last executing test programs: 2m46.278506287s ago: executing program 0 (id=1898): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x19, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) set_mempolicy(0x3, 0x0, 0x5) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc3}, {}, {0xe, 0xd}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x1, 0x803, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f0000000340)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x80, 0x80, 0x3, [@var={0x3, 0x0, 0x0, 0xe, 0x2, 0x1}, @fwd={0xd}, @volatile={0xc, 0x0, 0x0, 0x9, 0x1}, @decl_tag={0xc, 0x0, 0x0, 0x11, 0x4, 0xa}, @enum={0x9, 0x1, 0x0, 0x6, 0x4, [{0x4, 0x9}]}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x2, 0xcd57}}, @ptr={0x6}, @decl_tag={0x4, 0x0, 0x0, 0x11, 0x2, 0x6}]}, {0x0, [0x30]}}, &(0x7f00000004c0)=""/33, 0x9b, 0x21}, 0x28) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r1, 0x0, 0x8000) 2m46.12083161s ago: executing program 0 (id=1899): r0 = syz_clone(0x100011, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(r0, &(0x7f0000001100), 0x2000, &(0x7f0000001140)) 2m45.969225669s ago: executing program 0 (id=1901): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'bridge_slave_1\x00', 0xf5fd}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="580000000206030000000000000000000300000705000100070000000900020073797a31000000000c00078008001240000000050500050002000000050004000100000011000300686173683a69702c706f7274"], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x7, 0x6, 0x301, 0x0, 0x0, {0x1}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000800}, 0x20000040) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0xc369d000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000005e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r5, 0x541b, &(0x7f0000000000)={0xffffffffffffffff}) close_range(r6, 0xffffffffffffffff, 0x0) r7 = socket$inet(0xa, 0x801, 0x84) connect$inet(r7, &(0x7f00000004c0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r7, 0x8) r8 = accept4(r7, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) splice(0xffffffffffffffff, &(0x7f0000000100)=0x8, r0, &(0x7f0000000140)=0x5, 0x4, 0x4) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000002100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r9, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_fuse_handle_req(r9, &(0x7f0000004180)="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", 0x2000, &(0x7f0000000280)={&(0x7f0000000080)={0x50, 0x0, 0x200000000000, {0x7, 0x29, 0x4, 0xa100489, 0xc9f, 0xfff, 0xd, 0x8, 0x0, 0x0, 0x10, 0x400}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r9, &(0x7f0000006400)="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", 0x2000, &(0x7f0000000440)={&(0x7f0000000200)={0x50, 0xffffffffffffffda, 0xffff, {0x7, 0x29, 0x7, 0x1021900, 0x5c9, 0x1, 0x8001, 0x5, 0x0, 0x0, 0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) removexattr(&(0x7f0000000580)='./file0\x00', &(0x7f0000000640)=@known='system.posix_acl_default\x00') ftruncate(r8, 0x5) removexattr(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)=@known='security.apparmor\x00') sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) 2m45.097456521s ago: executing program 0 (id=1904): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901) r3 = fsopen(&(0x7f0000000240)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) fchdir(r4) mkdir(&(0x7f00000008c0)='./bus\x00', 0x0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x10c) getdents64(r5, &(0x7f00000000c0)=""/55, 0x37) lseek(r5, 0x1, 0x0) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r6 = open_tree(r1, &(0x7f0000000640)='\x00', 0x89901) move_mount(r6, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 2m44.215733492s ago: executing program 0 (id=1915): r0 = socket$packet(0x11, 0x3, 0x300) r1 = syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x180862) ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x200) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'hsr0\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000080)={r2, 0x3, 0x6, @random="7c6a97bead69"}, 0x10) 2m43.848828584s ago: executing program 0 (id=1916): syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) (async) r0 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000280)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000580)={0x0, 0x1d61f6c95ceb726d, r1, 0x0}) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r0, 0xc01864b0, &(0x7f0000000080)={r1, r2, 0x0, 0x0, 0x4}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@newlink={0x54, 0x10, 0x401, 0x4002, 0x0, {0x0, 0x0, 0xffff, 0x0, 0x1d188}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x10, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0x8, 0xc}}]}}}, @IFLA_IFNAME={0x14, 0x3, 'vlan0\x00'}]}, 0x54}}, 0x0) (async) sendmsg$nl_route(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@newlink={0x54, 0x10, 0x401, 0x4002, 0x0, {0x0, 0x0, 0xffff, 0x0, 0x1d188}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x10, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0x8, 0xc}}]}}}, @IFLA_IFNAME={0x14, 0x3, 'vlan0\x00'}]}, 0x54}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), 0xffffffffffffffff) (async) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r4, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xfffffffffffffcdb, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="00002dbd7000ffdbdf250b000000380001fd867124edfb152700000000000000002100000003f68b0000000800060014000000080003000a010101040001800000040003000000"], 0x50}, 0x1, 0x0, 0x0, 0x10}, 0x0) close(r0) 2m43.525793564s ago: executing program 32 (id=1916): syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) (async) r0 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000280)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000580)={0x0, 0x1d61f6c95ceb726d, r1, 0x0}) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r0, 0xc01864b0, &(0x7f0000000080)={r1, r2, 0x0, 0x0, 0x4}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@newlink={0x54, 0x10, 0x401, 0x4002, 0x0, {0x0, 0x0, 0xffff, 0x0, 0x1d188}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x10, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0x8, 0xc}}]}}}, @IFLA_IFNAME={0x14, 0x3, 'vlan0\x00'}]}, 0x54}}, 0x0) (async) sendmsg$nl_route(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@newlink={0x54, 0x10, 0x401, 0x4002, 0x0, {0x0, 0x0, 0xffff, 0x0, 0x1d188}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x10, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0x8, 0xc}}]}}}, @IFLA_IFNAME={0x14, 0x3, 'vlan0\x00'}]}, 0x54}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), 0xffffffffffffffff) (async) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r4, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xfffffffffffffcdb, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="00002dbd7000ffdbdf250b000000380001fd867124edfb152700000000000000002100000003f68b0000000800060014000000080003000a010101040001800000040003000000"], 0x50}, 0x1, 0x0, 0x0, 0x10}, 0x0) close(r0) 7.688963894s ago: executing program 3 (id=2690): mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000200000/0x4000)=nil, 0x4000, 0x4, 0x200000006c832, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x2000000) 7.487983268s ago: executing program 3 (id=2694): socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = syz_io_uring_setup(0x231, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000000), &(0x7f0000000100), &(0x7f0000000000)) io_uring_enter(r3, 0x7a98, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000400)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xa, 0xffff}, {0xfff2, 0xa}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x3c, 0x2, {{0x3, 0x3, 0x6361, 0x4, 0xffffffff, 0x5}, [@TCA_NETEM_RATE64={0xc, 0x8, 0x54a8b2145564de64}, @TCA_NETEM_RATE={0x14, 0x6, {0x0, 0x2, 0x0, 0x6}}]}}}]}, 0x6c}}, 0x40004) setxattr$incfs_metadata(&(0x7f0000000040)='./cgroup/cgroup.procs\x00', &(0x7f0000000080), &(0x7f00000000c0)="47f952", 0x3, 0x1) lsetxattr$security_capability(&(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), &(0x7f0000000140)=@v2={0x2000000, [{0x4, 0x3}, {0x4, 0x4}]}, 0x14, 0x0) truncate(0x0, 0x7) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r6) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r6, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="33fafefffffffcdbdf2507000000080003014d73965d2dc7ae4eecded1166bad8c5356ad7ac894bba0d58d6218873cb0c054e9f8093c3190fd56b1524c18ebc7844f105763ed4f7ffea2b1da599ce91c4c69ea1521f8034fa5c42bc122eeef69101581f1f82b93dbec7f2b38db12a2ebf8f14504b975028fe74c45a59f1140bdb666a6890fd8cf826bc1dcda287234c6509fa7a0e73f43449078dbdfbde9f40a1ce9daa6b71ce93fbe2674aeda3f6b9cc4e2d6d2a965453a5b5d8f34315f185239ab84734b49e77b9831abdd3a5645e16cf4ce821247a88fcf1b5767d4c12d27ecc5bf4bfd17720c924977a616f7df3df8499485aaf217a7a6", @ANYRES32=r8, @ANYBLOB="0c009900070000006700000008000500020000001400040070696d367265673100000000000000000500530001000000"], 0x4c}, 0x1, 0x0, 0x0, 0xc804}, 0xc2010) r9 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r9, 0x4008ae8a, &(0x7f0000000240)={0x2, 0x10d, [{}, {0x80000001}]}) ioctl$KVM_SET_VCPU_EVENTS(r9, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x10, 0x6, 0xb6, '\x00', 0x2}) r10 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r10, 0x8933, &(0x7f0000000140)={'vcan0\x00', 0x0}) r12 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x1ff, 0x80) ioctl$SNDRV_PCM_IOCTL_UNLINK(r12, 0x40044160, 0x3) connect$can_bcm(r10, &(0x7f0000000200)={0x1d, r11}, 0x10) sendmsg$can_bcm(r10, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca7e4d5d5bdbe70000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64, @ANYRES64, @ANYBLOB="3bf81bb9e9"], 0x20000600}}, 0x0) sendmsg$sock(r10, &(0x7f0000001940)={&(0x7f00000002c0)=@sco={0x1f, @none}, 0x80, &(0x7f0000000000), 0x5, &(0x7f00000008c0)=[@timestamping={{0x14}}], 0x18}, 0x0) ioctl$KVM_SET_MSRS(r9, 0x4008ae89, &(0x7f00000004c0)={0x1, 0x0, [{0x40000070, 0x0, 0x6}]}) lstat64(0x0, 0x0) 6.649071382s ago: executing program 5 (id=2700): r0 = open(&(0x7f0000000280)='.\x00', 0x1e281, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000000)=0xfffffffc, 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYRESHEX=0x0, @ANYRESDEC, @ANYRES8=r0], 0x1c}}, 0x408c1) fcntl$notify(r0, 0x402, 0x3) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_RX_RING(r3, 0x10e, 0x6, &(0x7f0000000180)={0x3d3, 0x80000001, 0xfffffff8, 0x8a1}, 0x10) r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r4, 0x4004551e, &(0x7f0000000380)={0x9, 0x1, "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"}) ioctl$USBDEVFS_CONTROL(r4, 0xc0185500, &(0x7f0000000080)={0x3, 0x3, 0x8, 0xa, 0x0, 0x100, 0x0}) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0xfffffffffffffffd, 0x0, 0x6, 0x0, 0xfffffffffffffffc, 0x0, 0x4}, {0x0, 0x0, 0x400000000, 0xffffffffffffffff}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in6=@ipv4={'\x00', '\xff\xff', @empty}, 0x0, 0x32}, 0x0, @in=@private=0xa010102, 0x0, 0x0, 0x0, 0xb7, 0xcb7, 0xfffffffe}}, 0xe8) ioctl$I2C_PEC(0xffffffffffffffff, 0x708, 0x2) ioctl$I2C_SMBUS(r0, 0x720, &(0x7f0000000140)={0x4, 0x1, 0x7, &(0x7f0000000000)={0x13, "90f5000000f3c9f1bd0d00000000000000000000000000000000eeff00"}}) syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x109301) r6 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r6, 0x0, 0x27, &(0x7f0000000100)={@multicast2, @local}, 0xc) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2e00000010008188040f80ec59acbc0413a181000b00000000010000000000000e000a000f000000028002002d1f", 0x2e}], 0x1}, 0x0) 6.555988666s ago: executing program 5 (id=2701): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0x20, 0xffffffff}, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_ABS_SETUP(r2, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) write$uinput_user_dev(r2, &(0x7f0000000800)={'syz0\x00', {0x2, 0x10, 0x2, 0x4}, 0xf, [0x0, 0x0, 0x0, 0x40000, 0x1, 0x2, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x4000, 0x20, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x298, 0x1, 0x0, 0x0, 0x0, 0x2000, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x6, 0x5f1, 0x6], [0x0, 0x0, 0x8, 0x0, 0x0, 0x5, 0x0, 0x80, 0x8000, 0x2, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x200, 0x7, 0xfffffffc, 0x0, 0x0, 0x7, 0x0, 0xfffffffc, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x3, 0x0, 0x1fd, 0x0, 0x2, 0x0, 0x3, 0x5, 0xfffffffd, 0x4000000, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0xfffffffd, 0x0, 0x8, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xffff], [0x4, 0xfc, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xb, 0x1, 0x4000000, 0x0, 0x1, 0x4, 0x1000, 0x80, 0x0, 0x200, 0x0, 0xffffffff, 0x0, 0xfffffffc, 0x0, 0xfffffffd, 0xffffffff, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x20, 0x4, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x4, 0x0, 0x6, 0x1, 0x0, 0xbda6, 0xe, 0x0, 0x0, 0xfffffffd, 0xffffffff, 0x0, 0x20, 0x0, 0x0, 0x0, 0x204, 0x0, 0x0, 0x0, 0xfff, 0x6, 0x0, 0x0, 0x0, 0x0, 0x8], [0x40000000, 0x0, 0x74e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x40, 0x0, 0x0, 0xbd, 0x0, 0xff, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x8, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x80000020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5cb9, 0xcaa, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4]}, 0x45c) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r4, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100"/253], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r5 = epoll_create(0x8) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000040)={0x4}) syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x4202) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f00000003c0)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="280000001400090a0000000000000000021f4800", @ANYRES32=r7, @ANYBLOB="08000200e4d4c21e080008004c06"], 0x28}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x1000000, 0x0, {0x0, 0x0, 0x74, r7}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x3) r8 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r8, &(0x7f0000004d80)=[{{&(0x7f0000000100)={0xa, 0xfffd, 0x0, @private0}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000040)="cc41", 0x2}], 0x1}}], 0x1, 0x0) shutdown(r8, 0x1) ioctl$UI_DEV_CREATE(r2, 0x5501) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) socket(0x28, 0x1, 0x0) r9 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x2) 6.246687202s ago: executing program 1 (id=2703): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket(0x2, 0x5, 0x0) sendmmsg$inet(r3, &(0x7f0000004940)=[{{&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000140)="9a", 0x1}], 0x1}}], 0x1, 0x4000000) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000180)=0x6b) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, &(0x7f0000000240)={0x6, 0x101, 0x206, 0x2, 0x754d, 0x6, 0x9, 0xf, r5}, 0x20) connect$unix(r1, &(0x7f00000027c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x2d, 0x20040040) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000700)=@raw={'raw\x00', 0x3c1, 0x3, 0x41c, 0x0, 0x940c, 0x3002, 0x0, 0x2c0, 0x354, 0x3d8, 0x3d8, 0x354, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x200, 0x248, 0x0, {}, [@common=@unspec=@rateest={{0x68}, {'pim6reg1\x00', 'wlan0\x00', 0x4, 0x2, 0x1ff, 0x4, 0x8, 0x4, {0x8}, {0x77b7}}}, @common=@inet=@recent0={{0xf4}, {0x0, 0x0, 0x2, 0x0, 'syz0\x00'}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@loopback, 'virt_wifi0\x00'}}}, {{@ipv6={@private2={0xfc, 0x2, '\x00', 0x1}, @private0, [0xff000000, 0x0, 0xff000000, 0xff], [0xffffff00, 0xffffff00, 0xff000000, 0xffffffff], 'bond_slave_1\x00', 'vxcan1\x00', {0xff}, {}, 0x886215f4d37bb4bb, 0x90, 0x1, 0x69}, 0x0, 0xa4, 0x10c}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x478) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000200), 0x800) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) r9 = accept4(r8, 0x0, 0x0, 0x800) sendmmsg$alg(r9, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233", 0x90}, {&(0x7f00000012c0)="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", 0xfa0}], 0x2}], 0x1, 0x40800) recvmsg(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000002280)=""/4083, 0xff3}], 0x1}, 0x40002160) r10 = socket$pppl2tp(0x18, 0x1, 0x1) r11 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r10, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r11, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e) close(r10) socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r10, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x12}}, 0x2, 0xfffffffd, 0x0, 0x2}}, 0x2e) ioctl$PPPIOCGMRU(r10, 0x80047453, &(0x7f0000000040)) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r7, 0x4058534c, &(0x7f0000000180)={0x80, 0x8, 0x2, 0x40000000, 0x23, 0x7}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r7, 0x4058534c, &(0x7f0000000040)={0x80, 0x8, 0x2, 0xfffbfffd, 0x1ff, 0x1}) ioctl$USBDEVFS_CLEAR_HALT(r0, 0xc0105502, &(0x7f0000000300)={0x1, 0x1}) 5.840827331s ago: executing program 3 (id=2704): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000a40)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000066f000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001", @ANYRESOCT], 0x7c}, 0x1, 0x0, 0x0, 0x884}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}}], {0x14}}, 0x3c}}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x67) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000005c0)='syz_tun\x00', 0x10) sendto$inet(r1, 0x0, 0x0, 0x24000840, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) syz_emit_ethernet(0x42, &(0x7f00000000c0)={@local, @random="3747e76de379", @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xffffffffffffff0b, 0xaf, 0xe754}]}}}}}}}, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec778000) r4 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r5 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x84, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r5, 0x40045542, &(0x7f0000000b00)) syz_open_dev$dmmidi(&(0x7f0000000080), 0x200, 0x40002) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r6 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r6, 0x8) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f0000000680)=@raw={'raw\x00', 0x8, 0x3, 0x32c, 0x0, 0x11, 0x148, 0x154, 0x0, 0x298, 0x2a8, 0x2a8, 0x298, 0x2a8, 0x3, 0x0, {[{{@ip={@remote, @loopback, 0xffffffff, 0xff000000, 'macvlan0\x00', 'caif0\x00', {}, {}, 0x73, 0x3, 0x54}, 0x0, 0xf4, 0x154, 0x0, {}, [@common=@unspec=@physdev={{0x64}, {'veth0\x00', {}, 'vlan1\x00', {0xff}, 0x1, 0xa}}, @common=@socket0={{0x20}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x2, 0x5, 0x3, 0x0, 0x7, 0x1], 0x6, 0x6}, {0xffffffffffffffff, [0x0, 0x5, 0x2, 0x2, 0x7, 0x1], 0x1}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @remote, 0x0, 0xff, 'erspan0\x00', 'bond0\x00', {0xff}, {0xff}}, 0x0, 0xe4, 0x144, 0x0, {}, [@common=@ttl={{0x24}, {0x2, 0x80}}, @common=@osf={{0x50}, {'syz0\x00', 0x0, 0x4, 0x1}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x4, [0x3, 0x4, 0x2, 0x6, 0x3, 0x6], 0x3, 0x1}, {0x4, [0x4, 0x5, 0x7, 0x5, 0x2, 0x5], 0x5}}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0xfdff) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$FOU_CMD_GET(r8, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)={0x30, 0x0, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_PEER_V6={0x14, 0x9, @dev={0xfe, 0x80, '\x00', 0x41}}]}, 0x30}, 0x1, 0x0, 0x0, 0x20008000}, 0x40000) sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x6c, 0x0, 0x10, 0x70bd2c, 0x25dfdbfc, {}, [@FOU_ATTR_PEER_V6={0x14, 0x9, @dev={0xfe, 0x80, '\x00', 0x40}}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @mcast2}, @FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @mcast1}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @empty}]}, 0x6c}, 0x1, 0x0, 0x0, 0x24048852}, 0x20008005) close_range(r4, 0xffffffffffffffff, 0x0) sendmmsg(r7, &(0x7f0000000440), 0x0, 0x10) 5.345565636s ago: executing program 1 (id=2706): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000000)=0x10000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000100)={@local}) ioctl$IOCTL_VMCI_CTX_ADD_NOTIFICATION(r0, 0x7af, &(0x7f0000000140)={@hyper, 0x6}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(r0, 0x7b1, &(0x7f0000000080)={&(0x7f00000016c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffd, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x282, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbde0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfcb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x573, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x8e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xecca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x72c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffdfffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x92, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd], 0x1, 0x400}) openat$ttyS3(0xffffff9c, &(0x7f0000000180), 0x80000, 0x0) r2 = openat$sndseq(0xffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r2, 0x40a45321, &(0x7f0000000080)={{0x80}, 'port1\x00'}) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000017dcb4401e040c4098af000000010902120001000000000904"], 0x0) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000003400)=ANY=[@ANYBLOB="12010000000000406a055900000000000001090224000100000000090400000103000200092100000001"], 0x0) 5.056020928s ago: executing program 3 (id=2708): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xc}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1e, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}]}, &(0x7f0000000640)=0x10) mmap(&(0x7f000000d000/0x1000)=nil, 0x1000, 0x0, 0x11, 0xffffffffffffffff, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000000)=0x10000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000100)={@local}) ioctl$IOCTL_VMCI_DATAGRAM_RECEIVE(r1, 0x7ac, 0x0) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(r1, 0x7b2, &(0x7f0000001680)={&(0x7f0000000680)=[0x100000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd5, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc5a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x100003, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x934a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4], 0x1, 0x400}) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(r1, 0x7b1, &(0x7f0000000080)={&(0x7f00000016c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x282, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfcb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x573, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x8e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x72c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffdfffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x92, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x1], 0x1, 0x400}) ioctl$IOCTL_VMCI_CTX_ADD_NOTIFICATION(r1, 0x7af, &(0x7f0000000140)={@hyper, 0x3ff}) socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f00000026c0)=""/4096, 0x17f, 0x1000, 0x1, 0x663}, 0x28) close_range(r1, r2, 0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="4c000000100039042abd70000000000000000000", @ANYRES32, @ANYBLOB="01180200031100002c0012800e00010069703665727370616e0000001800028008001500a8bc"], 0x4c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, 0x0, 0x12) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@dev, 0x800, 0x0, 0x2000000000903, 0x1}, 0x20) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x7fff, 0x4) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) connect$inet(r4, &(0x7f00000002c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) sendmsg$inet(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000000c0)="c962", 0x2}], 0x1}, 0x4004045) writev(r4, &(0x7f0000000180)=[{&(0x7f00000005c0)="1b7359", 0x3}], 0x1) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) sendfile(r4, r5, 0x0, 0x7ffff006) 4.156769757s ago: executing program 4 (id=2711): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) read(0xffffffffffffffff, 0x0, 0x0) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@bloom_filter={0x1e, 0x27c, 0x9, 0xca28, 0x121d9, 0x1, 0x475c, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4, 0x0, 0x6}, 0x50) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x2000016, 0x4010, r1, 0xec779000) ioctl$KVM_CAP_HYPERV_VP_INDEX(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000100)) r2 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @empty, 0x4}, 0x1c) connect$inet6(r2, &(0x7f0000000300)={0xa, 0x4e1e, 0x9, @loopback, 0x2}, 0x1c) connect$netlink(r2, &(0x7f00000000c0)=@unspec, 0xc) syz_emit_ethernet(0x9a, &(0x7f0000000080)={@local, @remote, @void, {@ipv6={0x86dd, @udp={0xa, 0x6, '\x00', 0x64, 0x11, 0xff, @local, @local, {[], {0x4e1d, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x3, 0x2, "54e90dade0f83f43817a33a14e885678a5f38ab436a174d6f2369fc532f6c82b", "fc96fb4f5a93418dd91c00", {"9cf20b4958f15cd0a3eddaf23b2e0eaf", "6272f64f06756f4bee7a8933b1524843"}}}}}}}}, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0xc0542, 0x0) openat$vmci(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) r3 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x2002) readv(r3, &(0x7f00000003c0)=[{&(0x7f0000000180)=""/55, 0x37}], 0x20) 4.149910755s ago: executing program 4 (id=2712): r0 = socket$nl_route(0x10, 0x3, 0x0) write(r0, &(0x7f0000000000)="240000001a005f7f00f9f407000904bf80000000080000000000000004001e", 0x1f) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000340)=0x6, 0x4) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[], 0x24}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x4, 0x40, 0x7fff0000}]}) membarrier(0x20, 0x0) membarrier(0x40, 0x0) 4.099703089s ago: executing program 4 (id=2713): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_NL_MEDIA_SET(r1, &(0x7f0000001800)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f0000003c80)=ANY=[], 0x12f4}}, 0x0) recvmmsg(r1, &(0x7f0000005200)=[{{0x0, 0x0, &(0x7f0000005080)=[{0x0}, {&(0x7f0000003c80)=""/4096, 0x1000}], 0x2}, 0x544f}], 0x1, 0x2000, 0x0) 4.050178856s ago: executing program 4 (id=2714): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet_tcp(0x2, 0x1, 0x0) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x4c, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x8117}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x4}]}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x28001}, 0x8000002) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, 0x0, 0x0) r5 = open(&(0x7f0000000000)='./file1\x00', 0x10f0c2, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x2000011, r5, 0xd3fc6000) r6 = syz_open_procfs(0x0, &(0x7f0000000280)='ns\x00') getdents64(r6, &(0x7f0000002f40)=""/4077, 0xfed) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='attr\x00') unshare(0x24020400) syz_io_uring_setup(0x315b, &(0x7f0000000080)={0x0, 0xcfca, 0x1042, 0x4, 0x354}, &(0x7f0000000100), &(0x7f0000000300), &(0x7f0000000000)) fchdir(r7) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)={0x40000004}) mkdir(&(0x7f0000000140)='./control\x00', 0x0) sendto$inet(r4, 0x0, 0x0, 0x804, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc090}, 0x0) socket(0x10, 0x3, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$WG_CMD_GET_DEVICE(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x28, r9, 0x301, 0x70bd2c, 0x25dfdbfe, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x40080c0}, 0x20040000) recvmmsg(r4, 0x0, 0x0, 0x60, 0x0) write(r1, &(0x7f0000000000)="fc0000001d000724ab09254ec100070007ab08001b000000f0ffff002100057e0000000000000e000039000000039815fad151ba0101099cecb94b46fe0000000a00020025", 0xffffff0c) pipe(&(0x7f0000000500)={0xffffffffffffffff}) splice(r10, 0x0, r1, 0x0, 0xffffffffffff8000, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r7, 0xc0502100, &(0x7f00000000c0)) 3.931867509s ago: executing program 3 (id=2715): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_flowlabel\x00') socketpair$unix(0x1, 0x5, 0x0, 0x0) sendmmsg$unix(r2, 0x0, 0x0, 0x20040040) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="680100001700010000000000000000007f0000010000000000fb27a5070000000000000000000000fe80000000000000000000000000000000000000000000ffffffff0000000000000000000000004e21000000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc02000000000000000000000000000000000000000000000000000000000001000000004e2100000a00802000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000002f9ffffff00000000000000000000000044000500fe880000000000000000000000000001000004d63300000002000000e00000020000000000000000000000000035000004030700018000004cde337701000000"], 0x168}}, 0x0) sched_setattr(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000010000), 0x20080, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) unlink(&(0x7f0000000380)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') ioctl$UI_SET_LEDBIT(r1, 0x40045569, 0x20000) keyctl$instantiate(0xc, 0x0, 0x0, 0x2d, 0xfffffffffffffff9) add_key(&(0x7f0000010080)='id_resolver\x00', &(0x7f00000100c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffa) r4 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f00000000c0)="ff", 0x1, 0xffffffffffffffff) r5 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000086e05fe0000000000000109022400010000b00009040000080300000009210000000122460009058103"], 0x0) syz_usb_control_io(r5, 0x0, 0x0) syz_usb_control_io(r5, &(0x7f00000003c0)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00\x00F\x00\x00\x00C'], 0x0, 0x0, 0x0, 0x0}, 0x0) r6 = add_key$keyring(&(0x7f0000010100), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r6, &(0x7f0000000200)='asymmetric\x00', &(0x7f0000000340)=@secondary) keyctl$KEYCTL_MOVE(0x1e, r4, 0xffffffffffffffff, r6, 0x0) keyctl$update(0x2, r4, 0x0, 0xff88) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000010140)=@ccm_128={{0x303}, "b44af9062019b197", "8d1792b8ab7bc8b6448af9e920afb8e3", "eecaa1c9", "75e9e971d3ddb543"}, 0x28) setsockopt$inet6_tcp_int(r7, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) sendto$inet(r0, 0x0, 0x0, 0xc806, &(0x7f0000000180)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x16}}, 0x10) 3.736756414s ago: executing program 1 (id=2717): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="900000000002010400000000000000000a000000040008803c0003800c00028005000100890000002c00018014000300fe8000000000002a14000400ff010000000000005600090000000000000002802c00018014000300ff0200000000000000000000000000011400040000000000000000000000ffffe00000020c000262aa4005fa2fe4bf000000000000000000"], 0x90}, 0x1, 0x0, 0x0, 0x20008004}, 0x4) r3 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) r4 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r4, &(0x7f0000000040)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) readv(r3, &(0x7f0000001c80)=[{&(0x7f0000000740)=""/200, 0xc8}], 0x1) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000040)={0x2c, 0x25, 0xfffffffffffffffd, 0x70bd2d, 0x25dfdbfe, {0x11}, [@nested={0x18, 0x138, 0x0, 0x1, [@nested={0x14, 0x3d, 0x0, 0x1, [@typed={0xd, 0xf0, 0x0, 0x0, @str='&c\xfe\xbeUc\x83\x96\x00'}]}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x400400d}, 0x240000c4) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {0x5, 0xfff3}, {}, {0xa, 0x2}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x8848}, 0x80) sendmsg$nl_route_sched(r6, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r8, {0xc, 0xe}, {0x0, 0xfff1}, {0x0, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x24041080) close_range(r3, r4, 0x0) r9 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$int_in(r9, 0x5452, &(0x7f00000001c0)=0x1) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r9, 0xc0045516, &(0x7f0000000b40)=0xe) r10 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r10, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r10, 0xc01864b0, &(0x7f0000000000)={r11, 0x0, 0x1, 0x0, 0x3}) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r9, 0xc1105517, &(0x7f0000000080)={{0x1009, 0x0, 0x0, 0x80, 'syz0\x00', 0x8}, 0x5, 0x0, 0x1, 0x0, 0x0, 0x8, 'syz1\x00', 0x0}) close_range(r9, 0xffffffffffffffff, 0x0) write$UHID_INPUT(r1, &(0x7f0000001040)={0xf, {"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", 0x1000}}, 0x1006) syz_usb_connect(0x5, 0x24, &(0x7f0000001280)=ANY=[@ANYBLOB="12010003001f66088f0510660548020003010902120001049570810904008100ffffff02"], &(0x7f0000001700)={0xffffffa0, 0x0, 0x0, 0x0, 0x23}) syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) 3.508092963s ago: executing program 5 (id=2718): r0 = socket$inet_udp(0x2, 0x2, 0x0) unshare(0x22020600) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = timerfd_create(0x5, 0x80800) ioctl$BTRFS_IOC_QGROUP_LIMIT(r2, 0x8030942b, &(0x7f0000000040)={0x0, {0x1, 0x1, 0x5, 0x10}}) r3 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f0000000340)={0x0, 0x31000, 0x800, 0x6, 0x4}, 0x20) pselect6(0x40, &(0x7f0000000400)={0x0, 0x8, 0x6, 0x6, 0x0, 0x9}, &(0x7f0000000000)={0x1f, 0x0, 0x0, 0x0, 0x2, 0x6f, 0x400}, 0x0, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000440)={'ip_vti0\x00', &(0x7f00000000c0)={'syztnl0\x00', 0x0, 0x8000, 0x1, 0x1, 0x400, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x3, 0x0, 0x0, 0x4, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1}}}}) 3.1309947s ago: executing program 4 (id=2719): socket(0x15, 0x5, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x1, 0x70bd29, 0x25dfdbef, {0x0, 0x0, 0x0, 0x0, 0xa000, 0x40}, [@IFLA_AF_SPEC={0x8, 0x1a, 0x0, 0x1, [@AF_INET6={0x4}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x2000c846}, 0x20048004) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000100)={0xfffffff8, "07bbfeb30c52d28881875bac175ccb0d6c446593aa7eaba9a256d98e03ab46af", 0xffffffffffffffff}) ioctl$SYNC_IOC_FILE_INFO(r1, 0xc0383e04, &(0x7f0000000000)={""/32, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x802, 0x0, 0x0, 0x7}, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000005200010003000000000000000a0000000c00", @ANYRES32=r2], 0x20}}, 0x0) 2.936548545s ago: executing program 4 (id=2720): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffc}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) arch_prctl$ARCH_SHSTK_UNLOCK(0x5004, 0x3) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000440)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000080), 0x800, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB, @ANYRESDEC=0x0, @ANYRESDEC=0x0]) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r2, &(0x7f0000004100)={0x2020}, 0x2020) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x40180, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) ioctl$KVM_GET_MSRS_cpu(r5, 0xc008ae88, &(0x7f0000000480)={0x1, 0x0, [{0x208, 0x0, 0x9}]}) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000180)=@o_path={&(0x7f00000000c0)='./file0\x00', r2, 0x4000, r2}, 0x18) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sync() sendmsg$nl_route(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=ANY=[@ANYRESOCT, @ANYBLOB="a7ffa88800000000200012800900010069706970000000fa0f000280040013000500090000000008f33a5798cb485f3a9776f093ab3e544599d87862ad961fa67f7215b55c42d37b9a100eb2ec063287898534c013c8f11d376156badd398f094e0e3b0cae09b813a27158392211de2312f2526854a5a004cb08dad59319ee0f21d26b"], 0x40}}, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x2b) r8 = syz_usb_connect(0x5, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000096d5c4004233e0269d7010203010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r8, 0x0, &(0x7f0000000600)={0x24, &(0x7f0000000740)=ANY=[@ANYBLOB="800001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r9 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @fallback=0xb}, 0x94) syz_usb_control_io$uac2(r8, 0x0, 0x0) syz_usb_control_io$hid(r8, 0x0, &(0x7f00000004c0)={0x2c, &(0x7f0000000300)=ANY=[@ANYBLOB="40084f0000003a45444db441ba8f87f2de0e4872fc8bf45a40f05ee2dd90695e964d4c32c89580d16e26665c3cb71de602a74a933006000000000000009e550e6cce756bd0fcb4d76e82557a2a3105786e85061901"], 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB], &(0x7f0000000480)={0x20, 0x3, 0x1, 0x8}}) ioctl$I2C_SMBUS(r9, 0x720, &(0x7f0000000140)={0x0, 0x7, 0x5, &(0x7f0000000100)={0x17, "537a1468df08000000758bd16868e0bf22c7b844c1b1f10186854fff98d2870c38"}}) 2.446766333s ago: executing program 2 (id=2723): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001580)=ANY=[@ANYBLOB="600000000206030000000000b8791fa80000000014000780080012400000000005001500010000000500010006000000050005000200000005000400000000000900020073797a310000000012000300686173683a6e6574"], 0x60}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)={0x28, 0x3, 0x6, 0x301, 0x0, 0x0, {0x0, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x10) (fail_nth: 1) 2.137955297s ago: executing program 2 (id=2724): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x0, @my=0x1}, 0x10, 0xc0800) bind$vsock_stream(r1, &(0x7f00000000c0)={0x28, 0x0, 0xffffffff, @hyper}, 0x10) (async) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) bpf$TOKEN_CREATE(0x24, &(0x7f0000000140)={0x0, r0}, 0x8) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x80}, 0x50) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x403, 0x0, 0xfffffffb, {0x0, 0x0, 0x4, 0x0, 0x10461}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_ALL_SLAVES_ACTIVE={0x5}, @IFLA_BOND_MIN_LINKS={0x8, 0x12, 0x3}]}}}]}, 0x44}}, 0x44004) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000020004"], 0x48) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) r5 = socket(0x2b, 0x1, 0x1) setsockopt$IPT_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000200)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3b0, 0x0, 0x238, 0x170, 0xd8, 0x0, 0x410, 0x410, 0x410, 0x410, 0x410, 0x6, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, 0xffffff00, 0x0, 'veth0\x00', 'veth0_to_bridge\x00', {}, {0xff}, 0x62, 0x0, 0x50}, 0x0, 0x70, 0xb0}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0xb, 0x4, @ipv4=@loopback, 0x4e24}}}, {{@ip={@loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xff000000, 0xff, 'geneve0\x00', 'veth1_to_team\x00', {}, {}, 0x89, 0x6, 0x24}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0xff, 'ip6_vti0\x00', 'geneve0\x00', {}, {}, 0x0, 0x0, 0x1}, 0x0, 0x70, 0x98}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffffffffffffffff, 0x6, 0x5}, {0x0, 0x6}}}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x31, 0x7, 0x1}}}, {{@ip={@loopback, @multicast1, 0xff, 0xff, 'veth0_to_batadv\x00', 'bridge_slave_0\x00', {0xff}, {0xff}, 0x44, 0x1, 0x15}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x55d, 0x3, @multicast1, 0x4e21}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x410) (async) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="18080000ff00000000000000fbffffff18110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000030000008500000005000000bf0908000000000055090100000000009500000000000000b7020000001200007b2af0ff00000000d60908007f000000db9af0ff41000600bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018280000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7050000080000001500000076000000bf9800000000000056080000020000008500000007000000b70000000000000095"], &(0x7f00000002c0)='GPL\x00', 0x9, 0x0, 0x0, 0x40f00, 0x46, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@ipv4_newaddr={0x20, 0x14, 0x503, 0x800000, 0x25dfdbff, {0x2, 0x18, 0x20, 0x0, r7}, [@IFA_LOCAL={0x8, 0x2, @remote}]}, 0x20}, 0x1, 0x0, 0x0, 0x2000c084}, 0x20008840) 2.081808623s ago: executing program 1 (id=2725): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_NL_MEDIA_SET(r1, &(0x7f0000001800)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f0000003c80)=ANY=[], 0x12f4}}, 0x0) recvmmsg(r1, &(0x7f0000005200)=[{{0x0, 0x0, &(0x7f0000005080)=[{0x0}, {&(0x7f0000003c80)=""/4096, 0x1000}], 0x2}, 0x544f}], 0x1, 0x2000, 0x0) 1.952882984s ago: executing program 3 (id=2726): socket$nl_route(0x10, 0x3, 0x0) r0 = syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x100) ioctl$FE_READ_BER(r0, 0x80046f46, &(0x7f0000000040)) r1 = socket$unix(0x1, 0x2, 0x0) bind$unix(r1, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x6e) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) socket(0xa, 0x3, 0xff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r6 = socket$rds(0x15, 0x5, 0x0) unshare(0x60600) setsockopt$RDS_CONG_MONITOR(r6, 0x114, 0xa, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) r7 = syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2) r8 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r8, 0xc02064b2, &(0x7f0000000140)={0x5, 0x7ef6, 0x8}) ioctl$VIDIOC_S_DV_TIMINGS(r7, 0xc0845657, &(0x7f0000000380)={0x0, @bt={0x2d0, 0x191, 0x1, 0x0, 0xdd9f83, 0x1, 0x2f, 0xf3, 0x2, 0x8, 0x722, 0x6, 0x7, 0x7f, 0x27, 0x20, {0x0, 0x6fd8e84b}, 0x3, 0xed}}) read$FUSE(0xffffffffffffffff, 0x0, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) symlinkat(&(0x7f00000001c0)='./file2\x00', 0xffffffffffffff9c, 0x0) memfd_create(&(0x7f00000000c0)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU', 0x1) r9 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="120100000cb768405e0483020b990102030109021b0001000000000904000001012900000905"], 0x0) syz_usb_control_io$hid(r9, 0x0, 0x0) syz_open_dev$audion(&(0x7f00000011c0), 0x3, 0x8c4201) 1.943882581s ago: executing program 1 (id=2727): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001580)=ANY=[@ANYBLOB="600000000206030000000000b8791fa80000000014000780080012400000000005001500010000000500010006000000050005000200000005000400000000000900020073797a310000000012000300686173683a6e6574"], 0x60}}, 0x0) chdir(&(0x7f0000000480)='./cgroup\x00') file_getattr(0xffffffffffffff9c, 0x0, 0x0, 0x2f, 0x1000) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)={0x28, 0x3, 0x6, 0x301, 0x0, 0x0, {0x0, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x10) 1.776889378s ago: executing program 1 (id=2728): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0x20, 0xffffffff}, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_ABS_SETUP(r2, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) write$uinput_user_dev(r2, &(0x7f0000000800)={'syz0\x00', {0x2, 0x10, 0x2, 0x4}, 0xf, [0x0, 0x0, 0x0, 0x40000, 0x1, 0x2, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x4000, 0x20, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x298, 0x1, 0x0, 0x0, 0x0, 0x2000, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x6, 0x5f1, 0x6], [0x0, 0x0, 0x8, 0x0, 0x0, 0x5, 0x0, 0x80, 0x8000, 0x2, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x200, 0x7, 0xfffffffc, 0x0, 0x0, 0x7, 0x0, 0xfffffffc, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x3, 0x0, 0x1fd, 0x0, 0x2, 0x0, 0x3, 0x5, 0xfffffffd, 0x4000000, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0xfffffffd, 0x0, 0x8, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xffff], [0x4, 0xfc, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xb, 0x1, 0x4000000, 0x0, 0x1, 0x4, 0x1000, 0x80, 0x0, 0x200, 0x0, 0xffffffff, 0x0, 0xfffffffc, 0x0, 0xfffffffd, 0xffffffff, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x20, 0x4, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x4, 0x0, 0x6, 0x1, 0x0, 0xbda6, 0xe, 0x0, 0x0, 0xfffffffd, 0xffffffff, 0x0, 0x20, 0x0, 0x0, 0x0, 0x204, 0x0, 0x0, 0x0, 0xfff, 0x6, 0x0, 0x0, 0x0, 0x0, 0x8], [0x40000000, 0x0, 0x74e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x40, 0x0, 0x0, 0xbd, 0x0, 0xff, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x8, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x80000020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5cb9, 0xcaa, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4]}, 0x45c) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r4, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100"/257], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r5 = epoll_create(0x8) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000040)={0x4}) syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x4202) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f00000003c0)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="280000001400090a0000000000000000021f4800", @ANYRES32=r7, @ANYBLOB="08000200e4d4c21e080008004c06"], 0x28}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x1000000, 0x0, {0x0, 0x0, 0x74, r7}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x3) r8 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r8, &(0x7f0000004d80)=[{{&(0x7f0000000100)={0xa, 0xfffd, 0x0, @private0}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000040)="cc41", 0x2}], 0x1}}], 0x1, 0x0) shutdown(r8, 0x1) ioctl$UI_DEV_CREATE(r2, 0x5501) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) socket(0x28, 0x1, 0x0) r9 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x2) 1.775406869s ago: executing program 2 (id=2729): socket$nl_rdma(0x10, 0x3, 0x14) (async) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0xd8, 0x1403, 0x800, 0x70bd27, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'vlan0\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'ip6erspan0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth0_vlan\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'batadv_slave_1\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'nr0\x00'}}]}, 0xd8}, 0x1, 0x0, 0x0, 0x20000004}, 0x4040090) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff) (async) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000240)={'batadv_slave_0\x00', 0x0}) getsockname$packet(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0x0, 0x0}, &(0x7f00000002c0)=0x14) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={0xffffffffffffffff, 0xe0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x5, &(0x7f0000000340)=[0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xd7, &(0x7f00000003c0)=[{}, {}], 0x10, 0x10, &(0x7f0000000400), &(0x7f0000000440), 0x8, 0xe2, 0x8, 0x8, &(0x7f0000000480)}}, 0x10) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000700)={'sit0\x00', &(0x7f0000000600)={'syztnl2\x00', 0x0, 0x40, 0x10, 0x1, 0x8000, {{0x31, 0x4, 0x3, 0x32, 0xc4, 0x64, 0x0, 0x1, 0x2f, 0x0, @broadcast, @multicast1, {[@cipso={0x86, 0x37, 0x3, [{0x2, 0x2}, {0x1, 0x11, "0c0d7ff347df8ef1fdffda2423a35d"}, {0x2, 0xf, "1765c5428fbdeef8d868cc55c0"}, {0x2, 0xf, "3a3ff54eab5841e110e2f2aa41"}]}, @end, @timestamp_prespec={0x44, 0xc, 0x66, 0x3, 0x7, [{@empty, 0x1}]}, @timestamp_addr={0x44, 0x4c, 0x51, 0x1, 0xd, [{@private=0xa010100, 0x3e}, {@local, 0x10a3}, {@local}, {@empty, 0x10}, {@remote, 0x1}, {@rand_addr=0x64010102, 0x2}, {@remote, 0x8}, {@local, 0x3}, {@loopback, 0x1324}]}, @end, @ra={0x94, 0x4}, @timestamp_addr={0x44, 0xc, 0xae, 0x1, 0x7, [{@private=0xa010101, 0x8}]}, @end, @noop, @ssrr={0x89, 0xb, 0x32, [@multicast2, @local]}]}}}}}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000007c0)={0x1, 0x58, &(0x7f0000000740)}, 0x10) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000007c0)={0x1, 0x58, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000880)={0xffffffffffffffff, 0x58, &(0x7f0000000800)}, 0x10) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000880)={0xffffffffffffffff, 0x58, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000b80)={0xffffffffffffffff, 0xe0, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f00000008c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x5, &(0x7f0000000900)=[0x0, 0x0, 0x0], &(0x7f0000000940)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xdf, &(0x7f0000000980)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f00000009c0), &(0x7f0000000a00), 0x8, 0x23, 0x8, 0x8, &(0x7f0000000a40)}}, 0x10) sendmsg$ETHTOOL_MSG_PAUSE_GET(0xffffffffffffffff, &(0x7f0000000dc0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000bc0)={0x1ac, r1, 0x200, 0x70bd26, 0x25dfdbff, {}, [@HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x1ac}, 0x1, 0x0, 0x0, 0x400c094}, 0x4) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000e40)=@generic={&(0x7f0000000e00)='./file0\x00', 0x0, 0x8}, 0x14) (async) r9 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000e40)=@generic={&(0x7f0000000e00)='./file0\x00', 0x0, 0x8}, 0x14) lsm_list_modules(&(0x7f0000000e80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000ec0)=0x40, 0x0) ioctl$XFS_IOC_BULKSTAT(r0, 0x8040587f, &(0x7f0000000f40)={{0x80000001, 0x4, 0x1, 0xfffff001, 0x4}, &(0x7f0000000f00)}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000fc0)={{0x1, 0x1, 0x18, r9, {0x9}}, './file0\x00'}) (async) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000fc0)={{0x1, 0x1, 0x18, r9, {0x9}}, './file0\x00'}) sendmsg$kcm(r10, &(0x7f00000032c0)={&(0x7f0000001000)=@l2={0x1f, 0x4, @any, 0x8, 0x1}, 0x80, &(0x7f0000002100)=[{&(0x7f0000001080)="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", 0x1000}, {&(0x7f0000002080)="243a4237dac41c18727cdaf29f622b7bb4000abbe145e21450a2d35dd6d538ae06fa4b745914363f40c311ec742b24", 0x2f}, {&(0x7f00000020c0)="72430f017782fbc5359aee8acc0e1035cb285b4fad2f1a875c3f56f628a716902d763a2f94", 0x25}], 0x3, &(0x7f0000002140)=[{0x68, 0x0, 0x8001, "1291e331231e6614d6fb381ceff497504b7b56f4c1ae1b3745cb5d16e4b4dcd766dded2821273a2fe4e251f810c5f3bb455df498fc827404f2e5af2e0fe4db97e7bcf6c2d5f22fcbb1b3ba732d318bdb790b19cbc3b2842d6475e6"}, {0x100c, 0x6, 0x6, "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"}, {0xd8, 0x5159722ef2859810, 0x4, "c02902c8e1529356bd712c5d0c5c042a85dba6765937ea8ba5bbea790e46b6e8bed57553e55c23ebc57e24f90c0dd3fcbb33ae7c15b56e24bc2263ca98ba9d3021762409ae6921f68d777be75197c975f12d02ea0891ad0dfae6f8aa60573bdfad755b91023846ddc4ce365d33ae8f54bde21e22d6de9e5dd19d7bbef51313f136ff7c4a25a0d2e9d310b51046f8d2667e577f191221116fbcadc0f0c451b813dab9934193a4e64f8ae8518e4bf4680f149aa518c32526b6713d2871f4c5590066516991bda35b64e59591"}], 0x114c}, 0x4000000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000003340)={0x3, &(0x7f0000003300)=[{0x0, 0x1, 0x7, 0xf67}, {0x40, 0x8, 0x5, 0x5}, {0x376a, 0x2, 0x5, 0xffffff77}]}) connect$rxrpc(r10, &(0x7f0000003380)=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e21, 0x20eaa5ca, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8}}, 0x24) (async) connect$rxrpc(r10, &(0x7f0000003380)=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e21, 0x20eaa5ca, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8}}, 0x24) setsockopt$MRT_TABLE(r10, 0x0, 0xcf, &(0x7f00000033c0)=0xff, 0x4) (async) setsockopt$MRT_TABLE(r10, 0x0, 0xcf, &(0x7f00000033c0)=0xff, 0x4) syz_open_dev$amidi(&(0x7f0000003440), 0x5, 0x140c1) (async) r11 = syz_open_dev$amidi(&(0x7f0000003440), 0x5, 0x140c1) r12 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000003480)=@o_path={&(0x7f0000003400)='.\x00', 0x0, 0x8, r11}, 0x14) socket$nl_route(0x10, 0x3, 0x0) (async) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r13, &(0x7f00000035c0)={&(0x7f00000034c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000003580)={&(0x7f0000003500)=@ipv6_delrule={0x74, 0x21, 0x100, 0x70bd25, 0x25dfdbfd, {0xa, 0x20, 0x80, 0x3b, 0x7, 0x0, 0x0, 0x5, 0x10}, [@FRA_SRC={0x14, 0x2, @remote}, @FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x4, 0xff}, @FRA_SRC={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x1f}}, @FRA_DST={0x14, 0x1, @rand_addr=' \x01\x00'}, @FRA_SRC={0x14, 0x2, @private2}]}, 0x74}, 0x1, 0x0, 0x0, 0x24000841}, 0x84000) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r10, 0xc00c64b5, &(0x7f0000003640)={&(0x7f0000003600)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETENCODER(r10, 0xc01464a6, &(0x7f0000003680)={0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r12, 0xc05064a7, &(0x7f0000003980)={&(0x7f0000003740)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000003780)=[{}, {}, {}, {}, {}], &(0x7f0000003900)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000003940)=[0x0, 0x0], 0x5, 0x4, 0x5}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r10, 0xc01c64b9, &(0x7f0000003ac0)={&(0x7f0000003a00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000003a40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xa}) ioctl$DRM_IOCTL_MODE_ATOMIC(r10, 0xc03864bc, &(0x7f0000003b80)={0x200, 0x3, &(0x7f00000036c0)=[0x0, r14, r15], &(0x7f0000003700)=[0xfffffffe, 0x4, 0x2, 0x5], &(0x7f0000003b00)=[r16, 0x0, r17], &(0x7f0000003b40)=[0x6, 0x9], 0x0, 0xfffffffffffffffc}) ioctl$KVM_SET_NESTED_STATE(r10, 0x4080aebf, &(0x7f0000003bc0)=@svm={0x104, 0x1, 0x1080, {0xa000}, {"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"}}) 1.766093101s ago: executing program 5 (id=2730): r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @private=0xa010102, @rand_addr=0x64010101}, 0xc) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r1 = io_uring_setup(0x1694, &(0x7f0000000080)={0x0, 0xfac7}) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x972, &(0x7f0000006680)) r2 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x40) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) sendmsg$NFT_BATCH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000c0a01040000000000000000000900010073797a310000000014000380100000800c00018006000100d65b0000140000001100010000000000000000000700000a"], 0x68}, 0x1, 0x0, 0x0, 0x24000840}, 0x40) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000c0a010100000000000000000a00000609000231000000000900010073797a310000000014000380100000800c00018006000100d1030000140000001100010000000000000000000100000a00000000"], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) recvmsg(r6, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x20) connect$can_bcm(r2, &(0x7f00000000c0)={0x1d, r3}, 0x10) socket(0x10, 0x803, 0x0) sendmsg$can_bcm(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYRESHEX, @ANYRES64=0x0, @ANYRES64=r3, @ANYRES64=0x0, @ANYRES64, @ANYBLOB="3bf93d200f8540e707d3a5fc458c9a2935fdf0b3656995d42d181555441a4a4f40f24c09fcef7acf913ad0600316e669eb7d1a26222974b6c99ae9eee71050464e118578642b57c94c7d5a22835db53ca0ed8b731a"], 0x20000600}, 0x1, 0x0, 0x0, 0x40000}, 0x1) r7 = syz_open_dev$video4linux(&(0x7f0000000080), 0x200, 0x8000) ioctl$VIDIOC_ENUM_DV_TIMINGS(r7, 0xc0945662, &(0x7f0000000100)={0x3, 0x0, '\x00', {0x0, @bt={0x6, 0xfff, 0x0, 0x2, 0xed8, 0x8, 0x3, 0x3, 0x9, 0x6, 0x984, 0x3, 0x100, 0x9, 0x1, 0x2, {0x7ff, 0x6}, 0xd, 0x61}}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x2000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) munlockall() 1.701398288s ago: executing program 2 (id=2731): bpf$MAP_CREATE(0x0, 0x0, 0x48) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000200)={0x8, {"17688c8f3c83fd6c5bc6a268d3870543eb58170dc705033db3ef27406ccb9edaedd6dba02623375d0272a6bf092bc9c88b64a31c4f9907b6930ad0325e8120efcadd2404b5889e90c5e8a9aa7bc1b4b2f8a7954a956697b8c817c3530f58a1068036d2ad0cd8fd5338156d76b5dea234c72cb7a7462e45c690257d59f12907830fe9f80a8f7a630b29c3b317c4cb11c0b836402772cc017d2e90ae32345dc695b65dae457a9360bec768dcc8952944750b751a7721c13a18dcc3cd4ba3c914aa768518bd83d8906df9c8f1b08b42467175f6770efaa4fd6042ffc7f3fc20c2377b865d8e8da2b26e585ed1d44172c8afe950c09be83b24d2d0e045b79c7857020b4a6a5eb9142a25bdd706478dd12b7626588de3eac3b03b7a0bd883f625aafb53189952901c8e50075289c07cdaf85fa43d4912f17ce15f6aa048e6cea6c43f8b439e1844dcb1545d754b197b4da748288baf50a8e47a27a2e25c65bca00c0f6fe8c2279b38aa12cf11b1cbd2622c926ad9e637e84bfe8c59ba5290820bb2f652aa41555916489eb8de2a94a11fdde3bfd5033a04ed286711b918f85e5dce4185d198837dbfa5612e65b1171a81405192db776ee5984c050938bc1481a328012486cada830ada19b91d6f755f3de80ba2189c1b714707ffdd00d4c9f92e077d38d8378ad5e2a808bb3c409571b570d178acbecefe0a63507db6e3ad58d79dd94f15bf1adac1351300543544782c36f9e63041c3bc494ec954b90fe5ababb9ad0b5b9bcc01cc816d831f2e3021ea195d594bcf4b7271a60bea369cb7b20cae4db27c7baeec19491c735907bb7b7c7128d197cc9a45cebab3a94677732a2860bfb1b41becd4a551d5ed444b2fedc1e4f86787f5892c9e765e01f6511d96703d1a6945790c5a20a801ff007a5cbb4bd33d5af5c690ee61ccdba888118915c20fa7c1e4dab9c3a37dee4fbb6494b91210c6e81b1c2dea14786d79f1b9c170bb87c08864888447e2ec841b77ae72f324d8f02ddb2d1009c8d06b3e3776619e66c1f7f59a222c95d55230c3911798940beebfb379ffaa56d65fd7986a6e74f3384a272e27f238625fc92bb8597f79d79c4ca84f6a8de0dc15da12d6ce9fd90e8cd7ad7efeedc49c4db7479145699a28f21d2fa4836a9670ff2dc36c4b122a50e42195e3b7da5ced25e0ff69bb0add297bbb979d721763ea11ec1afcb810a433d37e7d733cf585af70f4778bb08d0444569e87173f9805b084e1cbe1c5c7415598bd381101d985a6baef7db08bb7cdf88fcfe157b2586a883c7f13a147e74802808b5f81f90e0b6ca0b52a51f3a18cd7bd0b37337035829d3dca20d0ab202135c62180aeaa43b7659527477e2abd8b249d4ef29a6f9b70d0456f463f6d07317da51a2a9a6f3187275166884a69cc18807c4981cdf8d5271abd3c64eadb8976f6624c74914cfd7d69fb378d3d4a8288f6348add02a695d7d1ae64d263756e011c009d702f194410eab72e932f4543ff17f69879c51b1a5f0ca34d9448660f62c830705607db0e3f781907e9fface084e0c1b59a41a285d86650755db54d6962b5c6550aad5c8df2251f24ed6e32fd89d16acc65adb400b2cffd3a48309a9639b0fd03a9e2b20b9ad231f265ea0ff6e92c6ff51683e04c4cf74dc6dab34d426ad9a6dc825ed2614484d258f36da90363c474a85df64d9454d927535f70c966ccb4377cbdec4e5d0927ef12b7641bdb0ee319bf8907a4346f56dcf3283ecf4753fb61b7b738137bf69179466e46b9c9c37d51e3752061ff20e9f42d0e105bf2e1da8f230a65a7b198ca98ab8b1f4f70438906293490ad79e792e169b17ff60bf2447ef512418a2bddb9bd337f4a12e76126f4f1cb4c5d2a4dd8ba226dcaa6a7e265d8ed8d14e848b0345fd410255fffa36db6ef24cf07856415d8f1a0536e21d4bc2be8e4c133dae7372f7b2eb735c640fe016fa4743a3d6a08ff32fabb0d0c0b16a9174b649a789cff8645cc8e9934bf2bcd2da72d4c497c99fff45eb0fc3a47ce4d04d8cd5e3d3972d84c2f95bd2b6ce6943e79f575364b5570ec55ab7e4e373643f11b9aecd343c4cd9ede10fecdab2252be94fd84540d8e09baf47d2c5d31a6a051d08ae12ada2a4559a4b4f69d3fe3ca430f6a907e0432108de8b62e01cb4308b0646f2f6c6cc09f1e7e02b2e7c99fe6c6577b9a294fd594b87b374070a509ab86d8dfd365df7db929e7db3c81309093708f81dcfbfc22290372ec52436506411e8b3a7de5529f3f436cd697be275fae59ba86ea0f626d71c4beecafd6f505ba2a8170cd84ef604d662eead5f717094608ea8b570aac969c02dea42536e2419c719fbdb94b272136926140ff0d2301af22dc667ef985404c1b8d329dfcfdef9b2334823b8bc195a1e8f40b91801a0884e8467a5236a38ae735027dff1fe0333b9febd682685b6b7a5e5a87a8081fa103a89ecf9a9ea240fe15ce78a6377ea926fca046091e263e806ea404731689a09bb6d5b1d72e2127f01f0cf2f76177e6bf4da1e2cbd503d78b04fb92b991c640eb65a7b10383459313ff8e47697e9c001ca3b2a6d8a4513ee84c1d97134e54bec8348e7c1342bbbb70e268b7238f7c91484aa8a3fdd28c7569974a2bb615c0b6e9b63fed3a9dce46cc4d53c8c87899b783b9be613782dafb19fce30e5cf25ffc2eeebb2eeab516d1c9fee524f6c83b95fe594975b634c469c91c4df08b865cd73267bdfce80724e243a45d07e7e272fbee3c37c4ae2e2ee4145d41ed32406ab4dfc0f33c08a0a19a86413b622d653d46f068a97a553a6ed30616ed3743401ee1a2df142613ec705b9d74196893b41ec8b94e0c3948379e2885caa368ad66634bd6cd2aed9085b72532df1ea13ebae5d7a5748333ee10a0f97320b5ca1d63470c2539421719162b74c3e0af79e0f1c8093207ff938546481332f20f8d1514a1eebeb0a137fae5325af8ddc94af445f5f41099bf70a6ed6d011515965f54637347d458b4382102059d03524e782c8159c9664d266e59a65d6d654a5006af92187f7eda34598a86586eb39534247f01fc0a8307cd8e93c932d0fab1da21a62658cf068edb2671b257ed6c3b089f34f18d9df6bda23ae13aa66325b07bf4c60f412154a8c221d4119c9fa8d249f0c3274624df6030c0c0f701ef00b52b1059446f844edbf3018401d00ad6e5bb126d2681bb52429dcd723b0ea7edffb51875b7b5cdeb95b48b33cd77ea4413fd4165ab55ff6e0b506679511b580e26eaaf2259c269bfecefd66a929b882f759db5eafe9682ab1110c47f7582a5d21d685881ff92cbb1d1d79a3228874729006bb6c493bdc7eb5ff7aa552123b3c89de13d617ee691aae54b969ec8155d2121078dc0cb493395753b800e24d990a1fee4080af3c2442f0eff29f19f3a716df492b9854b92352331800cfddbc541bbd12c4873d3c0c53f1283e1d04f85a3b26368fdb123b7a119ae31d9f9fd28c185b667bfb5f5a7775435abdcd8b08172b17978446d5fc7c4da130afaa4ae0cb59c8ce0a5e3232475139a8e1a75d7c8cbeee5da22d995da6dde9851aa35496a9a2723d64799c9fdb323103e86d4961e514c4b069dfae7b2a30a225a63b961b28b4785002f81cf6034bf614759071beba29a49881715609fb3d269664410d865a19e1cade0f508df3962bf3724b1f0d01f1aeb86fc0ca0c74c19be0a20d2d1510d11cd69191c27df9495154c87300d465692e73f1ff746558c052e1939a73ec2897dd7ec25f007d76e6dd78d549739999c705177c5f9d2fcf44c2ea2857039b26c647c81a8cd263a51e5c4687bf23036be1e851b218e68c7d05ffe8229ce3e509ab848c3bd60246b8cf9cee753dbfe9b2b13d42f94410ebe0ec57aa30482361ee6bd017f28d686df459f0f6d9481fc1dc04ad1b05fa7e02ea77ce12822e4a8a7c37cc90680483264e0fbb9bec25c8d37d7d530c30a382667f471c54b20c07afa4302c73fcdad3c08074ccd442f7555015a5e9175c357c7f43f95ef220850080aec57c55ae25c84e4ed8fc66aeb46e1e33b86592f1a0776c4327bff8ca95fbf98be1ecf04fbb3c16eb3e2ce493dee4abc95200f0ecfc472264e9fe67cc5d94b66557c7c976278bab01478f50483cb42c6f1ff1b8cd623878a837f7d9c0cca19de6bbad9a9f9c48c9daec523c9d5adf880db6dcf32453c8bee25b0dd6ebe9c15e3ff5cffc27c9f74fa71b6aa9520f1e49b71bcc0d68388aa570002344ef578b58f3d29f8dc39870353ed1cc4a494a4bca88bda50ba057468bb0277201b6a70463ed8917719243367a66dbaffc2f9726a4b5a27e5c6b7a400d37d8f2d93b8c0844ebd8d3def78ffe09dbb291ca123d141edabbd7b0bad2d7400e31b56c7e8dd820b9de73f3659e77b3d07da230a98df19d3f9d131e8347737f2c286e070a034b17b0a5f5ca0c8e40529e742ba8561407d11e409256dffe3666578d53c32039fa0d6031a203f8f9f24a7e6b0e63f83e0c5ed009e0594acc2176e827dde39145c31e3650eacfb81de02c0ec42b7a14dfd9a38f85640d5b6998cd8b76cd0449ca6fe0592a8d6e94f6d1b1f843bfd659ecce36b75e69b1fb9c2f40000a0d0e43c5fb36d1948a8e5c68a6019c5d78f89e62e1152ff8ea1bdd60c83f89f1cbf4914ce56280c085bf8882caebaa1c7e09b0d9ba7055c5dad98a78dfa38056c3c299137c20504a2eaa227dc0f8ccc4c77806eb75baf6291bdd13086bdee6235cc202459ef28aaac3da3e1330cbaa0f289eb49e5fb42566e989fde3a1523b9e80246ef4087dd50c2d8b23066db18ee7c44a3cc2d6c88513a2266d9ef4bf99aac8edb46db3ac114ab49f21a3bec6eb2461a6ca759a0fb349590e4965793643cd5d2ee908bebb144c6f9e7f031a705fe48e7ca80f63f6d6abf3ec603f7a3353bebcf61010d955857c85b3c8878073fba85b60e32e6629325a2b6a6adc19469be6bb7c23eea3238e8f27dfe9774730979f5a453b07e26a56d34d57e094e14e39942749c53ff0d7c0cd8389a8262aa32bdc3e694f70c4f3295dc3aa135131ad46a7e369e38237ea6615c2029371c876ceeaf015d1b75d334c1c4786d2bd234108f019b6cf9244698d95b6df65933daab0b27da61c4e1017b02fa6742174aef0f31c00ef35c8f24d3d4cd88bcd245e082deb8abfcb8598be10436898f56303959a71b0ffd63517b29168e299b66b98d0722b64db1ac88c9e57e8fb6f71f8e3ccf89090d034a2a643ee274cce9cb12949b3e60e06aceaa5fe58376ae2d5f2823698bdeb888fe31714acdc66006ab08218a78f57130a17e1f79627c355a1fefde8015f7b8b9add2bc66ad46e14645d2687a19a5ab3aa303d733d7ee862ac1afe2f586572fb9afe1628cb41930565d0c0e012551e4c299ed3805d34daeef340e3b619f8e07823af512e2db6cc5890e50329f1068e3d56a1b8ef48cfd7bd9ec2c1d870cbe933dbdcee3ec7d6aaa3ff88becf9e81e8a819a0a7645277a184302dd2b79c7ca71ee301b090e835ef3ef6ec60490d7115b1b8f0394803181663049cd7de5ee1be23c347b5e8f84eed9b16c66bd06a51e9c7db4be01debad3605a2124a7f03defd7710b9cb07392bb33982b2c49dcc112f557e9456cbbad7a13aa23e0364d8441a6cfab5587b0a75b28de943a4012e6d08185b56bbac285ef2d39f6f601bc3606d1b70cdc403325ac6f50950b5d90c62f6360134ecef0fb3d2b779ed837a450ec933cc68eb51cf9d1d6775b68b5e03d6e22afafef4fcc4bf2e0334e00414aecf5b2e5", 0x1000}}, 0x1006) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000106a05310300000000000109022400010000800009040002010300010009210000000122f80409058103"], 0x0) (async) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382408b0b00000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) (async) syz_usb_control_io$hid(r1, &(0x7f00000003c0)={0x14, 0x0, 0x0, 0x0, 0x0}, 0x0) (async) r2 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) ioctl$HIDIOCGFLAG(r2, 0x8004480e, &(0x7f00000002c0)) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001100)=@migrate={0xec, 0x21, 0x1, 0x70bd28, 0x0, {{@in=@multicast2, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x10000000}, [@migrate={0x9c, 0x11, [{@in6=@ipv4={'\x00', '\xff\xff', @empty}, @in6=@ipv4={'\x00', '\xff\xff', @remote}, @in6=@private2, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x32, 0x0, 0x0, 0x2, 0x2, 0xa}, {@in6=@ipv4={'\x00', '\xff\xff', @empty}, @in6=@mcast1, @in=@rand_addr=0x64010102, @in6=@private2, 0x3c, 0x0, 0x0, 0x0, 0xa, 0x2}]}]}, 0xec}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) sendmmsg(0xffffffffffffffff, &(0x7f0000007d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000280)="0b8d6575028748bd687a47cc766fa15fc298c8988981da06efd7fcb4990d1b09b588a16973e531a4bb0e0feae7a87d735ecd4714c778f20d56c61f9027ec83b957a96b4d92aab0a8433e3e9be5283a9df7ae3398cf00cad58ab1d482", 0x5c}], 0x1}}], 0x1, 0x8040) syz_usb_control_io$hid(r0, &(0x7f0000000140)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) 573.667973ms ago: executing program 2 (id=2732): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$unix(0x1, 0x1, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x4000000044402, 0x0) io_setup(0xc00, &(0x7f0000000000)=0x0) io_submit(r3, 0x2, &(0x7f0000000080)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8, r2, &(0x7f0000000140)="1e", 0x1, 0x4e}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x2, 0x3, r2, 0x0, 0x0, 0x9}]) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x40, 0x0) close(r4) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x44050) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x5, 0x7, 0xb3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x58, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r9, {0x10}, {}, {0xe, 0x1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x200000, 0xe, 0x7, 0x7, 0x9, 0x40, 0xffffffff, 0x2}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4040098}, 0x4000) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r11 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r11, &(0x7f0000000140)="bad330fbc9b5544972e7a5ea0756", 0x36, 0x40, &(0x7f00000001c0)={0x11, 0x1a, r10, 0x1, 0xd8, 0x6, @random="98c8ca7122df"}, 0x14) sendto$packet(r11, &(0x7f0000000480)="c1b4805f3a150000f65bd78b2400", 0xe, 0x40000, &(0x7f0000000240)={0x11, 0xf8, r10, 0x1, 0x5, 0x6, @random="24f51e8e0a5a"}, 0x14) r12 = socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r12, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000d80)=@newqdisc={0x434, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, 0x0, {0x10}, {}, {0xe, 0x1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x100006, 0x4008d, 0x6, 0xd07f, 0xfff, 0x7, 0x10000, 0x5, 0x8, 0xb, 0x7fffffff, 0x5, 0x0, 0x10001, 0xb85, 0xd, 0x6, 0xbac07f81, 0x9, 0x0, 0x4, 0x200, 0xffffffff, 0xffffffff, 0x7, 0x648, 0x80000001, 0x9, 0x81, 0x8000, 0x10000, 0x9, 0x9, 0x1, 0x3, 0x5, 0x6, 0x10000, 0x5, 0x101, 0xb67d, 0x8e, 0x8, 0x6, 0xfffff801, 0x5, 0xfff, 0x6, 0x1, 0x400, 0x7, 0x10001, 0x80, 0x4, 0x2, 0x0, 0x9, 0x40, 0x4, 0x8878, 0x0, 0x8ce, 0x7b, 0x6, 0x100, 0x0, 0x1, 0x400, 0x2, 0x8, 0x2b, 0x7f, 0x5, 0xfc7, 0x0, 0x6, 0x9, 0x1, 0x0, 0x2, 0x3ff, 0x1, 0x8, 0x5, 0x2, 0x1, 0x1, 0x2, 0x2, 0x4, 0x7, 0x10000000, 0x2, 0xc, 0x8, 0x64e, 0x1, 0x4, 0x3, 0x4, 0x7f, 0x3ff, 0x1, 0x4, 0x1, 0x400, 0x9, 0xc4c, 0x8000, 0x12d170f1, 0x8, 0x7f, 0x2, 0x1, 0xa27a, 0x764, 0x0, 0xc, 0x2, 0x2, 0x7, 0x5, 0x1000, 0x0, 0x0, 0x3, 0xcc4a, 0x4, 0x40, 0x6, 0x9, 0xc, 0x3, 0x3, 0x5, 0x5, 0x6, 0xbf, 0xf, 0x312, 0x4, 0x6, 0x800, 0x9, 0x8f7, 0x7, 0xfffffffe, 0x1ff, 0xfff, 0x9, 0x1, 0x4, 0xf, 0x6b5, 0x0, 0x40, 0x7, 0xb, 0x7, 0xc4, 0x3, 0x5, 0x3, 0x6, 0x5, 0x100, 0x1d7, 0x3, 0x7f, 0x6d5, 0xb9de, 0x0, 0x7fffffff, 0x7, 0x8, 0x9, 0xc54, 0x8001, 0x4, 0x7fffffff, 0x8, 0x81, 0x1, 0x8, 0x6, 0x8, 0x5, 0xf3, 0x9, 0x81, 0x5, 0x10000, 0xfff, 0x64, 0x5, 0xf1f8, 0x0, 0xe, 0xfffff001, 0x8, 0x8001, 0x2b0000, 0x7f, 0x5, 0x6, 0xffffffff, 0xc7, 0x7ff00000, 0x9, 0x200, 0xb9c, 0x2, 0x4, 0x800, 0x7, 0x7f, 0x8, 0x20000, 0x7, 0xac6, 0x9, 0x9, 0xfffffce9, 0x1, 0x2, 0x80, 0x38, 0x16e1d229, 0x8, 0x9, 0x4, 0x6, 0x80000000, 0x4, 0x5, 0x3, 0xb3e1, 0x0, 0x100, 0xa457, 0x7, 0x1, 0x8, 0x7fffffff, 0x2, 0x7fffffff, 0xe3, 0x7, 0xe, 0x9, 0x3, 0x2, 0x7ff, 0x8, 0x3, 0x30000000]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmmsg(r0, &(0x7f00000023c0)=[{{&(0x7f0000000040)=@ll={0x11, 0x17, r13, 0x1, 0x4}, 0x80, 0x0}}], 0x1, 0x40000) 305.493978ms ago: executing program 2 (id=2733): syz_usb_connect(0x2, 0x9a2, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d0241710d8050a81b892000000010902900902000000000904"], 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0x2d, 0x4e20, 0xfd9, @local, 0xb4d0}, 0x1c) r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x84, &(0x7f0000000080)={r1, @in6={{0xa, 0x4e22, 0x5, @empty, 0xfc}}, 0x6, 0x400}, &(0x7f0000000480)=0x90) rseq(&(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x4, 0x5, 0x1, 0x6}}, 0x20, 0x0, 0x0) r2 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r2, 0x707, &(0x7f0000000200)={&(0x7f0000000080)=[{0x50, 0x8001, 0x0, 0x0}, {0xd, 0x4001, 0x0, 0x0}], 0x2}) 140.907083ms ago: executing program 5 (id=2734): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000680)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000104000003000007000000000000", @ANYRES32=r2, @ANYBLOB="3f00000006020400280012800b0001006272696467650000180002800c002e000300000003000000050007"], 0x48}, 0x1, 0x0, 0x0, 0x44000}, 0x0) 0s ago: executing program 5 (id=2735): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TIOCMSET(r0, 0x5418, &(0x7f00000001c0)=0x2) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000000)={0xffffffff, 0xc9a, 0xfffff001, 0x6, 0x18, "5cadf0fa59ebc3cef90ac43c5c135252e5d962"}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) r1 = socket$inet_udp(0x2, 0x2, 0x0) socket$can_raw(0x1d, 0x3, 0x1) fdatasync(r1) socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$sndctrl(&(0x7f0000000000), 0x458, 0x0) r2 = creat(&(0x7f0000000200)='./file1\x00', 0x2) close(r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000300)={'veth1_to_hsr\x00', &(0x7f0000000200)=@ethtool_rxnfc={0x32, 0xd, 0x7, {0x11, @ah_ip6_spec={@private2, @empty, 0xff, 0xea}, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, 0x5, 0xfff4, [0xc8, 0x4]}, @tcp_ip6_spec={@ipv4={'\x00', '\xff\xff', @multicast1}, @remote, 0x4e20, 0x4e21, 0x9}, {0x0, @random="e2e859dcc9f6", 0x9, 0x1, [0xfe, 0x1]}, 0x2, 0x5}}}) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0800034000000014640000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000003800038034000080040001800c000540000000000000004914000b8010009eac4fd901006f626a72656600000c0004"], 0xd0}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000200)=[{0x6, 0xf5, 0x9, 0x7fff0000}]}) ioctl$KVM_GET_STATS_FD_cpu(r2, 0x2103) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r6, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r6, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x9}, 0x8) ioctl$FE_GET_FRONTEND(r4, 0x80246f4d, &(0x7f0000000040)={0x0, 0x0, @vsb}) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000400)={&(0x7f00000000c0)="90f90375bbeb6a87b84346671a875528bde5dbcbfc95de5f4c", &(0x7f0000000100)=""/147, &(0x7f0000000200)="96a773c06071dc663d7e1216a0a21d6457cbf3616fda957b267975721380b3762cf483f2a77c9c93ddb22ae95ee8ce808044cc5dcb4a24b2341ee5f6d89430", &(0x7f0000000340)="b06bc005ff89aba95fcad9ee6a7de1682a8c779990ea150c7f99368b478cd1e2b2f2d917334a77a841c235cb975aebf32ab6202c2770f2aaf3a6767602824d5b09bf245bb03a7c9f120f2ffa6c76c3ff98c7b3d8108a9d5caa75d29c852170b960e91f7a0b6e503cb45d5a3b494c5f6a496651c64b7fe566f0c22a2a5d8e74fced1d60293efae99c9d5e3168a72bea153921a0f97f8be80d0f4ef7f6914cfeba95fba108ee81", 0x6, r4, 0x4}, 0x38) sendmmsg$inet6(r6, &(0x7f0000000480)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x80020}, 0x1c, &(0x7f0000000300)=[{&(0x7f00000034c0)='\x00', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r6, 0x84, 0x77, &(0x7f00000009c0)=ANY=[@ANYBLOB="12e01b3989dd", @ANYRES32=r5], 0x1000f) kernel console output (not intermixed with test programs): leftover after parsing attributes in process `syz.1.2233'. [ 558.478952][T13485] netlink: 5 bytes leftover after parsing attributes in process `syz.1.2233'. [ 558.501490][ T29] audit: type=1326 audit(1778064172.799:984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13480 comm="syz.1.2233" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=358 compat=1 ip=0xf7f5301c code=0x7ffc0000 [ 558.527846][ T29] audit: type=1326 audit(1778064172.809:985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13480 comm="syz.1.2233" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f5301c code=0x7ffc0000 [ 558.566758][T13469] Cannot find add_set index 3 as target [ 558.756372][T13487] FAULT_INJECTION: forcing a failure. [ 558.756372][T13487] name failslab, interval 1, probability 0, space 0, times 0 [ 558.789415][T13487] CPU: 1 UID: 0 PID: 13487 Comm: syz.5.2235 Tainted: G L syzkaller #0 PREEMPT(full) [ 558.789434][T13487] Tainted: [L]=SOFTLOCKUP [ 558.789438][T13487] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 558.789445][T13487] Call Trace: [ 558.789450][T13487] [ 558.789456][T13487] dump_stack_lvl+0xe8/0x150 [ 558.789474][T13487] should_fail_ex+0x412/0x560 [ 558.789493][T13487] should_failslab+0xa8/0x100 [ 558.789510][T13487] ? dst_alloc+0x105/0x170 [ 558.789526][T13487] kmem_cache_alloc_noprof+0x87/0x650 [ 558.789539][T13487] ? __pfx_find_exception+0x10/0x10 [ 558.789555][T13487] ? fib_lookup+0x76/0x440 [ 558.789570][T13487] dst_alloc+0x105/0x170 [ 558.789587][T13487] ip_route_output_key_hash_rcu+0x14d0/0x25d0 [ 558.789608][T13487] ? ip_route_output_key_hash+0xd8/0x2a0 [ 558.789623][T13487] ip_route_output_key_hash+0x18d/0x2a0 [ 558.789640][T13487] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 558.789663][T13487] ip_route_output_flow+0x2a/0x150 [ 558.789676][T13487] ? security_sk_classify_flow+0x6d/0x150 [ 558.789694][T13487] udp_sendmsg+0x141a/0x21a0 [ 558.789714][T13487] ? __pfx_udp_sendmsg+0x10/0x10 [ 558.789734][T13487] ? handle_mm_fault+0xee/0x3170 [ 558.789750][T13487] ? __pfx_handle_mm_fault+0x10/0x10 [ 558.789764][T13487] ? __up_read+0x291/0x6b0 [ 558.789779][T13487] ? aa_label_sk_perm+0x532/0x6e0 [ 558.789795][T13487] udpv6_sendmsg+0x996/0x25c0 [ 558.789826][T13487] ? __pfx_udpv6_sendmsg+0x10/0x10 [ 558.789845][T13487] ? lockdep_hardirqs_on+0x7a/0x110 [ 558.789868][T13487] ? irqentry_exit+0x218/0x730 [ 558.789932][T13487] ? inet6_sendmsg+0xe4/0x120 [ 558.789954][T13487] ____sys_sendmsg+0x5c7/0x9f0 [ 558.789989][T13487] ? __pfx_____sys_sendmsg+0x10/0x10 [ 558.790030][T13487] ___sys_sendmsg+0x2a5/0x360 [ 558.790054][T13487] ? __lock_acquire+0x6b5/0x2cf0 [ 558.790078][T13487] ? __pfx____sys_sendmsg+0x10/0x10 [ 558.790107][T13487] ? kstrtoull+0x12f/0x1d0 [ 558.790154][T13487] ? __fget_files+0x2a/0x420 [ 558.790176][T13487] ? __fget_files+0x3a0/0x420 [ 558.790208][T13487] __sys_sendmmsg+0x2e7/0x4e0 [ 558.790245][T13487] ? __pfx___sys_sendmmsg+0x10/0x10 [ 558.790297][T13487] ? fput+0xa0/0xd0 [ 558.790319][T13487] ? ksys_write+0x242/0x270 [ 558.790352][T13487] __ia32_compat_sys_sendmmsg+0xa2/0xc0 [ 558.790382][T13487] __do_fast_syscall_32+0x229/0x6e0 [ 558.790408][T13487] ? do_fast_syscall_32+0x33/0x70 [ 558.790432][T13487] ? lockdep_hardirqs_on+0x7a/0x110 [ 558.790454][T13487] ? asm_int80_emulation+0x1a/0x20 [ 558.790472][T13487] ? do_int80_emulation+0x286/0x530 [ 558.790494][T13487] ? trace_irq_disable+0x3b/0x140 [ 558.790524][T13487] do_fast_syscall_32+0x33/0x70 [ 558.790549][T13487] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 558.790571][T13487] RIP: 0023:0xf7fe901c [ 558.790589][T13487] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 558.790605][T13487] RSP: 002b:00000000f54a650c EFLAGS: 00000206 ORIG_RAX: 0000000000000159 [ 558.790625][T13487] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080003cc0 [ 558.790639][T13487] RDX: 0000000000000172 RSI: 0000000004001c00 RDI: 0000000000000000 [ 558.790651][T13487] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 558.790662][T13487] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 558.790673][T13487] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 558.790702][T13487] [ 559.572114][T13501] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2239'. [ 559.631469][T13183] usb 5-1: USB disconnect, device number 85 [ 559.649591][T13503] netlink: 'syz.2.2239': attribute type 2 has an invalid length. [ 559.847245][ T48] wlan0: Trigger new scan to find an IBSS to join [ 559.869944][T13504] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2238'. [ 560.327315][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 560.335154][ C1] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 560.565512][T13519] kvm: kvm [13518]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010005) = 0x4 [ 561.258228][T13530] FAULT_INJECTION: forcing a failure. [ 561.258228][T13530] name failslab, interval 1, probability 0, space 0, times 0 [ 561.272571][T13530] CPU: 1 UID: 0 PID: 13530 Comm: syz.4.2247 Tainted: G L syzkaller #0 PREEMPT(full) [ 561.272601][T13530] Tainted: [L]=SOFTLOCKUP [ 561.272609][T13530] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 561.272620][T13530] Call Trace: [ 561.272628][T13530] [ 561.272637][T13530] dump_stack_lvl+0xe8/0x150 [ 561.272664][T13530] should_fail_ex+0x412/0x560 [ 561.272694][T13530] should_failslab+0xa8/0x100 [ 561.272723][T13530] __kmalloc_noprof+0xe8/0x760 [ 561.272750][T13530] ? video_usercopy+0x1b1/0x1450 [ 561.272779][T13530] video_usercopy+0x1b1/0x1450 [ 561.272807][T13530] ? __pfx___video_do_ioctl+0x10/0x10 [ 561.272827][T13530] ? __pfx_video_usercopy+0x10/0x10 [ 561.272858][T13530] ? __fget_files+0x2a/0x420 [ 561.272876][T13530] v4l2_ioctl+0x18d/0x1e0 [ 561.272896][T13530] v4l2_compat_ioctl32+0x1d7/0x280 [ 561.272915][T13530] __ia32_compat_sys_ioctl+0x5ea/0x950 [ 561.272938][T13530] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 561.272975][T13530] ? __fget_files+0x3a0/0x420 [ 561.272996][T13530] ? fput+0xa0/0xd0 [ 561.273012][T13530] ? ksys_write+0x242/0x270 [ 561.273040][T13530] __do_fast_syscall_32+0x229/0x6e0 [ 561.273059][T13530] ? do_fast_syscall_32+0x33/0x70 [ 561.273076][T13530] ? lockdep_hardirqs_on+0x7a/0x110 [ 561.273092][T13530] ? asm_int80_emulation+0x1a/0x20 [ 561.273105][T13530] ? do_int80_emulation+0x286/0x530 [ 561.273122][T13530] ? trace_irq_disable+0x3b/0x140 [ 561.273145][T13530] do_fast_syscall_32+0x33/0x70 [ 561.273163][T13530] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 561.273179][T13530] RIP: 0023:0xf7f8501c [ 561.273193][T13530] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 561.273206][T13530] RSP: 002b:00000000f544650c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 561.273221][T13530] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c0845657 [ 561.273231][T13530] RDX: 0000000080001100 RSI: 0000000000000000 RDI: 0000000000000000 [ 561.273239][T13530] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 561.273248][T13530] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 561.273256][T13530] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 561.273287][T13530] [ 562.447330][ T5747] usb 5-1: new high-speed USB device number 86 using dummy_hcd [ 562.608192][ T5747] usb 5-1: Using ep0 maxpacket: 16 [ 562.620611][ T5747] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 562.653919][ T5747] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 562.681439][ T5747] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 562.698442][ T5747] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 562.716335][ T5747] usb 5-1: Product: syz [ 562.747432][ T5747] usb 5-1: Manufacturer: syz [ 562.761046][ T5747] usb 5-1: SerialNumber: syz [ 562.783417][ T5747] usb 5-1: 0:2 : does not exist [ 562.814056][T13551] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2253'. [ 562.890409][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.891962][ T35] wlan0: Trigger new scan to find an IBSS to join [ 562.902070][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.913869][T13556] netlink: 'syz.2.2253': attribute type 2 has an invalid length. [ 563.057085][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 563.560530][ T5747] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 563.765815][ T5747] usb 5-1: USB disconnect, device number 86 [ 563.877282][T11847] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 563.982959][ T5979] udevd[5979]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 564.006755][T13564] netlink: 312 bytes leftover after parsing attributes in process `syz.2.2259'. [ 564.167319][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 564.204449][T13571] FAULT_INJECTION: forcing a failure. [ 564.204449][T13571] name failslab, interval 1, probability 0, space 0, times 0 [ 564.282821][T13571] CPU: 1 UID: 0 PID: 13571 Comm: syz.2.2261 Tainted: G L syzkaller #0 PREEMPT(full) [ 564.282851][T13571] Tainted: [L]=SOFTLOCKUP [ 564.282858][T13571] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 564.282870][T13571] Call Trace: [ 564.282878][T13571] [ 564.282886][T13571] dump_stack_lvl+0xe8/0x150 [ 564.282913][T13571] should_fail_ex+0x412/0x560 [ 564.282941][T13571] should_failslab+0xa8/0x100 [ 564.282968][T13571] ? __kernfs_new_node+0xea/0x970 [ 564.282992][T13571] kmem_cache_alloc_noprof+0x87/0x650 [ 564.283017][T13571] ? kernfs_add_one+0x477/0x5c0 [ 564.283041][T13571] __kernfs_new_node+0xea/0x970 [ 564.283070][T13571] ? __pfx___kernfs_new_node+0x10/0x10 [ 564.283093][T13571] ? kernfs_root+0x1c/0x230 [ 564.283126][T13571] ? kernfs_root+0x1c/0x230 [ 564.283149][T13571] ? kernfs_root+0x1c/0x230 [ 564.283169][T13571] ? kernfs_root+0x1c/0x230 [ 564.283196][T13571] kernfs_new_node+0x102/0x210 [ 564.283225][T13571] __kernfs_create_file+0x4b/0x2e0 [ 564.283246][T13571] sysfs_add_file_mode_ns+0x238/0x300 [ 564.283275][T13571] sysfs_create_file_ns+0x12b/0x1b0 [ 564.283300][T13571] ? __pfx_sysfs_create_file_ns+0x10/0x10 [ 564.283328][T13571] ? __dev_fwnode+0x50/0x80 [ 564.283349][T13571] ? device_create_file+0xf4/0x1b0 [ 564.283371][T13571] device_add+0x440/0xbb0 [ 564.283396][T13571] device_create+0x269/0x300 [ 564.283421][T13571] ? timer_init_key+0x161/0x2c0 [ 564.283451][T13571] ? __pfx_device_create+0x10/0x10 [ 564.283474][T13571] ? ieee80211_alloc_hw_nm+0x191d/0x1fa0 [ 564.283510][T13571] mac80211_hwsim_new_radio+0x427/0x5aa0 [ 564.283543][T13571] ? stack_trace_save+0xa9/0x100 [ 564.283570][T13571] ? __pfx_stack_trace_save+0x10/0x10 [ 564.283601][T13571] ? stack_depot_save_flags+0x33/0x810 [ 564.283624][T13571] ? kasan_save_alloc_info+0x41/0x50 [ 564.283643][T13571] ? __kasan_slab_free+0x5c/0x80 [ 564.283681][T13571] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 564.283711][T13571] hwsim_new_radio_nl+0xf6a/0x1c00 [ 564.283753][T13571] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 564.283790][T13571] ? rcu_is_watching+0x15/0xb0 [ 564.283811][T13571] ? trace_kmalloc+0x2a/0xf0 [ 564.283840][T13571] ? __nla_parse+0x40/0x60 [ 564.283868][T13571] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 564.283888][T13571] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 564.283915][T13571] genl_family_rcv_msg_doit+0x22a/0x330 [ 564.283942][T13571] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 564.283971][T13571] ? bpf_lsm_capable+0x9/0x20 [ 564.283990][T13571] ? security_capable+0x7e/0x2c0 [ 564.284018][T13571] genl_rcv_msg+0x61c/0x7a0 [ 564.284042][T13571] ? __pfx_genl_rcv_msg+0x10/0x10 [ 564.284059][T13571] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 564.284081][T13571] ? __pfx_ref_tracker_free+0x10/0x10 [ 564.284115][T13571] netlink_rcv_skb+0x232/0x4b0 [ 564.284140][T13571] ? __pfx_genl_rcv_msg+0x10/0x10 [ 564.284159][T13571] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 564.284198][T13571] ? down_read+0x270/0x2e0 [ 564.284222][T13571] ? genl_rcv+0xd/0x40 [ 564.284240][T13571] genl_rcv+0x28/0x40 [ 564.284255][T13571] netlink_unicast+0x75c/0x8e0 [ 564.284286][T13571] netlink_sendmsg+0x813/0xb40 [ 564.284318][T13571] ? __pfx_netlink_sendmsg+0x10/0x10 [ 564.284345][T13571] ? aa_sock_msg_perm+0xf1/0x1b0 [ 564.284370][T13571] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 564.284396][T13571] ____sys_sendmsg+0x972/0x9f0 [ 564.284428][T13571] ? __pfx_____sys_sendmsg+0x10/0x10 [ 564.284458][T13571] ? kstrtoull+0x12f/0x1d0 [ 564.284486][T13571] ___sys_sendmsg+0x2a5/0x360 [ 564.284508][T13571] ? __lock_acquire+0x6b5/0x2cf0 [ 564.284531][T13571] ? __pfx____sys_sendmsg+0x10/0x10 [ 564.284557][T13571] ? get_pid_task+0x20/0x1f0 [ 564.284578][T13571] ? get_pid_task+0x20/0x1f0 [ 564.284592][T13571] ? get_pid_task+0x20/0x1f0 [ 564.284618][T13571] ? __fget_files+0x2a/0x420 [ 564.284643][T13571] ? __fget_files+0x3a0/0x420 [ 564.284660][T13571] __sys_sendmsg+0x183/0x260 [ 564.284675][T13571] ? __pfx___sys_sendmsg+0x10/0x10 [ 564.284700][T13571] __do_fast_syscall_32+0x229/0x6e0 [ 564.284715][T13571] ? do_fast_syscall_32+0x33/0x70 [ 564.284727][T13571] ? lockdep_hardirqs_on+0x7a/0x110 [ 564.284740][T13571] ? asm_int80_emulation+0x1a/0x20 [ 564.284750][T13571] ? do_int80_emulation+0x286/0x530 [ 564.284762][T13571] ? trace_irq_disable+0x3b/0x140 [ 564.284786][T13571] do_fast_syscall_32+0x33/0x70 [ 564.284800][T13571] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 564.284812][T13571] RIP: 0023:0xf7fe601c [ 564.284823][T13571] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 564.284832][T13571] RSP: 002b:00000000f54a650c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 564.284844][T13571] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000100 [ 564.284851][T13571] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 564.284857][T13571] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 564.284863][T13571] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 564.284869][T13571] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 564.284884][T13571] [ 565.719268][T13558] syz.1.2256 (13558): drop_caches: 2 [ 565.820195][T13589] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2263'. [ 566.402624][T13183] usb 2-1: new high-speed USB device number 115 using dummy_hcd [ 566.589314][T13183] usb 2-1: Using ep0 maxpacket: 32 [ 566.638486][T13183] usb 2-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 566.661799][T13183] usb 2-1: config 0 interface 0 has no altsetting 0 [ 566.677568][T13183] usb 2-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 566.700749][T13183] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 566.724774][T13183] usb 2-1: config 0 descriptor?? [ 567.267478][T13182] usb 4-1: new full-speed USB device number 59 using dummy_hcd [ 567.431137][T13182] usb 4-1: unable to get BOS descriptor or descriptor too short [ 567.439451][T13182] usb 4-1: not running at top speed; connect to a high speed hub [ 567.468272][T13182] usb 4-1: config 4 has an invalid interface number: 106 but max is 0 [ 567.493052][T13182] usb 4-1: config 4 has no interface number 0 [ 567.519987][T13182] usb 4-1: config 4 interface 106 has no altsetting 0 [ 567.562963][T13182] usb 4-1: New USB device found, idVendor=0408, idProduct=4033, bcdDevice=96.91 [ 567.572739][T13182] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 567.581495][T13182] usb 4-1: Product: syz [ 567.590011][T13182] usb 4-1: Manufacturer: syz [ 567.598012][T13182] usb 4-1: SerialNumber: syz [ 567.666168][T13183] corsair-cpro 0003:1B1C:0C10.0035: hidraw0: USB HID v4.06 Device [HID 1b1c:0c10] on usb-dummy_hcd.1-1/input0 [ 567.708544][T13608] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2270'. [ 567.794760][T13610] netlink: 'syz.2.2270': attribute type 2 has an invalid length. [ 567.815953][T13605] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 567.826066][T13605] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 567.845507][T13182] uvcvideo 4-1:4.106: Found UVC 0.00 device syz (0408:4033) [ 567.854258][T13182] uvcvideo 4-1:4.106: Forcing UVC version to 1.0a [ 567.861097][T13182] uvcvideo 4-1:4.106: No valid video chain found. [ 567.872811][T13182] usb 4-1: USB disconnect, device number 59 [ 568.701565][T13183] corsair-cpro 0003:1B1C:0C10.0035: probe with driver corsair-cpro failed with error -71 [ 569.001342][T13183] usb 2-1: USB disconnect, device number 115 [ 569.069672][T13629] kvm: kvm [13628]: vcpu1, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010001) = 0x7 [ 569.406999][T13639] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2282'. [ 569.667228][ T5628] usb 5-1: new high-speed USB device number 87 using dummy_hcd [ 569.819388][T13618] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2272'. [ 569.828482][ T5628] usb 5-1: Using ep0 maxpacket: 32 [ 569.904567][T13618] input: syz0 as /devices/virtual/input/input74 [ 569.936211][ T5628] usb 5-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 569.977112][ T5628] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 570.009297][ T5628] usb 5-1: Product: syz [ 570.019216][ T5628] usb 5-1: Manufacturer: syz [ 570.024336][ T5628] usb 5-1: SerialNumber: syz [ 570.033158][ T5628] usb 5-1: config 0 descriptor?? [ 570.043093][T13626] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2275'. [ 570.136849][T13646] input: syz0 as /devices/virtual/input/input75 [ 570.150274][ T5628] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 570.159663][ T5628] dvb-usb: bulk message failed: -22 (4/0) [ 570.214681][ T5628] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 570.241239][ T5628] dvb-usb: bulk message failed: -22 (5/0) [ 570.247344][ T5628] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 570.265488][ T5628] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 570.277732][ T5628] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 570.285831][ T5628] usb 5-1: media controller created [ 570.336367][T13639] ttusb2: more than 2 i2c messages at a time is not handled yet. TODO. [ 570.344746][T13639] dvb-usb: bulk message failed: -22 (7/0) [ 570.359964][ T5628] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 570.376945][T13639] ttusb2: there might have been an error during control message transfer. (rlen = 3, was 0) [ 570.445069][T13653] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2282'. [ 570.458824][T13639] ttusb2: i2c transfer failed. [ 570.466767][ T5628] usb 5-1: selecting invalid altsetting 3 [ 570.482198][ T5628] ttusb2: set interface to alts=3 failed [ 570.574109][ T5628] DVB: Unable to find symbol tda10086_attach() [ 570.582075][ T5628] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 570.598280][ T5628] dvb-usb: bulk message failed: -22 (4/0) [ 570.604081][ T5628] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 570.614600][ T5628] dvb-usb: bulk message failed: -22 (5/0) [ 570.620516][ T5628] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 570.633485][ T5628] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 570.653656][ T5628] usb 5-1: USB disconnect, device number 87 [ 570.760152][ T5628] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 573.057788][T13182] usb 4-1: new full-speed USB device number 60 using dummy_hcd [ 573.218695][T13182] usb 4-1: config 8 has an invalid interface number: 223 but max is 0 [ 573.240060][T13182] usb 4-1: config 8 contains an unexpected descriptor of type 0x1, skipping [ 573.259041][T13182] usb 4-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 573.279598][T13182] usb 4-1: config 8 has no interface number 0 [ 573.292818][T13182] usb 4-1: config 8 interface 223 altsetting 0 endpoint 0x7 has invalid maxpacket 15872, setting to 64 [ 573.306441][T13182] usb 4-1: config 8 interface 223 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 573.326826][T13182] usb 4-1: New USB device found, idVendor=a6da, idProduct=7458, bcdDevice=2d.4d [ 573.336367][T13182] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 573.346812][T13182] usb 4-1: Product: syz [ 573.351279][T13182] usb 4-1: Manufacturer: syz [ 573.356081][T13182] usb 4-1: SerialNumber: syz [ 573.570564][T13691] kvm: kvm [13690]: vcpu1, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010005) = 0x494c [ 573.647588][T13182] usb 4-1: USB disconnect, device number 60 [ 573.730239][T13697] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2298'. [ 573.998393][ T46] usb 2-1: new high-speed USB device number 116 using dummy_hcd [ 574.086898][T13711] netlink: 76 bytes leftover after parsing attributes in process `syz.5.2303'. [ 574.096607][T13711] netlink: 56 bytes leftover after parsing attributes in process `syz.5.2303'. [ 574.105740][ T5628] usb 3-1: new high-speed USB device number 89 using dummy_hcd [ 574.167170][ T46] usb 2-1: Using ep0 maxpacket: 32 [ 574.188618][ T46] usb 2-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 574.207353][ T46] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 574.210427][T13715] syz_tun: entered allmulticast mode [ 574.225606][ T46] usb 2-1: Product: syz [ 574.231611][ T46] usb 2-1: Manufacturer: syz [ 574.237391][ T29] kauditd_printk_skb: 12 callbacks suppressed [ 574.237406][ T29] audit: type=1326 audit(1778064189.089:998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13714 comm="syz.5.2304" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7fe901c code=0x0 [ 574.246520][ T46] usb 2-1: SerialNumber: syz [ 574.288976][ T5628] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 574.299891][ T46] usb 2-1: config 0 descriptor?? [ 574.307864][ T5628] usb 3-1: New USB device found, idVendor=03da, idProduct=2820, bcdDevice=52.3c [ 574.316204][ T46] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 574.319014][ T5628] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 574.337603][ T46] dvb-usb: bulk message failed: -22 (4/0) [ 574.345372][ T46] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 574.356890][ T5628] usb 3-1: config 0 descriptor?? [ 574.362712][ T46] dvb-usb: bulk message failed: -22 (5/0) [ 574.375923][ T46] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 574.383065][ T5628] rndis_host 3-1:0.0: GUID doesn't match [ 574.393892][ T46] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 574.410802][ T46] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 574.430087][ T46] usb 2-1: media controller created [ 574.453090][ T46] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 574.481238][ T46] usb 2-1: selecting invalid altsetting 3 [ 574.495598][ T46] ttusb2: set interface to alts=3 failed [ 574.515875][T13697] ttusb2: more than 2 i2c messages at a time is not handled yet. TODO. [ 574.525966][T13697] dvb-usb: bulk message failed: -22 (7/0) [ 574.534343][T13697] ttusb2: there might have been an error during control message transfer. (rlen = 3, was 0) [ 574.546682][T13697] ttusb2: i2c transfer failed. [ 574.557394][T13697] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2298'. [ 574.566758][ T46] DVB: Unable to find symbol tda10086_attach() [ 574.579865][ T46] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 574.600123][ T46] dvb-usb: bulk message failed: -22 (4/0) [ 574.610296][ T46] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 574.634986][T13183] usb 3-1: USB disconnect, device number 89 [ 574.659809][ T46] dvb-usb: bulk message failed: -22 (5/0) [ 574.681471][ T46] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 574.708729][ T46] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 574.738843][ T46] usb 2-1: USB disconnect, device number 116 [ 574.823591][ T46] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 575.149947][T13183] usb 5-1: new high-speed USB device number 88 using dummy_hcd [ 575.307169][T13183] usb 5-1: Using ep0 maxpacket: 16 [ 575.327990][T13183] usb 5-1: config 7 has an invalid interface number: 247 but max is 2 [ 575.364499][T13183] usb 5-1: config 7 has an invalid interface number: 9 but max is 2 [ 575.390625][T13183] usb 5-1: config 7 has an invalid interface number: 209 but max is 2 [ 575.407383][T13183] usb 5-1: config 7 contains an unexpected descriptor of type 0x1, skipping [ 575.445813][T13183] usb 5-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 575.448905][T13729] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2308'. [ 575.503286][T13729] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2308'. [ 575.509157][T13183] usb 5-1: config 7 has no interface number 0 [ 575.534037][T13183] usb 5-1: config 7 has no interface number 1 [ 575.558514][T13183] usb 5-1: config 7 has no interface number 2 [ 575.564814][T13183] usb 5-1: config 7 interface 9 altsetting 3 endpoint 0xA has invalid maxpacket 1024, setting to 64 [ 575.578957][T13183] usb 5-1: config 7 interface 9 altsetting 3 has an invalid descriptor for endpoint zero, skipping [ 575.591295][T13183] usb 5-1: config 7 interface 9 altsetting 3 has an invalid descriptor for endpoint zero, skipping [ 575.603915][T13183] usb 5-1: config 7 interface 9 altsetting 3 endpoint 0x9 has invalid maxpacket 1024, setting to 64 [ 575.617705][T13183] usb 5-1: config 7 interface 9 altsetting 3 endpoint 0xB has invalid maxpacket 512, setting to 64 [ 575.625246][T13729] vlan4: entered promiscuous mode [ 575.637223][T13183] usb 5-1: config 7 interface 9 altsetting 3 endpoint 0xE has invalid maxpacket 512, setting to 64 [ 575.648668][T13183] usb 5-1: config 7 interface 9 altsetting 3 has an endpoint descriptor with address 0x45, changing to 0x5 [ 575.660484][T13183] usb 5-1: config 7 interface 9 altsetting 3 has a duplicate endpoint with address 0xA, skipping [ 575.662646][T13729] vlan4: entered allmulticast mode [ 575.671542][T13183] usb 5-1: config 7 interface 9 altsetting 3 has an invalid descriptor for endpoint zero, skipping [ 575.717239][T13183] usb 5-1: config 7 interface 9 altsetting 3 has an invalid descriptor for endpoint zero, skipping [ 575.738815][T13183] usb 5-1: config 7 interface 209 altsetting 6 endpoint 0xD has invalid maxpacket 512, setting to 64 [ 575.763049][T13183] usb 5-1: config 7 interface 209 altsetting 6 bulk endpoint 0xC has invalid maxpacket 1023 [ 575.797412][T13183] usb 5-1: config 7 interface 209 altsetting 6 has 3 endpoint descriptors, different from the interface descriptor's value: 5 [ 575.837535][T13183] usb 5-1: config 7 interface 247 has no altsetting 0 [ 575.854703][T13183] usb 5-1: config 7 interface 9 has no altsetting 0 [ 575.870106][T13183] usb 5-1: config 7 interface 209 has no altsetting 0 [ 575.884430][T13183] usb 5-1: New USB device found, idVendor=305a, idProduct=1406, bcdDevice=56.c4 [ 575.894118][T13183] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 575.902840][T13183] usb 5-1: Product: syz [ 575.908334][T13183] usb 5-1: Manufacturer: ê¬îº¡ãˆŒæ¥šâ²í˜†â¼£è°³î²¢à´¬ã§»å®¹à¥±æ°¿æŠ©é˜²è™ æ§“æ±¾â«êŒ´ê‡‡ëƒï–’íˆå£©ç²¥ê¥©ㅫ㡳酻邞㌂ꋴ动ꚕ㮌ä³å·”î…«å™­ê‰ï®‘êŒ¥æ¥»ë‹ƒï‚œã°ºè™˜ê¤ [ 575.927576][T13183] usb 5-1: SerialNumber: syz [ 576.179723][T13183] option 5-1:7.247: GSM modem (1-port) converter detected [ 576.307743][T13183] usb 5-1: USB disconnect, device number 88 [ 576.342190][T13183] option 5-1:7.247: device disconnected [ 577.554349][T13744] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2312'. [ 577.583000][T13744] input: syz0 as /devices/virtual/input/input76 [ 578.573130][T13774] netlink: 'syz.4.2323': attribute type 13 has an invalid length. [ 578.583893][T13774] netlink: 'syz.4.2323': attribute type 17 has an invalid length. [ 578.678669][T13779] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2324'. [ 578.899080][T13783] IPVS: set_ctl: invalid protocol: 120 255.255.255.252:0 [ 578.909430][T13783] IPVS: set_ctl: invalid protocol: 10 0.0.0.0:65281 [ 578.917379][T13783] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 578.962727][T13789] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2328'. [ 579.008321][T13789] syz_tun (unregistering): left allmulticast mode [ 579.176816][T13794] netlink: 'syz.1.2330': attribute type 8 has an invalid length. [ 579.659538][ T46] usb 2-1: new high-speed USB device number 117 using dummy_hcd [ 579.817358][ T46] usb 2-1: Using ep0 maxpacket: 8 [ 579.837807][ T46] usb 2-1: unable to get BOS descriptor or descriptor too short [ 579.863961][ T46] usb 2-1: config 4 interface 0 has no altsetting 0 [ 579.881851][ T46] usb 2-1: string descriptor 0 read error: -22 [ 579.891030][ T46] usb 2-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 579.903017][ T46] usb 2-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 579.930717][ T46] usb 2-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 579.949192][ T46] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 579.974512][ T46] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 579.994008][ T46] usb 2-1: media controller created [ 580.025626][T13810] netlink: 'syz.4.2336': attribute type 4 has an invalid length. [ 580.038726][ T46] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 580.057372][T13810] netlink: 17 bytes leftover after parsing attributes in process `syz.4.2336'. [ 580.131559][ T46] zl10353_read_register: readreg error (reg=127, ret==0) [ 580.167362][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 580.220031][ T46] usb 2-1: USB disconnect, device number 117 [ 580.313483][T13808] FAULT_INJECTION: forcing a failure. [ 580.313483][T13808] name failslab, interval 1, probability 0, space 0, times 0 [ 580.329955][T13808] CPU: 0 UID: 0 PID: 13808 Comm: syz.5.2335 Tainted: G L syzkaller #0 PREEMPT(full) [ 580.329985][T13808] Tainted: [L]=SOFTLOCKUP [ 580.329992][T13808] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 580.330003][T13808] Call Trace: [ 580.330010][T13808] [ 580.330019][T13808] dump_stack_lvl+0xe8/0x150 [ 580.330046][T13808] should_fail_ex+0x412/0x560 [ 580.330077][T13808] should_failslab+0xa8/0x100 [ 580.330106][T13808] __kmalloc_noprof+0xe8/0x760 [ 580.330133][T13808] ? tomoyo_encode+0x28b/0x550 [ 580.330165][T13808] tomoyo_encode+0x28b/0x550 [ 580.330195][T13808] tomoyo_realpath_from_path+0x58d/0x5d0 [ 580.330232][T13808] ? tomoyo_path_number_perm+0x219/0x630 [ 580.330254][T13808] tomoyo_path_number_perm+0x246/0x630 [ 580.330278][T13808] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 580.330299][T13808] ? __lock_acquire+0x6b5/0x2cf0 [ 580.330336][T13808] ? chmod_common+0x191/0x4a0 [ 580.330371][T13808] ? chmod_common+0x191/0x4a0 [ 580.330389][T13808] ? down_write_killable+0x180/0x240 [ 580.330420][T13808] ? __pfx_down_write_killable+0x10/0x10 [ 580.330454][T13808] security_path_chmod+0x132/0x330 [ 580.330482][T13808] chmod_common+0x1b2/0x4a0 [ 580.330514][T13808] ? __pfx_chmod_common+0x10/0x10 [ 580.330543][T13808] ? strncpy_from_user+0x150/0x2b0 [ 580.330569][T13808] ? do_getname+0x151/0x250 [ 580.330592][T13808] do_fchmodat+0x12d/0x230 [ 580.330620][T13808] ? __pfx_do_fchmodat+0x10/0x10 [ 580.330647][T13808] ? asm_int80_emulation+0x1a/0x20 [ 580.330672][T13808] __ia32_sys_fchmodat+0x7d/0x90 [ 580.330694][T13808] do_int80_emulation+0x181/0x530 [ 580.330718][T13808] ? trace_irq_disable+0x3b/0x140 [ 580.330744][T13808] ? asm_int80_emulation+0x1a/0x20 [ 580.330761][T13808] ? clear_bhb_loop+0x40/0x90 [ 580.330779][T13808] ? clear_bhb_loop+0x40/0x90 [ 580.330801][T13808] asm_int80_emulation+0x1a/0x20 [ 580.330825][T13808] RIP: 0023:0xf7fe901c [ 580.330842][T13808] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 580.330857][T13808] RSP: 002b:00000000f54a650c EFLAGS: 00000206 ORIG_RAX: 0000000000000132 [ 580.330876][T13808] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000080000000 [ 580.330889][T13808] RDX: 00000000fffffffb RSI: 0000000000000000 RDI: 0000000000000000 [ 580.330900][T13808] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 580.330911][T13808] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 580.330922][T13808] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 580.330951][T13808] [ 580.332498][T13808] ERROR: Out of memory at tomoyo_realpath_from_path. [ 580.749633][T13817] FAULT_INJECTION: forcing a failure. [ 580.749633][T13817] name failslab, interval 1, probability 0, space 0, times 0 [ 580.764399][T13817] CPU: 1 UID: 0 PID: 13817 Comm: syz.3.2338 Tainted: G L syzkaller #0 PREEMPT(full) [ 580.764429][T13817] Tainted: [L]=SOFTLOCKUP [ 580.764436][T13817] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 580.764448][T13817] Call Trace: [ 580.764457][T13817] [ 580.764466][T13817] dump_stack_lvl+0xe8/0x150 [ 580.764493][T13817] should_fail_ex+0x412/0x560 [ 580.764531][T13817] should_failslab+0xa8/0x100 [ 580.764561][T13817] __kmalloc_cache_noprof+0x88/0x660 [ 580.764587][T13817] ? __mutex_trylock_common+0x158/0x260 [ 580.764612][T13817] ? ctnetlink_alloc_filter+0xb2/0xae0 [ 580.764640][T13817] ctnetlink_alloc_filter+0xb2/0xae0 [ 580.764665][T13817] ? __pfx_ctnetlink_alloc_filter+0x10/0x10 [ 580.764688][T13817] ? __mutex_lock+0x319/0x1550 [ 580.764712][T13817] ? __pfx___nla_validate_parse+0x10/0x10 [ 580.764746][T13817] ctnetlink_del_conntrack+0x6f9/0x930 [ 580.764769][T13817] ? __pfx_ctnetlink_del_conntrack+0x10/0x10 [ 580.764812][T13817] nfnetlink_rcv_msg+0xc03/0x12c0 [ 580.764834][T13817] ? unwind_get_return_address+0x4d/0x90 [ 580.764859][T13817] ? nfnetlink_rcv_msg+0x22a/0x12c0 [ 580.764900][T13817] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 580.764968][T13817] netlink_rcv_skb+0x232/0x4b0 [ 580.764993][T13817] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 580.765017][T13817] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 580.765048][T13817] ? bpf_lsm_capable+0x9/0x20 [ 580.765066][T13817] ? security_capable+0x7e/0x2c0 [ 580.765095][T13817] nfnetlink_rcv+0x2c0/0x27b0 [ 580.765125][T13817] ? __local_bh_enable_ip+0xd0/0x130 [ 580.765144][T13817] ? lockdep_hardirqs_on+0x7a/0x110 [ 580.765164][T13817] ? __dev_queue_xmit+0x2b6/0x3950 [ 580.765188][T13817] ? __local_bh_enable_ip+0xd0/0x130 [ 580.765205][T13817] ? __dev_queue_xmit+0x2b6/0x3950 [ 580.765227][T13817] ? __dev_queue_xmit+0x1fe5/0x3950 [ 580.765248][T13817] ? __sys_sendmsg+0x183/0x260 [ 580.765276][T13817] ? __dev_queue_xmit+0x2b6/0x3950 [ 580.765303][T13817] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 580.765330][T13817] ? __pfx___dev_queue_xmit+0x10/0x10 [ 580.765359][T13817] ? ref_tracker_free+0x693/0x840 [ 580.765385][T13817] ? __pfx_ref_tracker_free+0x10/0x10 [ 580.765423][T13817] ? skb_clone+0x246/0x3a0 [ 580.765452][T13817] ? __netlink_deliver_tap+0x807/0x850 [ 580.765475][T13817] ? netlink_deliver_tap+0x2e/0x1b0 [ 580.765504][T13817] ? netlink_deliver_tap+0x2e/0x1b0 [ 580.765535][T13817] ? netlink_deliver_tap+0x2e/0x1b0 [ 580.765564][T13817] netlink_unicast+0x75c/0x8e0 [ 580.765594][T13817] netlink_sendmsg+0x813/0xb40 [ 580.765624][T13817] ? __pfx_netlink_sendmsg+0x10/0x10 [ 580.765651][T13817] ? aa_sock_msg_perm+0xf1/0x1b0 [ 580.765674][T13817] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 580.765702][T13817] ____sys_sendmsg+0x972/0x9f0 [ 580.765740][T13817] ? __pfx_____sys_sendmsg+0x10/0x10 [ 580.765768][T13817] ? kstrtoull+0x12f/0x1d0 [ 580.765794][T13817] ___sys_sendmsg+0x2a5/0x360 [ 580.765818][T13817] ? __lock_acquire+0x6b5/0x2cf0 [ 580.765842][T13817] ? __pfx____sys_sendmsg+0x10/0x10 [ 580.765867][T13817] ? get_pid_task+0x20/0x1f0 [ 580.765889][T13817] ? get_pid_task+0x20/0x1f0 [ 580.765910][T13817] ? get_pid_task+0x20/0x1f0 [ 580.765959][T13817] ? __fget_files+0x2a/0x420 [ 580.765981][T13817] ? __fget_files+0x3a0/0x420 [ 580.766013][T13817] __sys_sendmsg+0x183/0x260 [ 580.766042][T13817] ? __pfx___sys_sendmsg+0x10/0x10 [ 580.766088][T13817] __do_fast_syscall_32+0x229/0x6e0 [ 580.766115][T13817] ? do_fast_syscall_32+0x33/0x70 [ 580.766139][T13817] ? lockdep_hardirqs_on+0x7a/0x110 [ 580.766162][T13817] ? asm_int80_emulation+0x1a/0x20 [ 580.766180][T13817] ? do_int80_emulation+0x286/0x530 [ 580.766204][T13817] ? trace_irq_disable+0x3b/0x140 [ 580.766234][T13817] do_fast_syscall_32+0x33/0x70 [ 580.766260][T13817] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 580.766282][T13817] RIP: 0023:0xf7ff701c [ 580.766300][T13817] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 580.766317][T13817] RSP: 002b:00000000f54b650c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 580.766338][T13817] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000400 [ 580.766352][T13817] RDX: 0000000000040000 RSI: 0000000000000000 RDI: 0000000000000000 [ 580.766364][T13817] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 580.766376][T13817] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 580.766388][T13817] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 580.766417][T13817] [ 581.303922][T13820] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2339'. [ 581.355736][T13820] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 581.562530][T13828] netlink: 'syz.4.2342': attribute type 10 has an invalid length. [ 581.574371][T13828] team0: Port device veth0_to_hsr added [ 581.646892][T13831] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2344'. [ 581.669583][T13831] binder: 13830:13831 ioctl c004500a 80000180 returned -22 [ 581.842081][T13834] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2345'. [ 581.852733][T13834] openvswitch: netlink: Flow actions attr not present in new flow. [ 582.687630][ T46] hid-generic 0000:0000:000E.0036: collection stack underflow [ 582.703056][ T46] hid-generic 0000:0000:000E.0036: item 0 0 0 12 parsing failed [ 582.716148][ T46] hid-generic 0000:0000:000E.0036: probe with driver hid-generic failed with error -22 [ 583.217654][ T46] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 583.357322][ T46] usb 6-1: device descriptor read/64, error -71 [ 583.397380][ T5628] usb 5-1: new high-speed USB device number 89 using dummy_hcd [ 583.551700][T13871] netlink: 'syz.1.2357': attribute type 10 has an invalid length. [ 583.559873][ T5628] usb 5-1: Using ep0 maxpacket: 8 [ 583.568373][ T5628] usb 5-1: config 0 has an invalid interface number: 31 but max is 0 [ 583.587415][T13871] syz_tun: entered promiscuous mode [ 583.592792][ T5628] usb 5-1: config 0 has no interface number 0 [ 583.607534][ T5628] usb 5-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 583.608605][ T46] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 583.618066][ T5628] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 583.635709][T13871] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 583.644882][ T5628] usb 5-1: Product: syz [ 583.652237][ T5628] usb 5-1: Manufacturer: syz [ 583.665315][ T5628] usb 5-1: SerialNumber: syz [ 583.676257][ T5628] usb 5-1: config 0 descriptor?? [ 583.789337][ T46] usb 6-1: device descriptor read/64, error -71 [ 583.918416][ T46] usb usb6-port1: attempt power cycle [ 584.277651][ T46] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 584.349430][ T46] usb 6-1: device descriptor read/8, error -71 [ 584.618220][ T46] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 584.642702][T13900] netlink: 'syz.1.2359': attribute type 13 has an invalid length. [ 584.659953][ T46] usb 6-1: device descriptor read/8, error -71 [ 584.672477][T13900] netlink: 'syz.1.2359': attribute type 17 has an invalid length. [ 584.711598][T13900] syz_tun: left promiscuous mode [ 584.798118][ T46] usb usb6-port1: unable to enumerate USB device [ 584.879890][ T1132] bridge2: port 1(veth19) entered blocking state [ 584.886350][ T1132] bridge2: port 1(veth19) entered forwarding state [ 585.099939][ T5628] uvcvideo 5-1:0.31: Found UVC 0.04 device syz (046d:08c3) [ 585.124597][ T5628] uvcvideo 5-1:0.31: No valid video chain found. [ 585.151417][ T5628] usb 5-1: USB disconnect, device number 89 [ 585.246860][T13908] xt_HMARK: proto mask must be zero with L3 mode [ 585.282351][T13909] bond3: (slave bond_slave_1): Device is not our slave [ 585.289989][T13909] bond3: option active_slave: invalid value (bond_slave_1) [ 585.300910][T13909] bond3 (unregistering): Released all slaves [ 585.496431][T13916] netlink: 'syz.3.2364': attribute type 29 has an invalid length. [ 586.104776][T13930] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2368'. [ 586.210342][T13933] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2370'. [ 586.224682][T13919] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2365'. [ 586.237809][T13931] netlink: 'syz.3.2366': attribute type 8 has an invalid length. [ 586.299488][T13920] netlink: 'syz.4.2365': attribute type 6 has an invalid length. [ 586.407523][ T5628] usb 3-1: new high-speed USB device number 90 using dummy_hcd [ 586.635441][ T5628] usb 3-1: Using ep0 maxpacket: 32 [ 586.668645][ T5628] usb 3-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 586.719284][ T5628] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 586.762301][ T5628] usb 3-1: Product: syz [ 586.779965][ T5628] usb 3-1: Manufacturer: syz [ 586.779988][ T5628] usb 3-1: SerialNumber: syz [ 586.791299][ T5628] usb 3-1: config 0 descriptor?? [ 586.803061][ T5628] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 586.803152][ T5628] dvb-usb: bulk message failed: -22 (4/0) [ 586.803169][ T5628] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 586.803291][ T5628] dvb-usb: bulk message failed: -22 (5/0) [ 586.803306][ T5628] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 586.848079][ T5628] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 586.850784][ T5628] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 586.850838][ T5628] usb 3-1: media controller created [ 586.925313][ T5628] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 587.000857][ T5628] usb 3-1: selecting invalid altsetting 3 [ 587.000881][ T5628] ttusb2: set interface to alts=3 failed [ 587.007976][T13930] ttusb2: more than 2 i2c messages at a time is not handled yet. TODO. [ 587.008027][T13930] dvb-usb: bulk message failed: -22 (7/0) [ 587.008042][T13930] ttusb2: there might have been an error during control message transfer. (rlen = 3, was 0) [ 587.008083][T13930] ttusb2: i2c transfer failed. [ 587.012108][T13930] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2368'. [ 587.028143][T13945] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 587.042207][ T10] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 587.112147][ T5628] DVB: Unable to find symbol tda10086_attach() [ 587.112164][ T5628] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 587.114950][ T5628] dvb-usb: bulk message failed: -22 (4/0) [ 587.114977][ T5628] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 587.115083][ T5628] dvb-usb: bulk message failed: -22 (5/0) [ 587.115099][ T5628] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 587.115163][ T5628] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 587.199659][ T5628] usb 3-1: USB disconnect, device number 90 [ 587.220396][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 587.232439][ T10] usb 4-1: unable to get BOS descriptor or descriptor too short [ 587.236071][ T10] usb 4-1: config 4 interface 0 has no altsetting 0 [ 587.282173][ T10] usb 4-1: string descriptor 0 read error: -22 [ 587.282267][ T10] usb 4-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 587.282291][ T10] usb 4-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 587.288785][ T5628] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 587.334544][ T10] usb 4-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 587.348447][ T10] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 587.348778][ T10] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 587.348824][ T10] usb 4-1: media controller created [ 587.378905][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 587.465908][T13957] syzkaller0: entered promiscuous mode [ 587.465934][T13957] syzkaller0: entered allmulticast mode [ 588.492899][ T10] zl10353_read_register: readreg error (reg=127, ret==0) [ 588.874194][ T10] usb 4-1: USB disconnect, device number 61 [ 592.005884][T14052] loop6: detected capacity change from 0 to 7 [ 592.021244][T14052] buffer_io_error: 11 callbacks suppressed [ 592.021262][T14052] Buffer I/O error on dev loop6, logical block 0, async page read [ 592.055958][T14052] Buffer I/O error on dev loop6, logical block 0, async page read [ 592.065139][T14052] Buffer I/O error on dev loop6, logical block 0, async page read [ 592.074966][T14052] Buffer I/O error on dev loop6, logical block 0, async page read [ 592.086182][T14052] Buffer I/O error on dev loop6, logical block 0, async page read [ 592.095949][T14052] Buffer I/O error on dev loop6, logical block 0, async page read [ 592.104526][T14052] Buffer I/O error on dev loop6, logical block 0, async page read [ 592.112899][T14052] ldm_validate_partition_table(): Disk read failed. [ 592.126171][T14056] kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 592.147458][T14052] Buffer I/O error on dev loop6, logical block 0, async page read [ 592.149073][T14056] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 592.163699][T14052] Buffer I/O error on dev loop6, logical block 0, async page read [ 592.164335][T14056] kvm: requested 41904 ns i8254 timer period limited to 200000 ns [ 592.181847][T14056] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 592.187746][T14052] Buffer I/O error on dev loop6, logical block 0, async page read [ 592.192575][T14056] kvm: requested 108952 ns i8254 timer period limited to 200000 ns [ 592.205938][T14056] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 592.214057][T14056] kvm: requested 3352 ns i8254 timer period limited to 200000 ns [ 592.219650][T14052] Dev loop6: unable to read RDB block 0 [ 592.235928][T14056] kvm: requested 2514 ns i8254 timer period limited to 200000 ns [ 592.239752][T14052] loop6: unable to read partition table [ 592.250241][T14056] kvm: requested 53638 ns i8254 timer period limited to 200000 ns [ 592.250428][T14056] kvm: requested 170133 ns i8254 timer period limited to 200000 ns [ 592.280390][T14052] loop6: partition table beyond EOD, truncated [ 592.296969][T14052] loop_reread_partitions: partition scan of loop6 (úùƒå¡™‰ü¾SêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆŠ5) failed (rc=-5) [ 593.205385][T14091] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 594.342322][T14139] netlink: 'syz.1.2450': attribute type 34 has an invalid length. [ 595.652399][T14191] loop2: detected capacity change from 0 to 7 [ 595.660859][T14191] loop2: [ 595.665798][T14191] loop2: partition table partially beyond EOD, truncated [ 596.168212][T11380] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 596.927506][T14231] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2487'. [ 596.953973][T14229] syzkaller0: entered promiscuous mode [ 596.961349][T14229] syzkaller0: entered allmulticast mode [ 596.973902][T14231] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 597.003727][T14231] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 600.680518][T14249] bridge0: entered allmulticast mode [ 600.687992][T14252] bridge0: port 3(erspan0) entered disabled state [ 600.694637][T14252] bridge0: port 2(bridge_slave_1) entered disabled state [ 600.702125][T14252] bridge0: port 1(bridge_slave_0) entered disabled state [ 601.412192][T14333] netlink: 'syz.1.2530': attribute type 10 has an invalid length. [ 601.421562][T14333] syz_tun: entered promiscuous mode [ 601.449524][T14334] usb usb8: usbfs: process 14334 (syz.2.2529) did not claim interface 0 before use [ 602.708088][ T5747] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 602.827205][T13183] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 602.867115][ T5747] usb 3-1: Using ep0 maxpacket: 16 [ 602.884162][ T5747] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 64 [ 602.910805][ T5747] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 16 [ 602.936329][ T5747] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 602.956482][ T5747] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 602.975015][ T5747] usb 3-1: Product: syz [ 602.983038][ T5747] usb 3-1: Manufacturer: ጇ꧂껨∖é³î‡Ô‹â–ªë«±àª¹â°Žæ»á›êœ¡ì•Žî„㵻뽔࣬ѷ抬鑪ᥖ㖃厺腳蹩箊ऀ츖抡謁ꌞס쌚䂠᨜앜â‘éµéŸ·ì›‘ì—딕쉚즹䚂篷ꚶ䞄椃⢨৸鸄ӱ榓é©ì¥ï¸ŽÓ«ë¶¤ë²‰ì™ˆâª¦á®”ä‰ì¬‰æ°žèˆ§ì‡–䫋ꡳ鷋닥舊ꯎ˱⭔⽾ꌕ鄷糃ì˜ï¼·ì›“诞頩소㴞⡠î­è«ä‰¶çµ–謉徸﷎엿胘ç´å—訰ç»ã¾Ž [ 603.037236][ T5747] usb 3-1: SerialNumber: syz [ 603.062165][T13183] usb 6-1: New USB device found, idVendor=08fd, idProduct=0002, bcdDevice=ca.fd [ 603.082679][T13183] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 603.101068][T13183] usb 6-1: Product: syz [ 603.110419][T13183] usb 6-1: Manufacturer: syz [ 603.120998][T13183] usb 6-1: SerialNumber: syz [ 603.141361][T13183] usb 6-1: config 0 descriptor?? [ 603.199816][ T5639] Bluetooth: hci5: urb ffff88802aa3a600 submission failed (2) [ 603.465831][ T5747] cdc_ncm 3-1:1.0: bind() failure [ 603.498356][ T5747] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 603.522843][ T5747] cdc_ncm 3-1:1.1: bind() failure [ 603.557428][ T5747] usb 3-1: USB disconnect, device number 91 [ 603.704372][T14372] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2537'. [ 603.885170][T14379] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2540'. [ 604.207155][ T5747] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 604.329706][T14392] usb usb8: usbfs: process 14392 (syz.2.2544) did not claim interface 0 before use [ 604.357483][ T5747] usb 4-1: Using ep0 maxpacket: 16 [ 604.365328][ T5747] usb 4-1: unable to get BOS descriptor or descriptor too short [ 604.375069][ T5747] usb 4-1: config 6 has an invalid interface number: 150 but max is 0 [ 604.383433][ T5747] usb 4-1: config 6 has no interface number 0 [ 604.389811][ T5747] usb 4-1: config 6 interface 150 altsetting 6 endpoint 0x6 has an invalid bInterval 240, changing to 11 [ 604.401099][ T5747] usb 4-1: config 6 interface 150 has no altsetting 0 [ 604.410048][ T5747] usb 4-1: New USB device found, idVendor=0b49, idProduct=064f, bcdDevice=7d.6f [ 604.419282][ T5747] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 604.427383][ T5747] usb 4-1: Product: syz [ 604.431530][ T5747] usb 4-1: Manufacturer: syz [ 604.436110][ T5747] usb 4-1: SerialNumber: syz [ 604.648037][T14379] loop9: detected capacity change from 0 to 4096 [ 604.722761][T14398] netlink: 'syz.1.2545': attribute type 10 has an invalid length. [ 604.926669][ T5747] usb 4-1: USB disconnect, device number 62 [ 605.779276][T13183] usb 6-1: USB disconnect, device number 22 [ 605.938843][ T5639] Bluetooth: hci0: command 0x0406 tx timeout [ 606.274418][T14438] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2550'. [ 606.293574][T14438] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2550'. [ 606.316421][T14438] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 606.708300][T14450] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2553'. [ 606.711649][T14443] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2551'. [ 606.767949][T14447] could not allocate digest TFM handle nhpoly1305 [ 606.821392][T14446] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2551'. [ 607.847228][T14426] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 607.847558][ T5622] Bluetooth: hci1: command 0x0c1a tx timeout [ 608.743118][T14426] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 608.749680][T14426] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 608.755772][T14426] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 608.761956][T14426] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 608.768003][T14426] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 608.938423][T14470] netlink: 'syz.1.2558': attribute type 10 has an invalid length. [ 609.037148][ T46] usb 5-1: new high-speed USB device number 90 using dummy_hcd [ 609.078714][ T5628] usb 3-1: new high-speed USB device number 92 using dummy_hcd [ 609.208983][ T46] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 609.228107][ T46] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 609.240545][ T46] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 609.247450][ T5628] usb 3-1: Using ep0 maxpacket: 8 [ 609.260817][ T46] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 609.278909][ T46] usb 5-1: SerialNumber: syz [ 609.281941][ T5628] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 609.332003][ T46] usb 5-1: can't set config #1, error -71 [ 609.353683][ T46] usb 5-1: USB disconnect, device number 90 [ 609.370467][ T5628] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 609.454008][ T5628] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 8 [ 609.519784][ T5628] usb 3-1: New USB device found, idVendor=056e, idProduct=00fe, bcdDevice= 0.00 [ 609.544121][ T5628] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 609.576218][ T5628] usb 3-1: config 0 descriptor?? [ 609.605372][T14495] FAULT_INJECTION: forcing a failure. [ 609.605372][T14495] name failslab, interval 1, probability 0, space 0, times 0 [ 609.607243][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 609.654175][T14495] CPU: 1 UID: 0 PID: 14495 Comm: syz.4.2563 Tainted: G L syzkaller #0 PREEMPT(full) [ 609.654206][T14495] Tainted: [L]=SOFTLOCKUP [ 609.654213][T14495] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 609.654225][T14495] Call Trace: [ 609.654233][T14495] [ 609.654241][T14495] dump_stack_lvl+0xe8/0x150 [ 609.654269][T14495] should_fail_ex+0x412/0x560 [ 609.654297][T14495] should_failslab+0xa8/0x100 [ 609.654327][T14495] __kmalloc_noprof+0xe8/0x760 [ 609.654352][T14495] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 609.654383][T14495] tomoyo_realpath_from_path+0xe3/0x5d0 [ 609.654410][T14495] ? tomoyo_domain+0xd7/0x130 [ 609.654444][T14495] ? tomoyo_path_number_perm+0x219/0x630 [ 609.654463][T14495] tomoyo_path_number_perm+0x246/0x630 [ 609.654487][T14495] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 609.654506][T14495] ? __lock_acquire+0x6b5/0x2cf0 [ 609.654561][T14495] ? __fget_files+0x2a/0x420 [ 609.654586][T14495] ? __fget_files+0x3a0/0x420 [ 609.654606][T14495] ? __fget_files+0x2a/0x420 [ 609.654632][T14495] security_file_ioctl_compat+0xc3/0x2a0 [ 609.654655][T14495] __ia32_compat_sys_ioctl+0x139/0x950 [ 609.654685][T14495] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 609.654714][T14495] ? __fget_files+0x3a0/0x420 [ 609.654739][T14495] ? fput+0xa0/0xd0 [ 609.654759][T14495] ? ksys_write+0x242/0x270 [ 609.654793][T14495] __do_fast_syscall_32+0x229/0x6e0 [ 609.654819][T14495] ? do_fast_syscall_32+0x33/0x70 [ 609.654841][T14495] ? lockdep_hardirqs_on+0x7a/0x110 [ 609.654862][T14495] ? asm_int80_emulation+0x1a/0x20 [ 609.654880][T14495] ? do_int80_emulation+0x286/0x530 [ 609.654903][T14495] ? trace_irq_disable+0x3b/0x140 [ 609.654931][T14495] do_fast_syscall_32+0x33/0x70 [ 609.654956][T14495] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 609.654977][T14495] RIP: 0023:0xf7f8501c [ 609.654993][T14495] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 609.655009][T14495] RSP: 002b:00000000f544650c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 609.655029][T14495] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c034564b [ 609.655042][T14495] RDX: 00000000800000c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 609.655053][T14495] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 609.655063][T14495] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 609.655074][T14495] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 609.655101][T14495] [ 609.937376][ T5622] Bluetooth: hci2: command 0x0c1a tx timeout [ 609.969589][T14495] ERROR: Out of memory at tomoyo_realpath_from_path. [ 610.222496][ T5628] usbhid 3-1:0.0: can't add hid device: -71 [ 610.238616][ T5628] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 610.285346][ T5628] usb 3-1: USB disconnect, device number 92 [ 610.817209][ T5622] Bluetooth: hci0: command 0x0406 tx timeout [ 610.823288][ T5639] Bluetooth: hci4: command 0x0c1a tx timeout [ 610.823326][T11276] Bluetooth: hci3: command 0x0c1a tx timeout [ 610.843318][T14520] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2567'. [ 611.216588][T14532] fuse: Bad value for 'fd' [ 611.731311][T14533] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2559'. [ 611.923453][T14534] input: syz0 as /devices/virtual/input/input77 [ 612.807899][T11276] Bluetooth: hci1: command 0x0c1a tx timeout [ 612.814092][T14517] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 612.887173][T11276] Bluetooth: hci0: command 0x0406 tx timeout [ 613.735534][T14517] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 613.742005][T14517] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 613.748262][T14517] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 613.754422][T14517] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 613.881129][T14543] FAULT_INJECTION: forcing a failure. [ 613.881129][T14543] name failslab, interval 1, probability 0, space 0, times 0 [ 613.903379][T14543] CPU: 0 UID: 0 PID: 14543 Comm: syz.3.2575 Tainted: G L syzkaller #0 PREEMPT(full) [ 613.903411][T14543] Tainted: [L]=SOFTLOCKUP [ 613.903418][T14543] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 613.903430][T14543] Call Trace: [ 613.903438][T14543] [ 613.903447][T14543] dump_stack_lvl+0xe8/0x150 [ 613.903474][T14543] should_fail_ex+0x412/0x560 [ 613.903503][T14543] should_failslab+0xa8/0x100 [ 613.903533][T14543] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 613.903560][T14543] ? __alloc_skb+0x1d0/0x7d0 [ 613.903582][T14543] ? __local_bh_enable_ip+0xd0/0x130 [ 613.903607][T14543] __alloc_skb+0x1d0/0x7d0 [ 613.903629][T14543] ? netlink_ack_tlv_len+0x6c/0x210 [ 613.903656][T14543] netlink_ack+0x146/0xa50 [ 613.903678][T14543] ? __pfx_genl_rcv_msg+0x10/0x10 [ 613.903695][T14543] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 613.903715][T14543] ? __pfx_nl80211_post_doit+0x10/0x10 [ 613.903737][T14543] ? __pfx_ref_tracker_free+0x10/0x10 [ 613.903782][T14543] netlink_rcv_skb+0x2b6/0x4b0 [ 613.903808][T14543] ? __pfx_genl_rcv_msg+0x10/0x10 [ 613.903829][T14543] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 613.903866][T14543] ? down_read+0x270/0x2e0 [ 613.903890][T14543] ? genl_rcv+0xd/0x40 [ 613.903910][T14543] genl_rcv+0x28/0x40 [ 613.903926][T14543] netlink_unicast+0x75c/0x8e0 [ 613.903959][T14543] netlink_sendmsg+0x813/0xb40 [ 613.903993][T14543] ? __pfx_netlink_sendmsg+0x10/0x10 [ 613.904020][T14543] ? aa_sock_msg_perm+0xf1/0x1b0 [ 613.904045][T14543] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 613.904073][T14543] ____sys_sendmsg+0x972/0x9f0 [ 613.904110][T14543] ? __pfx_____sys_sendmsg+0x10/0x10 [ 613.904140][T14543] ? kstrtoull+0x12f/0x1d0 [ 613.904168][T14543] ___sys_sendmsg+0x2a5/0x360 [ 613.904192][T14543] ? __lock_acquire+0x6b5/0x2cf0 [ 613.904217][T14543] ? __pfx____sys_sendmsg+0x10/0x10 [ 613.904244][T14543] ? get_pid_task+0x20/0x1f0 [ 613.904273][T14543] ? get_pid_task+0x20/0x1f0 [ 613.904294][T14543] ? get_pid_task+0x20/0x1f0 [ 613.904342][T14543] ? __fget_files+0x2a/0x420 [ 613.904367][T14543] ? __fget_files+0x3a0/0x420 [ 613.904396][T14543] __sys_sendmsg+0x183/0x260 [ 613.904423][T14543] ? __pfx___sys_sendmsg+0x10/0x10 [ 613.904468][T14543] __do_fast_syscall_32+0x229/0x6e0 [ 613.904494][T14543] ? do_fast_syscall_32+0x33/0x70 [ 613.904517][T14543] ? lockdep_hardirqs_on+0x7a/0x110 [ 613.904539][T14543] ? asm_int80_emulation+0x1a/0x20 [ 613.904558][T14543] ? do_int80_emulation+0x286/0x530 [ 613.904581][T14543] ? trace_irq_disable+0x3b/0x140 [ 613.904609][T14543] do_fast_syscall_32+0x33/0x70 [ 613.904634][T14543] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 613.904657][T14543] RIP: 0023:0xf7ff701c [ 613.904676][T14543] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 613.904692][T14543] RSP: 002b:00000000f54b650c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 613.904712][T14543] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000200 [ 613.904725][T14543] RDX: 000000000004c8c4 RSI: 0000000000000000 RDI: 0000000000000000 [ 613.904737][T14543] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 613.904747][T14543] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 613.904758][T14543] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 613.904797][T14543] [ 614.057175][ T46] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 614.357361][ T5628] usb 2-1: new high-speed USB device number 118 using dummy_hcd [ 614.467738][ T46] usb 6-1: Using ep0 maxpacket: 16 [ 614.478191][ T46] usb 6-1: config 0 has an invalid descriptor of length 55, skipping remainder of the config [ 614.494481][ T46] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 614.507089][ T46] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 614.507382][ T5628] usb 2-1: Using ep0 maxpacket: 16 [ 614.518148][ T46] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 614.544251][ T46] usb 6-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 614.546005][ T5628] usb 2-1: config 1 has an invalid interface number: 105 but max is 0 [ 614.553544][ T46] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 614.572645][ T5628] usb 2-1: config 1 has no interface number 0 [ 614.578920][ T5628] usb 2-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 614.589240][ T46] usb 6-1: Product: syz [ 614.594565][ T46] usb 6-1: Manufacturer: syz [ 614.599803][ T46] usb 6-1: SerialNumber: syz [ 614.606337][ T46] usb 6-1: config 0 descriptor?? [ 614.617352][ T5628] usb 2-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 614.632401][ T5628] usb 2-1: config 1 interface 105 has no altsetting 0 [ 614.643544][ T5628] usb 2-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 614.655096][ T5628] usb 2-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 614.666194][ T5628] usb 2-1: Product: syz [ 614.670851][ T5628] usb 2-1: Manufacturer: syz [ 614.676097][ T5628] usb 2-1: SerialNumber: syz [ 614.714091][T14545] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 614.721949][T14545] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 614.850861][T14541] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 614.875620][T14541] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 614.891541][T11276] Bluetooth: hci2: command 0x0c1a tx timeout [ 614.891868][ T46] appledisplay 6-1:0.0: Error while getting initial brightness: -110 [ 614.903292][T14541] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 614.915649][T14541] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 614.930972][T14541] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 614.939939][ T46] appledisplay 6-1:0.0: probe with driver appledisplay failed with error -110 [ 614.943949][T14545] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2576'. [ 614.973081][T14541] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 614.973963][ T5628] aqc111 2-1:1.105: probe with driver aqc111 failed with error -71 [ 615.022944][T14541] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 615.044100][T14541] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 615.054808][ T5628] usb 2-1: USB disconnect, device number 118 [ 615.202273][ T5747] usb 6-1: USB disconnect, device number 23 [ 615.464692][T14562] fuse: Bad value for 'user_id' [ 615.472283][T14562] fuse: Bad value for 'user_id' [ 615.507205][ T5628] usb 3-1: new high-speed USB device number 93 using dummy_hcd [ 615.658835][ T5628] usb 3-1: Using ep0 maxpacket: 16 [ 615.673065][ T5628] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 64 [ 615.700256][ T5628] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 16 [ 615.723286][ T5628] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 615.736631][ T5628] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 615.745135][ T5628] usb 3-1: Product: syz [ 615.750848][ T5628] usb 3-1: Manufacturer: ጇ꧂껨∖é³î‡Ô‹â–ªë«±àª¹â°Žæ»á›êœ¡ì•Žî„㵻뽔࣬ѷ抬鑪ᥖ㖃厺腳蹩箊ऀ츖抡謁ꌞס쌚䂠᨜앜â‘éµéŸ·ì›‘ì—딕쉚즹䚂篷ꚶ䞄椃⢨৸鸄ӱ榓é©ì¥ï¸ŽÓ«ë¶¤ë²‰ì™ˆâª¦á®”ä‰ì¬‰æ°žèˆ§ì‡–䫋ꡳ鷋닥舊ꯎ˱⭔⽾ꌕ鄷糃ì˜ï¼·ì›“诞頩소㴞⡠î­è«ä‰¶çµ–謉徸﷎엿胘ç´å—訰ç»ã¾Ž [ 615.786698][ T5628] usb 3-1: SerialNumber: syz [ 615.792434][T11276] Bluetooth: hci0: command 0x0406 tx timeout [ 615.792476][ T5622] Bluetooth: hci4: command 0x0c1a tx timeout [ 615.798706][T11276] Bluetooth: hci3: command 0x0c1a tx timeout [ 616.241198][ T5628] cdc_ncm 3-1:1.0: bind() failure [ 616.261588][ T5628] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 616.288544][ T5628] cdc_ncm 3-1:1.1: bind() failure [ 616.463029][ T5628] usb 3-1: USB disconnect, device number 93 [ 617.757692][T14571] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2584'. [ 617.781386][T14571] input: syz0 as /devices/virtual/input/input78 [ 618.059625][T14599] FAULT_INJECTION: forcing a failure. [ 618.059625][T14599] name failslab, interval 1, probability 0, space 0, times 0 [ 618.072620][T14599] CPU: 1 UID: 0 PID: 14599 Comm: syz.1.2590 Tainted: G L syzkaller #0 PREEMPT(full) [ 618.072638][T14599] Tainted: [L]=SOFTLOCKUP [ 618.072642][T14599] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 618.072648][T14599] Call Trace: [ 618.072654][T14599] [ 618.072659][T14599] dump_stack_lvl+0xe8/0x150 [ 618.072676][T14599] should_fail_ex+0x412/0x560 [ 618.072693][T14599] should_failslab+0xa8/0x100 [ 618.072710][T14599] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 618.072726][T14599] ? __alloc_skb+0x1d0/0x7d0 [ 618.072738][T14599] ? __local_bh_enable_ip+0xd0/0x130 [ 618.072752][T14599] __alloc_skb+0x1d0/0x7d0 [ 618.072767][T14599] nf_tables_rule_notify+0xc0/0x570 [ 618.072784][T14599] ? nft_pernet+0x23/0x240 [ 618.072799][T14599] nf_tables_commit+0x1c96/0xa7b0 [ 618.072824][T14599] ? __pfx_nf_tables_commit+0x10/0x10 [ 618.072835][T14599] ? __free_frozen_pages+0x749/0xd30 [ 618.072853][T14599] ? nf_tables_newrule+0x2590/0x28b0 [ 618.072870][T14599] ? __pfx_nf_tables_newrule+0x10/0x10 [ 618.072879][T14599] ? nfnl_pernet+0x23/0x240 [ 618.072902][T14599] nfnetlink_rcv+0x1c19/0x27b0 [ 618.072930][T14599] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 618.072950][T14599] ? ref_tracker_free+0x693/0x840 [ 618.072977][T14599] ? __netlink_deliver_tap+0x807/0x850 [ 618.072996][T14599] ? netlink_deliver_tap+0x2e/0x1b0 [ 618.073009][T14599] ? netlink_deliver_tap+0x2e/0x1b0 [ 618.073024][T14599] netlink_unicast+0x75c/0x8e0 [ 618.073041][T14599] netlink_sendmsg+0x813/0xb40 [ 618.073059][T14599] ? __pfx_netlink_sendmsg+0x10/0x10 [ 618.073074][T14599] ? aa_sock_msg_perm+0xf1/0x1b0 [ 618.073089][T14599] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 618.073105][T14599] ____sys_sendmsg+0x972/0x9f0 [ 618.073123][T14599] ? __pfx_____sys_sendmsg+0x10/0x10 [ 618.073139][T14599] ? kstrtoull+0x12f/0x1d0 [ 618.073154][T14599] ___sys_sendmsg+0x2a5/0x360 [ 618.073167][T14599] ? __lock_acquire+0x6b5/0x2cf0 [ 618.073180][T14599] ? __pfx____sys_sendmsg+0x10/0x10 [ 618.073195][T14599] ? get_pid_task+0x20/0x1f0 [ 618.073207][T14599] ? get_pid_task+0x20/0x1f0 [ 618.073219][T14599] ? get_pid_task+0x20/0x1f0 [ 618.073247][T14599] ? __fget_files+0x2a/0x420 [ 618.073259][T14599] ? __fget_files+0x3a0/0x420 [ 618.073276][T14599] __sys_sendmsg+0x183/0x260 [ 618.073290][T14599] ? __pfx___sys_sendmsg+0x10/0x10 [ 618.073315][T14599] __do_fast_syscall_32+0x229/0x6e0 [ 618.073330][T14599] ? do_fast_syscall_32+0x33/0x70 [ 618.073342][T14599] ? lockdep_hardirqs_on+0x7a/0x110 [ 618.073355][T14599] ? asm_int80_emulation+0x1a/0x20 [ 618.073365][T14599] ? do_int80_emulation+0x286/0x530 [ 618.073378][T14599] ? trace_irq_disable+0x3b/0x140 [ 618.073395][T14599] do_fast_syscall_32+0x33/0x70 [ 618.073409][T14599] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 618.073421][T14599] RIP: 0023:0xf7f5301c [ 618.073432][T14599] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 618.073441][T14599] RSP: 002b:00000000f541650c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 618.073455][T14599] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000000 [ 618.073462][T14599] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 618.073471][T14599] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 618.073477][T14599] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 618.073483][T14599] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 618.073498][T14599] [ 618.417727][T14579] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 618.425314][T11276] Bluetooth: hci1: command 0x0c1a tx timeout [ 619.122979][T14579] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 619.129347][T14579] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 619.135469][T14579] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 619.141827][T14579] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 619.207298][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 619.397392][T13183] usb 5-1: new high-speed USB device number 91 using dummy_hcd [ 619.407444][ T10] usb 2-1: new full-speed USB device number 119 using dummy_hcd [ 619.567414][T13183] usb 5-1: Using ep0 maxpacket: 16 [ 619.569322][ T10] usb 2-1: unable to get BOS descriptor or descriptor too short [ 619.581631][ T10] usb 2-1: not running at top speed; connect to a high speed hub [ 619.591915][T13183] usb 5-1: device descriptor read/all, error -71 [ 619.601277][ T10] usb 2-1: config 38 has an invalid interface number: 233 but max is 0 [ 619.611316][ T10] usb 2-1: config 38 has no interface number 0 [ 619.630082][ T10] usb 2-1: config 38 interface 233 has no altsetting 0 [ 619.639889][ T10] usb 2-1: New USB device found, idVendor=10b8, idProduct=1f9c, bcdDevice=cf.68 [ 619.652131][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 619.660535][ T10] usb 2-1: Product: syz [ 619.664861][ T10] usb 2-1: Manufacturer: syz [ 619.673213][ T10] usb 2-1: SerialNumber: syz [ 619.827382][ T46] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 619.998647][ T46] usb 6-1: Using ep0 maxpacket: 8 [ 620.019174][ T46] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 620.036415][ T46] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 620.057145][ T46] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 8 [ 620.068892][T14625] vxcan1: tx drop: invalid sa for name 0x0000000000000005 [ 620.097361][ T46] usb 6-1: New USB device found, idVendor=056e, idProduct=00fe, bcdDevice= 0.00 [ 620.112342][ T10] dvb-usb: found a 'DiBcom TFE8096P reference design' in warm state. [ 620.116747][ T46] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 620.152061][ T46] usb 6-1: config 0 descriptor?? [ 620.165982][ T10] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 620.192945][ T10] dvbdev: DVB: registering new adapter (DiBcom TFE8096P reference design) [ 620.213669][ T10] usb 2-1: media controller created [ 620.220225][T14628] netlink: 'syz.2.2601': attribute type 8 has an invalid length. [ 620.244470][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 620.355574][ T10] DVB: Unable to find symbol dib8000_attach() [ 620.365073][ T10] dvb-usb: no frontend was attached by 'DiBcom TFE8096P reference design' [ 620.478521][ T10] rc_core: IR keymap rc-dib0700-rc5 not found [ 620.487663][ T5622] Bluetooth: hci2: command 0x0c1a tx timeout [ 620.501026][ T10] Registered IR keymap rc-empty [ 620.510990][ T10] dvb-usb: could not initialize remote control. [ 620.518715][ T10] dvb-usb: DiBcom TFE8096P reference design successfully initialized and connected. [ 620.596610][ T46] usbhid 6-1:0.0: can't add hid device: -71 [ 620.613631][ T46] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 620.629389][ T46] usb 6-1: USB disconnect, device number 24 [ 621.207140][T11276] Bluetooth: hci4: command 0x0c1a tx timeout [ 621.213333][ T5639] Bluetooth: hci3: command 0x0c1a tx timeout [ 621.220558][ T5622] Bluetooth: hci0: command 0x0406 tx timeout [ 621.761702][ T46] usb 2-1: USB disconnect, device number 119 [ 621.785530][ T46] dvb-usb: DiBcom TFE8096P reference design successfully deinitialized and disconnected. [ 621.910868][T14653] FAULT_INJECTION: forcing a failure. [ 621.910868][T14653] name failslab, interval 1, probability 0, space 0, times 0 [ 621.925304][T14653] CPU: 1 UID: 0 PID: 14653 Comm: syz.1.2608 Tainted: G L syzkaller #0 PREEMPT(full) [ 621.925323][T14653] Tainted: [L]=SOFTLOCKUP [ 621.925327][T14653] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 621.925334][T14653] Call Trace: [ 621.925340][T14653] [ 621.925346][T14653] dump_stack_lvl+0xe8/0x150 [ 621.925363][T14653] should_fail_ex+0x412/0x560 [ 621.925378][T14653] ? __d_alloc+0x37/0x6f0 [ 621.925393][T14653] should_failslab+0xa8/0x100 [ 621.925410][T14653] kmem_cache_alloc_lru_noprof+0x87/0x640 [ 621.925428][T14653] __d_alloc+0x37/0x6f0 [ 621.925445][T14653] d_alloc_parallel+0xe6/0x1610 [ 621.925467][T14653] ? __d_lookup+0x66/0x780 [ 621.925483][T14653] ? __d_lookup+0x66/0x780 [ 621.925499][T14653] ? __d_lookup+0x66/0x780 [ 621.925515][T14653] ? __pfx_d_alloc_parallel+0x10/0x10 [ 621.925531][T14653] ? __raw_spin_lock_init+0x45/0x100 [ 621.925548][T14653] ? __init_waitqueue_head+0xa9/0x150 [ 621.925566][T14653] proc_fill_cache+0x17f/0x440 [ 621.925578][T14653] ? __pfx_proc_fd_instantiate+0x10/0x10 [ 621.925591][T14653] ? __pfx_proc_fill_cache+0x10/0x10 [ 621.925599][T14653] ? snprintf+0xe8/0x140 [ 621.925614][T14653] ? fget_task_next+0x572/0x5f0 [ 621.925631][T14653] proc_readfd_common+0x3ce/0x5c0 [ 621.925643][T14653] ? iterate_dir+0x292/0x570 [ 621.925659][T14653] ? __pfx_proc_fd_instantiate+0x10/0x10 [ 621.925671][T14653] ? __pfx_proc_readfd_common+0x10/0x10 [ 621.925686][T14653] ? iterate_dir+0x292/0x570 [ 621.925700][T14653] ? down_read_killable+0x1bb/0x340 [ 621.925718][T14653] iterate_dir+0x399/0x570 [ 621.925736][T14653] __se_sys_getdents64+0xf1/0x280 [ 621.925748][T14653] ? __pfx___se_sys_getdents64+0x10/0x10 [ 621.925757][T14653] ? __pfx_filldir64+0x10/0x10 [ 621.925774][T14653] __do_fast_syscall_32+0x229/0x6e0 [ 621.925789][T14653] ? do_fast_syscall_32+0x33/0x70 [ 621.925801][T14653] ? lockdep_hardirqs_on+0x7a/0x110 [ 621.925814][T14653] ? asm_int80_emulation+0x1a/0x20 [ 621.925824][T14653] ? do_int80_emulation+0x286/0x530 [ 621.925836][T14653] ? trace_irq_disable+0x3b/0x140 [ 621.925853][T14653] do_fast_syscall_32+0x33/0x70 [ 621.925867][T14653] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 621.925879][T14653] RIP: 0023:0xf7f5301c [ 621.925890][T14653] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 621.925899][T14653] RSP: 002b:00000000f53f550c EFLAGS: 00000206 ORIG_RAX: 00000000000000dc [ 621.925911][T14653] RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 0000000080001d00 [ 621.925919][T14653] RDX: 0000000000001019 RSI: 0000000000000000 RDI: 0000000000000000 [ 621.925925][T14653] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 621.925931][T14653] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 621.925937][T14653] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 621.925952][T14653] [ 622.407130][T14631] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 622.407143][ T5622] Bluetooth: hci1: command 0x0c1a tx timeout [ 623.290450][T14631] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 623.296701][T14631] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 623.302889][T14631] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 623.309077][T14631] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 623.567158][ T5628] usb 5-1: new high-speed USB device number 93 using dummy_hcd [ 623.729325][ T5628] usb 5-1: Using ep0 maxpacket: 32 [ 623.743848][ T5628] usb 5-1: config 0 has an invalid interface number: 196 but max is 0 [ 623.757947][ T5628] usb 5-1: config 0 has no interface number 0 [ 623.774841][ T5628] usb 5-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 623.806669][ T5628] usb 5-1: config 0 interface 196 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 623.837660][ T5628] usb 5-1: config 0 interface 196 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 623.852137][ T5628] usb 5-1: config 0 interface 196 has no altsetting 0 [ 623.866185][ T5628] usb 5-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 623.891527][ T5628] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 623.904872][ T5628] usb 5-1: Product: syz [ 623.910307][ T5628] usb 5-1: Manufacturer: syz [ 623.915908][T14672] FAULT_INJECTION: forcing a failure. [ 623.915908][T14672] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 623.917228][ T5628] usb 5-1: SerialNumber: syz [ 623.932072][T14672] CPU: 1 UID: 0 PID: 14672 Comm: syz.1.2614 Tainted: G L syzkaller #0 PREEMPT(full) [ 623.932100][T14672] Tainted: [L]=SOFTLOCKUP [ 623.932107][T14672] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 623.932117][T14672] Call Trace: [ 623.932125][T14672] [ 623.932134][T14672] dump_stack_lvl+0xe8/0x150 [ 623.932160][T14672] should_fail_ex+0x412/0x560 [ 623.932190][T14672] _copy_from_user+0x2d/0xb0 [ 623.932222][T14672] get_compat_msghdr+0xb3/0x4c0 [ 623.932254][T14672] ? __pfx_get_compat_msghdr+0x10/0x10 [ 623.932289][T14672] ___sys_sendmsg+0x201/0x360 [ 623.932312][T14672] ? __lock_acquire+0x6b5/0x2cf0 [ 623.932335][T14672] ? __pfx____sys_sendmsg+0x10/0x10 [ 623.932363][T14672] ? kstrtoull+0x12f/0x1d0 [ 623.932405][T14672] ? __fget_files+0x2a/0x420 [ 623.932426][T14672] ? __fget_files+0x3a0/0x420 [ 623.932455][T14672] __sys_sendmmsg+0x2e7/0x4e0 [ 623.932484][T14672] ? __pfx___sys_sendmmsg+0x10/0x10 [ 623.932530][T14672] ? fput+0xa0/0xd0 [ 623.932551][T14672] ? ksys_write+0x242/0x270 [ 623.932581][T14672] __ia32_compat_sys_sendmmsg+0xa2/0xc0 [ 623.932609][T14672] __do_fast_syscall_32+0x229/0x6e0 [ 623.932634][T14672] ? do_fast_syscall_32+0x33/0x70 [ 623.932656][T14672] ? lockdep_hardirqs_on+0x7a/0x110 [ 623.932677][T14672] ? asm_int80_emulation+0x1a/0x20 [ 623.932695][T14672] ? do_int80_emulation+0x286/0x530 [ 623.932717][T14672] ? trace_irq_disable+0x3b/0x140 [ 623.932746][T14672] do_fast_syscall_32+0x33/0x70 [ 623.932769][T14672] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 623.932791][T14672] RIP: 0023:0xf7f5301c [ 623.932807][T14672] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 623.932824][T14672] RSP: 002b:00000000f541650c EFLAGS: 00000206 ORIG_RAX: 0000000000000159 [ 623.932843][T14672] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000600 [ 623.932856][T14672] RDX: 0000000000000001 RSI: 0000000024004004 RDI: 0000000000000000 [ 623.932866][T14672] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 623.932877][T14672] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 623.932888][T14672] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 623.932914][T14672] [ 624.175089][ T5628] usb 5-1: config 0 descriptor?? [ 624.181682][T14648] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 624.192055][T14676] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2615'. [ 624.210739][T14676] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 624.223292][T14676] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 624.331903][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 624.346913][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.354355][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.402631][T14678] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2617'. [ 624.444432][ T5628] ipheth 5-1:0.196: ipheth_get_macaddr: usb_control_msg: -71 [ 624.454899][ T5628] ipheth 5-1:0.196: probe with driver ipheth failed with error -71 [ 624.487287][ T5622] Bluetooth: hci2: command 0x0c1a tx timeout [ 624.494731][ T5628] usb 5-1: USB disconnect, device number 93 [ 624.657213][ T10] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 624.757409][ T46] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 624.807485][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 624.818599][ T10] usb 4-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 624.828271][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 624.836381][ T10] usb 4-1: Product: syz [ 624.841646][ T10] usb 4-1: Manufacturer: syz [ 624.846711][ T10] usb 4-1: SerialNumber: syz [ 624.860436][ T10] usb 4-1: config 0 descriptor?? [ 624.871366][ T10] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 624.879409][ T10] dvb-usb: bulk message failed: -22 (4/0) [ 624.885243][ T10] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 624.902596][ T10] dvb-usb: bulk message failed: -22 (5/0) [ 624.917070][ T10] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 624.930466][ T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 624.931395][ T46] usb 6-1: unable to get BOS descriptor or descriptor too short [ 624.941505][ T10] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 624.957465][ T10] usb 4-1: media controller created [ 624.975273][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 624.980620][ T46] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 624.998299][ T46] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 625.018437][ T10] usb 4-1: selecting invalid altsetting 3 [ 625.021301][ T46] usb 6-1: config 1 has no interface number 0 [ 625.030991][ T10] ttusb2: set interface to alts=3 failed [ 625.041414][ T46] usb 6-1: config 1 interface 1 altsetting 1 has an endpoint descriptor with address 0x62, changing to 0x2 [ 625.072591][ T46] usb 6-1: New USB device found, idVendor=0644, idProduct=8021, bcdDevice= 0.40 [ 625.092316][ T46] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 625.111140][ T46] usb 6-1: Product: syz [ 625.120414][ T46] usb 6-1: Manufacturer: syz [ 625.128940][T14678] ttusb2: more than 2 i2c messages at a time is not handled yet. TODO. [ 625.134880][ T46] usb 6-1: SerialNumber: syz [ 625.140252][ T10] DVB: Unable to find symbol tda10086_attach() [ 625.149452][ T10] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 625.162141][ T10] dvb-usb: bulk message failed: -22 (4/0) [ 625.170192][ T10] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 625.171736][T14678] dvb-usb: bulk message failed: -22 (7/0) [ 625.191934][T14693] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2617'. [ 625.220777][ T10] dvb-usb: bulk message failed: -22 (5/0) [ 625.227432][ T10] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 625.246688][ T10] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 625.256647][T14678] ttusb2: there might have been an error during control message transfer. (rlen = 3, was 0) [ 625.315954][T14678] ttusb2: i2c transfer failed. [ 625.367574][ T5622] Bluetooth: hci0: command 0x0406 tx timeout [ 625.373647][ T5622] Bluetooth: hci4: command 0x0c1a tx timeout [ 625.378192][ T5639] Bluetooth: hci3: command 0x0c1a tx timeout [ 625.501968][ T10] usb 4-1: USB disconnect, device number 63 [ 625.540327][ T10] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 627.076629][T14715] netlink: 'syz.3.2629': attribute type 10 has an invalid length. [ 627.084784][T14715] syz_tun: entered promiscuous mode [ 627.207111][T14691] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 627.207162][ T5639] Bluetooth: hci1: command 0x0c1a tx timeout [ 628.109257][T14691] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 628.115410][T14691] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 628.122433][T14691] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 628.128818][T14691] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 628.168510][T11380] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 628.240496][ T46] snd-usb-us122l 6-1:1.1: usb_set_interface error [ 628.265653][ T46] snd-usb-us122l 6-1:1.1: probe with driver snd-usb-us122l failed with error -22 [ 628.316830][ T46] usb 6-1: USB disconnect, device number 25 [ 628.488329][T14729] usb usb8: usbfs: process 14729 (syz.4.2632) did not claim interface 0 before use [ 628.858270][ T46] usb 3-1: new high-speed USB device number 94 using dummy_hcd [ 629.020513][ T46] usb 3-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 629.030172][ T46] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 629.038335][ T46] usb 3-1: Product: syz [ 629.042645][ T46] usb 3-1: Manufacturer: syz [ 629.049963][ T46] usb 3-1: SerialNumber: syz [ 629.217309][ T10] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 629.288096][ T5639] Bluetooth: hci2: command 0x0c1a tx timeout [ 629.349284][ T46] rtl8150 3-1:1.0: couldn't reset the device [ 629.357712][ T46] rtl8150 3-1:1.0: probe with driver rtl8150 failed with error -5 [ 629.378003][ T46] usb 3-1: USB disconnect, device number 94 [ 629.398103][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 629.412131][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 629.433416][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 629.445437][ T10] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 8 [ 629.450508][ C1] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 629.465822][ T10] usb 4-1: New USB device found, idVendor=056e, idProduct=00fe, bcdDevice= 0.00 [ 629.478497][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 629.491792][ T10] usb 4-1: config 0 descriptor?? [ 629.706126][T14751] netlink: 'syz.5.2642': attribute type 8 has an invalid length. [ 629.908654][T13183] usb 2-1: new high-speed USB device number 120 using dummy_hcd [ 629.946019][ T10] usbhid 4-1:0.0: can't add hid device: -71 [ 629.957806][ T10] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 629.988222][ T10] usb 4-1: USB disconnect, device number 64 [ 630.137232][ T46] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 630.142446][T14745] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2640'. [ 630.165767][T13183] usb 2-1: unable to get BOS descriptor or descriptor too short [ 630.179439][ T5622] Bluetooth: hci4: command 0x0c1a tx timeout [ 630.179453][T11276] Bluetooth: hci3: command 0x0c1a tx timeout [ 630.192349][ T5639] Bluetooth: hci0: command 0x0406 tx timeout [ 630.197642][T13183] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 630.214282][T13183] usb 2-1: can't read configurations, error -71 [ 630.274203][T14762] netlink: 'syz.4.2646': attribute type 10 has an invalid length. [ 630.283942][T14762] syz_tun: entered promiscuous mode [ 630.307337][ T46] usb 6-1: Using ep0 maxpacket: 8 [ 630.321559][ T46] usb 6-1: unable to get BOS descriptor or descriptor too short [ 630.340103][ T46] usb 6-1: config 4 interface 0 has no altsetting 0 [ 630.353482][ T46] usb 6-1: string descriptor 0 read error: -22 [ 630.360290][ T46] usb 6-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 630.375159][ T46] usb 6-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 630.396940][ T46] usb 6-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 630.424643][ T46] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 630.455703][ T46] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 630.468114][ T46] usb 6-1: media controller created [ 630.482603][ T46] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 630.603671][ T46] zl10353_read_register: readreg error (reg=127, ret==0) [ 630.666546][ T46] usb 6-1: USB disconnect, device number 26 [ 630.920816][T14780] usb usb8: usbfs: process 14780 (syz.1.2650) did not claim interface 0 before use [ 631.060866][T14787] ptrace attach of "ci-upstream-kasan-gce-386/syz-executor exec"[5643] was attempted by "ci-upstream-kasan-gce-386/syz-executor exec"[14787] [ 631.408997][T14799] loop5: detected capacity change from 0 to 4095 [ 631.549908][T14799] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2658'. [ 631.997722][ T5747] usb 5-1: new high-speed USB device number 94 using dummy_hcd [ 632.027164][T13183] usb 2-1: new high-speed USB device number 122 using dummy_hcd [ 632.180694][ T5747] usb 5-1: config index 0 descriptor too short (expected 2084, got 36) [ 632.197337][T13183] usb 2-1: Using ep0 maxpacket: 8 [ 632.203281][ T5747] usb 5-1: config 0 has an invalid interface number: 240 but max is 0 [ 632.221864][T13183] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 632.227134][ T5747] usb 5-1: config 0 has no interface number 0 [ 632.258679][ T5747] usb 5-1: config 0 interface 240 altsetting 255 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 632.284009][ T5747] usb 5-1: config 0 interface 240 altsetting 255 endpoint 0x81 has invalid wMaxPacketSize 0 [ 632.285830][T13183] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 632.296613][ T5747] usb 5-1: config 0 interface 240 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 632.342099][ T5747] usb 5-1: config 0 interface 240 has no altsetting 0 [ 632.350400][ T5747] usb 5-1: New USB device found, idVendor=5543, idProduct=004d, bcdDevice= 0.00 [ 632.360755][ T5747] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 632.382441][ T5747] usb 5-1: config 0 descriptor?? [ 632.418171][T13183] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 8 [ 632.452344][T13183] usb 2-1: New USB device found, idVendor=056e, idProduct=00fe, bcdDevice= 0.00 [ 632.476905][T13183] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 632.485249][T14814] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2664'. [ 632.517620][T13183] usb 2-1: config 0 descriptor?? [ 632.777368][ T46] usb 3-1: new high-speed USB device number 95 using dummy_hcd [ 632.788780][T14812] netlink: 48 bytes leftover after parsing attributes in process `syz.5.2663'. [ 632.809615][ T5747] uclogic 0003:5543:004D.0037: interface is invalid, ignoring [ 632.937165][ T46] usb 3-1: Using ep0 maxpacket: 32 [ 632.945610][T13183] usbhid 2-1:0.0: can't add hid device: -71 [ 632.961447][T13183] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 632.974225][ T46] usb 3-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 632.992326][ T46] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 633.002220][T13183] usb 2-1: USB disconnect, device number 122 [ 633.012185][ T46] usb 3-1: Product: syz [ 633.023808][ T46] usb 3-1: Manufacturer: syz [ 633.032586][ T46] usb 3-1: SerialNumber: syz [ 633.058620][ T46] usb 3-1: config 0 descriptor?? [ 633.062342][T14806] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 633.070328][ T46] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 633.082234][ T46] dvb-usb: bulk message failed: -22 (4/0) [ 633.088911][ T46] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 633.099930][T14806] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 633.113867][ T5747] usb 5-1: USB disconnect, device number 94 [ 633.136876][ T46] dvb-usb: bulk message failed: -22 (5/0) [ 633.150660][ T46] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 633.173473][ T46] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 633.188475][ T46] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 633.198332][ T46] usb 3-1: media controller created [ 633.199651][T14817] netlink: 'syz.5.2665': attribute type 8 has an invalid length. [ 633.220714][ T46] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 633.237572][ T46] usb 3-1: selecting invalid altsetting 3 [ 633.243454][ T46] ttusb2: set interface to alts=3 failed [ 633.271306][T14814] ttusb2: more than 2 i2c messages at a time is not handled yet. TODO. [ 633.279990][T14814] dvb-usb: bulk message failed: -22 (7/0) [ 633.280067][ T46] DVB: Unable to find symbol tda10086_attach() [ 633.294591][T14814] ttusb2: there might have been an error during control message transfer. (rlen = 3, was 0) [ 633.294684][ T46] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 633.314677][T14814] ttusb2: i2c transfer failed. [ 633.318385][ T46] dvb-usb: bulk message failed: -22 (4/0) [ 633.325531][ T46] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 633.331870][T14814] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2664'. [ 633.336017][ T46] dvb-usb: bulk message failed: -22 (5/0) [ 633.351018][ T46] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 633.399907][ T46] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 633.415587][ T46] usb 3-1: USB disconnect, device number 95 [ 633.491339][ T46] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 633.611004][T14822] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2666'. [ 633.727984][T13182] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 633.827285][T14786] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2652'. [ 633.846133][T14786] input: syz0 as /devices/virtual/input/input81 [ 633.857752][T13183] usb 2-1: new high-speed USB device number 123 using dummy_hcd [ 633.877543][T13182] usb 6-1: Using ep0 maxpacket: 8 [ 633.884325][T13182] usb 6-1: unable to get BOS descriptor or descriptor too short [ 633.893583][T13182] usb 6-1: config 4 interface 0 has no altsetting 0 [ 633.903274][T13182] usb 6-1: string descriptor 0 read error: -22 [ 633.909857][T13182] usb 6-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 633.919982][T13182] usb 6-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 633.941898][T13182] usb 6-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 633.971845][T13182] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 634.002872][T13182] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 634.017143][T13183] usb 2-1: Using ep0 maxpacket: 32 [ 634.024415][T13182] usb 6-1: media controller created [ 634.034476][T13183] usb 2-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 634.050730][T13183] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 634.066155][T13182] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 634.074734][T13183] usb 2-1: Product: syz [ 634.079038][T13183] usb 2-1: Manufacturer: syz [ 634.084847][T13183] usb 2-1: SerialNumber: syz [ 634.104472][T13183] usb 2-1: config 0 descriptor?? [ 634.147967][T13182] zl10353_read_register: readreg error (reg=127, ret==0) [ 634.157608][T13183] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 634.176247][T13183] dvb-usb: bulk message failed: -22 (4/0) [ 634.189024][T13183] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 634.204598][T13183] dvb-usb: bulk message failed: -22 (5/0) [ 634.216630][T13183] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 634.230675][T13182] usb 6-1: USB disconnect, device number 27 [ 634.251088][T13183] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 634.259970][T14831] usb usb8: usbfs: process 14831 (syz.2.2669) did not claim interface 0 before use [ 634.285414][T13183] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 634.298772][T13183] usb 2-1: media controller created [ 634.313445][T13183] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 634.328649][T14822] ttusb2: more than 2 i2c messages at a time is not handled yet. TODO. [ 634.338426][T14822] dvb-usb: bulk message failed: -22 (7/0) [ 634.344276][T14822] ttusb2: there might have been an error during control message transfer. (rlen = 3, was 0) [ 634.356550][T13183] usb 2-1: selecting invalid altsetting 3 [ 634.356807][T14822] ttusb2: i2c transfer failed. [ 634.369704][T13183] ttusb2: set interface to alts=3 failed [ 634.392789][T14822] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2666'. [ 634.423777][T13183] DVB: Unable to find symbol tda10086_attach() [ 634.450366][T13183] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 634.461871][T13183] dvb-usb: bulk message failed: -22 (4/0) [ 634.470213][T13183] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 634.484493][T13183] dvb-usb: bulk message failed: -22 (5/0) [ 634.495550][T13183] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 634.507966][T13183] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 634.522278][T13183] usb 2-1: USB disconnect, device number 123 [ 634.605735][T13183] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 635.307294][ T5747] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 635.323345][T14858] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2680'. [ 635.332386][ T5628] IPVS: starting estimator thread 0... [ 635.338115][T14858] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2680'. [ 635.407405][T13182] usb 3-1: new high-speed USB device number 96 using dummy_hcd [ 635.436214][T14861] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.2681'. [ 635.445743][T14859] IPVS: using max 33 ests per chain, 79200 per kthread [ 635.527610][ T5747] usb 4-1: Using ep0 maxpacket: 8 [ 635.535419][ T5747] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 635.560817][ T5747] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 635.582019][T13182] usb 3-1: Using ep0 maxpacket: 16 [ 635.583611][ T5747] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 8 [ 635.605594][T13182] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 178, changing to 11 [ 635.622341][ T5747] usb 4-1: New USB device found, idVendor=056e, idProduct=00fe, bcdDevice= 0.00 [ 635.632902][ T5747] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 635.645440][ T5747] usb 4-1: config 0 descriptor?? [ 635.650585][T13182] usb 3-1: config 0 interface 0 has no altsetting 0 [ 635.658656][T14867] netlink: 'syz.1.2682': attribute type 8 has an invalid length. [ 635.678740][T13182] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 635.698984][T13182] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 635.729854][T13182] usb 3-1: config 0 descriptor?? [ 635.877150][T13183] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 636.007528][T13183] usb 6-1: device descriptor read/64, error -71 [ 636.139449][ T10] usb 2-1: new high-speed USB device number 124 using dummy_hcd [ 636.149319][T13182] hid (null): global environment stack underflow [ 636.173471][T13182] hid (null): unknown global tag 0xd [ 636.179975][T13182] hid (null): unknown global tag 0x86 [ 636.185791][T13182] hid (null): unknown global tag 0x90 [ 636.194815][T13182] hid (null): report_id 4131346620 is invalid [ 636.201064][T13182] hid (null): unknown global tag 0xe [ 636.206519][T13182] hid (null): unknown global tag 0xd [ 636.213233][T13182] hid (null): global environment stack overflow [ 636.216997][ T5747] usbhid 4-1:0.0: can't add hid device: -71 [ 636.219596][ T5747] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 636.227687][ T5747] usb 4-1: USB disconnect, device number 65 [ 636.248830][T13183] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 636.259820][T13182] hid (null): unknown global tag 0xe [ 636.272065][T13182] hid (null): unknown global tag 0xd [ 636.293550][T14870] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2684'. [ 636.327294][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 636.336481][ T10] usb 2-1: unable to get BOS descriptor or descriptor too short [ 636.346264][ T10] usb 2-1: config 4 interface 0 has no altsetting 0 [ 636.358975][ T10] usb 2-1: string descriptor 0 read error: -22 [ 636.365496][ T10] usb 2-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 636.379440][ T10] usb 2-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 636.397433][T13183] usb 6-1: device descriptor read/64, error -71 [ 636.402623][ T10] usb 2-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 636.429811][ T10] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 636.450347][ T10] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 636.459803][ T10] usb 2-1: media controller created [ 636.479598][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 636.507495][T13183] usb usb6-port1: attempt power cycle [ 636.610290][ T10] zl10353_read_register: readreg error (reg=127, ret==0) [ 636.658056][ T10] usb 2-1: USB disconnect, device number 124 [ 636.857572][T13183] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 636.878185][T13183] usb 6-1: device descriptor read/8, error -71 [ 637.117645][T13183] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 637.137958][T13183] usb 6-1: device descriptor read/8, error -71 [ 637.171375][T14884] usb usb8: usbfs: process 14884 (syz.4.2688) did not claim interface 0 before use [ 637.193444][T14886] x_tables: duplicate underflow at hook 4 [ 637.257551][T13183] usb usb6-port1: unable to enumerate USB device [ 637.498793][T14881] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2686'. [ 637.523136][T14881] input: syz0 as /devices/virtual/input/input82 [ 638.250583][ T10] usb 3-1: USB disconnect, device number 96 [ 638.370675][T14905] FAULT_INJECTION: forcing a failure. [ 638.370675][T14905] name failslab, interval 1, probability 0, space 0, times 0 [ 638.386808][T14905] CPU: 0 UID: 0 PID: 14905 Comm: syz.2.2695 Tainted: G L syzkaller #0 PREEMPT(full) [ 638.386837][T14905] Tainted: [L]=SOFTLOCKUP [ 638.386845][T14905] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 638.386860][T14905] Call Trace: [ 638.386868][T14905] [ 638.386877][T14905] dump_stack_lvl+0xe8/0x150 [ 638.386904][T14905] should_fail_ex+0x412/0x560 [ 638.386933][T14905] should_failslab+0xa8/0x100 [ 638.386964][T14905] __kmalloc_cache_noprof+0x88/0x660 [ 638.386990][T14905] ? __asan_memset+0x22/0x50 [ 638.387012][T14905] ? alloc_netdev_mqs+0xbf0/0x1210 [ 638.387037][T14905] ? __xdp_rxq_info_reg+0x171/0x280 [ 638.387064][T14905] alloc_netdev_mqs+0xbf0/0x1210 [ 638.387104][T14905] __ip_tunnel_create+0x348/0x560 [ 638.387136][T14905] ? __pfx___ip_tunnel_create+0x10/0x10 [ 638.387164][T14905] ? bpf_lsm_capable+0x9/0x20 [ 638.387191][T14905] ip_tunnel_ctl+0x4e2/0xc30 [ 638.387222][T14905] vti_tunnel_ctl+0x3b2/0x500 [ 638.387242][T14905] ? __pfx_ip_tunnel_parm_from_user+0x10/0x10 [ 638.387273][T14905] ? __pfx_vti_tunnel_ctl+0x10/0x10 [ 638.387292][T14905] ? trace_contention_end+0x3d/0x140 [ 638.387326][T14905] ip_tunnel_siocdevprivate+0x125/0x1d0 [ 638.387356][T14905] ? __pfx_ip_tunnel_siocdevprivate+0x10/0x10 [ 638.387390][T14905] ? full_name_hash+0x92/0xe0 [ 638.387420][T14905] dev_ifsioc+0xb6b/0x1330 [ 638.387446][T14905] ? dev_load+0x21/0x1f0 [ 638.387470][T14905] dev_ioctl+0x84c/0x1150 [ 638.387495][T14905] sock_ioctl+0x75f/0x7f0 [ 638.387526][T14905] ? __pfx_sock_ioctl+0x10/0x10 [ 638.387568][T14905] compat_sock_ioctl+0x288/0xcb0 [ 638.387593][T14905] ? __pfx_compat_sock_ioctl+0x10/0x10 [ 638.387616][T14905] ? __fget_files+0x3a0/0x420 [ 638.387638][T14905] ? __fget_files+0x2a/0x420 [ 638.387664][T14905] ? bpf_lsm_file_ioctl_compat+0x9/0x20 [ 638.387695][T14905] __ia32_compat_sys_ioctl+0x5ea/0x950 [ 638.387728][T14905] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 638.387760][T14905] ? __fget_files+0x3a0/0x420 [ 638.387787][T14905] ? fput+0xa0/0xd0 [ 638.387808][T14905] ? ksys_write+0x242/0x270 [ 638.387842][T14905] __do_fast_syscall_32+0x229/0x6e0 [ 638.387867][T14905] ? do_fast_syscall_32+0x33/0x70 [ 638.387891][T14905] ? lockdep_hardirqs_on+0x7a/0x110 [ 638.387914][T14905] ? asm_int80_emulation+0x1a/0x20 [ 638.387932][T14905] ? do_int80_emulation+0x286/0x530 [ 638.387955][T14905] ? trace_irq_disable+0x3b/0x140 [ 638.387985][T14905] do_fast_syscall_32+0x33/0x70 [ 638.388009][T14905] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 638.388032][T14905] RIP: 0023:0xf7fe601c [ 638.388050][T14905] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 638.388067][T14905] RSP: 002b:00000000f54a650c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 638.388094][T14905] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000000089f1 [ 638.388107][T14905] RDX: 0000000080000440 RSI: 0000000000000000 RDI: 0000000000000000 [ 638.388119][T14905] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 638.388130][T14905] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 638.388142][T14905] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 638.388170][T14905] [ 638.426279][T14901] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2694'. [ 638.811287][T14912] tipc: Started in network mode [ 638.816253][T14912] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 638.825345][T14912] tipc: Enabling of bearer rejected, failed to enable media [ 638.898231][T14916] netlink: 'syz.4.2699': attribute type 8 has an invalid length. [ 638.927112][ T10] usb 3-1: new high-speed USB device number 97 using dummy_hcd [ 638.995491][T14918] netlink: 'syz.5.2700': attribute type 10 has an invalid length. [ 639.087204][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 639.089184][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 639.089213][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 639.089235][ T10] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 8 [ 639.089275][ T10] usb 3-1: New USB device found, idVendor=056e, idProduct=00fe, bcdDevice= 0.00 [ 639.089298][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 639.092218][ T10] usb 3-1: config 0 descriptor?? [ 639.357155][T13183] usb 5-1: new high-speed USB device number 95 using dummy_hcd [ 639.457262][T14928] usb usb8: usbfs: process 14928 (syz.1.2703) did not claim interface 0 before use [ 639.512599][ T10] usbhid 3-1:0.0: can't add hid device: -71 [ 639.527807][T13183] usb 5-1: Using ep0 maxpacket: 8 [ 639.539340][T13183] usb 5-1: unable to get BOS descriptor or descriptor too short [ 639.549673][T13183] usb 5-1: config 4 interface 0 has no altsetting 0 [ 639.562127][T13183] usb 5-1: string descriptor 0 read error: -22 [ 639.571102][T13183] usb 5-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 639.580948][ T10] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 639.590820][T13183] usb 5-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 639.610708][T13183] usb 5-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 639.624356][ T10] usb 3-1: USB disconnect, device number 97 [ 639.628102][T13183] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 639.641812][T13183] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 639.651198][T13183] usb 5-1: media controller created [ 639.676067][T13183] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 639.826315][T13183] zl10353_read_register: readreg error (reg=127, ret==0) [ 639.866887][T13183] usb 5-1: USB disconnect, device number 95 [ 640.155480][T14933] SET target dimension over the limit! [ 640.384098][T14939] create_pit_timer: 5 callbacks suppressed [ 640.384117][T14939] kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 640.448755][T14939] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 640.473603][T14939] kvm: requested 41904 ns i8254 timer period limited to 200000 ns [ 640.494428][T14939] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 640.510308][T14939] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 640.546456][T14939] kvm: requested 39390 ns i8254 timer period limited to 200000 ns [ 640.556190][T14939] kvm: requested 2514 ns i8254 timer period limited to 200000 ns [ 640.565773][T14939] kvm: requested 3352 ns i8254 timer period limited to 200000 ns [ 640.581961][ T10] usb 2-1: new high-speed USB device number 125 using dummy_hcd [ 640.600385][T14939] kvm: requested 100571 ns i8254 timer period limited to 200000 ns [ 640.614783][T14939] kvm: requested 53638 ns i8254 timer period limited to 200000 ns [ 640.814290][ T10] usb 2-1: New USB device found, idVendor=041e, idProduct=400c, bcdDevice=af.98 [ 640.844175][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 640.912954][ T10] usb 2-1: config 0 descriptor?? [ 640.980544][ T10] pwc: Creative Labs Webcam 5 detected. [ 641.118141][T14949] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2709'. [ 641.181449][T14938] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 641.198692][T14938] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 641.246444][ T10] pwc: Failed to set LED on/off time (-71) [ 641.257552][ T10] pwc: send_video_command error -71 [ 641.266245][ T10] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 641.280568][ T10] Philips webcam 2-1:0.0: probe with driver Philips webcam failed with error -71 [ 641.316887][ T10] usb 2-1: USB disconnect, device number 125 [ 641.480643][T14955] netlink: 'syz.4.2712': attribute type 30 has an invalid length. [ 641.583720][T14959] vlan0: entered promiscuous mode [ 641.590482][T14959] batadv0: entered promiscuous mode [ 641.799422][T14922] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2701'. [ 641.834955][T14922] input: syz0 as /devices/virtual/input/input83 [ 641.874832][T14968] netlink: 'syz.1.2717': attribute type 8 has an invalid length. [ 641.881569][T14969] usb usb8: usbfs: process 14969 (syz.2.2716) did not claim interface 0 before use [ 641.987426][T13183] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 642.138471][T13183] usb 4-1: Using ep0 maxpacket: 8 [ 642.145351][T13183] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 642.158410][T13183] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 642.169348][T13183] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 8 [ 642.183210][T13183] usb 4-1: New USB device found, idVendor=056e, idProduct=00fe, bcdDevice= 0.00 [ 642.192400][T13183] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 642.222821][T13183] usb 4-1: config 0 descriptor?? [ 642.267154][T13182] usb 2-1: new high-speed USB device number 126 using dummy_hcd [ 642.418069][T13182] usb 2-1: Using ep0 maxpacket: 8 [ 642.432540][T13182] usb 2-1: unable to get BOS descriptor or descriptor too short [ 642.459717][T13182] usb 2-1: config 4 interface 0 has no altsetting 0 [ 642.476334][T13182] usb 2-1: string descriptor 0 read error: -22 [ 642.487833][T13182] usb 2-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 642.509073][T13182] usb 2-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 642.533200][T13182] usb 2-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 642.551071][T13182] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 642.579398][T13182] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 642.602958][T13182] usb 2-1: media controller created [ 642.644105][T13182] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 642.725691][T13183] usbhid 4-1:0.0: can't add hid device: -71 [ 642.739741][T13182] zl10353_read_register: readreg error (reg=127, ret==0) [ 642.748243][T13183] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 642.798352][T13183] usb 4-1: USB disconnect, device number 66 [ 642.898053][T13182] usb 2-1: USB disconnect, device number 126 [ 642.971232][T14983] atomic_op ffff88806b289198 conn xmit_atomic 0000000000000000 [ 642.982999][T14983] vivid-000: ================= START STATUS ================= [ 642.996364][T14983] vivid-000: Radio HW Seek Mode: Bounded [ 643.009523][T14983] vivid-000: Radio Programmable HW Seek: false [ 643.020024][T14983] vivid-000: RDS Rx I/O Mode: Block I/O [ 643.028130][T14983] vivid-000: Generate RBDS Instead of RDS: false [ 643.035308][T14983] vivid-000: RDS Reception: true [ 643.040936][T14983] vivid-000: RDS Program Type: 0 inactive [ 643.058393][T14983] vivid-000: RDS PS Name: inactive [ 643.063960][T14983] vivid-000: RDS Radio Text: inactive [ 643.069979][T14983] vivid-000: RDS Traffic Announcement: false inactive [ 643.082451][T14983] vivid-000: RDS Traffic Program: false inactive [ 643.091641][T14983] vivid-000: RDS Music: false inactive [ 643.100814][T14983] vivid-000: ================== END STATUS ================== [ 643.190014][T14989] FAULT_INJECTION: forcing a failure. [ 643.190014][T14989] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 643.205315][T14989] CPU: 1 UID: 0 PID: 14989 Comm: syz.2.2723 Tainted: G L syzkaller #0 PREEMPT(full) [ 643.205333][T14989] Tainted: [L]=SOFTLOCKUP [ 643.205338][T14989] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 643.205344][T14989] Call Trace: [ 643.205349][T14989] [ 643.205353][T14989] dump_stack_lvl+0xe8/0x150 [ 643.205371][T14989] should_fail_ex+0x412/0x560 [ 643.205387][T14989] _copy_from_user+0x2d/0xb0 [ 643.205402][T14989] get_compat_msghdr+0xb3/0x4c0 [ 643.205419][T14989] ? _parse_integer_limit+0x1ae/0x1f0 [ 643.205431][T14989] ? __pfx_get_compat_msghdr+0x10/0x10 [ 643.205448][T14989] ? kstrtoull+0x12f/0x1d0 [ 643.205463][T14989] ___sys_sendmsg+0x201/0x360 [ 643.205477][T14989] ? __lock_acquire+0x6b5/0x2cf0 [ 643.205490][T14989] ? __pfx____sys_sendmsg+0x10/0x10 [ 643.205505][T14989] ? get_pid_task+0x20/0x1f0 [ 643.205517][T14989] ? get_pid_task+0x20/0x1f0 [ 643.205529][T14989] ? get_pid_task+0x20/0x1f0 [ 643.205553][T14989] ? __fget_files+0x2a/0x420 [ 643.205565][T14989] ? __fget_files+0x3a0/0x420 [ 643.205582][T14989] __sys_sendmsg+0x183/0x260 [ 643.205596][T14989] ? __pfx___sys_sendmsg+0x10/0x10 [ 643.205620][T14989] __do_fast_syscall_32+0x229/0x6e0 [ 643.205635][T14989] ? do_fast_syscall_32+0x33/0x70 [ 643.205647][T14989] ? lockdep_hardirqs_on+0x7a/0x110 [ 643.205660][T14989] ? asm_int80_emulation+0x1a/0x20 [ 643.205670][T14989] ? do_int80_emulation+0x286/0x530 [ 643.205683][T14989] ? trace_irq_disable+0x3b/0x140 [ 643.205706][T14989] do_fast_syscall_32+0x33/0x70 [ 643.205720][T14989] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 643.205732][T14989] RIP: 0023:0xf7fe601c [ 643.205742][T14989] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 643.205751][T14989] RSP: 002b:00000000f54a650c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 643.205764][T14989] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800008c0 [ 643.205771][T14989] RDX: 0000000000000010 RSI: 0000000000000000 RDI: 0000000000000000 [ 643.205777][T14989] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 643.205783][T14989] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 643.205789][T14989] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 643.205804][T14989] [ 643.676483][T14991] 8021q: adding VLAN 0 to HW filter on device bond5 [ 643.740414][T13182] usb 5-1: new high-speed USB device number 96 using dummy_hcd [ 643.962983][T15006] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 643.974566][T15006] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 644.088754][T13182] usb 5-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 644.125567][T13182] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 644.150780][T13182] usb 5-1: Product: syz [ 644.156458][T13182] usb 5-1: Manufacturer: syz [ 644.161614][T13182] usb 5-1: SerialNumber: syz [ 644.175635][T13182] usb 5-1: config 0 descriptor?? [ 644.207146][ T10] usb 3-1: new high-speed USB device number 98 using dummy_hcd [ 644.220021][T13182] hub 5-1:0.0: bad descriptor, ignoring hub [ 644.231564][T13182] hub 5-1:0.0: probe with driver hub failed with error -5 [ 644.406198][ T10] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 644.433896][T13182] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 644.457849][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 644.494695][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 644.518650][ T10] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 644.532883][T15011] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2730'. [ 644.545231][T15011] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2730'. [ 644.557293][ T10] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 644.585079][T13182] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 644.586334][ T10] usb 3-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 644.606279][ T10] usb 3-1: Manufacturer: syz [ 644.616721][ T10] usb 3-1: config 0 descriptor?? [ 644.763205][T13182] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 644.788465][T13182] usb 5-1: media controller created [ 644.877260][ T24] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 645.004251][ T10] usbhid 3-1:0.0: can't add hid device: -71 [ 645.010465][ T10] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 645.061712][ T10] usb 3-1: USB disconnect, device number 98 [ 645.150373][T13182] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 645.326344][ T24] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD4, changing to 0x84 [ 645.341290][T13182] DVB: Unable to find symbol dib7000p_attach() [ 645.387420][T13182] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 645.395898][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 51544, setting to 1024 [ 645.417796][ T24] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 1024 [ 645.497707][ T24] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 645.514651][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 645.529304][ T24] usb 4-1: Product: syz [ 645.537218][T15027] bridge0: vlan filtering disabled, automatically disabling multicast vlan snooping [ 645.566614][ T24] usb 4-1: Manufacturer: syz [ 645.577348][ T10] usb 3-1: new full-speed USB device number 99 using dummy_hcd [ 645.581157][T13182] rc_core: IR keymap rc-dib0700-rc5 not found [ 645.592250][ T24] usb 4-1: SerialNumber: syz [ 645.614916][T13182] Registered IR keymap rc-empty [ 645.643770][ T24] usb 4-1: config 0 descriptor?? [ 645.654946][T13182] dvb-usb: could not initialize remote control. [ 645.662423][T13182] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 645.729548][ T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 645.747279][ T10] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 645.782750][T15015] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 645.795276][T15029] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2735'. [ 645.804350][T15029] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2735'. [ 645.820395][ T10] usb 3-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 645.843453][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 645.864774][ T10] usb 3-1: config 0 descriptor?? [ 645.896395][ T10] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 645.915251][ T10] dvb-usb: bulk message failed: -22 (3/0) [ 645.945098][ T10] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 645.965037][ T10] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 645.980039][ T10] usb 3-1: media controller created [ 645.993564][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 646.041419][ T10] dvb-usb: bulk message failed: -22 (6/0) [ 646.067370][ T10] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 646.089016][ T10] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input86 [ 646.108873][T15024] ------------[ cut here ]------------ [ 646.114399][T15024] usb 5-1: BOGUS control dir, pipe 80006080 doesn't match bRequestType c0 [ 646.122972][T15024] WARNING: drivers/usb/core/urb.c:413 at usb_submit_urb+0x1053/0x18b0, CPU#0: syz.2.2733/15024 [ 646.133434][T15024] Modules linked in: [ 646.137742][T15024] CPU: 0 UID: 0 PID: 15024 Comm: syz.2.2733 Tainted: G L syzkaller #0 PREEMPT(full) [ 646.149286][T15024] Tainted: [L]=SOFTLOCKUP [ 646.154378][T15024] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 646.164493][T15024] RIP: 0010:usb_submit_urb+0x1115/0x18b0 [ 646.170215][T15024] Code: 00 00 00 00 00 fc ff df 0f b6 44 05 00 84 c0 0f 85 91 05 00 00 45 0f b6 45 00 48 8b 7c 24 18 48 8b 74 24 10 4c 89 fa 44 89 f1 <67> 48 0f b9 3a 49 bf 00 00 00 00 00 fc ff df e9 c1 f2 ff ff 89 e9 [ 646.189904][T15024] RSP: 0018:ffffc9000f257768 EFLAGS: 00010246 [ 646.195966][T15024] RAX: 0000000000000000 RBX: ffff88809bdf4d00 RCX: 0000000080006080 [ 646.204106][T15024] RDX: ffff888045ff7aa0 RSI: ffffffff8c8089e0 RDI: ffffffff903e07b0 [ 646.212222][T15024] RBP: 1ffff1100e9a5e24 R08: 00000000000000c0 R09: 0000000000000000 [ 646.220256][T15024] R10: ffffc9000f257860 R11: fffff52001e4af18 R12: ffff8880568c9100 [ 646.228334][T15024] R13: ffff888074d2f120 R14: 0000000080006080 R15: ffff888045ff7aa0 [ 646.236328][T15024] FS: 0000000000000000(0000) GS:ffff888125290000(0063) knlGS:00000000f54a6b40 [ 646.245278][T15024] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 646.252516][T15024] CR2: 000000000c2eecdb CR3: 000000002522e000 CR4: 00000000003526f0 [ 646.260896][T15024] Call Trace: [ 646.264212][T15024] [ 646.267207][T15024] ? __init_swait_queue_head+0xa9/0x150 [ 646.272774][T15024] usb_start_wait_urb+0x13f/0x5b0 [ 646.277862][T15024] ? rcu_is_watching+0x15/0xb0 [ 646.282633][T15024] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 646.288244][T15024] ? trace_kmalloc+0x2a/0xf0 [ 646.292877][T15024] usb_control_msg+0x234/0x3e0 [ 646.297708][T15024] dib0700_i2c_xfer+0xbb2/0xf80 [ 646.302573][T15024] __i2c_transfer+0x79a/0x1f70 [ 646.307389][T15024] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 646.313204][T15024] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 646.319131][T15024] ? i2c_transfer+0xc8/0x2d0 [ 646.323770][T15024] i2c_transfer+0x1cc/0x2d0 [ 646.328328][T15024] i2cdev_ioctl_rdwr+0x460/0x740 [ 646.333279][T15024] compat_i2cdev_ioctl+0x59f/0x5c0 [ 646.338440][T15024] ? __pfx_compat_i2cdev_ioctl+0x10/0x10 [ 646.344075][T15024] ? __fget_files+0x3a0/0x420 [ 646.348809][T15024] ? __fget_files+0x2a/0x420 [ 646.353994][T15024] ? bpf_lsm_file_ioctl_compat+0x9/0x20 [ 646.360070][T15024] __ia32_compat_sys_ioctl+0x5ea/0x950 [ 646.365563][T15024] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 646.371585][T15024] ? kmem_cache_free+0x182/0x650 [ 646.376539][T15024] ? __se_sys_futex_time32+0x3ab/0x440 [ 646.382042][T15024] ? __fget_files+0x3a0/0x420 [ 646.386709][T15024] ? rcu_is_watching+0x15/0xb0 [ 646.391537][T15024] __do_fast_syscall_32+0x229/0x6e0 [ 646.396745][T15024] ? do_fast_syscall_32+0x33/0x70 [ 646.401842][T15024] ? lockdep_hardirqs_on+0x7a/0x110 [ 646.407084][T15024] ? asm_int80_emulation+0x1a/0x20 [ 646.412207][T15024] ? do_int80_emulation+0x286/0x530 [ 646.417450][T15024] ? trace_irq_disable+0x3b/0x140 [ 646.422474][T15024] do_fast_syscall_32+0x33/0x70 [ 646.427379][T15024] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 646.433703][T15024] RIP: 0023:0xf7fe601c [ 646.437821][T15024] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 646.458101][T15024] RSP: 002b:00000000f54a650c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 646.466516][T15024] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000000000707 [ 646.474923][T15024] RDX: 0000000080000200 RSI: 0000000000000000 RDI: 0000000000000000 [ 646.482976][T15024] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 646.491340][T15024] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 646.499356][T15024] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 646.507389][T15024] [ 646.510415][T15024] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 646.517679][T15024] CPU: 0 UID: 0 PID: 15024 Comm: syz.2.2733 Tainted: G L syzkaller #0 PREEMPT(full) [ 646.528613][T15024] Tainted: [L]=SOFTLOCKUP [ 646.532922][T15024] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 646.542962][T15024] Call Trace: [ 646.546239][T15024] [ 646.549170][T15024] vpanic+0x56c/0xa60 [ 646.553169][T15024] ? __pfx__printk+0x10/0x10 [ 646.557773][T15024] ? __pfx_vpanic+0x10/0x10 [ 646.562393][T15024] ? is_bpf_text_address+0x292/0x2b0 [ 646.567696][T15024] ? is_bpf_text_address+0x26/0x2b0 [ 646.572891][T15024] panic+0xc5/0xd0 [ 646.576603][T15024] ? __pfx_panic+0x10/0x10 [ 646.581029][T15024] __warn+0x315/0x4c0 [ 646.585009][T15024] ? usb_submit_urb+0x1053/0x18b0 [ 646.590068][T15024] ? usb_submit_urb+0x1053/0x18b0 [ 646.595109][T15024] __report_bug+0x29a/0x540 [ 646.599619][T15024] ? usb_submit_urb+0x1053/0x18b0 [ 646.604652][T15024] ? __pfx___report_bug+0x10/0x10 [ 646.609681][T15024] ? lockdep_hardirqs_on+0x7a/0x110 [ 646.614877][T15024] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 646.620682][T15024] report_bug_entry+0x19a/0x290 [ 646.625528][T15024] ? usb_submit_urb+0x1115/0x18b0 [ 646.630557][T15024] ? usb_submit_urb+0x111a/0x18b0 [ 646.635586][T15024] handle_bug+0xce/0x200 [ 646.639820][T15024] exc_invalid_op+0x1a/0x50 [ 646.644334][T15024] asm_exc_invalid_op+0x1a/0x20 [ 646.649172][T15024] RIP: 0010:usb_submit_urb+0x1115/0x18b0 [ 646.654815][T15024] Code: 00 00 00 00 00 fc ff df 0f b6 44 05 00 84 c0 0f 85 91 05 00 00 45 0f b6 45 00 48 8b 7c 24 18 48 8b 74 24 10 4c 89 fa 44 89 f1 <67> 48 0f b9 3a 49 bf 00 00 00 00 00 fc ff df e9 c1 f2 ff ff 89 e9 [ 646.674417][T15024] RSP: 0018:ffffc9000f257768 EFLAGS: 00010246 [ 646.680481][T15024] RAX: 0000000000000000 RBX: ffff88809bdf4d00 RCX: 0000000080006080 [ 646.688437][T15024] RDX: ffff888045ff7aa0 RSI: ffffffff8c8089e0 RDI: ffffffff903e07b0 [ 646.696389][T15024] RBP: 1ffff1100e9a5e24 R08: 00000000000000c0 R09: 0000000000000000 [ 646.704344][T15024] R10: ffffc9000f257860 R11: fffff52001e4af18 R12: ffff8880568c9100 [ 646.712310][T15024] R13: ffff888074d2f120 R14: 0000000080006080 R15: ffff888045ff7aa0 [ 646.720299][T15024] ? usb_submit_urb+0x10a4/0x18b0 [ 646.725345][T15024] ? __init_swait_queue_head+0xa9/0x150 [ 646.730898][T15024] usb_start_wait_urb+0x13f/0x5b0 [ 646.735911][T15024] ? rcu_is_watching+0x15/0xb0 [ 646.740673][T15024] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 646.746201][T15024] ? trace_kmalloc+0x2a/0xf0 [ 646.750795][T15024] usb_control_msg+0x234/0x3e0 [ 646.755542][T15024] dib0700_i2c_xfer+0xbb2/0xf80 [ 646.760398][T15024] __i2c_transfer+0x79a/0x1f70 [ 646.765150][T15024] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 646.770947][T15024] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 646.776755][T15024] ? i2c_transfer+0xc8/0x2d0 [ 646.781336][T15024] i2c_transfer+0x1cc/0x2d0 [ 646.785833][T15024] i2cdev_ioctl_rdwr+0x460/0x740 [ 646.790781][T15024] compat_i2cdev_ioctl+0x59f/0x5c0 [ 646.795896][T15024] ? __pfx_compat_i2cdev_ioctl+0x10/0x10 [ 646.801526][T15024] ? __fget_files+0x3a0/0x420 [ 646.806211][T15024] ? __fget_files+0x2a/0x420 [ 646.810795][T15024] ? bpf_lsm_file_ioctl_compat+0x9/0x20 [ 646.816327][T15024] __ia32_compat_sys_ioctl+0x5ea/0x950 [ 646.821772][T15024] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 646.827755][T15024] ? kmem_cache_free+0x182/0x650 [ 646.832700][T15024] ? __se_sys_futex_time32+0x3ab/0x440 [ 646.838174][T15024] ? __fget_files+0x3a0/0x420 [ 646.842844][T15024] ? rcu_is_watching+0x15/0xb0 [ 646.847623][T15024] __do_fast_syscall_32+0x229/0x6e0 [ 646.852834][T15024] ? do_fast_syscall_32+0x33/0x70 [ 646.857862][T15024] ? lockdep_hardirqs_on+0x7a/0x110 [ 646.863066][T15024] ? asm_int80_emulation+0x1a/0x20 [ 646.868180][T15024] ? do_int80_emulation+0x286/0x530 [ 646.873368][T15024] ? trace_irq_disable+0x3b/0x140 [ 646.878391][T15024] do_fast_syscall_32+0x33/0x70 [ 646.883244][T15024] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 646.889567][T15024] RIP: 0023:0xf7fe601c [ 646.893725][T15024] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 646.913330][T15024] RSP: 002b:00000000f54a650c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 646.921736][T15024] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000000000707 [ 646.929706][T15024] RDX: 0000000080000200 RSI: 0000000000000000 RDI: 0000000000000000 [ 646.937668][T15024] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 646.945628][T15024] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 646.953595][T15024] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 646.961569][T15024] [ 646.965053][T15024] Kernel Offset: disabled [ 646.969365][T15024] Rebooting in 86400 seconds..