ffffffffffffffda RBX: 00007f1748c16180 RCX: 00007f174899c799 [ 169.042680][ T6983] RDX: 00002000000101c0 RSI: 00000000c1205531 RDI: 0000000000000003 [ 169.042693][ T6983] RBP: 00007f17497be090 R08: 0000000000000000 R09: 0000000000000000 [ 169.042706][ T6983] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 169.042718][ T6983] R13: 00007f1748c16218 R14: 00007f1748c16180 R15: 00007f1748d3fa48 [ 169.042760][ T6983] [ 169.042810][ T6983] ERROR: Out of memory at tomoyo_realpath_from_path. [ 169.169291][ T6981] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 169.381060][ T6981] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 169.390499][ T6981] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 169.598117][ T797] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 169.773557][ T797] usb 5-1: config 0 has an invalid interface number: 69 but max is 0 [ 169.787747][ T797] usb 5-1: config 0 has no interface number 0 [ 169.808989][ T797] usb 5-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 169.842628][ T797] usb 5-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 169.873080][ T797] usb 5-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 169.894891][ T797] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.907181][ T797] usb 5-1: Product: syz [ 169.912706][ T797] usb 5-1: Manufacturer: syz [ 169.927726][ T797] usb 5-1: SerialNumber: syz [ 169.944049][ T797] usb 5-1: config 0 descriptor?? [ 169.955757][ T6980] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 169.984979][ T797] cyberjack 5-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 170.014497][ T797] usb 5-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 170.183124][ C1] cyberjack ttyUSB0: cyberjack_read_int_callback - failed resubmitting read urb, error -22 [ 170.385499][ T6980] netlink: 'syz.4.266': attribute type 21 has an invalid length. [ 170.403776][ T6980] netlink: 128 bytes leftover after parsing attributes in process `syz.4.266'. [ 170.443576][ T6980] netlink: 'syz.4.266': attribute type 4 has an invalid length. [ 170.456288][ T6980] netlink: 'syz.4.266': attribute type 5 has an invalid length. [ 170.467021][ T6980] netlink: 3 bytes leftover after parsing attributes in process `syz.4.266'. [ 170.510784][ T5938] usb 5-1: USB disconnect, device number 8 [ 170.539509][ T5938] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 170.560245][ T5938] cyberjack 5-1:0.69: device disconnected [ 170.771449][ T43] usb 1-1: USB disconnect, device number 15 [ 170.863720][ T7006] binder: 7005:7006 ioctl 4604 200000000340 returned -22 [ 170.873281][ T7006] binder: 7005:7006 ioctl 80084803 200000000100 returned -22 [ 170.886155][ T7006] netlink: 8 bytes leftover after parsing attributes in process `syz.3.272'. [ 171.438122][ T43] usb 5-1: new full-speed USB device number 9 using dummy_hcd [ 171.609483][ T43] usb 5-1: not running at top speed; connect to a high speed hub [ 171.620656][ T43] usb 5-1: config 3 has an invalid interface number: 87 but max is 1 [ 171.637846][ T43] usb 5-1: config 3 has an invalid interface number: 51 but max is 1 [ 171.664510][ T43] usb 5-1: config 3 has no interface number 0 [ 171.685097][ T43] usb 5-1: config 3 has no interface number 1 [ 171.701166][ T43] usb 5-1: config 3 interface 87 has no altsetting 0 [ 171.732957][ T43] usb 5-1: config 3 interface 51 has no altsetting 0 [ 171.769449][ T43] usb 5-1: New USB device found, idVendor=1164, idProduct=0622, bcdDevice=ef.ca [ 171.794254][ T43] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.833972][ T43] usb 5-1: Product: syz [ 171.888124][ T43] usb 5-1: Manufacturer: syz [ 171.892832][ T43] usb 5-1: SerialNumber: syz [ 172.136909][ T43] pvrusb2: Hardware description: Gotview USB 2.0 DVD 2 [ 172.185097][ T43] usb 5-1: selecting invalid altsetting 0 [ 172.217045][ T2344] pvrusb2: Invalid write control endpoint [ 172.240070][ T43] pvrusb2: Hardware description: Gotview USB 2.0 DVD 2 [ 172.281084][ T43] usb 5-1: selecting invalid altsetting 0 [ 172.304400][ T7027] netlink: 32 bytes leftover after parsing attributes in process `syz.3.279'. [ 172.338713][ T43] usb 5-1: USB disconnect, device number 9 [ 172.376954][ T2344] pvrusb2: Invalid write control endpoint [ 172.383632][ T2344] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 172.404544][ T2344] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 172.428113][ T2344] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 172.448070][ T2344] pvrusb2: Device being rendered inoperable [ 172.464464][ T2344] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 172.505962][ T2344] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 172.579979][ T2344] pvrusb2: Attached sub-driver cx25840 [ 172.650642][ T2344] pvrusb2: Attempted to execute control transfer when device not ok [ 172.667212][ T2344] pvrusb2: Attempted to execute control transfer when device not ok [ 172.786064][ T2344] pvrusb2: Attempted to execute control transfer when device not ok [ 172.914445][ T2344] pvrusb2: Attempted to execute control transfer when device not ok [ 172.971495][ T2344] pvrusb2: Module ID 4 (tuner) for device Gotview USB 2.0 DVD 2 failed to load. Possible missing sub-device kernel module or initialization failure within module. [ 173.130712][ T7039] usb usb8: usbfs: interface 0 claimed by hub while 'syz.4.283' sets config #0 [ 173.439413][ T7049] xt_CT: You must specify a L4 protocol and not use inversions on it [ 173.498768][ T7047] netlink: 'syz.1.284': attribute type 10 has an invalid length. [ 173.653358][ T7047] veth0_vlan: left promiscuous mode [ 173.659058][ T2344] TUNER: Unable to find symbol tda829x_probe() [ 173.764747][ T7047] veth0_vlan: entered promiscuous mode [ 173.829549][ T2344] DVB: Unable to find symbol tda9887_attach() [ 173.844328][ T2344] tuner: 1-0043: Tuner 4 found with type(s) Radio TV. [ 173.865198][ T2344] pvrusb2: Attached sub-driver tuner [ 173.882210][ T7047] team0: Device veth0_vlan failed to register rx_handler [ 173.892082][ T2344] pvrusb2: ***WARNING*** pvrusb2 driver initialization failed due to the failure of one or more sub-device kernel modules. [ 173.924797][ T2344] pvrusb2: You need to resolve the failing condition before this driver can function. There should be some earlier messages giving more information about the problem. [ 174.011112][ T2344] pvrusb2: Invalid write control endpoint [ 174.208683][ T2344] pvrusb2: Invalid write control endpoint [ 174.214659][ T2344] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 174.290637][ T2344] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 174.318119][ T2344] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 174.360222][ T2344] pvrusb2: Device being rendered inoperable [ 174.376711][ T2344] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 174.403266][ T2344] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b) [ 174.432134][ T2344] pvrusb2: Attached sub-driver cx25840 [ 174.578757][ T2344] pvrusb2: Attempted to execute control transfer when device not ok [ 174.601870][ T2344] pvrusb2: Attempted to execute control transfer when device not ok [ 174.624611][ T2344] pvrusb2: Attempted to execute control transfer when device not ok [ 174.643675][ T2344] pvrusb2: Attempted to execute control transfer when device not ok [ 174.681541][ T2344] pvrusb2: Module ID 4 (tuner) for device Gotview USB 2.0 DVD 2 failed to load. Possible missing sub-device kernel module or initialization failure within module. [ 174.980262][ T2344] TUNER: Unable to find symbol tda829x_probe() [ 175.243914][ T2344] DVB: Unable to find symbol tda9887_attach() [ 175.250490][ T2344] tuner: 1-0043: Tuner 4 found with type(s) Radio TV. [ 175.261403][ T2344] pvrusb2: Attached sub-driver tuner [ 175.328584][ T2344] pvrusb2: ***WARNING*** pvrusb2 driver initialization failed due to the failure of one or more sub-device kernel modules. [ 175.349778][ T2344] pvrusb2: You need to resolve the failing condition before this driver can function. There should be some earlier messages giving more information about the problem. [ 176.030513][ T43] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 176.098981][ T5919] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 176.358152][ T5919] usb 3-1: Using ep0 maxpacket: 8 [ 176.380014][ T5919] usb 3-1: config index 0 descriptor too short (expected 30, got 18) [ 176.427743][ T5919] usb 3-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 176.468098][ T5919] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.497014][ T5919] usb 3-1: Product: syz [ 176.517400][ T5919] usb 3-1: Manufacturer: syz [ 176.542506][ T5919] usb 3-1: SerialNumber: syz [ 176.575526][ T5919] usb 3-1: config 0 descriptor?? [ 176.905517][ T5919] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 176.938612][ T5919] usb 3-1: setting power ON [ 176.955062][ T5919] dvb-usb: bulk message failed: -22 (2/0) [ 177.015438][ T5919] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 177.102037][ T5919] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 177.141604][ T7081] dvb-usb: bulk message failed: -22 (3/0) [ 177.147634][ T7081] dvb-usb: bulk message failed: -22 (4/0) [ 177.159779][ T5919] usb 3-1: media controller created [ 177.168221][ T7081] cxusb: i2c read failed [ 177.229470][ T5919] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 177.323670][ T5919] usb 3-1: selecting invalid altsetting 6 [ 177.348239][ T5919] usb 3-1: digital interface selection failed (-22) [ 177.354908][ T5919] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 177.419439][ T5919] usb 3-1: setting power OFF [ 177.436321][ T5919] dvb-usb: bulk message failed: -22 (2/0) [ 177.476965][ T5919] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 177.554765][ T5919] (NULL device *): no alternate interface [ 177.788488][ T797] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 178.188677][ T797] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 178.197780][ T797] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 178.218140][ T797] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 178.227481][ T797] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 178.255271][ T797] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 178.269564][ T797] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 178.278405][ T797] usb 4-1: Product: syz [ 178.282645][ T797] usb 4-1: Manufacturer: syz [ 178.321010][ T797] cdc_wdm 4-1:1.0: skipping garbage [ 178.336623][ T797] cdc_wdm 4-1:1.0: skipping garbage [ 178.342440][ T797] cdc_wdm 4-1:1.0: probe with driver cdc_wdm failed with error -22 [ 178.570129][ T5896] usb 4-1: USB disconnect, device number 11 [ 180.138250][ T5911] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 180.318339][ T5911] usb 2-1: Using ep0 maxpacket: 32 [ 180.326285][ T5911] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 180.337744][ T5911] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 180.411521][ T5911] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 180.534550][ T5911] usb 2-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 180.600063][ T5911] usb 2-1: config 0 interface 0 has no altsetting 0 [ 180.619116][ T5911] usb 2-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 180.695914][ T5911] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.769185][ T5911] usb 2-1: config 0 descriptor?? [ 181.200382][ T5911] hid_parser_main: 2 callbacks suppressed [ 181.200405][ T5911] hid-thrustmaster 0003:044F:B65D.0006: unknown main item tag 0x0 [ 181.401703][ T7121] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 181.437511][ T7121] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 181.725188][ T5911] hid-thrustmaster 0003:044F:B65D.0006: unknown main item tag 0x0 [ 181.800640][ T5911] hid-thrustmaster 0003:044F:B65D.0006: item fetching failed at offset 2/5 [ 182.440028][ T5911] hid-thrustmaster 0003:044F:B65D.0006: parse failed with error -22 [ 182.463428][ T5911] hid-thrustmaster 0003:044F:B65D.0006: probe with driver hid-thrustmaster failed with error -22 [ 182.506198][ T5911] usb 2-1: USB disconnect, device number 9 [ 182.576318][ T7133] usb usb8: usbfs: interface 0 claimed by hub while 'syz.3.304' sets config #0 [ 182.664334][ T7127] program syz.0.302 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 182.856205][ T5896] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 183.570244][ T5896] usb 4-1: Using ep0 maxpacket: 32 [ 183.620165][ T5896] usb 4-1: config 0 has an invalid interface number: 89 but max is 0 [ 183.671044][ T5896] usb 4-1: config 0 has no interface number 0 [ 183.677181][ T5896] usb 4-1: config 0 interface 89 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 183.736375][ T5896] usb 4-1: config 0 interface 89 has no altsetting 0 [ 183.771810][ T5896] usb 4-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 183.791115][ T5896] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.828572][ T5896] usb 4-1: Product: syz [ 183.837016][ T5896] usb 4-1: Manufacturer: syz [ 183.854450][ T5896] usb 4-1: SerialNumber: syz [ 183.891403][ T5896] usb 4-1: config 0 descriptor?? [ 183.918768][ T7149] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 183.952158][ T7149] Cannot find add_set index 0 as target [ 184.158326][ T5827] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 184.169901][ T5827] Bluetooth: hci3: SCO packet for unknown connection handle 201 [ 184.579070][ T7159] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 184.634223][ T7159] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 184.721051][ T7159] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 184.841202][ T7159] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 185.088578][ T43] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 185.298073][ T43] usb 5-1: Using ep0 maxpacket: 16 [ 185.318914][ T43] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 185.330293][ T43] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 185.629067][ T43] usb 5-1: config 0 interface 0 has no altsetting 0 [ 185.679383][ T43] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 185.708164][ T43] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.761243][ T43] usb 5-1: config 0 descriptor?? [ 186.026062][ T5925] usb 4-1: USB disconnect, device number 12 [ 186.203900][ T43] hid (null): report_id 27101 is invalid [ 186.229673][ T43] hid (null): global environment stack underflow [ 186.239202][ T43] hid (null): unknown global tag 0xd [ 186.244565][ T43] hid (null): unknown global tag 0xe [ 186.309319][ T43] hid (null): bogus close delimiter [ 186.314749][ T43] hid (null): report_id 11497 is invalid [ 186.442204][ T43] usb 5-1: USB disconnect, device number 11 [ 186.518167][ T5925] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 186.678685][ T5925] usb 4-1: too many configurations: 33, using maximum allowed: 8 [ 186.713417][ T5925] usb 4-1: New USB device found, idVendor=0eb1, idProduct=6668, bcdDevice=57.b8 [ 186.727209][ T5925] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.743388][ T5925] usb 4-1: Product: syz [ 186.753874][ T5925] usb 4-1: Manufacturer: syz [ 186.763886][ T5925] usb 4-1: SerialNumber: syz [ 186.777669][ T5925] usb 4-1: config 0 descriptor?? [ 186.797301][ T5925] go7007-loader 4-1:0.0: can't handle multiple config [ 186.808370][ T43] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 186.824364][ T5925] go7007-loader 4-1:0.0: probe failed [ 187.040647][ T7180] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 187.049282][ T43] usb 1-1: Using ep0 maxpacket: 16 [ 187.066342][ T43] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 187.086928][ T43] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 187.089546][ T7180] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 187.108084][ T43] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 187.126848][ T43] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 187.146831][ T43] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 187.166140][ T5925] usb 4-1: USB disconnect, device number 13 [ 187.238317][ T43] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 187.247439][ T43] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 187.263023][ T43] usb 1-1: Manufacturer: syz [ 187.288385][ T43] usb 1-1: config 0 descriptor?? [ 187.819322][ T43] rc_core: IR keymap rc-hauppauge not found [ 187.833471][ T43] Registered IR keymap rc-empty [ 187.881850][ T43] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 187.918117][ T43] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 187.972719][ T43] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 188.008441][ T43] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input14 [ 188.206177][ T43] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 188.250085][ T43] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 188.321567][ T43] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 188.441296][ T43] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 188.542849][ T43] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 188.650609][ T43] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 188.738481][ T43] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 188.771645][ T43] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 188.798261][ T43] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 188.828151][ T43] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 188.862857][ T43] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 188.902844][ T43] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 189.600770][ T43] usb 1-1: USB disconnect, device number 16 [ 189.841911][ T7217] usb usb8: usbfs: interface 0 claimed by hub while 'syz.0.323' sets config #0 [ 189.888502][ T7215] netlink: 8 bytes leftover after parsing attributes in process `syz.4.322'. [ 189.949748][ T7215] netlink: 8 bytes leftover after parsing attributes in process `syz.4.322'. [ 190.138124][ T797] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 190.308804][ T797] usb 1-1: Using ep0 maxpacket: 32 [ 190.322266][ T797] usb 1-1: config 0 has an invalid interface number: 89 but max is 0 [ 190.335075][ T797] usb 1-1: config 0 has no interface number 0 [ 190.347049][ T797] usb 1-1: config 0 interface 89 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 190.362085][ T797] usb 1-1: config 0 interface 89 has no altsetting 0 [ 190.374358][ T797] usb 1-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 190.390167][ T797] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.398982][ T797] usb 1-1: Product: syz [ 190.403333][ T797] usb 1-1: Manufacturer: syz [ 190.412221][ T797] usb 1-1: SerialNumber: syz [ 190.425353][ T797] usb 1-1: config 0 descriptor?? [ 190.544814][ T7223] netlink: 32 bytes leftover after parsing attributes in process `syz.1.324'. [ 190.943528][ T7235] netlink: 48 bytes leftover after parsing attributes in process `syz.3.328'. [ 191.053927][ T7239] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 191.064363][ T7239] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 191.074719][ T7239] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 191.140455][ T7239] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 192.397860][ T7253] FAULT_INJECTION: forcing a failure. [ 192.397860][ T7253] name failslab, interval 1, probability 0, space 0, times 0 [ 192.492167][ T7253] CPU: 0 UID: 0 PID: 7253 Comm: syz.4.332 Tainted: G L syzkaller #0 PREEMPT(full) [ 192.492204][ T7253] Tainted: [L]=SOFTLOCKUP [ 192.492212][ T7253] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 192.492226][ T7253] Call Trace: [ 192.492235][ T7253] [ 192.492244][ T7253] dump_stack_lvl+0xe8/0x150 [ 192.492281][ T7253] should_fail_ex+0x412/0x560 [ 192.492315][ T7253] should_failslab+0xa8/0x100 [ 192.492352][ T7253] __kmalloc_noprof+0xe8/0x760 [ 192.492377][ T7253] ? tomoyo_encode+0x28b/0x550 [ 192.492413][ T7253] tomoyo_encode+0x28b/0x550 [ 192.492449][ T7253] tomoyo_realpath_from_path+0x58d/0x5d0 [ 192.492491][ T7253] ? tomoyo_path_number_perm+0x219/0x630 [ 192.492517][ T7253] tomoyo_path_number_perm+0x246/0x630 [ 192.492546][ T7253] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 192.492575][ T7253] ? __lock_acquire+0x6b5/0x2cf0 [ 192.492615][ T7253] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 192.492660][ T7253] ? __fget_files+0x2a/0x420 [ 192.492695][ T7253] ? __fget_files+0x2a/0x420 [ 192.492725][ T7253] ? __fget_files+0x3a0/0x420 [ 192.492759][ T7253] ? __fget_files+0x2a/0x420 [ 192.492795][ T7253] security_file_ioctl+0xc3/0x2a0 [ 192.492821][ T7253] __se_sys_ioctl+0x47/0x170 [ 192.492849][ T7253] do_syscall_64+0x14d/0xf80 [ 192.492865][ T7253] ? trace_irq_disable+0x3b/0x150 [ 192.492892][ T7253] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 192.492916][ T7253] ? clear_bhb_loop+0x40/0x90 [ 192.492942][ T7253] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 192.492964][ T7253] RIP: 0033:0x7fcd4119c799 [ 192.492985][ T7253] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 192.493004][ T7253] RSP: 002b:00007fcd42110028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 192.493027][ T7253] RAX: ffffffffffffffda RBX: 00007fcd41415fa0 RCX: 00007fcd4119c799 [ 192.493044][ T7253] RDX: 0000200000000040 RSI: 0000000080047437 RDI: 0000000000000003 [ 192.493058][ T7253] RBP: 00007fcd42110090 R08: 0000000000000000 R09: 0000000000000000 [ 192.493071][ T7253] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 192.493084][ T7253] R13: 00007fcd41416038 R14: 00007fcd41415fa0 R15: 00007fcd4153fa48 [ 192.493119][ T7253] [ 192.493336][ T7253] ERROR: Out of memory at tomoyo_realpath_from_path. [ 192.745637][ T7256] fuse: blksize only supported for fuseblk [ 192.832627][ T5896] usb 1-1: USB disconnect, device number 17 [ 194.472707][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.481127][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.735627][ T7282] netlink: 48 bytes leftover after parsing attributes in process `syz.1.339'. [ 195.400085][ T43] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 195.581245][ T43] usb 1-1: Using ep0 maxpacket: 8 [ 195.607683][ T43] usb 1-1: unable to get BOS descriptor or descriptor too short [ 195.618422][ T43] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 195.628918][ T43] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 195.641856][ T43] usb 1-1: New USB device found, idVendor=1235, idProduct=8213, bcdDevice= 0.40 [ 195.654710][ T43] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.856324][ T43] usb 1-1: Product: syz [ 195.919694][ T43] usb 1-1: Manufacturer: syz [ 195.924367][ T43] usb 1-1: SerialNumber: syz [ 196.163840][ T7291] fuse: Bad value for 'rootmode' [ 196.588345][ T5911] usb 4-1: new full-speed USB device number 14 using dummy_hcd [ 196.809994][ T5911] usb 4-1: New USB device found, idVendor=0c72, idProduct=0013, bcdDevice=ba.be [ 196.820663][ T5911] usb 4-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 196.839476][ T5911] usb 4-1: Product: syz [ 196.848282][ T5911] usb 4-1: Manufacturer: syz [ 196.860154][ T5911] usb 4-1: SerialNumber: syz [ 196.878733][ T5911] usb 4-1: config 0 descriptor?? [ 196.949226][ T7307] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 196.989963][ T7307] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 197.015963][ T7307] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 197.031161][ T7307] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 197.164663][ T5911] peak_usb 4-1:0.0 can0: unable to request usb[type=0 value=1] err=-71 [ 197.180666][ T5911] peak_usb 4-1:0.0: unable to read PCAN-Chip USB firmware info (err -71) [ 197.279415][ T5911] peak_usb 4-1:0.0: probe with driver peak_usb failed with error -71 [ 197.298643][ T5911] usb 4-1: USB disconnect, device number 14 [ 197.332842][ T5821] udevd[5821]: setting owner of /dev/bus/usb/004/014 to uid=0, gid=0 failed: No such file or directory [ 197.538162][ T797] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 197.698107][ T797] usb 2-1: Using ep0 maxpacket: 16 [ 197.735670][ T797] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 197.758333][ T797] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 197.776548][ T797] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 197.803037][ T797] usb 2-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice= 0.40 [ 197.812507][ T797] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 197.825440][ T797] usb 2-1: Product: syz [ 197.845034][ T797] usb 2-1: Manufacturer: syz [ 197.853583][ T797] usb 2-1: SerialNumber: syz [ 198.068769][ T7313] usb usb8: usbfs: interface 0 claimed by hub while 'syz.3.346' sets config #0 [ 198.150187][ T797] usb 2-1: __uac_clock_find_source(): clock selector control is not readable, id 0 [ 198.162047][ T797] usb 2-1: __uac_clock_find_source(): clock selector control is not readable, id 0 [ 198.302364][ T797] usb 2-1: USB disconnect, device number 10 [ 198.368664][ T5938] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 198.548440][ T5938] usb 4-1: Using ep0 maxpacket: 32 [ 198.581689][ T5938] usb 4-1: config 0 has an invalid interface number: 89 but max is 0 [ 198.613026][ T5938] usb 4-1: config 0 has no interface number 0 [ 198.619364][ T5938] usb 4-1: config 0 interface 89 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 198.630461][ T5938] usb 4-1: config 0 interface 89 has no altsetting 0 [ 198.661009][ T5938] usb 4-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 198.679069][ T5938] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 198.691009][ T5938] usb 4-1: Product: syz [ 198.695835][ T5938] usb 4-1: Manufacturer: syz [ 198.707926][ T5938] usb 4-1: SerialNumber: syz [ 198.722521][ T5938] usb 4-1: config 0 descriptor?? [ 198.954999][ T43] usb 1-1: USB disconnect, device number 18 [ 199.047897][ T5820] udevd[5820]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 199.128949][ T7321] netlink: 48 bytes leftover after parsing attributes in process `syz.4.350'. [ 199.300562][ T7329] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 199.332151][ T7329] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 199.356418][ T7329] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 199.379467][ T7329] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 200.285441][ T7331] netlink: 4 bytes leftover after parsing attributes in process `syz.0.351'. [ 201.174725][ T5938] usb 4-1: USB disconnect, device number 15 [ 201.490986][ T7348] syzkaller1: entered promiscuous mode [ 201.496575][ T7348] syzkaller1: entered allmulticast mode [ 202.640078][ T7352] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 202.680064][ T7352] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 203.426675][ T7366] netlink: 8 bytes leftover after parsing attributes in process `syz.1.360'. [ 203.610413][ T7367] netlink: 'syz.1.360': attribute type 1 has an invalid length. [ 203.634379][ T7367] netlink: 'syz.1.360': attribute type 7 has an invalid length. [ 203.675293][ T7367] netlink: 'syz.1.360': attribute type 8 has an invalid length. [ 203.727790][ T7367] netlink: 132 bytes leftover after parsing attributes in process `syz.1.360'. [ 203.959131][ T797] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 203.998710][ T7375] netlink: 16 bytes leftover after parsing attributes in process `syz.1.362'. [ 204.124179][ T797] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 204.157472][ T797] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 204.196270][ T797] usb 5-1: Product: syz [ 204.207857][ T797] usb 5-1: Manufacturer: syz [ 204.236858][ T797] usb 5-1: SerialNumber: syz [ 204.561662][ T7384] trusted_key: encrypted_key: keyword 'load' not allowed when called from .update method [ 205.298112][ T5938] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 205.336257][ T7370] process 'syz.4.361' launched '/dev/fd/8' with NULL argv: empty string added [ 205.562225][ T5938] usb 4-1: Using ep0 maxpacket: 8 [ 205.571295][ T5938] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 205.692069][ T5938] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 205.708668][ T5938] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 46624, setting to 1024 [ 205.720671][ T5938] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 205.731278][ T5938] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 205.761048][ T5938] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 205.791926][ T5938] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 206.271602][ T797] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 206.422061][ T797] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPROTO [ 206.475872][ T797] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 206.530616][ T797] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 206.640889][ T797] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 206.714383][ T7401] netlink: 4 bytes leftover after parsing attributes in process `syz.4.367'. [ 206.758262][ T5938] usb 4-1: GET_CAPABILITIES returned 0 [ 206.773284][ T5938] usbtmc 4-1:16.0: can't read capabilities [ 206.936359][ T797] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -71 [ 207.074764][ T7404] fuse: Bad value for 'group_id' [ 207.142260][ T797] usb 5-1: USB disconnect, device number 12 [ 207.163130][ T7404] fuse: Bad value for 'group_id' [ 209.864485][ T5938] usb 4-1: USB disconnect, device number 16 [ 210.410805][ T7418] netlink: 12 bytes leftover after parsing attributes in process `syz.2.372'. [ 211.300839][ T7425] netlink: 16 bytes leftover after parsing attributes in process `syz.3.374'. [ 211.494878][ T7429] FAULT_INJECTION: forcing a failure. [ 211.494878][ T7429] name failslab, interval 1, probability 0, space 0, times 0 [ 211.608116][ T7429] CPU: 1 UID: 0 PID: 7429 Comm: syz.2.376 Tainted: G L syzkaller #0 PREEMPT(full) [ 211.608153][ T7429] Tainted: [L]=SOFTLOCKUP [ 211.608161][ T7429] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 211.608174][ T7429] Call Trace: [ 211.608184][ T7429] [ 211.608193][ T7429] dump_stack_lvl+0xe8/0x150 [ 211.608228][ T7429] should_fail_ex+0x412/0x560 [ 211.608261][ T7429] should_failslab+0xa8/0x100 [ 211.608290][ T7429] __kmalloc_noprof+0xe8/0x760 [ 211.608315][ T7429] ? tomoyo_encode+0x28b/0x550 [ 211.608349][ T7429] tomoyo_encode+0x28b/0x550 [ 211.608385][ T7429] tomoyo_realpath_from_path+0x58d/0x5d0 [ 211.608427][ T7429] ? tomoyo_path_number_perm+0x219/0x630 [ 211.608455][ T7429] tomoyo_path_number_perm+0x246/0x630 [ 211.608484][ T7429] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 211.608512][ T7429] ? sb_end_write+0xe9/0x1c0 [ 211.608543][ T7429] ? vfs_write+0x9bc/0xb90 [ 211.608601][ T7429] ? ksys_write+0x1fc/0x270 [ 211.608631][ T7429] security_file_ioctl+0xc3/0x2a0 [ 211.608657][ T7429] __se_sys_ioctl+0x47/0x170 [ 211.608684][ T7429] do_syscall_64+0x14d/0xf80 [ 211.608704][ T7429] ? trace_irq_disable+0x3b/0x150 [ 211.608735][ T7429] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 211.608757][ T7429] ? clear_bhb_loop+0x40/0x90 [ 211.608782][ T7429] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 211.608804][ T7429] RIP: 0033:0x7f8b81d9c799 [ 211.608824][ T7429] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 211.608842][ T7429] RSP: 002b:00007f8b82d26028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 211.608873][ T7429] RAX: ffffffffffffffda RBX: 00007f8b82015fa0 RCX: 00007f8b81d9c799 [ 211.608889][ T7429] RDX: 0000200000000040 RSI: 00000000c020aa00 RDI: 0000000000000003 [ 211.608903][ T7429] RBP: 00007f8b82d26090 R08: 0000000000000000 R09: 0000000000000000 [ 211.608916][ T7429] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 211.608928][ T7429] R13: 00007f8b82016038 R14: 00007f8b82015fa0 R15: 00007f8b8213fa48 [ 211.608962][ T7429] [ 211.609009][ T7429] ERROR: Out of memory at tomoyo_realpath_from_path. [ 212.831116][ T7445] netlink: 24 bytes leftover after parsing attributes in process `syz.0.379'. [ 214.488112][ T797] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 214.660972][ T797] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 214.713415][ T797] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 214.843161][ T797] usb 2-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 214.873005][ T797] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 214.917144][ T797] usb 2-1: config 0 descriptor?? [ 215.405933][ T797] hid-steam 0003:28DE:1142.0008: unknown main item tag 0x0 [ 215.659550][ T797] hid-steam 0003:28DE:1142.0008: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.1-1/input0 [ 215.848240][ T797] hid-steam 0003:28DE:1142.0008: Steam wireless receiver connected [ 215.902753][ T797] hid-steam 0003:28DE:1142.0009: unknown main item tag 0x0 [ 216.000614][ T797] hid-steam 0003:28DE:1142.0009: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.1-1/input0 [ 216.001316][ T7470] netlink: 16 bytes leftover after parsing attributes in process `syz.1.386'. [ 216.195161][ T797] usb 2-1: USB disconnect, device number 11 [ 216.329808][ T7473] fido_id[7473]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 216.349511][ T797] hid-steam 0003:28DE:1142.0008: Steam wireless receiver disconnected [ 217.378013][ T797] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 218.008843][ T7492] Cannot find add_set index 0 as target [ 218.047348][ T797] usb 2-1: Using ep0 maxpacket: 8 [ 218.111089][ T7498] trusted_key: encrypted_key: keyword 'load' not allowed when called from .update method [ 218.117294][ T797] usb 2-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 218.187328][ T797] usb 2-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 218.197120][ T797] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 218.205587][ T797] usb 2-1: Product: syz [ 218.217813][ T797] usb 2-1: Manufacturer: syz [ 218.227848][ T797] usb 2-1: SerialNumber: syz [ 218.394678][ T797] ch9200 2-1:2.0: probe with driver ch9200 failed with error -22 [ 218.768492][ T43] usb 2-1: USB disconnect, device number 12 [ 219.867582][ T7504] bond0: (slave bond_slave_0): Releasing backup interface [ 220.047880][ T7510] program syz.3.398 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 220.066861][ T7504] bond0: (slave bond_slave_1): Releasing backup interface [ 220.155799][ T7504] team0: Port device team_slave_0 removed [ 220.180243][ T7504] team0: Port device team_slave_1 removed [ 220.188569][ T7504] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 220.196776][ T7504] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 220.264100][ T7504] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 220.273118][ T7504] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 220.486172][ T7504] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 220.652595][ T7517] netlink: 16 bytes leftover after parsing attributes in process `syz.3.400'. [ 220.832049][ T7521] netlink: 'syz.4.401': attribute type 10 has an invalid length. [ 220.883189][ T7521] veth0_vlan: left promiscuous mode [ 220.895485][ T7522] netlink: 27 bytes leftover after parsing attributes in process `syz.4.401'. [ 220.896358][ T7521] veth0_vlan: entered promiscuous mode [ 220.964354][ T7521] team0: Device veth0_vlan failed to register rx_handler [ 221.608573][ T797] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 221.822160][ T797] usb 2-1: config 0 has no interfaces? [ 221.888111][ T797] usb 2-1: New USB device found, idVendor=0b05, idProduct=1abe, bcdDevice= 0.00 [ 221.901876][ T797] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 221.953981][ T797] usb 2-1: config 0 descriptor?? [ 222.620112][ T43] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 222.727934][ T7546] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 222.764076][ T797] wlan1: authenticate with 08:02:11:00:00:00 (local address=08:02:11:00:00:01) [ 222.776664][ T797] wlan1: send auth to 08:02:11:00:00:00 (try 1/3) [ 222.784317][ T43] usb 1-1: Using ep0 maxpacket: 16 [ 222.791107][ T7546] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 222.811877][ T43] usb 1-1: unable to get BOS descriptor or descriptor too short [ 223.352034][ T6659] wlan1: authenticated [ 223.381485][ T7546] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 223.440152][ T43] usb 1-1: config 1 has an invalid interface number: 244 but max is 1 [ 223.452405][ T6661] wlan1: associate with 08:02:11:00:00:00 (try 1/3) [ 223.471488][ T43] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 223.497074][ T43] usb 1-1: config 1 has 3 interfaces, different from the descriptor's value: 2 [ 223.520211][ T43] usb 1-1: config 1 has no interface number 2 [ 223.532516][ T43] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 223.550433][ T43] usb 1-1: config 1 interface 244 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 223.577793][ T43] usb 1-1: config 1 interface 244 has no altsetting 0 [ 223.584787][ T6659] wlan1: associate with 08:02:11:00:00:00 (try 2/3) [ 223.606192][ T43] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 223.625160][ T43] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.642121][ T43] usb 1-1: Product: syz [ 223.650658][ T43] usb 1-1: Manufacturer: syz [ 223.660113][ T43] usb 1-1: SerialNumber: syz [ 223.708162][ T6661] wlan1: associate with 08:02:11:00:00:00 (try 3/3) [ 223.828665][ T6661] wlan1: association with 08:02:11:00:00:00 timed out [ 224.085563][ T43] cdc_ncm 1-1:1.0: CDC Union missing and no IAD found [ 224.097249][ T43] cdc_ncm 1-1:1.0: bind() failure [ 224.132311][ T43] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 224.146248][ T43] cdc_ncm 1-1:1.1: bind() failure [ 224.174372][ T5938] usb 2-1: USB disconnect, device number 13 [ 224.212055][ T43] cdc_mbim 1-1:1.244: probe with driver cdc_mbim failed with error -71 [ 224.241264][ T43] usb 1-1: USB disconnect, device number 19 [ 224.395993][ T5911] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 224.637481][ T5911] usb 4-1: Using ep0 maxpacket: 8 [ 224.654033][ T5911] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 224.662725][ T5911] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 224.701487][ T5911] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 224.752313][ T5911] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 224.755598][ T5827] Bluetooth: hci1: unexpected event for opcode 0x2028 [ 224.772525][ T5911] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 224.788451][ T5911] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 224.800206][ T5911] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 224.828140][ T43] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 225.123616][ T5913] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 225.337792][ T43] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 225.365993][ T43] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 225.378825][ T5911] usb 4-1: usb_control_msg returned -32 [ 225.384532][ T5911] usbtmc 4-1:16.0: can't read capabilities [ 225.412353][ T43] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 225.450762][ T43] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 225.467170][ T5913] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 225.477581][ T5913] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 225.500528][ T5913] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 225.510967][ T5913] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 225.525131][ T43] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 225.534492][ T43] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 225.543220][ T43] usb 5-1: Product: syz [ 225.572517][ T43] usb 5-1: Manufacturer: syz [ 225.602078][ T43] cdc_wdm 5-1:1.0: skipping garbage [ 225.621042][ T5913] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 225.638292][ T5913] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 225.649958][ T43] cdc_wdm 5-1:1.0: skipping garbage [ 225.655240][ T5913] usb 2-1: Product: syz [ 225.662589][ T5913] usb 2-1: Manufacturer: syz [ 225.668369][ T43] cdc_wdm 5-1:1.0: probe with driver cdc_wdm failed with error -22 [ 225.830261][ T7569] netlink: 12 bytes leftover after parsing attributes in process `syz.4.412'. [ 225.839716][ T7569] openvswitch: netlink: Flow key attr not present in new flow. [ 225.859121][ T7578] usbtmc 4-1:16.0: usb_control_msg returned -32 [ 225.866038][ T1208] usb 4-1: USB disconnect, device number 17 [ 225.990812][ T5913] cdc_wdm 2-1:1.0: skipping garbage [ 225.996243][ T5913] cdc_wdm 2-1:1.0: skipping garbage [ 226.002519][ T5913] cdc_wdm 2-1:1.0: probe with driver cdc_wdm failed with error -22 [ 226.018541][ T43] usb 5-1: USB disconnect, device number 13 [ 226.195126][ T7568] netlink: 12 bytes leftover after parsing attributes in process `syz.1.413'. [ 226.204287][ T7568] openvswitch: netlink: Flow key attr not present in new flow. [ 226.235228][ T5913] usb 2-1: USB disconnect, device number 14 [ 226.454261][ T1208] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 226.638640][ T1208] usb 4-1: Using ep0 maxpacket: 16 [ 226.647899][ T1208] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 226.658792][ T1208] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 226.682307][ T1208] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 226.693685][ T1208] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 226.713412][ T1208] usb 4-1: Product: syz [ 226.720015][ T1208] usb 4-1: Manufacturer: syz [ 226.726003][ T1208] usb 4-1: SerialNumber: syz [ 227.164215][ T1208] usb 4-1: 0:2 : does not exist [ 227.180022][ T1208] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 227.424883][ T1208] usb 4-1: USB disconnect, device number 18 [ 227.494186][ T5820] udevd[5820]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 227.838134][ T1208] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 228.000802][ T1208] usb 4-1: Using ep0 maxpacket: 8 [ 228.110023][ T1208] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 228.208267][ T1208] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 228.231273][ T1208] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 46624, setting to 1024 [ 228.260995][ T1208] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 228.289545][ T1208] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 228.318204][ T1208] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 228.368161][ T1208] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 229.567409][ T7597] program syz.4.420 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 229.916816][ T7615] netlink: 16 bytes leftover after parsing attributes in process `syz.2.423'. [ 231.352257][ T1208] usb 4-1: usb_control_msg returned -71 [ 231.440554][ T1208] usbtmc 4-1:16.0: can't read capabilities [ 231.493761][ T1208] usb 4-1: USB disconnect, device number 19 [ 231.786212][ T7627] program syz.0.424 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 232.898589][ T5938] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 233.137193][ T5938] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 233.146290][ T5938] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 233.157339][ T5938] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 233.171582][ T5938] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 233.257668][ T5938] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 233.267872][ T5938] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 233.276922][ T5938] usb 4-1: Product: syz [ 233.281779][ T5938] usb 4-1: Manufacturer: syz [ 233.473393][ T7655] x_tables: duplicate underflow at hook 3 [ 233.613531][ T5938] cdc_wdm 4-1:1.0: skipping garbage [ 233.622400][ T5938] cdc_wdm 4-1:1.0: skipping garbage [ 233.638149][ T5938] cdc_wdm 4-1:1.0: probe with driver cdc_wdm failed with error -22 [ 233.877288][ T7637] netlink: 12 bytes leftover after parsing attributes in process `syz.3.430'. [ 233.897725][ T7637] openvswitch: netlink: Flow key attr not present in new flow. [ 234.270420][ T1208] usb 4-1: USB disconnect, device number 20 [ 234.328088][ T5938] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 234.560107][ T5938] usb 1-1: Using ep0 maxpacket: 8 [ 234.797825][ T7659] program syz.1.437 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 234.890599][ T5938] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 235.058084][ T5938] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 235.102425][ T5938] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 46624, setting to 1024 [ 235.200493][ T5938] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 235.250573][ T5938] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 235.283027][ T5938] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 235.330535][ T5938] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 237.003304][ T7684] netlink: 280 bytes leftover after parsing attributes in process `syz.4.442'. [ 237.373865][ T7695] netlink: 32 bytes leftover after parsing attributes in process `syz.1.443'. [ 238.288203][ T5938] usb 1-1: usb_control_msg returned -71 [ 238.304938][ T5938] usbtmc 1-1:16.0: can't read capabilities [ 238.378162][ T5938] usb 1-1: USB disconnect, device number 20 [ 238.484390][ T7703] tipc: Started in network mode [ 238.497824][ T7703] tipc: Node identity , cluster identity 4711 [ 238.516217][ T7703] tipc: Failed to set node id, please configure manually [ 238.566473][ T7703] tipc: Enabling of bearer rejected, failed to enable media [ 238.913439][ T7718] kvm: vcpu 2: requested 128 ns lapic timer period limited to 200000 ns [ 238.978545][ T7718] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 239.737703][ T7720] program syz.3.449 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 240.875307][ T7741] trusted_key: encrypted_key: keyword 'load' not allowed when called from .update method [ 242.608086][ T5913] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 242.934836][ T5913] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 242.974744][ T5913] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 243.018189][ T5913] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 243.030945][ T5913] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 243.567213][ T5913] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 244.102744][ T5913] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 244.289645][ T5913] usb 2-1: Product: syz [ 244.298682][ T5913] usb 2-1: Manufacturer: syz [ 244.456825][ T5913] cdc_wdm 2-1:1.0: skipping garbage [ 244.478041][ T5913] cdc_wdm 2-1:1.0: skipping garbage [ 244.537423][ T5913] cdc_wdm 2-1:1.0: probe with driver cdc_wdm failed with error -22 [ 245.430835][ T5913] usb 2-1: USB disconnect, device number 15 [ 245.790750][ T7775] netlink: 4 bytes leftover after parsing attributes in process `syz.1.463'. [ 245.988151][ T5925] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 246.010624][ T7776] netlink: 4 bytes leftover after parsing attributes in process `syz.1.463'. [ 246.239908][ T5925] usb 1-1: config index 0 descriptor too short (expected 45, got 36) [ 246.266205][ T5925] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 246.489884][ T5925] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 246.512904][ T5925] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 246.538478][ T5925] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 246.573164][ T5925] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 246.603680][ T5925] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 246.632387][ T5925] usb 1-1: config 0 descriptor?? [ 246.654231][ T7774] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 247.155486][ T7778] program syz.3.464 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 247.236133][ T7774] syzkaller0: entered promiscuous mode [ 247.278323][ T7774] syzkaller0: entered allmulticast mode [ 248.062619][ T7800] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 248.259229][ T7800] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 248.886340][ T5925] usbhid 1-1:0.0: can't add hid device: -71 [ 248.902719][ T5925] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 248.936551][ T5925] usb 1-1: USB disconnect, device number 21 [ 249.434363][ T7816] trusted_key: encrypted_key: insufficient parameters specified [ 249.446927][ T7816] trusted_key: encrypted_key: master key parameter 'user:' is invalid [ 251.063538][ T7824] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 251.074107][ T7824] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 251.086928][ T7824] openvswitch: netlink: Tunnel attr 42 out of range max 16 [ 251.928210][ T5913] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 252.102253][ T5913] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 252.142945][ T5913] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 252.216311][ T5913] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 252.325681][ T5913] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 252.411659][ T5913] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 252.422238][ T5913] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 252.431934][ T5913] usb 5-1: Product: syz [ 252.436687][ T5913] usb 5-1: Manufacturer: syz [ 252.460120][ T5913] cdc_wdm 5-1:1.0: skipping garbage [ 252.465669][ T5913] cdc_wdm 5-1:1.0: skipping garbage [ 252.471812][ T5913] cdc_wdm 5-1:1.0: probe with driver cdc_wdm failed with error -22 [ 252.656441][ T7837] could not allocate digest TFM handle [ 252.671872][ T7830] netlink: 12 bytes leftover after parsing attributes in process `syz.4.473'. [ 252.681106][ T7830] openvswitch: netlink: Flow actions attr not present in new flow. [ 252.709095][ T5913] usb 5-1: USB disconnect, device number 14 [ 252.825134][ T29] audit: type=1326 audit(1773262082.422:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7849 comm="syz.0.479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33f6f9c799 code=0x7ffc0000 [ 253.314120][ T29] audit: type=1326 audit(1773262082.422:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7849 comm="syz.0.479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33f6f9c799 code=0x7ffc0000 [ 253.344495][ T29] audit: type=1326 audit(1773262082.422:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7849 comm="syz.0.479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f33f6f9c799 code=0x7ffc0000 [ 253.383241][ T29] audit: type=1326 audit(1773262082.422:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7849 comm="syz.0.479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33f6f9c799 code=0x7ffc0000 [ 253.418606][ T29] audit: type=1326 audit(1773262082.422:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7849 comm="syz.0.479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33f6f9c799 code=0x7ffc0000 [ 253.441955][ T29] audit: type=1326 audit(1773262082.482:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7849 comm="syz.0.479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f33f6f9c799 code=0x7ffc0000 [ 253.466531][ T29] audit: type=1326 audit(1773262082.482:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7849 comm="syz.0.479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33f6f9c799 code=0x7ffc0000 [ 253.602611][ T29] audit: type=1326 audit(1773262082.482:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7849 comm="syz.0.479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33f6f9c799 code=0x7ffc0000 [ 253.700749][ T7854] trusted_key: encrypted_key: insufficient parameters specified [ 253.823030][ T29] audit: type=1326 audit(1773262082.482:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7849 comm="syz.0.479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f33f6f5cfce code=0x7ffc0000 [ 253.939882][ T29] audit: type=1326 audit(1773262082.482:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7849 comm="syz.0.479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33f6f9c799 code=0x7ffc0000 [ 254.728164][ T1208] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 254.888281][ T1208] usb 4-1: Using ep0 maxpacket: 32 [ 254.895467][ T1208] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 254.926690][ T1208] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 254.946842][ T1208] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 254.977675][ T1208] usb 4-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 254.987283][ T1208] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 255.060343][ T7862] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 255.089056][ T1208] usb 4-1: config 0 descriptor?? [ 255.132673][ T7862] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 255.145820][ T7866] fuse: Unknown parameter 'groupNÍ' [ 255.281010][ T7866] netlink: 12 bytes leftover after parsing attributes in process `syz.4.483'. [ 255.358100][ T5925] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 255.530543][ T5925] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 255.548311][ T5925] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 255.556580][ T5925] usb 2-1: Product: syz [ 255.561620][ T5925] usb 2-1: Manufacturer: syz [ 255.568425][ T5913] usb 5-1: new full-speed USB device number 15 using dummy_hcd [ 255.585825][ T1208] input: HID 0458:5011 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0458:5011.000A/input/input15 [ 255.591765][ T5925] usb 2-1: SerialNumber: syz [ 255.623092][ T5925] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 255.653696][ T797] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 255.708891][ T7857] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 255.731594][ T7857] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 255.746550][ T5913] usb 5-1: unable to get BOS descriptor or descriptor too short [ 255.752710][ T1208] input: HID 0458:5011 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0458:5011.000A/input/input16 [ 255.766394][ T5913] usb 5-1: not running at top speed; connect to a high speed hub [ 255.789769][ T5913] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 129, changing to 4 [ 255.833512][ T5913] usb 5-1: New USB device found, idVendor=041e, idProduct=3040, bcdDevice= 0.40 [ 255.852130][ T5913] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 255.870458][ T1208] kye 0003:0458:5011.000A: input,hiddev0,hidraw0: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.3-1/input0 [ 255.880792][ T5913] usb 5-1: Product: syz [ 255.902420][ T5913] usb 5-1: Manufacturer: syz [ 255.907168][ T5913] usb 5-1: SerialNumber: syz [ 255.925977][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.932768][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.162572][ T7866] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 256.178535][ T7866] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 256.229156][ T5913] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 256.328731][ T43] usb 2-1: USB disconnect, device number 16 [ 256.361272][ T5913] usb 5-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 256.444163][ T5913] usb 5-1: USB disconnect, device number 15 [ 256.712072][ C0] kye 0003:0458:5011.000A: usb_submit_urb(ctrl) failed: -1 [ 257.033806][ T7883] netlink: 12 bytes leftover after parsing attributes in process `syz.4.489'. [ 257.138692][ T797] usb 2-1: Service connection timeout for: 257 [ 257.145083][ T797] ath9k_htc 2-1:1.0: ath9k_htc: Unable to initialize HTC services [ 257.158033][ T797] ath9k_htc: Failed to initialize the device [ 257.229204][ T43] usb 2-1: ath9k_htc: USB layer deinitialized [ 257.668209][ T1208] usb 4-1: USB disconnect, device number 21 [ 259.000189][ T7906] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 259.134183][ T7906] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 259.159745][ T7906] netlink: 12 bytes leftover after parsing attributes in process `syz.2.493'. [ 259.188218][ T7906] openvswitch: netlink: Flow actions attr not present in new flow. [ 260.153471][ T7916] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 260.262558][ T7915] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 260.781473][ T7916] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 261.217037][ T7924] SET target dimension over the limit! [ 262.760317][ T7932] usb usb8: usbfs: process 7932 (syz.2.503) did not claim interface 0 before use [ 263.079777][ T5938] IPVS: starting estimator thread 0... [ 263.227359][ T7942] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 263.234863][ T7943] IPVS: using max 28 ests per chain, 67200 per kthread [ 263.267028][ C1] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 263.292311][ T7942] bond0: (slave bond_slave_0): Releasing backup interface [ 263.311961][ T7942] bond0: (slave bond_slave_1): Releasing backup interface [ 263.413229][ T7942] team0: Port device team_slave_0 removed [ 263.936667][ T7942] team0: Port device team_slave_1 removed [ 263.990860][ T7942] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 264.184558][ T7942] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 264.226958][ T7942] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 264.825943][ T7963] netlink: 20 bytes leftover after parsing attributes in process `syz.1.511'. [ 265.216038][ T7969] netlink: 28 bytes leftover after parsing attributes in process `syz.2.514'. [ 265.272914][ T7974] FAULT_INJECTION: forcing a failure. [ 265.272914][ T7974] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 265.293229][ T7974] CPU: 0 UID: 0 PID: 7974 Comm: syz.2.514 Tainted: G L syzkaller #0 PREEMPT(full) [ 265.293265][ T7974] Tainted: [L]=SOFTLOCKUP [ 265.293273][ T7974] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 265.293302][ T7974] Call Trace: [ 265.293310][ T7974] [ 265.293319][ T7974] dump_stack_lvl+0xe8/0x150 [ 265.293368][ T7974] should_fail_ex+0x412/0x560 [ 265.293392][ T7974] _copy_from_user+0x2d/0xb0 [ 265.293416][ T7974] ___sys_recvmsg+0x175/0x590 [ 265.293437][ T7974] ? __pfx____sys_recvmsg+0x10/0x10 [ 265.293469][ T7974] ? __fget_files+0x3a0/0x420 [ 265.293499][ T7974] do_recvmmsg+0x334/0x800 [ 265.293520][ T7974] ? __pfx_do_recvmmsg+0x10/0x10 [ 265.293543][ T7974] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 265.293570][ T7974] __x64_sys_recvmmsg+0x198/0x250 [ 265.293588][ T7974] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 265.293612][ T7974] do_syscall_64+0x14d/0xf80 [ 265.293625][ T7974] ? trace_irq_disable+0x3b/0x150 [ 265.293647][ T7974] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 265.293662][ T7974] ? clear_bhb_loop+0x40/0x90 [ 265.293680][ T7974] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 265.293696][ T7974] RIP: 0033:0x7f8b81d9c799 [ 265.293710][ T7974] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 265.293723][ T7974] RSP: 002b:00007f8b82d05028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 265.293740][ T7974] RAX: ffffffffffffffda RBX: 00007f8b82016090 RCX: 00007f8b81d9c799 [ 265.293751][ T7974] RDX: 0000000000000001 RSI: 0000200000003700 RDI: 0000000000000008 [ 265.293760][ T7974] RBP: 00007f8b82d05090 R08: 0000000000000000 R09: 0000000000000000 [ 265.293769][ T7974] R10: 0000000040001022 R11: 0000000000000246 R12: 0000000000000001 [ 265.293778][ T7974] R13: 00007f8b82016128 R14: 00007f8b82016090 R15: 00007f8b8213fa48 [ 265.293800][ T7974] [ 265.295042][ T7973] netlink: 20 bytes leftover after parsing attributes in process `syz.4.515'. [ 265.551037][ T7975] ip6tnl1: entered allmulticast mode [ 265.666225][ T6661] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 265.676948][ T6661] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 265.688338][ T5925] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 265.741377][ T7976] netlink: 28 bytes leftover after parsing attributes in process `syz.4.515'. [ 265.898269][ T1208] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 266.117746][ T1208] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 266.225843][ T1208] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 266.276554][ T1208] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 266.337161][ T1208] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 266.388942][ T5925] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 266.407498][ T1208] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 266.440081][ T1208] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 266.482433][ T1208] usb 2-1: Product: syz [ 266.508691][ T1208] usb 2-1: Manufacturer: syz [ 266.621857][ T1208] cdc_wdm 2-1:1.0: skipping garbage [ 266.627159][ T1208] cdc_wdm 2-1:1.0: skipping garbage [ 266.657192][ T1208] cdc_wdm 2-1:1.0: probe with driver cdc_wdm failed with error -22 [ 266.708782][ T5925] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 267.178681][ T8007] binder: 7997:8007 ioctl c0306201 0 returned -14 [ 267.369431][ T7977] openvswitch: netlink: Tunnel attr 42 out of range max 16 [ 267.395479][ T5913] usb 2-1: USB disconnect, device number 17 [ 267.557212][ T8005] ip6gretap0: entered promiscuous mode [ 267.563179][ T8005] macvtap1: entered promiscuous mode [ 267.783391][ T8005] ip6gretap0: left promiscuous mode [ 267.853567][ T5925] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 267.928803][ T8011] netlink: 4 bytes leftover after parsing attributes in process `syz.4.523'. [ 269.152143][ T5925] usb 1-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 269.224610][ T5925] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 269.261657][ T5925] usb 1-1: Product: syz [ 269.270888][ T5925] usb 1-1: Manufacturer: syz [ 269.289872][ T5925] usb 1-1: SerialNumber: syz [ 269.314191][ T5925] r8152-cfgselector 1-1: Unknown version 0x0000 [ 269.328094][ T5925] r8152-cfgselector 1-1: config 0 descriptor?? [ 269.616100][ T8020] netlink: 32 bytes leftover after parsing attributes in process `syz.3.526'. [ 269.802412][ T8004] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 269.823511][ T8004] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 269.908367][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 271.729373][ T8031] netlink: 120 bytes leftover after parsing attributes in process `syz.2.528'. [ 272.519798][ T8007] syz.0.524 (8007): drop_caches: 2 [ 272.648216][ T5925] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 272.758577][ T5896] r8152-cfgselector 1-1: USB disconnect, device number 22 [ 272.808831][ T5925] usb 2-1: Using ep0 maxpacket: 8 [ 272.822429][ T5925] usb 2-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=dc.00 [ 272.842475][ T5925] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 272.858013][ T5925] usb 2-1: Product: syz [ 272.868146][ T5925] usb 2-1: Manufacturer: syz [ 272.883097][ T5925] usb 2-1: SerialNumber: syz [ 272.918961][ T5925] usb 2-1: config 0 descriptor?? [ 272.979743][ T5925] radio-usb-si4713 2-1:0.0: Si4713 development board discovered: (10C4:8244) [ 273.666011][ T5925] radio-usb-si4713 2-1:0.0: probe with driver radio-usb-si4713 failed with error -71 [ 273.701310][ T5925] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 273.961903][ T5925] usb 2-1: USB disconnect, device number 18 [ 273.968192][ T5896] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 274.156884][ T5896] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 274.171979][ T5896] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 274.220943][ T5896] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 274.276955][ T5896] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 274.298142][ T5896] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 274.313168][ T5896] usb 4-1: config 0 descriptor?? [ 274.814599][ T8065] openvswitch: netlink: Tunnel attr 42 out of range max 16 [ 274.846718][ T5896] plantronics 0003:047F:FFFF.000B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 276.281583][ T8080] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 276.291104][ C0] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 276.914885][ T5925] usb 4-1: USB disconnect, device number 22 [ 277.314750][ T8090] netlink: 184 bytes leftover after parsing attributes in process `syz.0.542'. [ 278.208189][ T1208] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 278.308312][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 278.408082][ T1208] usb 5-1: Using ep0 maxpacket: 8 [ 278.458091][ T1208] usb 5-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 278.501010][ T1208] usb 5-1: config 2 has 0 interfaces, different from the descriptor's value: 1 [ 278.563911][ T1208] usb 5-1: New USB device found, idVendor=2f86, idProduct=e092, bcdDevice=53.3f [ 278.578268][ T1208] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 278.601806][ T1208] usb 5-1: Product: syz [ 278.606082][ T1208] usb 5-1: Manufacturer: syz [ 278.626937][ T1208] usb 5-1: SerialNumber: syz [ 278.872481][ T8099] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 278.881835][ T8099] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 278.913235][ T8092] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 278.995287][ T8093] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 279.006475][ T8092] block device autoloading is deprecated and will be removed. [ 279.029045][ T8093] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 279.211215][ T797] usb 5-1: USB disconnect, device number 16 [ 280.513840][ T8122] netlink: 'syz.3.547': attribute type 15 has an invalid length. [ 280.527824][ T8122] netlink: 36 bytes leftover after parsing attributes in process `syz.3.547'. [ 283.397680][ T8146] netlink: 12 bytes leftover after parsing attributes in process `syz.0.555'. [ 284.731766][ T8150] ip6gretap0: entered promiscuous mode [ 284.748367][ T8150] macvtap1: entered promiscuous mode [ 284.832020][ T8162] netlink: 4 bytes leftover after parsing attributes in process `syz.4.557'. [ 284.920506][ T8150] ip6gretap0: left promiscuous mode [ 285.144608][ T8168] netlink: 'syz.0.562': attribute type 5 has an invalid length. [ 285.641358][ T8176] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 285.724252][ T8176] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 286.843322][ T8189] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 286.852717][ T8189] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 290.638589][ T1208] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 290.814609][ T8220] netlink: 4 bytes leftover after parsing attributes in process `syz.4.574'. [ 290.856935][ T8215] ip6gretap0: entered promiscuous mode [ 290.880405][ T8215] macvtap1: entered promiscuous mode [ 290.935485][ T1208] usb 1-1: Using ep0 maxpacket: 32 [ 290.953330][ T1208] usb 1-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 291.525343][ T1208] usb 1-1: config 0 interface 0 has no altsetting 0 [ 291.537779][ T1208] usb 1-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 291.550358][ T8215] ip6gretap0: left promiscuous mode [ 291.640769][ T1208] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 291.814159][ T1208] usb 1-1: config 0 descriptor?? [ 292.292995][ T1208] corsair-cpro 0003:1B1C:0C10.000C: unknown main item tag 0x0 [ 292.315266][ T1208] corsair-cpro 0003:1B1C:0C10.000C: unknown main item tag 0x0 [ 292.340568][ T1208] corsair-cpro 0003:1B1C:0C10.000C: unknown main item tag 0x0 [ 292.350824][ T1208] corsair-cpro 0003:1B1C:0C10.000C: unknown main item tag 0x0 [ 292.386396][ T1208] corsair-cpro 0003:1B1C:0C10.000C: unknown main item tag 0x0 [ 292.508671][ T8245] openvswitch: netlink: Tunnel attr 42 out of range max 16 [ 292.532403][ T1208] corsair-cpro 0003:1B1C:0C10.000C: hidraw0: USB HID v4.06 Device [HID 1b1c:0c10] on usb-dummy_hcd.0-1/input0 [ 292.628172][ T5896] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 292.638782][ T1208] corsair-cpro 0003:1B1C:0C10.000C: probe with driver corsair-cpro failed with error -71 [ 292.661469][ T1208] usb 1-1: USB disconnect, device number 23 [ 292.812228][ T5896] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 292.825455][ T5896] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 292.857755][ T5896] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 292.899373][ T5896] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 292.952110][ T5896] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 292.993028][ T5896] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 293.005019][ T8247] fido_id[8247]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 293.027400][ T5896] usb 4-1: Product: syz [ 293.037814][ T5896] usb 4-1: Manufacturer: syz [ 293.074212][ T5896] cdc_wdm 4-1:1.0: skipping garbage [ 293.100814][ T5896] cdc_wdm 4-1:1.0: skipping garbage [ 293.112680][ T5896] cdc_wdm 4-1:1.0: probe with driver cdc_wdm failed with error -22 [ 293.338885][ T5896] usb 4-1: USB disconnect, device number 23 [ 294.318195][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 295.829676][ T8271] xt_hashlimit: overflow, try lower: 17592186044416/11 [ 295.964328][ T8276] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 295.973531][ T8276] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 296.059432][ T8280] netlink: 'syz.4.588': attribute type 1 has an invalid length. [ 297.299888][ T8286] ip6gretap0: entered promiscuous mode [ 297.361636][ T8288] netlink: 4 bytes leftover after parsing attributes in process `syz.3.589'. [ 297.363233][ T8286] macvtap1: entered promiscuous mode [ 297.662908][ T8286] ip6gretap0: left promiscuous mode [ 298.371498][ T8290] netlink: 28 bytes leftover after parsing attributes in process `syz.0.591'. [ 298.467278][ T8291] FAULT_INJECTION: forcing a failure. [ 298.467278][ T8291] name failslab, interval 1, probability 0, space 0, times 0 [ 298.506940][ T8291] CPU: 1 UID: 0 PID: 8291 Comm: syz.0.591 Tainted: G L syzkaller #0 PREEMPT(full) [ 298.506979][ T8291] Tainted: [L]=SOFTLOCKUP [ 298.506985][ T8291] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 298.506995][ T8291] Call Trace: [ 298.507002][ T8291] [ 298.507009][ T8291] dump_stack_lvl+0xe8/0x150 [ 298.507035][ T8291] should_fail_ex+0x412/0x560 [ 298.507059][ T8291] should_failslab+0xa8/0x100 [ 298.507079][ T8291] ? vm_area_dup+0x2b/0x680 [ 298.507095][ T8291] kmem_cache_alloc_noprof+0x87/0x650 [ 298.507118][ T8291] vm_area_dup+0x2b/0x680 [ 298.507137][ T8291] __split_vma+0x1dc/0xa40 [ 298.507160][ T8291] ? mas_find+0xb0e/0xd30 [ 298.507189][ T8291] ? __pfx___split_vma+0x10/0x10 [ 298.507220][ T8291] ? __pfx___up_read+0x10/0x10 [ 298.507238][ T8291] vms_gather_munmap_vmas+0x32d/0x1370 [ 298.507258][ T8291] ? __mt_destroy+0x1c9/0x280 [ 298.507273][ T8291] ? vms_complete_munmap_vmas+0xa0b/0xc60 [ 298.507303][ T8291] ? __pfx_vms_gather_munmap_vmas+0x10/0x10 [ 298.507340][ T8291] do_vmi_align_munmap+0x2b4/0x4b0 [ 298.507373][ T8291] ? __pfx_do_vmi_align_munmap+0x10/0x10 [ 298.507416][ T8291] do_vmi_munmap+0x252/0x2d0 [ 298.507441][ T8291] __vm_munmap+0x22c/0x3d0 [ 298.507465][ T8291] ? __pfx___vm_munmap+0x10/0x10 [ 298.507485][ T8291] ? vm_mmap_pgoff+0x3b1/0x4f0 [ 298.507523][ T8291] __x64_sys_munmap+0x60/0x70 [ 298.507539][ T8291] do_syscall_64+0x14d/0xf80 [ 298.507552][ T8291] ? trace_irq_disable+0x3b/0x150 [ 298.507575][ T8291] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 298.507590][ T8291] ? clear_bhb_loop+0x40/0x90 [ 298.507609][ T8291] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 298.507625][ T8291] RIP: 0033:0x7f33f6f9c5c7 [ 298.507639][ T8291] Code: 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 0b 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 298.507653][ T8291] RSP: 002b:00007f33f7e2ad18 EFLAGS: 00000206 ORIG_RAX: 000000000000000b [ 298.507669][ T8291] RAX: ffffffffffffffda RBX: 00007f33f0000000 RCX: 00007f33f6f9c5c7 [ 298.507681][ T8291] RDX: 0000000000000000 RSI: 0000000001000000 RDI: 00007f33f4000000 [ 298.507691][ T8291] RBP: 0000000000021000 R08: 00000000ffffffff R09: 0000000000000000 [ 298.507701][ T8291] R10: 0000000000000022 R11: 0000000000000206 R12: 0000000004000000 [ 298.507710][ T8291] R13: 0000000000001000 R14: 00007f33f4000000 R15: 0000000003000000 [ 298.507732][ T8291] [ 299.931984][ T8314] usb usb8: usbfs: interface 0 claimed by hub while 'syz.2.597' sets config #0 [ 299.972624][ T8308] netlink: 4 bytes leftover after parsing attributes in process `syz.0.594'. [ 300.210295][ T8314] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 300.221026][ T8314] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 300.242545][ T8312] ip6gretap0: entered promiscuous mode [ 300.248423][ T8312] macvtap1: entered promiscuous mode [ 300.279825][ T8312] ip6gretap0: left promiscuous mode [ 300.296282][ T8314] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 300.325136][ T8314] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 300.351250][ T8314] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 300.393692][ T8314] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 301.089186][ T8328] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 301.098548][ T8328] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 301.158507][ T797] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 301.410220][ T797] usb 4-1: config index 0 descriptor too short (expected 65183, got 72) [ 301.444586][ T797] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 301.458396][ T797] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 301.466649][ T797] usb 4-1: Product: syz [ 301.471551][ T797] usb 4-1: Manufacturer: syz [ 301.476576][ T797] usb 4-1: SerialNumber: syz [ 301.524164][ T797] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 301.558555][ T5913] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 301.747157][ T797] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 301.806070][ T8322] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 301.836523][ T8322] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 301.880414][ T8322] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 301.911270][ T8322] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 301.933813][ T8322] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 301.948273][ T797] usb 2-1: Using ep0 maxpacket: 8 [ 301.956761][ T797] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 301.969335][ T797] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 301.981632][ T797] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 46624, setting to 1024 [ 301.987617][ T8322] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 302.051836][ T1208] usb 4-1: USB disconnect, device number 24 [ 302.073150][ T797] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 302.114055][ T797] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 302.214645][ T797] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 302.347622][ T797] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 302.711043][ T797] usb 2-1: GET_CAPABILITIES returned 0 [ 302.718403][ T797] usbtmc 2-1:16.0: can't read capabilities [ 302.728649][ T5913] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 302.738648][ T5913] ath9k_htc: Failed to initialize the device [ 302.774796][ T1208] usb 4-1: ath9k_htc: USB layer deinitialized [ 303.063386][ T8342] xt_hashlimit: overflow, try lower: 17592186044416/11 [ 303.158122][ T1208] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 303.310387][ T1208] usb 4-1: Using ep0 maxpacket: 32 [ 303.318211][ T1208] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 303.355823][ T1208] usb 4-1: New USB device found, idVendor=110a, idProduct=2210, bcdDevice=d2.a2 [ 303.369195][ T1208] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 303.379300][ T1208] usb 4-1: Product: syz [ 303.402174][ T1208] usb 4-1: Manufacturer: syz [ 303.425632][ T1208] usb 4-1: SerialNumber: syz [ 303.444308][ T8347] netlink: 32 bytes leftover after parsing attributes in process `syz.4.606'. [ 303.492554][ T1208] usb 4-1: config 0 descriptor?? [ 303.835923][ T1208] mos7840 4-1:0.0: required endpoints missing [ 303.964697][ T1208] usb 4-1: USB disconnect, device number 25 [ 304.185384][ T8353] netlink: 32 bytes leftover after parsing attributes in process `syz.3.608'. [ 305.110598][ T8365] Cannot find add_set index 0 as target [ 305.485532][ T5896] usb 2-1: USB disconnect, device number 19 [ 305.738291][ T5822] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 305.849469][ T8373] batadv_slave_0: entered promiscuous mode [ 305.888040][ T5822] usb 1-1: device descriptor read/64, error -71 [ 306.129972][ T5822] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 306.668104][ T5822] usb 1-1: device descriptor read/64, error -71 [ 306.812516][ T5822] usb usb1-port1: attempt power cycle [ 307.198781][ T8381] ip6gretap0: entered promiscuous mode [ 307.201545][ T5822] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 307.252189][ T8381] macvtap1: entered promiscuous mode [ 307.269783][ T5822] usb 1-1: device descriptor read/8, error -71 [ 307.287087][ T8382] netlink: 4 bytes leftover after parsing attributes in process `syz.1.615'. [ 307.351269][ T8381] ip6gretap0: left promiscuous mode [ 307.661343][ T5913] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 307.823719][ T5822] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 307.869294][ T5822] usb 1-1: device descriptor read/8, error -71 [ 307.998295][ T5822] usb usb1-port1: unable to enumerate USB device [ 308.021230][ T5913] usb 4-1: Using ep0 maxpacket: 8 [ 308.031851][ T5913] usb 4-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=2a.d5 [ 308.042617][ T5913] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 308.071615][ T5913] usb 4-1: config 0 descriptor?? [ 308.158083][ T5896] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 308.314388][ T8386] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 308.329423][ T8386] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 308.358239][ T5913] usb 4-1: string descriptor 0 read error: -71 [ 308.385680][ T5913] uvcvideo 4-1:0.0: Found multiple Units with ID 1 [ 308.397735][ T5913] uvcvideo 4-1:0.0: Found UVC 0.00 device (2833:0201) [ 308.398559][ T5896] usb 1-1: device descriptor read/64, error -71 [ 308.444218][ T5913] uvcvideo 4-1:0.0: No valid video chain found. [ 308.477746][ T5913] usb 4-1: USB disconnect, device number 26 [ 308.597121][ T8398] netlink: 12 bytes leftover after parsing attributes in process `syz.0.619'. [ 309.032084][ T8403] netlink: 'syz.2.620': attribute type 3 has an invalid length. [ 309.060676][ T8403] netlink: 16 bytes leftover after parsing attributes in process `syz.2.620'. [ 309.536808][ T8409] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 309.545918][ C0] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 310.693197][ T8416] netlink: 32 bytes leftover after parsing attributes in process `syz.0.623'. [ 311.362694][ T8423] Cannot find add_set index 0 as target [ 312.448126][ T797] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 312.718430][ T797] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 312.748706][ T797] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 312.813246][ T797] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 312.846421][ T797] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 312.906065][ T797] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 312.944908][ T797] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 312.981304][ T797] usb 2-1: Product: syz [ 312.998725][ T797] usb 2-1: Manufacturer: syz [ 313.068203][ T797] cdc_wdm 2-1:1.0: skipping garbage [ 313.073541][ T797] cdc_wdm 2-1:1.0: skipping garbage [ 313.082844][ T797] cdc_wdm 2-1:1.0: probe with driver cdc_wdm failed with error -22 [ 313.294780][ T8428] openvswitch: netlink: Tunnel attr 42 out of range max 16 [ 313.319065][ T797] usb 2-1: USB disconnect, device number 20 [ 315.298088][ T797] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 315.641333][ T797] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 315.658162][ T797] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 315.693434][ T797] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 315.756143][ T797] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 315.825666][ T797] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 315.852557][ T797] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 315.881002][ T797] usb 5-1: Product: syz [ 315.895407][ T797] usb 5-1: Manufacturer: syz [ 315.950001][ T797] cdc_wdm 5-1:1.0: skipping garbage [ 315.968274][ T797] cdc_wdm 5-1:1.0: skipping garbage [ 315.987261][ T797] cdc_wdm 5-1:1.0: probe with driver cdc_wdm failed with error -22 [ 316.274341][ T5827] Bluetooth: hci0: unexpected event for opcode 0x200b [ 316.298942][ T8455] openvswitch: netlink: Tunnel attr 42 out of range max 16 [ 316.839558][ T5896] usb 5-1: USB disconnect, device number 17 [ 317.352084][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.359312][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.677682][ T8477] netlink: 32 bytes leftover after parsing attributes in process `syz.3.638'. [ 318.533122][ T8482] netlink: 32 bytes leftover after parsing attributes in process `syz.0.639'. [ 318.815244][ T8485] netlink: 20 bytes leftover after parsing attributes in process `syz.2.640'. [ 318.824723][ T8485] tipc: Invalid UDP bearer configuration [ 318.824832][ T8485] tipc: Enabling of bearer rejected, failed to enable media [ 319.588522][ T8492] netlink: 'syz.2.642': attribute type 3 has an invalid length. [ 319.628930][ T8492] netlink: 16 bytes leftover after parsing attributes in process `syz.2.642'. [ 320.589940][ T8508] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 320.868233][ T8502] loop7: detected capacity change from 0 to 16384 [ 321.065685][ T8508] loop7: detected capacity change from 16384 to 0 [ 321.093007][ C1] I/O error, dev loop7, sector 64 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 322.349356][ T8516] loop6: detected capacity change from 0 to 7 [ 322.360122][ T8516] Dev loop6: unable to read RDB block 7 [ 322.365746][ T8516] loop6: unable to read partition table [ 322.388283][ T8516] loop6: partition table beyond EOD, truncated [ 322.394545][ T8516] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 322.548692][ T8518] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 322.589617][ C0] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 322.844017][ T8524] xt_hashlimit: overflow, try lower: 17592186044416/11 [ 324.441083][ T8538] SET target dimension over the limit! [ 325.181992][ T8541] netlink: 'syz.2.655': attribute type 3 has an invalid length. [ 325.200599][ T8541] netlink: 16 bytes leftover after parsing attributes in process `syz.2.655'. [ 325.454404][ T8549] netlink: 32 bytes leftover after parsing attributes in process `syz.0.654'. [ 325.747614][ T8555] netlink: 32 bytes leftover after parsing attributes in process `syz.2.657'. [ 326.308198][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 326.322393][ T30] INFO: task kworker/1:6:5919 blocked for more than 143 seconds. [ 326.331411][ T30] Tainted: G L syzkaller #0 [ 326.342595][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 326.363780][ T30] task:kworker/1:6 state:D stack:21544 pid:5919 tgid:5919 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 326.842890][ T30] Workqueue: usb_hub_wq hub_event [ 326.848107][ T30] Call Trace: [ 326.853060][ T30] [ 326.886857][ T30] __schedule+0x15dd/0x52d0 [ 326.896095][ T30] ? usb_new_device+0xa08/0x16f0 [ 326.920531][ T30] ? hub_event+0x2a1c/0x4f30 [ 326.939532][ T30] ? process_scheduled_works+0xb02/0x1830 [ 326.947652][ T30] ? worker_thread+0xa50/0xfc0 [ 326.952944][ T30] ? __pfx___schedule+0x10/0x10 [ 326.958365][ T30] ? schedule+0x90/0x360 [ 327.014394][ T30] schedule+0x164/0x360 [ 327.020772][ T30] schedule_timeout+0xc3/0x2c0 [ 327.026742][ T30] ? do_raw_spin_lock+0x12b/0x2f0 [ 327.036171][ T30] ? __pfx_schedule_timeout+0x10/0x10 [ 327.043083][ T30] ? do_raw_spin_lock+0x12b/0x2f0 [ 327.091441][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 327.130761][ T30] ? wait_for_completion+0x274/0x5e0 [ 327.226563][ T30] wait_for_completion+0x2cc/0x5e0 [ 327.245876][ T30] ? __pfx_wait_for_completion+0x10/0x10 [ 327.260379][ T30] i2c_del_adapter+0x5c0/0x790 [ 327.279310][ T30] ? __pfx_i2c_del_adapter+0x10/0x10 [ 327.291465][ T30] ? kfree+0x4d/0x630 [ 327.314174][ T30] dvb_usb_i2c_exit+0x64/0xb0 [ 327.346330][ T30] dvb_usb_device_exit+0x1cb/0x360 [ 327.648161][ T30] ? __pfx_dvb_usb_device_exit+0x10/0x10 [ 327.658042][ T30] cxusb_probe+0x60f/0x710 [ 327.662547][ T30] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 327.668572][ T30] ? __pfx_cxusb_probe+0x10/0x10 [ 327.674340][ T30] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 327.681424][ T30] ? __pm_runtime_set_status+0x9d4/0xcd0 [ 327.687126][ T30] usb_probe_interface+0x668/0xc90 [ 327.692432][ T30] ? __pfx_usb_probe_interface+0x10/0x10 [ 327.702580][ T30] really_probe+0x267/0xaf0 [ 327.726682][ T30] __driver_probe_device+0x18c/0x320 [ 327.738162][ T30] driver_probe_device+0x4f/0x240 [ 327.743322][ T30] __device_attach_driver+0x279/0x430 [ 327.750445][ T30] bus_for_each_drv+0x258/0x2f0 [ 327.760458][ T30] ? __pfx___device_attach_driver+0x10/0x10 [ 327.768059][ T30] ? __pfx_bus_for_each_drv+0x10/0x10 [ 327.791840][ T30] ? lockdep_hardirqs_on+0x7a/0x110 [ 327.816932][ T30] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 327.876125][ T30] __device_attach+0x2c5/0x450 [ 327.910235][ T30] ? __pfx___device_attach+0x10/0x10 [ 327.923865][ T30] ? _raw_spin_unlock+0x28/0x50 [ 327.929928][ T30] device_initial_probe+0xa1/0xd0 [ 327.935713][ T30] bus_probe_device+0x12a/0x220 [ 327.954966][ T30] ? device_add+0x726/0xb70 [ 327.960941][ T30] device_add+0x7b6/0xb70 [ 327.966375][ T30] usb_set_configuration+0x1a87/0x2110 [ 327.974254][ T30] usb_generic_driver_probe+0x8d/0x150 [ 327.981731][ T30] usb_probe_device+0x1c4/0x3b0 [ 327.986837][ T30] ? __pfx_usb_probe_device+0x10/0x10 [ 327.992692][ T30] really_probe+0x267/0xaf0 [ 327.997884][ T30] __driver_probe_device+0x18c/0x320 [ 328.004973][ T30] driver_probe_device+0x4f/0x240 [ 328.011491][ T30] __device_attach_driver+0x279/0x430 [ 328.018789][ T30] bus_for_each_drv+0x258/0x2f0 [ 328.023773][ T30] ? __pfx___device_attach_driver+0x10/0x10 [ 328.034308][ T30] ? __pfx_bus_for_each_drv+0x10/0x10 [ 328.041349][ T30] ? lockdep_hardirqs_on+0x7a/0x110 [ 328.047201][ T30] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 328.054206][ T30] __device_attach+0x2c5/0x450 [ 328.061421][ T30] ? __pfx___device_attach+0x10/0x10 [ 328.069768][ T30] ? _raw_spin_unlock+0x28/0x50 [ 328.075479][ T30] device_initial_probe+0xa1/0xd0 [ 328.082932][ T30] bus_probe_device+0x12a/0x220 [ 328.097268][ T30] ? device_add+0x726/0xb70 [ 328.103109][ T30] device_add+0x7b6/0xb70 [ 328.108944][ T30] usb_new_device+0xa08/0x16f0 [ 328.113913][ T30] ? __pfx_usb_new_device+0x10/0x10 [ 328.121079][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 328.128632][ T30] hub_event+0x2a1c/0x4f30 [ 328.134703][ T30] ? __pfx_hub_event+0x10/0x10 [ 328.139924][ T30] ? process_scheduled_works+0xa25/0x1830 [ 328.145784][ T30] ? process_scheduled_works+0xa25/0x1830 [ 328.153323][ T30] process_scheduled_works+0xb02/0x1830 [ 328.159420][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 328.166719][ T30] ? assign_work+0x3d5/0x5e0 [ 328.171742][ T30] worker_thread+0xa50/0xfc0 [ 328.176686][ T30] kthread+0x388/0x470 [ 328.183700][ T30] ? __pfx_worker_thread+0x10/0x10 [ 328.191578][ T30] ? __pfx_kthread+0x10/0x10 [ 328.197407][ T30] ret_from_fork+0x51e/0xb90 [ 328.204569][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 328.210395][ T30] ? __switch_to+0xc7d/0x1450 [ 328.215416][ T30] ? __pfx_kthread+0x10/0x10 [ 328.225489][ T30] ret_from_fork_asm+0x1a/0x30 [ 328.239141][ T30] [ 328.257246][ T30] [ 328.257246][ T30] Showing all locks held in the system: [ 328.311794][ T30] 1 lock held by khungtaskd/30: [ 328.324068][ T30] #0: ffffffff8e75e420 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 328.362956][ T30] 2 locks held by getty/5582: [ 328.394996][ T30] #0: ffff8880366130a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 328.420398][ T30] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13c0 [ 328.445230][ T30] 4 locks held by udevd/5837: [ 328.451021][ T30] #0: ffff88803562b790 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xb7/0xe10 [ 328.460147][ T30] #1: ffff88807bba1088 (&of->mutex#2){+.+.}-{4:4}, at: kernfs_seq_start+0x5c/0x420 [ 328.469743][ T30] #2: ffff888059387d28 (kn->active#29){++++}-{0:0}, at: kernfs_seq_start+0xb2/0x420 [ 328.479667][ T30] #3: ffff88802069a198 (&dev->mutex){....}-{4:4}, at: manufacturer_show+0x26/0xa0 [ 328.489433][ T30] 5 locks held by kworker/1:6/5919: [ 328.495131][ T30] #0: ffff8880222f6548 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9ea/0x1830 [ 328.508852][ T30] #1: ffffc90004717c40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0xa25/0x1830 [ 328.521981][ T30] #2: ffff888029a38198 (&dev->mutex){....}-{4:4}, at: hub_event+0x17f/0x4f30 [ 328.534123][ T30] #3: ffff88802069a198 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450 [ 328.543710][ T30] #4: ffff88805864d160 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450 [ 328.553458][ T30] 4 locks held by kworker/u8:19/6683: [ 328.559277][ T30] #0: ffff8880b863ade0 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0xb6/0x150 [ 328.571589][ T30] #1: ffff8880b8724588 (psi_seq){-.-.}-{0:0}, at: psi_task_switch+0x53/0x880 [ 328.580841][ T30] #2: ffffffff8e75e420 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0xa5/0x23c0 [ 328.590846][ T30] #3: ffffffff8e75e420 (rcu_read_lock){....}-{1:3}, at: batadv_iv_ogm_schedule+0x8d7/0xf50 [ 328.608781][ T30] [ 328.611187][ T30] ============================================= [ 328.611187][ T30] [ 328.620204][ T30] NMI backtrace for cpu 0 [ 328.620226][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 328.620256][ T30] Tainted: [L]=SOFTLOCKUP [ 328.620264][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 328.620277][ T30] Call Trace: [ 328.620285][ T30] [ 328.620293][ T30] dump_stack_lvl+0xe8/0x150 [ 328.620330][ T30] nmi_cpu_backtrace+0x274/0x2d0 [ 328.620358][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 328.620388][ T30] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 328.620418][ T30] sys_info+0x135/0x170 [ 328.620441][ T30] watchdog+0xfd9/0x1030 [ 328.620478][ T30] ? watchdog+0x21a/0x1030 [ 328.620518][ T30] kthread+0x388/0x470 [ 328.620538][ T30] ? __pfx_watchdog+0x10/0x10 [ 328.620567][ T30] ? __pfx_kthread+0x10/0x10 [ 328.620589][ T30] ret_from_fork+0x51e/0xb90 [ 328.620620][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 328.620655][ T30] ? __switch_to+0xc7d/0x1450 [ 328.620683][ T30] ? __pfx_kthread+0x10/0x10 [ 328.620704][ T30] ret_from_fork_asm+0x1a/0x30 [ 328.620752][ T30] [ 328.620760][ T30] Sending NMI from CPU 0 to CPUs 1: [ 328.740283][ C1] NMI backtrace for cpu 1 [ 328.740307][ C1] CPU: 1 UID: 0 PID: 6681 Comm: kworker/u8:18 Tainted: G L syzkaller #0 PREEMPT(full) [ 328.740333][ C1] Tainted: [L]=SOFTLOCKUP [ 328.740339][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 328.740351][ C1] Workqueue: events_unbound cfg80211_wiphy_work [ 328.740381][ C1] RIP: 0010:process_scheduled_works+0x8cf/0x1830 [ 328.740408][ C1] Code: 74 08 4c 89 e7 e8 31 26 a1 00 41 c1 e6 05 41 83 e6 20 48 c1 e3 16 4c 09 f3 41 83 e7 10 49 09 df 4d 89 3c 24 f0 83 44 24 fc 00 <48> 8b 44 24 30 48 8d 98 f0 00 00 00 48 89 d8 48 c1 e8 03 49 be 00 [ 328.740424][ C1] RSP: 0018:ffffc9001c0bfb00 EFLAGS: 00000086 [ 328.740440][ C1] RAX: dffffc0000000000 RBX: 0000000002000000 RCX: 1ffff1100d5d30cf [ 328.740453][ C1] RDX: 0000000000000001 RSI: 0000000000000008 RDI: ffff88806ae98678 [ 328.740464][ C1] RBP: ffffc9001c0bfce8 R08: ffff88806ae9867f R09: 1ffff1100d5d30cf [ 328.740478][ C1] R10: dffffc0000000000 R11: ffffed100d5d30d0 R12: ffff88806ae98678 [ 328.740491][ C1] R13: ffff888034153a18 R14: 0000000000000000 R15: 0000000002000000 [ 328.740503][ C1] FS: 0000000000000000(0000) GS:ffff888125563000(0000) knlGS:0000000000000000 [ 328.740518][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 328.740529][ C1] CR2: 00007f8b81fe92f8 CR3: 00000000784d4000 CR4: 00000000003526f0 [ 328.740545][ C1] Call Trace: [ 328.740552][ C1] [ 328.740575][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 328.740601][ C1] ? assign_work+0x3d5/0x5e0 [ 328.740627][ C1] worker_thread+0xa50/0xfc0 [ 328.740664][ C1] kthread+0x388/0x470 [ 328.740681][ C1] ? __pfx_worker_thread+0x10/0x10 [ 328.740703][ C1] ? __pfx_kthread+0x10/0x10 [ 328.740720][ C1] ret_from_fork+0x51e/0xb90 [ 328.740743][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 328.740765][ C1] ? __switch_to+0xc7d/0x1450 [ 328.740787][ C1] ? __pfx_kthread+0x10/0x10 [ 328.740803][ C1] ret_from_fork_asm+0x1a/0x30 [ 328.740839][ C1] [ 328.939622][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 328.946627][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 328.957325][ T30] Tainted: [L]=SOFTLOCKUP [ 328.961756][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 328.971926][ T30] Call Trace: [ 328.975250][ T30] [ 328.978205][ T30] vpanic+0x56c/0xa60 [ 328.982225][ T30] ? __pfx___schedule+0x10/0x10 [ 328.987109][ T30] ? __pfx_vpanic+0x10/0x10 [ 328.991669][ T30] ? __pfx_console_unlock+0x10/0x10 [ 328.996910][ T30] panic+0xc5/0xd0 [ 329.000658][ T30] ? __pfx_panic+0x10/0x10 [ 329.005110][ T30] ? preempt_schedule_thunk+0x16/0x30 [ 329.010598][ T30] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 329.016790][ T30] watchdog+0x1023/0x1030 [ 329.021187][ T30] ? watchdog+0x21a/0x1030 [ 329.025640][ T30] kthread+0x388/0x470 [ 329.029728][ T30] ? __pfx_watchdog+0x10/0x10 [ 329.034435][ T30] ? __pfx_kthread+0x10/0x10 [ 329.039083][ T30] ret_from_fork+0x51e/0xb90 [ 329.043729][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 329.048890][ T30] ? __switch_to+0xc7d/0x1450 [ 329.053617][ T30] ? __pfx_kthread+0x10/0x10 [ 329.058235][ T30] ret_from_fork_asm+0x1a/0x30 [ 329.063053][ T30] [ 329.066687][ T30] Kernel Offset: disabled [ 329.071023][ T30] Rebooting in 86400 seconds..