last executing test programs: 6.506973927s ago: executing program 3 (id=642): socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) r0 = syz_ublk_setup_io_uring(0x64d, &(0x7f0000000240)={0x0, 0xd58c, 0x1000, 0x2, 0x14d}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000980)=@IORING_OP_TIMEOUT={0xb, 0x12, 0x0, 0x0, 0xffffffffffffffff, &(0x7f00000000c0), 0x1, 0x40, 0x1}) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f00000003c0)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x10}}}, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) 5.937108877s ago: executing program 3 (id=645): r0 = socket$inet(0x2, 0x3, 0x6) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000406d040ac200000000000109022400010000600009040000090300000009210200000122290009058103"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$sock_inet_SIOCSARP(r0, 0x8953, &(0x7f0000000000)={{0x2, 0x4e23, @broadcast}, {0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x5a, {0x2, 0x104, @broadcast}, 'veth0_virt_wifi\x00'}) 4.928290125s ago: executing program 0 (id=650): r0 = socket$igmp(0x2, 0x3, 0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) read(r1, &(0x7f0000000300)=""/96, 0x60) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) add_key(0x0, 0x0, &(0x7f0000000080)="100c0601", 0x4, 0xfffffffffffffffe) setfsgid(0xee00) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0x3c1, 0x3, 0x450, 0x150, 0x168, 0x9, 0x0, 0xb, 0x380, 0x250, 0x250, 0x380, 0x250, 0x3, 0x0, {[{{@ipv6={@remote, @rand_addr=' \x01\x00', [], [], 'veth0_to_bridge\x00', 'sit0\x00', {}, {}, 0x6c}, 0x6000000, 0x108, 0x150, 0x0, {0x0, 0x28e}, [@common=@inet=@ipcomp={{0x30}}, @common=@inet=@ipcomp={{0x30}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'dvmrp0\x00'}}}, {{@uncond, 0x0, 0x200, 0x230, 0x0, {}, [@common=@inet=@policy={{0x158}, {[{@ipv4=@local, [0x0, 0xff000000, 0xffffffff, 0xff000000], @ipv6=@private1, [0x0, 0x1fffffeff, 0xff000000, 0xffffff00], 0x4d6, 0x0, 0x0, 0x0, 0x10, 0x2}, {@ipv4=@remote, [0xff000000, 0xffffff00, 0xffffff00, 0xff], @ipv6=@local, [0x7f, 0xff000000, 0xffffff00, 0xff], 0x4d4, 0x34ff, 0x6c, 0x0, 0x12, 0x4}, {@ipv6=@mcast1, [0xffffffff, 0xffffffff, 0xffffffff, 0xff], @ipv6=@mcast2, [0xffffff00, 0x0, 0xffff00, 0xff000000], 0x4d2, 0x0, 0x0, 0x1, 0x0, 0xd}, {@ipv6=@ipv4={'\x00', '\xff\xff', @multicast2}, [0xffffffff, 0xffffff00], @ipv4=@rand_addr=0x64010100, [0xffffffff, 0xffffff00, 0xffffffff], 0x4d4, 0x3502, 0x32, 0x0, 0x0, 0x6}], 0xa, 0x4}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{}, {0x2}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4b0) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000a80)={{0x2, 0x4e23, @empty}, {0x0, @multicast}, 0x4a, {0x2, 0x1, @loopback}, 'lo\x00'}) r6 = socket$netlink(0x10, 0x3, 0x0) writev(r6, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff08000400", 0x32}], 0x1) 4.605018679s ago: executing program 2 (id=653): syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)={0x58, 0x42, 0x1, 0x0, 0x0, {0x3, 0x1}, [@generic="000000002600010000112233445566778899aabb88a845000014aaaa000001170000010203040506070800000c00020006002000080000000c0003000800170004"]}, 0x58}}, 0x4000000) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000200000000000000000850000002a0000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180200000100f9ff0000000000000000850000007d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4) sendmsg$inet(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a88000000060a010400000000000000000a0000010900010073797a31000000005ca01380340001800c00010070617901400000000a080003400000004f08000440000000370800024000000002240001800b0001007470726f7879000014000280080003400000000d080001400000000a0900020073797a3200000000140000001100010000000000000000000200000a8f7476e3b5783ce7d0af"], 0xb0}, 0x1, 0x0, 0x0, 0x40}, 0x24000840) r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0) r6 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101701) ioctl$USBDEVFS_CONTROL(r6, 0xc0105500, &(0x7f0000000000)={0x0, 0x5, 0x41, 0x3, 0x30, 0xeb11, 0x0}) write(r5, &(0x7f0000000380)='100000', 0x6) r7 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0) write(r7, &(0x7f0000000200)='1', 0x1) r8 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r8, &(0x7f0000000280)='0', 0x1) read$FUSE(r7, &(0x7f0000000680)={0x2020}, 0x2020) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) socket$inet6_mptcp(0xa, 0x1, 0x106) 4.576079554s ago: executing program 4 (id=654): r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route(r0, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@ipv6_newaddr={0x34, 0x14, 0x101, 0x70bd26, 0x25dffbf8, {0xa, 0x38, 0x78, 0xff, r1}, [@IFA_LOCAL={0x14, 0x2, @loopback}, @IFA_FLAGS={0x8, 0x8, 0x200}]}, 0x34}, 0x1, 0x0, 0x0, 0x4004051}, 0x0) 4.398502296s ago: executing program 2 (id=655): syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000980)=ANY=[@ANYBLOB="120100009080e140fc044a500243010203010902120001000000000904"], 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) (async) r2 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@any_dev={0x3, 0x6d1, 0x0, 0x0, 0x1000, 0x5}}}, &(0x7f0000000300)=0x0) syz_ublk_setup_queues(r1, r6, &(0x7f00000004c0)={0x0, 0x2438, 0x1, 0x1, 0x25, 0x0, r1}, &(0x7f00000005c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x58bd, 0x1, 0x3, 0x9d, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc6ab, 0x200, 0x2, 0x2ee, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xd2f5, 0x800, 0x2, 0xdc}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc78d, 0x10000, 0x0, 0x361, 0x0, r2}}], 0x4, &(0x7f0000001d00)={0x2e, 0x40, 0x0, r1, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x7}, 0x0, 0x0, '\x00', {0x4, 0x279, 0x0, 0x0}}, &(0x7f0000001d80)) (async) syz_usb_control_io(r0, 0x0, &(0x7f0000000b80)={0x84, &(0x7f0000000380)=ANY=[@ANYBLOB="3e000100000002"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) fsmount(r1, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r7, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000600)={0x14, 0x0, 0x0}, 0x0) syz_usb_control_io$uac3(r0, &(0x7f0000000880)={0xc, &(0x7f0000000580)={0x40, 0xc, 0x3, {0x3, 0xc, "f6"}}, &(0x7f0000000840)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x438}}}, &(0x7f0000000b40)={0x24, &(0x7f00000008c0)={0x40, 0x12, 0x48, "a1926aaf2db0f5f7e12544338bcb1b376e84a37cc02e9b2c1b7671fd40de485b3852b89fda31547628f641fb37fc8276be3d85c59636a0511e818aff6bd6f1c5f2849bce146c1178"}, &(0x7f0000000940)={0x0, 0xa, 0x1, 0x7}, &(0x7f00000009c0)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000a00)={0x20, 0x81, 0x3, "61ef17"}, &(0x7f0000000a40)={0x20, 0x82, 0x2, 'xx'}, &(0x7f0000000a80)={0x20, 0x83, 0x3, "99afeb"}, &(0x7f0000000ac0)={0x20, 0x84, 0x2, "4beb"}, &(0x7f0000000b00)={0x20, 0x85, 0x3, "a5cf10"}}) r8 = socket$inet_udp(0x2, 0x2, 0x0) (async) r9 = epoll_create1(0x0) epoll_wait(r9, 0x0, 0x0, 0x297) (async) r10 = landlock_create_ruleset(&(0x7f00000000c0)={0x4, 0x0, 0x2}, 0x18, 0x0) landlock_restrict_self(r10, 0x0) r11 = socket$unix(0x1, 0x1, 0x0) r12 = socket$unix(0x1, 0x1, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) (async) r13 = landlock_create_ruleset(&(0x7f0000000000)={0x19a1, 0x2, 0x1}, 0x21, 0x0) landlock_restrict_self(r13, 0x0) (async) bind$unix(r12, &(0x7f0000003000)=@file={0x1}, 0x6e) (async) landlock_restrict_self(r10, 0x2) listen(r12, 0x0) (async) connect$unix(r11, &(0x7f0000000640)=@file={0x1}, 0x6e) ioctl$EVIOCSFF(0xffffffffffffffff, 0x402c4580, &(0x7f0000000540)={0x53, 0x7033, 0x9, {0xffff, 0x54}, {0x21b4, 0x3}, @ramp={0xdd0e, 0x3, {0x3e92, 0x77b, 0x3, 0xfffb}}}) (async) setsockopt$ARPT_SO_SET_REPLACE(r8, 0x0, 0x60, &(0x7f00000000c0)={'filter\x00', 0x7, 0x2, 0x3e0, 0x1f8, 0xe8, 0x0, 0x2f8, 0x2f8, 0x2f8, 0x4, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE2={0x28}}, {{@arp={@empty, @empty, 0x0, 0x0, 0x0, 0x0, {@mac=@broadcast}, {@mac=@multicast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'vxcan1\x00', 'nr0\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @broadcast}}}, {{@arp={@remote, @multicast2, 0x0, 0x0, 0x0, 0x0, {@mac}, {@mac=@broadcast, {[0x0, 0xff]}}, 0x0, 0x0, 0x0, 0xfffd, 0x0, 0x0, 'pim6reg\x00', 'vcan0\x00', {0xff}, {0xff}, 0x0, 0x2e8}, 0xc0, 0x100}, @unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "dcbc4f0fcafe5fd600342efa7968d220b64d039e8a81d171eeb2e9630554"}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x430) 4.329977567s ago: executing program 4 (id=656): r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x41, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) (async) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)={0x1}) ioctl$KVM_CAP_X86_DISABLE_EXITS(r1, 0x4068aea3, &(0x7f0000000200)={0x8f, 0x0, 0xe}) (async) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x6, 0x1, 0x2, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x1, 0x4, 0x9, 0x20000004}, {0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x6, 0x5, 0x0, 0x5, 0x4, 0x3}, {0x10001, 0x4, 0x9, 0x0, 0x0, 0x1d, 0x0, 0x10, 0x2, 0x0, 0x0, 0x0, 0x20000000000000}]}) (async) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0xf, 0x3e8, 0x4, 0x1000000000000002, 0x101fffffffffffe, 0x7fffffffffffffff, 0x2004c8, 0xffff, 0x3, 0xffffffff, 0xffffffffffffffff, 0x7fffffffffffffff, 0xd0b, 0x4, 0x2000000000000003, 0x7f4], 0x80a0000, 0x4284}) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) r3 = openat$tun(0xffffff9c, &(0x7f0000000100), 0x24002, 0x0) write$tun(r3, &(0x7f0000000140)={@void, @val={0x3, 0x4, 0xd6, 0x9, 0x4, 0x2efb}, @arp=@generic={0x100, 0x8906, 0x6, 0x9, 0x4, @remote, "3324c231cf79238646", @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, "f2bf"}}, 0x29) 3.967862227s ago: executing program 3 (id=657): r0 = openat$uinput(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$UI_GET_SYSNAME(r0, 0x8040552c, &(0x7f0000000040)) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) io_setup(0x8, &(0x7f00000000c0)) socket$xdp(0x2c, 0x3, 0x0) r1 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$KDGKBLED(r1, 0x4b64, &(0x7f0000000100)) r2 = syz_open_dev$dvb_frontend(&(0x7f0000000140), 0x7f, 0x2040) ioctl$FE_READ_SNR(r2, 0x80026f48, &(0x7f0000000180)) syz_ublk_setup_io_uring(0xf4f, &(0x7f00000001c0)={0x0, 0x957d, 0x1000, 0x3, 0x2f9}, &(0x7f0000000240), &(0x7f0000000280)=0x0, &(0x7f00000002c0)) syz_ublk_setup_io_uring(0x1425, &(0x7f0000000300)={0x0, 0x3ac8, 0x2, 0x0, 0x371}, &(0x7f0000000380), &(0x7f00000003c0), &(0x7f0000000400)=0x0) r5 = openat$ublk_ctrl(0xffffff9c, &(0x7f0000000440), 0x2, 0x0) r6 = getpgid(0xffffffffffffffff) syz_ublk_add_dev(0xffffffffffffffff, 0x0, r3, r4, &(0x7f00000004c0)={0x2e, 0x0, 0x0, r5, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x6, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000480)=@new_dev={0x2, 0x3cb, 0x0, 0x0, 0x1000, 0xffffffff, r6, 0x0, 0x80}}}, &(0x7f0000000540)) sched_setattr(r6, &(0x7f0000000580)={0x38, 0x0, 0x2, 0x40, 0x7, 0x6, 0x100000000, 0x1, 0x4, 0xa}, 0x0) openat$vicodec0(0xffffff9c, &(0x7f00000005c0), 0x2, 0x0) setns(r2, 0x4000000) r7 = syz_open_dev$dri(&(0x7f0000000600), 0x0, 0x109041) ioctl$DRM_IOCTL_PANTHOR_BO_CREATE(r5, 0xc0186445, &(0x7f0000000640)={0xff, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_PANTHOR_BO_QUERY_INFO(r7, 0xc0106450, &(0x7f0000000680)={r8}) r9 = accept4$inet(0xffffffffffffffff, &(0x7f00000006c0)={0x2, 0x0, @loopback}, &(0x7f0000000700)=0x10, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r9, 0x0, 0x485, 0x0, 0x0) openat$vicodec0(0xffffff9c, &(0x7f0000000740), 0x2, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f00000007c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_STATION(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x1c, r10, 0x200, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x804) socket$nl_netfilter(0x10, 0x3, 0xc) getsockname$packet(0xffffffffffffffff, &(0x7f00000008c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000900)=0x14) bind$packet(0xffffffffffffffff, &(0x7f0000000940)={0x11, 0xf6, r11, 0x1, 0x5b, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x14) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000009c0)="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", 0x2000, &(0x7f0000005e40)={&(0x7f00000029c0)={0x50, 0x0, 0x3, {0x7, 0x2d, 0x2, 0x40, 0x7, 0x2, 0x2, 0xa, 0x0, 0x0, 0x4, 0x7ff}}, &(0x7f0000002a40)={0x18, 0x0, 0x9, {0x3234}}, &(0x7f0000002a80)={0x18, 0x0, 0x3a, {0x1}}, &(0x7f0000002ac0)={0x18, 0xffffffffffffffea, 0x3d0f, {0xb}}, &(0x7f0000002b00)={0x18, 0x0, 0x1, {0x9}}, &(0x7f0000002b40)={0x28, 0xffffffffffffffda, 0x3, {{0x0, 0x7f, 0x0, r6}}}, &(0x7f0000002b80)={0x60, 0x0, 0xfffffffffffffffb, {{0x1, 0x6, 0x1, 0x2, 0x4, 0x2, 0x9, 0x80000001}}}, &(0x7f0000002c00)={0x18, 0x0, 0x8, {0x7}}, &(0x7f0000002c40)={0x22, 0x0, 0x0, {'/dev/ublk-control\x00'}}, &(0x7f0000002c80)={0x20, 0xfffffffffffffff5, 0xfffffffffffffff9, {0x0, 0x1}}, &(0x7f0000002d80)={0x78, 0x0, 0x8000, {0x64b, 0xeba7, 0x0, {0x6, 0x401, 0x4, 0x8, 0x6, 0xb, 0xe74, 0x0, 0x4, 0xc000, 0x5, 0x0, 0x0, 0x1, 0x6}}}, &(0x7f0000002ec0)={0x90, 0x0, 0x2, {0x1, 0x1, 0x0, 0x7, 0x200, 0x101, {0x5, 0x4, 0x4, 0x100, 0x5, 0x9a, 0x10001, 0x7, 0xc531, 0xc000, 0x3, 0x0, 0x0, 0x1, 0xfffffffb}}}, &(0x7f0000002f80)={0x38, 0xffffffffffffffda, 0x10001, [{0x5, 0x80000000000000, 0xd, 0x965, '/dev/video36\x00'}]}, &(0x7f0000003740)={0x400, 0x0, 0x126c5074, [{{0x3, 0x0, 0x5, 0x5, 0xffffb75e, 0x9cf, {0x0, 0x2d, 0x6, 0x2, 0x5, 0x4, 0x0, 0x9, 0x3, 0x8000, 0xc, 0x0, 0x0, 0x4, 0x92af}}, {0x4, 0xffffffffffff1b16, 0x1c, 0x0, '/dev/dvb/adapter#/frontend#\x00'}}, {{0x1, 0x0, 0x7, 0x7fff, 0x1, 0xb64, {0x0, 0xf, 0x4, 0xb, 0xffffffffbbed5558, 0x6, 0x0, 0x9, 0x9, 0x8000, 0x5, 0x0, 0x0, 0x1, 0x83}}, {0x2, 0x9, 0x6, 0xefa4, 'wlan0\x00'}}, {{0x5, 0x2, 0x10, 0x40, 0x79, 0x3, {0x1, 0xffffffffffffffa6, 0x1, 0xc8, 0x8, 0x3, 0x10001, 0x3, 0x4876cd6e, 0xc000, 0x10000, 0x0, 0x0, 0x0, 0x8}}, {0x1, 0x0, 0x1, 0x1ff, '\x9b'}}, {{0x6, 0x1, 0x1, 0x8001, 0x2, 0xffffff29, {0x3, 0x7fffffff, 0x2, 0x9, 0x1, 0xfbe, 0x5, 0x6e32, 0x79, 0x1000, 0x6, 0x0, 0x0, 0x5, 0x40}}, {0x2, 0x401, 0x9, 0x8, '}#)/[$--@'}}, {{0x6, 0x2, 0x6, 0x3, 0x8c7a, 0x8, {0x0, 0x9, 0x8, 0x5, 0x7, 0x8, 0x0, 0xee08, 0x0, 0x1000, 0x4, 0x0, 0x0, 0xfc0b, 0x9}}, {0x2, 0x16a, 0x14, 0x6, '{@Y#:\\+*(^\x87::-$+/--('}}, {{0x5, 0x2, 0x6, 0xfffffffffffffffa, 0x8, 0x0, {0x1, 0xffffffffffffff55, 0x4, 0x9, 0x120000, 0x3, 0xfffffffc, 0x3, 0x8, 0xc000, 0x2, 0xee01, 0x0, 0x5, 0x8001}}, {0x0, 0x2, 0x2, 0x56, ']]'}}]}, &(0x7f0000005b80)={0xa0, 0x0, 0x10000, {{0x2, 0x3, 0x8, 0x9, 0x3, 0x590, {0x5, 0x81, 0x34cc, 0x8000, 0x200, 0x7, 0x9, 0x0, 0x7, 0x8000, 0x7fffffff, 0xee00, 0x0, 0x1, 0x7}}, {0x0, 0x2}}}, &(0x7f0000005c40)={0x20, 0x0, 0x6, {0x3, 0x4, 0x6, 0x3}}, &(0x7f0000005d00)={0x130, 0x0, 0x4, {0xff, 0x10000, 0x0, '\x00', {0x29aa242c58e2766f, 0x8, 0x383, 0x0, 0xffffffffffffffff, 0x0, 0x8000, '\x00', 0x8a2, 0x2, 0xecc, 0x5, {0xff, 0x2}, {0x8, 0x9}, {0x10, 0x42}, {0x0, 0x800}, 0x8, 0x9, 0xffffff01, 0x55d}}}}) 3.545984088s ago: executing program 3 (id=658): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000040)) sendmsg$nl_route(r1, 0x0, 0x4054) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) r4 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) close(0xffffffffffffffff) pipe(&(0x7f0000000000)={0xffffffffffffffff}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={0xffffffffffffffff, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000540)="d2b7010000001f91cdfa02e0864c", 0x0, 0xd5b1, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x8080) socket$kcm(0x11, 0x3, 0x0) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r6, &(0x7f0000000780)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000740)={&(0x7f0000000580)=ANY=[@ANYBLOB='\x00\x00\x00\f', @ANYRES16=0x0, @ANYBLOB="000429bd7000fddbdf2542000000080001007063690011000200303030303a30303a31302e30000000000d0087006c325f64726f7073000000000500830000000000080001007063690011000200303030303a30303a31302e30000000000d0087006c325f64726f70730000000005008300010000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000d0087006c325f64726f7073000000000500830001000000080001007063690011000200303030303a30303a31302e30000000000d0087006c325f64726f7073000000000500830000000000080001007063690011"], 0x184}, 0x1, 0x0, 0x0, 0x4000}, 0x8000000) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001440)={0x1c, r3, 0x1, 0x47, 0x500, {{0x8}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 3.323362963s ago: executing program 4 (id=660): syz_open_dev$media(&(0x7f0000000380), 0x10, 0x101000) (async) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) syz_open_dev$cec(&(0x7f0000000780), 0x0, 0x2) (async, rerun: 32) syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) (async) syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x9840) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) fcntl$lock(r0, 0x26, &(0x7f0000002880)={0x0, 0x1, 0x6, 0x80000000}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a300000000040000000030a09020000000000000000020000000900010073797a300000000009"], 0x88}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="740000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b030040000000004c0012800b00010067656e65766500003c0002800800050001000000140007000000000000000005000000000000000108000f"], 0x74}}, 0x0) unshare(0x20400) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000003c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_WOWLAN(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x28, r5, 0x1, 0x70bd25, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x101, 0x23}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async, rerun: 64) sendmsg$NL80211_CMD_LEAVE_IBSS(r3, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x14, r5, 0x0, 0x70bd29, 0x25dfdbff, {{}, {@void, @void}}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x20004001) (async, rerun: 64) r7 = io_uring_setup(0x4a8d, &(0x7f0000000040)={0x0, 0x80c8a1, 0x20, 0x5, 0x117}) (async) r8 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) landlock_restrict_self(0xffffffffffffffff, 0xc) syz_ublk_add_dev(r8, r9, r10, r11, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) ioctl$VIDIOC_S_OUTPUT(r1, 0xc004562f, &(0x7f00000000c0)=0x2) (async) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) (async) r14 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_ublk_setup_queues(r1, r13, &(0x7f0000000400)={0x0, 0x2761, 0x200, 0x1, 0x30d, 0x0, r7}, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5560, 0x2, 0x0, 0xd9, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7315, 0x1000, 0x1, 0x2aa, 0x0, r7}, 0xffffffffffffffff}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2235, 0x400, 0x3, 0x155, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3d82, 0x800, 0x2, 0x20a, 0x0, r8}}], 0x4, &(0x7f0000001d00)={0x2e, 0x2, 0x0, r1, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {0x3}, 0x0, r12, '\x00', {0x0, 0xb95, 0x0, &(0x7f0000000d00)=@buf_512="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"}}, &(0x7f0000001d80)) syz_ublk_setup_queues(r14, r13, &(0x7f0000000180)={0x0, 0x1, 0x1000, 0x3, 0x255}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x2100, 0x1a6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4291, 0x1, 0x1, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf912, 0x0, 0x0, 0x1f0, 0x0, r15}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x587e, 0x0, 0x2, 0x3ba}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfffb, 0x0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xf, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) 3.242626598s ago: executing program 0 (id=661): r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000100)={0x3, 0x2, 0x1}) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc044565d, &(0x7f0000000080)=@mmap={0x0, 0x2, 0x4, 0x0, 0x7, {}, {0x0, 0x0, 0x0, 0x0, 0xfc, 0x20, "6b6ff202"}, 0x0, 0x1, {}, 0x400002}) r1 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r1, &(0x7f0000000540)=[{{&(0x7f0000000080)={0x2, 0x4e20, @local}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000001880)=[{0x0}, {&(0x7f0000000700)="faaa", 0x2}], 0x2}}], 0x2, 0x2000c844) 3.109119327s ago: executing program 3 (id=662): r0 = socket$nl_route(0x10, 0x3, 0x0) connect$netlink(r0, &(0x7f0000000280)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) sendmsg$nl_route(r0, &(0x7f0000000100)={&(0x7f0000000080), 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c00000021000f0000f901000000000002"], 0x1c}, 0x1, 0x0, 0x25dfdbfc}, 0x8000) 3.00632011s ago: executing program 0 (id=663): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0x1, 0x0, &(0x7f0000000140)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f00000007c0)=@ethtool_drvinfo={0x26, "afceeb03dcad0c3d385b9d1d57c3ff1f6ad7d540f84de6306783b897769be692", "b43dac8751f5d8cd78fac9c424effa585240135a695e1e33c9ae64fec6e36adc", "644cbcfec6d34d6142ddfd393b7f1d0c23b2e21ed0717f6203058a44a427fb1b", "9313c981621bec72e628cd3c5b21d90945db5c38ca9df508af689aee1a9775bb", "3eb56c5371594cdfa4f964ca8a2044537b971d33ac7c8da8c4aa6adf90eeeea0", "8b151f0600000000000000c3", 0x8, 0x7, 0x2, 0x80000001, 0x3}}) r2 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) pwritev2(r2, &(0x7f0000000180)=[{&(0x7f0000000500)="30e3", 0x2}], 0x1, 0xfffffffe, 0x363c687f, 0x0) ioctl$VIDIOC_STREAMOFF(r2, 0x40045613, &(0x7f0000000000)=0x8) 2.983644564s ago: executing program 4 (id=664): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x2, &(0x7f0000000040)=0x7f, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x2, &(0x7f0000000040)=0x7f, 0x4) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000000180)=@file={0x1}, 0x6e) listen(r2, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/bnep\x00') setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0x7, &(0x7f0000000140)={0x3, 0x4f04e8a4, 0x4, 0x7f}, 0x10) r4 = socket$unix(0x1, 0x1, 0x0) connect$unix(r4, &(0x7f0000000200)=@file={0x1}, 0x6e) connect$unix(r4, &(0x7f0000000080)=@file={0x1}, 0x6e) close(0x3) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10) listen(r0, 0x207) 2.922565784s ago: executing program 3 (id=665): prctl$PR_SET_IO_FLUSHER(0x41, 0x1) r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000300)={{0x12, 0x1, 0x200, 0x99, 0x12, 0x26, 0x10, 0xccd, 0x10a1, 0xae0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x8, 0x4, 0x80, 0xf7, "", [{{0x9, 0x4, 0x2c, 0x4, 0x0, 0xff, 0xff, 0xff, 0x6}}]}}]}}, &(0x7f0000000f40)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000001280)={0x34, &(0x7f0000001100)={0x40, 0x15, 0x2, "ea01"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_connect(0x6, 0x2d, 0x0, 0x0) r1 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x1, 0x40000) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0}}]}}, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e010203010902"], 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12015002183b9220b1134200"], &(0x7f0000001400)={0x0, 0x0, 0x0, 0x0}) write$hidraw(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) read$hiddev(r1, &(0x7f0000000100)=""/67, 0x43) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000a00)={{0x12, 0x1, 0x110, 0x84, 0x93, 0x5d, 0x20, 0x5ac, 0x236, 0x4641, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xa, 0x3, 0x10, 0x8}}]}}, 0x0) r3 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) syz_usb_disconnect(r3) r4 = syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, &(0x7f00000001c0)={0x14, 0x0, 0x0, &(0x7f0000000000)=ANY=[], 0x0}, 0x0) syz_usb_control_io(r2, &(0x7f0000000440)={0x18, &(0x7f0000000200)={0x40, 0xa, 0x9a, {0x9a, 0xf, "34cbe278b7f8213df1f720aa0497c3dd266e72d50ea52edb547386b9dac2f95eb99ae4df61104472ba796350dbc1e3d25d19168f1fb5c062b483bd2e17093fbfce54e7f628ca4fd8b5734a7cbaab1835d989be17594ee79461f818e58ce7704d0de7c58e9d423a27d0f234d6f5200f841c8a5dd0963d48ca758e2e2cf289f47ad4bdd5d623e2507284950aa7d42de3da41e248868fb40457"}}, &(0x7f00000002c0)={0x0, 0x3, 0x4, @lang_id={0x4}}, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], &(0x7f00000003c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x2, 0x10, 0x63, 0x2, "efb47b38", "f163ab2f"}}, &(0x7f0000000400)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x8, 0x4, 0x8, 0x80, 0x5}}}, &(0x7f00000008c0)={0x44, &(0x7f0000000480)={0x0, 0x30, 0x38, "1fecb0008b3536761d74195c725169b6c6081bcf68e73c98140232c2a29db86f000199064fabca5deba1ea067414b360dd34da9140d5436e"}, &(0x7f0000000500)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000540)={0x0, 0x8, 0x1, 0x1}, 0x0, &(0x7f00000005c0)={0x20, 0x0, 0x4, {0x80, 0x20}}, 0x0, &(0x7f0000000640)={0x40, 0x9, 0x1, 0x2}, &(0x7f0000000680)={0x40, 0xb, 0x2, 'L*'}, &(0x7f00000006c0)={0x40, 0xf, 0x2, 0x8d9}, &(0x7f0000000700)={0x40, 0x13, 0x6, @multicast}, &(0x7f0000000740)={0x40, 0x17, 0x6, @multicast}, &(0x7f0000000780)={0x40, 0x19, 0x2, "0e56"}, &(0x7f00000007c0)={0x40, 0x1a, 0x2, 0x5}, &(0x7f0000000800)={0x40, 0x1c, 0x1, 0x6}, &(0x7f0000000840)={0x40, 0x1e, 0x1, 0x4}, &(0x7f0000000880)={0x40, 0x21, 0x1, 0xab}}) ioctl$EVIOCRMFF(r3, 0x83c0550b, 0x0) 2.819945765s ago: executing program 0 (id=667): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000080)={0x0, 0x0, 0x20}, 0xc) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x4, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000440)='z', 0x1, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x81, @loopback, 0x1}, 0x1c) sendmmsg$sock(r0, &(0x7f0000000900)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000640)="89", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="ac", 0x1}], 0x1}}], 0x2, 0x0) writev(r0, &(0x7f0000000200)=[{&(0x7f0000000100)="cf", 0x1}], 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4000, 0x0, &(0x7f0000001000/0x4000)=nil) syz_usb_connect$hid(0x4, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010003000000086e051c0140000102030109022d000101000904002501"], 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f00000001c0)={0x1, 0x0, [{0x28a}]}) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout_data(r4, 0x107, 0x16, &(0x7f00000000c0)={0x2, &(0x7f0000000080)=[{0x28, 0x6, 0xff, 0xfffff020}, {0x6, 0x0, 0x0, 0x8000000}]}, 0x8) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$KVM_SET_GUEST_DEBUG_x86(r3, 0x4048ae9b, &(0x7f0000000300)={0x30000, 0x0, {[0x5, 0x4, 0x9, 0x4, 0x2, 0x8001, 0x7, 0x3]}}) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a310000000014000780050015000c00000008001240000000000500050002000000050004000000000010000300686173683a69702c6d6163"], 0x5c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000002000000000000001a3887bd77a5000bc617c0f6"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$IPSET_CMD_DESTROY(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x1c, 0x3, 0x6, 0x201, 0x0, 0x0, {0xa, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004810}, 0x840) r6 = syz_open_dev$amidi(&(0x7f0000000140), 0x2, 0x0) r7 = socket(0x40000000015, 0x5, 0x0) connect$inet(r7, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) bind$inet(r7, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendmsg$inet(r7, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x40) sendto$inet(r7, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt(r7, 0x200000000114, 0x2715, 0x0, &(0x7f0000000000)) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r6, 0x40045731, 0x0) 1.982353579s ago: executing program 4 (id=669): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r1, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80081}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x3c, 0x2c, 0xd3f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r1, {0xc, 0xe}, {0x0, 0x9}, {0x10, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) sendfile(r2, r2, 0x0, 0x20000005) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) fcntl$lock(0xffffffffffffffff, 0x24, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) socket$unix(0x1, 0x5, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x20a201, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000a80)=@newtfilter={0xa8, 0x2c, 0xd27, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0x4}, {}, {0x8, 0xfff2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x74, 0x2, [@TCA_MATCHALL_ACT={0x70, 0x2, [@m_tunnel_key={0x6c, 0x1, 0x0, 0x0, {{0xf}, {0x3c, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_NO_CSUM={0x5, 0xa, 0x1}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x3, 0x8, 0x1, 0x7ffe, 0x7}, 0x1}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}}]}, 0xa8}, 0x1, 0x0, 0x0, 0x8080}, 0x20000000) io_setup(0x4, &(0x7f00000014c0)=0x0) r7 = syz_open_procfs(0x0, &(0x7f00000002c0)='mounts\x00') io_submit(r6, 0x1, &(0x7f0000000280)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0xfffe, r7, 0x0}]) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000000000)='./file0\x00', 0x8, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r8, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) 1.798335711s ago: executing program 1 (id=671): r0 = socket$igmp(0x2, 0x3, 0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) read(r1, &(0x7f0000000300)=""/96, 0x60) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) add_key(0x0, 0x0, &(0x7f0000000080)="100c0601", 0x4, 0xfffffffffffffffe) setfsgid(0xee00) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0x3c1, 0x3, 0x450, 0x150, 0x168, 0x9, 0x0, 0xb, 0x380, 0x250, 0x250, 0x380, 0x250, 0x3, 0x0, {[{{@ipv6={@remote, @rand_addr=' \x01\x00', [], [], 'veth0_to_bridge\x00', 'sit0\x00', {}, {}, 0x6c}, 0x6000000, 0x108, 0x150, 0x0, {0x0, 0x28e}, [@common=@inet=@ipcomp={{0x30}}, @common=@inet=@ipcomp={{0x30}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'dvmrp0\x00'}}}, {{@uncond, 0x0, 0x200, 0x230, 0x0, {}, [@common=@inet=@policy={{0x158}, {[{@ipv4=@local, [0x0, 0xff000000, 0xffffffff, 0xff000000], @ipv6=@private1, [0x0, 0x1fffffeff, 0xff000000, 0xffffff00], 0x4d6, 0x0, 0x0, 0x0, 0x10, 0x2}, {@ipv4=@remote, [0xff000000, 0xffffff00, 0xffffff00, 0xff], @ipv6=@local, [0x7f, 0xff000000, 0xffffff00, 0xff], 0x4d4, 0x34ff, 0x6c, 0x0, 0x12, 0x4}, {@ipv6=@mcast1, [0xffffffff, 0xffffffff, 0xffffffff, 0xff], @ipv6=@mcast2, [0xffffff00, 0x0, 0xffff00, 0xff000000], 0x4d2, 0x0, 0x0, 0x1, 0x0, 0xd}, {@ipv6=@ipv4={'\x00', '\xff\xff', @multicast2}, [0xffffffff, 0xffffff00], @ipv4=@rand_addr=0x64010100, [0xffffffff, 0xffffff00, 0xffffffff], 0x4d4, 0x3502, 0x32, 0x0, 0x0, 0x6}], 0xa, 0x4}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{}, {0x2}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4b0) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000a80)={{0x2, 0x4e23, @empty}, {0x0, @multicast}, 0x4a, {0x2, 0x1, @loopback}, 'lo\x00'}) r6 = socket$netlink(0x10, 0x3, 0x0) writev(r6, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff08000400", 0x32}], 0x1) 1.377975874s ago: executing program 2 (id=672): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x1400c0b0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="6400000010000305160000000000000000008847", @ANYRES32=0x0, @ANYBLOB="00000000000000004400128009000100626f6e6400000000340002800500010004000000050016000000000008001c000000000005000c00000000000a001a"], 0xc3}, 0x1, 0x100000000000000}, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x5000000) 1.37077729s ago: executing program 0 (id=682): socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b000000000000"], 0x48) r0 = socket$kcm(0x2, 0x3, 0x2) ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f00000000c0)) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000200), 0x0, r2) keyctl$KEYCTL_PKEY_DECRYPT(0x1a, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="656e633d706b63733120686173683d88643500"/79], 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0xfffffffd, 0x0, 0x2, 0x0) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f00000002c0)={0xc}, 0x8) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000200)={0xfffffffa}, 0x8) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000380)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="1a0000000080000000000000fd427ed12a495253c8d2afc9f54e0fed5153adc853ed8ea88a61004040715e872d9ce12970b090218353950a25f702fd376cd44ceda1514a7285da5f2c91377b2276105c7a2ee842eb9c6e61ddaf6d4547c1eb043d78ee304019094743384dbd28cec1d3905849cd08de561215e011929af9455d9f021d251a9db1e19d8e3e43cadf52ee5dc214c9e46924489affb7", @ANYRES32=r1, @ANYBLOB, @ANYRES64=0x0], 0x20) syz_open_procfs(0x0, &(0x7f0000000140)='projid_map\x00') sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x3f, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000340)) r3 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x9b) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TIOCSBRK(r5, 0x5427) vmsplice(r4, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) sendfile64(r4, r3, 0x0, 0x1) r6 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000280)={'vcan0\x00'}) sendmsg$can_j1939(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)='.', 0x1a000}}, 0xfe) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) socket$nl_route(0x10, 0x3, 0x0) 1.149483343s ago: executing program 2 (id=673): syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000002b40)={0xe, {"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", 0x942}}, 0x1006) symlinkat(&(0x7f0000000340)='./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffffff, &(0x7f0000000180)='./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r0 = socket(0xa, 0x3, 0x3a) r1 = socket$netlink(0x10, 0x3, 0xf) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'bridge0\x00', 0x0}) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000000)={0x4, 0x0, 0x0, r2}, 0xc) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000040)={0x1, 0x0, 0x5, r2, 0xffffff8f}, 0xc) setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0xd, @remote}, {0xa, 0x4e22, 0x0, @mcast1}, 0x0, {[0x7b6, 0xc, 0xd, 0x4, 0x10000, 0x0, 0x4, 0x4]}}, 0x5c) openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0/file0/..\x00', &(0x7f0000000300)={0x0, 0x0, 0x31}, 0x18) r3 = openat$vcs(0xffffff9c, &(0x7f00000002c0), 0x208100, 0x0) r4 = openat(r3, &(0x7f0000000680)='./file0\x00', 0x40400, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000940)={@cgroup=r4, r3, 0x20, 0x2a}, 0x20) 978.877956ms ago: executing program 2 (id=674): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f00000000c0)={0x1d, r1}, 0x10) setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x2, &(0x7f0000000180)=0x4, 0x4) bind$can_raw(r0, &(0x7f0000000000), 0x10) (fail_nth: 2) 707.392121ms ago: executing program 2 (id=675): syz_usb_connect(0x2, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000b3838108480b0310547b01020301090212000100000000090401"], 0x0) r0 = syz_open_dev$I2C(&(0x7f00000001c0), 0x78b5, 0x80) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000140)={&(0x7f0000003b40)=[{0x4, 0x200, 0x0, 0x0}, {0x8, 0x98f5, 0x0, 0x0}], 0x2}) 582.1355ms ago: executing program 4 (id=676): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r1 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r1, 0x107, 0xc, 0x0, &(0x7f0000000340)) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)=0x80) write$P9_RVERSION(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="15000000650008003950323030302e750000000000"], 0x15) r2 = socket(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000140)=@framed={{}, [@ldst={0x3, 0x2, 0x3, 0x1, 0x0, 0xffffffffffffffff}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) shutdown(r1, 0x0) syncfs(0xffffffffffffffff) syz_clone3(&(0x7f0000000380)={0x80000, &(0x7f0000000040)=0xffffffffffffffff, &(0x7f0000000180), &(0x7f00000001c0), {0x26}, &(0x7f0000000200)=""/76, 0x4c, &(0x7f0000000280)=""/58, &(0x7f00000002c0)=[0x0, 0xffffffffffffffff, 0x0, 0x0], 0x4, {r0}}, 0x58) r4 = socket$inet6(0xa, 0x3, 0x4) setsockopt$inet6_int(r4, 0x29, 0x4c, &(0x7f0000000040)=0x20000000, 0x4) dup(r3) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=0x0, @ANYRES16=r2, @ANYRESHEX=0x0], 0x0) 561.603466ms ago: executing program 1 (id=677): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0x1, 0x0, &(0x7f0000000140)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f00000007c0)=@ethtool_drvinfo={0x26, "afceeb03dcad0c3d385b9d1d57c3ff1f6ad7d540f84de6306783b897769be692", "b43dac8751f5d8cd78fac9c424effa585240135a695e1e33c9ae64fec6e36adc", "644cbcfec6d34d6142ddfd393b7f1d0c23b2e21ed0717f6203058a44a427fb1b", "9313c981621bec72e628cd3c5b21d90945db5c38ca9df508af689aee1a9775bb", "3eb56c5371594cdfa4f964ca8a2044537b971d33ac7c8da8c4aa6adf90eeeea0", "8b151f0600000000000000c3", 0x8, 0x7, 0x2, 0x80000001, 0x3}}) r2 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) pwritev2(r2, &(0x7f0000000180)=[{&(0x7f0000000500)="30e3", 0x2}], 0x1, 0xfffffffe, 0x363c687f, 0x0) ioctl$VIDIOC_STREAMOFF(r2, 0x40045613, &(0x7f0000000000)=0x8) 478.955348ms ago: executing program 1 (id=678): r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'lo\x00'}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) 448.464753ms ago: executing program 0 (id=679): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x58, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x6}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x2}]}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x100}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000002c0)) ioctl$vim2m_VIDIOC_S_CTRL(r3, 0xc008561c, &(0x7f0000000040)={0xf0f000, 0x1}) r4 = socket$netlink(0x10, 0x3, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000240)="8f0978d21b640fc79ca50000c0fe470f06430f01c2440f20c0ac0a0000e39d9d0f22c066460f38809bf77f00000f214a0fc73d0d0000003e653666400fc7775f400f01c4", 0x44}], 0x1, 0x10, 0x0, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYRES32=r4], 0x38}, 0x1, 0x300}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'dvmrp0\x00', @random="2b0436d23321"}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x32b}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0xe}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40004) ioctl$NILFS_IOCTL_GET_CPSTAT(r5, 0x80186e83, &(0x7f00000001c0)) write$tun(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="034886dd120005000000140000006000000008003c00fe88a43de1a400000000000000007d01ff020000000000000000000000000001", @ANYRES16], 0xfdef) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r7, 0x7a7, &(0x7f00000000c0)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r7, 0x7a0, &(0x7f0000000040)={@host}) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r7, 0x7ab, &(0x7f0000000000)={&(0x7f0000000540)={{@host=0x10, 0xffffffff}, {@host=0x10, 0x1}, 0x400, "d49e0b1f09a3e05cb898141464441748655937bb34d22f02362479246bb6372d891a3b5dafa58a6abc5a678d6874fc8fb5f8a529c6e30103484f2667c174fb6cda19ea0a9301bc3238eb816e9c3882f243bcd4bd7115b26dacf5923f060498d471cb4f789562fcda119739dd1a5b0e4e1a4a64dbd7b398bd4e7a247d81f968f2e945f293fc3860bf11f0424193fce743067d27f0ac187b44b128a4999547f73d8c35d3c2bd8b51bbc9a31123f773be89e109cc71b8ec29a539083c0cba15b08933865e3e154c28b3c4e2ebe360ac44f942a703b9a3a37fbbefe9ae0de04a32336a6eba07b2fb6ad426d56e17291bb1a9d1fcdaa939378bab6dd2eac37b369ef163c9e0fc8039352c24d8147fcc2e2559b47066abd21a3a5f83f239a2227d17d4ca90f60ed9acc243ed38818e3883a985106b54dc157b67022525a74e8f9cb99852760359278d5d22294a70433ba4cec5147fbb09b1d0008ba76257f1c5af6b8d6bf3bcfd5a468a566a4e98fe5f264f2663b72cb421c90d8b7883ddfb5749b27a3e146f9d8538706fea61b07c6e064446337439b9d5a5dc82f6c63c57d6ba0e709b7c1b15fa8367f8e6df2cf59b0b30740ef47c5cccffce5911569591ce4ab62275964cd147e87a30cc6e71f7e40e161997cdbadcfbfb6c54e0289ac137508b7b5339414e4ab7afcc420148e37d49b664cc07c8178a3b50f566c5bdd3aa9217ef909805972bd63ee1d729b282cd866c183744b20da3227f9d43843236b571c8d3237408c266e08d0699ebd30e0820362664ab323b15d3ae9896d6120aae6ef9085f53a2b39cc31238b031476c86e6b16d7703fcbacc7269ce8622eab1cfdf82a364209ec4ac912db924bb76bc35ddf8d0e7a3aff0d08a48c07be47303b59653d9409f14dc59ac33cae5e010466f54d86772e43e3680863bb9bf10c971f16a731e601d7fcdbb91d7146e7834d89059ad522d70398c2bacf113ed791e32f933dfa23f5d6d11bfc9d9e0f04a34b0eddd99d16cd9712485e0a5c9aaf1ebf3f14d00005f8960b6145cbb7d4522692ebe1f9491f87a29ed67c5fb60f5e69bde2a758742999fc986a2dbf6199977e9b446691bf9f95d0abd84557c77ea13356c977d0f098ab9fec85acbd6447f2e6893e2fa6a0a7b272dab66e69b7def48f8b3583a53a0941fb3e4367fa8d56e05ee3b265f17ca0439fcdcea276f7f0a9bf4c2a324d7143658007cf4019e8da69ba1b7dff4383714cbcb71dfe6f1b1ac5d5e99394cb2c360ddb1889d92cd36f8fc72ac865f1c6445957b2a57c1af59ef8d2e9fe328ec2bde763d65c4dea965042f540515bf2f879d1b26309ebc1d7f76c569fa88fbe61845e96e93d3b6025b6285777e59495943596c128fdacc545263ce458bf99f57d7e5dc77f65cf650902b5b6d5af9359334759843365bf0dfb244817a40e8cc9030"}, 0x418, 0x2001}) ioctl$IOCTL_VMCI_NOTIFICATIONS_RECEIVE(r7, 0x7a6, &(0x7f0000000100)={0x80, 0x1, 0x9, 0x9, 0x100, 0x7}) syz_usb_connect$uac3(0x5, 0x80, &(0x7f0000000000)=ANY=[@ANYBLOB="12010102000000408205820540000102030109026e0003017f0006080b0002012030230904000000010130000a2401100a00090000000904010000010230000904010101ff02300009"], &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0}) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000050000000900010073797a30000000002c000000030a01010000000000000000050000000900010073797a3000000000090003007379ff62779e5e71eb07dbdd9e7a30000000003c000000060a010400000000000000000500000008000b400000000014000480100001800c0001006e6f747261636b000900010073797a3000000000140000001100010000000000000000000300000a"], 0xb0}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001cc0)={0x2c, r9, 0x5, 0x1, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}, @NL80211_ATTR_4ADDR={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x0) 386.351686ms ago: executing program 1 (id=680): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5, 0x1, 0x5, 0xd, 0xd9, 0x10}, {0x0, 0x2, 0x5, 0x3, 0x1}, 0x2, 0x5, 0x8d0}}, @TCA_TBF_BURST={0x8, 0x6, 0x10001}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt(r4, 0x84, 0x82, &(0x7f00000002c0)="1a00000002000000", 0x8) socket$inet(0x2, 0xa, 0x81) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r9 = syz_open_dev$sndpcmc(&(0x7f0000004240), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS64(r9, 0xc06c4124, &(0x7f0000000080)) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0xfffffffffffffe3e, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0x0, 0xb}, {0xffff, 0xfff2}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_TARGET={0x8, 0x1, 0xb}, @TCA_FQ_CODEL_INTERVAL={0x8, 0x3, 0xd}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x240048e4}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r10 = socket$kcm(0x11, 0x3, 0x0) r11 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r13 = syz_open_dev$evdev(&(0x7f0000000b80), 0x0, 0x0) ioctl$EVIOCSMASK(r13, 0x40104593, &(0x7f0000000140)={0x0, 0x0, 0x0}) ioctl$EVIOCSKEYCODE_V2(r13, 0x80104592, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, "207d3d00000055c51b08700c1e0adb4f000000001200000000000900"}) setsockopt$sock_attach_bpf(r10, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r10, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r12, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200591114120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 250.914589ms ago: executing program 1 (id=681): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2e, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x675f, 0x9, 0x3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40004}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) r6 = socket$kcm(0x11, 0x3, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$nl_route_sched(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000640)=@gettaction={0x88, 0x32, 0x2, 0x70bd2c, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x70, 0x1, [{0xc, 0x14, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0xc, 0x1a, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x77c2}}, {0x10, 0x11, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0xc, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0x14, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0xc, 0x817, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6c}}, {0xc, 0xf, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0xc, 0x16, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x20}}]}, @action_gd=@TCA_ACT_TAB={0x4}]}, 0x88}, 0x1, 0x0, 0x0, 0x10}, 0x8080) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r6, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r5, 0x42}, 0x80, &(0x7f0000000440)=[{&(0x7f00000001c0)="27030200dc0f14000e0003000024c1020000ff1107c2fb7fe0400018534b4f6b3d327db412f40000000000000000", 0xfdef}], 0x1}, 0x4005) r8 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r8, 0x65, 0x7, &(0x7f0000000200)=0xd, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000280)={'vcan0\x00', 0x0}) sendmsg$can_raw(r8, &(0x7f0000000040)={&(0x7f0000000140)={0x1d, r9}, 0x10, &(0x7f0000000080)={&(0x7f0000000000)=@can={{0x0, 0x0, 0x0, 0x1}, 0xfe, 0x1, 0x4, 0x0, "36e932da564405cc"}, 0x10}, 0x1, 0x0, 0x0, 0x84844}, 0x20000000) 0s ago: executing program 1 (id=683): r0 = socket(0x10, 0x6, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xb) r3 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r3, &(0x7f00000002c0)={0x2, 0x4e20, @empty}, 0x10) connect$inet(r3, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r3, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(0xffffffffffffffff, 0x0, 0x1) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x1e1900, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r4, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0xffffffffffffffff, 0xffffffffffffffff}}, './file0\x00'}) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x27) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000040)={0x10003, 0x2, 0x50000, 0x1000, &(0x7f000041e000/0x1000)=nil}) clock_nanosleep(0x9, 0x0, &(0x7f0000000080)={0x0, 0x3938700}, 0x0) mknod(&(0x7f0000000240)='./file3\x00', 0x0, 0x0) utimensat(0xffffffffffffff9c, &(0x7f0000000080)='./file3\x00', &(0x7f0000000040)={{0x0, 0x3ffffffe}, {0x0, 0x3fffffff}}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1, 0x0, 0x40012ee4, 0x2) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f0000000300)={{0xffffffff, 0xdddd1000, 0x0, 0x3, 0x8, 0x0, 0x0, 0x2, 0xf9, 0xa, 0x9, 0x10}, {0xf000, 0x4, 0x8, 0x8, 0x0, 0x4, 0x0, 0xb2, 0x8, 0x3, 0x0, 0xff}, {0x3000, 0x0, 0xc, 0x0, 0x7, 0x4, 0x0, 0x0, 0x3, 0xfd, 0x0, 0xfd}, {0xa000, 0xd000, 0x0, 0xe2, 0x0, 0x0, 0xfd, 0x0, 0xfe, 0x0, 0x4, 0x3}, {0x3337a000, 0x10000, 0x9, 0x0, 0xff, 0x1, 0x2, 0xe, 0x0, 0x3c}, {0xffff1000, 0x0, 0x0, 0x0, 0x0, 0xfc, 0x2, 0x1, 0x3e, 0x0, 0x90}, {0xdddd1000, 0x0, 0x3, 0x6, 0x0, 0x0, 0x3}, {0xdddd0000, 0x8000000, 0x0, 0x6, 0x0, 0x1, 0x83, 0x6, 0x26, 0x5}, {0x4000}, {0xdddd1000, 0xff}, 0xddf8ffdb, 0x0, 0x0, 0x70, 0xfffffffffffffffe, 0x0, 0x0, [0x4, 0x0, 0x4]}) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000680)={"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"}) syz_usb_connect(0x5, 0x777, &(0x7f0000000840)=ANY=[@ANYBLOB="12011001ae0cf020bf0a7033c89a010203010902650703040520010904"], 0x0) openat$drirender128(0xffffff9c, &(0x7f0000000000), 0x40, 0x0) kernel console output (not intermixed with test programs): [ T189] usb 3-1: USB disconnect, device number 14 [ 130.622360][ T10] DVB: Unable to find symbol dib7000p_attach() [ 130.622379][ T10] dvb-usb: no frontend was attached by 'Terratec Cinergy DT USB XS Diversity/ T5' [ 130.622395][ T10] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 130.623073][ T10] dvbdev: DVB: registering new adapter (Terratec Cinergy DT USB XS Diversity/ T5) [ 130.623125][ T10] usb 5-1: media controller created [ 130.669605][ T6838] FAULT_INJECTION: forcing a failure. [ 130.669605][ T6838] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 130.669640][ T6838] CPU: 1 UID: 0 PID: 6838 Comm: syz.0.378 Tainted: G L syzkaller #0 PREEMPT(full) [ 130.669661][ T6838] Tainted: [L]=SOFTLOCKUP [ 130.669668][ T6838] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 130.669677][ T6838] Call Trace: [ 130.669685][ T6838] [ 130.669693][ T6838] dump_stack_lvl+0xe8/0x150 [ 130.669723][ T6838] should_fail_ex+0x410/0x560 [ 130.669750][ T6838] copy_folio_from_iter_atomic+0x45a/0x1a30 [ 130.669773][ T6838] ? __iomap_write_begin+0xb75/0xde0 [ 130.669816][ T6838] ? __pfx_copy_folio_from_iter_atomic+0x10/0x10 [ 130.669848][ T6838] iomap_file_buffered_write+0x4fb/0xb90 [ 130.669878][ T6838] ? __pfx_fuse_xattr_get+0x10/0x10 [ 130.669910][ T6838] ? __pfx_iomap_file_buffered_write+0x10/0x10 [ 130.669928][ T6838] ? file_remove_privs_flags+0x4ba/0x610 [ 130.669964][ T6838] ? down_write+0x16b/0x200 [ 130.669979][ T6838] ? generic_write_checks_count+0x41a/0x520 [ 130.670007][ T6838] ? file_update_time_flags+0x1ea/0x440 [ 130.670029][ T6838] fuse_file_write_iter+0xd03/0x11b0 [ 130.670055][ T6838] ? kstrtouint+0x6e/0xe0 [ 130.670074][ T6838] ? __pfx_fuse_file_write_iter+0x10/0x10 [ 130.670089][ T6838] ? lock_acquire+0x115/0x350 [ 130.670105][ T6838] ? get_pid_task+0x20/0x1f0 [ 130.670125][ T6838] ? lock_acquire+0x115/0x350 [ 130.670156][ T6838] vfs_write+0x612/0xba0 [ 130.670179][ T6838] ? __pfx_vfs_write+0x10/0x10 [ 130.670204][ T6838] ? __fget_files+0x2a/0x420 [ 130.670233][ T6838] ksys_write+0x150/0x270 [ 130.670253][ T6838] ? __pfx_ksys_write+0x10/0x10 [ 130.670277][ T6838] __do_fast_syscall_32+0x27a/0x6b0 [ 130.670294][ T6838] ? do_fast_syscall_32+0x33/0x70 [ 130.670318][ T6838] ? asm_int80_emulation+0x1a/0x20 [ 130.670335][ T6838] ? do_int80_emulation+0x299/0x500 [ 130.670361][ T6838] ? trace_irq_disable+0x3b/0x140 [ 130.670381][ T6838] do_fast_syscall_32+0x33/0x70 [ 130.670404][ T6838] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 130.670427][ T6838] RIP: 0023:0xf73ef0ec [ 130.670442][ T6838] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 130.670458][ T6838] RSP: 002b:00000000f540650c EFLAGS: 00000206 ORIG_RAX: 0000000000000004 [ 130.670474][ T6838] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000800000c0 [ 130.670484][ T6838] RDX: 00000000fffffdef RSI: 0000000000000000 RDI: 0000000000000000 [ 130.670493][ T6838] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 130.670501][ T6838] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 130.670510][ T6838] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 130.670532][ T6838] [ 130.672186][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 130.834818][ T990] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 130.984644][ T990] usb 2-1: Using ep0 maxpacket: 32 [ 130.985352][ T990] usb 2-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 130.986295][ T990] usb 2-1: config 0 has an invalid interface number: 12 but max is 0 [ 130.986344][ T990] usb 2-1: config 0 has no interface number 0 [ 130.986384][ T990] usb 2-1: config 0 interface 12 has no altsetting 0 [ 131.033578][ T10] DVB: Unable to find symbol dib7000p_attach() [ 131.033597][ T10] dvb-usb: no frontend was attached by 'Terratec Cinergy DT USB XS Diversity/ T5' [ 131.060831][ T990] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.060857][ T990] usb 2-1: Product: syz [ 131.060879][ T990] usb 2-1: Manufacturer: syz [ 131.060894][ T990] usb 2-1: SerialNumber: syz [ 131.095651][ T990] usb 2-1: config 0 descriptor?? [ 131.116409][ T10] rc_core: IR keymap rc-dib0700-rc5 not found [ 131.116427][ T10] Registered IR keymap rc-empty [ 131.139413][ T10] dvb-usb: could not initialize remote control. [ 131.139431][ T10] dvb-usb: Terratec Cinergy DT USB XS Diversity/ T5 successfully initialized and connected. [ 131.354656][ T189] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 131.429396][ T6825] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 131.431515][ T6825] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 131.453548][ T6825] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 131.461495][ T6825] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 131.515338][ T189] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 131.517307][ T189] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 131.517339][ T189] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 131.518481][ T189] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 131.518505][ T189] usb 3-1: Manufacturer: syz [ 131.521309][ T189] usb 3-1: config 0 descriptor?? [ 131.668873][ T6825] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 131.673933][ T6825] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 131.696779][ T6825] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 131.697297][ T6825] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 131.902168][ T6825] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 131.904382][ T6825] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 131.929506][ T189] usbhid 3-1:0.0: can't add hid device: -71 [ 131.929608][ T189] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 131.962970][ T189] usb 3-1: USB disconnect, device number 15 [ 132.264776][ T5695] usb 4-1: new full-speed USB device number 17 using dummy_hcd [ 132.364050][ T6859] FAULT_INJECTION: forcing a failure. [ 132.364050][ T6859] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 132.364089][ T6859] CPU: 1 UID: 0 PID: 6859 Comm: syz.0.382 Tainted: G L syzkaller #0 PREEMPT(full) [ 132.364104][ T6859] Tainted: [L]=SOFTLOCKUP [ 132.364108][ T6859] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 132.364115][ T6859] Call Trace: [ 132.364119][ T6859] [ 132.364124][ T6859] dump_stack_lvl+0xe8/0x150 [ 132.364144][ T6859] should_fail_ex+0x410/0x560 [ 132.364160][ T6859] _copy_from_user+0x2d/0xb0 [ 132.364175][ T6859] vmci_host_unlocked_ioctl+0xee7/0x2850 [ 132.364190][ T6859] ? __pfx_vmci_host_unlocked_ioctl+0x10/0x10 [ 132.364214][ T6859] ? kasan_quarantine_put+0xbb/0x1f0 [ 132.364231][ T6859] ? tomoyo_path_number_perm+0x219/0x5f0 [ 132.364245][ T6859] ? tomoyo_path_number_perm+0x219/0x5f0 [ 132.364259][ T6859] ? do_vfs_ioctl+0x116f/0x1530 [ 132.364273][ T6859] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 132.364290][ T6859] ? hook_file_ioctl_compat+0x1f2/0x600 [ 132.364314][ T6859] ? __fget_files+0x2a/0x420 [ 132.364331][ T6859] ? __fget_files+0x3a2/0x420 [ 132.364344][ T6859] ? __fget_files+0x2a/0x420 [ 132.364360][ T6859] ? bpf_lsm_file_ioctl_compat+0x9/0x20 [ 132.364377][ T6859] __ia32_compat_sys_ioctl+0x5ea/0x950 [ 132.364391][ T6859] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 132.364407][ T6859] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 132.364424][ T6859] ? __fget_files+0x3a2/0x420 [ 132.364441][ T6859] ? fput+0xa0/0xd0 [ 132.364455][ T6859] ? ksys_write+0x242/0x270 [ 132.364471][ T6859] __do_fast_syscall_32+0x27a/0x6b0 [ 132.364484][ T6859] ? do_fast_syscall_32+0x33/0x70 [ 132.364509][ T6859] ? asm_int80_emulation+0x1a/0x20 [ 132.364527][ T6859] ? do_int80_emulation+0x299/0x500 [ 132.364556][ T6859] do_fast_syscall_32+0x33/0x70 [ 132.364582][ T6859] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 132.364603][ T6859] RIP: 0023:0xf73ef0ec [ 132.364620][ T6859] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 132.364636][ T6859] RSP: 002b:00000000f540650c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 132.364654][ T6859] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000000007a8 [ 132.364662][ T6859] RDX: 0000000080000340 RSI: 0000000000000000 RDI: 0000000000000000 [ 132.364668][ T6859] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 132.364674][ T6859] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 132.364680][ T6859] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 132.364694][ T6859] [ 132.417247][ T5695] usb 4-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29 [ 132.418661][ T5695] usb 4-1: config 36 has an invalid descriptor of length 0, skipping remainder of the config [ 132.418704][ T5695] usb 4-1: config 36 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 132.423367][ T5695] usb 4-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 132.423393][ T5695] usb 4-1: Manufacturer: syz [ 132.423462][ T5695] usb 4-1: SerialNumber: syz [ 132.553610][ T6861] : renamed from macvlan0 (while UP) [ 132.757486][ T5695] usbhid 4-1:36.0: couldn't find an input interrupt endpoint [ 132.760849][ T5695] usb 4-1: USB disconnect, device number 17 [ 132.824760][ T5681] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 132.874728][ T5752] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 132.897712][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.897800][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.937273][ T5680] usb 5-1: USB disconnect, device number 13 [ 132.976902][ T5681] usb 1-1: Using ep0 maxpacket: 16 [ 132.978154][ T5681] usb 1-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 132.979240][ T5681] usb 1-1: config 0 has an invalid interface number: 8 but max is 0 [ 132.979262][ T5681] usb 1-1: config 0 has no interface number 0 [ 132.979285][ T5681] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 132.979298][ T5681] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 132.981726][ T5681] usb 1-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 132.981742][ T5681] usb 1-1: Product: syz [ 132.981750][ T5681] usb 1-1: SerialNumber: syz [ 132.991168][ T5681] usb 1-1: config 0 descriptor?? [ 132.999963][ T5681] cm109 1-1:0.8: invalid payload size 0, expected 4 [ 133.008287][ T5681] input: CM109 USB driver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.8/input/input12 [ 133.032680][ T5752] usb 3-1: unable to get BOS descriptor or descriptor too short [ 133.032731][ T5752] usb 3-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice=61.9f [ 133.039458][ T5752] usb 3-1: config 189 has an invalid interface number: 127 but max is 0 [ 133.039508][ T5752] usb 3-1: config 189 has no interface number 0 [ 133.039547][ T5752] usb 3-1: config 189 interface 127 has no altsetting 0 [ 133.056018][ T5752] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.056043][ T5752] usb 3-1: Product: syz [ 133.056057][ T5752] usb 3-1: Manufacturer: syz [ 133.056071][ T5752] usb 3-1: SerialNumber: syz [ 133.089385][ T5680] dvb-usb: Terratec Cinergy DT USB XS Diversity/ T successfully deinitialized and disconnected. [ 133.272438][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 133.274462][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 133.274671][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 133.275072][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 133.275445][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 133.275870][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 133.276120][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 133.276337][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 133.276544][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 133.276733][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 133.281278][ T5681] usb 1-1: USB disconnect, device number 15 [ 133.281368][ C1] cm109 1-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 133.337170][ T5681] cm109 1-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 133.411125][ T6873] netlink: 24 bytes leftover after parsing attributes in process `syz.4.388'. [ 133.575582][ T990] f81534 2-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 133.575660][ T990] f81534 2-1:0.12: f81534_find_config_idx: read failed: -71 [ 133.575677][ T990] f81534 2-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 133.575776][ T990] f81534 2-1:0.12: probe with driver f81534 failed with error -71 [ 133.593027][ T990] usb 2-1: USB disconnect, device number 10 [ 133.775799][ T5752] usbserial_generic 3-1:189.127: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 133.775825][ T5752] usbserial_generic 3-1:189.127: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 133.775866][ T5752] usbserial_generic 3-1:189.127: generic converter detected [ 133.803326][ T5752] usb 3-1: generic converter now attached to ttyUSB0 [ 133.815256][ T5752] usb 3-1: USB disconnect, device number 16 [ 133.843595][ T5752] generic ttyUSB0: generic converter now disconnected from ttyUSB0 [ 133.849150][ T5752] usbserial_generic 3-1:189.127: device disconnected [ 134.623553][ T6903] FAULT_INJECTION: forcing a failure. [ 134.623553][ T6903] name failslab, interval 1, probability 0, space 0, times 0 [ 134.623587][ T6903] CPU: 1 UID: 0 PID: 6903 Comm: syz.1.398 Tainted: G L syzkaller #0 PREEMPT(full) [ 134.623614][ T6903] Tainted: [L]=SOFTLOCKUP [ 134.623621][ T6903] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 134.623632][ T6903] Call Trace: [ 134.623640][ T6903] [ 134.623649][ T6903] dump_stack_lvl+0xe8/0x150 [ 134.623679][ T6903] should_fail_ex+0x410/0x560 [ 134.623708][ T6903] should_failslab+0xa8/0x100 [ 134.623737][ T6903] __kmalloc_cache_noprof+0xa3/0x600 [ 134.623761][ T6903] ? br_vlan_init+0x54/0x1b0 [ 134.623788][ T6903] ? br_vlan_init+0x54/0x1b0 [ 134.623822][ T6903] br_vlan_init+0x54/0x1b0 [ 134.623853][ T6903] br_dev_init+0x65/0x490 [ 134.623882][ T6903] register_netdevice+0x6a1/0x1eb0 [ 134.623906][ T6903] ? trace_kmalloc+0x2a/0xf0 [ 134.623933][ T6903] ? alloc_netdev_mqs+0xd44/0x12a0 [ 134.623954][ T6903] ? __kvmalloc_node_noprof+0x52f/0x820 [ 134.623982][ T6903] ? __pfx_register_netdevice+0x10/0x10 [ 134.624008][ T6903] ? validate_linkmsg+0x765/0x950 [ 134.624034][ T6903] ? dev_validate_mtu+0x125/0x170 [ 134.624067][ T6903] br_dev_newlink+0x6a/0x150 [ 134.624093][ T6903] ? rtnl_newlink_create+0x2f2/0x7b0 [ 134.624122][ T6903] ? __pfx_br_dev_newlink+0x10/0x10 [ 134.624151][ T6903] rtnl_newlink_create+0x305/0x7b0 [ 134.624194][ T6903] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 134.624228][ T6903] ? __pfx___mutex_lock+0x10/0x10 [ 134.624264][ T6903] ? ns_capable+0x89/0xe0 [ 134.624294][ T6903] rtnl_newlink+0x166d/0x1c30 [ 134.624330][ T6903] ? __pfx_rtnl_newlink+0x10/0x10 [ 134.624352][ T6903] ? __do_fast_syscall_32+0x27a/0x6b0 [ 134.624366][ T6903] ? do_fast_syscall_32+0x33/0x70 [ 134.624392][ T6903] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 134.624450][ T6903] ? kasan_quarantine_put+0xbb/0x1f0 [ 134.624473][ T6903] ? lockdep_hardirqs_on+0x7b/0x110 [ 134.624504][ T6903] ? nlmon_xmit+0xb0/0x100 [ 134.624527][ T6903] ? kmem_cache_free+0x182/0x650 [ 134.624555][ T6903] ? __lock_acquire+0x747/0x2de0 [ 134.624584][ T6903] ? __local_bh_enable_ip+0xd6/0x140 [ 134.624610][ T6903] ? lockdep_hardirqs_on+0x7b/0x110 [ 134.624636][ T6903] ? __dev_queue_xmit+0x29b/0x3920 [ 134.624655][ T6903] ? __local_bh_enable_ip+0xd6/0x140 [ 134.624688][ T6903] ? lock_acquire+0x115/0x350 [ 134.624723][ T6903] ? __pfx_rtnl_newlink+0x10/0x10 [ 134.624749][ T6903] rtnetlink_rcv_msg+0x802/0xc00 [ 134.624780][ T6903] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 134.624807][ T6903] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 134.624833][ T6903] ? ref_tracker_free+0x689/0x830 [ 134.624862][ T6903] ? __pfx_ref_tracker_free+0x10/0x10 [ 134.624888][ T6903] ? __asan_memcpy+0x40/0x70 [ 134.624907][ T6903] ? __skb_clone+0x5c/0x6c0 [ 134.624942][ T6903] netlink_rcv_skb+0x226/0x4a0 [ 134.624965][ T6903] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 134.624994][ T6903] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 134.625028][ T6903] ? netlink_deliver_tap+0x2e/0x1b0 [ 134.625049][ T6903] ? netlink_deliver_tap+0x2e/0x1b0 [ 134.625075][ T6903] netlink_unicast+0x7bd/0x940 [ 134.625117][ T6903] netlink_sendmsg+0x813/0xb40 [ 134.625148][ T6903] ? __pfx_netlink_sendmsg+0x10/0x10 [ 134.625184][ T6903] ? apparmor_socket_sendmsg+0x98/0x360 [ 134.625211][ T6903] ? __pfx_netlink_sendmsg+0x10/0x10 [ 134.625232][ T6903] sock_sendmsg_nosec+0x13a/0x180 [ 134.625258][ T6903] ____sys_sendmsg+0x54e/0x850 [ 134.625294][ T6903] ? __pfx_____sys_sendmsg+0x10/0x10 [ 134.625339][ T6903] ___sys_sendmsg+0x2a5/0x360 [ 134.625367][ T6903] ? __lock_acquire+0x747/0x2de0 [ 134.625392][ T6903] ? __pfx____sys_sendmsg+0x10/0x10 [ 134.625421][ T6903] ? get_pid_task+0x20/0x1f0 [ 134.625440][ T6903] ? get_pid_task+0x20/0x1f0 [ 134.625456][ T6903] ? get_pid_task+0x20/0x1f0 [ 134.625504][ T6903] ? __fget_files+0x2a/0x420 [ 134.625532][ T6903] ? __fget_files+0x3a2/0x420 [ 134.625570][ T6903] __sys_sendmsg+0x177/0x240 [ 134.625602][ T6903] ? __pfx___sys_sendmsg+0x10/0x10 [ 134.625650][ T6903] __do_fast_syscall_32+0x27a/0x6b0 [ 134.625669][ T6903] ? do_fast_syscall_32+0x33/0x70 [ 134.625698][ T6903] ? asm_int80_emulation+0x1a/0x20 [ 134.625716][ T6903] ? do_int80_emulation+0x299/0x500 [ 134.625745][ T6903] ? trace_irq_disable+0x3b/0x140 [ 134.625770][ T6903] do_fast_syscall_32+0x33/0x70 [ 134.625800][ T6903] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 134.625823][ T6903] RIP: 0023:0xf7f280ec [ 134.625840][ T6903] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 134.625855][ T6903] RSP: 002b:00000000f53d650c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 134.625873][ T6903] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800002c0 [ 134.625885][ T6903] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 134.625895][ T6903] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 134.625907][ T6903] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 134.625919][ T6903] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 134.625948][ T6903] [ 134.674774][ T5752] usb 3-1: new full-speed USB device number 17 using dummy_hcd [ 134.826899][ T5752] usb 3-1: not running at top speed; connect to a high speed hub [ 134.826936][ T5752] usb 3-1: New USB device found, idVendor=0ccd, idProduct=10a1, bcdDevice= a.e0 [ 134.829172][ T5752] usb 3-1: config 8 has an invalid interface number: 44 but max is 0 [ 134.829196][ T5752] usb 3-1: config 8 has no interface number 0 [ 134.829223][ T5752] usb 3-1: config 8 interface 44 has no altsetting 0 [ 134.844466][ T5752] usb 3-1: string descriptor 0 read error: -22 [ 134.844723][ T5752] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.119470][ T5752] dvb-usb: found a 'Terratec Cinergy DT USB XS Diversity/ T5' in warm state. [ 135.131319][ T5752] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 135.133518][ T5752] dvbdev: DVB: registering new adapter (Terratec Cinergy DT USB XS Diversity/ T5) [ 135.133575][ T5752] usb 3-1: media controller created [ 135.146465][ T5752] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 135.286534][ T5752] DVB: Unable to find symbol dib7000p_attach() [ 135.286551][ T5752] dvb-usb: no frontend was attached by 'Terratec Cinergy DT USB XS Diversity/ T5' [ 135.286566][ T5752] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 135.287294][ T5752] dvbdev: DVB: registering new adapter (Terratec Cinergy DT USB XS Diversity/ T5) [ 135.287343][ T5752] usb 3-1: media controller created [ 135.293072][ T5752] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 135.324717][ T990] usb 4-1: new full-speed USB device number 18 using dummy_hcd [ 135.468844][ T5752] DVB: Unable to find symbol dib7000p_attach() [ 135.468862][ T5752] dvb-usb: no frontend was attached by 'Terratec Cinergy DT USB XS Diversity/ T5' [ 135.478425][ T990] usb 4-1: New USB device found, idVendor=041e, idProduct=3042, bcdDevice= 0.40 [ 135.479670][ T990] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 4 [ 135.484482][ T990] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.484509][ T990] usb 4-1: Product: syz [ 135.484523][ T990] usb 4-1: Manufacturer: syz [ 135.484662][ T990] usb 4-1: SerialNumber: syz [ 135.574779][ T5752] rc_core: IR keymap rc-dib0700-rc5 not found [ 135.574801][ T5752] Registered IR keymap rc-empty [ 135.575635][ T5752] dvb-usb: could not initialize remote control. [ 135.575647][ T5752] dvb-usb: Terratec Cinergy DT USB XS Diversity/ T5 successfully initialized and connected. [ 135.619778][ T6905] netlink: 8 bytes leftover after parsing attributes in process `syz.1.399'. [ 135.620370][ T6905] netlink: 8 bytes leftover after parsing attributes in process `syz.1.399'. [ 135.740087][ T6915] netlink: 24 bytes leftover after parsing attributes in process `syz.1.401'. [ 135.780657][ T6918] netlink: 24 bytes leftover after parsing attributes in process `syz.0.411'. [ 135.798389][ T6919] netlink: 8 bytes leftover after parsing attributes in process `syz.4.402'. [ 135.798442][ T6919] netlink: 'syz.4.402': attribute type 7 has an invalid length. [ 135.798455][ T6919] netlink: 24 bytes leftover after parsing attributes in process `syz.4.402'. [ 135.923352][ T6924] kernel read not supported for file /file0 (pid: 6924 comm: syz.0.405) [ 135.936971][ T31] audit: type=1800 audit(1791307172.378:422): pid=6924 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.405" name="file0" dev="mqueue" ino=17135 res=0 errno=0 [ 135.941162][ T990] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 135.960916][ T990] usb 4-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 136.001894][ T6926] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 136.003165][ T6926] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 136.011998][ T6926] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 136.012412][ T6926] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 136.158115][ T990] usb 4-1: USB disconnect, device number 18 [ 136.181297][ T6935] netlink: 24 bytes leftover after parsing attributes in process `syz.4.409'. [ 136.240496][ T5629] udevd[5629]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 136.243018][ T6926] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 136.243491][ T6926] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 136.261019][ T6926] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 136.263238][ T6926] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 136.364643][ T10] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 136.485752][ T6926] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 136.486166][ T6926] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 136.524773][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 136.525525][ T10] usb 2-1: New USB device found, idVendor=1b1c, idProduct=1c09, bcdDevice= 0.00 [ 136.526868][ T10] usb 2-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 136.526903][ T10] usb 2-1: config 0 interface 0 altsetting 128 endpoint 0x2 has invalid wMaxPacketSize 0 [ 136.526933][ T10] usb 2-1: config 0 interface 0 has no altsetting 0 [ 136.526967][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.530516][ T10] usb 2-1: config 0 descriptor?? [ 136.703327][ T6945] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 136.737031][ T9] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 136.894766][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 136.895665][ T9] usb 5-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 136.900099][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.900115][ T9] usb 5-1: Product: syz [ 136.900122][ T9] usb 5-1: Manufacturer: syz [ 136.900130][ T9] usb 5-1: SerialNumber: syz [ 136.941714][ T9] usb 5-1: config 0 descriptor?? [ 136.956186][ T6931] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 136.956509][ T9] gspca_main: sq930x-2.14.0 probing 2770:930c [ 136.960844][ T6931] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 136.966987][ T5681] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 137.085983][ T6947] loop9: detected capacity change from 0 to 7 [ 137.103895][ T6947] Dev loop9: unable to read RDB block 7 [ 137.103940][ T6947] loop9: unable to read partition table [ 137.104133][ T6947] loop9: partition table beyond EOD, truncated [ 137.104165][ T6947] loop_reread_partitions: partition scan of loop9 (被x ) failed (rc=-5) [ 137.116020][ T5681] usb 4-1: Using ep0 maxpacket: 8 [ 137.119061][ T5681] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 137.121770][ T5681] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.141373][ T5681] pvrusb2: Hardware description: Terratec Grabster AV400 [ 137.141396][ T5681] pvrusb2: ********** [ 137.141405][ T5681] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 137.141416][ T5681] pvrusb2: Important functionality might not be entirely working. [ 137.141426][ T5681] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 137.141437][ T5681] pvrusb2: ********** [ 137.163282][ T6947] lo: entered promiscuous mode [ 137.163985][ T6947] tunl0: entered promiscuous mode [ 137.218700][ T10] usbhid 2-1:0.0: can't add hid device: -71 [ 137.218835][ T10] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 137.221516][ T6947] gre0: entered promiscuous mode [ 137.256773][ T10] usb 2-1: USB disconnect, device number 11 [ 137.321788][ T6947] gretap0: entered promiscuous mode [ 137.369980][ T6947] erspan0: entered promiscuous mode [ 137.397815][ T6947] ip_vti0: entered promiscuous mode [ 137.434282][ T6947] ip6_vti0: entered promiscuous mode [ 137.444266][ T6947] sit0: entered promiscuous mode [ 137.503113][ T6947] ip6tnl0: entered promiscuous mode [ 137.508382][ T2357] pvrusb2: Invalid write control endpoint [ 137.528260][ T6947] ip6gre0: entered promiscuous mode [ 137.559912][ T6947] syz_tun: entered promiscuous mode [ 137.601854][ T6947] ip6gretap0: entered promiscuous mode [ 137.638172][ T6947] bridge0: entered promiscuous mode [ 137.638985][ T6951] tipc: Started in network mode [ 137.639013][ T6951] tipc: Node identity ac14140f, cluster identity 4711 [ 137.653788][ T6951] tipc: Enabled bearer , priority 10 [ 137.860877][ T2357] pvrusb2: Invalid write control endpoint [ 137.860902][ T2357] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 137.860908][ T2357] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 137.860913][ T2357] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 137.860919][ T2357] pvrusb2: Device being rendered inoperable [ 137.917679][ T2357] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 137.917796][ T2357] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 137.948092][ T2357] pvrusb2: Attached sub-driver cx25840 [ 137.948121][ T2357] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 137.948131][ T2357] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 137.986099][ T5754] usb 3-1: USB disconnect, device number 17 [ 137.999713][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 138.074629][ T9] gspca_sq930x: reg_w 0305 fd00 failed -110 [ 138.115189][ T5754] dvb-usb: Terratec Cinergy DT USB XS Diversity/ T successfully deinitialized and disconnected. [ 138.141384][ T5695] usb 4-1: USB disconnect, device number 19 [ 138.207920][ T6967] FAULT_INJECTION: forcing a failure. [ 138.207920][ T6967] name failslab, interval 1, probability 0, space 0, times 0 [ 138.207959][ T6967] CPU: 0 UID: 0 PID: 6967 Comm: syz.1.419 Tainted: G L syzkaller #0 PREEMPT(full) [ 138.207983][ T6967] Tainted: [L]=SOFTLOCKUP [ 138.207990][ T6967] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 138.208001][ T6967] Call Trace: [ 138.208008][ T6967] [ 138.208015][ T6967] dump_stack_lvl+0xe8/0x150 [ 138.208044][ T6967] should_fail_ex+0x410/0x560 [ 138.208070][ T6967] should_failslab+0xa8/0x100 [ 138.208095][ T6967] __kvmalloc_node_noprof+0x176/0x820 [ 138.208113][ T6967] ? __kvmalloc_node_noprof+0x345/0x820 [ 138.208129][ T6967] ? bpf_check_cfg+0x1ad/0x3840 [ 138.208144][ T6967] ? bpf_check_cfg+0x1ad/0x3840 [ 138.208164][ T6967] bpf_check_cfg+0x1ad/0x3840 [ 138.208187][ T6967] ? lock_acquire+0x115/0x350 [ 138.208212][ T6967] ? __fget_files+0x2a/0x420 [ 138.208242][ T6967] ? __pfx_bpf_check_cfg+0x10/0x10 [ 138.208266][ T6967] ? fput+0xa0/0xd0 [ 138.208289][ T6967] ? add_used_map+0xff/0x110 [ 138.208312][ T6967] ? check_and_resolve_insns+0x1d54/0x21d0 [ 138.208339][ T6967] ? __pfx_check_and_resolve_insns+0x10/0x10 [ 138.208361][ T6967] ? add_kfuncs+0x251/0x2e0 [ 138.208385][ T6967] bpf_check+0x25fd/0x2ef0 [ 138.208418][ T6967] ? __pfx_bpf_check+0x10/0x10 [ 138.208437][ T6967] ? bpf_obj_name_cpy+0x194/0x1e0 [ 138.208467][ T6967] bpf_prog_load+0x14d6/0x1c20 [ 138.208496][ T6967] ? __pfx_bpf_prog_load+0x10/0x10 [ 138.208539][ T6967] __sys_bpf+0xd0d/0xd90 [ 138.208567][ T6967] ? __pfx___sys_bpf+0x10/0x10 [ 138.208585][ T6967] ? ksys_write+0x1e6/0x270 [ 138.208603][ T6967] ? __mutex_unlock_slowpath+0x731/0x900 [ 138.208639][ T6967] ? fput+0xa0/0xd0 [ 138.208658][ T6967] ? ksys_write+0x242/0x270 [ 138.208678][ T6967] __ia32_sys_bpf+0xba/0xd0 [ 138.208698][ T6967] __do_fast_syscall_32+0x27a/0x6b0 [ 138.208716][ T6967] ? do_fast_syscall_32+0x33/0x70 [ 138.208739][ T6967] ? asm_int80_emulation+0x1a/0x20 [ 138.208755][ T6967] ? do_int80_emulation+0x299/0x500 [ 138.208779][ T6967] ? trace_irq_disable+0x3b/0x140 [ 138.208799][ T6967] do_fast_syscall_32+0x33/0x70 [ 138.208823][ T6967] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 138.208843][ T6967] RIP: 0023:0xf7f280ec [ 138.208860][ T6967] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 138.208876][ T6967] RSP: 002b:00000000f53d650c EFLAGS: 00000206 ORIG_RAX: 0000000000000165 [ 138.208894][ T6967] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000300 [ 138.208915][ T6967] RDX: 0000000000000094 RSI: 0000000000000000 RDI: 0000000000000000 [ 138.208925][ T6967] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 138.208936][ T6967] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 138.208947][ T6967] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 138.208971][ T6967] [ 138.306445][ T9] gspca_sq930x: Sensor ov9630 not yet treated [ 138.306535][ T9] sq930x 5-1:0.0: probe with driver sq930x failed with error -22 [ 138.754216][ T10] hid-generic 0000:0000:0004.0004: unknown main item tag 0x0 [ 138.754253][ T10] hid-generic 0000:0000:0004.0004: unknown main item tag 0x0 [ 138.754281][ T10] hid-generic 0000:0000:0004.0004: unknown main item tag 0x0 [ 138.754307][ T10] hid-generic 0000:0000:0004.0004: unknown main item tag 0x0 [ 138.754333][ T10] hid-generic 0000:0000:0004.0004: unknown main item tag 0x0 [ 138.754359][ T10] hid-generic 0000:0000:0004.0004: unknown main item tag 0x0 [ 138.763318][ T5695] tipc: Node number set to 2886997007 [ 138.771344][ T10] hid-generic 0000:0000:0004.0004: unknown main item tag 0x0 [ 138.771378][ T10] hid-generic 0000:0000:0004.0004: unknown main item tag 0x0 [ 138.771405][ T10] hid-generic 0000:0000:0004.0004: unknown main item tag 0x0 [ 138.771431][ T10] hid-generic 0000:0000:0004.0004: unknown main item tag 0x0 [ 138.843250][ T10] hid-generic 0000:0000:0004.0004: hidraw0: HID v0.03 Device [syz1] on syz0 [ 138.878035][ T9] logitech-hidpp-device 0005:046D:B012.0003: hidraw0: BLUETOOTH HID v0.00 Device [syz0] on syz1 [ 138.951982][ T6982] : renamed from macvlan0 (while UP) [ 138.971913][ T6980] fido_id[6980]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 139.077373][ T6985] fido_id[6985]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 139.214756][ T5695] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 139.276416][ T30] usb 5-1: USB disconnect, device number 14 [ 139.364725][ T5695] usb 3-1: Using ep0 maxpacket: 16 [ 139.365450][ T5695] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 139.366270][ T5695] usb 3-1: config 0 has an invalid interface number: 8 but max is 0 [ 139.366290][ T5695] usb 3-1: config 0 has no interface number 0 [ 139.366313][ T5695] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 139.366326][ T5695] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 139.367766][ T5695] usb 3-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 139.367782][ T5695] usb 3-1: Product: syz [ 139.367790][ T5695] usb 3-1: SerialNumber: syz [ 139.371646][ T5695] usb 3-1: config 0 descriptor?? [ 139.379117][ T5695] cm109 3-1:0.8: invalid payload size 0, expected 4 [ 139.381989][ T5695] input: CM109 USB driver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.8/input/input14 [ 139.456880][ T5754] usb 2-1: new full-speed USB device number 12 using dummy_hcd [ 139.607589][ T5754] usb 2-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 139.608720][ T5754] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 139.608738][ T5754] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 139.608768][ T5754] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 139.626198][ T5754] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.626227][ T5754] usb 2-1: Product: syz [ 139.626265][ T5754] usb 2-1: Manufacturer: syz [ 139.626279][ T5754] usb 2-1: SerialNumber: syz [ 139.635695][ T5754] usb 2-1: config 0 descriptor?? [ 139.645283][ T6988] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 139.770273][ C1] cm109_urb_ctl_callback: 25 callbacks suppressed [ 139.770303][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 139.770515][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 139.770724][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 139.770929][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 139.771136][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 139.771342][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 139.771608][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 139.771841][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 139.772084][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 139.772283][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 139.772352][ T30] usb 3-1: USB disconnect, device number 18 [ 139.774999][ C1] cm109 3-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 139.851073][ T30] cm109 3-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 139.875114][ T5754] rc_core: IR keymap rc-streamzap not found [ 139.875132][ T5754] Registered IR keymap rc-empty [ 139.883564][ T5754] rc rc0: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 139.887108][ T6988] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 139.887530][ T6988] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 139.944334][ T5754] input: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input15 [ 139.970214][ T5754] usb 2-1: USB disconnect, device number 12 [ 140.072378][ T7010] FAULT_INJECTION: forcing a failure. [ 140.072378][ T7010] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 140.072402][ T7010] CPU: 0 UID: 0 PID: 7010 Comm: syz.3.435 Tainted: G L syzkaller #0 PREEMPT(full) [ 140.072416][ T7010] Tainted: [L]=SOFTLOCKUP [ 140.072420][ T7010] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 140.072427][ T7010] Call Trace: [ 140.072432][ T7010] [ 140.072437][ T7010] dump_stack_lvl+0xe8/0x150 [ 140.072457][ T7010] should_fail_ex+0x410/0x560 [ 140.072473][ T7010] strncpy_from_user+0x36/0x2c0 [ 140.072487][ T7010] do_getname+0x77/0x250 [ 140.072503][ T7010] do_sys_openat2+0xcc/0x200 [ 140.072518][ T7010] ? __pfx_do_sys_openat2+0x10/0x10 [ 140.072537][ T7010] __se_sys_openat2+0x223/0x2d0 [ 140.072551][ T7010] ? fput+0xa0/0xd0 [ 140.072564][ T7010] ? __pfx___se_sys_openat2+0x10/0x10 [ 140.072577][ T7010] ? ksys_write+0x242/0x270 [ 140.072592][ T7010] __do_fast_syscall_32+0x27a/0x6b0 [ 140.072603][ T7010] ? do_fast_syscall_32+0x33/0x70 [ 140.072618][ T7010] ? asm_int80_emulation+0x1a/0x20 [ 140.072628][ T7010] ? do_int80_emulation+0x299/0x500 [ 140.072643][ T7010] ? trace_irq_disable+0x3b/0x140 [ 140.072656][ T7010] do_fast_syscall_32+0x33/0x70 [ 140.072671][ T7010] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 140.072684][ T7010] RIP: 0023:0xf746f0ec [ 140.072694][ T7010] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 140.072704][ T7010] RSP: 002b:00000000f548650c EFLAGS: 00000206 ORIG_RAX: 00000000000001b5 [ 140.072716][ T7010] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000080000000 [ 140.072723][ T7010] RDX: 00000000800000c0 RSI: 0000000000000018 RDI: 0000000000000000 [ 140.072730][ T7010] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 140.072736][ T7010] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 140.072742][ T7010] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 140.072756][ T7010] [ 140.210079][ T7013] netlink: 8 bytes leftover after parsing attributes in process `syz.3.436'. [ 140.210106][ T7013] netlink: 8 bytes leftover after parsing attributes in process `syz.3.436'. [ 140.216267][ T9] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 140.355779][ T7016] 8021q: adding VLAN 0 to HW filter on device bond1 [ 140.397105][ T9] usb 5-1: unable to get BOS descriptor or descriptor too short [ 140.397158][ T9] usb 5-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice=61.9f [ 140.398109][ T9] usb 5-1: config 189 has an invalid interface number: 127 but max is 0 [ 140.398134][ T9] usb 5-1: config 189 has no interface number 0 [ 140.398175][ T9] usb 5-1: config 189 interface 127 has no altsetting 0 [ 140.400080][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.400104][ T9] usb 5-1: Product: syz [ 140.400118][ T9] usb 5-1: Manufacturer: syz [ 140.400133][ T9] usb 5-1: SerialNumber: syz [ 140.794684][ T10] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 140.898241][ T7032] mmap: syz.0.442 (7032) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 140.966913][ T10] usb 4-1: New USB device found, idVendor=046d, idProduct=c71c, bcdDevice= 0.00 [ 140.968396][ T10] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 140.968440][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 140.968490][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 140.968512][ T10] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 140.968967][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.973926][ T10] usb 4-1: config 0 descriptor?? [ 140.994767][ T5754] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 141.186316][ T5754] usb 2-1: Using ep0 maxpacket: 8 [ 141.190814][ T5754] usb 2-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 141.213800][ T9] usbserial_generic 5-1:189.127: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 141.213826][ T9] usbserial_generic 5-1:189.127: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 141.213889][ T9] usbserial_generic 5-1:189.127: generic converter detected [ 141.217042][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 141.280007][ T9] usb 5-1: generic converter now attached to ttyUSB0 [ 141.295231][ T9] usb 5-1: USB disconnect, device number 15 [ 141.304405][ T5754] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.304434][ T5754] usb 2-1: Product: syz [ 141.304450][ T5754] usb 2-1: Manufacturer: syz [ 141.304465][ T5754] usb 2-1: SerialNumber: syz [ 141.321140][ T9] generic ttyUSB0: generic converter now disconnected from ttyUSB0 [ 141.323053][ T5754] usb 2-1: config 0 descriptor?? [ 141.357378][ T9] usbserial_generic 5-1:189.127: device disconnected [ 141.387272][ T5754] gspca_main: sq930x-2.14.0 probing 2770:930c [ 141.495624][ T10] logitech-djreceiver 0003:046D:C71C.0005: hidraw0: USB HID v1.00 Device [HID 046d:c71c] on usb-dummy_hcd.3-1/input0 [ 141.679192][ T7023] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 141.679703][ T7023] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 142.139078][ T10] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 142.295543][ T10] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 142.296663][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.329884][ T10] usb 5-1: config 0 descriptor?? [ 142.384702][ T5754] gspca_sq930x: reg_w 0305 fd00 failed -110 [ 142.604707][ T5754] gspca_sq930x: Sensor ov9630 not yet treated [ 142.604789][ T5754] sq930x 2-1:0.0: probe with driver sq930x failed with error -22 [ 142.744305][ T10] udl 5-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 142.752827][ T10] [drm:udl_init] *ERROR* Selecting channel failed [ 142.764017][ T5621] usb 4-1: reset high-speed USB device number 20 using dummy_hcd [ 142.805624][ T10] [drm] Initialized udl 0.0.1 for 5-1:0.0 on minor 1 [ 142.805650][ T10] [drm] Initialized udl on minor 1 [ 142.813058][ T10] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 142.841271][ T189] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 142.852666][ T10] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 142.886063][ T10] usb 5-1: USB disconnect, device number 16 [ 142.898307][ T189] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 143.054962][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 143.607950][ T9] usb 4-1: USB disconnect, device number 20 [ 143.638699][ T5621] usb 2-1: USB disconnect, device number 13 [ 143.655761][ T30] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 143.759392][ T7078] kAFS: unable to lookup cell '(G' [ 143.788613][ T7078] kAFS: unable to lookup cell '(G' [ 143.806363][ T30] usb 5-1: New USB device found, idVendor=045a, idProduct=5210, bcdDevice= 1.01 [ 143.824216][ T30] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.824243][ T30] usb 5-1: Product: syz [ 143.824258][ T30] usb 5-1: Manufacturer: syz [ 143.824272][ T30] usb 5-1: SerialNumber: syz [ 143.835275][ T30] ums-karma 5-1:1.0: USB Mass Storage device detected [ 143.853870][ T30] ums-karma 5-1:1.0: This device (045a,5210,0101 S 06 P f5) has unneeded SubClass and Protocol entries in unusual_devs.h (kernel syzkaller) [ 143.853870][ T30] Please send a copy of this message to and [ 143.854522][ T7083] FAULT_INJECTION: forcing a failure. [ 143.854522][ T7083] name failslab, interval 1, probability 0, space 0, times 0 [ 143.894063][ T7083] CPU: 0 UID: 0 PID: 7083 Comm: syz.3.458 Tainted: G L syzkaller #0 PREEMPT(full) [ 143.894095][ T7083] Tainted: [L]=SOFTLOCKUP [ 143.894102][ T7083] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 143.894114][ T7083] Call Trace: [ 143.894123][ T7083] [ 143.894132][ T7083] dump_stack_lvl+0xe8/0x150 [ 143.894164][ T7083] should_fail_ex+0x410/0x560 [ 143.894194][ T7083] should_failslab+0xa8/0x100 [ 143.894222][ T7083] __kmalloc_cache_noprof+0xa3/0x600 [ 143.894244][ T7083] ? __kmalloc_cache_noprof+0x14d/0x600 [ 143.894264][ T7083] ? sctp_add_bind_addr+0x8c/0x370 [ 143.894285][ T7083] ? sctp_add_bind_addr+0x8c/0x370 [ 143.894312][ T7083] sctp_add_bind_addr+0x8c/0x370 [ 143.894337][ T7083] sctp_copy_local_addr_list+0x31a/0x4e0 [ 143.894374][ T7083] ? sctp_copy_local_addr_list+0xa3/0x4e0 [ 143.894396][ T7083] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 143.894422][ T7083] ? sctp_v4_is_any+0x35/0x60 [ 143.894444][ T7083] ? sctp_copy_one_addr+0x93/0x360 [ 143.894468][ T7083] sctp_bind_addr_copy+0xb3/0x3c0 [ 143.894491][ T7083] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 143.894525][ T7083] sctp_connect_new_asoc+0x2ff/0x6b0 [ 143.894551][ T7083] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 143.894581][ T7083] ? sctp_endpoint_lookup_assoc+0xd1/0x260 [ 143.894610][ T7083] __sctp_connect+0x5cb/0xdc0 [ 143.894647][ T7083] ? __pfx___sctp_connect+0x10/0x10 [ 143.894671][ T7083] ? sctp_inet_connect+0xa0/0x210 [ 143.894696][ T7083] ? __local_bh_enable_ip+0xd6/0x140 [ 143.894727][ T7083] sctp_inet_connect+0x12e/0x210 [ 143.894754][ T7083] __sys_connect+0x316/0x450 [ 143.894784][ T7083] ? __pfx___sys_connect+0x10/0x10 [ 143.894831][ T7083] __ia32_sys_connect+0x7a/0x90 [ 143.894857][ T7083] __do_fast_syscall_32+0x27a/0x6b0 [ 143.894877][ T7083] ? do_fast_syscall_32+0x33/0x70 [ 143.894906][ T7083] ? asm_int80_emulation+0x1a/0x20 [ 143.894926][ T7083] ? do_int80_emulation+0x299/0x500 [ 143.894954][ T7083] ? trace_irq_disable+0x3b/0x140 [ 143.894980][ T7083] do_fast_syscall_32+0x33/0x70 [ 143.895009][ T7083] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 143.895033][ T7083] RIP: 0023:0xf746f0ec [ 143.895052][ T7083] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 143.895068][ T7083] RSP: 002b:00000000f548650c EFLAGS: 00000206 ORIG_RAX: 000000000000016a [ 143.895090][ T7083] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000300 [ 143.895104][ T7083] RDX: 0000000000000010 RSI: 0000000000000000 RDI: 0000000000000000 [ 143.895116][ T7083] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 143.895128][ T7083] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 143.895140][ T7083] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 143.895169][ T7083] [ 144.085098][ T7067] netlink: 20 bytes leftover after parsing attributes in process `syz.4.452'. [ 144.095155][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 144.106634][ T7067] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 144.110917][ T7067] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 144.161763][ T7090] netlink: 8 bytes leftover after parsing attributes in process `syz.2.461'. [ 144.239344][ T30] ums-karma 5-1:1.0: probe with driver ums-karma failed with error -5 [ 144.259888][ T30] usb 5-1: USB disconnect, device number 17 [ 144.368507][ T7093] netlink: 8 bytes leftover after parsing attributes in process `syz.1.462'. [ 144.368536][ T7093] netlink: 8 bytes leftover after parsing attributes in process `syz.1.462'. [ 144.466170][ T7101] netlink: 8 bytes leftover after parsing attributes in process `syz.2.465'. [ 144.472822][ T7101] ip6tnl1: entered allmulticast mode [ 144.594905][ T7108] ip6_vti0: left promiscuous mode [ 144.600862][ T7108] netlink: 4 bytes leftover after parsing attributes in process `syz.0.469'. [ 144.843162][ T31] audit: type=1326 audit(1791307181.278:423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7115 comm="syz.0.471" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ef0ec code=0x7ffc0000 [ 144.869156][ T31] audit: type=1326 audit(1791307181.278:424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7115 comm="syz.0.471" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ef0ec code=0x7ffc0000 [ 144.869191][ T31] audit: type=1326 audit(1791307181.278:425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7115 comm="syz.0.471" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=386 compat=1 ip=0xf73ef0ec code=0x7ffc0000 [ 144.869212][ T31] audit: type=1326 audit(1791307181.278:426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7115 comm="syz.0.471" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ef0ec code=0x7ffc0000 [ 144.869233][ T31] audit: type=1326 audit(1791307181.288:427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7115 comm="syz.0.471" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ef0ec code=0x7ffc0000 [ 144.869607][ T31] audit: type=1326 audit(1791307181.308:428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7115 comm="syz.0.471" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf73ef0ec code=0x7ffc0000 [ 144.966176][ T31] audit: type=1326 audit(1791307181.328:429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7115 comm="syz.0.471" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ef0ec code=0x7ffc0000 [ 144.966231][ T31] audit: type=1326 audit(1791307181.398:430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7115 comm="syz.0.471" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf73ef0ec code=0x7ffc0000 [ 144.966268][ T31] audit: type=1326 audit(1791307181.398:431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7115 comm="syz.0.471" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ef0ec code=0x7ffc0000 [ 144.966304][ T31] audit: type=1326 audit(1791307181.398:432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7115 comm="syz.0.471" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ef0ec code=0x7ffc0000 [ 145.134805][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 145.139446][ T7116] netlink: 8 bytes leftover after parsing attributes in process `syz.0.471'. [ 145.139465][ T7116] netlink: 8 bytes leftover after parsing attributes in process `syz.0.471'. [ 145.342800][ T7129] syzkaller0: entered promiscuous mode [ 145.342816][ T7129] syzkaller0: entered allmulticast mode [ 145.368904][ T7129] tipc: Enabled bearer , priority 0 [ 145.402085][ T7129] syzkaller0: mtu less than device minimum [ 145.497048][ T7135] netlink: 8 bytes leftover after parsing attributes in process `syz.3.478'. [ 145.497083][ T7135] netlink: 8 bytes leftover after parsing attributes in process `syz.3.478'. [ 145.514943][ T30] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 145.664905][ T30] usb 3-1: Using ep0 maxpacket: 8 [ 145.665877][ T30] usb 3-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 145.691182][ T30] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.691199][ T30] usb 3-1: Product: syz [ 145.691207][ T30] usb 3-1: Manufacturer: syz [ 145.691215][ T30] usb 3-1: SerialNumber: syz [ 145.694854][ C1] bridge0: port 2(bridge_slave_1) entered forwarding state [ 145.694876][ C1] bridge0: topology change detected, propagating [ 145.695181][ C1] bridge0: port 1(bridge_slave_0) entered forwarding state [ 145.695196][ C1] bridge0: topology change detected, propagating [ 145.706976][ T30] usb 3-1: config 0 descriptor?? [ 145.769411][ T30] gspca_main: sq930x-2.14.0 probing 2770:930c [ 145.786944][ T5754] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 145.943161][ T5754] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 145.946104][ T5754] usb 5-1: config 0 has an invalid interface number: 50 but max is 0 [ 145.946135][ T5754] usb 5-1: config 0 has no interface number 0 [ 145.946194][ T5754] usb 5-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 145.951349][ T5754] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.951374][ T5754] usb 5-1: Product: syz [ 145.951387][ T5754] usb 5-1: Manufacturer: syz [ 145.951401][ T5754] usb 5-1: SerialNumber: syz [ 145.959828][ T5754] usb 5-1: config 0 descriptor?? [ 146.012946][ T5754] yurex 5-1:0.50: USB YUREX device now attached to Yurex #0 [ 146.431380][ T7153] lo: left promiscuous mode [ 146.449120][ T7153] tunl0: left promiscuous mode [ 146.454089][ T7153] gre0: left promiscuous mode [ 146.608256][ T7154] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 146.613793][ T7154] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 146.675249][ T7153] gretap0: left promiscuous mode [ 146.680816][ T7153] erspan0: left promiscuous mode [ 146.703506][ T7153] ip_vti0: left promiscuous mode [ 146.721136][ T7153] sit0: left promiscuous mode [ 146.781110][ T7153] ip6tnl0: left promiscuous mode [ 146.782817][ T7153] ip6gre0: left promiscuous mode [ 146.797012][ T7153] syz_tun: left promiscuous mode [ 146.801095][ T7153] ip6gretap0: left promiscuous mode [ 146.806415][ T7153] bridge0: port 2(bridge_slave_1) entered blocking state [ 146.806510][ T7153] bridge0: port 2(bridge_slave_1) entered listening state [ 146.806736][ T7153] bridge0: port 1(bridge_slave_0) entered blocking state [ 146.806814][ T7153] bridge0: port 1(bridge_slave_0) entered listening state [ 146.834920][ T30] gspca_sq930x: reg_w 0305 fd00 failed -110 [ 146.855107][ T7153] bridge0: left promiscuous mode [ 146.924902][ T25] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 146.983278][ T5754] tipc: Node number set to 1649496358 [ 147.055065][ T30] gspca_sq930x: Sensor ov9630 not yet treated [ 147.055137][ T30] sq930x 3-1:0.0: probe with driver sq930x failed with error -22 [ 147.077591][ T25] usb 4-1: New USB device found, idVendor=0c72, idProduct=0012, bcdDevice=22.96 [ 147.088900][ T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.088949][ T25] usb 4-1: Product: syz [ 147.088964][ T25] usb 4-1: Manufacturer: syz [ 147.088978][ T25] usb 4-1: SerialNumber: syz [ 147.104288][ T25] usb 4-1: config 0 descriptor?? [ 147.114354][ T7163] binder: 7162:7163 ioctl c018620c 80000000 returned -22 [ 147.402368][ T25] peak_usb 4-1:0.0 can0: unable to request usb[type=0 value=1] err=-71 [ 147.402389][ T25] peak_usb 4-1:0.0: unable to read PCAN-USB FD firmware info (err -71) [ 147.522710][ T25] peak_usb 4-1:0.0: probe with driver peak_usb failed with error -71 [ 147.534398][ T25] usb 4-1: USB disconnect, device number 21 [ 147.931310][ T7174] netlink: 8 bytes leftover after parsing attributes in process `syz.3.490'. [ 148.430856][ T10] usb 5-1: USB disconnect, device number 18 [ 148.444873][ T10] yurex 5-1:0.50: USB YUREX #0 now disconnected [ 148.753516][ T5732] usb 3-1: USB disconnect, device number 19 [ 148.849170][ T7185] netlink: 8 bytes leftover after parsing attributes in process `syz.2.492'. [ 148.849286][ T7185] netlink: 8 bytes leftover after parsing attributes in process `syz.2.492'. [ 149.017617][ T7192] syzkaller0: left promiscuous mode [ 149.017642][ T7192] syzkaller0: left allmulticast mode [ 149.064996][ T1788] usb 2-1: new full-speed USB device number 14 using dummy_hcd [ 149.141353][ T7198] netlink: 4 bytes leftover after parsing attributes in process `syz.3.497'. [ 149.215636][ T1788] usb 2-1: not running at top speed; connect to a high speed hub [ 149.215662][ T1788] usb 2-1: New USB device found, idVendor=0ccd, idProduct=10a1, bcdDevice= a.e0 [ 149.216493][ T1788] usb 2-1: config 8 has an invalid interface number: 44 but max is 0 [ 149.216511][ T1788] usb 2-1: config 8 has no interface number 0 [ 149.216527][ T1788] usb 2-1: config 8 interface 44 has no altsetting 0 [ 149.218836][ T1788] usb 2-1: string descriptor 0 read error: -22 [ 149.219126][ T1788] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.433788][ T1788] dvb-usb: found a 'Terratec Cinergy DT USB XS Diversity/ T5' in warm state. [ 149.474351][ T7205] dummy0: left promiscuous mode [ 149.476337][ T1788] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 149.485389][ T1788] dvbdev: DVB: registering new adapter (Terratec Cinergy DT USB XS Diversity/ T5) [ 149.485441][ T1788] usb 2-1: media controller created [ 149.507829][ T1788] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 149.567735][ T7205] virt_wifi0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 149.728256][ T1788] DVB: Unable to find symbol dib7000p_attach() [ 149.728270][ T1788] dvb-usb: no frontend was attached by 'Terratec Cinergy DT USB XS Diversity/ T5' [ 149.728279][ T1788] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 149.729068][ T1788] dvbdev: DVB: registering new adapter (Terratec Cinergy DT USB XS Diversity/ T5) [ 149.729131][ T1788] usb 2-1: media controller created [ 149.736545][ T1788] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 149.845708][ T60] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 149.846537][ T60] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 149.846712][ T60] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 149.846878][ T60] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 149.927158][ T1788] DVB: Unable to find symbol dib7000p_attach() [ 149.927177][ T1788] dvb-usb: no frontend was attached by 'Terratec Cinergy DT USB XS Diversity/ T5' [ 150.035622][ T1788] rc_core: IR keymap rc-dib0700-rc5 not found [ 150.035642][ T1788] Registered IR keymap rc-empty [ 150.035907][ T1788] dvb-usb: could not initialize remote control. [ 150.035916][ T1788] dvb-usb: Terratec Cinergy DT USB XS Diversity/ T5 successfully initialized and connected. [ 150.345248][ T7187] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 150.345845][ T7187] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 150.348344][ T7187] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 150.348785][ T7187] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 150.465019][ T1788] usb 5-1: new full-speed USB device number 19 using dummy_hcd [ 150.550700][ T7187] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 150.551169][ T7187] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 150.553823][ T7187] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 150.580583][ T7187] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 150.594663][ T1788] usb 5-1: device descriptor read/64, error -71 [ 150.784404][ T7187] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 150.797678][ T7187] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 150.834813][ T1788] usb 5-1: new full-speed USB device number 20 using dummy_hcd [ 150.886673][ T7223] ip6tnl1: left allmulticast mode [ 150.946848][ T318] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 150.947415][ T318] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 150.947438][ T318] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 150.947458][ T318] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 150.971901][ T1788] usb 5-1: device descriptor read/64, error -71 [ 151.074982][ T1788] usb usb5-port1: attempt power cycle [ 151.225647][ T5754] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 151.369665][ T7234] netlink: 24 bytes leftover after parsing attributes in process `syz.0.507'. [ 151.375554][ T5754] usb 4-1: Using ep0 maxpacket: 8 [ 151.376238][ T5754] usb 4-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 151.408246][ T5754] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.408263][ T5754] usb 4-1: Product: syz [ 151.408271][ T5754] usb 4-1: Manufacturer: syz [ 151.408279][ T5754] usb 4-1: SerialNumber: syz [ 151.411669][ T5754] usb 4-1: config 0 descriptor?? [ 151.434682][ T1788] usb 5-1: new full-speed USB device number 21 using dummy_hcd [ 151.456350][ T1788] usb 5-1: device descriptor read/8, error -71 [ 151.483202][ T5754] gspca_main: sq930x-2.14.0 probing 2770:930c [ 151.695418][ T1788] usb 5-1: new full-speed USB device number 22 using dummy_hcd [ 151.716576][ T1788] usb 5-1: device descriptor read/8, error -71 [ 151.824921][ T1788] usb usb5-port1: unable to enumerate USB device [ 151.893438][ T30] usb 2-1: USB disconnect, device number 14 [ 151.957754][ T30] dvb-usb: Terratec Cinergy DT USB XS Diversity/ T successfully deinitialized and disconnected. [ 152.244859][ T9] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 152.404715][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 152.405453][ T9] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 152.406712][ T9] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 152.406742][ T9] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 152.406767][ T9] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 152.406789][ T9] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 152.406827][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.507531][ T5754] gspca_sq930x: reg_w 0305 fd00 failed -110 [ 152.703896][ T9] usb 1-1: GET_CAPABILITIES returned 0 [ 152.703926][ T9] usbtmc 1-1:16.0: can't read capabilities [ 152.725385][ T5754] gspca_sq930x: Sensor ov9630 not yet treated [ 152.725464][ T5754] sq930x 4-1:0.0: probe with driver sq930x failed with error -22 [ 152.982545][ C0] usbtmc 1-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 153.188088][ T31] kauditd_printk_skb: 66 callbacks suppressed [ 153.188103][ T31] audit: type=1804 audit(1791307189.618:499): pid=7257 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.517" name="bus" dev="ramfs" ino=18265 res=1 errno=0 [ 153.199239][ T31] audit: type=1804 audit(1791307189.638:500): pid=7257 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.517" name="bus" dev="ramfs" ino=18265 res=1 errno=0 [ 153.359158][ T7261] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 153.359560][ T7261] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 153.675046][ T9] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 153.678958][ T7268] openvswitch: netlink: nsh attr 109 is out of range max 3 [ 153.804764][ T9] usb 5-1: device descriptor read/64, error -71 [ 153.824684][ T5732] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 153.975453][ T5732] usb 2-1: New USB device found, idVendor=04e6, idProduct=0005, bcdDevice= 1.00 [ 153.976495][ T5732] usb 2-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 153.978824][ T5732] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.978840][ T5732] usb 2-1: Product: syz [ 153.978848][ T5732] usb 2-1: Manufacturer: syz [ 153.978856][ T5732] usb 2-1: SerialNumber: syz [ 154.031140][ T5732] ums-sddr09 2-1:1.0: USB Mass Storage device detected [ 154.043926][ T5732] ums-sddr09 2-1:1.0: This device (04e6,0005,0100 S 06 P 50) has an unneeded SubClass entry in unusual_devs.h (kernel syzkaller) [ 154.043926][ T5732] Please send a copy of this message to and [ 154.084851][ T9] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 154.234862][ T9] usb 5-1: device descriptor read/64, error -71 [ 154.348110][ T9] usb usb5-port1: attempt power cycle [ 154.580837][ T5754] usb 4-1: USB disconnect, device number 22 [ 154.669420][ T31] audit: type=1326 audit(1791307191.108:501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7282 comm="syz.3.521" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf746f0ec code=0x0 [ 154.705092][ T9] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 154.725713][ T9] usb 5-1: device descriptor read/8, error -71 [ 154.792158][ T7288] syzkaller1: entered allmulticast mode [ 154.975013][ T9] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 154.995945][ T9] usb 5-1: device descriptor read/8, error -71 [ 155.017450][ T5732] usb 1-1: USB disconnect, device number 17 [ 155.105933][ T9] usb usb5-port1: unable to enumerate USB device [ 155.194925][ T5754] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 155.345165][ T5754] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 155.346042][ T5754] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 155.346069][ T5754] usb 3-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 155.346088][ T5754] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 155.346129][ T5754] usb 3-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 155.346142][ T5754] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 155.346156][ T5754] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 155.347529][ T5754] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 155.347544][ T5754] usb 3-1: Product: syz [ 155.347552][ T5754] usb 3-1: Manufacturer: syz [ 155.350276][ T7287] raw-gadget.4 gadget.2: fail, usb_ep_enable returned -22 [ 155.352576][ T5754] cdc_wdm 3-1:1.0: skipping garbage [ 155.352594][ T5754] cdc_wdm 3-1:1.0: skipping garbage [ 155.472861][ T5754] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 155.472898][ T5754] cdc_wdm 3-1:1.0: Unknown control protocol [ 155.559519][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 155.559626][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 155.560159][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 155.560180][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 155.560365][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 155.560384][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 155.560601][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 155.560620][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 155.560836][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 155.560853][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 155.561052][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 155.561069][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 155.561257][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 155.561275][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 155.561488][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 155.561508][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 155.561705][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 155.561723][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 155.561918][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 155.561935][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 155.586987][ T5732] usb 3-1: USB disconnect, device number 20 [ 156.004643][ T5621] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 156.155220][ T5621] usb 4-1: New USB device found, idVendor=13d3, idProduct=3211, bcdDevice=7a.67 [ 156.158280][ T5621] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.158307][ T5621] usb 4-1: Product: syz [ 156.158321][ T5621] usb 4-1: Manufacturer: syz [ 156.158335][ T5621] usb 4-1: SerialNumber: syz [ 156.379933][ T7303] netlink: 12 bytes leftover after parsing attributes in process `syz.2.528'. [ 156.445422][ T7303] vlan2: entered allmulticast mode [ 156.445479][ T7303] bridge1: entered allmulticast mode [ 156.480165][ T7303] FAULT_INJECTION: forcing a failure. [ 156.480165][ T7303] name failslab, interval 1, probability 0, space 0, times 0 [ 156.480204][ T7303] CPU: 0 UID: 0 PID: 7303 Comm: syz.2.528 Tainted: G L syzkaller #0 PREEMPT(full) [ 156.480232][ T7303] Tainted: [L]=SOFTLOCKUP [ 156.480239][ T7303] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 156.480251][ T7303] Call Trace: [ 156.480259][ T7303] [ 156.480268][ T7303] dump_stack_lvl+0xe8/0x150 [ 156.480302][ T7303] should_fail_ex+0x410/0x560 [ 156.480332][ T7303] should_failslab+0xa8/0x100 [ 156.480360][ T7303] __kmalloc_cache_noprof+0xa3/0x600 [ 156.480384][ T7303] ? new_nbp+0x188/0x640 [ 156.480401][ T7303] ? new_nbp+0x188/0x640 [ 156.480425][ T7303] new_nbp+0x188/0x640 [ 156.480444][ T7303] ? mutex_is_locked+0x17/0x50 [ 156.480472][ T7303] br_add_if+0x279/0xeb0 [ 156.480496][ T7303] ? mutex_is_locked+0x17/0x50 [ 156.480523][ T7303] do_set_master+0x563/0x720 [ 156.480561][ T7303] do_setlink+0xe7b/0x4670 [ 156.480608][ T7303] ? __lock_acquire+0x747/0x2de0 [ 156.480630][ T7303] ? __pfx_do_setlink+0x10/0x10 [ 156.480670][ T7303] ? do_raw_spin_lock+0x12b/0x2f0 [ 156.480711][ T7303] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 156.480738][ T7303] ? __mutex_lock+0x1096/0x1550 [ 156.480760][ T7303] ? __mutex_lock+0x5d4/0x1550 [ 156.480776][ T7303] ? rtnl_newlink+0xc10/0x1c30 [ 156.480790][ T7303] ? __pfx___mutex_lock+0x10/0x10 [ 156.480813][ T7303] ? full_name_hash+0x92/0xe0 [ 156.480834][ T7303] rtnl_newlink+0x15a3/0x1c30 [ 156.480855][ T7303] ? __pfx_rtnl_newlink+0x10/0x10 [ 156.480868][ T7303] ? __do_fast_syscall_32+0x27a/0x6b0 [ 156.480896][ T7303] ? kasan_quarantine_put+0xbb/0x1f0 [ 156.480911][ T7303] ? lockdep_hardirqs_on+0x7b/0x110 [ 156.480933][ T7303] ? nlmon_xmit+0xb0/0x100 [ 156.480947][ T7303] ? kmem_cache_free+0x182/0x650 [ 156.480966][ T7303] ? __lock_acquire+0x747/0x2de0 [ 156.480981][ T7303] ? __local_bh_enable_ip+0xd6/0x140 [ 156.480995][ T7303] ? lockdep_hardirqs_on+0x7b/0x110 [ 156.481009][ T7303] ? __dev_queue_xmit+0x29b/0x3920 [ 156.481019][ T7303] ? __local_bh_enable_ip+0xd6/0x140 [ 156.481036][ T7303] ? lock_acquire+0x115/0x350 [ 156.481047][ T7303] ? __pfx_rtnl_newlink+0x10/0x10 [ 156.481067][ T7303] ? __pfx_rtnl_newlink+0x10/0x10 [ 156.481080][ T7303] rtnetlink_rcv_msg+0x802/0xc00 [ 156.481096][ T7303] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 156.481113][ T7303] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 156.481126][ T7303] ? ref_tracker_free+0x689/0x830 [ 156.481141][ T7303] ? __pfx_ref_tracker_free+0x10/0x10 [ 156.481159][ T7303] netlink_rcv_skb+0x226/0x4a0 [ 156.481172][ T7303] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 156.481187][ T7303] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 156.481204][ T7303] ? netlink_deliver_tap+0x2e/0x1b0 [ 156.481215][ T7303] ? netlink_deliver_tap+0x2e/0x1b0 [ 156.481229][ T7303] netlink_unicast+0x7bd/0x940 [ 156.481250][ T7303] netlink_sendmsg+0x813/0xb40 [ 156.481266][ T7303] ? __pfx_netlink_sendmsg+0x10/0x10 [ 156.481281][ T7303] ? apparmor_socket_sendmsg+0x98/0x360 [ 156.481296][ T7303] ? __pfx_netlink_sendmsg+0x10/0x10 [ 156.481307][ T7303] sock_sendmsg_nosec+0x13a/0x180 [ 156.481322][ T7303] ____sys_sendmsg+0x54e/0x850 [ 156.481339][ T7303] ? __pfx_____sys_sendmsg+0x10/0x10 [ 156.481362][ T7303] ___sys_sendmsg+0x2a5/0x360 [ 156.481377][ T7303] ? __lock_acquire+0x747/0x2de0 [ 156.481389][ T7303] ? __pfx____sys_sendmsg+0x10/0x10 [ 156.481404][ T7303] ? get_pid_task+0x20/0x1f0 [ 156.481414][ T7303] ? get_pid_task+0x20/0x1f0 [ 156.481423][ T7303] ? get_pid_task+0x20/0x1f0 [ 156.481447][ T7303] ? __fget_files+0x2a/0x420 [ 156.481462][ T7303] ? __fget_files+0x3a2/0x420 [ 156.481481][ T7303] __sys_sendmsg+0x177/0x240 [ 156.481498][ T7303] ? __pfx___sys_sendmsg+0x10/0x10 [ 156.481522][ T7303] __do_fast_syscall_32+0x27a/0x6b0 [ 156.481574][ T7303] ? do_fast_syscall_32+0x33/0x70 [ 156.481590][ T7303] ? asm_int80_emulation+0x1a/0x20 [ 156.481609][ T7303] ? do_int80_emulation+0x299/0x500 [ 156.481626][ T7303] do_fast_syscall_32+0x33/0x70 [ 156.481641][ T7303] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 156.481654][ T7303] RIP: 0023:0xf73cf0ec [ 156.481666][ T7303] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 156.481676][ T7303] RSP: 002b:00000000f53e650c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 156.481690][ T7303] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000080000240 [ 156.481702][ T7303] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 156.481711][ T7303] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 156.481721][ T7303] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 156.481731][ T7303] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 156.481758][ T7303] [ 156.572772][ T5732] usb 2-1: USB disconnect, device number 15 [ 156.976287][ T7307] netlink: 'syz.2.530': attribute type 10 has an invalid length. [ 157.052235][ T7307] mac80211_hwsim hwsim10 wlan0: entered allmulticast mode [ 157.107540][ T7307] team0: Port device wlan0 added [ 157.425978][ T5621] dvb-usb: found a 'Pinnacle PCTV 310e' in cold state, will try to load a firmware [ 157.425998][ T5621] dvb-usb: did not find the firmware file '(null)' (status -22). You can use /scripts/get_dvb_firmware to get the firmware [ 157.451500][ T5621] usb 4-1: USB disconnect, device number 23 [ 157.804662][ T5732] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 157.841320][ T7330] syzkaller1: entered promiscuous mode [ 157.841345][ T7330] syzkaller1: entered allmulticast mode [ 157.960764][ T5732] usb 2-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 157.963204][ T5732] usb 2-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 157.963257][ T5732] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.973402][ T7339] netlink: 68 bytes leftover after parsing attributes in process `syz.2.540'. [ 157.973440][ T7339] FAULT_INJECTION: forcing a failure. [ 157.973440][ T7339] name failslab, interval 1, probability 0, space 0, times 0 [ 157.973468][ T7339] CPU: 0 UID: 0 PID: 7339 Comm: syz.2.540 Tainted: G L syzkaller #0 PREEMPT(full) [ 157.973493][ T7339] Tainted: [L]=SOFTLOCKUP [ 157.973500][ T7339] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 157.973512][ T7339] Call Trace: [ 157.973520][ T7339] [ 157.973527][ T7339] dump_stack_lvl+0xe8/0x150 [ 157.973559][ T7339] should_fail_ex+0x410/0x560 [ 157.973585][ T7339] ? __alloc_skb+0x1db/0x7a0 [ 157.973610][ T7339] should_failslab+0xa8/0x100 [ 157.973636][ T7339] ? __alloc_skb+0x1db/0x7a0 [ 157.973659][ T7339] kmem_cache_alloc_node_noprof+0xa1/0x610 [ 157.973679][ T7339] ? __alloc_skb+0x18d/0x7a0 [ 157.973704][ T7339] ? __alloc_skb+0x1db/0x7a0 [ 157.973730][ T7339] __alloc_skb+0x1db/0x7a0 [ 157.973756][ T7339] netlink_ack+0x136/0xb30 [ 157.973773][ T7339] ? __pfx_genl_rcv_msg+0x10/0x10 [ 157.973810][ T7339] netlink_rcv_skb+0x2a4/0x4a0 [ 157.973830][ T7339] ? __pfx_genl_rcv_msg+0x10/0x10 [ 157.973854][ T7339] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 157.973888][ T7339] ? down_read+0x2be/0x330 [ 157.973909][ T7339] genl_rcv+0x28/0x40 [ 157.973931][ T7339] netlink_unicast+0x7bd/0x940 [ 157.973966][ T7339] netlink_sendmsg+0x813/0xb40 [ 157.973994][ T7339] ? __pfx_netlink_sendmsg+0x10/0x10 [ 157.974018][ T7339] ? apparmor_socket_sendmsg+0x98/0x360 [ 157.974041][ T7339] ? __pfx_netlink_sendmsg+0x10/0x10 [ 157.974060][ T7339] sock_sendmsg_nosec+0x13a/0x180 [ 157.974087][ T7339] sock_write_iter+0x2de/0x3e0 [ 157.974111][ T7339] ? __pfx_sock_write_iter+0x10/0x10 [ 157.974131][ T7339] ? trace_kmalloc+0x2a/0xf0 [ 157.974158][ T7339] ? iovec_from_user+0x87/0x250 [ 157.974185][ T7339] do_iter_readv_writev+0x612/0x8c0 [ 157.974207][ T7339] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 157.974229][ T7339] ? bpf_lsm_file_permission+0x9/0x20 [ 157.974256][ T7339] ? security_file_permission+0x75/0x260 [ 157.974297][ T7339] ? rw_verify_area+0x203/0x4c0 [ 157.974335][ T7339] vfs_writev+0x343/0x990 [ 157.974367][ T7339] ? __pfx_vfs_writev+0x10/0x10 [ 157.974404][ T7339] ? __fget_files+0x2a/0x420 [ 157.974436][ T7339] ? __fget_files+0x3a2/0x420 [ 157.974462][ T7339] ? __fget_files+0x2a/0x420 [ 157.974497][ T7339] do_writev+0x154/0x2e0 [ 157.974523][ T7339] ? __pfx_do_writev+0x10/0x10 [ 157.974552][ T7339] __do_fast_syscall_32+0x27a/0x6b0 [ 157.974569][ T7339] ? do_fast_syscall_32+0x33/0x70 [ 157.974595][ T7339] ? asm_int80_emulation+0x1a/0x20 [ 157.974613][ T7339] ? do_int80_emulation+0x299/0x500 [ 157.974640][ T7339] ? trace_irq_disable+0x3b/0x140 [ 157.974664][ T7339] do_fast_syscall_32+0x33/0x70 [ 157.974693][ T7339] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 157.974717][ T7339] RIP: 0023:0xf73cf0ec [ 157.974734][ T7339] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 157.974751][ T7339] RSP: 002b:00000000f53e650c EFLAGS: 00000206 ORIG_RAX: 0000000000000092 [ 157.974771][ T7339] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000200 [ 157.974785][ T7339] RDX: 0000000000000020 RSI: 0000000000000000 RDI: 0000000000000000 [ 157.974797][ T7339] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 157.974808][ T7339] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 157.974820][ T7339] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 157.974848][ T7339] [ 157.987156][ T5732] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 158.209067][ T7348] netlink: 12 bytes leftover after parsing attributes in process `syz.2.543'. [ 158.241835][ T7348] vlan3: entered allmulticast mode [ 158.241857][ T7348] bridge2: entered allmulticast mode [ 158.248525][ T7348] bridge2: port 1(erspan0) entered blocking state [ 158.248633][ T7348] bridge2: port 1(erspan0) entered disabled state [ 158.248799][ T7348] erspan0: entered allmulticast mode [ 158.254328][ T7348] erspan0: entered promiscuous mode [ 158.263710][ T7348] bridge2: port 1(erspan0) entered blocking state [ 158.263822][ T7348] bridge2: port 1(erspan0) entered forwarding state [ 158.451684][ T7352] block device autoloading is deprecated and will be removed. [ 158.748728][ T7363] netlink: 'syz.3.547': attribute type 10 has an invalid length. [ 158.754677][ T5754] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 158.800750][ T7363] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 158.807544][ T7363] team0: Port device wlan0 added [ 158.905218][ T5754] usb 3-1: Using ep0 maxpacket: 32 [ 158.907448][ T5754] usb 3-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 158.910376][ T5754] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.914340][ T5754] usb 3-1: config 0 descriptor?? [ 158.947034][ T5754] gspca_main: sq930x-2.14.0 probing 041e:403c [ 159.014692][ T5621] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 159.060972][ T5732] gspca_stv0680: usb_control_msg error 0, request = 0x88, error = -71 [ 159.060995][ T5732] stv0680 2-1:4.0: STV(e): camera ping failed!! [ 159.063794][ T5732] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 159.063819][ T5732] stv0680 2-1:4.0: last error: 0, command = 0x0 [ 159.074168][ T5732] usb 2-1: USB disconnect, device number 16 [ 159.132364][ T7377] openvswitch: netlink: Flow actions attr not present in new flow. [ 159.132744][ T7377] batadv_slave_1: entered promiscuous mode [ 159.175401][ T5621] usb 1-1: device descriptor read/64, error -71 [ 159.417413][ T5621] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 159.456858][ T5754] gspca_sq930x: reg_r 001f failed -110 [ 159.456946][ T5754] sq930x 3-1:0.0: probe with driver sq930x failed with error -110 [ 159.556149][ T5621] usb 1-1: device descriptor read/64, error -71 [ 159.590138][ T31] audit: type=1804 audit(1791307196.028:502): pid=7384 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.551" name="bus" dev="ramfs" ino=19882 res=1 errno=0 [ 159.593534][ T31] audit: type=1804 audit(1791307196.028:503): pid=7384 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.551" name="bus" dev="ramfs" ino=19882 res=1 errno=0 [ 159.665072][ T5621] usb usb1-port1: attempt power cycle [ 159.873569][ T7392] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 159.937672][ T7376] batadv_slave_1: left promiscuous mode [ 160.004768][ T5621] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 160.030126][ T5621] usb 1-1: device descriptor read/8, error -71 [ 160.199945][ T7398] netlink: 28 bytes leftover after parsing attributes in process `syz.4.556'. [ 160.199974][ T7398] netlink: 28 bytes leftover after parsing attributes in process `syz.4.556'. [ 160.264682][ T5621] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 160.285454][ T5621] usb 1-1: device descriptor read/8, error -71 [ 160.394917][ T5621] usb usb1-port1: unable to enumerate USB device [ 160.644398][ T7402] Invalid logical block size (18) [ 160.842643][ T7407] netlink: zone id is out of range [ 160.842924][ T7407] netlink: get zone limit has 4 unknown bytes [ 161.169573][ T7419] loop8: detected capacity change from 0 to 7 [ 161.175154][ T7419] Dev loop8: unable to read RDB block 7 [ 161.175195][ T7419] loop8: unable to read partition table [ 161.175791][ T7419] loop8: partition table beyond EOD, truncated [ 161.175810][ T7419] loop_reread_partitions: partition scan of loop8 (被x ) failed (rc=-5) [ 161.260284][ T7424] FAULT_INJECTION: forcing a failure. [ 161.260284][ T7424] name failslab, interval 1, probability 0, space 0, times 0 [ 161.260309][ T7424] CPU: 0 UID: 0 PID: 7424 Comm: syz.3.567 Tainted: G L syzkaller #0 PREEMPT(full) [ 161.260323][ T7424] Tainted: [L]=SOFTLOCKUP [ 161.260327][ T7424] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 161.260335][ T7424] Call Trace: [ 161.260339][ T7424] [ 161.260344][ T7424] dump_stack_lvl+0xe8/0x150 [ 161.260364][ T7424] should_fail_ex+0x410/0x560 [ 161.260391][ T7424] should_failslab+0xa8/0x100 [ 161.260418][ T7424] __kmalloc_cache_noprof+0xa3/0x600 [ 161.260439][ T7424] ? __kmalloc_cache_noprof+0x14d/0x600 [ 161.260458][ T7424] ? sctp_add_bind_addr+0x8c/0x370 [ 161.260477][ T7424] ? sctp_add_bind_addr+0x8c/0x370 [ 161.260502][ T7424] sctp_add_bind_addr+0x8c/0x370 [ 161.260524][ T7424] sctp_copy_local_addr_list+0x31a/0x4e0 [ 161.260537][ T7424] ? sctp_copy_local_addr_list+0xa3/0x4e0 [ 161.260549][ T7424] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 161.260562][ T7424] ? sctp_v6_is_any+0x64/0x80 [ 161.260575][ T7424] ? sctp_copy_one_addr+0x93/0x360 [ 161.260588][ T7424] sctp_bind_addr_copy+0xb3/0x3c0 [ 161.260600][ T7424] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 161.260617][ T7424] sctp_connect_new_asoc+0x2ff/0x6b0 [ 161.260633][ T7424] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 161.260650][ T7424] ? __local_bh_enable_ip+0xd6/0x140 [ 161.260663][ T7424] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 161.260678][ T7424] ? security_sctp_bind_connect+0x7e/0x2c0 [ 161.260698][ T7424] sctp_sendmsg+0x159b/0x2d00 [ 161.260719][ T7424] ? __pfx_sctp_sendmsg+0x10/0x10 [ 161.260733][ T7424] ? __lock_acquire+0x747/0x2de0 [ 161.260750][ T7424] ? lock_acquire+0x115/0x350 [ 161.260762][ T7424] ? aa_sock_msg_perm+0xf5/0x210 [ 161.260777][ T7424] ? sock_rps_record_flow+0x19/0x350 [ 161.260791][ T7424] ? inet_sendmsg+0x298/0x320 [ 161.260804][ T7424] ? __pfx_inet_sendmsg+0x10/0x10 [ 161.260815][ T7424] sock_sendmsg_nosec+0x10e/0x180 [ 161.260829][ T7424] ____sys_sendmsg+0x54e/0x850 [ 161.260847][ T7424] ? __pfx_____sys_sendmsg+0x10/0x10 [ 161.260870][ T7424] ___sys_sendmsg+0x2a5/0x360 [ 161.260884][ T7424] ? __lock_acquire+0x747/0x2de0 [ 161.260897][ T7424] ? __pfx____sys_sendmsg+0x10/0x10 [ 161.260915][ T7424] ? kstrtoull+0x137/0x1d0 [ 161.260939][ T7424] ? __fget_files+0x2a/0x420 [ 161.260954][ T7424] ? __fget_files+0x3a2/0x420 [ 161.260974][ T7424] __sys_sendmmsg+0x2de/0x4d0 [ 161.260991][ T7424] ? __pfx___sys_sendmmsg+0x10/0x10 [ 161.261020][ T7424] ? fput+0xa0/0xd0 [ 161.261034][ T7424] ? ksys_write+0x242/0x270 [ 161.261048][ T7424] __ia32_compat_sys_sendmmsg+0xa2/0xc0 [ 161.261062][ T7424] __do_fast_syscall_32+0x27a/0x6b0 [ 161.261073][ T7424] ? do_fast_syscall_32+0x33/0x70 [ 161.261088][ T7424] ? asm_int80_emulation+0x1a/0x20 [ 161.261098][ T7424] ? do_int80_emulation+0x299/0x500 [ 161.261112][ T7424] ? trace_irq_disable+0x3b/0x140 [ 161.261126][ T7424] do_fast_syscall_32+0x33/0x70 [ 161.261141][ T7424] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 161.261153][ T7424] RIP: 0023:0xf746f0ec [ 161.261165][ T7424] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 161.261188][ T7424] RSP: 002b:00000000f548650c EFLAGS: 00000206 ORIG_RAX: 0000000000000159 [ 161.261208][ T7424] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000000 [ 161.261222][ T7424] RDX: 00000000ffffffd1 RSI: 0000000000000000 RDI: 0000000000000000 [ 161.261234][ T7424] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 161.261244][ T7424] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 161.261250][ T7424] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 161.261265][ T7424] [ 161.485648][ T30] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 161.607974][ T9] usb 3-1: USB disconnect, device number 21 [ 161.681965][ T7430] netlink: 128 bytes leftover after parsing attributes in process `syz.3.569'. [ 161.734623][ T30] usb 5-1: Using ep0 maxpacket: 8 [ 161.737173][ T30] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 161.760911][ T30] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 161.760945][ T30] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 161.760970][ T30] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 161.760994][ T30] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 161.761037][ T30] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.079497][ T30] usb 5-1: GET_CAPABILITIES returned 0 [ 162.079527][ T30] usbtmc 5-1:16.0: can't read capabilities [ 162.150624][ T7441] FAULT_INJECTION: forcing a failure. [ 162.150624][ T7441] name failslab, interval 1, probability 0, space 0, times 0 [ 162.150647][ T7441] CPU: 0 UID: 0 PID: 7441 Comm: syz.0.573 Tainted: G L syzkaller #0 PREEMPT(full) [ 162.150665][ T7441] Tainted: [L]=SOFTLOCKUP [ 162.150668][ T7441] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 162.150675][ T7441] Call Trace: [ 162.150680][ T7441] [ 162.150685][ T7441] dump_stack_lvl+0xe8/0x150 [ 162.150704][ T7441] should_fail_ex+0x410/0x560 [ 162.150720][ T7441] ? __alloc_skb+0x1db/0x7a0 [ 162.150734][ T7441] should_failslab+0xa8/0x100 [ 162.150749][ T7441] ? __alloc_skb+0x1db/0x7a0 [ 162.150761][ T7441] kmem_cache_alloc_node_noprof+0xa1/0x610 [ 162.150773][ T7441] ? __alloc_skb+0x18d/0x7a0 [ 162.150797][ T7441] ? __alloc_skb+0x1db/0x7a0 [ 162.150825][ T7441] __alloc_skb+0x1db/0x7a0 [ 162.150852][ T7441] netlink_ack+0x136/0xb30 [ 162.150870][ T7441] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 162.150895][ T7441] ? ref_tracker_free+0x689/0x830 [ 162.150922][ T7441] ? __pfx_ref_tracker_free+0x10/0x10 [ 162.150957][ T7441] netlink_rcv_skb+0x2a4/0x4a0 [ 162.150979][ T7441] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 162.151007][ T7441] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 162.151038][ T7441] ? netlink_deliver_tap+0x2e/0x1b0 [ 162.151059][ T7441] ? netlink_deliver_tap+0x2e/0x1b0 [ 162.151089][ T7441] netlink_unicast+0x7bd/0x940 [ 162.151128][ T7441] netlink_sendmsg+0x813/0xb40 [ 162.151165][ T7441] ? __pfx_netlink_sendmsg+0x10/0x10 [ 162.151194][ T7441] ? apparmor_socket_sendmsg+0x98/0x360 [ 162.151221][ T7441] ? __pfx_netlink_sendmsg+0x10/0x10 [ 162.151241][ T7441] sock_sendmsg_nosec+0x13a/0x180 [ 162.151266][ T7441] ____sys_sendmsg+0x54e/0x850 [ 162.151300][ T7441] ? __pfx_____sys_sendmsg+0x10/0x10 [ 162.151343][ T7441] ___sys_sendmsg+0x2a5/0x360 [ 162.151371][ T7441] ? __lock_acquire+0x747/0x2de0 [ 162.151396][ T7441] ? __pfx____sys_sendmsg+0x10/0x10 [ 162.151424][ T7441] ? get_pid_task+0x20/0x1f0 [ 162.151443][ T7441] ? get_pid_task+0x20/0x1f0 [ 162.151459][ T7441] ? get_pid_task+0x20/0x1f0 [ 162.151503][ T7441] ? __fget_files+0x2a/0x420 [ 162.151531][ T7441] ? __fget_files+0x3a2/0x420 [ 162.151567][ T7441] __sys_sendmsg+0x177/0x240 [ 162.151598][ T7441] ? __pfx___sys_sendmsg+0x10/0x10 [ 162.151643][ T7441] __do_fast_syscall_32+0x27a/0x6b0 [ 162.151663][ T7441] ? do_fast_syscall_32+0x33/0x70 [ 162.151691][ T7441] ? asm_int80_emulation+0x1a/0x20 [ 162.151710][ T7441] ? do_int80_emulation+0x299/0x500 [ 162.151738][ T7441] ? trace_irq_disable+0x3b/0x140 [ 162.151763][ T7441] do_fast_syscall_32+0x33/0x70 [ 162.151792][ T7441] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 162.151815][ T7441] RIP: 0023:0xf73ef0ec [ 162.151833][ T7441] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 162.151850][ T7441] RSP: 002b:00000000f540650c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 162.151871][ T7441] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000100 [ 162.151885][ T7441] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000000 [ 162.151897][ T7441] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 162.151908][ T7441] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 162.151919][ T7441] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 162.151944][ T7441] [ 162.194761][ T5732] usb 3-1: new full-speed USB device number 22 using dummy_hcd [ 162.365269][ T5732] usb 3-1: not running at top speed; connect to a high speed hub [ 162.365293][ T5732] usb 3-1: New USB device found, idVendor=0ccd, idProduct=10a1, bcdDevice= a.e0 [ 162.370840][ C0] usbtmc 5-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 162.373832][ T5732] usb 3-1: config 8 has an invalid interface number: 44 but max is 0 [ 162.373857][ T5732] usb 3-1: config 8 has no interface number 0 [ 162.373885][ T5732] usb 3-1: config 8 interface 44 has no altsetting 0 [ 162.387011][ T5732] usb 3-1: string descriptor 0 read error: -22 [ 162.387191][ T5732] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.614883][ T5732] dvb-usb: found a 'Terratec Cinergy DT USB XS Diversity/ T5' in warm state. [ 162.616718][ T5732] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 162.617201][ T5732] dvbdev: DVB: registering new adapter (Terratec Cinergy DT USB XS Diversity/ T5) [ 162.617259][ T5732] usb 3-1: media controller created [ 162.623674][ T5732] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 162.732866][ T5732] DVB: Unable to find symbol dib7000p_attach() [ 162.732878][ T5732] dvb-usb: no frontend was attached by 'Terratec Cinergy DT USB XS Diversity/ T5' [ 162.732887][ T5732] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 162.733430][ T5732] dvbdev: DVB: registering new adapter (Terratec Cinergy DT USB XS Diversity/ T5) [ 162.733461][ T5732] usb 3-1: media controller created [ 162.741045][ T5732] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 162.836819][ T5732] DVB: Unable to find symbol dib7000p_attach() [ 162.836831][ T5732] dvb-usb: no frontend was attached by 'Terratec Cinergy DT USB XS Diversity/ T5' [ 162.904737][ T5732] rc_core: IR keymap rc-dib0700-rc5 not found [ 162.904756][ T5732] Registered IR keymap rc-empty [ 162.904936][ T5732] dvb-usb: could not initialize remote control. [ 162.904942][ T5732] dvb-usb: Terratec Cinergy DT USB XS Diversity/ T5 successfully initialized and connected. [ 163.262588][ T7453] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 163.265111][ T7453] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 163.267323][ T7453] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 163.267720][ T7453] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 163.473654][ T7453] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 163.486790][ T7453] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 163.517093][ T7453] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 163.517768][ T7453] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 163.766980][ T7453] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 163.767228][ T7453] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 164.321432][ T5621] usb 5-1: USB disconnect, device number 27 [ 164.490211][ T7471] netlink: 16 bytes leftover after parsing attributes in process `syz.3.581'. [ 164.732744][ T7476] netlink: 16 bytes leftover after parsing attributes in process `syz.4.580'. [ 164.993724][ T5754] usb 3-1: USB disconnect, device number 22 [ 165.365167][ T5754] dvb-usb: Terratec Cinergy DT USB XS Diversity/ T successfully deinitialized and disconnected. [ 165.440122][ T7481] use of bytesused == 0 is deprecated and will be removed in the future, [ 165.440139][ T7481] use the actual size instead. [ 165.884742][ T5754] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 166.085291][ T5754] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 166.086263][ T5754] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 166.086289][ T5754] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 166.086329][ T5754] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.139408][ T5754] usb 3-1: config 0 descriptor?? [ 166.203100][ T5754] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 166.819286][ T7474] netlink: 32 bytes leftover after parsing attributes in process `syz.4.580'. [ 167.082455][ T7487] netlink: zone id is out of range [ 167.082475][ T7487] netlink: get zone limit has 4 unknown bytes [ 167.455904][ T5754] usb 4-1: new full-speed USB device number 24 using dummy_hcd [ 167.619400][ T5754] usb 4-1: New USB device found, idVendor=044f, idProduct=b651, bcdDevice= 0.00 [ 167.636548][ T5754] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 167.636583][ T5754] usb 4-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 167.636609][ T5754] usb 4-1: config 0 interface 0 has no altsetting 0 [ 167.636642][ T5754] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.686416][ T5754] usb 4-1: config 0 descriptor?? [ 167.687212][ T7490] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 168.101999][ T5754] usbhid 4-1:0.0: can't add hid device: -71 [ 168.102109][ T5754] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 168.135694][ T5754] usb 4-1: USB disconnect, device number 24 [ 168.654137][ T5621] usb 3-1: USB disconnect, device number 23 [ 168.812192][ T7499] usb usb8: usbfs: process 7499 (syz.4.590) did not claim interface 0 before use [ 168.854780][ T7505] netlink: 8 bytes leftover after parsing attributes in process `syz.0.593'. [ 168.855655][ T7505] fuse: Bad value for 'fd' [ 169.145399][ T5621] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 169.205276][ T1788] usb 3-1: new full-speed USB device number 24 using dummy_hcd [ 169.287749][ T9] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 169.338084][ T5621] usb 2-1: Using ep0 maxpacket: 8 [ 169.338925][ T5621] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 169.340657][ T5621] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 169.340690][ T5621] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 169.340715][ T5621] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 169.340740][ T5621] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 169.340780][ T5621] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.383814][ T1788] usb 3-1: not running at top speed; connect to a high speed hub [ 169.383852][ T1788] usb 3-1: New USB device found, idVendor=0ccd, idProduct=10a1, bcdDevice= a.e0 [ 169.409721][ T1788] usb 3-1: config 8 has an invalid interface number: 44 but max is 0 [ 169.409748][ T1788] usb 3-1: config 8 has no interface number 0 [ 169.409775][ T1788] usb 3-1: config 8 interface 44 has no altsetting 0 [ 169.445441][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 169.468024][ T1788] usb 3-1: string descriptor 0 read error: -22 [ 169.468171][ T1788] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.469818][ T9] usb 1-1: New USB device found, idVendor=17ef, idProduct=60a4, bcdDevice= 0.40 [ 169.474305][ T9] usb 1-1: config 1 interface 0 altsetting 225 endpoint 0x81 has an invalid bInterval 97, changing to 10 [ 169.474346][ T9] usb 1-1: config 1 interface 0 altsetting 225 endpoint 0x81 has invalid wMaxPacketSize 0 [ 169.474369][ T9] usb 1-1: config 1 interface 0 altsetting 225 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 169.474395][ T9] usb 1-1: config 1 interface 0 has no altsetting 0 [ 169.491125][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.491152][ T9] usb 1-1: Product: 돡ߕ議೒ః厷妭睠荅徇醽ﲧ弰쾫폰ऋ菟μ偿쐐踛솑昳蕌넇茂ᚫￌ‘뚙켩ﭺ⢋뿛䡁⽤춚裛歺뽵司橭튛控࡛䡡Î欖柢劣훨꾗몗峞譅瀘ٓ境詇㚌딅喚碮讚䡜첛ꄧꅊꂌ㞕ભ瞯쨲ᙡ숍얘綂㖢癴䗯䋉ⴟ뱠Ĉ粉ퟆ叿㏄涹ꊅ蝖 [ 169.491181][ T9] usb 1-1: Manufacturer: Ё [ 169.491196][ T9] usb 1-1: SerialNumber: ю [ 169.604213][ T5621] usb 2-1: GET_CAPABILITIES returned 0 [ 169.604262][ T5621] usbtmc 2-1:16.0: can't read capabilities [ 169.635005][ T7524] bridge0: entered allmulticast mode [ 169.690099][ T1788] dvb-usb: found a 'Terratec Cinergy DT USB XS Diversity/ T5' in warm state. [ 169.731484][ T1788] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 169.751060][ T1788] dvbdev: DVB: registering new adapter (Terratec Cinergy DT USB XS Diversity/ T5) [ 169.751219][ T1788] usb 3-1: media controller created [ 169.753703][ T1788] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 169.865706][ C0] usbtmc 2-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 169.891214][ T1788] DVB: Unable to find symbol dib7000p_attach() [ 169.891230][ T1788] dvb-usb: no frontend was attached by 'Terratec Cinergy DT USB XS Diversity/ T5' [ 169.891245][ T1788] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 169.891924][ T1788] dvbdev: DVB: registering new adapter (Terratec Cinergy DT USB XS Diversity/ T5) [ 169.891973][ T1788] usb 3-1: media controller created [ 169.894419][ T1788] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 169.923880][ T9] usbhid 1-1:1.0: can't add hid device: -71 [ 169.923991][ T9] usbhid 1-1:1.0: probe with driver usbhid failed with error -71 [ 169.939254][ T9] usb 1-1: USB disconnect, device number 22 [ 170.005967][ T1788] DVB: Unable to find symbol dib7000p_attach() [ 170.005986][ T1788] dvb-usb: no frontend was attached by 'Terratec Cinergy DT USB XS Diversity/ T5' [ 170.094609][ T1788] rc_core: IR keymap rc-dib0700-rc5 not found [ 170.094629][ T1788] Registered IR keymap rc-empty [ 170.106349][ T1788] dvb-usb: could not initialize remote control. [ 170.106365][ T1788] dvb-usb: Terratec Cinergy DT USB XS Diversity/ T5 successfully initialized and connected. [ 170.380635][ T7536] netlink: 36 bytes leftover after parsing attributes in process `syz.3.604'. [ 170.487923][ T7540] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 170.489077][ T7540] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 170.492332][ T7540] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 170.492608][ T7540] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 170.706754][ T7540] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 170.709736][ T7540] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 170.714422][ T7540] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 170.743921][ T7540] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 170.970029][ T7540] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 170.974721][ T7540] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 171.521270][ T7556] dlm: non-version read from control device 36 [ 171.521980][ T7556] netlink: 28 bytes leftover after parsing attributes in process `syz.0.612'. [ 171.522004][ T7556] netlink: 28 bytes leftover after parsing attributes in process `syz.0.612'. [ 171.597623][ T7564] process 'syz.4.615' launched '/dev/fd/5' with NULL argv: empty string added [ 171.795103][ T1788] usb 2-1: USB disconnect, device number 17 [ 171.867594][ T7573] tipc: Enabled bearer , priority 0 [ 171.868303][ T7573] syzkaller0: entered promiscuous mode [ 171.868322][ T7573] syzkaller0: entered allmulticast mode [ 171.894318][ T7574] netlink: 'syz.4.618': attribute type 3 has an invalid length. [ 171.929275][ T7573] tipc: Resetting bearer [ 171.929779][ T7570] netlink: 8 bytes leftover after parsing attributes in process `syz.0.617'. [ 171.930063][ T7570] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0 [ 171.940354][ T7572] tipc: Resetting bearer [ 171.985852][ T7574] netdevsim netdevsim4: Direct firmware load for ./file0 failed with error -2 [ 171.985881][ T7574] netdevsim netdevsim4: Falling back to sysfs fallback for: ./file0 [ 171.987439][ T7572] tipc: Disabling bearer [ 171.988969][ T5617] Bluetooth: hci1: connection err: -111 [ 172.046812][ T1788] usb 3-1: USB disconnect, device number 24 [ 172.083456][ T1788] dvb-usb: Terratec Cinergy DT USB XS Diversity/ T successfully deinitialized and disconnected. [ 172.286290][ T7586] netlink: 8 bytes leftover after parsing attributes in process `syz.2.624'. [ 172.398893][ T7596] loop5: detected capacity change from 0 to 7 [ 172.399908][ T7596] loop5: [CUMANA/ADFS] p1 [ADFS] p1 [ 172.399933][ T7596] loop5: partition table partially beyond EOD, truncated [ 172.400058][ T7596] loop5: p1 size 487441168 extends beyond EOD, truncated [ 172.425219][ T9] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 172.544687][ T189] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 172.586648][ T9] usb 2-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 172.587786][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 172.587818][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 172.587855][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.591973][ T9] usb 2-1: config 0 descriptor?? [ 172.694805][ T189] usb 4-1: Using ep0 maxpacket: 32 [ 172.696312][ T189] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 172.697397][ T189] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 172.699973][ T189] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 172.700006][ T189] usb 4-1: Product: syz [ 172.700015][ T189] usb 4-1: Manufacturer: syz [ 172.700027][ T189] usb 4-1: SerialNumber: syz [ 172.703597][ T189] usb 4-1: config 0 descriptor?? [ 172.707357][ T7591] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 172.709520][ T189] hub 4-1:0.0: bad descriptor, ignoring hub [ 172.709544][ T189] hub 4-1:0.0: probe with driver hub failed with error -5 [ 173.010513][ T9] hid-led 0003:27B8:01ED.0006: probe with driver hid-led failed with error -71 [ 173.013750][ T9] usb 2-1: USB disconnect, device number 18 [ 173.026974][ T189] usb 4-1: USB disconnect, device number 25 [ 173.574887][ T189] usb 5-1: new full-speed USB device number 28 using dummy_hcd [ 173.622289][ T7615] erspan0: entered promiscuous mode [ 173.622311][ T7615] erspan0: entered allmulticast mode [ 173.625127][ T9] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 173.728682][ T189] usb 5-1: not running at top speed; connect to a high speed hub [ 173.728719][ T189] usb 5-1: New USB device found, idVendor=0ccd, idProduct=10a1, bcdDevice= a.e0 [ 173.729939][ T189] usb 5-1: config 8 has an invalid interface number: 44 but max is 0 [ 173.729966][ T189] usb 5-1: config 8 has no interface number 0 [ 173.729995][ T189] usb 5-1: config 8 interface 44 has no altsetting 0 [ 173.738762][ T189] usb 5-1: string descriptor 0 read error: -22 [ 173.738898][ T189] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 173.783047][ T9] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 173.789439][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 173.789511][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.808048][ T9] usb 1-1: config 0 descriptor?? [ 173.824026][ T7617] veth1_virt_wifi: Caught tx_queue_len zero misconfig [ 173.843697][ T7617] netlink: 4152 bytes leftover after parsing attributes in process `syz.3.635'. [ 173.969171][ T189] dvb-usb: found a 'Terratec Cinergy DT USB XS Diversity/ T5' in warm state. [ 173.980096][ T189] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 173.982701][ T189] dvbdev: DVB: registering new adapter (Terratec Cinergy DT USB XS Diversity/ T5) [ 173.982852][ T189] usb 5-1: media controller created [ 173.991745][ T189] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 174.020333][ T31] audit: type=1326 audit(1791307210.458:504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7622 comm="syz.3.638" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf746f0ec code=0x7ffc0000 [ 174.020577][ T31] audit: type=1326 audit(1791307210.458:505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7622 comm="syz.3.638" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf746f0ec code=0x7ffc0000 [ 174.021007][ T31] audit: type=1326 audit(1791307210.458:506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7622 comm="syz.3.638" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=386 compat=1 ip=0xf746f0ec code=0x7ffc0000 [ 174.021184][ T31] audit: type=1326 audit(1791307210.458:507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7622 comm="syz.3.638" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf746f0ec code=0x7ffc0000 [ 174.021387][ T31] audit: type=1326 audit(1791307210.458:508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7622 comm="syz.3.638" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf746f0ec code=0x7ffc0000 [ 174.021751][ T31] audit: type=1326 audit(1791307210.458:509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7622 comm="syz.3.638" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf746f0ec code=0x7ffc0000 [ 174.023342][ T31] audit: type=1326 audit(1791307210.458:510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7622 comm="syz.3.638" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf746f0ec code=0x7ffc0000 [ 174.023575][ T31] audit: type=1326 audit(1791307210.458:511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7622 comm="syz.3.638" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf746f0ec code=0x7ffc0000 [ 174.025480][ T31] audit: type=1326 audit(1791307210.468:512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7622 comm="syz.3.638" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf71c75eb code=0x7ffc0000 [ 174.025524][ T31] audit: type=1326 audit(1791307210.468:513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7622 comm="syz.3.638" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf71c75eb code=0x7ffc0000 [ 174.065163][ T9] usbhid 1-1:0.0: can't add hid device: -71 [ 174.065277][ T9] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 174.094466][ T9] usb 1-1: USB disconnect, device number 23 [ 174.271339][ T189] DVB: Unable to find symbol dib7000p_attach() [ 174.281815][ T189] dvb-usb: no frontend was attached by 'Terratec Cinergy DT USB XS Diversity/ T5' [ 174.281834][ T189] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 174.300423][ T189] dvbdev: DVB: registering new adapter (Terratec Cinergy DT USB XS Diversity/ T5) [ 174.300482][ T189] usb 5-1: media controller created [ 174.310214][ T189] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 174.461070][ T189] DVB: Unable to find symbol dib7000p_attach() [ 174.461087][ T189] dvb-usb: no frontend was attached by 'Terratec Cinergy DT USB XS Diversity/ T5' [ 174.584776][ T9] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 174.585883][ T189] rc_core: IR keymap rc-dib0700-rc5 not found [ 174.585897][ T189] Registered IR keymap rc-empty [ 174.586815][ T189] dvb-usb: could not initialize remote control. [ 174.586826][ T189] dvb-usb: Terratec Cinergy DT USB XS Diversity/ T5 successfully initialized and connected. [ 174.734943][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 174.737062][ T9] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 174.740709][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 174.740757][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.762199][ T9] usb 1-1: config 0 descriptor?? [ 174.806838][ T9] ldusb 1-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 174.911460][ T9] ldusb 1-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 174.993806][ T7609] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 174.994230][ T7609] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 175.060798][ T7609] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 175.061283][ T7609] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 175.313454][ T7609] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 175.313976][ T7609] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 175.364244][ T7609] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 175.367442][ T7609] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 175.421728][ T7653] netlink: 36 bytes leftover after parsing attributes in process `syz.2.644'. [ 175.510605][ T7651] netlink: 12 bytes leftover after parsing attributes in process `syz.0.633'. [ 175.510630][ T7651] tc_dump_action: action bad kind [ 175.623054][ T7609] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 175.623988][ T7609] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 175.915379][ T5621] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 175.979450][ T5754] usb 1-1: USB disconnect, device number 24 [ 175.982473][ T5754] ldusb 1-1:0.0: LD USB Device #0 now disconnected [ 176.143566][ T5621] usb 4-1: New USB device found, idVendor=046d, idProduct=c20a, bcdDevice= 0.00 [ 176.145618][ T5621] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 176.145649][ T5621] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 176.145671][ T5621] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 176.145710][ T5621] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.149670][ T5621] usb 4-1: config 0 descriptor?? [ 176.241198][ T7658] netlink: 4 bytes leftover after parsing attributes in process `syz.0.646'. [ 176.570284][ T5621] hid_parser_main: 129 callbacks suppressed [ 176.570309][ T5621] logitech 0003:046D:C20A.0007: unknown main item tag 0x0 [ 176.570338][ T5621] logitech 0003:046D:C20A.0007: unknown main item tag 0x0 [ 176.570364][ T5621] logitech 0003:046D:C20A.0007: unknown main item tag 0x0 [ 176.570390][ T5621] logitech 0003:046D:C20A.0007: unknown main item tag 0x0 [ 176.570415][ T5621] logitech 0003:046D:C20A.0007: unknown main item tag 0x0 [ 176.570440][ T5621] logitech 0003:046D:C20A.0007: unknown main item tag 0x0 [ 176.570462][ T5621] logitech 0003:046D:C20A.0007: unknown main item tag 0x0 [ 176.570486][ T5621] logitech 0003:046D:C20A.0007: unknown main item tag 0x0 [ 176.570511][ T5621] logitech 0003:046D:C20A.0007: unknown main item tag 0x0 [ 176.570535][ T5621] logitech 0003:046D:C20A.0007: unknown main item tag 0x0 [ 176.618495][ T5621] logitech 0003:046D:C20A.0007: hidraw0: USB HID v0.02 Device [HID 046d:c20a] on usb-dummy_hcd.3-1/input0 [ 176.618548][ T5621] logitech 0003:046D:C20A.0007: no inputs found [ 176.736725][ T9] usb 5-1: USB disconnect, device number 28 [ 176.812675][ T5621] usb 4-1: USB disconnect, device number 26 [ 176.832430][ T7677] openvswitch: netlink: Duplicate or invalid key (type 0). [ 176.864469][ T7677] netlink: 104 bytes leftover after parsing attributes in process `syz.2.653'. [ 176.878238][ T9] dvb-usb: Terratec Cinergy DT USB XS Diversity/ T successfully deinitialized and disconnected. [ 177.011535][ T7685] dlm: non-version read from control device 36 [ 177.055805][ C0] bridge0: port 1(bridge_slave_0) entered learning state [ 177.056756][ C0] bridge0: port 2(bridge_slave_1) entered learning state [ 177.113563][ T7675] netlink: 28 bytes leftover after parsing attributes in process `syz.1.652'. [ 177.113592][ T7675] netlink: 28 bytes leftover after parsing attributes in process `syz.1.652'. [ 177.196498][ T10] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 177.368878][ T10] usb 3-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 177.396367][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.396398][ T10] usb 3-1: Product: syz [ 177.396415][ T10] usb 3-1: Manufacturer: syz [ 177.396431][ T10] usb 3-1: SerialNumber: syz [ 177.421332][ T10] usb 3-1: config 0 descriptor?? [ 177.496342][ T10] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 178.006403][ T10] gspca_sunplus: reg_r err -110 [ 178.149748][ T7707] netlink: 8 bytes leftover after parsing attributes in process `syz.4.660'. [ 178.149783][ T7707] netlink: 'syz.4.660': attribute type 5 has an invalid length. [ 178.149798][ T7707] netlink: 20 bytes leftover after parsing attributes in process `syz.4.660'. [ 178.611996][ T7727] loop5: detected capacity change from 0 to 7 [ 178.618705][ T7727] loop5: [CUMANA/ADFS] p1 [ADFS] p1 [ 178.618733][ T7727] loop5: partition table partially beyond EOD, truncated [ 178.618919][ T7727] loop5: p1 size 487441168 extends beyond EOD, truncated [ 178.715274][ T10] usb 4-1: new full-speed USB device number 27 using dummy_hcd [ 178.866845][ T10] usb 4-1: not running at top speed; connect to a high speed hub [ 178.866882][ T10] usb 4-1: New USB device found, idVendor=0ccd, idProduct=10a1, bcdDevice= a.e0 [ 178.870220][ T10] usb 4-1: config 8 has an invalid interface number: 44 but max is 0 [ 178.870246][ T10] usb 4-1: config 8 has no interface number 0 [ 178.870342][ T10] usb 4-1: config 8 interface 44 has no altsetting 0 [ 178.873724][ T10] usb 4-1: string descriptor 0 read error: -22 [ 178.873865][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 179.086355][ T10] dvb-usb: found a 'Terratec Cinergy DT USB XS Diversity/ T5' in warm state. [ 179.089956][ T10] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 179.091858][ T10] dvbdev: DVB: registering new adapter (Terratec Cinergy DT USB XS Diversity/ T5) [ 179.091910][ T10] usb 4-1: media controller created [ 179.094311][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 179.157944][ T10] DVB: Unable to find symbol dib7000p_attach() [ 179.157958][ T10] dvb-usb: no frontend was attached by 'Terratec Cinergy DT USB XS Diversity/ T5' [ 179.157967][ T10] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 179.158538][ T10] dvbdev: DVB: registering new adapter (Terratec Cinergy DT USB XS Diversity/ T5) [ 179.158577][ T10] usb 4-1: media controller created [ 179.160107][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 179.220628][ T10] DVB: Unable to find symbol dib7000p_attach() [ 179.220640][ T10] dvb-usb: no frontend was attached by 'Terratec Cinergy DT USB XS Diversity/ T5' [ 179.284729][ T10] rc_core: IR keymap rc-dib0700-rc5 not found [ 179.284750][ T10] Registered IR keymap rc-empty [ 179.285021][ T10] dvb-usb: could not initialize remote control. [ 179.285031][ T10] dvb-usb: Terratec Cinergy DT USB XS Diversity/ T5 successfully initialized and connected. [ 179.659692][ T7741] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 179.662077][ T7741] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 179.666188][ T7741] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 179.670947][ T7741] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 179.877336][ T7741] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 179.877577][ T7741] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 179.881901][ T7741] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 179.882154][ T7741] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 179.976033][ T10] usb 3-1: USB disconnect, device number 25 [ 180.077286][ T7746] netlink: 4 bytes leftover after parsing attributes in process `syz.2.672'. [ 180.266534][ T7750] bridge0: entered allmulticast mode [ 180.429620][ T7752] FAULT_INJECTION: forcing a failure. [ 180.429620][ T7752] name failslab, interval 1, probability 0, space 0, times 0 [ 180.429645][ T7752] CPU: 0 UID: 0 PID: 7752 Comm: syz.2.674 Tainted: G L syzkaller #0 PREEMPT(full) [ 180.429669][ T7752] Tainted: [L]=SOFTLOCKUP [ 180.429675][ T7752] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 180.429687][ T7752] Call Trace: [ 180.429693][ T7752] [ 180.429698][ T7752] dump_stack_lvl+0xe8/0x150 [ 180.429719][ T7752] should_fail_ex+0x410/0x560 [ 180.429736][ T7752] should_failslab+0xa8/0x100 [ 180.429751][ T7752] ? can_rx_register+0x16d/0x7a0 [ 180.429766][ T7752] kmem_cache_alloc_noprof+0xa1/0x600 [ 180.429777][ T7752] ? get_pid_task+0x20/0x1f0 [ 180.429787][ T7752] ? get_pid_task+0x20/0x1f0 [ 180.429796][ T7752] ? can_rx_register+0x16d/0x7a0 [ 180.429813][ T7752] can_rx_register+0x16d/0x7a0 [ 180.429826][ T7752] ? do_raw_spin_lock+0x12b/0x2f0 [ 180.429840][ T7752] ? __pfx_raw_rcv+0x10/0x10 [ 180.429857][ T7752] raw_enable_filters+0x98/0x200 [ 180.429875][ T7752] raw_enable_allfilters+0x82/0x2e0 [ 180.429893][ T7752] raw_bind+0x292/0x730 [ 180.429907][ T7752] ? bpf_lsm_socket_bind+0x9/0x20 [ 180.429923][ T7752] __sys_bind+0x2e3/0x410 [ 180.429938][ T7752] ? __pfx___sys_bind+0x10/0x10 [ 180.429961][ T7752] __ia32_sys_bind+0x7a/0x90 [ 180.429974][ T7752] __do_fast_syscall_32+0x27a/0x6b0 [ 180.429986][ T7752] ? do_fast_syscall_32+0x33/0x70 [ 180.430004][ T7752] ? asm_int80_emulation+0x1a/0x20 [ 180.430014][ T7752] ? do_int80_emulation+0x299/0x500 [ 180.430029][ T7752] ? trace_irq_disable+0x3b/0x140 [ 180.430042][ T7752] do_fast_syscall_32+0x33/0x70 [ 180.430057][ T7752] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 180.430070][ T7752] RIP: 0023:0xf73cf0ec [ 180.430080][ T7752] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 180.430095][ T7752] RSP: 002b:00000000f53e650c EFLAGS: 00000206 ORIG_RAX: 0000000000000169 [ 180.430107][ T7752] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000000 [ 180.430115][ T7752] RDX: 0000000000000010 RSI: 0000000000000000 RDI: 0000000000000000 [ 180.430121][ T7752] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 180.430128][ T7752] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 180.430134][ T7752] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 180.430149][ T7752] [ 180.966798][ T1788] usb 3-1: new full-speed USB device number 26 using dummy_hcd [ 180.991951][ T7763] bond2: entered promiscuous mode [ 180.992020][ T7763] bond2: entered allmulticast mode [ 180.992372][ T7763] 8021q: adding VLAN 0 to HW filter on device bond2 [ 181.017006][ T7765] syzkaller0: entered promiscuous mode [ 181.017029][ T7765] syzkaller0: entered allmulticast mode [ 181.105284][ T5754] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 181.125838][ T1788] usb 3-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 181.126804][ T1788] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 181.126828][ T1788] usb 3-1: config 0 has no interface number 0 [ 181.129287][ T1788] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 181.129312][ T1788] usb 3-1: Product: syz [ 181.129328][ T1788] usb 3-1: Manufacturer: syz [ 181.129341][ T1788] usb 3-1: SerialNumber: syz [ 181.134744][ T1788] usb 3-1: config 0 descriptor?? [ 181.142822][ T1788] usb 3-1: selecting invalid altsetting 1 [ 181.148411][ T1788] dvb_ttusb_budget: ttusb_init_controller: error [ 181.148429][ T1788] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 181.184090][ T7768] syzkaller0: entered promiscuous mode [ 181.184115][ T7768] syzkaller0: entered allmulticast mode [ 181.243627][ T1788] DVB: Unable to find symbol stv0299_attach() [ 181.265866][ T5754] usb 5-1: Using ep0 maxpacket: 16 [ 181.266541][ T5754] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 181.267457][ T5754] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 181.267480][ T5754] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 181.269355][ T5754] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 181.269379][ T5754] usb 5-1: Product: syz [ 181.269394][ T5754] usb 5-1: Manufacturer: syz [ 181.269408][ T5754] usb 5-1: SerialNumber: syz [ 181.299193][ T5754] usb 5-1: 0:2 : does not exist [ 181.304416][ T1788] DVB: Unable to find symbol tda8083_attach() [ 181.304432][ T1788] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 181.310010][ T5680] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 181.365856][ T7754] ------------[ cut here ]------------ [ 181.365871][ T7754] usb 4-1: BOGUS control dir, pipe 80001b80 doesn't match bRequestType c0 [ 181.365892][ T7754] WARNING: drivers/usb/core/urb.c:413 at usb_submit_urb+0x1057/0x18b0, CPU#0: syz.2.675/7754 [ 181.392022][ T7754] Modules linked in: [ 181.396259][ T7754] CPU: 0 UID: 0 PID: 7754 Comm: syz.2.675 Tainted: G L syzkaller #0 PREEMPT(full) [ 181.407609][ T7754] Tainted: [L]=SOFTLOCKUP [ 181.411968][ T7754] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 181.422130][ T7754] RIP: 0010:usb_submit_urb+0x1100/0x18b0 [ 181.428077][ T7754] Code: b8 00 00 00 00 00 fc ff df 41 0f b6 04 04 84 c0 0f 85 b2 05 00 00 45 0f b6 45 00 48 8b 3c 24 48 8b 74 24 18 4c 89 f2 44 89 f9 <67> 48 0f b9 3a 48 bd 00 00 00 00 00 fc ff df e9 ba f2 ff ff 44 89 [ 181.448291][ T7754] RSP: 0000:ffffc9000f427778 EFLAGS: 00010246 [ 181.454402][ T7754] RAX: 0000000000000000 RBX: ffff888058285f00 RCX: 0000000080001b80 [ 181.462527][ T7754] RDX: ffff88801bbdb0a0 RSI: ffffffff8cc53540 RDI: ffffffff90881c10 [ 181.470595][ T7754] RBP: dffffc0000000000 R08: 00000000000000c0 R09: 0000000000000000 [ 181.477302][ T5680] usb 1-1: unable to get BOS descriptor or descriptor too short [ 181.477351][ T5680] usb 1-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 181.478490][ T5680] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 181.478511][ T5680] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 181.478560][ T5680] usb 1-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 181.492276][ T5680] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 181.492303][ T5680] usb 1-1: Product: syz [ 181.492317][ T5680] usb 1-1: Manufacturer: syz [ 181.492331][ T5680] usb 1-1: SerialNumber: syz [ 181.517009][ T5754] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 181.550895][ T1788] usb 4-1: USB disconnect, device number 27 [ 181.565202][ T7754] R10: ffffc9000f427860 R11: fffff52001e84f18 R12: 1ffff110044d4d54 [ 181.573206][ T7754] R13: ffff8880226a6aa0 R14: ffff88801bbdb0a0 R15: 0000000080001b80 [ 181.582127][ T7754] FS: 0000000000000000(0000) GS:ffff888124cc6000(0063) knlGS:00000000f53e6b40 [ 181.591254][ T7754] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 181.598791][ T7754] CR2: 0000000033b23ffc CR3: 0000000075a72000 CR4: 00000000003526f0 [ 181.607137][ T7754] Call Trace: [ 181.610449][ T7754] [ 181.613403][ T7754] usb_start_wait_urb+0x13f/0x5b0 [ 181.618568][ T7754] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 181.624204][ T7754] usb_control_msg+0x234/0x3e0 [ 181.629570][ T7754] dib0700_i2c_xfer+0xbb9/0xf80 [ 181.634614][ T7754] __i2c_transfer+0x7bf/0x1fe0 [ 181.639409][ T7754] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 181.645333][ T7754] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 181.651227][ T7754] ? rt_mutex_lock_nested+0x156/0x1c0 [ 181.657144][ T7754] ? i2c_transfer+0xc7/0x2d0 [ 181.659097][ T5754] usb 5-1: USB disconnect, device number 29 [ 181.667756][ T7754] i2c_transfer+0x1cb/0x2d0 [ 181.672306][ T7754] i2cdev_ioctl_rdwr+0x460/0x740 [ 181.677432][ T7754] compat_i2cdev_ioctl+0x59f/0x5c0 [ 181.682608][ T7754] ? __pfx_compat_i2cdev_ioctl+0x10/0x10 [ 181.688830][ T7754] ? __fget_files+0x3a2/0x420 [ 181.693550][ T7754] ? __fget_files+0x2a/0x420 [ 181.698400][ T7754] ? bpf_lsm_file_ioctl_compat+0x9/0x20 [ 181.704324][ T7754] __ia32_compat_sys_ioctl+0x5ea/0x950 [ 181.709974][ T7754] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 181.716868][ T7754] ? kmem_cache_free+0x182/0x650 [ 181.722118][ T7754] ? __se_sys_futex_time32+0x3ab/0x440 [ 181.727873][ T7754] ? rcu_is_watching+0x16/0xb0 [ 181.732714][ T7754] __do_fast_syscall_32+0x27a/0x6b0 [ 181.738021][ T7754] ? do_fast_syscall_32+0x33/0x70 [ 181.743123][ T7754] ? asm_int80_emulation+0x1a/0x20 [ 181.748837][ T7754] ? do_int80_emulation+0x299/0x500 [ 181.754078][ T7754] ? trace_irq_disable+0x3b/0x140 [ 181.759195][ T7754] do_fast_syscall_32+0x33/0x70 [ 181.764127][ T7754] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 181.770765][ T7754] RIP: 0023:0xf73cf0ec [ 181.776002][ T7754] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 181.781098][ T5635] udevd[5635]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 181.812594][ T7754] RSP: 002b:00000000f53e650c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 181.821188][ T7754] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000000707 [ 181.829651][ T7754] RDX: 0000000080000140 RSI: 0000000000000000 RDI: 0000000000000000 [ 181.838886][ T7754] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 181.847040][ T7754] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 181.855128][ T7754] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 181.863232][ T7754] [ 181.867244][ T7754] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 181.874598][ T7754] CPU: 0 UID: 0 PID: 7754 Comm: syz.2.675 Tainted: G L syzkaller #0 PREEMPT(full) [ 181.885400][ T7754] Tainted: [L]=SOFTLOCKUP [ 181.890024][ T7754] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 181.900099][ T7754] Call Trace: [ 181.903402][ T7754] [ 181.906350][ T7754] vpanic+0x56d/0xa60 [ 181.910605][ T7754] ? __pfx__printk+0x10/0x10 [ 181.915402][ T7754] ? __pfx_vpanic+0x10/0x10 [ 181.919935][ T7754] ? is_bpf_text_address+0x292/0x2b0 [ 181.925245][ T7754] ? is_bpf_text_address+0x26/0x2b0 [ 181.931015][ T7754] panic+0xc5/0xd0 [ 181.934819][ T7754] ? __pfx_panic+0x10/0x10 [ 181.939293][ T7754] __warn+0x315/0x4c0 [ 181.943507][ T7754] ? usb_submit_urb+0x1057/0x18b0 [ 181.948648][ T7754] ? usb_submit_urb+0x1057/0x18b0 [ 181.953810][ T7754] __report_bug+0x276/0x570 [ 181.958966][ T7754] ? usb_submit_urb+0x1057/0x18b0 [ 181.964213][ T7754] ? __pfx___report_bug+0x10/0x10 [ 181.969281][ T7754] ? usb_submit_urb+0x1105/0x18b0 [ 181.974595][ T7754] ? usb_submit_urb+0x1100/0x18b0 [ 181.980187][ T7754] ? pt_regs_val+0xc/0x70 [ 181.984917][ T7754] report_bug_entry+0x19b/0x290 [ 181.990158][ T7754] ? usb_submit_urb+0x1100/0x18b0 [ 181.995565][ T7754] ? usb_submit_urb+0x1105/0x18b0 [ 182.001147][ T7754] handle_bug+0xce/0x200 [ 182.005421][ T7754] exc_invalid_op+0x1a/0x50 [ 182.010211][ T7754] asm_exc_invalid_op+0x1a/0x20 [ 182.015615][ T7754] RIP: 0010:usb_submit_urb+0x1100/0x18b0 [ 182.021714][ T7754] Code: b8 00 00 00 00 00 fc ff df 41 0f b6 04 04 84 c0 0f 85 b2 05 00 00 45 0f b6 45 00 48 8b 3c 24 48 8b 74 24 18 4c 89 f2 44 89 f9 <67> 48 0f b9 3a 48 bd 00 00 00 00 00 fc ff df e9 ba f2 ff ff 44 89 [ 182.042424][ T7754] RSP: 0000:ffffc9000f427778 EFLAGS: 00010246 [ 182.049542][ T7754] RAX: 0000000000000000 RBX: ffff888058285f00 RCX: 0000000080001b80 [ 182.057525][ T7754] RDX: ffff88801bbdb0a0 RSI: ffffffff8cc53540 RDI: ffffffff90881c10 [ 182.065918][ T7754] RBP: dffffc0000000000 R08: 00000000000000c0 R09: 0000000000000000 [ 182.074176][ T7754] R10: ffffc9000f427860 R11: fffff52001e84f18 R12: 1ffff110044d4d54 [ 182.082164][ T7754] R13: ffff8880226a6aa0 R14: ffff88801bbdb0a0 R15: 0000000080001b80 [ 182.090539][ T7754] ? usb_submit_urb+0x1091/0x18b0 [ 182.095611][ T7754] usb_start_wait_urb+0x13f/0x5b0 [ 182.100762][ T7754] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 182.107996][ T7754] usb_control_msg+0x234/0x3e0 [ 182.113663][ T7754] dib0700_i2c_xfer+0xbb9/0xf80 [ 182.119607][ T7754] __i2c_transfer+0x7bf/0x1fe0 [ 182.124411][ T7754] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 182.130254][ T7754] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 182.136089][ T7754] ? rt_mutex_lock_nested+0x156/0x1c0 [ 182.141483][ T7754] ? i2c_transfer+0xc7/0x2d0 [ 182.146235][ T7754] i2c_transfer+0x1cb/0x2d0 [ 182.150756][ T7754] i2cdev_ioctl_rdwr+0x460/0x740 [ 182.156245][ T7754] compat_i2cdev_ioctl+0x59f/0x5c0 [ 182.161365][ T7754] ? __pfx_compat_i2cdev_ioctl+0x10/0x10 [ 182.167094][ T7754] ? __fget_files+0x3a2/0x420 [ 182.171786][ T7754] ? __fget_files+0x2a/0x420 [ 182.177231][ T7754] ? bpf_lsm_file_ioctl_compat+0x9/0x20 [ 182.182820][ T7754] __ia32_compat_sys_ioctl+0x5ea/0x950 [ 182.188667][ T7754] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 182.194761][ T7754] ? kmem_cache_free+0x182/0x650 [ 182.199707][ T7754] ? __se_sys_futex_time32+0x3ab/0x440 [ 182.205180][ T7754] ? rcu_is_watching+0x16/0xb0 [ 182.210053][ T7754] __do_fast_syscall_32+0x27a/0x6b0 [ 182.215428][ T7754] ? do_fast_syscall_32+0x33/0x70 [ 182.220472][ T7754] ? asm_int80_emulation+0x1a/0x20 [ 182.225673][ T7754] ? do_int80_emulation+0x299/0x500 [ 182.230876][ T7754] ? trace_irq_disable+0x3b/0x140 [ 182.235901][ T7754] do_fast_syscall_32+0x33/0x70 [ 182.240762][ T7754] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 182.247091][ T7754] RIP: 0023:0xf73cf0ec [ 182.251159][ T7754] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 182.270759][ T7754] RSP: 002b:00000000f53e650c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 182.279181][ T7754] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000000707 [ 182.287152][ T7754] RDX: 0000000080000140 RSI: 0000000000000000 RDI: 0000000000000000 [ 182.295120][ T7754] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 182.303086][ T7754] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 182.311050][ T7754] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 182.319034][ T7754] [ 182.322330][ T7754] Kernel Offset: disabled [ 182.326839][ T7754] Rebooting in 86400 seconds..