last executing test programs: 12.129322426s ago: executing program 1 (id=2869): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r2 = timerfd_create(0x0, 0x0) r3 = syz_usb_connect(0x2, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000059770c40c009030243d30000000109021200"], 0x0) syz_usb_control_io$cdc_ecm(r3, 0x0, &(0x7f0000000640)={0x10, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r3, &(0x7f0000000140)={0xc, &(0x7f0000000000)={0x0, 0x5, 0x25, {0x25, 0xd, "feb6ee08193fbd25ed34a7813cb8bcd08c769cb3a2f3e944fc1d966a3b30fca3a741c6"}}, &(0x7f0000000100)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000300)={0x10, &(0x7f0000000680)={0x20, 0xa, 0x81, "dfe7bf05eff1f3cc0e66c179b0ef981e451c1a58764047032a18f3ee0915836321a48d51822b06c32bb2c828ceb5dbecd7e11ca2bc8369c4cfb9ef8a1aacd0dc392c35b081be4373716e57421c7bbc4ff87e36ab7408255bd601c18d8d1ef746cfae74140ee418b1aa918c24e15d603bee5c5e8b01fe44b8a3fadca60bf7fe9ed8"}, &(0x7f00000001c0)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000240)={0x0, 0x8, 0x1, 0xf}}) timerfd_gettime(r2, &(0x7f0000000200)) bind$alg(0xffffffffffffffff, &(0x7f0000000480)={0x26, 'aead\x00', 0x0, 0x0, 'ccm-aes-ce\x00'}, 0x58) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(0x0, r4) sendmsg$TIPC_CMD_GET_LINKS(r4, &(0x7f00000003c0)={0x0, 0xa6, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, r5, 0x1, 0x70bd29, 0x25dfdbff, {{}, {}, {0x8, 0x11, 0x6}}}, 0x24}, 0x1, 0x0, 0x0, 0xc0}, 0x0) r6 = syz_io_uring_setup(0xa07, &(0x7f0000000580)={0x0, 0xb967, 0x80, 0x3}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f00000000c0)=@IORING_OP_TIMEOUT={0xb, 0x10, 0x0, 0x0, 0x9, 0x0, 0x1, 0x1, 0x1}) io_uring_enter(r6, 0x7855, 0x0, 0x0, 0x0, 0x0) 11.540288406s ago: executing program 4 (id=2872): r0 = socket$rxrpc(0x21, 0x2, 0xa) epoll_create1(0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r4, 0x40046602, 0x0) sched_setattr(0x0, 0x0, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r5, &(0x7f0000000140)='A', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x100, @remote, 0x1}, 0x1c) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r5, 0x84, 0xc, 0x0, 0x0) ioctl$TIOCSRS485(r4, 0x542f, &(0x7f0000000100)={0x1, 0x2, 0xc5fc}) setsockopt$inet_sctp6_SCTP_EVENTS(r5, 0x84, 0xb, &(0x7f0000000000)={0x9, 0x0, 0x80, 0x7, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x7, 0x3}, 0xe) shutdown(r5, 0x1) recvmmsg(r5, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x414, 0x0, 0x0) ioctl$GIO_UNIMAP(r1, 0x4b66, &(0x7f00000001c0)={0x0, 0x0}) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000d00), 0xffffffffffffffff) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0xe3, 0xe, 0x6e, 0x20, 0x1d50, 0x614d, 0xf9bf, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x17, 0x72, 0x0, 0xff, 0x37, 0xa2, 0xd}}]}}]}}, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x820000, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_HYPERV_EVENTFD(r8, 0xc048aec8, &(0x7f00000000c0)={0x2, 0xffffffffffffffff, 0x1}) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=ANY=[@ANYBLOB='|\x00', @ANYRES16=r6], 0x7c}}, 0x0) setsockopt$sock_int(r0, 0x1, 0x7, 0x0, 0x0) 10.952574984s ago: executing program 0 (id=2873): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f0000000080)={'ip_vti0\x00', 0x0, 0x1, 0x20, 0x7, 0x6, {{0x29, 0x4, 0x3, 0x23, 0xa4, 0x67, 0x0, 0xd, 0x4, 0x0, @broadcast, @private=0xa010100, {[@timestamp_addr={0x44, 0x44, 0x20, 0x1, 0x6, [{@dev={0xac, 0x14, 0x14, 0xe}, 0xfffffffb}, {@broadcast, 0x8000}, {@empty, 0x1}, {@dev={0xac, 0x14, 0x14, 0x33}, 0x7}, {@private=0xa010100, 0xec}, {@rand_addr=0x64010101, 0xa}, {@remote, 0x100}, {@dev={0xac, 0x14, 0x14, 0xb}, 0x3}]}, @rr={0x7, 0x2b, 0xe2, [@initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010101, @private=0xa010101, @multicast1, @remote, @remote, @multicast2, @rand_addr=0x64010102, @private=0xa010101, @empty]}, @lsrr={0x83, 0xb, 0x82, [@rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @rr={0x7, 0x13, 0x8a, [@private=0xa010101, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x40}, @remote]}]}}}}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=@deltclass={0x100, 0x29, 0x200, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, r1, {0xd, 0x8}, {0x2, 0x5}, {0x9, 0xd}}, [@tclass_kind_options=@c_drr={{0x8}, {0xc, 0x2, @TCA_DRR_QUANTUM={0x8, 0x1, 0xffffffff}}}, @TCA_RATE={0x6, 0x5, {0xbc, 0x1}}, @tclass_kind_options=@c_qfq={{0x8}, {0x2c, 0x2, [@TCA_QFQ_LMAX={0x8, 0x2, 0x8}, @TCA_QFQ_WEIGHT={0x8, 0x1, 0x4}, @TCA_QFQ_LMAX={0x8, 0x2, 0x5df}, @TCA_QFQ_WEIGHT={0x8, 0x1, 0x9}, @TCA_QFQ_WEIGHT={0x8, 0x1, 0x5}]}}, @TCA_RATE={0x6, 0x5, {0x0, 0xe1}}, @tclass_kind_options=@c_skbprio={0xc}, @tclass_kind_options=@c_drr={{0x8}, {0xc, 0x2, @TCA_DRR_QUANTUM={0x8, 0x1, 0x7}}}, @tclass_kind_options=@c_ingress={0xc}, @tclass_kind_options=@c_mqprio={0xb}, @tclass_kind_options=@c_cbs={0x8}, @tclass_kind_options=@c_qfq={{0x8}, {0x3c, 0x2, [@TCA_QFQ_LMAX={0x8, 0x2, 0x2}, @TCA_QFQ_WEIGHT={0x8, 0x1, 0xf4b9}, @TCA_QFQ_WEIGHT={0x8, 0x1, 0x3}, @TCA_QFQ_WEIGHT={0x8}, @TCA_QFQ_LMAX={0x8, 0x2, 0x8}, @TCA_QFQ_LMAX={0x8, 0x2, 0x6}, @TCA_QFQ_WEIGHT={0x8}]}}]}, 0x100}, 0x1, 0x0, 0x0, 0x4000000}, 0x48195) r2 = getpid() sendmsg$AUDIT_SET(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x3c, 0x3e9, 0x400, 0x70bd26, 0x25dfdbfc, {0x10, 0x0, 0x2, r2, 0x5, 0xffffffff, 0x6d05, 0x2, 0x0, 0x3ff, 0x2}, ["", "", "", "", "", "", "", ""]}, 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0xc040) syz_emit_ethernet(0xbe, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c20000000800450000b000660000002f9078ac1e0001e00000012001880b009c90780100000000000000dbdd9ede7e2313a7a23925f03dbbcf5cde982cab6b38bf7b463ae5f42c35dd1d6a7710ebcf02000000000000002e3502b74659d7dbde072d61b6238412ad5f1a0a4f358515e4d90000009e5126806f68dd72b3bd460f4ebd662f8cd823dfd0d963970deffa6dd57d8176d2b54e3bc06c34c945e45e27e747494b407f256d9ddc3e6e1f7c5f7b4c5e69c1dd725d9d10e04677c598aecf83ba5f47811e5bc6917b27"], 0x0) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="340000003e0007010000000000000000017c00000400fc800c0001800600060065580000080002"], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) 10.382636617s ago: executing program 0 (id=2874): r0 = epoll_create1(0x80000) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) openat$rdma_cm(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) r2 = dup2(r1, r0) mkdirat(r2, &(0x7f0000000000)='./file0\x00', 0x30) ioctl$VIDIOC_ENUMAUDOUT(r2, 0xc0345642, 0x0) 10.024487729s ago: executing program 0 (id=2877): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mremap(&(0x7f0000006000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f0000c00000/0x400000)=nil) r2 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r2, &(0x7f00000032c0)=[{&(0x7f0000000440)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1}], 0x1, 0x0) sendmmsg$inet_sctp(r2, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)='a', 0xff2c}], 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="2c0000008400000001000000000000060c"], 0x2c}], 0x1, 0x890) 10.023323093s ago: executing program 3 (id=2878): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) connect$inet6(r0, &(0x7f0000000200)={0xa, 0xffff, 0xb7, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040), 0x1e) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_128={{0x303}, "2d432d74c04f228a", "d71d9a1e03558545115509e1c34caab9", "018000", "5e33931677e0f2d7"}, 0x28) r1 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000040)) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) r3 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) ioctl$SNDRV_PCM_IOCTL_DRAIN(r3, 0x4144, 0x0) ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(r3, 0xc0884123, &(0x7f0000000300)={0x1, "244689261a3365eb47c14247a532ccbd3bf3b29282987c7cc12acb8ae6d2fbd3428a0df873e1d58af8bf70c05fc6c43edcdaa8e7db0700", {0x2, 0x2}}) r4 = syz_io_uring_setup(0x8d2, &(0x7f00000000c0)={0x0, 0x0, 0x400, 0x0, 0x379}, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x5, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e000000850000002a00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={r7, 0xffffffffffffffff, 0x0, 0x0, @void}, 0x10) syz_io_uring_submit(r5, r6, &(0x7f0000000240)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0xffffffffffffffff, 0x0}) io_uring_enter(r4, 0x47ba, 0x3e82, 0x60, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT32(r3, 0xc06c4124, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000000)=@ccm_128={{0x304}, "9a8743130cf567a7", "1389631e20c3361cbcbd716ebbeae19b", "3ab7cb4b", "cfcb0337b4c07cdd"}, 0x28) sendto$inet6(r0, &(0x7f0000000740)='S', 0x1, 0x8000, 0x0, 0x0) close(r0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x800001, 0x28011, r8, 0x0) 9.828925941s ago: executing program 2 (id=2879): sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_io_uring_setup(0x838, &(0x7f00000000c0)={0x0, 0x1998, 0x400, 0x2000006, 0x6f}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_FALLOCATE={0x11, 0x40, 0x0, @fd_index=0x2, 0x49998136, 0x0, 0x7ff, 0x0, 0x1}) io_uring_enter(r0, 0x3520, 0x400de1e, 0x0, 0x0, 0x0) 9.278721005s ago: executing program 3 (id=2880): ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000100)={0x38, r0, 0x801, 0x0, 0x3, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY={0x1c, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x2}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "7ee5d52ffd"}, @NL80211_KEY_DEFAULT={0x4}]}]}, 0x38}}, 0x40010) (fail_nth: 2) 8.921229127s ago: executing program 2 (id=2881): r0 = socket$netlink(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x5}, @TCA_RATE={0x6, 0x5, {0x0, 0x5}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x20040000) 8.716948623s ago: executing program 3 (id=2882): sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x8e, 0x88, 0x5, 0x20, 0x8086, 0x9500, 0xb6d8, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x1, 0x0, 0x0, 0x15, 0xcc, 0x1c}}]}}]}}, 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000a40)={&(0x7f0000000100)=[{0x1e, 0x1, 0x2, &(0x7f0000000a80)="4dce"}, {0x1000, 0x1800, 0x0, 0x0}], 0x2}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_io_uring_setup(0x838, &(0x7f00000000c0)={0x0, 0x1998, 0x400, 0x2000006, 0x6f}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_FALLOCATE={0x11, 0x40, 0x0, @fd_index=0x2, 0x49998136, 0x0, 0x7ff, 0x0, 0x1}) io_uring_enter(r1, 0x3520, 0x400de1e, 0x0, 0x0, 0x0) 8.370187327s ago: executing program 2 (id=2883): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x69, 0x0, 0x0, 0x0, 0xffffffff}, [@jmp={0x5, 0x0, 0x5, 0x20c8f25452ff403a, 0x0, 0xfffffffffffffffe, 0xfffffffffffffffc}]}, &(0x7f0000000080)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@dellinkprop={0x20, 0x6d, 0x1fd, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, 0x4008, 0x41080}}, 0x20}, 0x1, 0x0, 0x0, 0x20004885}, 0x4054) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000005c0)={0x60, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x7}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x20, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x24000040}, 0x0) r6 = socket(0x400000000010, 0x2, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) ioctl$TUNSETLINK(r2, 0x400454cd, 0x30a) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4000) sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000005f80)=@newtfilter={0x88, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r8, {0x0, 0x1}, {}, {0x8}}, [@filter_kind_options=@f_flow={{0x9}, {0x58, 0x2, [@TCA_FLOW_ACT={0x54, 0x9, 0x0, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x1ff, 0x0, 0x20000001, 0x4, 0x2}, 0x1, r8}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0x88}}, 0x0) 8.01436317s ago: executing program 4 (id=2884): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r1, &(0x7f0000000080)="ffffffffffffff970000", 0xa, 0x0, &(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10) recvfrom(r0, &(0x7f0000000100)=""/10, 0xa, 0x0, 0x0, 0x0) 7.596645856s ago: executing program 0 (id=2885): socket$inet6(0xa, 0x3, 0xff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) futex_waitv(&(0x7f0000000500)=[{0xeb8, &(0x7f0000000200)=0x98a2, 0x2}, {0x8, &(0x7f0000000340)=0x1, 0x82}, {0xfff, &(0x7f00000005c0), 0x82}, {0x900000, &(0x7f00000003c0), 0x2}, {0x200, &(0x7f0000000480)=0x7, 0x80}, {0x77, &(0x7f00000004c0)=0x4, 0x2}], 0x6, 0x0, 0x0, 0x0) syz_open_dev$video(&(0x7f0000000140), 0xd, 0x0) r2 = openat$khugepaged_scan(0xffffff9c, 0x0, 0x1, 0x0) write$khugepaged_scan(r2, &(0x7f0000000040), 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="240000001a005f0214f9f4070009040081000000fe000000000000000800040001", 0x21) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRES8=r1, @ANYBLOB=',group_id=', @ANYRESOCT]) write$FUSE_NOTIFY_STORE(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="2800000009000000000000000000000001"], 0x28) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha512\x00'}, 0x58) socket(0xa, 0x1, 0x1000) r5 = syz_usb_connect(0x5, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000096d5c4004233e0269d7010203010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r5, 0x0, &(0x7f0000000600)={0x24, &(0x7f0000000740)=ANY=[@ANYBLOB="800001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r5, 0x0, &(0x7f0000000780)={0x24, &(0x7f0000000400)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_SMBUS(r6, 0x720, &(0x7f0000000140)={0x1, 0x7, 0x5, &(0x7f0000000100)={0x17, "537a1468df08000000758bd16868e0bf22c7b844c1b1f10186854fff98d2870c38"}}) r7 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r7, &(0x7f0000000000)={0x2, 0x4e21, @private=0xa010102}, 0x10) connect$inet(r7, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r7, 0x6, 0xd, &(0x7f00000000c0)='yeah', 0x68) sendto$inet(r7, 0x0, 0x0, 0x0, 0x0, 0x0) recvfrom$inet(r7, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 7.525404289s ago: executing program 4 (id=2886): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x3) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) socket$nl_netfilter(0x10, 0x3, 0xc) socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) userfaultfd(0x80001) madvise(&(0x7f00003cd000/0x1000)=nil, 0x1000, 0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000000)=@req={0x3, 0x10004, 0x800, 0x7}, 0x10) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffdffffffffff, 0xfa11, 0xffffffff}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="640100000001010400000000000000000a0000003c0001802c000180140003000000000000000000000000000000000014000400200100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe80000000000000000000000000000014000400ff0200000000000000000000000000010c0002800500010000000000080007400000", @ANYRESHEX=0x0], 0x164}, 0x1, 0x0, 0x0, 0x8090}, 0x10) write(0xffffffffffffffff, 0x0, 0x0) unshare(0x22020600) r3 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) r4 = fsmount(r3, 0x0, 0x4) openat$cgroup_pressure(r4, &(0x7f0000000080)='cpu.pressure\x00', 0x2, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x3c1, 0x3, 0x2f0, 0x0, 0x111, 0x4b4, 0x0, 0xd4feffff, 0x1e4, 0x20a, 0x278, 0x1e4, 0x278, 0x3, 0x0, {[{{@uncond, 0x0, 0x130, 0x154, 0x0, {}, [@inet=@rpfilter={{}, {0x4}}, @inet=@rpfilter={{}, {0x4}}]}, @common=@inet=@TCPMSS={0x24, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@ipv6={@loopback, @loopback, [0x0, 0x0, 0x0, 0xff000000], [0x0, 0x0, 0x0, 0xff], 'bond0\x00', 'pim6reg1\x00', {}, {0xff}}, 0x0, 0xa4, 0xd4}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x1, 0x5}, {0x2, 0x0, 0x3}, 0xf, 0x4}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0xffffffffffffff1d) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/igmp6\x00') ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000100)={{0x100}, 'syz1\x00'}) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r6) ioctl$UI_DEV_CREATE(r0, 0x5501) 7.096876989s ago: executing program 1 (id=2887): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r0, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(0xffffffffffffffff, 0x2ded, 0x4000, 0x0, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c41, 0x0) flock(r2, 0x5) ioctl$USBDEVFS_DISCONNECT_CLAIM(0xffffffffffffffff, 0x8108551b, 0x0) close(0x4) r3 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) flock(r3, 0x2) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/locks\x00', 0x0, 0x0) pread64(r4, &(0x7f0000001440)=""/126, 0x7e, 0x41) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, 0x0) ioctl$IOCTL_VMCI_NOTIFICATIONS_RECEIVE(0xffffffffffffffff, 0x7a6, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r5 = openat$kvm(0xffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) 5.838561675s ago: executing program 1 (id=2888): ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$key(0xf, 0x3, 0x2) keyctl$clear(0x3, 0xfffffffffffffffd) keyctl$set_reqkey_keyring(0xe, 0x4) request_key(&(0x7f0000000400)='asymmetric\x00', &(0x7f0000000380)={'syz', 0x3}, &(0x7f0000000340)=')\x00', 0x0) r3 = socket$caif_stream(0x25, 0x1, 0x5) openat$rfkill(0xffffff9c, &(0x7f0000000040), 0x182, 0x0) r4 = syz_io_uring_setup(0x109, &(0x7f0000000140)={0x0, 0x8c63, 0x0, 0x0, 0xfffffdfc}, &(0x7f0000000040)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r4, 0x3516, 0x0, 0x42, 0x0, 0x0) openat$nci(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) setsockopt$CAIFSO_LINK_SELECT(r3, 0x116, 0x7f, &(0x7f00000000c0)=0x6, 0x4) sendmsg$key(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000300)={0x2, 0x9, 0x6, 0x2, 0x2, 0x0, 0x70bd0b, 0x25dfdbff}, 0x10}}, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="5800002310000104000000000200000000000000", @ANYRES32=0x0, @ANYBLOB="00800000bcb5f31a24001280110001006272696467655f736c617665000000000c0005800500010000000000140003006272696467655f736c6176655f300000"], 0x58}, 0x1, 0x0, 0x0, 0x44000}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'pimreg1\x00'}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$KVM_CHECK_EXTENSION(r9, 0xae03, 0x4a) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000000)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010800000000008000000000dc2fca31e1991c1d93c6bcaa000000000000", @ANYRES32=r8, @ANYBLOB="1c0050800500020000000000090001007ee5d52ffd00000004000500"], 0x38}}, 0x40010) 5.540820326s ago: executing program 3 (id=2889): syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000d5e9bd40eb030200c0ba050000010902115c01000000000904000001b504b100090581"], 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x0) sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x0, 0x22, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x3, 0xfa11, 0xffffffff}, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='net/fib_triestat\x00') preadv(r2, 0x0, 0x0, 0x0, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb7, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x2c}, [@ldst={0x0, 0x0, 0x2}]}, &(0x7f00000002c0)='GPL\x00', 0x5, 0xbc, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000080), 0x10}, 0x94) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000880), 0x0, 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) ioctl$TIOCSWINSZ(r3, 0x5414, &(0x7f0000000000)={0x2, 0x0, 0x0, 0xda73}) r4 = inotify_add_watch(0xffffffffffffffff, &(0x7f0000000080)='.\x00', 0x2000775) inotify_rm_watch(0xffffffffffffffff, r4) r5 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x7, 0x800) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11012, r5, 0x0) modify_ldt$write(0x1, 0x0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x640c7400, 0x0, 0x0, 0x0, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) chroot(&(0x7f0000000200)='./file0\x00') 5.259375628s ago: executing program 2 (id=2890): r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f90b24fc60", 0x8c0}], 0x1}, 0x0) (async) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f90b24fc60", 0x8c0}], 0x1}, 0x0) recvmsg$kcm(r0, &(0x7f00000030c0)={0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f0000000100)=""/189, 0xbd}, {&(0x7f0000002b80)=""/191, 0xbf}, {&(0x7f00000001c0)=""/124, 0x7c}, {&(0x7f0000000740)=""/195, 0xc3}, {&(0x7f0000003cc0)=""/4077, 0xfed}, {&(0x7f00000002c0)=""/193, 0xc1}, {&(0x7f00000003c0)=""/139, 0x8b}, {&(0x7f0000000480)=""/81, 0x51}, {&(0x7f00000070c0)=""/4096, 0x1000}], 0x9}, 0x0) (async) recvmsg$kcm(r0, &(0x7f00000030c0)={0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f0000000100)=""/189, 0xbd}, {&(0x7f0000002b80)=""/191, 0xbf}, {&(0x7f00000001c0)=""/124, 0x7c}, {&(0x7f0000000740)=""/195, 0xc3}, {&(0x7f0000003cc0)=""/4077, 0xfed}, {&(0x7f00000002c0)=""/193, 0xc1}, {&(0x7f00000003c0)=""/139, 0x8b}, {&(0x7f0000000480)=""/81, 0x51}, {&(0x7f00000070c0)=""/4096, 0x1000}], 0x9}, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000000)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000180)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0), &(0x7f0000000100)=[0x0, 0x0], &(0x7f0000000140)=[0x0], 0x5, 0x0, 0x2, 0x1}) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000180)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0), &(0x7f0000000100)=[0x0, 0x0], &(0x7f0000000140)=[0x0], 0x5, 0x0, 0x2, 0x1}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) socket$netlink(0x10, 0x3, 0x10) (async) socket$netlink(0x10, 0x3, 0x10) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='net/ip6_flowlabel\x00') mq_notify(r3, &(0x7f0000000000)={0x110c230000, 0x3, 0x2}) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0xa, "0062ba7d82000000160000000000f738096304"}) r4 = syz_open_pts(r2, 0x900) ioctl$TCSETAF(r4, 0x5433, 0x0) (async) ioctl$TCSETAF(r4, 0x5433, 0x0) r5 = socket$rxrpc(0x21, 0x2, 0xa) connect$rxrpc(r5, &(0x7f0000000000)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e20, 0x200, @ipv4={'\x00', '\xff\xff', @remote}, 0x1}}, 0x24) sendmsg$inet(r5, &(0x7f0000000180)={0x0, 0xfffffffffffffd6b, 0x0, 0x0, &(0x7f00000000c0)=[@ip_tos_int={{0x18, 0x110}}], 0x18, 0x4c00}, 0x0) ioctl$FS_IOC_SETFLAGS(r4, 0x40046602, &(0x7f00000000c0)=0x10000) 5.223876768s ago: executing program 1 (id=2891): mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x1000) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x822b01) ioctl$EVIOCSMASK(r1, 0x40104593, &(0x7f0000000140)={0x0, 0x14, &(0x7f0000000100)="4c287bea56504901967e40dc8c55f811acf1642d"}) write$char_usb(r1, &(0x7f0000000040)="e2", 0x918) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000002c0)={0x0, 0x0, 0xfa00, {0x3, &(0x7f0000001180), 0x111, 0x1}}, 0x20) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, 0x0) r2 = socket$inet6(0xa, 0x80002, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x4c) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f00000102c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x20a6) syz_fuse_handle_req(r3, &(0x7f000000c280)="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", 0x2000, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x90, 0x0, 0x0, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x2000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r3, &(0x7f0000000380)={0x50, 0x0, r4, {0x7, 0x2b, 0x0, 0x8400040, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}}, 0x50) link(&(0x7f0000000280)='./file0/../file0/file0\x00', &(0x7f0000000400)='./file0/../file0/file0\x00') syz_fuse_handle_req(r3, &(0x7f0000008280)="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", 0x2000, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)={0x90, 0x0, 0x0, {0x3, 0x0, 0x0, 0x0, 0x0, 0x3, {0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x7, 0x4000, 0x0, 0x0, r6, 0x9}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r3, &(0x7f000000a280)="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", 0x2000, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xf7, 0x0, {0x4, 0x1, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0xfffffffd}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r3, &(0x7f00000041c0)="75c6c1015909d4338683df9486bbc81e43f13e4926c27c2f82f846633ae45dde55cd4aa48598dfcbe26577ac059a9420bca1c94427a6d7872a1b30832e91813fe7e1af1f00f4587326ea389615a22b9b665a4b77d6cd3efb7c7ef750596fd9d755e7c9200af5a208abf303434848890294b53f279f4390b8cba0f4c94ad8b0815e520566857afa936aea2e23f24e936f8f9b2e7aafcabd0f1fdc885b32e9dcf5eddf7cd4445f872327973e0789fe437e6201e32297c99c6be42731a056ed21fee6df04daae244d4164b1f27764dc0d3b38d824461b54c9b7f13dba393b8e2029454f5174b5a59a35970316b38de13bd00db37eb9029abcf71c734e0a865ce878284540125caad33853dc11039bda8f0fb6bb9f67065a858d9d13aa1e8a79727b376ac3b5e25f688821e19fa5573034c50882e3fcbd111e137b80b428f6986d9d8cdb2a2476fbebf22de118e27f0fc48bcfb54fccde391238eea73f5a9fbe2138ae958f44fcfe66845acb714d9b49bfba663b6fe29e09f58ff81d65abe5516378bc176bf7212ed988d1e306b36a37d35ca97a62fa5c70e76829b3f63b3deaa7b98b67fc19586cc60541fadf4b6c5da31a083e57a34399348f53b9c5ab83579ce5ea883195be71b8383cbc6e6227054f1867bcb321d9da7eff2a93f0487ecf6bd2ae805d95be46bea30d267f52ace8c21410b357fef133ace7eba38a326dae7c708a25320c70f229c555289cd8703b680d78b9c6eac6bc99c8abfe8e656f6054a7cede6330f335e9c43d88f1f31380e575fec7e04b1c8cb7b43288849dc0e1ec01e259a15986e23a501ce360a25ec565e0d7d12a20513e82c89fd4f89774ad4b395191b6a9d6b26c99bccd3bc61668dd642aeddeb506782ee87da02eab31f8281587b0dff57a7dd4d8f470c96b467a711f19855c939ef8b503a302673545eb77ba3e599962eeb4e30d5261490bde68860d14d7dfd2e797674384394a39ba4635f902d15e6198e6a2df8357fd0ef40c5a309a2aafd0d94f2983d83086b93ad787ae6b6c22389cd36ee9e958b6e297123ffa6dddfa0d5f7c56de809681b23b89ddb0f38c889c5d7957d47e2aaa1330b12cde716d47c9d60c5e0ded86c8f3c592394eec7c94740e14fdfe799d75f2417c9c8d7ff3247e85bcecda02f7c22d8133a92bc44f3c96f1b7c24fb8493b117efbb2fab56013a4f442da56c46beee7ff473e8e2618e387cb2576d6a4b1d8937203bd01f5f1f8bc035c4009ac67ebc53f88e314ceeda2c1156e0150ca1c4686db66be31986aac9d0799905058a998bf04b417fefa43a9d28e89eae3e5bce4e645097646708d26789c01ecd2b592bce9caffa134a2a31bdbd14d1cc20ef586e6827a009b3472b3fc6b8e759afce903e35f588416480621d1ffb3d7fb66dfe4f0f00e343128cd677ea9833c979cdf94f3cc3eccca626af6537a268297d860e1ee10dfa3e6ee4b30cc369208ab8d44d52e6bcc961766a303053a8e459bc95be9f0f815aba00a9f9e6d4f8c13289169e6f4c2ad4f4a0ddd88e3c54460fa01814a6e154447bade1c4d2dc99d9eadf2427ba9bffb6c3c1fe76d83971d082f7f60435f226754b647ed02aa4364ed22d4331647f4c7aa8bdf5822ecf2ec217d929e5aff4625fee1dcaf38bf4dcd2233d84eba0667c868a18a39c4337f41e9ac33b94bf7856994efcf2564fb1111518ab8dd5459939043c8d72636fc2b089aa99ff158d252a864cb2281592154ff3699623da1b8dfab8f874c14672e7a3f676a0bc654495dd1779e9ba599bfcab5b77bfdce1429dc68c8738ac23056328c918ff8e6eb735c524ce0a1413cdeebe26906d123999c3445d8a6b74dadc9b2d8718c028b52ca3bc5fd30411673dd5564111dcb4f1423c880c3160d2dd83a41bd76fc80474b7e0601a8bd2708ebe85f1b23e190833485f7f3f43b4767b9aba721711dd79d55ac5aecd9ddaa66b04490f52bf6b6475309f15bb64132dc6111be416267c04a2658c490542a7e04d6a7a9dec7237555cbdb32f051c33018452976101cda7d145f39011ac31d019dddb8755998ad1721a04b3fc3f7bb07b3ac2f2087e8f63c9070c65c509238b9d0e33a596b1247108bb7985b35bc33b9c4426e90554f00b6a9c37d1e9ddc27f2f8b16ec70a8fbf13a48659fd75cf71e245772848b4999d37e1b45a3253ae3900b03acd571f5f4621b5d0b672fd87ee83bc1c0d2c08a478fb57091c1634e10d196b4a185728736e75066eb222bfdb463762e773912d5f78fcaf400531fcb2ebe375ab81be7e5412dc153b18bdd3cb0a271e5c650ee2b3fb41727144659bd9e3867733ef3dafccff61adcbc079f0034080ad6cebd2d591f5519f374c1e9cfcc1e1d149b19ed169f3d0a63ee80513db620807e89ceb0ad9c8a5bfc3e1207aab30df7e460fc715bd0e1cf8bd1f346d56e2046f2174d67e89180e5b80c2b3947a3fa80a5def940eaabd2a53d8658d07dc7290dbbdd5277ae9a5e66a8afdbe591798e2f283903bb389274e70af2b45863e6660b62b31b0b0b7c3785f9b0cc292659f97464089399a3f517a8b3b48eb751b855f37ad65d5f2c8ff377a87225ed7c9a970dcde700c62a107b59d10e8c7a6bc2d218099c457be927e35ca4fcc839a5e77ebd022b12848a85c4611d81c6dfa703dae14cbde0e4f0d4df9c888976b09b36d4b63fd474777e8841fda0fa58a3d4291303440e5c7af3ccf8bb478068577214556f48bc14fe4f25c4566c300cde1b20aeeb90c8b6e14ceea3b1c2545e9add0036af3ef47b70eeb6a4bd945bbd514b6f297992aed30393295ac72a5170b0e4b0048b4b4b16a0174405f6165721e69d5ac1c0a1b1c31f6756a0750ab9cf5e1325b77678266b4ee9e5efab246bdee0f1d48b1281cfaa0578e063caeaab14508a340043e6ea18b495ecfe518aadbd0ba4e6d534376611121917ce1eb5197997daed456437207d1e83ad98aee13e3581b0a826eb34a6ec65b6258b0791a2e86a3cdae26d3ef60cfe77ea622bc234d42530c40bc63f86a66c2e6df3efb6b0b6f1c3370eee8e123fe6d952f03ca7ffb94f2f837296771294febf0e4dc28f626da6b4a5bfc7b4c980e3a1eb2d5fa669bc661be59a73d681cefae5def0b866bf4fd7fcd967f9a3bca09c327aaff7635e218b5b7f822c759fd2a6a0a2ddcbd1daa57aef73d69ca88679dfd39934377321e080f4fccaeb5a08786fbf7c6df97ae830f1b2ab77e66bbb9ed9aea46114638b1afd0443a625f0a6e708db7431ebd946638993ffcc7f837e30f5e66abfff9cddf1f9ceba7b025b2452014616c2a66db5d6f4afaf678b1330a70bbdfbbcfb950df9f75f03eb013189982ba8d204315ecd13d70b3ed75f14386224f83b0c95fa45fb4c40a2e655204a01187aaf705bec8e6dfa8f3a387fded3205a613606b794356818ba193a89c4eb716c66ccda98becddd25e9b681307d87d8bf1f3a581ec11becc96996cdc953fa357a1b9537c25c7ea3524d8a929caef9165970aa400e4a2d9ef6dbd7bab4a79491916112073880da0ebcc22035c1f0ea07512ef2908ec62a8e7993f2871aab05016d9cdc548bb7eb8962a54a5c13977ef6b79573d2ca2977b65c22519708af129cebc852563368c225f80d4ae2e51a7bb7d5cf7031c6379697bef8bd696f1e5671d41f4121da411d9ed6a9c345c64d71c469454c1ce8fd8f9c745f6160093cd6400e625e60b7b5646c1d1d167a63379cc87201987d28ad3dae05ab8651591ece4ddb055bf5f7310ea6858040f6cd4f38fea70568f10b09a98a12d1546e7fd5efe549622f54bbc10dcd42f60f8d61aa31fa050a0f7bcbc6e45f9dce0091b5e769ed9ed4aa31e9c1b97619945c03fccf60f8bd547dc0fa072093e4265940d223555534b77489f6cef12f523deab648d6e77b7af4614eaf283a292e3034c6bcd485e8c65f7cc52ff123d1432f53ca3bd42be8b348ba3bfaf57451a5483fce32956669ec96863c3989794fb3359a4b4ac54fbedf566859b9818a5d71779f676874fd126888ad4c03a0dd018732cf5a11e58836556d5378a50c31ae83c364ae9fdeb5e183e5b34587c13e814f2fc757cbb4dbbffeb2d362d442d0617050c33c6aaa1ea593f63374566f10b741f57805d4c74fb43435b54b92c532f865300b4351e1913a34cdc80f5eb0e09e29b248df71a08cfb93351f2af9c9cb052c46d100beeb326d92d70e40da88eabb5acca56fb5fe498ee5d9e1302c3fbd05c6bc7ab12446d089635cd4d9ad88752b131e6ec91fa553afb66ace2c2e3c3709d97b68647b244843e247cf09fd7d056002e4c1754434bd4507f0b79b964bddfd3ad9ed1d1e361995f448808c886998d69f2feadc6d2babcfda86e694866728701b8ae04ef2df56d11fe16da0da9390371fa1ad5158528c5e316b292c123e3f56a579b9e9f516e6f5d321b1df3080959443ce2f88460ec57d7707b87d7f0f878aa3a0c6dff6de51b778410906cb9668c86ebb43a856d651f475142809abecf6cfafff6ed7143b4923d375678f9cb05409a23875d180c3b60a8f80dab10cee5d54fd9b12521c47e09b5df1a5c6d05e25d81232c144385bb3b46f2b5436ee0836e066d12dfe7e844c249431dfd8713ae6428607a337f06d35778ecc5ddfe3470287fc777cde9f0f8aad11e5bf89fd3c097a0fd8f8da1ebd1e4d4de1b39ad0d1cc933e1386875cae224c29a232a15d4fc1e79196ede9ec8f2ec6fa72098a93b90d8cfce870bcffc270e0874f10dd5387867aadf6413925da4ad1d581201cc914bcbe7754685a25ee3b52bdbe20491d460f7275f943f5be210faa4e9d5dbcd4a4e23adc739c521dbc78a2040d33f206e85f3ac04dfc0195368d211de09ab29855f3ea400e12ac2d43f8ca8d12502bba88fe8e027f5970cc2c619e9136ee0c9bce5ee7dd16d715a046a539e042c662723b7fac74c4e2de06f7f7ef4e31648a19b0bf9628d57f3bee570147aaa29faaa60ecf78e5eee6f2b5ce48706a498d72ada4334b82815af52991a77a3546dbbc80c3e53c3a4546fe7f1c0b2dd22100a943b83125c0d0e9a7c5412aa1245c228e13bb9d176fd3734c75963d18260ae25ee11a4588a41c480220bd089223cf5bb70318d4109b5ba190525362374b457b4f198a916ff6066acc5d64cf9338c9ac9ed32343536549b694eb334a5c6316522bd7c703e2df29e6266d7b715ab740098dc98c4338ea91ca592f686ac5b09ceed0fc17ad127b817556289d039bed5f7afeb9922a25a64e6259e9dfa407bc595e97b3a234c053061e9d216292b60c9f2d2465b42c31a8b0357209c6134d3b94d9bc68af60204738301072792e416c8dc612405b766bc2bc4b97acde6f6844b5fb2dfee21be5c1d91a2301bdd5740852ebc8df9c36fb1ff7d8aaee18e2c75c9763366fa7692f87f7d1076980436892251203790599dc789310964a9c03f88dc1f1c0b1cac159f5e36399c75cdb805744486f5624876e81af3f0e1590d098183a40afecf0841d0acf687b13049148eed079796bbb6c1edd3f5c0f5661a2d329b0165ac12f5cf58606970656d2c4d13a4cf2e15aaec175fc59bd9f23ea7869db744fcc0eba039259c7e541efaa066106e9b2c92bdded3e42884a8a02e71457f44775692a1c4fd845ff5ba8595c55ad4bb2177f975de0d22e0feac37f5c3f16426ebcd99d17c829759ac72dc1448661394d3a104999cd40cb09d086146cc92c6408ab1a0b0ad898cbfe76d4962ad0eec1c572a78f9d7342c3de64e881e99afc5b1df3227e198c79c1727a141a8a9da7ba3aae5b3e4ee59a84020191b70fa928d7ce136904c0b03c6c13391f55b381e2df7087b00932251ad7688117cd02ef5ceb5c7dda16d069de3a3e3ff2e341db15df06a96cab1ad2a51db41310ac48d572229695ca941cdfc8416b4307ac6dc176566635bc87d94557e7e4f7a14bdf86d1293c6dafe9ecc280d1a36cc6734485d41b6bd6a33e3605591d98e17fd34f901cdbc33710d768f791b9600218fed28a5d21a0e6589c7d6fb5120c8446eba3a8c8b39dddff369b30cffc0426484ef0b6f6664bec8655e040b2bb3fe3f6863c0a36fe182e3627f6ac38d23050092327f8b67beef764bc35207ed73e4850b43a229d48105d3649c45dc658e27b964b149f978b884268e69a4b353a06e473da3dc7d94c93f7070aae7f3cd2b422840ae55105a6ade053b47b2c72f8b7bde5edc52bc6a8daae76922517e6e3f19b82c5a286e7bfc7254d764ddb79c612e91e1bc61927ad424d1914043a6aacfecb7c90ffb16797349a1ec02de9585b51f19da3a0665f484826f77759234b4b4b7ebf0e176fde2571abc3d4714b543000a1726743dc9e0e6c0bc393b25300287603f47464988eed454ca2dc4377c4c1056f688aa1b5a40d380ba787e962fd19b9a34a32b76a827aa607eb306982aa8aa071c3909c9d1120a0e15a041524eeb12cba62e0378ffcfdf14821710c0d767e32e6a1bd09e76e4f6f9fe4843a967bd633a5fae28a3ae1f64861df70aec3c0cff134a5c8609f011686a430a0c7ef3a36a34a36e0d401b51e51c7eb6e8d13e8616f8c40f0bea3ed9c2b722e141567dbb558da1d7c509ee205b2e9936702b79cec40270398b97dc3525bad7b6809aece6cbe80728c4a188935aaad9edf706a557b84614741259345dfcff830299c640ab3cc534bc1ed744b3a935bb2943e4f8582600394b43269bb94b7c8b6de766770c43b96b04d59d6bb15831fe0bfbc0bb930141d0bd64c280c0a42f49380dd315adab35a4ebaa081ae1f736669156088e2d07670169ec89b85fe4149362135b290336c20451330a968e457c1c8b30ba6ee5ec335b9356a84a19dd459d49ed0b12f730289c24565d2ab0c1d5ed68fb4fa92800c8be4eba970913dd2cec7cfc1617ef0b3f7cae1d2979d2944bcdc375cf0c16a86ac6d5ed98a8d9405b674108f0bfb16b9c0408b134bec0df951bbf261ebc0be30ef15321bf82a6a482bc02db237e1a3d0c401316082ba674962a819d73671829f329b67dd5fcf3715fe6219fbf3631d265a5f0c7cfc3c107e469a55318357fc4f5f28fe48c534025fe0c1f06fa815987b7e1f5acd5a16fdd1c0dccb18d1047f8fb837affeb16dffbf91e01ea904571b21a1c0ac3cab6054314a7becb4188c96596258661a8eb71fcb374ada50b4c8e381f8e76a6b56a9e20a04ecf87445eb164760a4b9abcf96be310a9e0c2ac067f3be2bc05aeb0e91e9998bd1be01c68ce885edb372ca48d8518b45ecce90e2144c2356ceac563bfb4735ce0f21427bec2f728798578ef3c83e0a9ec0e16c4bb1ee24e99ca4dec6888eec3727702e058a3e0d5b8d5a72819b5b9dedd5e698ddb1f4542bd19f6cfdfe62cc179c7ee17307d2d8868c61d061a9310b8a037009017d24dcc6137f79926e20ff015cef3de464c2a9774b1db06a885782ac5abfcd1d48a0d65cdb898d3acaf6fbe347d4a80c9455cf7f16d8c890bc629b5d28d669e74db300023471c887f718ad5e7150890e7fdb8c78f2e63f727b205c71640840bedc58f9a52445ea55b95a6b7ddb7919e64728f716ad19c416fb51bac0e3535ff50a16acf7bdfe8066d519ce21ca4a17e4008c00b9f21c72f718d4de2d0cbeff5ca13032d498540478685bc7e45b4d5773c28acc39e58737dc2a3c907bef44e3e2af584fc7aac8f0e7d82fffc341cc984a9a7523de2ef72970646ce8b0d608315d888cc7cfa0f32d1d8da8aa646d9ad12b5dbe8049178b1ffe3bd13183d76dd06073cbca93685f096d8aedfde7c16060ca6bf3d14a24fcfa073673d77321ebfb290b2e92ea026e69ac6881a94e9ebc9b8ddb799ffb8ee771b7951312cc110a1c99a06529c0a0775b830805c23367001ceb69dcf5ab6a11d197bf1d170f686d53ec1b9635db856fd27b92e966f6c6a59ba8bb1ba812937d1b1e68193b3d7e4b213f7eb2a716717a73db04dd22878bfc34646499ded4a7acbffe6694bbae40635e6f0f322dc1662eb7e34b5a1f4a19c0c77bf2faa29b4aa2e2bb88238302cebc0210674473a3a440ddd1ce34317d74638acef8f6b8e471568887a6192a9ddf7c9d003e4890e4390a05bb5a0de8ca6ee7cebe360e6a7b326b3bf56f08fe8732fe8cf56781054ee56db70b45719f40b529d9cc9ff65362fae742c19b958cced92dac22a880ed6def03c3729612bb0ee34ff18557087a103474eff4f8066f8f25379a4d823f95718afbe5601a613abf3af27d247c88fba62280e904c4038fd8b370018a103693091ad3a44fb8be1e73fe9651c8beb51d70f945ca6ac32585b1a693b2d4598178839c10a7e60553fc83122647c5853e31bdef3a1b304da02a5b6df5d37217749c03467024a70703e32d0ec971ce4a8bab10b7a5a12303a7db83526a7fa3c4ec9fc6e125089c05f3a16e7be89249495e5b20cd6857c30498f524d0c46894e595ee76e301bd6da1743ae4e7e750ad8c4f0282f0bbf12e90383af5796e447fee78e302cf46e3a45126fd59d49a624f7033caeac61d49e147d5ed8e85a90c8914efbdfe2bebdf2ae19b58ce9b61684697dc6f0c65088437df7ec3810724ad7a021ec82b0351826dad927acd1a0662f7fc0278bcfcaafa11315bf5121d1b62f0f0471c54052bee73f2b1fb4139243a6d8de170c80604eadab39021306ff9cf5ce751af1fef52e232fc7c64247e32119e4de98d076b0dc84cf918100d8d3ebff83abefee2353acd133612e3815b8ae14d4f0d1006152807e3b42e035b9a62b58d64706730809a21440c7a9ea228ee033abf7cff2343fc4360b541311fa9ad18110be064ccab41436ca6560081111528dd2eb46a961392f024026d127b5836466fdfba1078b1a89f4c88bf8244b640da376a81142db5b1f27bc7e429cc15e6bad993f3d76f2ba3ff0815895361f20067f57fddd43f44b47375340c39283b3871a68f28b0a8166ac3ee35c8393278d5d2d3887c8a0a964f56f1769c29adbba6fbca7901415e2ab3b63f82d09caa3bf6e7f2e743aa073b57ed8a097f80c47ee546e2fe7b4f6fcbc98770fd7e9f1480517f26656171d394cf47ea395bfb995c087f93cde36b07f3507de2ae23d75b000a532c71265521631e4f8126c5eb96f15d04f183e2162ad9c967c0a1c291f1f1fc2b644271f160764af4e469823c3535ebb25cbc37f09b43fbd258b4a1d45335f162ad5f3d9e5406b671811cc0a16e76f4874041bac7b116483a0727f59a2144ca0490fb8acac82e62cba2e45442d4bf35e49f240a57f542be5df86f6942a5a4b82ff437ff2494c7837d22711aae24265a954d8b6e44b731022214e97ef1111f9bd5fde591bba1541799641670bdb290bd45c15c6b7f594179e3a81873f60e382de67bfe33ec177b64950e05706f1243388ffce2a541c5f30a72cf25623e1c35e72bdebf6d87b4684ff156efb10f96392ddb71353d8c8535173ce57ca41905afbef07ba646a067b2fd71bf3e9335e47672fb43639d7a6a4d51923243121724cb3bca92d304ba2c3fc4942b50c302f1ebb15902c5e191d0b3588df150ddb6aa67477a0046394f6ba91c38cb70d4bf5181e5e99d5c5e1fc39ed3c9b793f0520cf96831d65d51b0ecd92e3bee353b413483fa57690152bb4b524fa6d81d82f66bc2b260a40c232dabe1962f0349a078ec42ccc93bd4acbbcfe61af01388719bcf395f27c401f604684a312624820bfa594755fba5a7f61a7d59f364122398b573f37af4b0526099350b43e5bb8c42300be4f2f78a7fd5a317cb6a7cba8758d25122bb3e0fdab6d4968a668fb6db5e9a7944a78dbb0760059e1f3c2e372f28f3787c1c0163fdcf4812c48c08a381a651d4acab89797cf7a4cb1b792d049fdb4d61eb5e65e2870d94b5b23adbabb1c3e6860a021ec90e226475e5b7358199ffe783536ad7be7437b536affb32c74d5c7702b2d6eb47f3b14132bc270ee6ff482fcf6bd5125ac3b17f72e1de54f07d8f97535a0e59c5b8738c9aa630eeddb0c72d3320bf6e99eaf2b321965734106a49b82c57851f2cdbfcbe7197c3eee3a51e03beedb57a186972f0c276579c0cd429e012b3c09f697ec9a71aa074385e1a1c3d3f235bf6e72072be48d025965866667d64a9d80a18baba65ebf3594c5514dee7e4b414e72f79a47a6aab389cfdc5258d08bbb808c97e1f6e0598bc8b7935dc6faa051a95635cc31169b5b8a044a7ecdb9435b1dd5dcf7d28998cb834212777b49a02932787bd690f102fb0772284feed90aa7b5b4887c8d397c0350a010dffe01c6d35e0de2685e6dcc5e71e1542998610b12eec1cebf0bcfa4ddce0bf7b666216c1a352818e941904203dd64d7a253c9632672885e83e2bccd48410a80294a4628f24913cca629fbc5f4a5c4fa0c3c918f479c2247b8cd3768a144894ee10f41f73d18555661b68679dc09f6fb8647f85a4c752d66679468f96400f300d2636e97af596fccb3fa68038ec626d896b40b1297ab4f849dbbe109886fdb3db6cd230271a8c164be8565772125c86059dcb3aa18d40cbcc356450859b5c157f60f4c657d38c0abf8287a836ced10d852025b70000b04d6977306b5d19cac3ed6d50cf0f2a623fce68a233dd6263c0635783998d0a2da76d5080ca8aac7afe8b5750004be87b260f5c6f6dfe4ffbe55fa86924b3fae0f84e2c23f608f41e4d4e4611f22cb282d9ec2413817656806265cd4b0ec24b2ccf79235f348d5d327618c79717f4a849bf838ce3edf7b02fc27bf92abe64aded9f6f2ee8857384dbf63f88471c73cc28366c30b37361ccdb95e16523a6f65f198906b75e148e9ca78ea7e823db6ab7221697e5fc285dfb308ccfa47980e7c4bb4f6047da4cb127ba2334b6ae616098149ffb0cfd5467dc97580d838929b5363768030a59ee1b60f60194094ca8f02ba5aa3eccf7eab811a8204f6f73a886f74d0ac4669d282c7f1cfb29b26f4902f6f7e0b027b01090f362313a5ad20aa719432cea2444959d19c7889f5b3c37ae7439974bd7cb2c03279a402418600bc854b1f9456d62081a89c931b1bf427e3f495e4dcb6f85d9beb948c62a19ea47b40a00525704bda039ba87a7ea1a674da1e9d2da3878438ef4f48fb764f65841934fe0d1886714a422f1b13db25c0587f4557c042545fbae6c91aa2e9fc5a8f84b5fe90427192b0140527c56fc437be55a48d0a82d2fbb8e5254da21a3d48e5632933d1a54b3a2c0bc7ea34321640708a5790185b1f00439971d676ae6fddf92db22bc801cce738768b0618578f192fcfb4a9b9d736b61f7aeaac0ae76039ee17052f20c23754c9e3ab751a5567648eeae2de4183a7ae6d6149eeca6566a7388c3c7ff41bc7e3858978ea73dae0c9af915232f9f05308bb6b7f99fcd265a95edc4ff3ff5ccb02840c75f4d19a118deb7ef445f617bcd15a8c6fb975e51e776527eff86c7b50bcae2e3797d26237ae8e9722639decaf9489b12ad7aeaff6db3e447df91302ac942de2b6ff30b1eb506a43a0e65f02de7d512f41ee700d62b70b982d55dca30494c04a28adee874a1c7c00", 0x2000, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)={0x90, 0x0, 0x100, {0x6, 0x0, 0x716, 0x81, 0x2, 0x2c7, {0x1, 0xb, 0x8, 0x8, 0x1, 0xd, 0x5e7, 0x81, 0x7ffffffd, 0x4000, 0x7, r5, r6, 0x8, 0x10000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_int(r2, 0x29, 0x19, &(0x7f0000000000)=0x84, 0xfde1) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000327bd7000fedbdf251300000008000100706369303a30303a31302e3000000000080003000000000008000b00d009000006001100070000000800010070636900110002"], 0x7c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4048054) r7 = socket(0x10, 0x3, 0x0) r8 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r9, @ANYBLOB="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"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4) sendto$inet6(r2, 0x0, 0x0, 0x200c00c4, &(0x7f0000000140)={0xa, 0x4c20, 0x0, @empty}, 0x1c) connect$inet6(r2, &(0x7f0000002500)={0xa, 0x4e23, 0xffe00000, @empty, 0x4000003}, 0x1c) sendto$inet6(r2, &(0x7f0000001cc0)="2501d77b330b7e73d6b1d1b8a473ff7420b4b43ce0861f000000714fa228ee1f5b48", 0xfffffffffffffe57, 0x8000, 0x0, 0x0) recvmmsg(r2, &(0x7f0000002480)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40002003, 0x0) openat$uinput(0xffffff9c, &(0x7f0000000240), 0x802, 0x0) 4.865936617s ago: executing program 4 (id=2892): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000040)=0x4, 0x8) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000000000000000000000000000000000001ac1414aa00000000320200000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000c00000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000feffffffff7f4000020000000000000800000000000000000100000044000500ac1414aa000000000000000000000000000000003c00000000000000ac1414"], 0xfc}}, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x1fff, 0x0, @mcast2, 0x5}, 0x1c) r2 = ioctl$USERFAULTFD_IOC_NEW(0xffffffffffffffff, 0xaa00) write(r2, &(0x7f00000005c0)="9e090014091b04d520fe5e45742c9638d2731291e2a66e64352268820da32cc0b0a413492f50f1c99ef13c28ec671a7d9e28e721b2c04500d03e972737bb58d6d367a10fd57f00000002690149b360e1171ab146039ee1c3dbb0f288b8d761ee7d4b7ce9dcbedcfd239de9c120655becadc5cd064451593efc6f8095017465aff6a0e1a3fb4b8a4394bc", 0x8a) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) socket$igmp(0x2, 0x3, 0x2) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r4, 0xc}, 0x80, &(0x7f0000000000)=[{0x0}], 0x1}, 0x4) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000940)=ANY=[@ANYBLOB="6c0000001200010227bd7000fedbdf2507000000", @ANYRES32=0x0, @ANYBLOB="189c000001100400140014007665746830000000000000000000000008001f00f9ffffff0a0001"], 0x6c}, 0x1, 0x0, 0x0, 0x300080d4}, 0x20000000) read(r5, &(0x7f00000001c0)=""/253, 0xfd) 4.80492977s ago: executing program 2 (id=2893): r0 = socket$netlink(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x5}, @TCA_RATE={0x6, 0x5, {0x0, 0x5}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x20040000) 4.706653073s ago: executing program 2 (id=2894): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'ip6_vti0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv4_newaddr={0x28, 0x14, 0x509, 0x70bd28, 0x40300, {0x2, 0x1f, 0xd, 0x0, r1}, [@IFA_LOCAL={0x8, 0x2, @local}, @IFA_RT_PRIORITY={0x8, 0x9, 0xc}]}, 0x28}}, 0x0) 4.67318199s ago: executing program 1 (id=2895): r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000000)={'ip6tnl0\x00', &(0x7f00000000c0)={'syztnl2\x00', 0x0, 0x4, 0xfd, 0x5, 0x3, 0x44, @loopback={0x80000000008000}, @mcast2={0xff, 0x3}, 0x20, 0x7, 0x2, 0x1}}) 4.617675138s ago: executing program 4 (id=2896): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet(0x2, 0x3, 0x9) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) getpeername$unix(0xffffffffffffffff, &(0x7f0000000180), 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffff, 0xfff3}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x5}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x7000, &(0x7f0000000140)={&(0x7f00000003c0)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xfff1, 0xa}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}, @TCA_BPF_CLASSID={0x8, 0x3, {0x3, 0x5}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_int(r2, 0x1, 0x6, 0x0, 0x0) shutdown(r2, 0x0) recvmmsg(r2, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r8 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r9 = openat$cgroup_int(r8, &(0x7f0000000080)='memory.low\x00', 0x2, 0x0) sendfile(r9, r9, 0x0, 0x4) r10 = fsopen(&(0x7f00000000c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r10, 0x6, 0x0, 0x0, 0x0) fsmount(r10, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x8) 4.504916533s ago: executing program 1 (id=2897): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r2 = timerfd_create(0x0, 0x0) r3 = syz_usb_connect(0x2, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000059770c40c009030243d30000000109021200"], 0x0) syz_usb_control_io$cdc_ecm(r3, 0x0, &(0x7f0000000640)={0x10, &(0x7f0000000580)={0x0, 0x14}, 0x0, 0x0}) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r3, &(0x7f0000000140)={0xc, &(0x7f0000000000)={0x0, 0x5, 0x25, {0x25, 0xd, "feb6ee08193fbd25ed34a7813cb8bcd08c769cb3a2f3e944fc1d966a3b30fca3a741c6"}}, &(0x7f0000000100)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000300)={0x10, &(0x7f0000000680)={0x20, 0xa, 0x81, "dfe7bf05eff1f3cc0e66c179b0ef981e451c1a58764047032a18f3ee0915836321a48d51822b06c32bb2c828ceb5dbecd7e11ca2bc8369c4cfb9ef8a1aacd0dc392c35b081be4373716e57421c7bbc4ff87e36ab7408255bd601c18d8d1ef746cfae74140ee418b1aa918c24e15d603bee5c5e8b01fe44b8a3fadca60bf7fe9ed8"}, &(0x7f00000001c0)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000240)={0x0, 0x8, 0x1, 0xf}}) timerfd_gettime(r2, &(0x7f0000000200)) bind$alg(0xffffffffffffffff, &(0x7f0000000480)={0x26, 'aead\x00', 0x0, 0x0, 'ccm-aes-ce\x00'}, 0x58) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(0x0, r4) sendmsg$TIPC_CMD_GET_LINKS(r4, &(0x7f00000003c0)={0x0, 0xa6, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, r5, 0x1, 0x70bd29, 0x25dfdbff, {{}, {}, {0x8, 0x11, 0x6}}}, 0x24}, 0x1, 0x0, 0x0, 0xc0}, 0x0) r6 = syz_io_uring_setup(0xa07, &(0x7f0000000580)={0x0, 0xb967, 0x80, 0x3}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f00000000c0)=@IORING_OP_TIMEOUT={0xb, 0x10, 0x0, 0x0, 0x9, 0x0, 0x1, 0x1, 0x1}) io_uring_enter(r6, 0x7855, 0x0, 0x0, 0x0, 0x0) 3.241694621s ago: executing program 0 (id=2899): r0 = dup(0xffffffffffffffff) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) sendmsg$nl_generic(r0, 0x0, 0x44880) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000c18000)="ad", 0x1) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000d71000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f0000179000/0x2000)=nil) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r3 = io_uring_setup(0x3454, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) mremap(&(0x7f00003eb000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000003000/0x1000)=nil) migrate_pages(0x0, 0x3, &(0x7f0000000040)=0x7f, &(0x7f0000000300)=0xa) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="180000000000000000000000000000009500000052573abcbbb080"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) r4 = userfaultfd(0x80001) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa07, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1, 0x2}) socket$netlink(0x10, 0x3, 0xc) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)}) mkdir(0x0, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) 2.368851135s ago: executing program 3 (id=2900): syz_open_dev$sndctrl(0x0, 0x0, 0xc8080) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$KVM_SET_XSAVE(0xffffffffffffffff, 0x5000aea5, &(0x7f00000001c0)={[0x28861e98, 0x7, 0x81, 0x0, 0x7, 0x0, 0x0, 0xbc, 0xc, 0x5, 0xffff, 0xfffff001, 0xd2f, 0x4ff, 0xe, 0x9, 0x7, 0x7, 0x1, 0x4, 0x1000, 0x1, 0x7, 0x0, 0x791e0556, 0x0, 0xfffffffd, 0x5, 0x7, 0x3, 0x10, 0x7, 0x7fffffff, 0x6, 0x3, 0x667d, 0x81, 0x7fffffff, 0x4, 0x8, 0x0, 0x5, 0x6, 0x6, 0x400, 0xff, 0x8, 0xfffffff8, 0xfffff226, 0xfffffffa, 0x80000000, 0x2, 0x4, 0x2bef0a6, 0x101, 0x4, 0x8, 0x6, 0x40f5, 0x7, 0xffff, 0xfffffffd, 0x0, 0x10, 0x4, 0xe, 0x2, 0x81, 0x2, 0x8, 0x8, 0x81, 0x7, 0x60ab, 0x400, 0x8000, 0x2, 0xc, 0x9cf, 0x8, 0x972, 0x4, 0x1, 0x5, 0xfb, 0x5, 0x4, 0x40, 0x4, 0x1, 0x7, 0x4, 0x2, 0xc, 0x1, 0x7fffffff, 0x1, 0x5, 0x7ff, 0x9, 0x7, 0x0, 0xffff7d01, 0x8, 0xe3a, 0xd93, 0x8, 0x7, 0x10000, 0x1, 0x7, 0x4, 0x9, 0x4, 0x2, 0x7, 0x0, 0x4, 0x0, 0x6, 0x3, 0x8, 0xffff1b05, 0xb0, 0x8, 0x80ff, 0x2f, 0x7, 0x1, 0x7, 0x8, 0x6, 0x9, 0x0, 0x6, 0x9, 0x9, 0xfffffffd, 0x2, 0x40, 0x7, 0x8, 0x781258ac, 0x8, 0x7a8, 0x1, 0xffffffff, 0xabd, 0x9b6c, 0xb6dd, 0x9203, 0xa30, 0x172, 0xf8000002, 0x3ff, 0x3a8, 0x1, 0x2, 0x625, 0x6, 0x50, 0xc75d, 0x5, 0x800000, 0x8, 0x9, 0xa, 0x67a6, 0x7ffffffb, 0x5, 0x1, 0xffffffff, 0x1, 0x3, 0x709d, 0xfffffff2, 0x1, 0x1, 0x10001, 0x8, 0x0, 0x2, 0x2, 0x7, 0x0, 0x9, 0x3, 0x3, 0x2, 0x8, 0xd8, 0x9, 0x7, 0x6, 0x1, 0x3, 0x10000, 0x1, 0x3714fc78, 0x4, 0xbc2, 0x7, 0x5, 0x2, 0x7ff, 0x7a1, 0xab, 0xff, 0x7, 0x0, 0x80000001, 0x3, 0x3, 0x7, 0x3, 0x4, 0xff, 0x4, 0x10000, 0x2, 0x7, 0x1, 0x20, 0x9, 0x8, 0x6, 0x8, 0x80000001, 0x8, 0x10000002, 0x8, 0x4, 0x9de, 0x6, 0x4, 0x5, 0x10001, 0x2, 0x9, 0x5, 0x3, 0xf, 0xfffff7b0, 0xffff354c, 0x1000, 0xd, 0x1146, 0x0, 0x1, 0x8, 0x10001, 0x5, 0x72a, 0xcb8a, 0x9, 0x5ad, 0x6, 0xe253, 0x6, 0x4, 0x7, 0x9, 0x4, 0x7efb, 0x0, 0xd, 0x401, 0xfffffc00, 0x7fff, 0x80000000, 0x2, 0x3, 0x3, 0x81, 0x6, 0x6, 0x6, 0x4, 0x7ff, 0x2, 0x8, 0x4, 0x6d9, 0x4, 0x8, 0x7, 0x4, 0x7, 0x8, 0x6, 0x1, 0x21dc92b0, 0x10000, 0x3ff, 0x6, 0x1ff, 0x800, 0x0, 0x2, 0x1, 0x1, 0x8, 0x4, 0xfa33c9e0, 0xfffffffa, 0x8, 0x6, 0x8, 0xa, 0x6, 0x4, 0xfffffffd, 0x9, 0xfffffff9, 0x7fff, 0xd733, 0x10, 0x7f, 0x0, 0xffff7a56, 0x128, 0x9, 0x3, 0x6, 0x4, 0xf, 0x1000, 0x8000, 0xffff, 0x9, 0x9, 0x4, 0x0, 0xb8b, 0x1, 0x9, 0x4, 0x5, 0x2, 0xfffffff6, 0x9, 0x1fd, 0x0, 0x2, 0x2, 0x7, 0x2007, 0x5, 0x5, 0xffff1b35, 0xff000000, 0x0, 0x8, 0x3, 0x1, 0x3, 0x7, 0xfffffff9, 0xa, 0x6, 0x6, 0x5, 0x8, 0x1, 0x7, 0x3, 0xcec, 0x4, 0x7e0692a1, 0xfffffffe, 0x7, 0x3, 0x0, 0x0, 0xffff, 0x4, 0xfffffca9, 0x2, 0xbfa9, 0x8, 0x0, 0x4006, 0x9, 0x2, 0xfffffffd, 0x1, 0x0, 0x7, 0x4, 0xfffffffd, 0x1, 0x510acf21, 0x4, 0x1c, 0x7, 0x2b1d, 0x8, 0x80000001, 0x6, 0x7, 0x0, 0x9, 0x7, 0x30e, 0x1, 0xffffffff, 0x2, 0x6, 0x3, 0x10001, 0xff, 0x7, 0x1, 0x100, 0xea, 0x5be, 0x8, 0xa2, 0x3, 0xc82, 0x40, 0x2, 0x1, 0x0, 0x5, 0x1000, 0x1, 0x3, 0x9, 0x8, 0x0, 0x3, 0x7, 0x7f, 0x4, 0xab5, 0xb34, 0xffff, 0x8, 0x6, 0x4, 0xfffffff7, 0x9, 0x5c81, 0xff, 0x6, 0x0, 0x101, 0x7, 0x1000, 0x5, 0x8, 0x3, 0x9, 0xff, 0x1, 0x1002, 0x80000001, 0x0, 0x40, 0x8, 0xfffffff1, 0x1, 0x8, 0x1, 0x8, 0x43c1, 0x3c5, 0xa, 0xffffffff, 0x10001, 0xffff0001, 0xb, 0xf, 0xad4, 0x1, 0x7, 0x0, 0x3ff, 0x9, 0xfffffff9, 0x29b, 0x3, 0xcf2, 0x4, 0xb, 0x401, 0xff, 0x9, 0x80000003, 0xd, 0x31e8, 0x6410, 0xc42d, 0x9ac2, 0x7f, 0xfffffffd, 0x3, 0x6, 0x6, 0x2, 0xc, 0x8, 0x9, 0x2e82a536, 0x1000999f, 0x77b0ffd, 0x9, 0x5, 0x81, 0x9, 0x2, 0x1, 0x3, 0x4, 0x6, 0x7, 0x200, 0xcecd, 0x9, 0x7fffffff, 0x8001, 0x7, 0xa, 0xffffffe3, 0x8, 0x1, 0x1, 0x0, 0x8, 0x80, 0x2, 0x58f4, 0x3, 0x7, 0x2, 0x9, 0x3, 0x8000, 0xc42c, 0x800, 0x0, 0x38000, 0x50, 0x5, 0x3, 0x5, 0xffc, 0x3, 0x1, 0x7, 0x3, 0x4, 0x8, 0x3, 0x90, 0x3, 0x9, 0x98a, 0x8, 0x5, 0x400, 0xe, 0x2, 0x1, 0xff, 0x2, 0x7, 0x293, 0xe, 0x10000, 0x7, 0x84a4e3c, 0x6, 0x81, 0x8, 0x0, 0x4, 0xffff, 0x401, 0x81, 0x9, 0x6, 0x3, 0x7ff, 0x2, 0x3, 0xb, 0xaa, 0x74, 0x0, 0x6, 0x5, 0x5, 0x1, 0x100, 0x3, 0x1ff, 0x41c2, 0x1, 0xb, 0x3f58, 0x0, 0xff, 0x9, 0x1abadea7, 0x6, 0x7, 0x7, 0x40, 0x0, 0xff, 0x7f, 0x7, 0x9, 0x80000000, 0xfffffe01, 0x5, 0x4, 0xd, 0xae41, 0x4d, 0xffffffff, 0x8, 0x0, 0x7f, 0xad, 0x40, 0x6, 0xfffeffff, 0x1, 0x6, 0xf, 0x3, 0x4, 0x4fa, 0x2, 0xb7, 0x100, 0x7ff, 0x7fff, 0x7ff, 0x9, 0x100000e, 0xd82, 0x3, 0x0, 0x5, 0x3ff, 0x401, 0x7, 0x2, 0xab1, 0x9, 0xfffffffe, 0xa49, 0xc, 0x8, 0x81, 0xc6, 0x0, 0x7, 0x3, 0x2, 0x1, 0x3, 0x23a1, 0x4, 0x3, 0x9, 0x3d, 0x2, 0x2, 0x81, 0x2, 0x8, 0x5, 0xe, 0xb, 0x9, 0x5, 0x0, 0xa, 0x9, 0xf, 0x9, 0x1, 0xffffff13, 0x1, 0x4, 0x81, 0x200, 0x4, 0x7, 0x6, 0x8, 0x4, 0x8, 0x6, 0x9, 0x9, 0x5, 0xc3, 0x2b6ff775, 0x4, 0x7, 0x0, 0x2, 0x400, 0xe, 0x8, 0x9, 0x1, 0x5, 0x6, 0x9, 0x5, 0x401, 0x6, 0x9, 0x9, 0x279, 0x2, 0x7f, 0x9, 0x80000000, 0x5, 0x0, 0xc, 0xfffffff7, 0x5, 0x397, 0x1, 0x6, 0x0, 0x80000001, 0x4edc, 0xa6c, 0xfffffffd, 0xf7d6, 0x10, 0x8, 0xd33, 0x3ff, 0x81, 0x4, 0x240000, 0x5, 0x9, 0x2, 0x3, 0x49fc, 0x6, 0xc89, 0x8, 0x8, 0xf, 0x2, 0x3, 0x1, 0xaab, 0x6, 0x401, 0x5, 0xfff, 0x4, 0x9, 0x1, 0x0, 0x8000, 0x1ff, 0x8000, 0x80, 0xe2d3, 0x0, 0x2, 0x1, 0x7, 0xa, 0x8, 0x200, 0x7, 0x7, 0x8455, 0x5, 0x9, 0x1, 0x2abf, 0xffff, 0x7, 0x2000000, 0x7, 0x2, 0x6, 0x8, 0x0, 0xb8f, 0x8, 0xa, 0x2, 0xffffffff, 0x8, 0xc, 0x1, 0x3, 0x2, 0x0, 0x2, 0x1, 0x6, 0x7, 0x6, 0x4, 0x2, 0xf7a6, 0x1, 0x9, 0x3, 0x40, 0xffffffff, 0x1, 0xf, 0x800, 0xb231, 0x7de, 0x40, 0x3, 0x0, 0x6, 0x7f, 0x7ff, 0x5, 0x2, 0x1, 0xa73, 0x9, 0x4, 0x1, 0x48, 0x5, 0x5, 0x8, 0x2, 0x7ac0, 0xfff, 0x3, 0x2, 0x2, 0x901, 0x6, 0xfffffffb, 0x3ff, 0x0, 0x5, 0x5, 0x3, 0xff, 0x6, 0xa, 0x2, 0x80000000, 0x9, 0xf, 0x1, 0x100, 0x80000001, 0xfffffffa, 0x8, 0x71, 0x1, 0xf, 0x7, 0x1163, 0x2, 0x9, 0x1, 0x65e7, 0x400, 0x2, 0xe384, 0x3ff, 0x0, 0xffffffff, 0xe, 0x897, 0x5, 0x8, 0xffffffff, 0x80, 0x77a2d67e, 0x1, 0x80000000, 0x1, 0x8c, 0x3, 0x7, 0x8, 0xfffffffc, 0x5, 0x9, 0x2, 0x3fbd40, 0x1, 0x10001, 0x1, 0x7f, 0x10, 0x6, 0x3, 0x1, 0x406, 0xff, 0x7, 0x101, 0x7, 0x7, 0x8, 0x7, 0x9, 0x8000, 0x808000, 0x3, 0x1, 0x3, 0x9, 0x2, 0x400, 0x2, 0x3, 0xffffffff, 0xa1dc, 0x2, 0x6, 0xb25, 0x2, 0x6, 0x7, 0x6, 0x5, 0x3d91, 0xffffffff, 0x400002dd, 0x5, 0x4, 0x0, 0x3ff, 0x1, 0x80, 0xff, 0x8, 0x3, 0x8000, 0x71, 0x6, 0x8, 0x5, 0x0, 0xa01250fd, 0x101, 0x3, 0x0, 0x8b16, 0x9, 0x543, 0x8, 0x2, 0x7, 0x2, 0x8, 0x1000, 0x6e, 0x8, 0x40, 0x4, 0x5, 0xb93, 0x4, 0xb5e7, 0x0, 0xf547, 0xf, 0x2, 0xffffffc0, 0xab8, 0x2, 0x6, 0x6, 0x101, 0x49, 0x3, 0x7, 0xfb65, 0x9, 0x2, 0xfff, 0x1, 0x6, 0x3, 0xfffffff7, 0xf, 0x1, 0xffffff7c, 0x1, 0x7f, 0xe, 0x858, 0x7ff, 0x1, 0x6, 0x800000, 0x21f6, 0x4, 0x2, 0xb, 0x7, 0x6, 0xa, 0x6, 0x8e, 0xcd, 0x85, 0x6, 0x5732, 0x93e]}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010003b15fd070000fb"], 0x3c}}, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x81, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x200}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000002c0)={[0x4, 0x5, 0x6, 0x4004, 0x2, 0x4, 0xefffffffffffffff, 0x0, 0x0, 0x2000000, 0x0, 0x1c, 0x0, 0xffffffffffffffff, 0x6], 0x0, 0x41901}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0186405, &(0x7f0000000340)={0x2, 0x3ed2, {0x0}, {}, 0x7, 0xd}) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x2, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2bc, 0x158, 0xffffffff, 0xffffffff, 0x158, 0xffffffff, 0x228, 0xffffff7a, 0xffffffff, 0x228, 0xffffffff, 0x7fffffe, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0xffffffff, 'veth1\x00', 'geneve1\x00', {}, {}, 0x0, 0x0, 0x41}, 0x6, 0x130, 0x158, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "e4ff0100cbd047da9ca965f96ad5801f0514d363ee84bb895919d9490f6785fba3c4a44f1e25a56a5ef73be11d65bfe8c37674024c183ebacdf741cea92ded3a9ca54de15dd9ec8ef62f9eb85f401b0000000000ffffff7f00", 0x7d}}]}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0xa, 0x7}}}, {{@ip={@remote, @multicast1, 0x0, 0xffffffff, 'macvlan1\x00', 'syz_tun\x00', {0xff}, {0xff}, 0x33, 0x2, 0x2}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x7]}}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x318) sched_setattr(0x0, &(0x7f0000000300)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x9, 0x2, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$VHOST_SET_LOG_BASE(0xffffffffffffffff, 0x4004af61, &(0x7f0000000200)=0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r8 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r8, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x7, 0x1}, 0x1c) r9 = syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0xfad7, 0x10000, 0x3}, &(0x7f0000000040), &(0x7f0000000280)) io_uring_enter(r9, 0x1f85, 0x40110a, 0x4d, 0x0, 0x85) recvmmsg$unix(r8, &(0x7f0000001e80)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f00000005c0)=""/227, 0xe3}], 0x1}}, {{&(0x7f0000000380), 0x6e, &(0x7f0000001840)=[{&(0x7f0000000580)=""/17, 0x11}, {&(0x7f00000006c0)=""/4096, 0x1000}, {&(0x7f00000016c0)=""/195, 0xc3}, {&(0x7f00000017c0)=""/114, 0x72}], 0x4}}, {{&(0x7f0000001880), 0x6e, &(0x7f0000001e40)}}], 0x3, 0x40000000, 0x0) sendmmsg(r8, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) recvmsg(r7, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0xf8}], 0x1}, 0x1f00) 1.68398877s ago: executing program 4 (id=2901): r0 = socket$can_j1939(0x1d, 0x2, 0x7) getsockname(r0, 0x0, &(0x7f0000000100)) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8), 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0xc, 0x0, 0xfffffdfffffffffe, 0xfa11, 0xffffffff}, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) r4 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r4, 0xc0184800, &(0x7f0000000100)={0x20004, r3, 0x80000}) r6 = syz_open_dev$dri(0x0, 0x1ff, 0x80000) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r5}) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r9, 0x4138ae84, &(0x7f0000000100)={{0x14004, 0x100000, 0x10, 0x1, 0xfe}, {0x0, 0x2000, 0xf, 0xfe, 0x0, 0x0, 0x0, 0xff, 0x8, 0x0, 0x5}, {0xd000, 0x2, 0x0, 0x80, 0xf9, 0x0, 0x0, 0x2, 0x23, 0x0, 0x4}, {0x5000, 0x2, 0xf, 0x41, 0x0, 0x2, 0x1, 0xfc, 0x0, 0x3}, {0x4000, 0xeeef0000, 0xc, 0x1, 0x3, 0x10, 0xc0, 0x0, 0x1, 0x0, 0x4}, {0x0, 0x100000, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x2, 0xff}, {0x8000000, 0x2000, 0xa, 0x0, 0x2, 0xfd, 0x0, 0x7, 0x3a, 0x2, 0x0, 0x1}, {0x0, 0x2, 0x0, 0x2, 0x0, 0x6, 0x7, 0x0, 0xfe, 0x0, 0xfe, 0x5}, {0x0, 0x400}, {}, 0xddf8ffdb, 0x0, 0x0, 0x100, 0x7, 0x8000, 0xffff1000, [0x400000000000000, 0x10000000020, 0x2]}) ioctl$KVM_RUN(r9, 0xae80, 0x0) ioctl$KVM_TRANSLATE(r9, 0xc018ae85, &(0x7f0000001280)={0x0, 0xdddd0000, 0x2, 0x5, 0x50}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) fchdir(0xffffffffffffffff) r10 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x81901) move_mount(r10, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 406.934384ms ago: executing program 0 (id=2902): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x3) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) socket$nl_netfilter(0x10, 0x3, 0xc) socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) userfaultfd(0x80001) madvise(&(0x7f00003cd000/0x1000)=nil, 0x1000, 0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000000)=@req={0x3, 0x10004, 0x800, 0x7}, 0x10) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffdffffffffff, 0xfa11, 0xffffffff}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="640100000001010400000000000000000a0000003c0001802c000180140003000000000000000000000000000000000014000400200100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe80000000000000000000000000000014000400ff0200000000000000000000000000010c0002800500010000000000080007400000", @ANYRESHEX=0x0], 0x164}, 0x1, 0x0, 0x0, 0x8090}, 0x10) write(0xffffffffffffffff, 0x0, 0x0) unshare(0x22020600) r3 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) r4 = fsmount(r3, 0x0, 0x4) openat$cgroup_pressure(r4, &(0x7f0000000080)='cpu.pressure\x00', 0x2, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x3c1, 0x3, 0x2f0, 0x0, 0x111, 0x4b4, 0x0, 0xd4feffff, 0x1e4, 0x20a, 0x278, 0x1e4, 0x278, 0x3, 0x0, {[{{@uncond, 0x0, 0x130, 0x154, 0x0, {}, [@inet=@rpfilter={{}, {0x4}}, @inet=@rpfilter={{}, {0x4}}]}, @common=@inet=@TCPMSS={0x24, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@ipv6={@loopback, @loopback, [0x0, 0x0, 0x0, 0xff000000], [0x0, 0x0, 0x0, 0xff], 'bond0\x00', 'pim6reg1\x00', {}, {0xff}}, 0x0, 0xa4, 0xd4}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x1, 0x5}, {0x2, 0x0, 0x3}, 0xf, 0x4}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0xffffffffffffff1d) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/igmp6\x00') ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000100)={{0x100}, 'syz1\x00'}) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r6) ioctl$UI_DEV_CREATE(r0, 0x5501) 0s ago: executing program 3 (id=2903): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x21800, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) add_key$user(&(0x7f0000000140), 0x0, 0x0, 0x0, 0xfffffffffffffffd) socket(0x1d, 0x2, 0x6) pipe(&(0x7f0000000600)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="14000000100001f5ffffff00000000000500000a6c000000060a010400000000000000000200000a400004803c0001800b00010065787468647200002c000280050002008900000008000340000000000800044000000001080006400000000208000140000500010900010073797a30000000000900020073797a32"], 0x94}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x101000) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x44, r8, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x30, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @local}}, {0x14, 0x2, @in={0x2, 0x0, @multicast1}}}}]}]}, 0x44}}, 0x0) sendmsg$TIPC_NL_KEY_SET(r6, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)={0x30, r5, 0x1, 0x0, 0x4000000, {{}, {}, {0x14, 0x17, {0x0, 0x401, @l2={'ib', 0x3a, 'wg1\x00'}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x24008044}, 0x0) r9 = syz_open_dev$vim2m(&(0x7f0000000180), 0x100007, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r9, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1}) kernel console output (not intermixed with test programs): sb 2-1: config 0 descriptor?? [ 862.271076][ T5900] logitech 0003:046D:C623.0011: item fetching failed at offset 8/69 [ 862.377962][ T5900] logitech 0003:046D:C623.0011: parse failed [ 862.385521][ T5900] logitech 0003:046D:C623.0011: probe with driver logitech failed with error -22 [ 862.503052][T15197] geneve4: entered promiscuous mode [ 862.520766][T15197] geneve4: entered allmulticast mode [ 862.734308][ T5900] usb 5-1: new high-speed USB device number 94 using dummy_hcd [ 862.927286][ T5900] usb 5-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 862.927323][ T5900] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 862.927346][ T5900] usb 5-1: Product: syz [ 862.927362][ T5900] usb 5-1: Manufacturer: syz [ 862.927379][ T5900] usb 5-1: SerialNumber: syz [ 862.947246][ T5900] usb 5-1: config 0 descriptor?? [ 863.105522][T15220] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2420'. [ 863.117115][T15220] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2420'. [ 863.443878][ T8063] usb 1-1: new high-speed USB device number 103 using dummy_hcd [ 863.568669][ T5900] usb 5-1: Firmware version (0.0) predates our first public release. [ 863.579551][ T5900] usb 5-1: Please update to version 0.2 or newer [ 863.606595][ T8063] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 863.619274][ T8063] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 863.633888][ T8063] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 863.644730][ T8063] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 863.678819][T15223] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 863.703190][ T8063] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 863.777949][ T5900] usb 5-1: Firmware: build : [ 863.923310][ T6342] usb 1-1: USB disconnect, device number 103 [ 864.012902][ T5900] usb 5-1: USB disconnect, device number 94 [ 864.248698][ T8063] usb 2-1: USB disconnect, device number 94 [ 864.866644][T15249] netlink: 'syz.3.2429': attribute type 10 has an invalid length. [ 864.921131][T15249] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 865.125160][ T5892] usb 2-1: new high-speed USB device number 95 using dummy_hcd [ 865.312196][ T5892] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 865.339968][ T5892] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 865.365413][ T5892] usb 2-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.00 [ 865.382108][ T5892] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 865.448715][ T5892] usb 2-1: config 0 descriptor?? [ 865.898420][ T5892] usbhid 2-1:0.0: can't add hid device: -71 [ 865.905853][ T5892] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 865.983453][ T5892] usb 2-1: USB disconnect, device number 95 [ 867.031799][T15290] syzkaller0: entered promiscuous mode [ 867.037409][T15290] syzkaller0: entered allmulticast mode [ 867.277640][ T30] audit: type=1326 audit(1768083099.977:420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15283 comm="syz.2.2443" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700d539 code=0x7ffc0000 [ 867.488942][T15293] syzkaller1: entered promiscuous mode [ 867.497391][ T30] audit: type=1326 audit(1768083100.007:421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15283 comm="syz.2.2443" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700d539 code=0x7ffc0000 [ 867.523893][T15293] syzkaller1: entered allmulticast mode [ 867.750209][ T30] audit: type=1326 audit(1768083100.447:422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15298 comm="syz.3.2446" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701d539 code=0x7ffc0000 [ 867.809577][ T30] audit: type=1326 audit(1768083100.477:423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15298 comm="syz.3.2446" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701d539 code=0x7ffc0000 [ 867.909749][ T30] audit: type=1326 audit(1768083100.477:424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15298 comm="syz.3.2446" exe="/root/syz-executor" sig=0 arch=40000003 syscall=365 compat=1 ip=0xf701d539 code=0x7ffc0000 [ 867.934934][ T30] audit: type=1326 audit(1768083100.477:425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15298 comm="syz.3.2446" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701d539 code=0x7ffc0000 [ 867.957751][ T30] audit: type=1326 audit(1768083100.477:426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15298 comm="syz.3.2446" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701d539 code=0x7ffc0000 [ 868.024587][ T30] audit: type=1326 audit(1768083100.477:427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15298 comm="syz.3.2446" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf701d539 code=0x7ffc0000 [ 868.093219][T15311] netlink: 'syz.3.2448': attribute type 3 has an invalid length. [ 868.159710][ T30] audit: type=1326 audit(1768083100.477:428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15298 comm="syz.3.2446" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701d539 code=0x7ffc0000 [ 868.244033][ T30] audit: type=1326 audit(1768083100.477:429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15298 comm="syz.3.2446" exe="/root/syz-executor" sig=0 arch=40000003 syscall=365 compat=1 ip=0xf701d539 code=0x7ffc0000 [ 868.471403][T15319] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2450'. [ 868.576045][ T8063] usb 1-1: new high-speed USB device number 104 using dummy_hcd [ 868.683912][ T5900] usb 4-1: new high-speed USB device number 86 using dummy_hcd [ 868.755078][ T8063] usb 1-1: Using ep0 maxpacket: 8 [ 868.779179][ T8063] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 868.800611][ T8063] usb 1-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 868.834500][ T8063] usb 1-1: New USB device strings: Mfr=241, Product=1, SerialNumber=3 [ 868.845713][ T5900] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 868.871480][ T8063] usb 1-1: Product: syz [ 868.889249][ T8063] usb 1-1: Manufacturer: syz [ 868.896051][ T5900] usb 4-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=83.9c [ 868.912939][ T8063] usb 1-1: SerialNumber: syz [ 868.929357][ T5900] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 868.955419][ T8063] usb 1-1: config 0 descriptor?? [ 868.976601][ T8063] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 868.983533][ T5900] usb 4-1: Product: syz [ 868.983569][T15332] fuse: Bad value for 'fd' [ 868.988805][ T5900] usb 4-1: Manufacturer: syz [ 869.016185][ T5900] usb 4-1: SerialNumber: syz [ 869.024086][ T5900] usb 4-1: config 0 descriptor?? [ 869.047091][ T5900] ims_pcu 4-1:0.0: Missing CDC union descriptor [ 869.053550][ T5900] ims_pcu 4-1:0.0: probe with driver ims_pcu failed with error -22 [ 869.195648][T15337] binder: 15335:15337 ioctl c0306201 80000640 returned -22 [ 869.203494][T15336] binder: 15335:15336 ioctl 80085504 80000080 returned -22 [ 869.271876][ T5900] usb 4-1: USB disconnect, device number 86 [ 869.766824][ T8063] gspca_zc3xx: reg_w_i err -71 [ 870.326448][T15353] binder: 15352:15353 ioctl ae78 80000240 returned -22 [ 870.363914][ T8063] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 870.370569][ T8063] gspca_zc3xx 1-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 870.383720][ T8063] usb 1-1: USB disconnect, device number 104 [ 870.723866][ T5910] usb 2-1: new high-speed USB device number 96 using dummy_hcd [ 870.863883][ T5910] usb 2-1: device descriptor read/64, error -71 [ 871.103872][ T5910] usb 2-1: new high-speed USB device number 97 using dummy_hcd [ 871.253828][ T5910] usb 2-1: device descriptor read/64, error -71 [ 871.370843][ T5910] usb usb2-port1: attempt power cycle [ 871.429059][T15367] fuse: Unknown parameter '0x000000000000000a' [ 871.607352][T15380] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2470'. [ 871.722690][T15386] syzkaller1: entered promiscuous mode [ 871.729808][ T5910] usb 2-1: new high-speed USB device number 98 using dummy_hcd [ 871.744521][T15386] syzkaller1: entered allmulticast mode [ 871.765311][ T5910] usb 2-1: device descriptor read/8, error -71 [ 871.865621][T15391] input: syz1 as /devices/virtual/input/input125 [ 872.013927][ T5910] usb 2-1: new high-speed USB device number 99 using dummy_hcd [ 872.066786][ T5910] usb 2-1: device descriptor read/8, error -71 [ 872.174156][ T5910] usb usb2-port1: unable to enumerate USB device [ 872.513093][T15396] input: syz1 as /devices/virtual/input/input126 [ 873.010509][T15400] netlink: 168 bytes leftover after parsing attributes in process `syz.2.2478'. [ 873.027903][T15400] netlink: 164 bytes leftover after parsing attributes in process `syz.2.2478'. [ 873.758531][T15411] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer. [ 873.930393][T15417] fuse: Unknown parameter '0x000000000000000a' [ 873.943471][T15416] libceph: resolve '400' (ret=-3): failed [ 873.957719][T15416] program syz.1.2482 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 874.633882][ T5892] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 874.793927][ T5892] usb 3-1: Using ep0 maxpacket: 8 [ 874.808387][ T5892] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 874.827241][ T5892] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 874.931692][ T5892] usb 3-1: Product: syz [ 874.938274][ T5892] usb 3-1: Manufacturer: syz [ 874.942968][ T5892] usb 3-1: SerialNumber: syz [ 874.977204][ T5892] usb 3-1: config 0 descriptor?? [ 875.052410][T15442] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 875.143983][ T8063] usb 2-1: new full-speed USB device number 100 using dummy_hcd [ 875.193094][ T5892] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 875.306110][ T8063] usb 2-1: no configurations [ 875.311135][ T8063] usb 2-1: can't read configurations, error -22 [ 875.324599][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 875.331044][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 875.453920][ T8063] usb 2-1: new full-speed USB device number 101 using dummy_hcd [ 875.627640][ T8063] usb 2-1: no configurations [ 875.637706][ T8063] usb 2-1: can't read configurations, error -22 [ 875.662272][ T8063] usb usb2-port1: attempt power cycle [ 875.693930][T15428] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 875.702964][T15428] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 875.757436][T15428] netlink: 'syz.2.2486': attribute type 10 has an invalid length. [ 875.770086][T15428] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2486'. [ 875.794236][T15428] team0: entered promiscuous mode [ 875.855436][T15428] team0: entered allmulticast mode [ 875.976512][T15428] 8021q: adding VLAN 0 to HW filter on device team0 [ 875.985096][T15428] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 876.031023][T15449] input: syz1 as /devices/virtual/input/input127 [ 876.074165][ T8063] usb 2-1: new full-speed USB device number 102 using dummy_hcd [ 876.118356][ T8063] usb 2-1: no configurations [ 876.123058][ T8063] usb 2-1: can't read configurations, error -22 [ 876.278065][ T8063] usb 2-1: new full-speed USB device number 103 using dummy_hcd [ 876.317466][ T8063] usb 2-1: no configurations [ 876.322342][ T8063] usb 2-1: can't read configurations, error -22 [ 876.329715][ T8063] usb usb2-port1: unable to enumerate USB device [ 876.408415][ T5892] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 876.456780][ T5892] usb 3-1: USB disconnect, device number 74 [ 876.833493][T15456] tipc: Enabled bearer , priority 0 [ 877.083896][ T8063] usb 5-1: new high-speed USB device number 95 using dummy_hcd [ 877.167470][T15463] FAULT_INJECTION: forcing a failure. [ 877.167470][T15463] name failslab, interval 1, probability 0, space 0, times 0 [ 877.236820][ T8063] usb 5-1: Using ep0 maxpacket: 32 [ 877.246882][ T8063] usb 5-1: config 0 has no interfaces? [ 877.252998][ T8063] usb 5-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 877.262280][ T8063] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 877.281432][ T8063] usb 5-1: config 0 descriptor?? [ 877.304214][T15463] CPU: 1 UID: 0 PID: 15463 Comm: syz.2.2495 Tainted: G L syzkaller #0 PREEMPT(full) [ 877.304246][T15463] Tainted: [L]=SOFTLOCKUP [ 877.304255][T15463] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 877.304267][T15463] Call Trace: [ 877.304276][T15463] [ 877.304286][T15463] dump_stack_lvl+0xe8/0x150 [ 877.304319][T15463] should_fail_ex+0x414/0x560 [ 877.304358][T15463] should_failslab+0xa8/0x100 [ 877.304387][T15463] __kmalloc_cache_noprof+0x84/0x700 [ 877.304410][T15463] ? nfc_allocate_device+0x129/0x560 [ 877.304438][T15463] ? __pfx_nci_transceive+0x10/0x10 [ 877.304467][T15463] nfc_allocate_device+0x129/0x560 [ 877.304489][T15463] ? __init_swait_queue_head+0xa9/0x150 [ 877.304521][T15463] nci_allocate_device+0x1da/0x380 [ 877.304552][T15463] virtual_ncidev_open+0x75/0x1a0 [ 877.304580][T15463] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 877.304604][T15463] misc_open+0x2d5/0x350 [ 877.304637][T15463] chrdev_open+0x4cc/0x5e0 [ 877.304663][T15463] ? __pfx_chrdev_open+0x10/0x10 [ 877.304687][T15463] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 877.304722][T15463] ? __pfx_chrdev_open+0x10/0x10 [ 877.304753][T15463] do_dentry_open+0x7ce/0x1420 [ 877.304795][T15463] vfs_open+0x3b/0x340 [ 877.304818][T15463] ? path_openat+0x33f3/0x3dd0 [ 877.304841][T15463] path_openat+0x340e/0x3dd0 [ 877.304874][T15463] ? __pfx_stack_trace_save+0x10/0x10 [ 877.304921][T15463] ? kmem_cache_alloc_noprof+0x37d/0x710 [ 877.304952][T15463] ? getname_flags+0xb8/0x540 [ 877.304977][T15463] ? __pfx_path_openat+0x10/0x10 [ 877.305000][T15463] ? __lock_acquire+0x6b6/0x2cf0 [ 877.305036][T15463] do_filp_open+0x1fa/0x410 [ 877.305059][T15463] ? __pfx_do_filp_open+0x10/0x10 [ 877.305100][T15463] ? _raw_spin_unlock+0x28/0x50 [ 877.305119][T15463] ? alloc_fd+0x64c/0x6c0 [ 877.305155][T15463] do_sys_openat2+0x121/0x200 [ 877.305187][T15463] ? __pfx_do_sys_openat2+0x10/0x10 [ 877.305216][T15463] ? ksys_write+0x22a/0x250 [ 877.305239][T15463] ? __pfx_ksys_write+0x10/0x10 [ 877.305262][T15463] __ia32_compat_sys_openat+0x131/0x160 [ 877.305299][T15463] __do_fast_syscall_32+0x1dc/0x570 [ 877.305323][T15463] ? lockdep_hardirqs_on+0x7b/0x110 [ 877.305343][T15463] ? do_fast_syscall_32+0x34/0x80 [ 877.305367][T15463] ? irqentry_exit+0x10f/0x670 [ 877.305393][T15463] do_fast_syscall_32+0x34/0x80 [ 877.305417][T15463] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 877.305442][T15463] RIP: 0023:0xf700d539 [ 877.305462][T15463] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 877.305480][T15463] RSP: 002b:00000000f53bb55c EFLAGS: 00000206 ORIG_RAX: 0000000000000127 [ 877.305502][T15463] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000080000300 [ 877.305518][T15463] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 877.305531][T15463] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 877.305544][T15463] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 877.305557][T15463] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 877.305589][T15463] [ 878.009974][T15456] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 878.034461][T15456] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 878.048058][T15456] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 878.072540][T15469] fuse: Unknown parameter '0x000000000000000a' [ 878.081170][T15456] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 878.131181][ T6342] usb 5-1: USB disconnect, device number 95 [ 878.252711][T15454] tipc: Disabling bearer [ 879.498262][T15495] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2505'. [ 879.543914][ T5892] usb 4-1: new high-speed USB device number 87 using dummy_hcd [ 879.715915][ T5892] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 879.744760][ T5892] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 879.789787][ T5892] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 879.884540][ T5892] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 879.915031][ T5892] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 879.929959][ T5892] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 879.954498][ T5892] usb 4-1: Manufacturer: syz [ 879.971653][ T5892] usb 4-1: config 0 descriptor?? [ 880.289279][T15501] input: syz1 as /devices/virtual/input/input128 [ 880.449678][ T5892] appleir 0003:05AC:8243.0012: unknown main item tag 0x0 [ 880.688735][ T5892] appleir 0003:05AC:8243.0012: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.3-1/input0 [ 880.730515][T15488] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 880.744152][T15488] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 880.777683][ T5892] usb 4-1: USB disconnect, device number 87 [ 880.871471][ T8063] usb 5-1: new full-speed USB device number 96 using dummy_hcd [ 881.064923][T15509] fuse: Unknown parameter '0x000000000000000a' [ 881.210998][ T8063] usb 5-1: no configurations [ 881.238597][ T8063] usb 5-1: can't read configurations, error -22 [ 881.282597][T15508] fido_id[15508]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 881.484701][ T8063] usb 5-1: new full-speed USB device number 97 using dummy_hcd [ 881.670419][ T8063] usb 5-1: no configurations [ 881.681234][ T8063] usb 5-1: can't read configurations, error -22 [ 881.694216][ T5910] usb 1-1: new high-speed USB device number 105 using dummy_hcd [ 881.750487][ T8063] usb usb5-port1: attempt power cycle [ 881.895411][ T5910] usb 1-1: device descriptor read/64, error -71 [ 882.143845][ T5910] usb 1-1: new high-speed USB device number 106 using dummy_hcd [ 882.234414][ T8063] usb 5-1: new full-speed USB device number 98 using dummy_hcd [ 882.315384][ T8063] usb 5-1: no configurations [ 882.320185][ T8063] usb 5-1: can't read configurations, error -22 [ 882.363918][ T5910] usb 1-1: device descriptor read/64, error -71 [ 882.484367][ T5910] usb usb1-port1: attempt power cycle [ 882.525688][ T8063] usb 5-1: new full-speed USB device number 99 using dummy_hcd [ 882.582276][ T8063] usb 5-1: no configurations [ 882.588607][ T8063] usb 5-1: can't read configurations, error -22 [ 882.601347][ T8063] usb usb5-port1: unable to enumerate USB device [ 882.852635][T15534] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2516'. [ 882.863866][ T5910] usb 1-1: new high-speed USB device number 107 using dummy_hcd [ 882.884555][ T5910] usb 1-1: device descriptor read/8, error -71 [ 883.123927][ T5910] usb 1-1: new high-speed USB device number 108 using dummy_hcd [ 883.144848][ T5910] usb 1-1: device descriptor read/8, error -71 [ 883.254343][ T5910] usb usb1-port1: unable to enumerate USB device [ 883.314098][ T8063] usb 2-1: new high-speed USB device number 104 using dummy_hcd [ 883.403954][ T24] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 883.484019][ T8063] usb 2-1: Using ep0 maxpacket: 32 [ 883.493575][ T8063] usb 2-1: config 0 has an invalid interface number: 196 but max is 0 [ 883.506933][ T8063] usb 2-1: config 0 has no interface number 0 [ 883.520626][ T8063] usb 2-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 883.533119][ T8063] usb 2-1: config 0 interface 196 has no altsetting 0 [ 883.545846][ T8063] usb 2-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 883.555605][ T8063] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 883.563670][ T8063] usb 2-1: Product: syz [ 883.568125][ T8063] usb 2-1: Manufacturer: syz [ 883.573165][ T8063] usb 2-1: SerialNumber: syz [ 883.577951][ T24] usb 3-1: Using ep0 maxpacket: 16 [ 883.585991][ T24] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 883.599649][ T8063] usb 2-1: config 0 descriptor?? [ 883.605083][ T24] usb 3-1: config 0 interface 0 has no altsetting 0 [ 883.620504][ T24] usb 3-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 883.620514][T15539] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 883.620599][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 883.651285][T15545] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 883.674371][ T24] usb 3-1: config 0 descriptor?? [ 884.071758][ T8063] ipheth 2-1:0.196: ipheth_get_macaddr: usb_control_msg: short packet: 0 bytes [ 884.081801][ T8063] ipheth 2-1:0.196: probe with driver ipheth failed with error -22 [ 884.091268][T15542] netlink: 96 bytes leftover after parsing attributes in process `syz.2.2518'. [ 884.125719][ T24] nzxt-smart2 0003:1E71:2009.0013: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.2-1/input0 [ 884.528709][ T5892] usb 3-1: USB disconnect, device number 75 [ 884.569132][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 884.569194][ T30] audit: type=1326 audit(1768083117.267:432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15559 comm="syz.4.2522" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f01539 code=0x7ffc0000 [ 884.599484][ T30] audit: type=1326 audit(1768083117.267:433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15559 comm="syz.4.2522" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f01539 code=0x7ffc0000 [ 884.625255][ T30] audit: type=1326 audit(1768083117.297:434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15559 comm="syz.4.2522" exe="/root/syz-executor" sig=0 arch=40000003 syscall=283 compat=1 ip=0xf7f01539 code=0x7ffc0000 [ 884.651668][ T30] audit: type=1326 audit(1768083117.297:435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15559 comm="syz.4.2522" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f01539 code=0x7ffc0000 [ 884.679406][ T30] audit: type=1326 audit(1768083117.307:436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15559 comm="syz.4.2522" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f01539 code=0x7ffc0000 [ 884.702617][ T30] audit: type=1326 audit(1768083117.307:437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15559 comm="syz.4.2522" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f01539 code=0x7ffc0000 [ 884.733874][ T30] audit: type=1326 audit(1768083117.337:438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15559 comm="syz.4.2522" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f01539 code=0x7ffc0000 [ 884.765681][ T30] audit: type=1326 audit(1768083117.357:439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15559 comm="syz.4.2522" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f01539 code=0x7ffc0000 [ 884.788907][ T30] audit: type=1326 audit(1768083117.357:440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15559 comm="syz.4.2522" exe="/root/syz-executor" sig=0 arch=40000003 syscall=366 compat=1 ip=0xf7f01539 code=0x7ffc0000 [ 884.804276][ T5910] usb 1-1: new high-speed USB device number 109 using dummy_hcd [ 884.813264][ T30] audit: type=1326 audit(1768083117.357:441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15559 comm="syz.4.2522" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f01539 code=0x7ffc0000 [ 884.983929][ T5910] usb 1-1: Using ep0 maxpacket: 32 [ 884.992482][ T5910] usb 1-1: config 0 interface 0 has no altsetting 0 [ 885.013685][T15566] input: syz1 as /devices/virtual/input/input129 [ 885.204240][ T5910] usb 1-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 885.227084][ T5910] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 885.255524][ T5910] usb 1-1: Product: syz [ 885.260821][ T5910] usb 1-1: Manufacturer: syz [ 885.266338][ T5910] usb 1-1: SerialNumber: syz [ 885.305223][ T5910] usb 1-1: config 0 descriptor?? [ 885.369395][T15568] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2524'. [ 885.421289][T15570] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2524'. [ 885.456806][T15570] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2524'. [ 885.472959][T15572] FAULT_INJECTION: forcing a failure. [ 885.472959][T15572] name failslab, interval 1, probability 0, space 0, times 0 [ 885.487240][T15572] CPU: 1 UID: 0 PID: 15572 Comm: syz.4.2525 Tainted: G L syzkaller #0 PREEMPT(full) [ 885.487278][T15572] Tainted: [L]=SOFTLOCKUP [ 885.487287][T15572] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 885.487301][T15572] Call Trace: [ 885.487310][T15572] [ 885.487320][T15572] dump_stack_lvl+0xe8/0x150 [ 885.487353][T15572] should_fail_ex+0x414/0x560 [ 885.487392][T15572] should_failslab+0xa8/0x100 [ 885.487419][T15572] kmem_cache_alloc_node_noprof+0x8c/0x720 [ 885.487453][T15572] ? __alloc_skb+0x198/0x3a0 [ 885.487477][T15572] ? __alloc_skb+0x1dc/0x3a0 [ 885.487497][T15572] ? __local_bh_enable_ip+0xd0/0x130 [ 885.487521][T15572] ? __alloc_skb+0x198/0x3a0 [ 885.487544][T15572] __alloc_skb+0x1dc/0x3a0 [ 885.487572][T15572] netlink_ack+0x146/0xa50 [ 885.487597][T15572] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 885.487621][T15572] ? ref_tracker_free+0x63a/0x7d0 [ 885.487644][T15572] ? __asan_memcpy+0x40/0x70 [ 885.487675][T15572] ? __pfx_ref_tracker_free+0x10/0x10 [ 885.487695][T15572] ? __skb_clone+0x63/0x7a0 [ 885.487732][T15572] netlink_rcv_skb+0x28c/0x470 [ 885.487761][T15572] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 885.487787][T15572] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 885.487827][T15572] ? netlink_deliver_tap+0x2e/0x1b0 [ 885.487863][T15572] netlink_unicast+0x82f/0x9e0 [ 885.487898][T15572] ? __pfx_netlink_unicast+0x10/0x10 [ 885.487922][T15572] ? __alloc_skb+0x198/0x3a0 [ 885.487945][T15572] ? netlink_sendmsg+0x642/0xb30 [ 885.487971][T15572] ? skb_put+0x11b/0x210 [ 885.487998][T15572] netlink_sendmsg+0x805/0xb30 [ 885.488038][T15572] ? __pfx_netlink_sendmsg+0x10/0x10 [ 885.488070][T15572] ? __import_iovec+0x5d4/0x7f0 [ 885.488094][T15572] ? aa_sock_msg_perm+0xf1/0x1b0 [ 885.488123][T15572] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 885.488143][T15572] ? __pfx_netlink_sendmsg+0x10/0x10 [ 885.488174][T15572] __sock_sendmsg+0x21c/0x270 [ 885.488209][T15572] ____sys_sendmsg+0x505/0x820 [ 885.488248][T15572] ? __pfx_____sys_sendmsg+0x10/0x10 [ 885.488280][T15572] ? kstrtouint+0x6e/0xe0 [ 885.488321][T15572] ___sys_sendmsg+0x21f/0x2a0 [ 885.488349][T15572] ? __pfx____sys_sendmsg+0x10/0x10 [ 885.488375][T15572] ? get_pid_task+0x20/0x1f0 [ 885.488400][T15572] ? get_pid_task+0x20/0x1f0 [ 885.488423][T15572] ? get_pid_task+0x20/0x1f0 [ 885.488486][T15572] ? __fget_files+0x2a/0x420 [ 885.488510][T15572] ? __fget_files+0x3a0/0x420 [ 885.488547][T15572] __sys_sendmsg+0x164/0x220 [ 885.488577][T15572] ? __pfx___sys_sendmsg+0x10/0x10 [ 885.488612][T15572] ? __pfx_ksys_write+0x10/0x10 [ 885.488642][T15572] __do_fast_syscall_32+0x1dc/0x570 [ 885.488665][T15572] ? lockdep_hardirqs_on+0x7b/0x110 [ 885.488684][T15572] ? do_fast_syscall_32+0x34/0x80 [ 885.488708][T15572] ? irqentry_exit+0x10f/0x670 [ 885.488733][T15572] do_fast_syscall_32+0x34/0x80 [ 885.488757][T15572] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 885.488782][T15572] RIP: 0023:0xf7f01539 [ 885.488800][T15572] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 885.488819][T15572] RSP: 002b:00000000f53f655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 885.488842][T15572] RAX: ffffffffffffffda RBX: 0000000000000010 RCX: 0000000080000000 [ 885.488858][T15572] RDX: 0000000002000800 RSI: 0000000000000000 RDI: 0000000000000000 [ 885.488872][T15572] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 885.488885][T15572] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 885.488897][T15572] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 885.488928][T15572] [ 885.904560][T15558] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 885.913578][T15558] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 885.941851][T15558] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 886.000919][T15558] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 886.176690][T15558] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 886.185757][T15558] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 886.194925][T15558] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 886.203991][T15558] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 886.212898][T15558] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 886.264315][T15558] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 886.343081][ T24] usb 2-1: USB disconnect, device number 104 [ 886.354469][ T5910] gs_usb 1-1:0.0: Couldn't send data format (err=-110) [ 886.361460][ T5910] gs_usb 1-1:0.0: probe with driver gs_usb failed with error -110 [ 886.408514][ T8063] usb 1-1: USB disconnect, device number 109 [ 886.417297][T15576] netlink: 'syz.2.2526': attribute type 4 has an invalid length. [ 886.844101][ T5910] usb 2-1: new high-speed USB device number 105 using dummy_hcd [ 887.019178][ T5910] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 887.073627][ T5910] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 887.126096][ T5910] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 887.205788][ T5910] usb 2-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 887.224408][ T5910] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 887.232622][ T5910] usb 2-1: Product: syz [ 887.236937][ T5910] usb 2-1: Manufacturer: syz [ 887.241596][ T5910] usb 2-1: SerialNumber: syz [ 887.295756][ T8063] usb 3-1: new full-speed USB device number 76 using dummy_hcd [ 887.306120][ T5910] usb 2-1: config 0 descriptor?? [ 887.317283][T15582] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 887.327253][T15582] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 887.361593][T15597] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 887.440444][ T5910] usb 2-1: ucan: probing device on interface #0 [ 887.553571][ T8063] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 887.566427][ T8063] usb 3-1: config 0 has no interfaces? [ 887.571978][ T8063] usb 3-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 887.595302][ T8063] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 887.656470][ T8063] usb 3-1: config 0 descriptor?? [ 887.848671][T15604] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 888.016365][ T5910] ucan 2-1:0.0 can0: registered device [ 888.064893][T15609] FAULT_INJECTION: forcing a failure. [ 888.064893][T15609] name failslab, interval 1, probability 0, space 0, times 0 [ 888.141416][T15609] CPU: 1 UID: 0 PID: 15609 Comm: syz.3.2536 Tainted: G L syzkaller #0 PREEMPT(full) [ 888.141455][T15609] Tainted: [L]=SOFTLOCKUP [ 888.141463][T15609] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 888.141476][T15609] Call Trace: [ 888.141485][T15609] [ 888.141495][T15609] dump_stack_lvl+0xe8/0x150 [ 888.141528][T15609] should_fail_ex+0x414/0x560 [ 888.141570][T15609] should_failslab+0xa8/0x100 [ 888.141591][T15609] __kvmalloc_node_noprof+0x175/0x920 [ 888.141607][T15609] ? __nf_register_net_hook+0x232/0x930 [ 888.141655][T15609] ? nf_hook_entries_grow+0x281/0x720 [ 888.141689][T15609] nf_hook_entries_grow+0x281/0x720 [ 888.141739][T15609] __nf_register_net_hook+0x2c9/0x930 [ 888.141769][T15609] nf_register_net_hook+0xb2/0x190 [ 888.141815][T15609] nf_register_net_hooks+0x44/0x1b0 [ 888.141848][T15609] nf_ct_netns_do_get+0x3bf/0x5a0 [ 888.141887][T15609] ? __pfx_nf_ct_netns_do_get+0x10/0x10 [ 888.141920][T15609] nf_ct_netns_inet_get+0x1f/0x150 [ 888.141963][T15609] nft_connlimit_do_init+0x1de/0x2e0 [ 888.142000][T15609] nft_set_elem_expr_alloc+0x1db/0x590 [ 888.142031][T15609] ? __pfx_nft_set_elem_expr_alloc+0x10/0x10 [ 888.142072][T15609] ? nla_strcmp+0x106/0x140 [ 888.142099][T15609] ? nla_strcmp+0x106/0x140 [ 888.142146][T15609] nf_tables_newsetelem+0x15d8/0x4050 [ 888.142207][T15609] ? __pfx_nf_tables_newsetelem+0x10/0x10 [ 888.142241][T15609] ? nla_validate_array+0xfc/0x260 [ 888.142300][T15609] ? __pfx___nla_validate_parse+0x10/0x10 [ 888.142331][T15609] ? __pfx_nf_tables_newset+0x10/0x10 [ 888.142356][T15609] ? nfnl_pernet+0x23/0x240 [ 888.142383][T15609] ? nfnl_pernet+0x23/0x240 [ 888.142407][T15609] ? __nla_parse+0x40/0x60 [ 888.142427][T15609] nfnetlink_rcv+0x11d9/0x2590 [ 888.142502][T15609] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 888.142564][T15609] ? netlink_deliver_tap+0x2e/0x1b0 [ 888.142599][T15609] ? netlink_deliver_tap+0x2e/0x1b0 [ 888.142645][T15609] netlink_unicast+0x82f/0x9e0 [ 888.142679][T15609] ? __pfx_netlink_unicast+0x10/0x10 [ 888.142718][T15609] ? __alloc_skb+0x198/0x3a0 [ 888.142740][T15609] ? netlink_sendmsg+0x642/0xb30 [ 888.142779][T15609] ? skb_put+0x11b/0x210 [ 888.142807][T15609] netlink_sendmsg+0x805/0xb30 [ 888.142844][T15609] ? __pfx_netlink_sendmsg+0x10/0x10 [ 888.142875][T15609] ? __import_iovec+0x5d4/0x7f0 [ 888.142892][T15609] ? aa_sock_msg_perm+0xf1/0x1b0 [ 888.142931][T15609] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 888.142952][T15609] ? __pfx_netlink_sendmsg+0x10/0x10 [ 888.142981][T15609] __sock_sendmsg+0x21c/0x270 [ 888.143025][T15609] ____sys_sendmsg+0x505/0x820 [ 888.143049][T15609] ? __pfx_____sys_sendmsg+0x10/0x10 [ 888.143088][T15609] ? kstrtouint+0x6e/0xe0 [ 888.143129][T15609] ___sys_sendmsg+0x21f/0x2a0 [ 888.143158][T15609] ? __pfx____sys_sendmsg+0x10/0x10 [ 888.143185][T15609] ? get_pid_task+0x20/0x1f0 [ 888.143210][T15609] ? get_pid_task+0x20/0x1f0 [ 888.143233][T15609] ? get_pid_task+0x20/0x1f0 [ 888.143292][T15609] ? __fget_files+0x2a/0x420 [ 888.143316][T15609] ? __fget_files+0x3a0/0x420 [ 888.143351][T15609] __sys_sendmsg+0x164/0x220 [ 888.143371][T15609] ? __pfx___sys_sendmsg+0x10/0x10 [ 888.143420][T15609] ? __pfx_ksys_write+0x10/0x10 [ 888.143454][T15609] __do_fast_syscall_32+0x1dc/0x570 [ 888.143478][T15609] ? lockdep_hardirqs_on+0x7b/0x110 [ 888.143500][T15609] ? do_fast_syscall_32+0x34/0x80 [ 888.143517][T15609] ? irqentry_exit+0x10f/0x670 [ 888.143535][T15609] do_fast_syscall_32+0x34/0x80 [ 888.143573][T15609] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 888.143599][T15609] RIP: 0023:0xf701d539 [ 888.143616][T15609] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 888.143634][T15609] RSP: 002b:00000000f540d55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 888.143657][T15609] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800000c0 [ 888.143668][T15609] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000000 [ 888.143677][T15609] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 888.143686][T15609] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 888.143695][T15609] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 888.143755][T15609] [ 889.083652][ T5910] ucan 2-1:0.0 can0: firmware string: unknown [ 889.250807][ T5910] usb 1-1: new high-speed USB device number 110 using dummy_hcd [ 889.464115][ T5910] usb 1-1: Using ep0 maxpacket: 16 [ 889.471042][ T5910] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 889.492616][ T5910] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 889.519552][ T5910] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1023 [ 889.637688][ T5910] usb 1-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 889.664296][ T5910] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 889.684252][ T8063] usb 2-1: USB disconnect, device number 105 [ 889.688718][ T6342] usb 4-1: new full-speed USB device number 88 using dummy_hcd [ 889.710184][ T5910] usb 1-1: Product: syz [ 889.718032][ T5910] usb 1-1: Manufacturer: syz [ 889.722893][ T5910] usb 1-1: SerialNumber: syz [ 889.765426][ T5910] usb 1-1: config 0 descriptor?? [ 889.771412][T15611] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 889.855029][ T6342] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 890.241889][ T6342] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 890.271206][ T5910] mcba_usb 1-1:0.0 can0: failed tx_urb -90 [ 890.289606][ T6342] usb 4-1: Product: syz [ 890.299064][ T5910] mcba_usb 1-1:0.0 can0: Failed to send cmd (169) [ 890.306323][ T6342] usb 4-1: Manufacturer: syz [ 890.317656][ T6342] usb 4-1: SerialNumber: syz [ 890.322669][ T5910] mcba_usb 1-1:0.0 can0: failed tx_urb -90 [ 890.342918][ T6342] usb 4-1: config 0 descriptor?? [ 890.351497][ T5910] mcba_usb 1-1:0.0 can0: Failed to send cmd (169) [ 890.358904][ T5910] mcba_usb 1-1:0.0: Microchip CAN BUS Analyzer connected [ 890.393002][ T5910] usb 1-1: USB disconnect, device number 110 [ 890.411693][ T5910] mcba_usb 1-1:0.0 can0: device disconnected [ 890.568766][ T6342] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 890.972778][ T6342] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 890.976318][T15629] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 890.994410][T15629] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 891.087813][T15660] fuse: Bad value for 'user_id' [ 891.092886][T15660] fuse: Bad value for 'user_id' [ 891.178547][ T6342] usb 4-1: USB disconnect, device number 88 [ 891.324088][ T8063] usb 3-1: USB disconnect, device number 76 [ 891.363974][ T5910] usb 1-1: new high-speed USB device number 111 using dummy_hcd [ 891.400123][T15666] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2546'. [ 891.467141][ T5892] usb 5-1: new low-speed USB device number 100 using dummy_hcd [ 891.541753][ T5910] usb 1-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 891.555862][ T5910] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 891.605225][ T5910] usb 1-1: Product: syz [ 891.609503][ T5910] usb 1-1: Manufacturer: syz [ 891.658595][T15668] input: syz1 as /devices/virtual/input/input132 [ 891.674649][ T5910] usb 1-1: SerialNumber: syz [ 891.684473][ T5892] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 891.691993][ T5892] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 891.735164][ T5910] usb 1-1: config 0 descriptor?? [ 891.748020][ T5892] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 891.763017][ T5910] hub 1-1:0.0: bad descriptor, ignoring hub [ 891.814326][ T5910] hub 1-1:0.0: probe with driver hub failed with error -5 [ 891.870845][ T5892] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 891.967804][ T5892] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 892.013899][ T8063] usb 2-1: new high-speed USB device number 106 using dummy_hcd [ 892.048505][ T5910] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 892.125049][ T5910] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 892.180118][ T5910] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 892.194139][ T8063] usb 2-1: Using ep0 maxpacket: 8 [ 892.204102][ T5910] usb 1-1: media controller created [ 892.236955][ T5910] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 892.267269][ T8063] usb 2-1: config 32 has 1 interface, different from the descriptor's value: 2 [ 892.296781][ T5892] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 892.318284][ T5892] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 892.370082][ T5892] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 892.402740][ T8063] usb 2-1: config 32 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 892.457605][ T5892] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 892.482872][ T8063] usb 2-1: config 32 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 892.518168][ T8063] usb 2-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 892.535021][ T5892] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 892.591560][ T8063] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 892.611946][ T5910] DVB: Unable to find symbol dib7000p_attach() [ 892.630940][ T5910] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 892.632166][T15685] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 892.678275][ T5892] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 892.703809][ T5892] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 892.758709][ T5892] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 892.803953][ T5892] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 892.844418][ T5892] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 892.858286][ T5910] rc_core: IR keymap rc-dib0700-rc5 not found [ 892.869713][ T5910] Registered IR keymap rc-empty [ 892.889883][ T5910] dvb-usb: could not initialize remote control. [ 892.908224][ T8063] usb 2-1: string descriptor 0 read error: -71 [ 892.933431][ T5910] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 892.950285][ T5892] usb 5-1: string descriptor 0 read error: -22 [ 892.959389][ T5892] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 892.971667][ T5892] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 893.028215][ T8063] usb 2-1: USB disconnect, device number 106 [ 893.094059][ T5892] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 893.136957][ T5959] udevd[5959]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:32.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 893.445111][ T5892] usb 5-1: USB disconnect, device number 100 [ 893.939215][T15707] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 894.815887][T15718] FAULT_INJECTION: forcing a failure. [ 894.815887][T15718] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 894.900530][T15718] CPU: 1 UID: 0 PID: 15718 Comm: syz.2.2553 Tainted: G L syzkaller #0 PREEMPT(full) [ 894.900568][T15718] Tainted: [L]=SOFTLOCKUP [ 894.900577][T15718] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 894.900590][T15718] Call Trace: [ 894.900600][T15718] [ 894.900609][T15718] dump_stack_lvl+0xe8/0x150 [ 894.900642][T15718] should_fail_ex+0x414/0x560 [ 894.900678][T15718] _copy_from_user+0x2d/0xb0 [ 894.900717][T15718] snd_seq_oss_write+0x382/0x930 [ 894.900749][T15718] ? get_pid_task+0x20/0x1f0 [ 894.900793][T15718] ? __pfx_snd_seq_oss_write+0x10/0x10 [ 894.900817][T15718] ? common_file_perm+0x1b5/0x220 [ 894.900840][T15718] ? security_file_permission+0x75/0x290 [ 894.900878][T15718] odev_write+0x5a/0x80 [ 894.900904][T15718] ? __pfx_odev_write+0x10/0x10 [ 894.900930][T15718] vfs_write+0x27e/0xb30 [ 894.900957][T15718] ? __pfx_vfs_write+0x10/0x10 [ 894.900973][T15718] ? __fget_files+0x2a/0x420 [ 894.901008][T15718] ? __fget_files+0x2a/0x420 [ 894.901035][T15718] ? __fget_files+0x3a0/0x420 [ 894.901059][T15718] ? __fget_files+0x2a/0x420 [ 894.901091][T15718] ksys_write+0x145/0x250 [ 894.901113][T15718] ? __pfx_ksys_write+0x10/0x10 [ 894.901135][T15718] __do_fast_syscall_32+0x1dc/0x570 [ 894.901153][T15718] ? lockdep_hardirqs_on+0x7b/0x110 [ 894.901184][T15718] ? do_fast_syscall_32+0x34/0x80 [ 894.901215][T15718] ? irqentry_exit+0x10f/0x670 [ 894.901240][T15718] do_fast_syscall_32+0x34/0x80 [ 894.901264][T15718] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 894.901283][T15718] RIP: 0023:0xf700d539 [ 894.901296][T15718] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 894.901321][T15718] RSP: 002b:00000000f53fd55c EFLAGS: 00000206 ORIG_RAX: 0000000000000004 [ 894.901344][T15718] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000140 [ 894.901359][T15718] RDX: 0000000000000010 RSI: 0000000000000000 RDI: 0000000000000000 [ 894.901371][T15718] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 894.901383][T15718] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 894.901395][T15718] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 894.901423][T15718] [ 895.201068][ T5910] usb 1-1: USB disconnect, device number 111 [ 895.435302][ T5910] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 896.067562][T15723] input: syz1 as /devices/virtual/input/input134 [ 896.085702][T15727] fuse: Unknown parameter 'fd0x000000000000000a' [ 896.335118][ T5910] usb 1-1: new high-speed USB device number 112 using dummy_hcd [ 896.463655][T15735] FAULT_INJECTION: forcing a failure. [ 896.463655][T15735] name failslab, interval 1, probability 0, space 0, times 0 [ 896.487516][T15736] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 896.505125][T15735] CPU: 0 UID: 0 PID: 15735 Comm: syz.2.2560 Tainted: G L syzkaller #0 PREEMPT(full) [ 896.505159][T15735] Tainted: [L]=SOFTLOCKUP [ 896.505167][T15735] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 896.505179][T15735] Call Trace: [ 896.505187][T15735] [ 896.505196][T15735] dump_stack_lvl+0xe8/0x150 [ 896.505228][T15735] should_fail_ex+0x414/0x560 [ 896.505266][T15735] should_failslab+0xa8/0x100 [ 896.505295][T15735] __kmalloc_noprof+0xdf/0x800 [ 896.505316][T15735] ? memcg_list_lru_alloc+0x261/0x7e0 [ 896.505346][T15735] memcg_list_lru_alloc+0x261/0x7e0 [ 896.505379][T15735] ? __pfx_memcg_list_lru_alloc+0x10/0x10 [ 896.505415][T15735] ? get_mem_cgroup_from_objcg+0x1b0/0x1d0 [ 896.505447][T15735] ? get_mem_cgroup_from_objcg+0x1a/0x1d0 [ 896.505483][T15735] __memcg_slab_post_alloc_hook+0x136/0x730 [ 896.505534][T15735] kmem_cache_alloc_lru_noprof+0x41f/0x6e0 [ 896.505569][T15735] ? __d_alloc+0x37/0x6f0 [ 896.505603][T15735] __d_alloc+0x37/0x6f0 [ 896.505633][T15735] ? __update_page_owner_handle+0x5a/0x570 [ 896.505659][T15735] d_alloc_parallel+0xe1/0x1610 [ 896.505688][T15735] ? __lock_acquire+0x6b6/0x2cf0 [ 896.505725][T15735] ? __lock_acquire+0x6b6/0x2cf0 [ 896.505750][T15735] ? __pfx_d_alloc_parallel+0x10/0x10 [ 896.505787][T15735] ? __raw_spin_lock_init+0x45/0x100 [ 896.505817][T15735] ? __init_waitqueue_head+0xa9/0x150 [ 896.505850][T15735] __lookup_slow+0x116/0x3d0 [ 896.505881][T15735] ? __pfx___lookup_slow+0x10/0x10 [ 896.505922][T15735] ? down_read+0x274/0x2e0 [ 896.505953][T15735] lookup_slow+0x53/0x70 [ 896.505983][T15735] link_path_walk+0xd1e/0x18d0 [ 896.506037][T15735] path_lookupat+0xe4/0x8c0 [ 896.506081][T15735] filename_lookup+0x212/0x570 [ 896.506107][T15735] ? vfs_fstatat+0x43/0x170 [ 896.506138][T15735] ? __pfx_filename_lookup+0x10/0x10 [ 896.506189][T15735] ? __might_fault+0xb0/0x130 [ 896.506221][T15735] ? __might_fault+0xb0/0x130 [ 896.506262][T15735] vfs_statx+0xf8/0x550 [ 896.506294][T15735] ? __pfx_vfs_statx+0x10/0x10 [ 896.506317][T15735] ? strncpy_from_user+0x150/0x2c0 [ 896.506353][T15735] ? getname_flags+0x1e5/0x540 [ 896.506382][T15735] vfs_fstatat+0x118/0x170 [ 896.506409][T15735] __ia32_compat_sys_ia32_stat64+0xd5/0x150 [ 896.506432][T15735] ? __pfx___ia32_compat_sys_ia32_stat64+0x10/0x10 [ 896.506472][T15735] ? __pfx_ksys_write+0x10/0x10 [ 896.506506][T15735] __do_fast_syscall_32+0x1dc/0x570 [ 896.506532][T15735] ? lockdep_hardirqs_on+0x7b/0x110 [ 896.506553][T15735] ? do_fast_syscall_32+0x34/0x80 [ 896.506577][T15735] ? irqentry_exit+0x10f/0x670 [ 896.506604][T15735] do_fast_syscall_32+0x34/0x80 [ 896.506627][T15735] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 896.506653][T15735] RIP: 0023:0xf700d539 [ 896.506671][T15735] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 896.506690][T15735] RSP: 002b:00000000f53fd55c EFLAGS: 00000206 ORIG_RAX: 00000000000000c3 [ 896.506712][T15735] RAX: ffffffffffffffda RBX: 0000000080000140 RCX: 0000000080000240 [ 896.506728][T15735] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 896.506741][T15735] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 896.506753][T15735] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 896.506766][T15735] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 896.506797][T15735] [ 896.890753][T15740] IPVS: sync thread started: state = BACKUP, mcast_ifn = dummy0, syncid = 4, id = 0 [ 896.912728][ T5910] usb 1-1: Using ep0 maxpacket: 8 [ 896.924467][ T5910] usb 1-1: config 6 has an invalid interface number: 213 but max is 1 [ 896.932810][ T5910] usb 1-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 896.943292][ T5910] usb 1-1: config 6 has 1 interface, different from the descriptor's value: 2 [ 896.952245][ T5910] usb 1-1: config 6 has no interface number 0 [ 896.958437][ T5910] usb 1-1: config 6 interface 213 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 896.969575][ T5910] usb 1-1: config 6 interface 213 altsetting 0 has an endpoint descriptor with address 0xA3, changing to 0x83 [ 896.981370][ T5910] usb 1-1: config 6 interface 213 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 896.992682][ T5910] usb 1-1: config 6 interface 213 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 897.007915][ T5910] usb 1-1: New USB device found, idVendor=eb1a, idProduct=e357, bcdDevice=85.86 [ 897.017068][ T5910] usb 1-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 897.025484][ T5910] usb 1-1: Manufacturer: syz [ 897.030115][ T5910] usb 1-1: SerialNumber: syz [ 897.165399][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 897.165419][ T30] audit: type=1326 audit(1768083129.847:449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15741 comm="syz.1.2562" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705d539 code=0x7ffc0000 [ 897.271078][ T5910] em28xx 1-1:6.213: New device syz @ 480 Mbps (eb1a:e357, interface 213, class 213) [ 897.289067][ T5910] em28xx 1-1:6.213: Audio interface 213 found (Vendor Class) [ 897.330505][ T30] audit: type=1326 audit(1768083129.857:450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15741 comm="syz.1.2562" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705d539 code=0x7ffc0000 [ 897.354591][ T30] audit: type=1326 audit(1768083129.857:451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15741 comm="syz.1.2562" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf705d539 code=0x7ffc0000 [ 897.365471][ T5910] em28xx 1-1:6.213: unknown em28xx chip ID (0) [ 897.383355][ T30] audit: type=1326 audit(1768083129.857:452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15741 comm="syz.1.2562" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705d539 code=0x7ffc0000 [ 897.506997][ T5910] em28xx 1-1:6.213: Config register raw data: 0xfffffffb [ 897.530127][ T5910] em28xx 1-1:6.213: AC97 chip type couldn't be determined [ 897.552241][ T5910] em28xx 1-1:6.213: No AC97 audio processor [ 897.552458][ T30] audit: type=1326 audit(1768083129.857:453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15741 comm="syz.1.2562" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705d539 code=0x7ffc0000 [ 897.552509][ T30] audit: type=1326 audit(1768083129.857:454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15741 comm="syz.1.2562" exe="/root/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf705d539 code=0x7ffc0000 [ 897.552554][ T30] audit: type=1326 audit(1768083129.857:455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15741 comm="syz.1.2562" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705d539 code=0x7ffc0000 [ 897.552598][ T30] audit: type=1326 audit(1768083129.857:456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15741 comm="syz.1.2562" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705d539 code=0x7ffc0000 [ 897.552643][ T30] audit: type=1326 audit(1768083129.857:457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15741 comm="syz.1.2562" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf705d539 code=0x7ffc0000 [ 897.552688][ T30] audit: type=1326 audit(1768083129.907:458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15741 comm="syz.1.2562" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705d539 code=0x7ffc0000 [ 897.582275][ T5910] usb 1-1: USB disconnect, device number 112 [ 897.583709][ T5910] em28xx 1-1:6.213: Disconnecting em28xx [ 897.606360][ T5910] em28xx 1-1:6.213: Freeing device [ 897.693979][ T8063] usb 2-1: new high-speed USB device number 107 using dummy_hcd [ 897.806557][T15759] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 897.851305][ T8063] usb 2-1: Using ep0 maxpacket: 32 [ 897.883156][ T8063] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 897.883205][ T8063] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 897.883246][ T8063] usb 2-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 897.883271][ T8063] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 897.892003][ T8063] usb 2-1: config 0 descriptor?? [ 898.126017][ T980] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 898.333090][ T980] usb 3-1: Using ep0 maxpacket: 32 [ 898.373132][ T980] usb 3-1: config 0 has an invalid interface number: 20 but max is 0 [ 898.381462][ T980] usb 3-1: config 0 has no interface number 0 [ 898.388702][ T980] usb 3-1: config 0 interface 20 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 898.402257][ T980] usb 3-1: config 0 interface 20 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 898.563017][ T980] usb 3-1: New USB device found, idVendor=04e6, idProduct=0005, bcdDevice= 1.00 [ 898.572468][ T980] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 898.581827][ T980] usb 3-1: Product: syz [ 898.586554][ T980] usb 3-1: Manufacturer: syz [ 898.591237][ T980] usb 3-1: SerialNumber: syz [ 898.612765][ T980] usb 3-1: config 0 descriptor?? [ 898.632603][T15765] xt_CONNSECMARK: invalid mode: 0 [ 898.643023][T15767] fuse: Unknown parameter 'fd0x000000000000000a' [ 898.656499][T15759] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 898.664910][T15759] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 898.693049][ T980] ums-sddr09 3-1:0.20: USB Mass Storage device detected [ 898.923088][ T980] ums-sddr09 3-1:0.20: probe with driver ums-sddr09 failed with error -22 [ 899.413888][ T980] usb 4-1: new high-speed USB device number 89 using dummy_hcd [ 899.603839][ T980] usb 4-1: Using ep0 maxpacket: 8 [ 899.613537][ T980] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 899.625457][ T980] usb 4-1: config 179 has no interface number 0 [ 899.633223][ T980] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 899.670279][ T980] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 899.723019][ T980] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 899.769851][ T980] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 899.811163][ T980] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 899.873074][ T980] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 899.927226][ T980] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 899.989874][T15773] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 900.160659][ T8063] usb 2-1: string descriptor 0 read error: -71 [ 900.175137][ T8063] usbhid 2-1:0.0: can't add hid device: -71 [ 900.265873][ T8063] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 900.355091][ T8063] usb 2-1: USB disconnect, device number 107 [ 900.464766][ T5892] usb 4-1: USB disconnect, device number 89 [ 900.464926][ C1] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 900.479196][ C1] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 900.591124][T15787] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 900.976491][ T8063] usb 3-1: USB disconnect, device number 77 [ 901.210889][T15805] input: syz1 as /devices/virtual/input/input135 [ 901.339219][T15806] input: syz1 as /devices/virtual/input/input136 [ 901.944167][ T5892] usb 2-1: new high-speed USB device number 108 using dummy_hcd [ 902.103880][ T5892] usb 2-1: Using ep0 maxpacket: 16 [ 902.111107][ T5892] usb 2-1: config 0 interface 0 altsetting 65 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 902.151800][ T5892] usb 2-1: config 0 interface 0 altsetting 65 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 902.180814][ T5892] usb 2-1: config 0 interface 0 has no altsetting 0 [ 902.212080][ T5892] usb 2-1: New USB device found, idVendor=0c70, idProduct=f0b6, bcdDevice= 0.00 [ 902.238143][ T5892] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 902.271807][ T5892] usb 2-1: config 0 descriptor?? [ 902.277020][ T5910] usb 1-1: new high-speed USB device number 113 using dummy_hcd [ 902.474981][ T5910] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 902.492892][ T5910] usb 1-1: New USB device found, idVendor=056a, idProduct=0000, bcdDevice= 0.00 [ 902.512012][ T5910] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 902.547846][ T5910] usb 1-1: config 0 descriptor?? [ 902.780843][ T5892] aquacomputer_d5next 0003:0C70:F0B6.0014: unknown main item tag 0x0 [ 902.798425][ T5910] wacom 0003:056A:0000.0015: unbalanced delimiter at end of report description [ 902.824142][ T5892] aquacomputer_d5next 0003:0C70:F0B6.0014: unknown main item tag 0x0 [ 902.832920][ T5910] wacom 0003:056A:0000.0015: parse failed [ 902.848197][ T5910] wacom 0003:056A:0000.0015: probe with driver wacom failed with error -22 [ 902.857061][ T5892] aquacomputer_d5next 0003:0C70:F0B6.0014: unknown main item tag 0x0 [ 902.869909][ T5892] aquacomputer_d5next 0003:0C70:F0B6.0014: unknown main item tag 0x0 [ 902.909076][ T5892] aquacomputer_d5next 0003:0C70:F0B6.0014: unknown main item tag 0x0 [ 902.974094][ T5892] aquacomputer_d5next 0003:0C70:F0B6.0014: hidraw0: USB HID v0.05 Device [HID 0c70:f0b6] on usb-dummy_hcd.1-1/input0 [ 903.477489][ T8063] usb 1-1: USB disconnect, device number 113 [ 903.944905][ T30] kauditd_printk_skb: 60 callbacks suppressed [ 903.944925][ T30] audit: type=1326 audit(1768083136.647:519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15841 comm="syz.4.2594" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f01539 code=0x7ffc0000 [ 903.950018][T15844] loop2: detected capacity change from 0 to 7 [ 903.951472][ T30] audit: type=1326 audit(1768083136.647:520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15841 comm="syz.4.2594" exe="/root/syz-executor" sig=0 arch=40000003 syscall=164 compat=1 ip=0xf7f01539 code=0x7ffc0000 [ 904.005038][ T30] audit: type=1326 audit(1768083136.647:521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15841 comm="syz.4.2594" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f01539 code=0x7ffc0000 [ 904.048920][ T30] audit: type=1326 audit(1768083136.647:522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15841 comm="syz.4.2594" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f01539 code=0x7ffc0000 [ 904.110287][ T30] audit: type=1326 audit(1768083136.777:523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15841 comm="syz.4.2594" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f01539 code=0x7ffc0000 [ 904.143987][ T5892] usb 1-1: new high-speed USB device number 114 using dummy_hcd [ 904.212767][ T30] audit: type=1326 audit(1768083136.777:524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15841 comm="syz.4.2594" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f01539 code=0x7ffc0000 [ 904.343560][T15851] fuse: Bad value for 'fd' [ 904.354408][ T5892] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 904.392574][T15852] input: syz1 as /devices/virtual/input/input137 [ 904.409304][ T5892] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 904.435676][ T5892] usb 1-1: Product: syz [ 904.447405][ T5892] usb 1-1: Manufacturer: syz [ 904.460192][ T5892] usb 1-1: SerialNumber: syz [ 904.561722][ T5892] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 904.718836][ T5892] usb 2-1: USB disconnect, device number 108 [ 904.739578][ T5910] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 904.968353][T15840] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 905.018633][T15858] fuse: Bad value for 'user_id' [ 905.023706][T15858] fuse: Bad value for 'user_id' [ 905.058911][T15840] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 905.153171][ T8063] usb 1-1: USB disconnect, device number 114 [ 905.404641][ T980] usb 2-1: new high-speed USB device number 109 using dummy_hcd [ 905.794023][ T5910] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 905.801520][ T5910] ath9k_htc: Failed to initialize the device [ 905.839169][ T8063] usb 1-1: ath9k_htc: USB layer deinitialized [ 905.848889][ T980] usb 2-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 905.869844][ T980] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 905.884588][ T980] usb 2-1: Product: syz [ 905.889093][ T980] usb 2-1: Manufacturer: syz [ 905.899240][ T980] usb 2-1: SerialNumber: syz [ 905.904274][ T6342] usb 4-1: new high-speed USB device number 90 using dummy_hcd [ 905.930231][ T980] usb 2-1: config 0 descriptor?? [ 905.947289][ T980] hub 2-1:0.0: bad descriptor, ignoring hub [ 905.954145][ T980] hub 2-1:0.0: probe with driver hub failed with error -5 [ 906.069905][ T6342] usb 4-1: config index 0 descriptor too short (expected 28277, got 36) [ 906.098234][ T6342] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 906.140203][ T6342] usb 4-1: config 0 has no interfaces? [ 906.167212][ T6342] usb 4-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 906.167356][ T980] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 906.194137][ T6342] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 906.234955][ T6342] usb 4-1: config 0 descriptor?? [ 906.271630][ T980] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 906.318878][ T980] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 906.328265][ T8063] usb 1-1: new high-speed USB device number 115 using dummy_hcd [ 906.373569][ T980] usb 2-1: media controller created [ 906.428615][ T980] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 906.493804][ T8063] usb 1-1: Using ep0 maxpacket: 8 [ 906.507855][ T8063] usb 1-1: config index 0 descriptor too short (expected 5924, got 36) [ 906.542865][ T8063] usb 1-1: config 250 has an invalid interface number: 228 but max is -1 [ 906.565726][ T8063] usb 1-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 906.702405][ T8063] usb 1-1: config 250 has no interface number 0 [ 906.732318][ T8063] usb 1-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 906.788114][ T8063] usb 1-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 906.808195][ T980] DVB: Unable to find symbol dib7000p_attach() [ 906.822946][ T8063] usb 1-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid maxpacket 65535, setting to 1024 [ 906.868108][ T980] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 906.878165][ T8063] usb 1-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 1024 [ 906.898601][ T8063] usb 1-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 906.925836][ T8063] usb 1-1: config 250 interface 228 has no altsetting 0 [ 906.946234][ T8063] usb 1-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 906.955892][ T8063] usb 1-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 906.967465][ T8063] usb 1-1: Product: syz [ 906.979611][ T8063] usb 1-1: SerialNumber: syz [ 907.019265][ T8063] hub 1-1:250.228: bad descriptor, ignoring hub [ 907.043377][ T8063] hub 1-1:250.228: probe with driver hub failed with error -5 [ 907.693979][ T980] rc_core: IR keymap rc-dib0700-rc5 not found [ 907.726700][ T980] Registered IR keymap rc-empty [ 907.759240][ T980] dvb-usb: could not initialize remote control. [ 907.783226][ T8063] usblp 1-1:250.228: usblp0: USB Bidirectional printer dev 115 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 907.797195][ T980] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 907.945454][ T8063] usb 1-1: USB disconnect, device number 115 [ 907.980122][ T8063] usblp0: removed [ 908.081690][T15892] syzkaller0: entered promiscuous mode [ 908.089329][T15892] syzkaller0: entered allmulticast mode [ 908.491343][ T8063] usb 4-1: USB disconnect, device number 90 [ 908.751675][ T980] usb 2-1: USB disconnect, device number 109 [ 908.941224][ T980] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 909.357502][T15913] input: syz1 as /devices/virtual/input/input139 [ 909.430557][T15911] netlink: 'syz.1.2616': attribute type 12 has an invalid length. [ 909.444026][T15911] netlink: 'syz.1.2616': attribute type 29 has an invalid length. [ 909.459352][T15911] netlink: 148 bytes leftover after parsing attributes in process `syz.1.2616'. [ 909.529424][T15911] netlink: 'syz.1.2616': attribute type 2 has an invalid length. [ 909.547934][T15911] netlink: 23 bytes leftover after parsing attributes in process `syz.1.2616'. [ 909.807552][ T980] hid-generic 0000:0000:0000.0016: hidraw0: HID v0.00 Device [syz1] on syz1 [ 910.104716][ T5910] usb 5-1: new high-speed USB device number 101 using dummy_hcd [ 910.256533][T15928] fido_id[15928]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 910.296067][ T5910] usb 5-1: New USB device found, idVendor=172f, idProduct=0032, bcdDevice= 0.00 [ 910.305299][ T5910] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 910.316882][T15930] bond_slave_1: entered promiscuous mode [ 910.348211][ T5910] usb 5-1: config 0 descriptor?? [ 910.358924][T15930] bond_slave_1: left promiscuous mode [ 910.807601][ T5910] usbhid 5-1:0.0: can't add hid device: -71 [ 910.813682][ T5910] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 910.824885][ T5910] usb 5-1: USB disconnect, device number 101 [ 911.013072][T15938] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 911.739756][T15942] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2611'. [ 912.421361][T15961] binder: transaction release 61 bad handle 1, ret = -22 [ 912.547701][T15963] netlink: 'syz.1.2630': attribute type 12 has an invalid length. [ 912.562357][T15963] netlink: 'syz.1.2630': attribute type 29 has an invalid length. [ 912.580110][T15963] netlink: 148 bytes leftover after parsing attributes in process `syz.1.2630'. [ 912.595536][T15963] netlink: 'syz.1.2630': attribute type 2 has an invalid length. [ 912.607658][T15963] netlink: 23 bytes leftover after parsing attributes in process `syz.1.2630'. [ 913.022054][T15973] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 913.253840][ T980] usb 5-1: new high-speed USB device number 102 using dummy_hcd [ 913.361667][T15980] input: syz1 as /devices/virtual/input/input140 [ 913.423874][ T980] usb 5-1: Using ep0 maxpacket: 8 [ 913.496141][ T980] usb 5-1: unable to get BOS descriptor or descriptor too short [ 913.560363][ T980] usb 5-1: config index 0 descriptor too short (expected 25, got 18) [ 913.802529][ T980] usb 5-1: config 9 has an invalid interface number: 112 but max is 0 [ 913.917444][ T980] usb 5-1: config 9 has no interface number 0 [ 913.923800][ T980] usb 5-1: config 9 interface 112 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 914.067824][ T980] usb 5-1: config 9 interface 112 has no altsetting 0 [ 914.086133][ T980] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice= 8.d3 [ 914.095535][ T980] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 914.108548][ T980] usb 5-1: Product: syz [ 914.113999][ T6342] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 914.172853][ T980] usb 5-1: Manufacturer: syz [ 914.182997][ T980] usb 5-1: SerialNumber: syz [ 914.221167][ T980] r8152-cfgselector 5-1: Unknown version 0x0000 [ 914.293930][ T6342] usb 3-1: Using ep0 maxpacket: 16 [ 914.301755][ T6342] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 914.312993][ T6342] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 914.365766][ T6342] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 914.397795][ T6342] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 914.413811][ T6342] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 914.433865][ T6342] usb 3-1: Product: syz [ 914.438112][ T6342] usb 3-1: Manufacturer: syz [ 914.442748][ T6342] usb 3-1: SerialNumber: syz [ 914.475474][ T980] r8152-cfgselector 5-1: USB disconnect, device number 102 [ 914.726271][ T6342] usb 3-1: 2:1 : format type 0 is detected, processed as PCM [ 914.736371][ T6342] usb 3-1: 2:1 : sample bitwidth 254 in over sample bytes 0 [ 914.744926][ T6342] usb 3-1: 2:1 : unsupported sample bitwidth 254 in 0 bytes [ 914.775654][ T6342] usb 3-1: USB disconnect, device number 78 [ 914.810659][ T5960] udevd[5960]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 915.033538][T15998] bond0: option lp_interval: invalid value (0) [ 915.039998][T15998] bond0: option lp_interval: allowed values 1 - 2147483647 [ 915.963880][ T980] usb 2-1: new high-speed USB device number 110 using dummy_hcd [ 916.015298][T16012] netlink: 'syz.0.2643': attribute type 10 has an invalid length. [ 916.139247][ T980] usb 2-1: Using ep0 maxpacket: 8 [ 916.190383][ T980] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 916.201519][ T980] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 916.216018][ T980] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12832, setting to 1024 [ 916.230025][ T980] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 916.240330][ T980] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 916.255372][ T980] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 916.264592][ T980] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 916.446472][T16017] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2645'. [ 916.525810][ T980] usb 2-1: GET_CAPABILITIES returned 0 [ 916.532721][ T980] usbtmc 2-1:16.0: can't read capabilities [ 916.773889][ T6342] usb 1-1: new high-speed USB device number 116 using dummy_hcd [ 916.943993][ T6342] usb 1-1: Using ep0 maxpacket: 16 [ 916.953389][ T6342] usb 1-1: config 0 has an invalid interface number: 64 but max is 0 [ 916.962866][ T6342] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 916.984649][ T6342] usb 1-1: config 0 has no interface number 0 [ 917.141263][T16026] input: syz1 as /devices/virtual/input/input141 [ 917.227540][ T6342] usb 1-1: New USB device found, idVendor=0bd3, idProduct=0555, bcdDevice= 0.5b [ 917.278761][ T6342] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 917.347877][ T6342] usb 1-1: config 0 descriptor?? [ 917.360293][ T6342] uvcvideo 1-1:0.64: Found UVC 0.00 device (0bd3:0555) [ 917.368948][ T6342] uvcvideo 1-1:0.64: No valid video chain found. [ 917.571481][ T6342] usb 1-1: USB disconnect, device number 116 [ 917.904277][ T980] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 918.043940][ T980] usb 3-1: device descriptor read/64, error -71 [ 918.283886][ T980] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 918.434068][ T980] usb 3-1: device descriptor read/64, error -71 [ 918.481502][ T8063] usb 2-1: USB disconnect, device number 110 [ 918.544254][ T980] usb usb3-port1: attempt power cycle [ 918.612054][T16045] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 919.071950][T16052] bridge2: entered allmulticast mode [ 919.144950][ T980] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 919.187592][T16050] netlink: 'syz.1.2654': attribute type 12 has an invalid length. [ 919.195855][T16050] netlink: 'syz.1.2654': attribute type 29 has an invalid length. [ 919.204082][T16050] netlink: 148 bytes leftover after parsing attributes in process `syz.1.2654'. [ 919.205152][ T980] usb 3-1: device descriptor read/8, error -71 [ 919.213606][T16050] netlink: 'syz.1.2654': attribute type 2 has an invalid length. [ 919.265175][T16050] netlink: 23 bytes leftover after parsing attributes in process `syz.1.2654'. [ 919.660229][ T980] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 919.684343][ T980] usb 3-1: device descriptor read/8, error -71 [ 919.704684][T16058] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2658'. [ 919.804585][ T980] usb usb3-port1: unable to enumerate USB device [ 919.923080][T16069] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2664'. [ 920.800353][T16093] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2670'. [ 921.197048][T16110] xt_bpf: check failed: parse error [ 921.599125][T16118] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2677'. [ 921.669289][T16118] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2677'. [ 921.675179][ T6342] usb 5-1: new high-speed USB device number 103 using dummy_hcd [ 921.715567][T16118] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2677'. [ 921.738780][T16125] FAULT_INJECTION: forcing a failure. [ 921.738780][T16125] name failslab, interval 1, probability 0, space 0, times 0 [ 921.762351][T16125] CPU: 1 UID: 0 PID: 16125 Comm: syz.0.2679 Tainted: G L syzkaller #0 PREEMPT(full) [ 921.762382][T16125] Tainted: [L]=SOFTLOCKUP [ 921.762391][T16125] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 921.762403][T16125] Call Trace: [ 921.762412][T16125] [ 921.762422][T16125] dump_stack_lvl+0xe8/0x150 [ 921.762455][T16125] should_fail_ex+0x414/0x560 [ 921.762495][T16125] should_failslab+0xa8/0x100 [ 921.762520][T16125] __kmalloc_noprof+0xdf/0x800 [ 921.762536][T16125] ? security_task_alloc+0x4d/0x360 [ 921.762560][T16125] security_task_alloc+0x4d/0x360 [ 921.762580][T16125] copy_process+0x1493/0x3950 [ 921.762609][T16125] ? copy_process+0x915/0x3950 [ 921.762634][T16125] ? __pfx_copy_process+0x10/0x10 [ 921.762657][T16125] ? __pfx_io_wq_worker+0x10/0x10 [ 921.762680][T16125] ? __pfx_io_wq_worker+0x10/0x10 [ 921.762704][T16125] create_io_thread+0xca/0x120 [ 921.762724][T16125] ? __pfx_create_io_thread+0x10/0x10 [ 921.762750][T16125] ? __pfx_io_wq_worker+0x10/0x10 [ 921.762778][T16125] ? __raw_spin_lock_init+0x45/0x100 [ 921.762805][T16125] ? __init_swait_queue_head+0xa9/0x150 [ 921.762829][T16125] ? create_io_worker+0x27/0x5c0 [ 921.762852][T16125] create_io_worker+0x182/0x5c0 [ 921.762885][T16125] io_wq_enqueue+0x62c/0x850 [ 921.762906][T16125] ? __pfx_io_wq_work_match_item+0x10/0x10 [ 921.762933][T16125] io_submit_sqes+0x1d19/0x2140 [ 921.762978][T16125] __se_sys_io_uring_enter+0x2e0/0x2b60 [ 921.763015][T16125] ? ksys_write+0x1cb/0x250 [ 921.763035][T16125] ? __pfx___se_sys_io_uring_enter+0x10/0x10 [ 921.763055][T16125] ? __mutex_unlock_slowpath+0x1a1/0x730 [ 921.763075][T16125] ? __pfx_vfs_write+0x10/0x10 [ 921.763093][T16125] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 921.763123][T16125] ? __fget_files+0x3a0/0x420 [ 921.763150][T16125] ? fput+0xa0/0xd0 [ 921.763172][T16125] ? ksys_write+0x22a/0x250 [ 921.763192][T16125] ? __pfx_ksys_write+0x10/0x10 [ 921.763212][T16125] ? __ia32_sys_io_uring_enter+0x21/0xf0 [ 921.763237][T16125] __do_fast_syscall_32+0x1dc/0x570 [ 921.763257][T16125] ? lockdep_hardirqs_on+0x7b/0x110 [ 921.763273][T16125] ? do_fast_syscall_32+0x34/0x80 [ 921.763292][T16125] ? irqentry_exit+0x10f/0x670 [ 921.763313][T16125] do_fast_syscall_32+0x34/0x80 [ 921.763334][T16125] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 921.763354][T16125] RIP: 0023:0xf708d539 [ 921.763370][T16125] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 921.763385][T16125] RSP: 002b:00000000f547d55c EFLAGS: 00000206 ORIG_RAX: 00000000000001aa [ 921.763404][T16125] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000a3d [ 921.763415][T16125] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 921.763425][T16125] RBP: 000000000000ff39 R08: 0000000000000000 R09: 0000000000000000 [ 921.763436][T16125] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 921.763446][T16125] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 921.763470][T16125] [ 922.070000][ T6342] usb 5-1: Using ep0 maxpacket: 16 [ 922.079345][ T6342] usb 5-1: config 254 has an invalid interface number: 235 but max is 0 [ 922.118134][T16118] x_tables: ip_tables: owner match: used from hooks PREROUTING, but only valid from OUTPUT/POSTROUTING [ 922.173317][ T6342] usb 5-1: config 254 has no interface number 0 [ 922.225458][ T6342] usb 5-1: config 254 interface 235 altsetting 2 endpoint 0x6 has an invalid bInterval 237, changing to 7 [ 922.280424][ T6342] usb 5-1: config 254 interface 235 altsetting 2 endpoint 0x6 has invalid maxpacket 42803, setting to 1024 [ 922.324930][ T6342] usb 5-1: config 254 interface 235 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 922.357477][ T6342] usb 5-1: config 254 interface 235 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 922.374672][ T6342] usb 5-1: config 254 interface 235 has no altsetting 0 [ 922.397792][ T6342] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=2b.f1 [ 922.433177][ T6342] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 922.452291][ T6342] usb 5-1: Product: syz [ 922.457514][ T6342] usb 5-1: Manufacturer: syz [ 922.462160][ T6342] usb 5-1: SerialNumber: syz [ 922.703168][T16139] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2683'. [ 923.072206][T16136] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 923.279565][ T30] audit: type=1326 audit(1768083155.977:525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16129 comm="syz.0.2680" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708d539 code=0x7fc00000 [ 923.359178][ T30] audit: type=1326 audit(1768083155.977:526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16129 comm="syz.0.2680" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf708d539 code=0x7fc00000 [ 923.449397][ T30] audit: type=1326 audit(1768083155.977:527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16129 comm="syz.0.2680" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708d539 code=0x7fc00000 [ 924.243907][ T5892] usb 1-1: new full-speed USB device number 117 using dummy_hcd [ 924.420746][ T6342] usbtest 5-1:254.235: couldn't get endpoints, -71 [ 924.435685][ T5892] usb 1-1: unable to get BOS descriptor or descriptor too short [ 924.456180][ T5892] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 924.464061][ T6342] usbtest 5-1:254.235: probe with driver usbtest failed with error -71 [ 924.486985][ T5892] usb 1-1: can't read configurations, error -71 [ 924.488332][T16136] batman_adv: batadv0: Interface deactivated: gretap1 [ 924.516259][ T6342] usb 5-1: USB disconnect, device number 103 [ 924.624769][T16152] netlink: 'syz.1.2685': attribute type 12 has an invalid length. [ 924.653940][T16152] netlink: 'syz.1.2685': attribute type 29 has an invalid length. [ 924.664602][T16152] netlink: 148 bytes leftover after parsing attributes in process `syz.1.2685'. [ 924.675115][T16152] netlink: 'syz.1.2685': attribute type 2 has an invalid length. [ 924.682962][T16152] netlink: 23 bytes leftover after parsing attributes in process `syz.1.2685'. [ 924.724261][ T1323] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 924.733347][ T1323] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 924.746019][ T1323] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 924.770837][ T1323] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 924.873917][T16154] usb 4-1: new high-speed USB device number 91 using dummy_hcd [ 925.034043][T16154] usb 4-1: device descriptor read/64, error -71 [ 925.155118][ T6342] usb 3-1: new high-speed USB device number 83 using dummy_hcd [ 925.248812][T16173] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 925.274367][T16154] usb 4-1: new high-speed USB device number 92 using dummy_hcd [ 925.383863][ T6342] usb 3-1: Using ep0 maxpacket: 16 [ 925.398935][ T6342] usb 3-1: config index 0 descriptor too short (expected 58522, got 18) [ 925.413873][ T6342] usb 3-1: config 18 has too many interfaces: 54, using maximum allowed: 32 [ 925.434060][T16154] usb 4-1: device descriptor read/64, error -71 [ 925.501597][ T6342] usb 3-1: config 18 has an invalid descriptor of length 0, skipping remainder of the config [ 925.517626][ T6342] usb 3-1: config 18 has 0 interfaces, different from the descriptor's value: 54 [ 925.536164][ T6342] usb 3-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice=a8.98 [ 925.545326][ T6342] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 925.554897][ T6342] usb 3-1: Product: syz [ 925.563793][ T6342] usb 3-1: Manufacturer: syz [ 925.568553][ T6342] usb 3-1: SerialNumber: syz [ 925.626772][T16154] usb usb4-port1: attempt power cycle [ 925.974439][T16154] usb 4-1: new high-speed USB device number 93 using dummy_hcd [ 926.039396][T16154] usb 4-1: device descriptor read/8, error -71 [ 926.304836][T16154] usb 4-1: new high-speed USB device number 94 using dummy_hcd [ 926.678004][T16154] usb 4-1: device descriptor read/8, error -71 [ 926.812690][T16154] usb usb4-port1: unable to enumerate USB device [ 927.053893][T16154] usb 1-1: new high-speed USB device number 119 using dummy_hcd [ 927.203974][T16154] usb 1-1: Using ep0 maxpacket: 8 [ 927.212831][T16154] usb 1-1: config 253 has an invalid interface number: 252 but max is 0 [ 927.221967][T16154] usb 1-1: config 253 has no interface number 0 [ 927.231473][T16154] usb 1-1: config 253 interface 252 altsetting 2 bulk endpoint 0x5 has invalid maxpacket 8 [ 927.274836][T16154] usb 1-1: config 253 interface 252 has no altsetting 0 [ 927.311571][T16154] usb 1-1: New USB device found, idVendor=06cd, idProduct=0119, bcdDevice=e6.d0 [ 927.320889][ T980] usb 5-1: new high-speed USB device number 104 using dummy_hcd [ 927.333852][T16154] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 927.347230][T16154] usb 1-1: Product: syz [ 927.353621][T16154] usb 1-1: Manufacturer: syz [ 927.364854][T16154] usb 1-1: SerialNumber: syz [ 927.384247][T16184] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 927.478538][ T980] usb 5-1: config index 0 descriptor too short (expected 72, got 10) [ 927.490448][ T980] usb 5-1: config 1 descriptor has 1 excess byte, ignoring [ 927.505895][ T980] usb 5-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 927.718591][T16183] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 927.793680][T16154] keyspan 1-1:253.252: Keyspan 1 port adapter converter detected [ 927.820427][T16154] keyspan 1-1:253.252: found no endpoint descriptor for endpoint 87 [ 927.920851][ T6342] usb 3-1: USB disconnect, device number 83 [ 928.046066][T16154] keyspan 1-1:253.252: found no endpoint descriptor for endpoint 7 [ 928.082295][T16154] keyspan 1-1:253.252: found no endpoint descriptor for endpoint 81 [ 928.159770][T16154] keyspan 1-1:253.252: unsupported endpoint type 0 [ 928.190340][T16154] keyspan 1-1:253.252: found no endpoint descriptor for endpoint 2 [ 928.231042][T16154] keyspan 1-1:253.252: found no endpoint descriptor for endpoint 85 [ 928.288558][T16154] usb 1-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 928.339708][T16154] usb 1-1: USB disconnect, device number 119 [ 928.400721][T16154] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 928.461848][T16154] keyspan 1-1:253.252: device disconnected [ 928.815261][T16214] Invalid logical block size (-1744830465) [ 929.232373][T16228] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 931.180199][T16241] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2707'. [ 931.233428][T16241] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2707'. [ 931.332255][ T980] usb 5-1: string descriptor 0 read error: -71 [ 931.339570][ T980] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 931.376583][ T980] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 931.403889][ T980] usb 5-1: can't set config #1, error -71 [ 931.427893][ T980] usb 5-1: USB disconnect, device number 104 [ 931.863987][ T980] usb 2-1: new high-speed USB device number 111 using dummy_hcd [ 931.918278][T16253] bridge0: entered allmulticast mode [ 932.043797][ T30] audit: type=1326 audit(1768083164.687:528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16250 comm="syz.2.2710" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700d539 code=0x7ffc0000 [ 932.111392][ T30] audit: type=1326 audit(1768083164.687:529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16250 comm="syz.2.2710" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700d539 code=0x7ffc0000 [ 932.133880][ T980] usb 2-1: Using ep0 maxpacket: 16 [ 932.149212][ T980] usb 2-1: config index 0 descriptor too short (expected 58522, got 18) [ 932.175189][ T980] usb 2-1: config 18 has too many interfaces: 54, using maximum allowed: 32 [ 932.194927][ T30] audit: type=1326 audit(1768083164.687:530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16250 comm="syz.2.2710" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf700d539 code=0x7ffc0000 [ 932.213913][ T980] usb 2-1: config 18 has an invalid descriptor of length 0, skipping remainder of the config [ 932.251513][ T980] usb 2-1: config 18 has 0 interfaces, different from the descriptor's value: 54 [ 932.274431][ T5892] usb 3-1: new high-speed USB device number 84 using dummy_hcd [ 932.283546][ T30] audit: type=1326 audit(1768083164.687:531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16250 comm="syz.2.2710" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700d539 code=0x7ffc0000 [ 932.322987][ T980] usb 2-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice=a8.98 [ 932.345518][ T980] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 932.346357][ T30] audit: type=1326 audit(1768083164.687:532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16250 comm="syz.2.2710" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700d539 code=0x7ffc0000 [ 932.381915][ T30] audit: type=1326 audit(1768083164.687:533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16250 comm="syz.2.2710" exe="/root/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf700d539 code=0x7ffc0000 [ 932.412369][ T980] usb 2-1: Product: syz [ 932.412389][ T30] audit: type=1326 audit(1768083164.687:534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16250 comm="syz.2.2710" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700d539 code=0x7ffc0000 [ 932.500122][ T5892] usb 3-1: Using ep0 maxpacket: 32 [ 932.503938][ T980] usb 2-1: Manufacturer: syz [ 932.571752][ T5892] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 932.573841][ T980] usb 2-1: SerialNumber: syz [ 932.651899][ T5892] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 932.678736][ T5892] usb 3-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 932.845486][ T5892] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 932.862893][ T30] audit: type=1326 audit(1768083164.687:535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16250 comm="syz.2.2710" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf700d539 code=0x7ffc0000 [ 932.885784][ T6342] usb 4-1: new high-speed USB device number 95 using dummy_hcd [ 932.907004][ T5892] usb 3-1: config 0 descriptor?? [ 932.933807][ T30] audit: type=1326 audit(1768083164.687:536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16250 comm="syz.2.2710" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700d539 code=0x7ffc0000 [ 932.976020][T16263] FAULT_INJECTION: forcing a failure. [ 932.976020][T16263] name failslab, interval 1, probability 0, space 0, times 0 [ 933.010040][ T30] audit: type=1326 audit(1768083164.687:537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16250 comm="syz.2.2710" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf700d539 code=0x7ffc0000 [ 933.051359][T16263] CPU: 0 UID: 0 PID: 16263 Comm: syz.0.2713 Tainted: G L syzkaller #0 PREEMPT(full) [ 933.051395][T16263] Tainted: [L]=SOFTLOCKUP [ 933.051403][T16263] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 933.051416][T16263] Call Trace: [ 933.051425][T16263] [ 933.051434][T16263] dump_stack_lvl+0xe8/0x150 [ 933.051469][T16263] should_fail_ex+0x414/0x560 [ 933.051507][T16263] should_failslab+0xa8/0x100 [ 933.051535][T16263] kmem_cache_alloc_node_noprof+0x8c/0x720 [ 933.051569][T16263] ? __alloc_skb+0x1dc/0x3a0 [ 933.051591][T16263] ? __local_bh_enable_ip+0xd0/0x130 [ 933.051614][T16263] ? __alloc_skb+0x198/0x3a0 [ 933.051638][T16263] __alloc_skb+0x1dc/0x3a0 [ 933.051665][T16263] netlink_dump+0x1b7/0xe90 [ 933.051693][T16263] ? __netlink_lookup+0xbd/0x8a0 [ 933.051728][T16263] ? __pfx_netlink_dump+0x10/0x10 [ 933.051768][T16263] ? netlink_lookup+0x30/0x200 [ 933.051790][T16263] ? netlink_lookup+0x30/0x200 [ 933.051820][T16263] __netlink_dump_start+0x5cb/0x7e0 [ 933.051850][T16263] ? nft_netlink_dump_start_rcu+0xb6/0x1a0 [ 933.051876][T16263] nft_netlink_dump_start_rcu+0xdb/0x1a0 [ 933.051903][T16263] nf_tables_getchain+0x238/0x790 [ 933.051928][T16263] ? nfnl_pernet+0x23/0x240 [ 933.051953][T16263] ? __pfx_nf_tables_getchain+0x10/0x10 [ 933.051973][T16263] ? __pfx_nf_tables_dump_chains+0x10/0x10 [ 933.052004][T16263] ? __nla_parse+0x40/0x60 [ 933.052028][T16263] ? __pfx_nf_tables_getchain+0x10/0x10 [ 933.052051][T16263] nfnetlink_rcv_msg+0x80e/0x1130 [ 933.052075][T16263] ? __lock_acquire+0x6b6/0x2cf0 [ 933.052095][T16263] ? nfnetlink_rcv_msg+0x20d/0x1130 [ 933.052138][T16263] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 933.052198][T16263] ? __lock_acquire+0x6b6/0x2cf0 [ 933.052228][T16263] ? irqentry_exit+0x5e8/0x670 [ 933.052259][T16263] netlink_rcv_skb+0x208/0x470 [ 933.052288][T16263] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 933.052316][T16263] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 933.052357][T16263] ? bpf_lsm_capable+0x9/0x20 [ 933.052386][T16263] ? security_capable+0x7e/0x2e0 [ 933.052419][T16263] nfnetlink_rcv+0x282/0x2590 [ 933.052449][T16263] ? is_bpf_text_address+0x26/0x2b0 [ 933.052489][T16263] ? __kernel_text_address+0xd/0x40 [ 933.052518][T16263] ? unwind_get_return_address+0x4d/0x90 [ 933.052543][T16263] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 933.052576][T16263] ? arch_stack_walk+0xfc/0x150 [ 933.052610][T16263] ? __lock_acquire+0x6b6/0x2cf0 [ 933.052635][T16263] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 933.052662][T16263] ? stack_depot_save_flags+0x33/0x810 [ 933.052686][T16263] ? __lock_acquire+0x6b6/0x2cf0 [ 933.052716][T16263] ? __lock_acquire+0x6b6/0x2cf0 [ 933.052749][T16263] ? __netlink_lookup+0xbd/0x8a0 [ 933.052790][T16263] ? netlink_deliver_tap+0x2e/0x1b0 [ 933.052819][T16263] ? netlink_deliver_tap+0x2e/0x1b0 [ 933.052852][T16263] ? netlink_deliver_tap+0x2e/0x1b0 [ 933.052889][T16263] netlink_unicast+0x82f/0x9e0 [ 933.052923][T16263] ? __pfx_netlink_unicast+0x10/0x10 [ 933.052948][T16263] ? __alloc_skb+0x198/0x3a0 [ 933.052971][T16263] ? netlink_sendmsg+0x642/0xb30 [ 933.052998][T16263] ? skb_put+0x11b/0x210 [ 933.053026][T16263] netlink_sendmsg+0x805/0xb30 [ 933.053064][T16263] ? __pfx_netlink_sendmsg+0x10/0x10 [ 933.053096][T16263] ? __import_iovec+0x5d4/0x7f0 [ 933.053119][T16263] ? aa_sock_msg_perm+0xf1/0x1b0 [ 933.053149][T16263] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 933.053176][T16263] ? __pfx_netlink_sendmsg+0x10/0x10 [ 933.053206][T16263] __sock_sendmsg+0x21c/0x270 [ 933.053242][T16263] ____sys_sendmsg+0x505/0x820 [ 933.053275][T16263] ? __pfx_____sys_sendmsg+0x10/0x10 [ 933.053308][T16263] ? kstrtouint+0x6e/0xe0 [ 933.053347][T16263] ___sys_sendmsg+0x21f/0x2a0 [ 933.053378][T16263] ? __pfx____sys_sendmsg+0x10/0x10 [ 933.053404][T16263] ? get_pid_task+0x20/0x1f0 [ 933.053431][T16263] ? get_pid_task+0x20/0x1f0 [ 933.053455][T16263] ? get_pid_task+0x20/0x1f0 [ 933.053513][T16263] ? __fget_files+0x2a/0x420 [ 933.053538][T16263] ? __fget_files+0x3a0/0x420 [ 933.053577][T16263] __sys_sendmsg+0x164/0x220 [ 933.053606][T16263] ? __pfx___sys_sendmsg+0x10/0x10 [ 933.053643][T16263] ? __pfx_ksys_write+0x10/0x10 [ 933.053676][T16263] __do_fast_syscall_32+0x1dc/0x570 [ 933.053701][T16263] ? lockdep_hardirqs_on+0x7b/0x110 [ 933.053719][T16263] ? do_fast_syscall_32+0x34/0x80 [ 933.053744][T16263] ? irqentry_exit+0x10f/0x670 [ 933.053771][T16263] do_fast_syscall_32+0x34/0x80 [ 933.053795][T16263] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 933.053821][T16263] RIP: 0023:0xf708d539 [ 933.053841][T16263] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 933.053860][T16263] RSP: 002b:00000000f545c55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 933.053883][T16263] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000240 [ 933.053898][T16263] RDX: 0000000000008004 RSI: 0000000000000000 RDI: 0000000000000000 [ 933.053912][T16263] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 933.053924][T16263] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 933.053937][T16263] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 933.053969][T16263] [ 933.779272][ T6342] usb 4-1: device descriptor read/64, error -71 [ 934.204280][ T6342] usb 4-1: new high-speed USB device number 96 using dummy_hcd [ 934.445573][ T6342] usb 4-1: device descriptor read/64, error -71 [ 934.608070][ T6342] usb usb4-port1: attempt power cycle [ 934.983288][ T6342] usb 4-1: new high-speed USB device number 97 using dummy_hcd [ 935.046444][ T6342] usb 4-1: device descriptor read/8, error -71 [ 935.349335][ T6342] usb 4-1: new high-speed USB device number 98 using dummy_hcd [ 935.842385][T16283] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2718'. [ 936.171654][ T6342] usb 4-1: device descriptor read/8, error -71 [ 936.244865][ T5892] usb 3-1: string descriptor 0 read error: -71 [ 936.281593][ T5892] usbhid 3-1:0.0: can't add hid device: -71 [ 936.315523][ T5892] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 936.331184][ T6342] usb usb4-port1: unable to enumerate USB device [ 936.399979][ T5892] usb 3-1: USB disconnect, device number 84 [ 936.405046][ T980] usb 2-1: USB disconnect, device number 111 [ 936.766935][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 936.773348][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 936.813916][ T6342] usb 4-1: new high-speed USB device number 99 using dummy_hcd [ 936.876776][T16301] input: syz1 as /devices/virtual/input/input142 [ 937.149794][ T6342] usb 4-1: config index 0 descriptor too short (expected 72, got 10) [ 937.182267][ T6342] usb 4-1: config 1 descriptor has 1 excess byte, ignoring [ 937.197383][ T6342] usb 4-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 939.168175][T16326] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2732'. [ 939.779339][T16333] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2733'. [ 940.423918][ T8078] usb 3-1: new high-speed USB device number 85 using dummy_hcd [ 940.524326][ T980] usb 1-1: new high-speed USB device number 120 using dummy_hcd [ 940.563909][ T8078] usb 3-1: device descriptor read/64, error -71 [ 940.693837][ T980] usb 1-1: Using ep0 maxpacket: 16 [ 940.721905][ T980] usb 1-1: config index 0 descriptor too short (expected 58522, got 18) [ 940.750791][ T980] usb 1-1: config 18 has too many interfaces: 54, using maximum allowed: 32 [ 940.784696][ T980] usb 1-1: config 18 has an invalid descriptor of length 0, skipping remainder of the config [ 940.803899][ T8078] usb 3-1: new high-speed USB device number 86 using dummy_hcd [ 940.899497][T16342] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 941.031116][ T980] usb 1-1: config 18 has 0 interfaces, different from the descriptor's value: 54 [ 941.043880][ T8078] usb 3-1: device descriptor read/64, error -71 [ 941.107060][ T980] usb 1-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice=a8.98 [ 941.122843][ T980] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 941.142299][ T980] usb 1-1: Product: syz [ 941.154216][ T8078] usb usb3-port1: attempt power cycle [ 941.181059][ T980] usb 1-1: Manufacturer: syz [ 941.193901][ T980] usb 1-1: SerialNumber: syz [ 941.401918][T16345] binder: 16337:16345 ioctl 40044591 0 returned -22 [ 941.493951][ T8078] usb 3-1: new high-speed USB device number 87 using dummy_hcd [ 941.798487][ T8078] usb 3-1: device descriptor read/8, error -71 [ 942.076588][ T8078] usb 3-1: new high-speed USB device number 88 using dummy_hcd [ 942.480275][ T6342] usb 4-1: string descriptor 0 read error: -32 [ 942.583328][ T6342] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 942.643837][ T6342] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 942.748034][ T6342] usb 4-1: can't set config #1, error -71 [ 942.775724][ T6342] usb 4-1: USB disconnect, device number 99 [ 943.519936][ T8078] usb 3-1: device descriptor read/8, error -71 [ 943.664222][ T8078] usb usb3-port1: unable to enumerate USB device [ 943.981619][T16366] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 944.779216][ T980] usb 1-1: USB disconnect, device number 120 [ 945.153627][T16377] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2743'. [ 945.663665][T16381] input: syz1 as /devices/virtual/input/input143 [ 946.870717][T16393] vivid-004: ================= START STATUS ================= [ 946.914882][T16393] vivid-004: Radio HW Seek Mode: Bounded [ 946.923021][T16393] vivid-004: Radio Programmable HW Seek: false [ 946.930719][T16393] vivid-004: RDS Rx I/O Mode: Block I/O [ 946.936617][T16393] vivid-004: Generate RBDS Instead of RDS: false [ 946.943040][T16393] vivid-004: RDS Reception: true [ 946.949079][T16393] vivid-004: RDS Program Type: 0 inactive [ 946.955049][T16393] vivid-004: RDS PS Name: inactive [ 946.960466][T16393] vivid-004: RDS Radio Text: inactive [ 946.980703][T16393] vivid-004: RDS Traffic Announcement: false inactive [ 947.031594][T16393] vivid-004: RDS Traffic Program: false inactive [ 947.070735][T16393] vivid-004: RDS Music: false inactive [ 947.102042][T16393] vivid-004: ================== END STATUS ================== [ 947.371866][T16408] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2748'. [ 948.843189][T16430] netlink: 14 bytes leftover after parsing attributes in process `syz.4.2755'. [ 949.686798][T16443] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2760'. [ 949.870445][T16441] input: syz1 as /devices/virtual/input/input144 [ 951.888504][T16489] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 952.063874][T16154] usb 1-1: new full-speed USB device number 121 using dummy_hcd [ 952.258852][T16154] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid maxpacket 57343, setting to 64 [ 952.278956][T16497] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 952.329245][T16154] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 952.363530][T16154] usb 1-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 952.386019][T16154] usb 1-1: New USB device strings: Mfr=1, Product=66, SerialNumber=3 [ 952.412084][T16154] usb 1-1: Product: syz [ 952.423236][T16154] usb 1-1: Manufacturer: syz [ 952.436487][T16154] usb 1-1: SerialNumber: syz [ 952.498428][T16154] usb 1-1: config 0 descriptor?? [ 952.610974][T16488] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 952.894589][T16154] usb 1-1: USB disconnect, device number 121 [ 953.571966][T16528] input: syz1 as /devices/virtual/input/input145 [ 954.549741][T16544] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 954.857968][T16522] syz.4.2782 (16522): drop_caches: 2 [ 955.280277][T16552] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2788'. [ 955.318516][T16553] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2789'. [ 955.601496][T16561] fuse: Bad value for 'group_id' [ 955.601519][T16561] fuse: Bad value for 'group_id' [ 955.786754][T16561] syzkaller1: entered promiscuous mode [ 955.792464][T16561] syzkaller1: entered allmulticast mode [ 956.138607][T16568] netlink: 11 bytes leftover after parsing attributes in process `syz.4.2792'. [ 956.493854][ T980] usb 2-1: new full-speed USB device number 112 using dummy_hcd [ 956.698214][ T980] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 956.709543][ T980] usb 2-1: config 0 has no interfaces? [ 956.715597][ T980] usb 2-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 956.727383][ T980] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 956.754938][ T980] usb 2-1: config 0 descriptor?? [ 956.897212][T16584] netlink: 92 bytes leftover after parsing attributes in process `syz.2.2796'. [ 957.380481][T16596] input: syz1 as /devices/virtual/input/input146 [ 959.358570][T16616] input: syz1 as /devices/virtual/input/input147 [ 959.679838][T16617] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 959.976305][ T8078] usb 2-1: USB disconnect, device number 112 [ 961.273893][ T980] usb 2-1: new full-speed USB device number 113 using dummy_hcd [ 961.385225][T16631] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2806'. [ 961.488532][ T980] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 961.505043][ T980] usb 2-1: config 0 has no interfaces? [ 961.538255][ T980] usb 2-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 961.607743][ T980] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 961.655528][ T980] usb 2-1: config 0 descriptor?? [ 961.795983][T16637] vivid-001: ================= START STATUS ================= [ 961.814034][T16637] vivid-001: Radio HW Seek Mode: Bounded [ 961.833941][T16637] vivid-001: Radio Programmable HW Seek: false [ 961.850557][T16637] vivid-001: RDS Rx I/O Mode: Block I/O [ 961.873791][T16637] vivid-001: Generate RBDS Instead of RDS: false [ 961.954323][T16637] vivid-001: RDS Reception: true [ 961.991611][T16637] vivid-001: RDS Program Type: 0 inactive [ 961.998058][T16637] vivid-001: RDS PS Name: inactive [ 962.003538][T16637] vivid-001: RDS Radio Text: inactive [ 962.085615][T16637] vivid-001: RDS Traffic Announcement: false inactive [ 962.092446][T16637] vivid-001: RDS Traffic Program: false inactive [ 962.113870][ T6342] usb 5-1: new high-speed USB device number 105 using dummy_hcd [ 962.163475][T16637] vivid-001: RDS Music: false inactive [ 962.172768][T16637] vivid-001: ================== END STATUS ================== [ 962.283834][ T6342] usb 5-1: Using ep0 maxpacket: 16 [ 962.291360][ T6342] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 962.302409][ T6342] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 962.312907][ T6342] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 962.336808][ T6342] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 962.358898][ T6342] usb 5-1: New USB device found, idVendor=0586, idProduct=1500, bcdDevice=2e.97 [ 962.381871][ T6342] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 962.396810][ T6342] usb 5-1: Product: syz [ 962.401139][ T6342] usb 5-1: Manufacturer: syz [ 962.406193][ T6342] usb 5-1: SerialNumber: syz [ 962.416860][ T6342] usb 5-1: config 0 descriptor?? [ 962.428683][ T6342] omninet 5-1:0.0: ZyXEL - omni.net usb converter detected [ 962.442460][ T6342] usb 5-1: ZyXEL - omni.net usb converter now attached to ttyUSB0 [ 962.507892][T16651] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2812'. [ 962.671285][ T980] usb 5-1: USB disconnect, device number 105 [ 962.686804][ T980] omninet ttyUSB0: ZyXEL - omni.net usb converter now disconnected from ttyUSB0 [ 962.702463][ T980] omninet 5-1:0.0: device disconnected [ 963.463946][T16666] input: syz1 as /devices/virtual/input/input148 [ 964.354390][ T6342] usb 2-1: USB disconnect, device number 113 [ 964.934858][T16680] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2819'. [ 964.953793][ T6342] usb 4-1: new full-speed USB device number 100 using dummy_hcd [ 965.399546][ T6342] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 965.420306][ T6342] usb 4-1: config 0 has no interfaces? [ 965.457193][T16681] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 965.694893][ T6342] usb 4-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 965.744156][ T6342] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 965.935360][ T6342] usb 4-1: config 0 descriptor?? [ 966.344870][T16691] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 966.569647][T16698] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2824'. [ 966.656856][T16699] fuse: Bad value for 'group_id' [ 966.662005][T16699] fuse: Bad value for 'group_id' [ 966.701273][T16699] syzkaller1: entered promiscuous mode [ 966.706924][T16699] syzkaller1: entered allmulticast mode [ 966.902967][T16704] input: syz1 as /devices/virtual/input/input149 [ 967.782060][T16713] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 968.837601][ T5892] usb 4-1: USB disconnect, device number 100 [ 969.782199][T16730] fuse: Bad value for 'user_id' [ 969.787392][T16730] fuse: Bad value for 'user_id' [ 969.964034][ T5974] wlan0: Trigger new scan to find an IBSS to join [ 970.094439][ T6342] usb 5-1: new high-speed USB device number 106 using dummy_hcd [ 970.337828][ T6342] usb 5-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 970.370355][ T6342] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 970.379368][ T6342] usb 5-1: Product: syz [ 970.384420][ T6342] usb 5-1: Manufacturer: syz [ 970.399098][ T6342] usb 5-1: SerialNumber: syz [ 970.471197][ T6342] usb 5-1: config 0 descriptor?? [ 970.496112][ T6342] hub 5-1:0.0: bad descriptor, ignoring hub [ 970.569755][ T6342] hub 5-1:0.0: probe with driver hub failed with error -5 [ 970.736095][ T6342] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 970.846497][ T6342] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 970.857079][ T6342] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 970.867324][ T6342] usb 5-1: media controller created [ 970.883632][ T6342] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 971.016968][ T6342] DVB: Unable to find symbol dib7000p_attach() [ 971.037433][ T6342] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 971.164310][ T6342] rc_core: IR keymap rc-dib0700-rc5 not found [ 971.170885][ T6342] Registered IR keymap rc-empty [ 971.228475][ T6342] dvb-usb: could not initialize remote control. [ 971.236836][ T6342] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 971.409770][T16745] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2834'. [ 971.508925][T16748] input: syz1 as /devices/virtual/input/input151 [ 971.539660][T16750] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2837'. [ 972.994164][ T34] wlan0: Trigger new scan to find an IBSS to join [ 973.636671][T16765] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 975.274550][T16789] tipc: Enabled bearer , priority 0 [ 975.583802][ T980] usb 1-1: new high-speed USB device number 122 using dummy_hcd [ 975.783926][ T980] usb 1-1: Using ep0 maxpacket: 32 [ 975.844325][ T980] usb 1-1: config 0 has no interfaces? [ 975.849974][ T980] usb 1-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 975.869639][ T980] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 975.918599][ T980] usb 1-1: config 0 descriptor?? [ 975.953950][ T34] wlan0: Trigger new scan to find an IBSS to join [ 976.148558][T16789] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 976.173479][T16789] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 976.214937][T16789] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 976.239973][T16789] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 976.286007][ T980] usb 1-1: USB disconnect, device number 122 [ 976.394133][ T5892] tipc: Node number set to 1181047767 [ 976.586850][ T980] usb 5-1: USB disconnect, device number 106 [ 976.646652][ T980] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 976.979581][ T34] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 977.183248][T16812] netlink: 11 bytes leftover after parsing attributes in process `syz.0.2850'. [ 977.201814][T16810] input: syz1 as /devices/virtual/input/input152 [ 977.247788][T16802] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 978.179671][T16821] loop8: detected capacity change from 0 to 7 [ 978.204064][T16821] Dev loop8: unable to read RDB block 7 [ 978.209979][T16821] loop8: AHDI p1 p2 p3 [ 978.214301][T16821] loop8: partition table partially beyond EOD, truncated [ 978.251602][T16821] loop8: p1 start 1601398130 is beyond EOD, truncated [ 978.258856][T16821] loop8: p2 start 1702059890 is beyond EOD, truncated [ 978.314814][ T5959] Dev loop8: unable to read RDB block 7 [ 978.320615][ T5959] loop8: AHDI p1 p2 p3 [ 978.633850][ T980] usb 2-1: new full-speed USB device number 114 using dummy_hcd [ 978.644188][ T5959] loop8: partition table partially beyond EOD, truncated [ 978.651487][ T5959] loop8: p1 start 1601398130 is beyond EOD, truncated [ 978.670110][ T5959] loop8: p2 start 1702059890 is beyond EOD, truncated [ 978.776305][T16822] Dev loop8: unable to read RDB block 7 [ 978.890706][T16822] loop8: AHDI p1 p2 p3 [ 978.936246][ T980] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 978.954362][ T980] usb 2-1: config 0 has no interfaces? [ 978.966912][T16822] loop8: partition table partially beyond EOD, truncated [ 978.974193][ T980] usb 2-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 978.994184][T16822] loop8: p1 start 1601398130 is beyond EOD, truncated [ 979.001132][ T980] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 979.024423][T16822] loop8: p2 start 1702059890 is beyond EOD, truncated [ 979.049571][ T980] usb 2-1: config 0 descriptor?? [ 980.599805][ T980] usb 2-1: USB disconnect, device number 114 [ 981.215120][ T5892] usb 5-1: new full-speed USB device number 107 using dummy_hcd [ 981.441527][ T5892] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 981.699596][T16853] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 981.708521][ T5892] usb 5-1: config 0 has no interfaces? [ 981.714434][ T5892] usb 5-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 981.728020][ T5892] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 981.741732][ T5892] usb 5-1: config 0 descriptor?? [ 981.836599][T16854] fuse: Bad value for 'user_id' [ 981.841866][T16854] fuse: Bad value for 'user_id' [ 982.093833][ T5892] usb 4-1: new high-speed USB device number 101 using dummy_hcd [ 982.222331][T16863] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 982.234847][T16863] netlink: 'syz.2.2865': attribute type 5 has an invalid length. [ 982.414388][T16863] block device autoloading is deprecated and will be removed. [ 982.564895][ T5892] usb 4-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 982.574950][ T5892] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 982.582982][ T5892] usb 4-1: Product: syz [ 982.608139][ T5892] usb 4-1: Manufacturer: syz [ 982.612799][ T5892] usb 4-1: SerialNumber: syz [ 982.651572][ T5892] usb 4-1: config 0 descriptor?? [ 982.732177][ T5892] hub 4-1:0.0: bad descriptor, ignoring hub [ 982.752818][ T5892] hub 4-1:0.0: probe with driver hub failed with error -5 [ 982.954585][ T5892] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 982.978409][ T5892] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 983.056063][ T5892] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 983.097100][ T5892] usb 4-1: media controller created [ 983.140201][ T5892] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 983.711195][T16871] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2867'. [ 983.992885][ T5892] DVB: Unable to find symbol dib7000p_attach() [ 983.999921][T16871] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2867'. [ 984.017085][ T5892] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 984.466469][ T5892] rc_core: IR keymap rc-dib0700-rc5 not found [ 984.472708][ T5892] Registered IR keymap rc-empty [ 984.478195][ T5892] dvb-usb: could not initialize remote control. [ 984.500874][ T5892] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 984.880422][T16883] input: syz1 as /devices/virtual/input/input154 [ 985.211875][ T6342] usb 5-1: USB disconnect, device number 107 [ 985.393855][ T980] usb 2-1: new full-speed USB device number 115 using dummy_hcd [ 985.659795][ T980] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 985.709102][ T980] usb 2-1: config 0 has no interfaces? [ 985.718576][ T980] usb 2-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 985.786719][ T980] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 985.943682][ T980] usb 2-1: config 0 descriptor?? [ 986.236798][T16897] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2873'. [ 986.448744][ T5892] usb 4-1: USB disconnect, device number 101 [ 986.473861][ T6342] usb 5-1: new high-speed USB device number 108 using dummy_hcd [ 986.560465][ T5892] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 986.663975][ T6342] usb 5-1: Using ep0 maxpacket: 32 [ 986.675610][ T6342] usb 5-1: config 0 has an invalid interface number: 23 but max is 0 [ 986.685009][ T6342] usb 5-1: config 0 has no interface number 0 [ 986.691197][ T6342] usb 5-1: config 0 interface 23 has no altsetting 0 [ 986.701720][ T6342] usb 5-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice=f9.bf [ 986.736154][ T6342] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 986.763570][ T6342] usb 5-1: Product: syz [ 986.810623][ T6342] usb 5-1: Manufacturer: syz [ 986.817408][ T6342] usb 5-1: SerialNumber: syz [ 986.830080][ T6342] usb 5-1: config 0 descriptor?? [ 988.503813][ T8078] usb 4-1: new high-speed USB device number 102 using dummy_hcd [ 988.747993][ T6342] usb 5-1: USB disconnect, device number 108 [ 988.776788][ T8078] usb 4-1: Using ep0 maxpacket: 32 [ 988.783461][ T8078] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 988.807698][ T8078] usb 4-1: config 0 has no interface number 0 [ 988.959480][ T8078] usb 4-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 988.969156][ T8078] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 988.978869][ T8078] usb 4-1: Product: syz [ 988.983243][ T8078] usb 4-1: Manufacturer: syz [ 988.993650][ T8078] usb 4-1: SerialNumber: syz [ 989.052409][ T8078] usb 4-1: config 0 descriptor?? [ 989.098538][ T8078] usb 4-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 989.139808][ T8078] usb 4-1: selecting invalid altsetting 1 [ 989.178419][ T8078] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 989.225821][ T8078] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 989.408230][T16937] fuse: Bad value for 'user_id' [ 989.413249][T16937] fuse: Bad value for 'user_id' [ 989.424366][ T8078] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 989.632051][ T980] usb 2-1: USB disconnect, device number 115 [ 989.771518][ T8078] usb 4-1: media controller created [ 989.816918][T16948] input: syz1 as /devices/virtual/input/input155 [ 989.899260][ T6342] usb 1-1: new high-speed USB device number 123 using dummy_hcd [ 989.923348][ T8078] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 990.129182][ T6342] usb 1-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 990.138494][ T6342] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 990.147224][ T6342] usb 1-1: Product: syz [ 990.151518][ T6342] usb 1-1: Manufacturer: syz [ 990.157448][ T6342] usb 1-1: SerialNumber: syz [ 990.228763][ T6342] usb 1-1: config 0 descriptor?? [ 990.307044][ T6342] hub 1-1:0.0: bad descriptor, ignoring hub [ 990.338933][ T6342] hub 1-1:0.0: probe with driver hub failed with error -5 [ 990.514673][T16927] usb 4-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 990.553603][ T8078] usb 4-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 990.572630][ T8078] zl10353_read_register: readreg error (reg=127, ret==-71) [ 990.662410][ T6342] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 990.719975][ T8078] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 990.824906][ T6342] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 990.839128][ T6342] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 990.848497][ T6342] usb 1-1: media controller created [ 990.873410][ T6342] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 991.044205][ T8078] usb 4-1: USB disconnect, device number 102 [ 991.308043][ T6342] DVB: Unable to find symbol dib7000p_attach() [ 991.371138][ T6342] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 991.612159][ T6342] rc_core: IR keymap rc-dib0700-rc5 not found [ 991.640724][ T6342] Registered IR keymap rc-empty [ 991.680746][ T6342] dvb-usb: could not initialize remote control. [ 991.694449][ T6342] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 991.794832][ T980] usb 4-1: new high-speed USB device number 103 using dummy_hcd [ 991.940762][T16964] netlink: 'syz.1.2891': attribute type 12 has an invalid length. [ 991.948664][T16964] netlink: 'syz.1.2891': attribute type 29 has an invalid length. [ 991.956627][T16964] netlink: 148 bytes leftover after parsing attributes in process `syz.1.2891'. [ 991.967159][T16964] netlink: 'syz.1.2891': attribute type 2 has an invalid length. [ 991.975805][T16964] netlink: 23 bytes leftover after parsing attributes in process `syz.1.2891'. [ 992.000789][T16972] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2892'. [ 992.017583][ T980] usb 4-1: config index 0 descriptor too short (expected 23569, got 27) [ 992.026861][ T980] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 992.029615][T16972] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2892'. [ 992.085659][ T980] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 992.098098][ T980] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 992.119322][ T980] usb 4-1: Manufacturer: syz [ 992.134153][ T980] usb 4-1: config 0 descriptor?? [ 992.265987][ T980] rc_core: IR keymap rc-hauppauge not found [ 992.283940][ T980] Registered IR keymap rc-empty [ 992.292330][ T980] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 992.307461][ T980] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input157 [ 992.913940][ T6342] usb 2-1: new full-speed USB device number 116 using dummy_hcd [ 993.078578][ T5838] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 993.164250][ T6342] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 993.201543][ T5838] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 993.210617][ T5838] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 993.219595][ T6342] usb 2-1: config 0 has no interfaces? [ 993.241061][ T5838] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 993.249210][ T5838] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 993.273830][ T6342] usb 2-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 993.296828][ T6342] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 993.471457][ T980] usb 1-1: USB disconnect, device number 123 [ 993.538539][ T6342] usb 2-1: config 0 descriptor?? [ 993.680160][ T980] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 994.404313][ T980] usb 4-1: USB disconnect, device number 103 [ 995.683820][ T5833] Bluetooth: hci5: command tx timeout [ 995.915192][T17017] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 996.583071][T17024] input: syz1 as /devices/virtual/input/input158 [ 996.863288][T16997] chnl_net:caif_netlink_parms(): no params data found [ 996.987808][ T12] ================================================================== [ 996.995938][ T12] BUG: KASAN: use-after-free in nf_hook_entry_head+0x1f1/0x2c0 [ 997.003543][ T12] Read of size 8 at addr ffff888032b48108 by task kworker/u8:0/12 [ 997.011374][ T12] [ 997.013729][ T12] CPU: 0 UID: 0 PID: 12 Comm: kworker/u8:0 Tainted: G L syzkaller #0 PREEMPT(full) [ 997.013765][ T12] Tainted: [L]=SOFTLOCKUP SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 997.013772][ T12] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 997.013782][ T12] Workqueue: netns cleanup_net [ 997.013803][ T12] Call Trace: [ 997.013811][ T12] [ 997.013819][ T12] dump_stack_lvl+0xe8/0x150 [ 997.013840][ T12] print_report+0xca/0x240 [ 997.013856][ T12] ? nf_hook_entry_head+0x1f1/0x2c0 [ 997.013877][ T12] kasan_report+0x118/0x150 [ 997.013896][ T12] ? nf_hook_entry_head+0x1f1/0x2c0 [ 997.013920][ T12] nf_hook_entry_head+0x1f1/0x2c0 [ 997.013942][ T12] __nf_unregister_net_hook+0x74/0x6f0 [ 997.013966][ T12] ? __pfx_nf_flow_table_offload_setup+0x10/0x10 [ 997.013989][ T12] __nft_release_hook+0x180/0x350 [ 997.014007][ T12] nf_tables_pre_exit_net+0xa7/0x110 [ 997.014022][ T12] ops_undo_list+0x187/0x990 [ 997.014041][ T12] ? __pfx_ops_undo_list+0x10/0x10 [ 997.014058][ T12] ? do_raw_spin_unlock+0x122/0x240 [ 997.014081][ T12] cleanup_net+0x4d8/0x7a0 [ 997.014097][ T12] ? __pfx_cleanup_net+0x10/0x10 [ 997.014115][ T12] ? process_scheduled_works+0x9ef/0x1770 [ 997.014130][ T12] ? process_scheduled_works+0x9ef/0x1770 [ 997.014145][ T12] process_scheduled_works+0xad1/0x1770 [ 997.014169][ T12] ? __pfx_process_scheduled_works+0x10/0x10 [ 997.014183][ T12] ? do_raw_spin_lock+0x121/0x290 [ 997.014209][ T12] worker_thread+0x8a0/0xda0 [ 997.014233][ T12] kthread+0x711/0x8a0 [ 997.014253][ T12] ? __pfx_worker_thread+0x10/0x10 [ 997.014268][ T12] ? __pfx_kthread+0x10/0x10 [ 997.014287][ T12] ? _raw_spin_unlock_irq+0x23/0x50 [ 997.014301][ T12] ? __pfx_kthread+0x10/0x10 [ 997.014320][ T12] ret_from_fork+0x510/0xa50 [ 997.014335][ T12] ? __pfx_ret_from_fork+0x10/0x10 [ 997.014348][ T12] ? __switch_to+0xc9e/0x1480 [ 997.014369][ T12] ? __pfx_kthread+0x10/0x10 [ 997.014389][ T12] ret_from_fork_asm+0x1a/0x30 [ 997.014416][ T12] [ 997.014422][ T12] [ 997.213216][ T12] The buggy address belongs to the physical page: [ 997.219653][ T12] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888032b48000 pfn:0x32b48 [ 997.229741][ T12] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 997.236875][ T12] raw: 00fff00000000000 ffffea00014b9608 ffffea0001a51408 0000000000000000 [ 997.245606][ T12] raw: ffff888032b48000 0000000000100000 00000000ffffffff 0000000000000000 [ 997.254236][ T12] page dumped because: kasan: bad access detected [ 997.260676][ T12] page_owner tracks the page as freed [ 997.266067][ T12] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 15487, tgid 15485 (syz.0.2503), ts 879082850718, free_ts 956937513840 [ 997.287809][ T12] post_alloc_hook+0x234/0x290 [ 997.292612][ T12] get_page_from_freelist+0x24e0/0x2580 [ 997.298202][ T12] __alloc_frozen_pages_noprof+0x181/0x370 [ 997.304037][ T12] alloc_pages_mpol+0x232/0x4a0 [ 997.308920][ T12] allocate_slab+0x86/0x3b0 [ 997.313444][ T12] ___slab_alloc+0xe53/0x1820 [ 997.318168][ T12] __slab_alloc+0x65/0x100 [ 997.322614][ T12] __kmalloc_node_track_caller_noprof+0x5d4/0x820 [ 997.329063][ T12] kmalloc_reserve+0x136/0x290 [ 997.333859][ T12] __alloc_skb+0x204/0x3a0 [ 997.338335][ T12] alloc_skb_with_frags+0xca/0x890 [ 997.343471][ T12] sock_alloc_send_pskb+0x84d/0x980 [ 997.348705][ T12] unix_dgram_sendmsg+0x454/0x1840 [ 997.353853][ T12] __sock_sendmsg+0x21c/0x270 [ 997.358562][ T12] ____sys_sendmsg+0x52d/0x820 [ 997.363371][ T12] ___sys_sendmsg+0x21f/0x2a0 [ 997.368075][ T12] page last free pid 16580 tgid 16580 stack trace: [ 997.374592][ T12] __free_frozen_pages+0xbc8/0xd30 [ 997.379720][ T12] __slab_free+0x2ce/0x320 [ 997.384159][ T12] qlist_free_all+0x97/0x100 [ 997.388780][ T12] kasan_quarantine_reduce+0x148/0x160 [ 997.394275][ T12] __kasan_slab_alloc+0x22/0x80 [ 997.399252][ T12] kmem_cache_alloc_noprof+0x37d/0x710 [ 997.404751][ T12] vm_area_dup+0x2b/0x680 [ 997.409103][ T12] __split_vma+0x1a9/0xa00 [ 997.413541][ T12] vma_modify+0x85f/0x1a70 [ 997.417974][ T12] vma_modify_flags+0x208/0x2e0 [ 997.422842][ T12] mprotect_fixup+0x43c/0xa30 [ 997.427543][ T12] do_mprotect_pkey+0x8c5/0xcd0 [ 997.432427][ T12] __ia32_sys_mprotect+0x7f/0x90 [ 997.437402][ T12] __do_fast_syscall_32+0x1dc/0x570 [ 997.442640][ T12] do_fast_syscall_32+0x34/0x80 [ 997.447530][ T12] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 997.453918][ T12] [ 997.456263][ T12] Memory state around the buggy address: [ 997.461905][ T12] ffff888032b48000: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 997.469994][ T12] ffff888032b48080: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 997.478083][ T12] >ffff888032b48100: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 997.486183][ T12] ^ [ 997.490549][ T12] ffff888032b48180: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 997.498644][ T12] ffff888032b48200: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 997.506745][ T12] ================================================================== [ 997.674137][ T6342] usb 2-1: USB disconnect, device number 116 [ 997.689412][ T12] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 997.696667][ T12] CPU: 0 UID: 0 PID: 12 Comm: kworker/u8:0 Tainted: G L syzkaller #0 PREEMPT(full) [ 997.707546][ T12] Tainted: [L]=SOFTLOCKUP [ 997.711889][ T12] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 997.721972][ T12] Workqueue: netns cleanup_net [ 997.726768][ T12] Call Trace: [ 997.730071][ T12] [ 997.733028][ T12] vpanic+0x1e0/0x670 [ 997.737046][ T12] panic+0xb9/0xc0 [ 997.740803][ T12] ? __pfx_panic+0x10/0x10 [ 997.745261][ T12] ? preempt_schedule_thunk+0x16/0x30 [ 997.750661][ T12] ? preempt_schedule_thunk+0x16/0x30 [ 997.756050][ T12] ? nf_hook_entry_head+0x1f1/0x2c0 [ 997.761282][ T12] check_panic_on_warn+0x89/0xb0 [ 997.766284][ T12] ? nf_hook_entry_head+0x1f1/0x2c0 [ 997.771571][ T12] end_report+0x6f/0x140 [ 997.775866][ T12] kasan_report+0x129/0x150 [ 997.780387][ T12] ? nf_hook_entry_head+0x1f1/0x2c0 [ 997.785620][ T12] nf_hook_entry_head+0x1f1/0x2c0 [ 997.790668][ T12] __nf_unregister_net_hook+0x74/0x6f0 [ 997.796150][ T12] ? __pfx_nf_flow_table_offload_setup+0x10/0x10 [ 997.802513][ T12] __nft_release_hook+0x180/0x350 [ 997.807555][ T12] nf_tables_pre_exit_net+0xa7/0x110 [ 997.812863][ T12] ops_undo_list+0x187/0x990 [ 997.817479][ T12] ? __pfx_ops_undo_list+0x10/0x10 [ 997.822627][ T12] ? do_raw_spin_unlock+0x122/0x240 [ 997.827859][ T12] cleanup_net+0x4d8/0x7a0 [ 997.832301][ T12] ? __pfx_cleanup_net+0x10/0x10 [ 997.837273][ T12] ? process_scheduled_works+0x9ef/0x1770 [ 997.843017][ T12] ? process_scheduled_works+0x9ef/0x1770 [ 997.848763][ T12] process_scheduled_works+0xad1/0x1770 [ 997.854352][ T12] ? __pfx_process_scheduled_works+0x10/0x10 [ 997.860358][ T12] ? do_raw_spin_lock+0x121/0x290 [ 997.865416][ T12] worker_thread+0x8a0/0xda0 [ 997.870041][ T12] kthread+0x711/0x8a0 [ 997.874136][ T12] ? __pfx_worker_thread+0x10/0x10 [ 997.879273][ T12] ? __pfx_kthread+0x10/0x10 [ 997.883985][ T12] ? _raw_spin_unlock_irq+0x23/0x50 [ 997.889195][ T12] ? __pfx_kthread+0x10/0x10 [ 997.893810][ T12] ret_from_fork+0x510/0xa50 [ 997.898463][ T12] ? __pfx_ret_from_fork+0x10/0x10 [ 997.903599][ T12] ? __switch_to+0xc9e/0x1480 [ 997.908307][ T12] ? __pfx_kthread+0x10/0x10 [ 997.912945][ T12] ret_from_fork_asm+0x1a/0x30 [ 997.917778][ T12] [ 997.920986][ T12] Kernel Offset: disabled [ 997.925320][ T12] Rebooting in 86400 seconds..