last executing test programs: 9.911234829s ago: executing program 0 (id=1750): r0 = socket$inet(0x2, 0x2, 0x80000000) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_opts(r0, 0x0, 0x4, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000002c0)="ae7a00073c1dd13b10aa2c9ba7500f60e521d1acfe2cf80185b2c72edca737f881e72f48fe7aeec10ffebf69f54b4b90e184b62991231aedf7dab11981c25d3329bfb8222695cee070b344b54a3671cf7ed5ab85ed8c072d7036c806234edde0c88723ed654ec6a3de623cf419c71dedf15cf348d6b63c888f404542203e5bc4501d3c94a8eb2bf886d6daa05e79b305f3f6cee5ce82d9d9e5e6561eff580365bd878db465c85de95dad61bdacbad5dc4aa911e78dcbc1a759d4055037185103b049433694", 0xc5}], 0x1}}], 0x1, 0x84) syz_usb_connect(0x1, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12012000f1048108cd060202d4920000000109021b1901000000d40904150001da40df0009"], 0x0) rseq(&(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x2, 0xfffffffffffffc35, 0x8, 0x7}, 0x4}, 0x20, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, 0x0, 0x0) sendto$inet(r0, &(0x7f00000012c0)='\t', 0x1, 0x11, 0x0, 0x0) 8.493871914s ago: executing program 4 (id=1754): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_EXPR={0x14, 0x11, 0x0, 0x1, @limit={{0xa}, @val={0x4}}}]}, @NFT_MSG_NEWSETELEM={0x28, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x8, 0x3, 0x0, 0x1, [{0x4}]}]}], {0x14, 0x10, 0x1, 0x0, 0x1000000, {0x0, 0x84}}}, 0x8c}}, 0x0) 8.269097278s ago: executing program 4 (id=1755): socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) socket$nl_audit(0x10, 0x3, 0x9) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000640)="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", 0x192, 0x4044c00, &(0x7f0000000440)={0xa, 0x4e23, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x800000}, 0x1c) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) syz_open_dev$video4linux(0x0, 0x100000008, 0x0) r2 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, &(0x7f0000000180)=@id={0x1e, 0x3, 0x2, {0x4e21, 0x3}}, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000180)={0x50, 0x0, r4, {0x7, 0x29, 0x0, 0xffffffff85000014, 0x5, 0x7, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0x50) getsockopt$XDP_MMAP_OFFSETS(0xffffffffffffffff, 0x11b, 0x1, 0x0, &(0x7f0000000500)) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) dup(r5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4000010, r1, 0x0) r6 = syz_open_dev$sndctrl(&(0x7f0000000040), 0xe26, 0x101400) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r8, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r7, &(0x7f0000000380)=[{{&(0x7f0000000200)=@sco={0x1f, @fixed}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000280)=""/95, 0x5f}], 0x1}, 0x9}], 0x1, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x11) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r6, 0xc0045520, &(0x7f00000000c0)=""/92) openat$dir(0xffffffffffffff9c, &(0x7f0000000540)='./file0\x00', 0x0, 0x4b) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) 8.058365897s ago: executing program 0 (id=1757): socket$kcm(0x10, 0x2, 0x0) r0 = socket(0x2, 0x80805, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x640100ff, 0x4e20, 0x3, 'lblc\x00', 0x1, 0xa7e, 0x1a}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lc\x00', 0x0, 0x8, 0x77}, {@remote, 0x4e20, 0x1, 0xcd}}, 0x44) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x52, &(0x7f0000000040)=0x2, 0x4) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x44000, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) recvmmsg(r2, &(0x7f0000005500)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001480)=""/17, 0x11}, 0x1000}], 0x1, 0x22, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) unshare(0x22020600) unshare(0x2c020400) move_mount(r3, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x226) syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fff, 0x2) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x80000000, 0x20000006, 0x4d, 0x6, 0x5d, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x0, 0x7, 0x3c5b, 0x1, 0x24, 0xd, 0x7, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x242, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x1, 0x7, 0x5, 0x3e, 0x8c, 0x6, 0xffff, 0x0, 0x5, 0x4, 0x8008, 0x400, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x2008004, 0x5, 0xfffffff3, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2c0, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f2e, 0xd, 0x4e2, 0x2, 0x4, 0xb, 0x4, 0x9, 0x8, 0x9, 0x6, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0x81, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x7, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xca, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x3c484551], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x93a, 0x5, 0x6, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x2000004, 0x7fff, 0xffff, 0xa620, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x4, 0xc8, 0xfffffff9, 0xfffff000, 0x10000, 0x0, 0x7e, 0x100, 0x9602, 0x7, 0xaf, 0x5, 0x6, 0x226, 0x5, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) r4 = syz_open_dev$video(&(0x7f0000000b40), 0x7, 0x28000) ioctl$VIDIOC_STREAMOFF(r4, 0x40045613, &(0x7f0000000000)=0x3) r5 = socket$kcm(0xa, 0x2, 0x0) r6 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r6, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lc\x00', 0x5, 0x8, 0x11}, {@remote, 0x4e1d, 0x3, 0xcd}}, 0x44) sendmsg$sock(r5, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 7.845194856s ago: executing program 0 (id=1758): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) semget$private(0x0, 0x5, 0x1a4) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0) r3 = syz_io_uring_setup(0x23c, &(0x7f0000000080)={0x0, 0x760f, 0x8}, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r6 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_control_io(r6, 0x0, &(0x7f00000005c0)={0x84, &(0x7f0000000b80)=ANY=[@ANYBLOB="401e0300000072cc"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat$vsock(0xffffffffffffff9c, &(0x7f0000000700), 0x10d000, 0x0) sendmsg$unix(r1, &(0x7f0000000780)={&(0x7f0000000a00)=@abs={0xdc5d84db4e0d8ff2, 0x0, 0x4e21}, 0x6e, &(0x7f0000000400)=[{&(0x7f0000000200)="b6dfbabef5c6236520e67a7599a821ebbae8a3c3cc256499", 0x18}, {&(0x7f0000000380)="d72936bfdd3c2b964fc4e7d631da86b2f70a29acf2223ab4ba32f96511adbc5f7ca847be135b8261dae90dccfbfa9b3fa7671fe2db2e7f54e65d70f93ca64df9977123d66ac25b33f05e85ad33f9c43183fc908251a591ed4b00"/104, 0x68}, {&(0x7f0000000340)="d45f98474e05618400abc4b5", 0xc}, {0x0}, {&(0x7f00000004c0)="0a1f6058f2940e57bf7d17373739558a984daa8b3fa06dcc42caf7693577dc5312ace9369989c3373f4c22b29d72e348841083ca9377fbc80cb3fc0b551fbc55f42abb5375fdc6157609289356f03129fb959dcc29ed980e5579083d31ab4f466576b2fd92949db9faaa5097c13001630c027c2a8fbc95a0867a7f1495089b13448649203f090c73be68e733f313dcc9d3e9c84a3da8d50a7f56c399a6315b0f52908d1ace5d6d97b0d284bf933fba07b5ab41", 0xb3}, {&(0x7f0000000580)}, {&(0x7f0000000640)}], 0x7, &(0x7f00000002c0)=ANY=[@ANYRESOCT=r3, @ANYRES16=r0, @ANYRESDEC=r3, @ANYRESHEX=r4], 0x30}, 0x1) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000240), 0x0, 0xebec93e830fd2194, 0x1}) shutdown(0xffffffffffffffff, 0x1) r7 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x80000) r8 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r8, 0x0, 0x40, &(0x7f0000000500)=@raw={'raw\x00', 0x8, 0x3, 0x490, 0x0, 0xa, 0x148, 0x0, 0x60, 0x3f8, 0x2a8, 0x2a8, 0x3f8, 0x2a8, 0x3, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'bridge0\x00', 'rose0\x00'}, 0x0, 0x2f8, 0x368, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'veth1_to_team\x00', {0x0, 0x0, 0x2, 0x0, 0x0, 0xffffffff, 0xfff}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x8601, 0x6, './file0\x00'}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x4, 0x0, "f2f7b9f28413d9d8ad470ad2b60c45cb4ea6e7bf902bdc2ff8a9304d9f655c746adc0bdc773506378bc2d27efd6abb05175089830cc46186074d7de46d5af300"}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00'}, 0x0, 0x70, 0x90}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x4f0) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r7, 0x84, 0x21, 0x0, &(0x7f0000000480)) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000003a80)=ANY=[@ANYBLOB="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"], 0x1cdc}}, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x12020) r10 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r11 = ioctl$LOOP_CTL_GET_FREE(r10, 0x4c82) ioctl$LOOP_CTL_REMOVE(r10, 0x4c81, r11) syz_clone(0x82001000, &(0x7f0000001800), 0x0, &(0x7f0000001840), 0x0, 0x0) 6.657030968s ago: executing program 4 (id=1763): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r0, &(0x7f0000002c00)=[{{0x0, 0x0, 0x0}, 0x1feffe}, {{0x0, 0x0, 0x0}, 0x1000005}, {{0x0, 0x0, 0x0}, 0x6}, {{0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000480)=""/100, 0x64}, {&(0x7f0000003e00)=""/4098, 0x1002}, {&(0x7f00000003c0)=""/133, 0x85}, {&(0x7f0000000540)=""/229, 0xe5}, {&(0x7f0000000900)=""/230, 0xe6}, {&(0x7f0000000800)=""/187, 0xbb}, {&(0x7f0000000740)=""/176, 0xb0}, {&(0x7f0000000a00)=""/206}, {&(0x7f00000001c0)=""/34}, {&(0x7f00000002c0)=""/47}], 0x7}, 0x101}, {{0x0, 0x0, 0x0}, 0x40}, {{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000006c0)=""/124, 0x7c}, {&(0x7f0000000b00)=""/202, 0xca}, {&(0x7f0000001a00)=""/4107, 0x100d}, {&(0x7f0000006080)=""/4085, 0xff5}, {&(0x7f0000000240)=""/112, 0x28}, {&(0x7f0000000040)=""/104, 0x68}], 0x6, 0x0, 0x300}, 0x4db}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffde}, 0x8}], 0x8, 0x40010022, 0x0) 6.407434146s ago: executing program 4 (id=1764): unshare(0x6e000000) r0 = socket$netlink(0x10, 0x3, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100009dea7840b418fbff7bdc010203010902"], 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'ipvlan0\x00', 0x0}) r2 = gettid() sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000010000100"/20, @ANYRES32=r1, @ANYBLOB="6d3082610000000008001300", @ANYRES32=r2], 0x28}}, 0x0) (fail_nth: 3) 6.4066556s ago: executing program 3 (id=1765): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="340000003e0007010000000000000000027c00000400fc800c00018006000600"], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)) r1 = syz_open_dev$sg(0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x8a8}}, 0x8000) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000040)=ANY=[]) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000480)={0x0, 0x99, "153ee0581f0d8fa01086fc8acc8914c71c8370acfa59f18b143841b9e7878d62e7fa2d01c9d092736e0637ac36eb75d0ce92a30b57d5f6926eb95ef576361a3aeaf7006bec29afa24a92e9b39966e82777bf32fa2f70536834a3ecf8fef8d6d44f1d0af3cd5f13411d733b4b1597f527428e9936cd852b2a8f97c98aeba0da52572fcb1f48997a7a00d8477ed23be0a56e8b8402395213484c"}, &(0x7f0000000200)=0xa1) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={r3, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000240)=0x10) getsockopt$inet_sctp6_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000000040)={r4}, &(0x7f0000000100)=0x8) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000140)) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000e80)={&(0x7f0000000040)=@kern={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0}, 0x4048000) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$GIO_UNIMAP(0xffffffffffffffff, 0x4b66, &(0x7f0000000180)={0x4, &(0x7f0000000100)=[{}, {}, {}, {}]}) ioctl$KVM_SET_REGS(r8, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x400009, 0xfffffffffffffffd, 0x0, 0x2, 0x0, 0x4002004c4, 0x6, 0xffffffffffffffff, 0xc595, 0xfffffffffffffffc, 0x80000000000001, 0x6, 0xffffffffffffffff, 0x80000004000000, 0x8d], 0xeeee8000, 0x2010d3}) ioctl$KVM_RUN(r8, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000340)=[@text64={0x40, 0x0}], 0x1, 0x8, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e21}, @IFLA_GRE_FLAGS={0x8, 0xd, 0x5ff}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x101}]}}}]}, 0x50}}, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0xefff}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x5c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x20}, @NFTA_SET_EXPR={0x20, 0x11, 0x0, 0x1, @quota={{0xa}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_QUOTA_BYTES={0xc}]}}}]}, @NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xe0}}, 0x20008844) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.net/syz0\x00', 0x200002, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1a, 0x4, 0x28, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x50) 5.872934446s ago: executing program 3 (id=1767): socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) socket$nl_audit(0x10, 0x3, 0x9) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000640)="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", 0x192, 0x4044c00, &(0x7f0000000440)={0xa, 0x4e23, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x800000}, 0x1c) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) syz_open_dev$video4linux(0x0, 0x100000008, 0x0) r2 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, &(0x7f0000000180)=@id={0x1e, 0x3, 0x2, {0x4e21, 0x3}}, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f00000021c0)={0x2020}, 0x2020) write$FUSE_INIT(r3, 0x0, 0x0) getsockopt$XDP_MMAP_OFFSETS(0xffffffffffffffff, 0x11b, 0x1, &(0x7f0000000480), &(0x7f0000000500)=0x80) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) dup(r4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4000010, r1, 0x0) r5 = syz_open_dev$sndctrl(&(0x7f0000000040), 0xe26, 0x101400) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r6, &(0x7f0000000380)=[{{&(0x7f0000000200)=@sco={0x1f, @fixed}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000280)=""/95, 0x5f}], 0x1}, 0x9}], 0x1, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x11) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r5, 0xc0045520, &(0x7f00000000c0)=""/92) openat$dir(0xffffffffffffff9c, &(0x7f0000000540)='./file0\x00', 0x0, 0x4b) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) 4.438065945s ago: executing program 1 (id=1769): r0 = socket$kcm(0x29, 0x5, 0x0) syz_emit_ethernet(0x36, &(0x7f0000001800)=ANY=[@ANYBLOB="0180c200eab7527c999c9eac973f000050a245d5cde00800450000140000e0000032907800000000ffffffff11009078000000000000"], 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x1, &(0x7f0000000040)=0x8, 0x4) setsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x1, &(0x7f0000000000), 0x4) 4.261213355s ago: executing program 1 (id=1770): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_clone(0x80, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_connect(0x5, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x29, 0x6f, 0xb6, 0x8, 0x9022, 0xd484, 0xff88, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x4, 0x95, 0x0, 0x81, [{{0x9, 0x4, 0x1e, 0x80, 0x0, 0x56, 0xa7, 0xf6, 0x2}}]}}]}}, 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000080)={&(0x7f00000001c0)=[{0x1900, 0x9211, 0x0, 0x0}, {0x9, 0xa200, 0x0, 0x0}], 0x2}) 4.244181286s ago: executing program 4 (id=1771): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x2}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_int(r1, 0x0, 0x32, 0x0, &(0x7f0000000a40)) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000001040)='./binderfs/custom1\x00', 0x1, 0x0) ppoll(&(0x7f0000000000)=[{r2, 0x2009}], 0x1, 0x0, 0x0, 0x0) r3 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000800)={r3, r3, r3}, 0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={'sha384\x00'}}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x10, 0x0, &(0x7f0000000440)=[@request_death={0x400c6313}], 0x0, 0x1000000, 0x0}) syz_usb_connect(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000df2bfd404b0c0001cad7010203010902"], 0x0) r4 = socket$inet_smc(0x2b, 0x1, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2000000, 0x10010, r4, 0xffffc000) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000001000/0x4000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r5 = socket$kcm(0xa, 0x2, 0x73) sendmsg$inet(r5, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty=0xf5ff}, 0x1b, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x1000}, {&(0x7f00000011c0)="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", 0x33}], 0x2, &(0x7f00000010c0)=[@ip_tos_int={{0x14, 0x29, 0x3e}}, @ip_tos_u8={{0x38, 0x29, 0x2}}, @ip_tos_u8={{0x100000000000000}}], 0x50}, 0xff00) 4.172257826s ago: executing program 0 (id=1772): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000001c0)=ANY=[@ANYBLOB="120100009dea7840b418fbff7bdc01020301090212000100000000090401"], 0x0) r1 = syz_open_dev$loop(&(0x7f0000000040), 0x8, 0x143a81) r2 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x41e43, 0x14) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000000080)={r2, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xd, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397b5b22d0000b420a1a93cffffffffffffefff7d3d458dc4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00", [0x0, 0xfffffffffffffff8]}}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000008c0)={0x1c, &(0x7f0000000100)=ANY=[@ANYBLOB="00000100000001"], 0x0, 0x0}) r3 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) writev(r3, &(0x7f0000000040)=[{&(0x7f0000000380)="90", 0x1}], 0x1) 3.955568861s ago: executing program 3 (id=1773): socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) socket$nl_audit(0x10, 0x3, 0x9) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000640)="584e36b121ed7b017bd935c163e2992789826d0f9f7719ab278df9d5a6b635741935faa3e63c5eac7bd14a4b8fcc76ff83b91dea5139794a9dc1e9be6e4fd37030dd425eb7c97475eb675a6f784a80c476f1875e3c25fb2fe896cae044926126f1a309d9315b3c1f86f129ae1c1706253defbf3b6e9d1ad299b3647bc7a973e288617cbd0d6f7546243f6d7d16642185b1a15d42987fbd972bd1a24b1939e5b1c882def6408126dccf5687a0ca07167d943fde5bf215124439f77029b1596440d11a588970d6624a4a5edddf317915ddaf5868c047e9cce2cdc40bd743d7c4d7412455b7dec7571dd6e4bdafeafc4a24a11c1933d6b15979822731fda6c40ee6b3da410bc3ed0c022830bc63cb7917bac6dab4c651fa1510fd6158347346966806bcaced4955382b941812ebc200d19756942896ae1affbcc53859e5bcbd9deb0eeafed80ce9832643552c89bf57ee1deb2f910ee723855afd8902f59fcd6539689f1950dd181fcc65d19cf4e2ef44e5d9e059931b5a44180d7139c2b75fadf58782d08e5f26b57945bbc1239520a966db24", 0x192, 0x4044c00, &(0x7f0000000440)={0xa, 0x4e23, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x800000}, 0x1c) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) syz_open_dev$video4linux(0x0, 0x100000008, 0x0) r2 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, &(0x7f0000000180)=@id={0x1e, 0x3, 0x2, {0x4e21, 0x3}}, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000180)={0x50, 0x0, r4, {0x7, 0x29, 0x0, 0xffffffff85000014, 0x5, 0x7, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0x50) getsockopt$XDP_MMAP_OFFSETS(0xffffffffffffffff, 0x11b, 0x1, 0x0, &(0x7f0000000500)) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) dup(r5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4000010, r1, 0x0) r6 = syz_open_dev$sndctrl(&(0x7f0000000040), 0xe26, 0x101400) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r8, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r7, &(0x7f0000000380)=[{{&(0x7f0000000200)=@sco={0x1f, @fixed}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000280)=""/95, 0x5f}], 0x1}, 0x9}], 0x1, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x11) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r6, 0xc0045520, &(0x7f00000000c0)=""/92) openat$dir(0xffffffffffffff9c, &(0x7f0000000540)='./file0\x00', 0x0, 0x4b) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) 3.557154162s ago: executing program 2 (id=1774): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = openat$vimc2(0xffffffffffffff9c, &(0x7f00000008c0), 0x2, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(r1, 0xc02c564a, &(0x7f0000000000)={0x7, 0x59455247, 0x3, @discrete={0x1, 0x5}}) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="6c01000017000100000000000000000000000000000000000000ffffac1e00010000000000000000e0000002000000000000000000000000fc020000000000000000000000000000fe8000000000000000000000000000aa00000000000000000000000000000000e6cc73483bebf88631e604619c19eb92956b71c1f528d35c55cee8abd942318efad27a6bb586cb123717f942347eb40f2ea15fca5e40d3b1d69b140ebae72f5ff4c83a2b8c0f782f05ec59711c165d4ecb6e8545995929930d02d8a01b04c6a3a09f2e7f84c49e7989421d62cc492bd1faded1e1397dea6efa486eca76530eab217278a9207f35052e66f29081d192", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac1414aa000000000000000000000000ac141400"], 0x16c}}, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r3}, &(0x7f0000000240), &(0x7f0000000280)='%pS \x00'}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000004c0)={r3, &(0x7f0000000300), 0x0}, 0x20) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000000)={0x400000000000000, 0x0, &(0x7f0000000080)={&(0x7f0000000500)={0x2, 0x3, 0x0, 0x9, 0xa, 0x0, 0x0, 0x20000, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @remote}}, @sadb_sa={0x2, 0x1, 0x0, 0xfd, 0x0, 0x5, 0x4, 0x4bfffffe}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4e21, @multicast2}}]}, 0x50}}, 0x0) r6 = socket(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000005c0)={'ip6gretap0\x00', 0x0}) bind$packet(r6, &(0x7f0000000180)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @remote}, 0x14) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, r3, 0x4, '\x00', r7, 0xffffffffffffffff, 0x5, 0x4, 0x1}, 0x50) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000100)={0x8000000, 0x10000}) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r2, 0x4010ae68, &(0x7f0000000040)={0xdddd0000, 0x10000}) 3.240094052s ago: executing program 2 (id=1775): syz_usb_connect(0x5, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x29, 0x6f, 0xb6, 0x8, 0x9022, 0xd484, 0xff88, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x4, 0x95, 0x0, 0x81, [{{0x9, 0x4, 0x1e, 0x80, 0x0, 0x56, 0xa7, 0xf6, 0x2}}]}}]}}, &(0x7f0000001700)={0xffffffa0, 0x0, 0x0, 0x0, 0x16}) r0 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000080)={&(0x7f00000001c0)}) 2.828202162s ago: executing program 1 (id=1776): socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) r2 = syz_open_dev$video(&(0x7f0000000040), 0x8, 0x101840) ioctl$VIDIOC_S_SELECTION(r2, 0xc040565f, &(0x7f0000000080)={0xa, 0x0, 0x1, {0xe7ff, 0x1, 0x406, 0x870}}) r3 = socket$nl_route(0x10, 0x3, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) migrate_pages(0x0, 0x5, &(0x7f0000000000)=0x9, &(0x7f0000000080)=0x272) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006d6163736563000014000280050009000100000005000b"], 0x44}}, 0x0) r4 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r4, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @private0, 0x809}, {0xa, 0x8, 0x0, @empty}, 0x2, {[0x0, 0x1, 0xfffffffe, 0x0, 0xffffffff]}}, 0x5c) setsockopt$MRT6_ADD_MFC(r4, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback, 0x62ea450d}, {0xa, 0x4e22, 0x0, @mcast2}, 0x0, {[0x1, 0x0, 0x0, 0x0, 0x9, 0x6]}}, 0x5c) setsockopt$MRT6_ADD_MFC(r4, 0x29, 0xcc, &(0x7f00000001c0)={{0xa, 0x0, 0x0, @remote}, {0xa, 0x4e22, 0xfffffffd, @mcast1}}, 0x5c) setsockopt$MRT6_ADD_MFC(r4, 0x29, 0xcc, &(0x7f0000000080)={{0xa, 0x2, 0xffffffff, @private2}, {0xa, 0x0, 0x0, @empty}}, 0x5c) r5 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000240)=@generic={&(0x7f0000000180)='\x00', 0x0, 0x8}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000000000611214000000", @ANYRESDEC=r3], &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5}, 0x94) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) r6 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f0000000040)={0x8, 0x1, 0x1}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00'}, 0x10) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) syz_open_dev$usbfs(&(0x7f0000000000), 0x201, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 2.576579927s ago: executing program 2 (id=1777): r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) readv(r0, &(0x7f0000000480)=[{&(0x7f0000000400)=""/66, 0x42}, {&(0x7f0000002680)=""/4094, 0xffe}, {&(0x7f0000000640)=""/183, 0xb7}], 0x3) r1 = socket(0x1, 0x6, 0xa) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0xcc}}, 0x0) syz_clone3(&(0x7f0000000580)={0x104000000, &(0x7f0000000100), &(0x7f0000000140), &(0x7f00000001c0)=0x0, {0x29}, &(0x7f0000000200)=""/237, 0xed, &(0x7f0000000300)=""/212, &(0x7f0000000400)=[0x0, 0xffffffffffffffff], 0x2}, 0x58) tkill(r3, 0x14) futex_waitv(&(0x7f0000000180)=[{0x0, &(0x7f0000000040), 0x2}], 0x1, 0x0, 0x0, 0x0) futex(&(0x7f0000000040), 0x1, 0x0, 0x0, 0x0, 0x0) sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) 2.266829635s ago: executing program 3 (id=1778): mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xd) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$unix(0x1, 0x2, 0x0) getsockopt$IP_SET_OP_GET_FNAME(r0, 0x1, 0x53, &(0x7f0000000080)={0x8, 0x7, 0x0, 'syz2\x00'}, &(0x7f00000000c0)=0x2c) 2.196851477s ago: executing program 2 (id=1779): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f00000001c0)=ANY=[], 0x8) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) sendmmsg$inet6(r0, &(0x7f0000001a40)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000180)="827d6c4fc3af", 0x6}], 0x1}}, {{&(0x7f0000000000)={0xa, 0x4e24, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7}, 0x1c, &(0x7f00000005c0)=[{&(0x7f0000000300)="117955b401ded79c286ec99067cad9022230d3cda2", 0x15}], 0x1}}], 0x2, 0x4400c800) sendto$inet6(r0, &(0x7f0000000300), 0x16, 0x3b00, 0x0, 0xfffffffffffffdfd) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42901, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$inet(0x2, 0x3, 0x2) socket$kcm(0x2, 0xa, 0x2) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x210600, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00'}) write$tun(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="034886dd0900300003003000000060ce902d120c110081e949b93897bc3b0000000000007d01ff020000000000000000000000000001"], 0xfdef) 2.166576092s ago: executing program 3 (id=1780): r0 = socket$inet_tcp(0x2, 0x1, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) getsockopt$inet_opts(r0, 0x0, 0x33, 0x0, &(0x7f0000000080)) socket$inet(0x2, 0x4000000000000001, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x6414, &(0x7f00000000c0)={0x0, 0x7f7e, 0x4000, 0x0, 0x379}, &(0x7f0000000040)=0x0, &(0x7f0000000080)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r4, &(0x7f000000e280)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r4, &(0x7f000000c280)="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", 0x2000, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x90, 0x0, 0x0, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x2000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r4, &(0x7f0000000380)={0x50, 0x0, r5, {0x7, 0x2b, 0x0, 0x10815, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}}, 0x50) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x6, 0xfffa}, 0x1d, [0x6, 0xc95a, 0xfffffff3, 0x9, 0x7f, 0x2, 0x1, 0x7f, 0x6, 0xfffffff9, 0xfffffff2, 0x5f, 0xa, 0x3, 0xffff2d37, 0x1dd2, 0x6, 0x7, 0x0, 0x80000001, 0x4, 0x7, 0x3, 0x3c5b, 0x1, 0x24, 0xffffffff, 0xfffffffe, 0x1f461e2c, 0x2, 0xe661, 0x4, 0x9, 0x3, 0x7fff, 0x4c74, 0x8f00, 0x642, 0x3, 0xa, 0x0, 0x71, 0x7, 0x7, 0x103, 0x0, 0x5, 0x3c, 0x91, 0x6, 0xfffffffd, 0x3, 0x5, 0x4, 0x8, 0x0, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x8, 0x12f, 0x8000, 0x10, 0x8, 0x129432e2, 0xcb, 0xf9, 0xd, 0x2bf, 0x6c9, 0x9, 0xfffffffe, 0x7, 0x0, 0x7, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0xa, 0x4, 0x4000, 0x8000, 0x9, 0x400, 0x1, 0x6, 0xfffffffd, 0xff, 0x1005, 0x7ff, 0x5f31, 0x4, 0x0, 0x6, 0x2, 0x9, 0x4, 0x9, 0x8, 0x9, 0x6, 0x5, 0x0, 0x1, 0x8000, 0xffff, 0x2, 0x7f, 0x9, 0x5, 0x10003, 0x4, 0x1, 0x7, 0xb, 0x9, 0x48c93690, 0x3, 0xff], [0x7, 0x4, 0x0, 0x64e, 0xfffffdfe, 0x7fffffff, 0x8d2, 0x9, 0x1, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x10000009, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0xf, 0x8, 0x4, 0x6d01, 0x5, 0x3b, 0x3, 0x200, 0x80, 0x3, 0x4, 0x2, 0x0, 0xa2, 0x7, 0x53cf697b, 0x5, 0x6, 0x54fe12d6, 0xbf, 0x200, 0x3, 0x400002, 0xfffffff9, 0x0, 0x6, 0x5, 0x0, 0x6, 0xfffffffb, 0x120000, 0x3, 0x6, 0x9, 0x4, 0x3], [0x9, 0xbb2f, 0x3, 0x7, 0x5, 0x938, 0x6, 0x6, 0x0, 0x5, 0xce7, 0x1ff, 0x6, 0x8ad, 0x5, 0x3, 0x101, 0x10000, 0x6, 0x7fff, 0x8ffff, 0xa620, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x5, 0xffffffff, 0x7ffffffe, 0x5, 0x8, 0xc8, 0x3, 0x3, 0xffff, 0x3, 0x9, 0x100, 0x9602, 0xa, 0x2, 0x4, 0x6, 0x1, 0x10000, 0x5, 0x8, 0x2b91, 0xa1f, 0x8, 0x9, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1c, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c) openat$mice(0xffffffffffffff9c, &(0x7f0000000080), 0x0) r6 = syz_io_uring_setup(0x9eb, &(0x7f0000000140)={0x0, 0xfad6}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r6, 0xdb7, 0x0, 0x62, 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x822b01) syz_io_uring_setup(0x41a8, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000004, 0x10012, 0xffffffffffffffff, 0x0) 2.060180156s ago: executing program 2 (id=1781): r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCDELRT(r0, 0x890b, &(0x7f0000000080)={@ipv4={'\x00', '\xff\xff', @remote}, @remote, @local, 0x0, 0x0, 0x0, 0xffe0, 0x0, 0x100282}) 1.992972692s ago: executing program 3 (id=1782): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x30, 0x24, 0x3fe3aa0262d8c583, 0x2, 0xfffffffc, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0xfff2, 0x6}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x2000400c) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mknod$loop(&(0x7f0000000080)='./bus\x00', 0x1, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x2) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) mknod$loop(0x0, 0x2, 0x1) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002fc0)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) read$FUSE(r4, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r4, &(0x7f0000000040)={0x50, 0x0, r5, {0x7, 0x1f, 0x20000000, 0x4041}}, 0x50) syz_fuse_handle_req(r4, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) syz_usb_connect$cdc_ncm(0x3, 0x6e, &(0x7f0000000000)=ANY=[@ANYBLOB="12011001020000082505a1a44000010203010902"], 0xfffffffffffffffc) r7 = syz_open_dev$loop(&(0x7f0000000000), 0x4, 0x2080) ioctl$LOOP_SET_FD(r7, 0x4c00, r6) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffbf}, 0x48) dup2(r6, r4) 1.978501391s ago: executing program 2 (id=1783): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_int(r0, 0x29, 0xcf, 0x0, &(0x7f0000000140)=0xa4ffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000080)="1400000016000b63d25a80648c2566e506bce1e8", 0x14}], 0x1}, 0x0) io_setup(0x8, &(0x7f00000001c0)) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x5, 0x0, 0x400, 0x0, 0x13a83379, 0x0, 0x1}, 0x0) r4 = syz_usb_connect$uac1(0x0, 0xac, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109029a0003010000000904000000010100000a24010000000201020c240200000000"], 0x0) syz_usb_control_io(r4, &(0x7f0000000140)={0x2c, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x407}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac1(r4, &(0x7f0000001840)={0x14, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0003fe000000fe03f2b3c72b250b0000e02dc4a3dbd82fa9c5a974353bfca2880303c2acd4d5eb6b4f759c3e063a61b0d1ecf881885b845adf4225538813fee0eb89f88ba0ef8dc696469698f9f51d90aa69e8da87c72a80cb8c6f526248b5d074bc06e45f71ca2baa74fa8f9878246fbd298f23575f27a2157f0f8e829d4140e4e243104aae11a7969d6bd086e30da364425b2b4eefae8d42420c0d6450b4d89192be9b97283a9908b785e11929364c3c129aa343e14c0cab4d734a59e4c3447fb222e8bcdc21fb57ccd9dadc8cdc6fa2fd090cc0f333aac11b18919460e7682ae6bedfc55df7e2e414d662de89b8091144c33776b612015ceb049048dd113da171"]}, 0x0) syz_usb_control_io(r4, 0x0, &(0x7f0000000c40)={0x84, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = getpid() r6 = syz_pidfd_open(r5, 0x0) pidfd_getfd(r6, 0xffffffffffffffff, 0x0) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r7, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$NONE(r7, 0x3b89, &(0x7f0000000180)={0x28, 0x1, r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r7, 0x3b85, &(0x7f0000000000)={0x28, 0x4, 0x0, 0x0, &(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8}) 1.427382195s ago: executing program 1 (id=1784): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @mcast2, 0x1}, 0x1c) syz_emit_ethernet(0x7e, &(0x7f0000000240)={@local, @multicast, @void, {@ipv6={0x86dd, @udp={0xa, 0x6, "331800", 0x48, 0x11, 0x0, @remote, @mcast2, {[], {0x4e20, 0x4e20, 0x48, 0x0, @wg=@cookie={0x3, 0x10000000, "dc521c259b538a2bf2a113dc2eeec0a072edf20b6d59027f", "d646c0884508546e551af9e59631718ba08900"}}}}}}}, 0x0) 1.301195207s ago: executing program 1 (id=1785): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="4000000010000d042cbd30000000000000000000", @ANYBLOB="09820000000069001400128009000100626f6e6400000000040002800a0041"], 0x40}, 0x1, 0x0, 0x0, 0x400480c}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000540)={'ip6tnl0\x00'}) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x7, 0x4, 0x438, 0x240, 0x240, 0x0, 0x350, 0x370, 0x350, 0x4, 0x0, {[{{@arp={@private, @local, 0x0, 0x0, 0x0, 0x0, {@mac=@broadcast}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth1_to_batadv\x00', 'batadv0\x00'}, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "bc2e329885ea3654891fbae8c6c66e07212432bde429bcda7deb48d85c6f5e269c2021c8f8dc09af0b3f2e10e8ac79cc67e264613c4be6838ee2daacf7926a6e"}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @rand_addr, @broadcast}}}, {{@arp={@private, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0\x00', 'veth0_to_bond\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x488) r2 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000580), 0x9, 0x2a000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000005c0)='./cgroup/syz0\x00', 0x1ff) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r3, 0xc01064bd, &(0x7f0000000280)={&(0x7f00000008c0)="00a1a4f6ab5fa87669f21978401f7811767c2be80c57c5cd3acd2a7ff24aa2ea5ae7a6cafe2c4b44fd282279dec16d2cd2c03a6803a0780af904eae39961426b", 0x40}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000480)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r3, 0xc01064c8, &(0x7f0000000340)={0x0, 0x0, 0x0}) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000080)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha512\x00'}, 0x58) r6 = accept$alg(r5, 0x0, 0x0) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000480)="b19ccccf84f531d9ec214627c11430c1", 0x10) sendmmsg$alg(r6, &(0x7f0000004ac0)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40080}], 0x2, 0x4000005) ioctl$DRM_IOCTL_MODE_GETPLANE(r3, 0xc02064b6, &(0x7f00000001c0)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r3, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0], 0x5, r4, 0xeeeeeeee}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f00003be000/0x3000)=nil, 0x3000, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000240), 0x208e24b) r8 = syz_open_procfs(0x0, &(0x7f0000000240)='smaps\x00') pread64(r8, &(0x7f0000000280)=""/70, 0x46, 0xbbf9) close(r2) 1.146055437s ago: executing program 0 (id=1786): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_clone(0x80, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_connect(0x5, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x29, 0x6f, 0xb6, 0x8, 0x9022, 0xd484, 0xff88, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x4, 0x95, 0x0, 0x81, [{{0x9, 0x4, 0x1e, 0x80, 0x0, 0x56, 0xa7, 0xf6, 0x2}}]}}]}}, 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000080)={&(0x7f00000001c0)=[{0x1900, 0x9211, 0x0, 0x0}, {0x9, 0xa200, 0x0, 0x0}], 0x2}) 1.014107614s ago: executing program 4 (id=1787): syz_usb_connect(0x5, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x29, 0x6f, 0xb6, 0x8, 0x9022, 0xd484, 0xff88, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x4, 0x95, 0x0, 0x81, [{{0x9, 0x4, 0x1e, 0x80, 0x0, 0x56, 0xa7, 0xf6, 0x2}}]}}]}}, &(0x7f0000001700)={0xffffffa0, 0x0, 0x0, 0x0, 0x16}) r0 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000080)={&(0x7f00000001c0)=[{0x1a00, 0x9211, 0x0, 0x0}], 0x1}) 313.300999ms ago: executing program 1 (id=1788): socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) socket$nl_audit(0x10, 0x3, 0x9) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000640)="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", 0x192, 0x4044c00, &(0x7f0000000440)={0xa, 0x4e23, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x800000}, 0x1c) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) syz_open_dev$video4linux(0x0, 0x100000008, 0x0) r2 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, &(0x7f0000000180)=@id={0x1e, 0x3, 0x2, {0x4e21, 0x3}}, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000180)={0x50, 0x0, r4, {0x7, 0x29, 0x0, 0xffffffff85000014, 0x5, 0x7, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0x50) getsockopt$XDP_MMAP_OFFSETS(0xffffffffffffffff, 0x11b, 0x1, 0x0, &(0x7f0000000500)) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) dup(r5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4000010, r1, 0x0) r6 = syz_open_dev$sndctrl(&(0x7f0000000040), 0xe26, 0x101400) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r8, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r7, &(0x7f0000000380)=[{{&(0x7f0000000200)=@sco={0x1f, @fixed}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000280)=""/95, 0x5f}], 0x1}, 0x9}], 0x1, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x11) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r6, 0xc0045520, &(0x7f00000000c0)=""/92) openat$dir(0xffffffffffffff9c, &(0x7f0000000540)='./file0\x00', 0x0, 0x4b) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) 0s ago: executing program 0 (id=1789): rseq(&(0x7f0000000680), 0x20, 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000000)=""/188) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge0\x00'}) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) lseek(0xffffffffffffffff, 0x1000000000931f, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000040)) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) r3 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) r4 = syz_io_uring_setup(0x49b, &(0x7f0000000400)={0x0, 0xcc90, 0x100, 0x3, 0x288}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_WRITE={0x17, 0x0, 0x4004, @fd=r3, 0xb, 0x0, 0x9b0fe47f2779109b, 0x14, 0x1}) io_uring_enter(r4, 0x3513, 0x217, 0xa1, 0x0, 0x0) kernel console output (not intermixed with test programs): s invalid maxpacket 0 [ 545.974955][T11407] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 546.017465][ T957] usb 1-1: Product: syz [ 546.023002][ T957] usb 1-1: Manufacturer: syz [ 546.035055][T10039] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1023 [ 546.045556][ T957] usb 1-1: SerialNumber: syz [ 546.055572][T10039] usb 2-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 546.066190][T10039] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 546.075853][ T957] usb 1-1: config 0 descriptor?? [ 546.098519][T10039] usb 2-1: Product: syz [ 546.106093][ T957] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 546.118218][ T957] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 546.125971][T10039] usb 2-1: Manufacturer: syz [ 546.131054][T10039] usb 2-1: SerialNumber: syz [ 546.148898][T10039] usb 2-1: config 0 descriptor?? [ 546.158643][T11406] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 546.546021][T10039] mcba_usb 2-1:0.0 can0: failed tx_urb -90 [ 546.590085][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 546.631190][T10039] mcba_usb 2-1:0.0 can0: Failed to send cmd (169) [ 546.724178][T10039] mcba_usb 2-1:0.0 can0: failed tx_urb -90 [ 546.743451][T10039] mcba_usb 2-1:0.0 can0: Failed to send cmd (169) [ 546.771008][T10039] mcba_usb 2-1:0.0: Microchip CAN BUS Analyzer connected [ 546.888724][ T957] em28xx 1-1:0.0: chip ID is em28178 [ 547.630266][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 547.648527][ T957] usb 4-1: USB disconnect, device number 53 [ 547.696985][T11421] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 547.731524][T11421] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 548.670318][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 549.031174][T10054] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 549.092882][T10053] usb 1-1: USB disconnect, device number 67 [ 549.100279][T10053] em28xx 1-1:0.0: Disconnecting em28xx [ 549.130047][T10053] em28xx 1-1:0.0: Freeing device [ 549.210979][T11448] netlink: 'syz.0.1405': attribute type 2 has an invalid length. [ 549.220097][T10054] usb 5-1: Using ep0 maxpacket: 8 [ 549.234988][T10054] usb 5-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 549.246521][T10054] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 549.262463][T10054] usb 5-1: Product: syz [ 549.278869][T10054] usb 5-1: Manufacturer: syz [ 549.317137][T10054] usb 5-1: SerialNumber: syz [ 549.404569][T10054] usb 5-1: config 0 descriptor?? [ 549.445077][T10054] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 549.489299][T11445] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 549.499998][T11445] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 549.534072][T11445] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1404'. [ 549.551830][T11445] bridge0: port 3(macsec0) entered blocking state [ 549.558596][T11445] bridge0: port 3(macsec0) entered disabled state [ 549.565498][T11445] macsec0: entered allmulticast mode [ 549.570953][T11445] veth1_macvtap: entered allmulticast mode [ 549.580780][T11445] macsec0: entered promiscuous mode [ 549.589600][T11445] bridge0: port 3(macsec0) entered blocking state [ 549.596374][T11445] bridge0: port 3(macsec0) entered forwarding state [ 549.709892][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 549.786535][T10040] usb 2-1: USB disconnect, device number 92 [ 549.794967][T10040] mcba_usb 2-1:0.0 can0: device disconnected [ 549.854929][ T5528] mcba_usb 2-1:0.0 can0: bit-timing not yet defined [ 549.872672][T10054] gspca_sonixj: reg_r err -32 [ 549.878182][T10054] sonixj 5-1:0.0: probe with driver sonixj failed with error -32 [ 550.354125][T11464] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 550.365512][T11464] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 550.470546][T10040] usb 2-1: new full-speed USB device number 93 using dummy_hcd [ 550.751508][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 551.292695][T10040] usb 2-1: config 0 has an invalid interface number: 31 but max is 0 [ 551.302901][T10040] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 551.431011][T10040] usb 2-1: config 0 has no interface number 0 [ 551.474802][T10040] usb 2-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 551.489249][T10040] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 551.782196][T10040] usb 2-1: Product: syz [ 551.786771][T10040] usb 2-1: Manufacturer: syz [ 551.789880][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 551.792030][T10040] usb 2-1: SerialNumber: syz [ 551.830725][T10040] usb 2-1: config 0 descriptor?? [ 551.847880][T10040] hub 2-1:0.31: bad descriptor, ignoring hub [ 551.859465][T10040] hub 2-1:0.31: probe with driver hub failed with error -5 [ 551.882529][T10040] usb 2-1: Found UVC 0.04 device syz (046d:08c3) [ 551.896887][T10040] uvcvideo 2-1:0.31: Entity type for entity Output 6 was not initialized! [ 551.978857][T10040] usb 2-1: Failed to create links for entity 6 [ 551.994514][T10040] usb 2-1: Failed to register entities (-22). [ 552.242520][T10040] usb 2-1: USB disconnect, device number 93 [ 552.619928][T10040] usb 5-1: USB disconnect, device number 58 [ 552.830284][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 553.100322][T10039] usb 1-1: new low-speed USB device number 68 using dummy_hcd [ 553.292150][T10039] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 553.323436][T10039] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 553.372234][T10039] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00 [ 553.506307][T10039] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 553.549475][T10039] usb 1-1: config 0 descriptor?? [ 553.653297][T11511] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 553.675166][T11511] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 553.705512][T11511] tc_dump_action: action bad kind [ 553.729875][T10052] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 553.763814][T11511] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 553.807058][T11511] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 553.869863][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 554.057971][T11493] bridge0: port 4(batadv1) entered blocking state [ 554.068037][T11493] bridge0: port 4(batadv1) entered disabled state [ 554.092852][T11493] batadv1: entered allmulticast mode [ 554.101258][T11493] batadv1: entered promiscuous mode [ 554.110116][T10052] usb 5-1: Using ep0 maxpacket: 16 [ 554.120733][T10052] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 554.143170][T10052] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 554.164384][T10052] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1023 [ 554.168874][T10039] kone 0003:1E7D:2CED.0010: collection stack underflow [ 554.178738][T10052] usb 5-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 554.200908][T10052] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 554.209215][T10052] usb 5-1: Product: syz [ 554.246398][T10052] usb 5-1: Manufacturer: syz [ 554.256296][T10052] usb 5-1: SerialNumber: syz [ 554.257410][T10039] kone 0003:1E7D:2CED.0010: item 0 4 0 12 parsing failed [ 554.293522][T10052] usb 5-1: config 0 descriptor?? [ 554.300284][T11506] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 554.318622][T10052] mcba_usb 5-1:0.0 can0: failed tx_urb -90 [ 554.324982][T10052] mcba_usb 5-1:0.0 can0: Failed to send cmd (169) [ 554.353450][T10052] mcba_usb 5-1:0.0 can0: failed tx_urb -90 [ 554.378869][T10052] mcba_usb 5-1:0.0 can0: Failed to send cmd (169) [ 554.384109][T10039] kone 0003:1E7D:2CED.0010: parse failed [ 554.397255][T10052] mcba_usb 5-1:0.0: Microchip CAN BUS Analyzer connected [ 554.402820][T10039] kone 0003:1E7D:2CED.0010: probe with driver kone failed with error -22 [ 554.551745][ T36] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 554.561387][ T36] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 554.669690][T10039] usb 1-1: USB disconnect, device number 68 [ 554.919899][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 555.367542][T11527] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1423'. [ 555.462922][T11527] 8021q: adding VLAN 0 to HW filter on device bond1 [ 555.623310][T11527] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 555.959862][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 556.515586][T10039] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 556.712353][T10039] usb 1-1: config index 0 descriptor too short (expected 65535, got 27) [ 556.773028][T10039] usb 1-1: config 56 has too many interfaces: 49, using maximum allowed: 32 [ 556.788506][T10039] usb 1-1: config 56 has an invalid descriptor of length 55, skipping remainder of the config [ 556.805903][T10039] usb 1-1: config 56 has 0 interfaces, different from the descriptor's value: 49 [ 556.828705][T10039] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 556.950258][T10039] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 556.989908][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 557.195777][T10039] usb 1-1: string descriptor 0 read error: -71 [ 557.238666][T10039] usb 1-1: USB disconnect, device number 69 [ 557.441993][T10037] usb 5-1: USB disconnect, device number 59 [ 557.449215][T10037] mcba_usb 5-1:0.0 can0: device disconnected [ 557.652590][T11562] FAULT_INJECTION: forcing a failure. [ 557.652590][T11562] name failslab, interval 1, probability 0, space 0, times 0 [ 557.699253][T11562] CPU: 0 UID: 0 PID: 11562 Comm: syz.4.1430 Not tainted syzkaller #0 PREEMPT(full) [ 557.699273][T11562] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 557.699280][T11562] Call Trace: [ 557.699285][T11562] [ 557.699291][T11562] dump_stack_lvl+0x189/0x250 [ 557.699309][T11562] ? __pfx____ratelimit+0x10/0x10 [ 557.699321][T11562] ? __pfx_dump_stack_lvl+0x10/0x10 [ 557.699335][T11562] ? __pfx__printk+0x10/0x10 [ 557.699353][T11562] ? __pfx___might_resched+0x10/0x10 [ 557.699364][T11562] ? fs_reclaim_acquire+0x7d/0x100 [ 557.699386][T11562] should_fail_ex+0x414/0x560 [ 557.699405][T11562] should_failslab+0xa8/0x100 [ 557.699423][T11562] __kmalloc_cache_noprof+0x70/0x3d0 [ 557.699438][T11562] ? inet6_rtm_newroute+0x7f3/0x18c0 [ 557.699455][T11562] inet6_rtm_newroute+0x7f3/0x18c0 [ 557.699472][T11562] ? nlmon_xmit+0xb0/0x100 [ 557.699484][T11562] ? kmem_cache_free+0x18f/0x400 [ 557.699501][T11562] ? __pfx_inet6_rtm_newroute+0x10/0x10 [ 557.699515][T11562] ? __local_bh_enable_ip+0x12d/0x1c0 [ 557.699536][T11562] ? __dev_queue_xmit+0x27b/0x3b50 [ 557.699552][T11562] ? __dev_queue_xmit+0x1d79/0x3b50 [ 557.699586][T11562] ? __pfx_inet6_rtm_newroute+0x10/0x10 [ 557.699599][T11562] rtnetlink_rcv_msg+0x7cf/0xb70 [ 557.699613][T11562] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 557.699634][T11562] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 557.699644][T11562] ? ref_tracker_free+0x63a/0x7d0 [ 557.699655][T11562] ? __asan_memcpy+0x40/0x70 [ 557.699668][T11562] ? __pfx_ref_tracker_free+0x10/0x10 [ 557.699685][T11562] netlink_rcv_skb+0x205/0x470 [ 557.699706][T11562] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 557.699726][T11562] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 557.699756][T11562] ? netlink_deliver_tap+0x2e/0x1b0 [ 557.699785][T11562] netlink_unicast+0x82c/0x9e0 [ 557.699823][T11562] ? __pfx_netlink_unicast+0x10/0x10 [ 557.699853][T11562] ? netlink_sendmsg+0x642/0xb30 [ 557.699871][T11562] ? skb_put+0x11b/0x210 [ 557.699896][T11562] netlink_sendmsg+0x805/0xb30 [ 557.699928][T11562] ? __pfx_netlink_sendmsg+0x10/0x10 [ 557.699952][T11562] ? aa_sock_msg_perm+0xf1/0x1d0 [ 557.699973][T11562] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 557.699992][T11562] ? __pfx_netlink_sendmsg+0x10/0x10 [ 557.700013][T11562] __sock_sendmsg+0x21c/0x270 [ 557.700045][T11562] ____sys_sendmsg+0x52d/0x830 [ 557.700073][T11562] ? __pfx_____sys_sendmsg+0x10/0x10 [ 557.700107][T11562] ? import_iovec+0x74/0xa0 [ 557.700136][T11562] ___sys_sendmsg+0x21f/0x2a0 [ 557.700162][T11562] ? __pfx____sys_sendmsg+0x10/0x10 [ 557.700224][T11562] ? __fget_files+0x2a/0x420 [ 557.700241][T11562] ? __fget_files+0x3a0/0x420 [ 557.700269][T11562] __sys_sendmmsg+0x227/0x430 [ 557.700299][T11562] ? __pfx___sys_sendmmsg+0x10/0x10 [ 557.700319][T11562] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 557.700370][T11562] ? ksys_write+0x22a/0x250 [ 557.700396][T11562] ? __pfx_ksys_write+0x10/0x10 [ 557.700418][T11562] ? rcu_is_watching+0x15/0xb0 [ 557.700445][T11562] __x64_sys_sendmmsg+0xa0/0xc0 [ 557.700471][T11562] do_syscall_64+0xfa/0x3b0 [ 557.700491][T11562] ? lockdep_hardirqs_on+0x9c/0x150 [ 557.700510][T11562] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 557.700528][T11562] ? clear_bhb_loop+0x60/0xb0 [ 557.700552][T11562] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 557.700570][T11562] RIP: 0033:0x7f103558ebe9 [ 557.700589][T11562] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 557.700606][T11562] RSP: 002b:00007f1036420038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 557.700635][T11562] RAX: ffffffffffffffda RBX: 00007f10357c5fa0 RCX: 00007f103558ebe9 [ 557.700649][T11562] RDX: 04000000000001f2 RSI: 0000200000000000 RDI: 0000000000000003 [ 557.700662][T11562] RBP: 00007f1036420090 R08: 0000000000000000 R09: 0000000000000000 [ 557.700674][T11562] R10: 00000000000000fc R11: 0000000000000246 R12: 0000000000000001 [ 557.700685][T11562] R13: 00007f10357c6038 R14: 00007f10357c5fa0 R15: 00007f10358efa28 [ 557.700716][T11562] [ 557.741311][T11564] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 558.041322][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 558.203878][T11564] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 559.069885][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 560.109864][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 560.456125][T11608] netlink: 'syz.3.1439': attribute type 15 has an invalid length. [ 561.149947][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 562.189869][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 563.077248][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.083796][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.229945][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 563.392413][T10054] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 563.600715][T10054] usb 5-1: config 0 has no interfaces? [ 563.617265][T10054] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 563.722294][T10054] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 563.753605][T10054] usb 5-1: Product: syz [ 563.771159][T10054] usb 5-1: Manufacturer: syz [ 563.808970][T10054] usb 5-1: SerialNumber: syz [ 563.831556][T10054] usb 5-1: config 0 descriptor?? [ 564.269869][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 564.644705][T11647] netlink: 'syz.2.1448': attribute type 2 has an invalid length. [ 564.730983][T11650] loop8: detected capacity change from 0 to 16384 [ 565.024988][T11652] loop8: detected capacity change from 16384 to 0 [ 565.025772][ C1] blk_print_req_error: 5 callbacks suppressed [ 565.025790][ C1] I/O error, dev loop8, sector 10240 op 0x0:(READ) flags 0x80700 phys_seg 32 prio class 2 [ 565.309907][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 565.466277][T11659] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1451'. [ 565.513265][T11659] input: syz1 as /devices/virtual/input/input45 [ 565.706798][T10052] usb 1-1: new high-speed USB device number 70 using dummy_hcd [ 565.862898][T10052] usb 1-1: Using ep0 maxpacket: 8 [ 565.870222][T10052] usb 1-1: unable to get BOS descriptor or descriptor too short [ 565.878880][T10052] usb 1-1: config 4 has an invalid interface number: 30 but max is 0 [ 565.902255][T10052] usb 1-1: config 4 has no interface number 0 [ 565.908693][T10052] usb 1-1: config 4 interface 30 has no altsetting 0 [ 565.925132][T10037] usb 5-1: USB disconnect, device number 60 [ 565.947583][T10052] usb 1-1: string descriptor 0 read error: -22 [ 565.963669][T10052] usb 1-1: New USB device found, idVendor=9022, idProduct=d484, bcdDevice=ff.88 [ 565.994985][T10052] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 566.054676][T10052] dvb-usb: found a 'TeVii S482 (tuner 2)' in warm state. [ 566.076144][T10052] dw2102: su3000_power_ctrl: 1, initialized 0 [ 566.095443][T10052] dvb-usb: bulk message failed: -22 (2/0) [ 566.156045][T10052] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 566.205615][T10052] dvbdev: DVB: registering new adapter (TeVii S482 (tuner 2)) [ 566.215945][T10052] usb 1-1: media controller created [ 566.224117][T10052] dvb-usb: bulk message failed: -22 (6/0) [ 566.232775][T10052] dw2102: i2c transfer failed. [ 566.238793][T10052] dvb-usb: bulk message failed: -22 (6/0) [ 566.247835][T10052] dw2102: i2c transfer failed. [ 566.255276][T11658] dvb-usb: bulk message failed: -22 (1/0) [ 566.263384][T11658] dw2102: i2c transfer failed. [ 566.269383][T11658] dvb-usb: bulk message failed: -22 (3/0) [ 566.277275][T11658] dw2102: i2c transfer failed. [ 566.287176][T10052] dvb-usb: bulk message failed: -22 (6/0) [ 566.312482][T10052] dw2102: i2c transfer failed. [ 566.317868][T10052] dvb-usb: bulk message failed: -22 (6/0) [ 566.333028][T10052] dw2102: i2c transfer failed. [ 566.338003][T10052] dvb-usb: bulk message failed: -22 (6/0) [ 566.349868][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 566.361554][T10052] dw2102: i2c transfer failed. [ 566.366356][T10052] dvb-usb: bulk message failed: -22 (6/0) [ 566.385330][T10052] dw2102: i2c transfer failed. [ 566.410673][T10052] dvb-usb: MAC address: 02:02:02:02:02:02 [ 566.478236][T10052] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 566.518325][T10052] dvb-usb: bulk message failed: -22 (3/0) [ 566.577700][T10052] dw2102: command 0x0e transfer failed. [ 566.717091][T10052] dvb-usb: bulk message failed: -22 (3/0) [ 566.723233][T10052] dw2102: command 0x0e transfer failed. [ 566.898095][T11670] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1456'. [ 566.910937][T11670] netlink: 'syz.2.1456': attribute type 7 has an invalid length. [ 566.918899][T11670] netlink: 'syz.2.1456': attribute type 8 has an invalid length. [ 566.945328][T11670] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1456'. [ 567.040036][T10052] dvb-usb: bulk message failed: -22 (3/0) [ 567.045857][T10052] dw2102: command 0x0e transfer failed. [ 567.205538][T10052] dvb-usb: bulk message failed: -22 (3/0) [ 567.326664][T10052] dw2102: command 0x0e transfer failed. [ 567.345402][T10052] dvb-usb: bulk message failed: -22 (1/0) [ 567.358297][T10052] dw2102: command 0x51 transfer failed. [ 567.371391][T10052] dvb-usb: bulk message failed: -22 (5/0) [ 567.389979][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 567.405156][T10052] dw2102: i2c probe for address 0x68 failed. [ 567.417315][T10052] dvb-usb: bulk message failed: -22 (5/0) [ 567.426899][T10052] dw2102: i2c probe for address 0x69 failed. [ 567.437937][T10052] dvb-usb: bulk message failed: -22 (5/0) [ 567.448559][T10052] dw2102: i2c probe for address 0x6a failed. [ 567.461930][T10052] dw2102: probing for demodulator failed. Is the external power switched on? [ 567.620968][T10052] dvb-usb: no frontend was attached by 'TeVii S482 (tuner 2)' [ 567.689838][T10040] usb 2-1: new full-speed USB device number 94 using dummy_hcd [ 567.732007][T10052] rc_core: IR keymap rc-tt-1500 not found [ 567.819845][T10052] Registered IR keymap rc-empty [ 567.845306][T10040] usb 2-1: New USB device found, idVendor=07c9, idProduct=0012, bcdDevice=c2.f4 [ 567.854843][T10052] rc rc0: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0 [ 568.116928][T10052] input: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0/input46 [ 568.147195][T10040] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 568.275613][T10052] dvb-usb: schedule remote query interval to 250 msecs. [ 568.283342][T10040] usb 2-1: Product: syz [ 568.283369][T10040] usb 2-1: Manufacturer: syz [ 568.283384][T10040] usb 2-1: SerialNumber: syz [ 568.311661][T10052] dw2102: su3000_power_ctrl: 0, initialized 1 [ 568.318036][T10052] dvb-usb: TeVii S482 (tuner 2) successfully initialized and connected. [ 568.341013][T10040] usb 2-1: config 0 descriptor?? [ 568.360099][T10052] usb 1-1: USB disconnect, device number 70 [ 568.429857][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 568.632485][T11698] raw_sendmsg: syz.3.1464 forgot to set AF_INET. Fix it! [ 568.751268][T10052] dvb-usb: TeVii S482 (tuner 2) successfully deinitialized and disconnected. [ 569.106175][T11685] syz.4.1461 (11685): drop_caches: 2 [ 569.469880][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 570.189924][T10039] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 570.362208][T10039] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 570.376577][T10039] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 570.410035][T10039] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 570.477893][T10039] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 570.509863][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 570.529258][T10039] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 570.542350][T10039] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 570.556166][T10039] usb 4-1: Manufacturer: syz [ 570.574781][T10039] usb 4-1: config 0 descriptor?? [ 570.993332][T10039] appleir 0003:05AC:8243.0011: unknown main item tag 0x0 [ 571.034791][T10039] appleir 0003:05AC:8243.0011: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.3-1/input0 [ 571.116466][T10053] usb 2-1: USB disconnect, device number 94 [ 571.190217][ T30] kauditd_printk_skb: 46 callbacks suppressed [ 571.190237][ T30] audit: type=1326 audit(1757286665.993:435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11733 comm="syz.1.1474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1d2d8ebe9 code=0x7ffc0000 [ 571.240827][ T30] audit: type=1326 audit(1757286666.023:436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11733 comm="syz.1.1474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1d2d8ebe9 code=0x7ffc0000 [ 571.263246][ C1] vkms_vblank_simulate: vblank timer overrun [ 571.282353][T11712] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 571.330378][T11712] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 571.448455][ T30] audit: type=1326 audit(1757286666.023:437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11733 comm="syz.1.1474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7fc1d2d8ebe9 code=0x7ffc0000 [ 571.487261][T11712] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 571.549989][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 571.600520][T11712] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 571.659986][T11740] FAULT_INJECTION: forcing a failure. [ 571.659986][T11740] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 571.689395][ T30] audit: type=1326 audit(1757286666.023:438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11733 comm="syz.1.1474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1d2d8ebe9 code=0x7ffc0000 [ 571.711899][ C1] vkms_vblank_simulate: vblank timer overrun [ 571.728806][T11740] CPU: 0 UID: 0 PID: 11740 Comm: syz.4.1475 Not tainted syzkaller #0 PREEMPT(full) [ 571.728836][T11740] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 571.728847][T11740] Call Trace: [ 571.728855][T11740] [ 571.728861][T11740] dump_stack_lvl+0x189/0x250 [ 571.728880][T11740] ? __pfx____ratelimit+0x10/0x10 [ 571.728892][T11740] ? __pfx_dump_stack_lvl+0x10/0x10 [ 571.728905][T11740] ? __pfx__printk+0x10/0x10 [ 571.728921][T11740] ? __might_fault+0xb0/0x130 [ 571.728943][T11740] should_fail_ex+0x414/0x560 [ 571.728962][T11740] _copy_from_user+0x2d/0xb0 [ 571.728976][T11740] __ia32_sys_rt_sigreturn+0x228/0x7b0 [ 571.728998][T11740] ? __pfx___ia32_sys_rt_sigreturn+0x10/0x10 [ 571.729014][T11740] ? _raw_spin_unlock_irq+0x2e/0x50 [ 571.729048][T11740] ? __task_pid_nr_ns+0x28/0x470 [ 571.729065][T11740] ? do_syscall_64+0xbe/0x3b0 [ 571.729079][T11740] do_syscall_64+0xfa/0x3b0 [ 571.729089][T11740] ? lockdep_hardirqs_on+0x9c/0x150 [ 571.729100][T11740] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 571.729111][T11740] ? clear_bhb_loop+0x60/0xb0 [ 571.729124][T11740] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 571.729135][T11740] RIP: 0033:0x7f103552adb9 [ 571.729147][T11740] Code: 64 c7 00 16 00 00 00 b8 ff ff ff ff c3 0f 1f 40 00 90 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 c7 c0 0f 00 00 00 0f 05 <0f> 1f 80 00 00 00 00 48 81 ec 48 01 00 00 49 89 d0 64 48 8b 04 25 [ 571.729158][T11740] RSP: 002b:00007f103641fa80 EFLAGS: 00000202 ORIG_RAX: 000000000000000f [ 571.729172][T11740] RAX: ffffffffffffffda RBX: 00007f10357c5fa0 RCX: 00007f103552adb9 [ 571.729180][T11740] RDX: 00007f103641fa80 RSI: 00007f103641fbb0 RDI: 0000000000000021 [ 571.729187][T11740] RBP: 00007f1036420090 R08: 0000000000000000 R09: 0000000000000000 [ 571.729195][T11740] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000002 [ 571.729201][T11740] R13: 00007f10357c6038 R14: 00007f10357c5fa0 R15: 00007f10358efa28 [ 571.729221][T11740] [ 571.979185][ T30] audit: type=1326 audit(1757286666.023:439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11733 comm="syz.1.1474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1d2d8ebe9 code=0x7ffc0000 [ 572.093197][ T30] audit: type=1326 audit(1757286666.023:440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11733 comm="syz.1.1474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7fc1d2d8ebe9 code=0x7ffc0000 [ 572.119830][ T30] audit: type=1326 audit(1757286666.023:441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11733 comm="syz.1.1474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1d2d8ebe9 code=0x7ffc0000 [ 572.142406][ T30] audit: type=1326 audit(1757286666.023:442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11733 comm="syz.1.1474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1d2d8ebe9 code=0x7ffc0000 [ 572.165441][ T30] audit: type=1326 audit(1757286666.023:443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11733 comm="syz.1.1474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc1d2d8ebe9 code=0x7ffc0000 [ 572.239808][ T30] audit: type=1326 audit(1757286666.023:444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11733 comm="syz.1.1474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1d2d8ebe9 code=0x7ffc0000 [ 572.409819][T10040] usb 4-1: reset high-speed USB device number 54 using dummy_hcd [ 572.599879][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 572.838587][T11755] netlink: 'syz.0.1479': attribute type 1 has an invalid length. [ 572.920176][T11755] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1479'. [ 573.629947][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 574.669944][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 575.709867][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 576.161654][T10039] usb 4-1: USB disconnect, device number 54 [ 576.319926][ T957] usb 1-1: new high-speed USB device number 71 using dummy_hcd [ 576.481957][ T957] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 576.508676][ T957] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 576.542677][T11785] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1487'. [ 576.549863][ T957] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 253 [ 576.602748][T11785] openvswitch: netlink: EtherType 0 is less than min 600 [ 576.611375][ T957] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 576.643254][ T957] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 576.665830][ T957] usb 1-1: Manufacturer: syz [ 576.695182][ T957] usb 1-1: config 0 descriptor?? [ 576.723685][ T957] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 576.759859][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 576.909416][T11788] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1488'. [ 577.283762][T11803] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 577.305255][T11803] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 577.491801][T11803] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 577.517876][T11803] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 577.589808][ T957] usb 2-1: new full-speed USB device number 95 using dummy_hcd [ 577.743354][ T957] usb 2-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 577.763330][ T957] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 577.789876][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 577.816049][ T957] usb 2-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255 [ 577.862150][ T957] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 577.871622][ T957] usb 2-1: New USB device strings: Mfr=8, Product=0, SerialNumber=1 [ 577.898618][ T957] usb 2-1: Manufacturer: syz [ 577.905838][ T957] usb 2-1: SerialNumber: syz [ 578.253490][ T957] cdc_acm 2-1:1.0: Control and data interfaces are not separated! [ 578.300858][ T957] cdc_acm 2-1:1.0: ttyACM0: USB ACM device [ 578.366415][ T957] usb 2-1: USB disconnect, device number 95 [ 578.757266][T11820] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1495'. [ 578.839859][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 579.105940][T10039] usb 1-1: USB disconnect, device number 71 [ 579.135865][T11824] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1497'. [ 579.172497][T11828] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1499'. [ 579.375068][T11830] veth3: entered promiscuous mode [ 579.535724][T11837] FAULT_INJECTION: forcing a failure. [ 579.535724][T11837] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 579.567042][T11837] CPU: 0 UID: 0 PID: 11837 Comm: syz.3.1502 Not tainted syzkaller #0 PREEMPT(full) [ 579.567071][T11837] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 579.567083][T11837] Call Trace: [ 579.567091][T11837] [ 579.567100][T11837] dump_stack_lvl+0x189/0x250 [ 579.567128][T11837] ? __pfx____ratelimit+0x10/0x10 [ 579.567147][T11837] ? __pfx_dump_stack_lvl+0x10/0x10 [ 579.567167][T11837] ? __pfx__printk+0x10/0x10 [ 579.567192][T11837] ? __might_fault+0xb0/0x130 [ 579.567230][T11837] should_fail_ex+0x414/0x560 [ 579.567261][T11837] _copy_from_user+0x2d/0xb0 [ 579.567287][T11837] video_usercopy+0x354/0x14f0 [ 579.567322][T11837] ? __pfx___video_do_ioctl+0x10/0x10 [ 579.567343][T11837] ? __pfx_video_usercopy+0x10/0x10 [ 579.567385][T11837] ? __fget_files+0x2a/0x420 [ 579.567406][T11837] ? __fget_files+0x2a/0x420 [ 579.567420][T11837] ? __fget_files+0x3a0/0x420 [ 579.567441][T11837] v4l2_ioctl+0x18d/0x1e0 [ 579.567462][T11837] ? __pfx_v4l2_ioctl+0x10/0x10 [ 579.567483][T11837] __se_sys_ioctl+0xfc/0x170 [ 579.567509][T11837] do_syscall_64+0xfa/0x3b0 [ 579.567527][T11837] ? lockdep_hardirqs_on+0x9c/0x150 [ 579.567546][T11837] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 579.567565][T11837] ? clear_bhb_loop+0x60/0xb0 [ 579.567588][T11837] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 579.567605][T11837] RIP: 0033:0x7f57fb98ebe9 [ 579.567623][T11837] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 579.567639][T11837] RSP: 002b:00007f57fc769038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 579.567660][T11837] RAX: ffffffffffffffda RBX: 00007f57fbbc5fa0 RCX: 00007f57fb98ebe9 [ 579.567673][T11837] RDX: 0000200000000080 RSI: 00000000c008561c RDI: 0000000000000003 [ 579.567686][T11837] RBP: 00007f57fc769090 R08: 0000000000000000 R09: 0000000000000000 [ 579.567697][T11837] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 579.567707][T11837] R13: 00007f57fbbc6038 R14: 00007f57fbbc5fa0 R15: 00007f57fbcefa28 [ 579.567736][T11837] [ 579.817146][ T957] usb 1-1: new high-speed USB device number 72 using dummy_hcd [ 579.869898][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 579.996117][ T957] usb 1-1: config 0 has an invalid interface number: 47 but max is 1 [ 580.009944][ T957] usb 1-1: config 0 has an invalid interface number: 20 but max is 1 [ 580.037141][ T957] usb 1-1: config 0 has no interface number 0 [ 580.044518][ T957] usb 1-1: config 0 has no interface number 1 [ 580.068921][ T957] usb 1-1: New USB device found, idVendor=0df6, idProduct=0039, bcdDevice=f5.18 [ 580.100109][ T957] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 580.212383][ T957] usb 1-1: config 0 descriptor?? [ 580.270063][T10054] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 580.426829][T10052] usb 1-1: USB disconnect, device number 72 [ 580.909867][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 580.945550][T10054] usb 5-1: Using ep0 maxpacket: 16 [ 580.988799][T10054] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 581.000008][T10054] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 581.049811][T10052] usb 2-1: new high-speed USB device number 96 using dummy_hcd [ 581.146963][T10054] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 581.269787][T10052] usb 2-1: Using ep0 maxpacket: 8 [ 581.365047][T10054] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 581.379473][T10052] usb 2-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 581.398913][T10054] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 581.417129][T10052] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 581.435180][T10054] usb 5-1: Product: syz [ 581.445383][T10052] usb 2-1: Product: syz [ 581.449600][T10052] usb 2-1: Manufacturer: syz [ 581.462200][T10054] usb 5-1: Manufacturer: syz [ 581.476774][T10054] usb 5-1: SerialNumber: syz [ 581.483237][T11863] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 581.493381][T10052] usb 2-1: SerialNumber: syz [ 581.520155][T10052] usb 2-1: config 0 descriptor?? [ 581.526451][T11863] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 581.594900][T10052] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 581.935476][T10054] usb 5-1: 0:2 : does not exist [ 581.959886][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 582.141387][T10052] gspca_sonixj: reg_r err -32 [ 582.179888][T10052] sonixj 2-1:0.0: probe with driver sonixj failed with error -32 [ 582.343960][T11869] fuse: Unknown parameter '0000000000000000000001300000000000000000000' [ 582.404569][T11870] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 582.417118][T11870] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 582.562566][T11873] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 582.610851][T11874] fuse: Unknown parameter '' [ 582.852380][T11876] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1511'. [ 582.989928][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 583.568591][T11881] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1513'. [ 583.839078][T11884] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1514'. [ 583.957419][T10054] usb 5-1: USB disconnect, device number 61 [ 584.029900][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 584.127804][T10052] usb 2-1: USB disconnect, device number 96 [ 584.439999][ T957] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 584.619855][ T957] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 584.632020][ T957] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 584.654932][ T957] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 584.696607][ T957] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 584.745426][ T957] usb 5-1: SerialNumber: syz [ 584.978836][ T957] usb 5-1: cannot find UAC_HEADER [ 585.021482][ T957] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 585.039400][ T957] usb 5-1: USB disconnect, device number 62 [ 585.069893][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 585.080199][ T6354] udevd[6354]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 585.105993][T10052] usb 1-1: new high-speed USB device number 73 using dummy_hcd [ 585.149863][T10039] usb 2-1: new high-speed USB device number 97 using dummy_hcd [ 585.263427][T10052] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 585.279851][T10052] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 585.279860][T10039] usb 2-1: device descriptor read/64, error -71 [ 585.279926][T10052] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 253 [ 585.358792][T10052] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 585.379410][T10052] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 585.387773][T10052] usb 1-1: Manufacturer: syz [ 585.396712][T10052] usb 1-1: config 0 descriptor?? [ 585.405331][T10052] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 585.529945][T10039] usb 2-1: new high-speed USB device number 98 using dummy_hcd [ 585.856615][T11914] netlink: 'syz.2.1522': attribute type 2 has an invalid length. [ 585.879908][T10039] usb 2-1: device descriptor read/64, error -71 [ 585.990237][T10039] usb usb2-port1: attempt power cycle [ 586.109909][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 587.149886][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 587.989845][T10039] usb 2-1: new high-speed USB device number 99 using dummy_hcd [ 588.093044][ T957] usb 1-1: USB disconnect, device number 73 [ 588.111350][T10039] usb 2-1: device descriptor read/8, error -71 [ 588.189879][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 588.434916][T11927] netlink: 92 bytes leftover after parsing attributes in process `syz.0.1528'. [ 588.434950][T11927] netlink: 92 bytes leftover after parsing attributes in process `syz.0.1528'. [ 588.815991][T11937] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 589.229873][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 589.480406][T10037] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 589.751370][T10037] usb 5-1: no configurations [ 589.759194][T10037] usb 5-1: can't read configurations, error -22 [ 589.879868][T10054] usb 1-1: new high-speed USB device number 74 using dummy_hcd [ 589.909919][T10037] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 590.110862][T10037] usb 5-1: no configurations [ 590.112158][T10054] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 590.115714][T10037] usb 5-1: can't read configurations, error -22 [ 590.148967][T10054] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 590.172969][T10037] usb usb5-port1: attempt power cycle [ 590.192356][T10054] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 253 [ 590.239098][T10054] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 590.258749][T10054] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 590.269868][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 590.293399][T10054] usb 1-1: Manufacturer: syz [ 590.325564][T10054] usb 1-1: config 0 descriptor?? [ 590.353617][T10054] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 590.550458][T10037] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 590.607597][T10037] usb 5-1: no configurations [ 590.612498][T10037] usb 5-1: can't read configurations, error -22 [ 590.764674][T10037] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 590.801449][T10037] usb 5-1: no configurations [ 590.806270][T10037] usb 5-1: can't read configurations, error -22 [ 590.813754][T10037] usb usb5-port1: unable to enumerate USB device [ 591.130603][T11972] netlink: 'syz.2.1542': attribute type 33 has an invalid length. [ 591.138662][T11972] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1542'. [ 591.236354][T11980] netlink: 'syz.1.1540': attribute type 2 has an invalid length. [ 591.310126][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 592.350053][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 592.650026][T10037] usb 2-1: new high-speed USB device number 101 using dummy_hcd [ 592.693164][T10054] usb 1-1: USB disconnect, device number 74 [ 592.809796][T10037] usb 2-1: Using ep0 maxpacket: 32 [ 592.822201][T10037] usb 2-1: config 0 has an invalid interface number: 96 but max is 0 [ 592.830816][T10037] usb 2-1: config 0 has no interface number 0 [ 592.837225][T10037] usb 2-1: config 0 interface 96 has no altsetting 0 [ 592.848325][T10037] usb 2-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=b2.44 [ 592.858503][T10037] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 592.866696][T10037] usb 2-1: Product: syz [ 592.871360][T10037] usb 2-1: Manufacturer: syz [ 592.876135][T10037] usb 2-1: SerialNumber: syz [ 592.884916][T10037] usb 2-1: config 0 descriptor?? [ 592.910101][T10037] legousbtower 2-1:0.96: interrupt endpoints not found [ 593.110528][T10054] usb 2-1: USB disconnect, device number 101 [ 593.389910][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 593.708928][T12010] bridge0: port 2(bridge_slave_1) entered disabled state [ 594.429880][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 594.570360][T12021] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1547'. [ 595.470026][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 595.726833][T12031] netlink: 'syz.2.1554': attribute type 2 has an invalid length. [ 596.429865][T10054] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 596.509971][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 596.588662][T10054] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 596.619206][T10054] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 596.753570][T12043] IPv6: sit1: Disabled Multicast RS [ 596.759937][T10054] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 253 [ 596.821229][T10054] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 596.837419][T10054] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 596.933619][T10054] usb 4-1: Manufacturer: syz [ 597.035901][T10054] usb 4-1: config 0 descriptor?? [ 597.144541][T10054] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 597.523980][T12053] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1561'. [ 597.549922][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 598.090144][T12057] Invalid option length (1041864) for dns_resolver key [ 598.098516][T12057] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1562'. [ 598.589851][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 599.050929][T10054] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 599.231633][T10054] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 599.246623][T10054] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 599.629847][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 599.660856][T10054] usb 5-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 599.701930][T10054] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 599.748615][T10052] usb 4-1: USB disconnect, device number 55 [ 599.767494][T10054] usb 5-1: Product: syz [ 599.778407][T10054] usb 5-1: Manufacturer: syz [ 599.783404][T10054] usb 5-1: SerialNumber: syz [ 599.808042][T10054] usb 5-1: config 0 descriptor?? [ 599.899983][T10037] usb 2-1: new high-speed USB device number 102 using dummy_hcd [ 600.150060][T10054] usb 1-1: new high-speed USB device number 75 using dummy_hcd [ 600.302130][T10054] usb 1-1: Using ep0 maxpacket: 32 [ 600.325165][T10037] usb 2-1: device descriptor read/64, error -71 [ 600.347014][T10054] usb 1-1: New USB device found, idVendor=046d, idProduct=08b7, bcdDevice=99.db [ 600.365294][T10054] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 600.394308][T10054] usb 1-1: config 0 descriptor?? [ 600.405837][T10054] pwc: Logitech ViewPort AV 100 webcam detected. [ 600.467652][T12096] netlink: 'syz.2.1572': attribute type 2 has an invalid length. [ 600.548938][T12097] netlink: 84 bytes leftover after parsing attributes in process `syz.3.1569'. [ 600.604626][T12081] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1568'. [ 600.669868][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 600.710025][T10037] usb 2-1: new high-speed USB device number 103 using dummy_hcd [ 601.021633][T10037] usb 2-1: Using ep0 maxpacket: 16 [ 601.184690][T10037] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 601.211712][T10037] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 601.232779][T10037] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 601.258200][T10054] pwc: Failed to set LED on/off time (-71) [ 601.290931][T10037] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 601.306101][T10037] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 601.318214][T10054] pwc: send_video_command error -71 [ 601.334599][T10054] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 601.342437][T10037] usb 2-1: Product: syz [ 601.354799][T10037] usb 2-1: Manufacturer: syz [ 601.362922][T10054] Philips webcam 1-1:0.0: probe with driver Philips webcam failed with error -71 [ 601.373698][T10037] usb 2-1: SerialNumber: syz [ 601.453122][T10054] usb 1-1: USB disconnect, device number 75 [ 601.477179][T10039] usb 5-1: USB disconnect, device number 67 [ 601.709855][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 601.748360][T12089] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 602.749902][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 603.789863][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 603.812371][T12119] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1575'. [ 604.471002][T10037] usb 2-1: 0:2 : does not exist [ 604.571455][T10037] usb 2-1: USB disconnect, device number 103 [ 604.627882][T12126] usb usb7: usbfs: process 12126 (syz.3.1578) did not claim interface 2 before use [ 604.829874][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 604.940277][T12136] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1583'. [ 604.950476][T12136] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1583'. [ 604.959974][ T957] usb 1-1: new high-speed USB device number 76 using dummy_hcd [ 604.999160][T12139] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 605.015486][T12139] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 605.135451][ T957] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 605.145868][ T957] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 605.157471][ T957] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 253 [ 605.173804][ T957] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 605.193526][ T957] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 605.203930][ T957] usb 1-1: Manufacturer: syz [ 605.218861][ T957] usb 1-1: config 0 descriptor?? [ 605.238576][ T957] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 605.317633][T12144] netlink: 'syz.4.1585': attribute type 2 has an invalid length. [ 605.341700][T12144] : entered promiscuous mode [ 605.410102][T12146] netlink: 92 bytes leftover after parsing attributes in process `syz.1.1586'. [ 605.419418][T12146] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1586'. [ 605.434525][T12146] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1586'. [ 605.445321][T12146] random: crng reseeded on system resumption [ 605.633366][T12148] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 605.679053][T12148] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 605.869871][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 606.488503][T12164] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 606.497624][T12164] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 606.510115][T12164] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 606.909870][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 607.750543][T10039] usb 1-1: USB disconnect, device number 76 [ 607.949853][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 608.176370][T12177] fuse: Unknown parameter '0x0000000000000003' [ 608.590911][T12177] sit0: left promiscuous mode [ 608.989890][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 609.455815][T12190] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1593'. [ 610.029858][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 610.276673][ T957] usb 2-1: new high-speed USB device number 104 using dummy_hcd [ 610.475913][ T957] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 610.512750][ T957] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 610.590260][ T957] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 610.614351][ T957] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 610.800318][ T957] usb 2-1: Product: syz [ 610.932709][ T957] usb 2-1: Manufacturer: syz [ 610.932739][ T957] usb 2-1: SerialNumber: syz [ 610.958946][ T957] usb 2-1: config 0 descriptor?? [ 611.069899][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 612.109845][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 612.987929][T10039] usb 2-1: USB disconnect, device number 104 [ 613.149841][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 613.614682][T12227] hub 9-0:1.0: USB hub found [ 613.621445][T12227] hub 9-0:1.0: 1 port detected [ 613.982641][T12230] netlink: 'syz.1.1605': attribute type 2 has an invalid length. [ 613.998710][T12230] : entered promiscuous mode [ 614.189955][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 615.229910][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 615.948463][T12248] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 616.197442][T12248] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1611'. [ 616.269853][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 616.367544][T12256] netem: change failed [ 616.479888][ T957] usb 2-1: new high-speed USB device number 105 using dummy_hcd [ 616.644235][ T957] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 616.666029][ T957] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 616.689835][ T957] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 616.710716][ T957] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 616.761348][T12251] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 616.782922][ T957] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 616.879967][T10037] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 616.887778][T10039] usb 1-1: new high-speed USB device number 77 using dummy_hcd [ 617.055253][T10039] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 617.070343][ T957] usb 2-1: USB disconnect, device number 105 [ 617.084883][T12184] syz.4.1595 (12184): drop_caches: 1 [ 617.098935][T10039] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 617.109834][T10037] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 617.159762][T10037] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 617.179031][T10039] usb 1-1: New USB device found, idVendor=046d, idProduct=c294, bcdDevice= 0.00 [ 617.236281][T10037] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 617.246149][T10039] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 617.270890][T10037] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 617.287110][T10039] usb 1-1: config 0 descriptor?? [ 617.296683][T10037] usb 4-1: Product: syz [ 617.302524][T10037] usb 4-1: Manufacturer: syz [ 617.309881][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 617.317109][T10037] usb 4-1: SerialNumber: syz [ 617.330333][T10037] usb 4-1: config 0 descriptor?? [ 617.558641][T12260] tipc: Can't bind to reserved service type 1 [ 617.805439][T10039] logitech 0003:046D:C294.0012: unbalanced collection at end of report description [ 618.090943][T10039] logitech 0003:046D:C294.0012: parse failed [ 618.145446][T10039] logitech 0003:046D:C294.0012: probe with driver logitech failed with error -22 [ 618.349870][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 618.619832][T10052] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 618.723126][T10039] usb 1-1: USB disconnect, device number 77 [ 618.859877][T10052] usb 5-1: Using ep0 maxpacket: 16 [ 619.089938][T10052] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 619.157396][T10052] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 619.304896][T10052] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 619.327007][T10052] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 619.368136][T10052] usb 5-1: Product: syz [ 619.392413][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 619.402474][T12283] netlink: 'syz.0.1619': attribute type 2 has an invalid length. [ 619.418482][T12283] : entered promiscuous mode [ 619.423541][T10052] usb 5-1: Manufacturer: syz [ 619.428185][T10052] usb 5-1: SerialNumber: syz [ 619.467586][T10052] usb 5-1: config 0 descriptor?? [ 619.495614][T10052] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 619.508713][T10052] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class) [ 619.620404][T10039] usb 4-1: USB disconnect, device number 56 [ 620.429854][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 620.487970][T10052] em28xx 5-1:0.0: chip ID is em28178 [ 620.726224][T12298] netlink: 'syz.1.1622': attribute type 1 has an invalid length. [ 620.734402][T12298] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1622'. [ 621.469865][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 622.149611][ T30] kauditd_printk_skb: 14 callbacks suppressed [ 622.149625][ T30] audit: type=1400 audit(1757286716.943:459): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name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core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 622.374693][T12311] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 622.409176][T12311] fuse: Unknown parameter 'default_permissionsÿÿ@ó q’ H' [ 622.509848][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 622.539869][ T957] usb 5-1: USB disconnect, device number 68 [ 622.568384][ T957] em28xx 5-1:0.0: Disconnecting em28xx [ 622.577365][ T957] em28xx 5-1:0.0: Freeing device [ 623.549906][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 624.169905][T10039] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 624.381228][T10039] usb 4-1: config 3 has an invalid interface number: 168 but max is 0 [ 624.400375][T10039] usb 4-1: config 3 has an invalid descriptor of length 102, skipping remainder of the config [ 624.424717][T10039] usb 4-1: config 3 has no interface number 0 [ 624.455767][T10039] usb 4-1: config 3 interface 168 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 624.589919][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 624.627122][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.633656][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.681281][T10039] usb 4-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice=a8.a4 [ 624.690596][T10039] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 625.072641][T10039] usb 4-1: string descriptor 0 read error: -71 [ 625.096634][T10039] keyspan 4-1:3.168: Keyspan 2 port adapter converter detected [ 625.113989][T10039] keyspan 4-1:3.168: found no endpoint descriptor for endpoint 81 [ 625.158858][T10039] keyspan 4-1:3.168: found no endpoint descriptor for endpoint 1 [ 625.188002][T10039] keyspan 4-1:3.168: found no endpoint descriptor for endpoint 84 [ 625.209288][T10039] keyspan 4-1:3.168: found no endpoint descriptor for endpoint 2 [ 625.277228][T10039] usb 4-1: Keyspan 2 port adapter converter now attached to ttyUSB2 [ 625.600098][T10039] keyspan 4-1:3.168: found no endpoint descriptor for endpoint 88 [ 625.629859][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 625.658868][T10039] keyspan 4-1:3.168: found no endpoint descriptor for endpoint 6 [ 625.732839][T10039] usb 4-1: Keyspan 2 port adapter converter now attached to ttyUSB3 [ 625.829439][T10039] usb 4-1: USB disconnect, device number 57 [ 625.875316][T10039] keyspan_2 ttyUSB2: Keyspan 2 port adapter converter now disconnected from ttyUSB2 [ 625.982541][T10039] keyspan_2 ttyUSB3: Keyspan 2 port adapter converter now disconnected from ttyUSB3 [ 626.041190][T12359] fuse: Unknown parameter '0x0000000000000003' [ 626.051379][T10039] keyspan 4-1:3.168: device disconnected [ 626.066618][T12359] FAULT_INJECTION: forcing a failure. [ 626.066618][T12359] name failslab, interval 1, probability 0, space 0, times 0 [ 626.079536][T12359] CPU: 0 UID: 0 PID: 12359 Comm: syz.2.1636 Not tainted syzkaller #0 PREEMPT(full) [ 626.079560][T12359] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 626.079571][T12359] Call Trace: [ 626.079578][T12359] [ 626.079587][T12359] dump_stack_lvl+0x189/0x250 [ 626.079614][T12359] ? __pfx____ratelimit+0x10/0x10 [ 626.079633][T12359] ? __pfx_dump_stack_lvl+0x10/0x10 [ 626.079655][T12359] ? __pfx__printk+0x10/0x10 [ 626.079686][T12359] ? skb_network_protocol+0x4fe/0x760 [ 626.079711][T12359] ? __lock_acquire+0xab9/0xd20 [ 626.079745][T12359] should_fail_ex+0x414/0x560 [ 626.079777][T12359] should_failslab+0xa8/0x100 [ 626.079806][T12359] kmem_cache_alloc_noprof+0x73/0x3c0 [ 626.079830][T12359] ? skb_clone+0x212/0x3a0 [ 626.079860][T12359] skb_clone+0x212/0x3a0 [ 626.079881][T12359] ? dev_queue_xmit_nit+0x25a/0xcc0 [ 626.079906][T12359] dev_queue_xmit_nit+0x416/0xcc0 [ 626.079926][T12359] ? dev_queue_xmit_nit+0x2d/0xcc0 [ 626.079958][T12359] dev_hard_start_xmit+0x1be/0x830 [ 626.080001][T12359] __dev_queue_xmit+0x1b8d/0x3b50 [ 626.080036][T12359] ? __dev_queue_xmit+0x27b/0x3b50 [ 626.080078][T12359] ? __pfx___dev_queue_xmit+0x10/0x10 [ 626.080126][T12359] ? __copy_skb_header+0xa7/0x550 [ 626.080151][T12359] ? __asan_memcpy+0x40/0x70 [ 626.080195][T12359] ? skb_clone+0x246/0x3a0 [ 626.080223][T12359] __netlink_deliver_tap+0x5ad/0x850 [ 626.080261][T12359] ? netlink_deliver_tap+0x2e/0x1b0 [ 626.080284][T12359] netlink_deliver_tap+0x19c/0x1b0 [ 626.080306][T12359] netlink_unicast+0x7fa/0x9e0 [ 626.080342][T12359] ? __pfx_netlink_unicast+0x10/0x10 [ 626.080369][T12359] ? netlink_sendmsg+0x642/0xb30 [ 626.080386][T12359] ? skb_put+0x11b/0x210 [ 626.080411][T12359] netlink_sendmsg+0x805/0xb30 [ 626.080442][T12359] ? __pfx_netlink_sendmsg+0x10/0x10 [ 626.080466][T12359] ? aa_sock_msg_perm+0xf1/0x1d0 [ 626.080487][T12359] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 626.080508][T12359] ? __pfx_netlink_sendmsg+0x10/0x10 [ 626.080528][T12359] __sock_sendmsg+0x21c/0x270 [ 626.080559][T12359] __sys_sendto+0x3bd/0x520 [ 626.080583][T12359] ? __pfx___sys_sendto+0x10/0x10 [ 626.080615][T12359] ? count_memcg_event_mm+0x21/0x260 [ 626.080653][T12359] ? exc_page_fault+0x76/0xf0 [ 626.080676][T12359] ? do_user_addr_fault+0xc8a/0x1390 [ 626.080708][T12359] __x64_sys_sendto+0xde/0x100 [ 626.080731][T12359] do_syscall_64+0xfa/0x3b0 [ 626.080742][T12359] ? lockdep_hardirqs_on+0x9c/0x150 [ 626.080753][T12359] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 626.080764][T12359] ? clear_bhb_loop+0x60/0xb0 [ 626.080777][T12359] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 626.080788][T12359] RIP: 0033:0x7f8e33190a7c [ 626.080799][T12359] Code: 2a 5f 02 00 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 70 5f 02 00 48 8b [ 626.080809][T12359] RSP: 002b:00007f8e340a5ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 626.080823][T12359] RAX: ffffffffffffffda RBX: 00007f8e340a5fc0 RCX: 00007f8e33190a7c [ 626.080831][T12359] RDX: 0000000000000020 RSI: 00007f8e340a6010 RDI: 0000000000000004 [ 626.080839][T12359] RBP: 0000000000000000 R08: 00007f8e340a5f14 R09: 000000000000000c [ 626.080846][T12359] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000004 [ 626.080853][T12359] R13: 00007f8e340a5f68 R14: 00007f8e340a6010 R15: 0000000000000000 [ 626.080870][T12359] [ 626.631388][T12363] netlink: 212040 bytes leftover after parsing attributes in process `syz.0.1639'. [ 626.669899][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 626.840738][T10039] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 627.070354][T10053] usb 1-1: new full-speed USB device number 78 using dummy_hcd [ 627.450163][T10039] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 627.463462][T10039] usb 4-1: New USB device found, idVendor=046d, idProduct=c295, bcdDevice= 0.00 [ 627.481180][T10039] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 627.508141][T10039] usb 4-1: config 0 descriptor?? [ 627.514151][T10053] usb 1-1: config 0 has an invalid interface number: 113 but max is 0 [ 627.529364][T10053] usb 1-1: config 0 has no interface number 0 [ 627.542408][T10053] usb 1-1: config 0 interface 113 altsetting 2 has an endpoint descriptor with address 0xE7, changing to 0x87 [ 627.558564][T10053] usb 1-1: config 0 interface 113 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 627.575304][T10053] usb 1-1: config 0 interface 113 has no altsetting 0 [ 627.585448][T10053] usb 1-1: New USB device found, idVendor=054c, idProduct=02e1, bcdDevice=e2.c8 [ 627.615436][T10053] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 627.656063][T10053] usb 1-1: Product: syz [ 627.672361][T10053] usb 1-1: Manufacturer: syz [ 627.680046][T10053] usb 1-1: SerialNumber: syz [ 627.698233][T10053] usb 1-1: config 0 descriptor?? [ 627.707380][T10053] pn533_usb 1-1:0.113: NFC: Could not find bulk-in or bulk-out endpoint [ 627.716090][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 627.921197][ T957] usb 1-1: USB disconnect, device number 78 [ 627.964714][T12384] netlink: 'syz.2.1645': attribute type 2 has an invalid length. [ 628.022489][T10039] logitech 0003:046D:C295.0013: ignoring exceeding usage max [ 628.220980][T12384] : entered promiscuous mode [ 628.271144][T10039] logitech 0003:046D:C295.0013: ignoring exceeding usage max [ 628.288027][T10039] logitech 0003:046D:C295.0013: usage index exceeded [ 628.297971][T10039] logitech 0003:046D:C295.0013: item 0 0 2 2 parsing failed [ 628.362500][T10039] logitech 0003:046D:C295.0013: parse failed [ 628.368735][T10039] logitech 0003:046D:C295.0013: probe with driver logitech failed with error -22 [ 628.749844][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 629.025278][T12392] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1647'. [ 629.053094][T12392] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1647'. [ 629.531592][T10053] usb 4-1: USB disconnect, device number 58 [ 629.789871][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 629.883060][ T30] audit: type=1326 audit(1757286724.673:460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12396 comm="syz.4.1649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f103558ebe9 code=0x7ffc0000 [ 629.978605][ T30] audit: type=1326 audit(1757286724.673:461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12396 comm="syz.4.1649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f103558ebe9 code=0x7ffc0000 [ 630.066741][ T30] audit: type=1326 audit(1757286724.673:462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12396 comm="syz.4.1649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f103558ebe9 code=0x7ffc0000 [ 630.169771][ T30] audit: type=1326 audit(1757286724.673:463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12396 comm="syz.4.1649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=224 compat=0 ip=0x7f103558ebe9 code=0x7ffc0000 [ 630.192365][T10053] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 630.253879][T12405] IPv6: addrconf: prefix option has invalid lifetime [ 630.328894][ T30] audit: type=1326 audit(1757286724.683:464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12396 comm="syz.4.1649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f103558ebe9 code=0x7ffc0000 [ 630.339845][T10053] usb 4-1: Using ep0 maxpacket: 16 [ 630.370711][T12409] fuse: Bad value for 'fd' [ 630.395493][ T30] audit: type=1326 audit(1757286724.683:465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12396 comm="syz.4.1649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f103558ebe9 code=0x7ffc0000 [ 630.442544][T10053] usb 4-1: config 1 has an invalid descriptor of length 32, skipping remainder of the config [ 630.519806][T10053] usb 4-1: config 1 interface 0 altsetting 121 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 630.543544][T10053] usb 4-1: config 1 interface 0 has no altsetting 0 [ 630.582350][T12416] netlink: 'syz.1.1657': attribute type 14 has an invalid length. [ 630.646685][T12422] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1658'. [ 630.777168][T12422] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1658'. [ 630.794424][T10053] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 630.804143][T10053] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 630.817351][T10053] usb 4-1: Product: syz [ 630.824134][T10053] usb 4-1: Manufacturer: syz [ 630.829847][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 630.837268][T10053] usb 4-1: SerialNumber: syz [ 631.283691][T12400] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 631.300732][T12400] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 631.847346][T12437] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1662'. [ 631.870002][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 631.920511][T12438] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1662'. [ 631.972580][T10053] cdc_ether 4-1:1.0: skipping garbage [ 631.996653][T10053] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -22 [ 632.036974][T10053] usb 4-1: USB disconnect, device number 59 [ 632.620183][T10053] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 632.631292][ T30] audit: type=1326 audit(1757286727.433:466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12447 comm="syz.4.1667" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f103558ebe9 code=0x0 [ 632.822249][T10053] usb 4-1: Using ep0 maxpacket: 32 [ 632.859533][T10053] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 632.879265][T10053] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 632.909827][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 632.936076][T10053] usb 4-1: New USB device found, idVendor=0c72, idProduct=0011, bcdDevice= 9.75 [ 632.948749][T10053] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 633.017976][T10053] usb 4-1: Product: syz [ 633.040410][T10053] usb 4-1: Manufacturer: syz [ 633.082373][T10053] usb 4-1: SerialNumber: syz [ 633.150609][T10053] usb 4-1: config 0 descriptor?? [ 633.355791][T12454] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 633.400839][T10053] peak_usb 4-1:0.0 can0: unable to request usb[type=0 value=1] err=-71 [ 633.429499][T10053] peak_usb 4-1:0.0: unable to read PCAN-USB Pro FD firmware info (err -71) [ 633.488522][T12454] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 633.559033][T12454] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1668'. [ 633.572731][T12456] tipc: Started in network mode [ 633.577628][T12456] tipc: Node identity 7e91debf4f71, cluster identity 4711 [ 633.594301][T12456] tipc: Enabled bearer , priority 0 [ 633.620944][T10053] peak_usb 4-1:0.0: probe with driver peak_usb failed with error -71 [ 633.692437][T12456] syzkaller0: entered promiscuous mode [ 633.703936][T10053] usb 4-1: USB disconnect, device number 60 [ 633.730335][T12456] syzkaller0: entered allmulticast mode [ 633.866850][T12456] tipc: Resetting bearer [ 633.906222][T12455] tipc: Resetting bearer [ 633.943656][T12455] tipc: Disabling bearer [ 633.950102][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 634.227994][T12470] capability: warning: `syz.4.1673' uses 32-bit capabilities (legacy support in use) [ 634.335282][T12473] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1675'. [ 634.525553][T12475] FAULT_INJECTION: forcing a failure. [ 634.525553][T12475] name failslab, interval 1, probability 0, space 0, times 0 [ 634.595563][T12475] CPU: 0 UID: 0 PID: 12475 Comm: syz.3.1676 Not tainted syzkaller #0 PREEMPT(full) [ 634.595593][T12475] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 634.595603][T12475] Call Trace: [ 634.595612][T12475] [ 634.595622][T12475] dump_stack_lvl+0x189/0x250 [ 634.595651][T12475] ? __pfx____ratelimit+0x10/0x10 [ 634.595671][T12475] ? __pfx_dump_stack_lvl+0x10/0x10 [ 634.595694][T12475] ? __pfx__printk+0x10/0x10 [ 634.595722][T12475] ? __pfx___might_resched+0x10/0x10 [ 634.595739][T12475] ? fs_reclaim_acquire+0x7d/0x100 [ 634.595770][T12475] should_fail_ex+0x414/0x560 [ 634.595802][T12475] should_failslab+0xa8/0x100 [ 634.595826][T12475] __kmalloc_noprof+0xcb/0x4f0 [ 634.595849][T12475] ? iovec_from_user+0x87/0x250 [ 634.595876][T12475] iovec_from_user+0x87/0x250 [ 634.595903][T12475] __import_iovec+0x163/0x7f0 [ 634.595928][T12475] ? __fget_files+0x2a/0x420 [ 634.595945][T12475] ? __fget_files+0x3a0/0x420 [ 634.595966][T12475] import_iovec+0x74/0xa0 [ 634.595995][T12475] __se_sys_vmsplice+0x217/0x10d0 [ 634.596030][T12475] ? __pfx_fpu__restore_sig+0x10/0x10 [ 634.596079][T12475] ? __pfx___se_sys_vmsplice+0x10/0x10 [ 634.596118][T12475] ? restore_signal_shadow_stack+0x3b7/0x480 [ 634.596147][T12475] ? __ia32_sys_rt_sigreturn+0x6a2/0x7b0 [ 634.596183][T12475] ? __pfx___ia32_sys_rt_sigreturn+0x10/0x10 [ 634.596210][T12475] ? _raw_spin_unlock_irq+0x2e/0x50 [ 634.596270][T12475] ? __task_pid_nr_ns+0x28/0x470 [ 634.596300][T12475] ? do_syscall_64+0xbe/0x3b0 [ 634.596323][T12475] do_syscall_64+0xfa/0x3b0 [ 634.596341][T12475] ? lockdep_hardirqs_on+0x9c/0x150 [ 634.596360][T12475] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 634.596379][T12475] ? clear_bhb_loop+0x60/0xb0 [ 634.596403][T12475] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 634.596422][T12475] RIP: 0033:0x7f57fb98ebe9 [ 634.596441][T12475] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 634.596458][T12475] RSP: 002b:00007f57fc769038 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 634.596480][T12475] RAX: ffffffffffffffda RBX: 00007f57fbbc5fa0 RCX: 00007f57fb98ebe9 [ 634.596494][T12475] RDX: 000000000000000f RSI: 00002000000014c0 RDI: 0000000000000005 [ 634.596506][T12475] RBP: 00007f57fc769090 R08: 0000000000000000 R09: 0000000000000000 [ 634.596518][T12475] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 634.596530][T12475] R13: 00007f57fbbc6038 R14: 00007f57fbbc5fa0 R15: 00007f57fbcefa28 [ 634.596563][T12475] [ 634.989957][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 635.537114][T12490] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1677'. [ 635.909019][T12506] FAULT_INJECTION: forcing a failure. [ 635.909019][T12506] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 635.922405][ T957] usb 1-1: new high-speed USB device number 79 using dummy_hcd [ 635.953100][T12506] CPU: 0 UID: 0 PID: 12506 Comm: syz.2.1684 Not tainted syzkaller #0 PREEMPT(full) [ 635.953130][T12506] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 635.953141][T12506] Call Trace: [ 635.953150][T12506] [ 635.953160][T12506] dump_stack_lvl+0x189/0x250 [ 635.953190][T12506] ? __pfx____ratelimit+0x10/0x10 [ 635.953210][T12506] ? __pfx_dump_stack_lvl+0x10/0x10 [ 635.953295][T12506] ? __pfx__printk+0x10/0x10 [ 635.953335][T12506] ? __might_fault+0xb0/0x130 [ 635.953374][T12506] should_fail_ex+0x414/0x560 [ 635.953409][T12506] _copy_from_user+0x2d/0xb0 [ 635.953435][T12506] ___sys_sendmsg+0x158/0x2a0 [ 635.953463][T12506] ? __pfx____sys_sendmsg+0x10/0x10 [ 635.953522][T12506] ? __fget_files+0x2a/0x420 [ 635.953539][T12506] ? __fget_files+0x3a0/0x420 [ 635.953567][T12506] __sys_sendmmsg+0x227/0x430 [ 635.953595][T12506] ? __pfx___sys_sendmmsg+0x10/0x10 [ 635.953617][T12506] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 635.953667][T12506] ? ksys_write+0x22a/0x250 [ 635.953695][T12506] ? __pfx_ksys_write+0x10/0x10 [ 635.953728][T12506] __x64_sys_sendmmsg+0xa0/0xc0 [ 635.953754][T12506] do_syscall_64+0xfa/0x3b0 [ 635.953774][T12506] ? lockdep_hardirqs_on+0x9c/0x150 [ 635.953793][T12506] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 635.953813][T12506] ? clear_bhb_loop+0x60/0xb0 [ 635.953836][T12506] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 635.953856][T12506] RIP: 0033:0x7f8e3318ebe9 [ 635.953875][T12506] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 635.953892][T12506] RSP: 002b:00007f8e340a7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 635.953915][T12506] RAX: ffffffffffffffda RBX: 00007f8e333c5fa0 RCX: 00007f8e3318ebe9 [ 635.953929][T12506] RDX: 04000000000001f2 RSI: 0000200000000000 RDI: 0000000000000005 [ 635.953943][T12506] RBP: 00007f8e340a7090 R08: 0000000000000000 R09: 0000000000000000 [ 635.953954][T12506] R10: 000000000000fff0 R11: 0000000000000246 R12: 0000000000000001 [ 635.953966][T12506] R13: 00007f8e333c6038 R14: 00007f8e333c5fa0 R15: 00007f8e334efa28 [ 635.953998][T12506] [ 636.069920][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 636.279973][ T957] usb 1-1: Using ep0 maxpacket: 8 [ 636.420444][ T957] usb 1-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 636.443109][ T957] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 636.452028][ T957] usb 1-1: Product: syz [ 636.456550][ T957] usb 1-1: Manufacturer: syz [ 636.463738][ T957] usb 1-1: SerialNumber: syz [ 636.578627][ T957] usb 1-1: config 0 descriptor?? [ 636.625556][ T957] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 636.719890][T10039] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 636.881801][T10039] usb 4-1: Using ep0 maxpacket: 8 [ 636.902124][T10039] usb 4-1: config 0 has an invalid interface number: 235 but max is 0 [ 636.913170][T10039] usb 4-1: config 0 has no interface number 0 [ 636.919338][T10039] usb 4-1: config 0 interface 235 has no altsetting 0 [ 636.939081][T10039] usb 4-1: New USB device found, idVendor=0a12, idProduct=5d10, bcdDevice=92.0d [ 636.950975][T10039] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 636.964064][T10039] usb 4-1: Product: syz [ 636.968429][T10039] usb 4-1: Manufacturer: syz [ 636.979856][T10039] usb 4-1: SerialNumber: syz [ 636.987492][T10039] usb 4-1: config 0 descriptor?? [ 637.025707][ T957] gspca_sonixj: reg_r err -32 [ 637.034295][ T957] sonixj 1-1:0.0: probe with driver sonixj failed with error -32 [ 637.149834][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 637.325859][T10054] usb 4-1: USB disconnect, device number 61 [ 637.484783][T12502] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 637.524958][T12502] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 637.617324][T12528] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1692'. [ 637.714518][T12532] FAULT_INJECTION: forcing a failure. [ 637.714518][T12532] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 637.728038][T12532] CPU: 0 UID: 0 PID: 12532 Comm: syz.4.1694 Not tainted syzkaller #0 PREEMPT(full) [ 637.728058][T12532] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 637.728068][T12532] Call Trace: [ 637.728076][T12532] [ 637.728084][T12532] dump_stack_lvl+0x189/0x250 [ 637.728114][T12532] ? __pfx____ratelimit+0x10/0x10 [ 637.728132][T12532] ? __pfx_dump_stack_lvl+0x10/0x10 [ 637.728153][T12532] ? __pfx__printk+0x10/0x10 [ 637.728180][T12532] ? fs_reclaim_acquire+0x7d/0x100 [ 637.728201][T12532] should_fail_ex+0x414/0x560 [ 637.728220][T12532] prepare_alloc_pages+0x213/0x610 [ 637.728235][T12532] __alloc_frozen_pages_noprof+0x123/0x370 [ 637.728249][T12532] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 637.728267][T12532] ? policy_nodemask+0x27c/0x720 [ 637.728280][T12532] ? __lock_acquire+0xab9/0xd20 [ 637.728302][T12532] alloc_pages_mpol+0x232/0x4a0 [ 637.728320][T12532] alloc_pages_noprof+0xa9/0x190 [ 637.728337][T12532] get_free_pages_noprof+0xf/0x80 [ 637.728349][T12532] kasan_populate_vmalloc+0x33/0x1a0 [ 637.728361][T12532] ? do_raw_spin_unlock+0x122/0x240 [ 637.728377][T12532] alloc_vmap_area+0xd51/0x1490 [ 637.728401][T12532] ? __pfx_alloc_vmap_area+0x10/0x10 [ 637.728415][T12532] ? __kasan_kmalloc+0x93/0xb0 [ 637.728430][T12532] ? __kmalloc_cache_node_noprof+0x234/0x3d0 [ 637.728446][T12532] ? __get_vm_area_node+0x13f/0x300 [ 637.728460][T12532] ? copy_process+0x54b/0x3c00 [ 637.728473][T12532] __get_vm_area_node+0x1f8/0x300 [ 637.728492][T12532] __vmalloc_node_range_noprof+0x301/0x12f0 [ 637.728508][T12532] ? copy_process+0x54b/0x3c00 [ 637.728525][T12532] ? percpu_ref_get_many+0x19/0x140 [ 637.728540][T12532] ? percpu_ref_get_many+0x19/0x140 [ 637.728563][T12532] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 637.728580][T12532] ? memcpy_and_pad+0x48/0x80 [ 637.728599][T12532] __vmalloc_node_noprof+0xc2/0x110 [ 637.728614][T12532] ? copy_process+0x54b/0x3c00 [ 637.728624][T12532] ? copy_process+0x54b/0x3c00 [ 637.728637][T12532] dup_task_struct+0x3e7/0x860 [ 637.728652][T12532] copy_process+0x54b/0x3c00 [ 637.728676][T12532] ? get_pid_task+0x20/0x1f0 [ 637.728693][T12532] ? __pfx_copy_process+0x10/0x10 [ 637.728713][T12532] kernel_clone+0x21e/0x840 [ 637.728725][T12532] ? vfs_write+0x956/0xb30 [ 637.728742][T12532] ? __pfx_kernel_clone+0x10/0x10 [ 637.728760][T12532] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 637.728780][T12532] __x64_sys_clone+0x18b/0x1e0 [ 637.728797][T12532] ? __pfx___x64_sys_clone+0x10/0x10 [ 637.728822][T12532] ? __pfx_ksys_write+0x10/0x10 [ 637.728835][T12532] ? rcu_is_watching+0x15/0xb0 [ 637.728850][T12532] ? do_syscall_64+0xbe/0x3b0 [ 637.728863][T12532] do_syscall_64+0xfa/0x3b0 [ 637.728874][T12532] ? lockdep_hardirqs_on+0x9c/0x150 [ 637.728884][T12532] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 637.728896][T12532] ? clear_bhb_loop+0x60/0xb0 [ 637.728909][T12532] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 637.728920][T12532] RIP: 0033:0x7f103558ebe9 [ 637.728931][T12532] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 637.728941][T12532] RSP: 002b:00007f103641ffe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 637.728978][T12532] RAX: ffffffffffffffda RBX: 00007f10357c5fa0 RCX: 00007f103558ebe9 [ 637.728987][T12532] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000001000 [ 637.728994][T12532] RBP: 00007f1036420090 R08: 0000000000000000 R09: 0000000000000000 [ 637.729001][T12532] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001 [ 637.729013][T12532] R13: 00007f10357c6038 R14: 00007f10357c5fa0 R15: 00007f10358efa28 [ 637.729038][T12532] [ 637.729290][T12532] syz.4.1694: vmalloc error: size 32768, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 638.191804][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 638.253407][T12532] CPU: 1 UID: 0 PID: 12532 Comm: syz.4.1694 Not tainted syzkaller #0 PREEMPT(full) [ 638.253435][T12532] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 638.253447][T12532] Call Trace: [ 638.253455][T12532] [ 638.253464][T12532] dump_stack_lvl+0x189/0x250 [ 638.253496][T12532] ? __pfx_dump_stack_lvl+0x10/0x10 [ 638.253518][T12532] ? __pfx__printk+0x10/0x10 [ 638.253543][T12532] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 638.253564][T12532] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 638.253586][T12532] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 638.253609][T12532] warn_alloc+0x214/0x310 [ 638.253636][T12532] ? kasan_quarantine_put+0xdd/0x220 [ 638.253659][T12532] ? lockdep_hardirqs_on+0x9c/0x150 [ 638.253679][T12532] ? __pfx_warn_alloc+0x10/0x10 [ 638.253707][T12532] ? kfree+0x18e/0x440 [ 638.253729][T12532] ? __get_vm_area_node+0x13f/0x300 [ 638.253754][T12532] ? copy_process+0x54b/0x3c00 [ 638.253776][T12532] ? __get_vm_area_node+0x211/0x300 [ 638.253807][T12532] __vmalloc_node_range_noprof+0x326/0x12f0 [ 638.253846][T12532] ? percpu_ref_get_many+0x19/0x140 [ 638.253873][T12532] ? percpu_ref_get_many+0x19/0x140 [ 638.253914][T12532] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 638.253944][T12532] ? memcpy_and_pad+0x48/0x80 [ 638.253977][T12532] __vmalloc_node_noprof+0xc2/0x110 [ 638.254003][T12532] ? copy_process+0x54b/0x3c00 [ 638.254020][T12532] ? copy_process+0x54b/0x3c00 [ 638.254042][T12532] dup_task_struct+0x3e7/0x860 [ 638.254075][T12532] copy_process+0x54b/0x3c00 [ 638.254116][T12532] ? get_pid_task+0x20/0x1f0 [ 638.254144][T12532] ? __pfx_copy_process+0x10/0x10 [ 638.254178][T12532] kernel_clone+0x21e/0x840 [ 638.254196][T12532] ? vfs_write+0x956/0xb30 [ 638.254223][T12532] ? __pfx_kernel_clone+0x10/0x10 [ 638.254252][T12532] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 638.254279][T12532] __x64_sys_clone+0x18b/0x1e0 [ 638.254301][T12532] ? __pfx___x64_sys_clone+0x10/0x10 [ 638.254338][T12532] ? __pfx_ksys_write+0x10/0x10 [ 638.254359][T12532] ? rcu_is_watching+0x15/0xb0 [ 638.254382][T12532] ? do_syscall_64+0xbe/0x3b0 [ 638.254405][T12532] do_syscall_64+0xfa/0x3b0 [ 638.254424][T12532] ? lockdep_hardirqs_on+0x9c/0x150 [ 638.254442][T12532] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 638.254461][T12532] ? clear_bhb_loop+0x60/0xb0 [ 638.254483][T12532] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 638.254501][T12532] RIP: 0033:0x7f103558ebe9 [ 638.254519][T12532] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 638.254535][T12532] RSP: 002b:00007f103641ffe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 638.254557][T12532] RAX: ffffffffffffffda RBX: 00007f10357c5fa0 RCX: 00007f103558ebe9 [ 638.254570][T12532] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000001000 [ 638.254582][T12532] RBP: 00007f1036420090 R08: 0000000000000000 R09: 0000000000000000 [ 638.254594][T12532] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001 [ 638.254605][T12532] R13: 00007f10357c6038 R14: 00007f10357c5fa0 R15: 00007f10358efa28 [ 638.254637][T12532] [ 638.254645][T12532] Mem-Info: [ 638.513234][ C1] vkms_vblank_simulate: vblank timer overrun [ 638.629901][ T957] usb 1-1: USB disconnect, device number 79 [ 638.674235][T12532] active_anon:24607 inactive_anon:0 isolated_anon:0 [ 638.674235][T12532] active_file:1906 inactive_file:4100 isolated_file:0 [ 638.674235][T12532] unevictable:2268 dirty:312 writeback:0 [ 638.674235][T12532] slab_reclaimable:11124 slab_unreclaimable:103445 [ 638.674235][T12532] mapped:35878 shmem:21275 pagetables:1363 [ 638.674235][T12532] sec_pagetables:0 bounce:0 [ 638.674235][T12532] kernel_misc_reclaimable:0 [ 638.674235][T12532] free:1331607 free_pcp:14723 free_cma:0 [ 638.866613][ T30] audit: type=1326 audit(1757286733.663:467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12536 comm="syz.3.1696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57fb98ebe9 code=0x7ffc0000 [ 638.866675][ T30] audit: type=1326 audit(1757286733.663:468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12536 comm="syz.3.1696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57fb98ebe9 code=0x7ffc0000 [ 638.920001][T12532] Node 0 active_anon:96380kB inactive_anon:0kB active_file:7488kB inactive_file:16268kB unevictable:9612kB isolated(anon):0kB isolated(file):0kB mapped:143416kB dirty:1252kB writeback:0kB shmem:83564kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12992kB pagetables:5340kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 638.920070][T12532] Node 1 active_anon:0kB inactive_anon:0kB active_file:136kB inactive_file:132kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:128kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:200kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 638.920116][T12532] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 638.920172][T12532] lowmem_reserve[]: 0 2497 2499 2499 2499 [ 638.920249][T12532] Node 0 DMA32 free:1430940kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:96416kB inactive_anon:0kB active_file:7488kB inactive_file:14988kB unevictable:9436kB writepending:1252kB present:3129332kB managed:2557428kB mlocked:7968kB bounce:0kB free_pcp:32344kB local_pcp:13532kB free_cma:0kB [ 638.920304][T12532] lowmem_reserve[]: 0 0 1 1 1 [ 638.920348][T12532] Node 0 Normal free:16kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:64kB inactive_anon:0kB active_file:0kB inactive_file:1280kB unevictable:176kB writepending:0kB present:1048580kB managed:1644kB mlocked:176kB bounce:0kB free_pcp:124kB local_pcp:88kB free_cma:0kB [ 638.920401][T12532] lowmem_reserve[]: 0 0 0 0 0 [ 638.920445][T12532] Node 1 Normal free:3880096kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:136kB inactive_file:132kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:27432kB local_pcp:18584kB free_cma:0kB [ 638.920500][T12532] lowmem_reserve[]: 0 0 0 0 0 [ 638.920542][T12532] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 638.920680][T12532] Node 0 DMA32: 3*4kB (UME) 1511*8kB (UM) 890*16kB (UM) 670*32kB (UM) 337*64kB (UM) 313*128kB (UM) 218*256kB (UME) 100*512kB (UM) 46*1024kB (UM) 26*2048kB (UME) 272*4096kB (UM) = 1430884kB [ 638.920867][T12532] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 638.920980][T12532] Node 1 Normal: 188*4kB (UME) 50*8kB (UME) 50*16kB (UME) 120*32kB (UME) 40*64kB (UE) 14*128kB (UME) 7*256kB (U) 7*512kB (UE) 6*1024kB (U) 4*2048kB (UME) 940*4096kB (UM) = 3880096kB [ 638.921243][T12532] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 638.921261][T12532] Node 0 hugepages_total=3 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 638.921278][T12532] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 638.921294][T12532] Node 1 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 638.921311][T12532] 27277 total pagecache pages [ 638.921321][T12532] 0 pages in swap cache [ 638.921331][T12532] Free swap = 124996kB [ 638.921340][T12532] Total swap = 124996kB [ 638.921350][T12532] 2097051 pages RAM [ 638.921360][T12532] 0 pages HighMem/MovableOnly [ 638.921368][T12532] 425668 pages reserved [ 638.921378][T12532] 0 pages cma reserved [ 639.229917][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 639.308819][T12555] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1699'. [ 639.308840][T12555] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1699'. [ 639.989742][T10039] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 640.172516][T10039] usb 4-1: config index 0 descriptor too short (expected 65535, got 27) [ 640.172548][T10039] usb 4-1: config 56 has too many interfaces: 49, using maximum allowed: 32 [ 640.172568][T10039] usb 4-1: config 56 has an invalid descriptor of length 55, skipping remainder of the config [ 640.172580][T10039] usb 4-1: config 56 has 0 interfaces, different from the descriptor's value: 49 [ 640.172604][T10039] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 640.172618][T10039] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 640.269842][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 640.402181][T10039] usb 4-1: string descriptor 0 read error: -71 [ 640.404127][T10039] usb 4-1: USB disconnect, device number 62 [ 641.319834][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 642.349835][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 642.579949][T10052] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 643.063089][T10052] usb 5-1: Using ep0 maxpacket: 8 [ 643.399942][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 643.834979][T10052] usb 5-1: unable to get BOS descriptor or descriptor too short [ 644.439872][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 645.420895][T10052] usb 5-1: config 4 has an invalid interface number: 30 but max is 0 [ 645.439011][T10052] usb 5-1: config 4 has no interface number 0 [ 645.463805][T10052] usb 5-1: config 4 interface 30 has no altsetting 0 [ 645.470729][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 645.512530][T10052] usb 5-1: string descriptor 0 read error: -22 [ 645.522436][T10052] usb 5-1: New USB device found, idVendor=9022, idProduct=d484, bcdDevice=ff.88 [ 645.532656][T10052] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 645.587738][T10052] dvb-usb: found a 'TeVii S482 (tuner 2)' in warm state. [ 645.637728][T10052] dw2102: su3000_power_ctrl: 1, initialized 0 [ 645.754916][T10052] dvb-usb: bulk message failed: -22 (2/0) [ 645.766720][T10052] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 645.800592][T10052] dvbdev: DVB: registering new adapter (TeVii S482 (tuner 2)) [ 645.836959][T10052] usb 5-1: media controller created [ 646.398292][T10052] dvb-usb: bulk message failed: -22 (6/0) [ 646.426299][T10052] dw2102: i2c transfer failed. [ 646.427417][T10052] dvb-usb: bulk message failed: -22 (6/0) [ 646.427433][T10052] dw2102: i2c transfer failed. [ 646.427443][T10052] dvb-usb: bulk message failed: -22 (6/0) [ 646.427451][T10052] dw2102: i2c transfer failed. [ 646.427460][T10052] dvb-usb: bulk message failed: -22 (6/0) [ 646.427469][T10052] dw2102: i2c transfer failed. [ 646.427477][T10052] dvb-usb: bulk message failed: -22 (6/0) [ 646.427486][T10052] dw2102: i2c transfer failed. [ 646.427495][T10052] dvb-usb: bulk message failed: -22 (6/0) [ 646.427504][T10052] dw2102: i2c transfer failed. [ 646.427510][T10052] dvb-usb: MAC address: 02:02:02:02:02:02 [ 646.510375][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 646.603431][T10052] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 647.328945][T10052] dvb-usb: bulk message failed: -22 (3/0) [ 647.369857][T10039] usb 2-1: new full-speed USB device number 106 using dummy_hcd [ 647.430437][T10052] dw2102: command 0x0e transfer failed. [ 647.449397][T10052] dvb-usb: bulk message failed: -22 (3/0) [ 647.459541][T10052] dw2102: command 0x0e transfer failed. [ 647.529811][T10039] usb 2-1: device descriptor read/64, error -71 [ 647.549831][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 647.780467][T12623] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1716'. [ 647.801815][T10039] usb 2-1: new full-speed USB device number 107 using dummy_hcd [ 647.841171][T10052] dvb-usb: bulk message failed: -22 (3/0) [ 647.847139][T10052] dw2102: command 0x0e transfer failed. [ 647.863843][T10052] dvb-usb: bulk message failed: -22 (3/0) [ 647.869642][T10052] dw2102: command 0x0e transfer failed. [ 647.892118][T10052] dvb-usb: bulk message failed: -22 (1/0) [ 647.897915][T10052] dw2102: command 0x51 transfer failed. [ 647.909516][T10052] dvb-usb: bulk message failed: -22 (5/0) [ 647.931053][T10052] dw2102: i2c probe for address 0x68 failed. [ 647.938169][T10052] dvb-usb: bulk message failed: -22 (5/0) [ 647.939878][T10039] usb 2-1: device descriptor read/64, error -71 [ 647.950336][T10052] dw2102: i2c probe for address 0x69 failed. [ 647.957705][T10052] dvb-usb: bulk message failed: -22 (5/0) [ 647.974095][T10052] dw2102: i2c probe for address 0x6a failed. [ 647.985602][T10052] dw2102: probing for demodulator failed. Is the external power switched on? [ 648.028451][T10052] dvb-usb: no frontend was attached by 'TeVii S482 (tuner 2)' [ 648.150866][T10039] usb usb2-port1: attempt power cycle [ 648.182371][T10054] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 648.235498][T10052] rc_core: IR keymap rc-tt-1500 not found [ 648.310316][T10052] Registered IR keymap rc-empty [ 648.319417][T10052] rc rc0: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0 [ 648.371565][T12637] netlink: 4400 bytes leftover after parsing attributes in process `syz.2.1719'. [ 648.391758][T12637] debugfs: 'Ç`]Š •Iöq¯!¾>Ýsó³Îú*Š®!)\Ç+`²iF' already exists in 'ieee80211' [ 648.568863][T10052] input: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0/input51 [ 648.570969][T10039] usb 2-1: new full-speed USB device number 108 using dummy_hcd [ 648.590011][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 648.612719][T10039] usb 2-1: device descriptor read/8, error -71 [ 648.619556][T10054] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 648.628291][T10054] usb 4-1: config 0 has no interface number 0 [ 648.645897][T10054] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 648.667111][T10054] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 648.776756][T10052] dvb-usb: schedule remote query interval to 250 msecs. [ 648.795552][T10054] usb 4-1: Product: syz [ 648.808098][T10052] dw2102: su3000_power_ctrl: 0, initialized 1 [ 648.814356][T10054] usb 4-1: Manufacturer: syz [ 648.896828][T10052] dvb-usb: TeVii S482 (tuner 2) successfully initialized and connected. [ 648.905380][T10054] usb 4-1: SerialNumber: syz [ 648.905438][T10039] usb 2-1: new full-speed USB device number 109 using dummy_hcd [ 648.914390][T10052] usb 5-1: USB disconnect, device number 69 [ 648.924939][T10054] usb 4-1: config 0 descriptor?? [ 649.138132][T10054] usb 4-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 649.162020][T10054] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 649.182564][T10039] usb 2-1: device descriptor read/8, error -71 [ 649.192322][T10054] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 649.211153][T10054] usb 4-1: media controller created [ 649.222315][T10052] dvb-usb: TeVii S482 (tuner 2) successfully deinitialized and disconnected. [ 649.300116][T10039] usb usb2-port1: unable to enumerate USB device [ 649.320902][T10054] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 649.380757][T10054] i2c i2c-2: ec100: i2c rd failed=-71 reg=33 [ 649.500297][T10054] usb 4-1: USB disconnect, device number 63 [ 649.629837][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 650.256504][T10039] usb 2-1: new high-speed USB device number 110 using dummy_hcd [ 650.367978][T12664] netlink: 'syz.0.1728': attribute type 2 has an invalid length. [ 650.440451][T10039] usb 2-1: Using ep0 maxpacket: 8 [ 650.448506][T10039] usb 2-1: unable to get BOS descriptor or descriptor too short [ 650.460852][T10039] usb 2-1: config 4 has an invalid interface number: 30 but max is 0 [ 650.469207][T10039] usb 2-1: config 4 has no interface number 0 [ 650.478108][T10039] usb 2-1: config 4 interface 30 has no altsetting 0 [ 650.489535][T10039] usb 2-1: string descriptor 0 read error: -22 [ 650.507549][T10039] usb 2-1: New USB device found, idVendor=9022, idProduct=d484, bcdDevice=ff.88 [ 650.534408][T10039] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 650.587397][T10039] dvb-usb: found a 'TeVii S482 (tuner 2)' in warm state. [ 650.612893][T10039] dw2102: su3000_power_ctrl: 1, initialized 0 [ 650.635687][T10039] dvb-usb: bulk message failed: -22 (2/0) [ 650.667759][T10039] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 650.679838][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 650.751988][T10039] dvbdev: DVB: registering new adapter (TeVii S482 (tuner 2)) [ 650.790312][T12647] dvb-usb: bulk message failed: -22 (1/0) [ 650.796069][T12647] dw2102: i2c transfer failed. [ 650.804551][T10039] usb 2-1: media controller created [ 650.842299][T10039] dvb-usb: bulk message failed: -22 (6/0) [ 650.884725][T10039] dw2102: i2c transfer failed. [ 650.928148][T10039] dvb-usb: bulk message failed: -22 (6/0) [ 650.973954][T10039] dw2102: i2c transfer failed. [ 650.988985][T10039] dvb-usb: bulk message failed: -22 (6/0) [ 651.000826][T10039] dw2102: i2c transfer failed. [ 651.015847][T10039] dvb-usb: bulk message failed: -22 (6/0) [ 651.025943][T10039] dw2102: i2c transfer failed. [ 651.040297][T10039] dvb-usb: bulk message failed: -22 (6/0) [ 651.052278][T10039] dw2102: i2c transfer failed. [ 651.067366][T10039] dvb-usb: bulk message failed: -22 (6/0) [ 651.082796][T10039] dw2102: i2c transfer failed. [ 651.097879][T10039] dvb-usb: MAC address: 02:02:02:02:02:02 [ 651.138017][T10039] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 651.185022][T10039] dvb-usb: bulk message failed: -22 (3/0) [ 651.207719][T10039] dw2102: command 0x0e transfer failed. [ 651.222071][T10039] dvb-usb: bulk message failed: -22 (3/0) [ 651.238136][T10039] dw2102: command 0x0e transfer failed. [ 651.709825][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 651.762481][T10039] dvb-usb: bulk message failed: -22 (3/0) [ 651.768348][T10039] dw2102: command 0x0e transfer failed. [ 651.823647][T10039] dvb-usb: bulk message failed: -22 (3/0) [ 651.829425][T10039] dw2102: command 0x0e transfer failed. [ 651.875422][T10039] dvb-usb: bulk message failed: -22 (1/0) [ 651.901398][T10039] dw2102: command 0x51 transfer failed. [ 651.934612][T10039] dvb-usb: bulk message failed: -22 (5/0) [ 651.950016][T10039] dw2102: i2c probe for address 0x68 failed. [ 651.964902][T10039] dvb-usb: bulk message failed: -22 (5/0) [ 651.982682][T10039] dw2102: i2c probe for address 0x69 failed. [ 652.099521][T10039] dvb-usb: bulk message failed: -22 (5/0) [ 652.129873][T10039] dw2102: i2c probe for address 0x6a failed. [ 652.136598][T10039] dw2102: probing for demodulator failed. Is the external power switched on? [ 652.146392][T10037] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 652.158248][T10039] dvb-usb: no frontend was attached by 'TeVii S482 (tuner 2)' [ 652.249848][T10039] rc_core: IR keymap rc-tt-1500 not found [ 652.266820][T10039] Registered IR keymap rc-empty [ 652.294171][T10039] rc rc0: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0 [ 652.313398][T10037] usb 5-1: Using ep0 maxpacket: 8 [ 652.333636][T12672] dvb-usb: bulk message failed: -22 (3/0) [ 652.345357][T12672] dw2102: i2c transfer failed. [ 652.370136][T10039] input: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0/input52 [ 652.414248][T10037] usb 5-1: unable to get BOS descriptor or descriptor too short [ 652.437383][T10039] dvb-usb: schedule remote query interval to 250 msecs. [ 652.461074][T10037] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 652.471054][T10039] dw2102: su3000_power_ctrl: 0, initialized 1 [ 652.480117][T10039] dvb-usb: TeVii S482 (tuner 2) successfully initialized and connected. [ 652.491078][T10037] usb 5-1: can't read configurations, error -71 [ 652.520043][T10039] usb 2-1: USB disconnect, device number 110 [ 652.610325][T10054] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 652.655370][T10039] dvb-usb: TeVii S482 (tuner 2) successfully deinitialized and disconnected. [ 652.749831][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 652.777364][ T30] audit: type=1326 audit(1757286747.573:469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12699 comm="syz.0.1740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc06378ebe9 code=0x7ffc0000 [ 652.816548][T10054] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 652.818739][ T30] audit: type=1326 audit(1757286747.613:470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12699 comm="syz.0.1740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc06378ebe9 code=0x7ffc0000 [ 652.827680][T10054] usb 4-1: config 0 has no interface number 0 [ 652.848492][ T30] audit: type=1326 audit(1757286747.613:471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12699 comm="syz.0.1740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7fc06378ebe9 code=0x7ffc0000 [ 652.885841][ T30] audit: type=1326 audit(1757286747.613:472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12699 comm="syz.0.1740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc06378ebe9 code=0x7ffc0000 [ 652.967421][ T30] audit: type=1326 audit(1757286747.613:473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12699 comm="syz.0.1740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc06378ebe9 code=0x7ffc0000 [ 652.980199][T10054] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 653.003174][T10054] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 653.034035][T10054] usb 4-1: Product: syz [ 653.087050][T10054] usb 4-1: Manufacturer: syz [ 653.098719][T10054] usb 4-1: SerialNumber: syz [ 653.138046][T10054] usb 4-1: config 0 descriptor?? [ 653.217452][ T30] audit: type=1326 audit(1757286747.613:474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12699 comm="syz.0.1740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7fc06378ebe9 code=0x7ffc0000 [ 653.248028][T12709] IPVS: sync thread started: state = BACKUP, mcast_ifn = hsr0, syncid = 2, id = 0 [ 653.357705][T10054] usb 4-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 653.369176][ T30] audit: type=1326 audit(1757286747.613:475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12699 comm="syz.0.1740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc06378ebe9 code=0x7ffc0000 [ 653.400191][T10051] usb 2-1: new high-speed USB device number 111 using dummy_hcd [ 653.450259][T10054] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 653.456616][ T30] audit: type=1326 audit(1757286747.613:476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12699 comm="syz.0.1740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc06378ebe9 code=0x7ffc0000 [ 653.492793][ T30] audit: type=1326 audit(1757286747.673:477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12699 comm="syz.0.1740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc06378ebe9 code=0x7ffc0000 [ 653.576179][ T30] audit: type=1326 audit(1757286747.673:478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12699 comm="syz.0.1740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc06378ebe9 code=0x7ffc0000 [ 653.609901][T10051] usb 2-1: Using ep0 maxpacket: 8 [ 653.615229][T10054] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 653.639531][T10051] usb 2-1: unable to get BOS descriptor or descriptor too short [ 653.647852][T10054] usb 4-1: media controller created [ 653.666152][T10051] usb 2-1: config 4 has an invalid interface number: 30 but max is 0 [ 653.688508][T10051] usb 2-1: config 4 has no interface number 0 [ 653.721688][T10051] usb 2-1: config 4 interface 30 has no altsetting 0 [ 653.742058][T10054] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 653.761379][T10051] usb 2-1: string descriptor 0 read error: -22 [ 653.781914][T10051] usb 2-1: New USB device found, idVendor=9022, idProduct=d484, bcdDevice=ff.88 [ 653.791298][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 653.929864][T10051] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 653.968595][T12711] netlink: 'syz.4.1744': attribute type 12 has an invalid length. [ 654.026279][T10051] dvb-usb: found a 'TeVii S482 (tuner 2)' in warm state. [ 654.049639][T10051] dw2102: su3000_power_ctrl: 1, initialized 0 [ 654.067680][T10051] dvb-usb: bulk message failed: -22 (2/0) [ 654.089833][T12711] netlink: 9472 bytes leftover after parsing attributes in process `syz.4.1744'. [ 654.151186][T10051] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 654.206060][T10051] dvbdev: DVB: registering new adapter (TeVii S482 (tuner 2)) [ 654.330238][T10051] usb 2-1: media controller created [ 654.352216][T10051] dvb-usb: bulk message failed: -22 (6/0) [ 654.375249][T10051] dw2102: i2c transfer failed. [ 654.392883][T10051] dvb-usb: bulk message failed: -22 (6/0) [ 654.401329][T10051] dw2102: i2c transfer failed. [ 654.416340][T10051] dvb-usb: bulk message failed: -22 (6/0) [ 654.433559][T10051] dw2102: i2c transfer failed. [ 654.455222][T10051] dvb-usb: bulk message failed: -22 (6/0) [ 654.463022][T10051] dw2102: i2c transfer failed. [ 654.470001][T10051] dvb-usb: bulk message failed: -22 (6/0) [ 654.476519][T10051] dw2102: i2c transfer failed. [ 654.493675][T10051] dvb-usb: bulk message failed: -22 (6/0) [ 654.499980][T10051] dw2102: i2c transfer failed. [ 654.506495][T10051] dvb-usb: MAC address: 02:02:02:02:02:02 [ 654.549235][T10051] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 654.610360][T10054] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 654.623695][T10051] dvb-usb: bulk message failed: -22 (3/0) [ 654.785254][T10051] dw2102: command 0x0e transfer failed. [ 654.813673][T10051] dvb-usb: bulk message failed: -22 (3/0) [ 654.829906][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 654.854372][T10051] dw2102: command 0x0e transfer failed. [ 654.998869][T10054] usb 4-1: USB disconnect, device number 64 [ 655.186953][T10051] dvb-usb: bulk message failed: -22 (3/0) [ 655.205446][T10051] dw2102: command 0x0e transfer failed. [ 655.213559][T10051] dvb-usb: bulk message failed: -22 (3/0) [ 655.306859][T10051] dw2102: command 0x0e transfer failed. [ 655.333495][T10051] dvb-usb: bulk message failed: -22 (1/0) [ 655.345772][T10051] dw2102: command 0x51 transfer failed. [ 655.666507][T10051] dvb-usb: bulk message failed: -22 (5/0) [ 655.674945][T10051] dw2102: i2c probe for address 0x68 failed. [ 655.681223][T10051] dvb-usb: bulk message failed: -22 (5/0) [ 655.687224][T10051] dw2102: i2c probe for address 0x69 failed. [ 655.695817][T10051] dvb-usb: bulk message failed: -22 (5/0) [ 655.704209][T10051] dw2102: i2c probe for address 0x6a failed. [ 655.712633][T10051] dw2102: probing for demodulator failed. Is the external power switched on? [ 655.869837][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 656.047224][T12735] netlink: 'syz.4.1748': attribute type 1 has an invalid length. [ 656.059167][T12735] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1748'. [ 656.170107][T10051] dvb-usb: no frontend was attached by 'TeVii S482 (tuner 2)' [ 656.629997][T10051] rc_core: IR keymap rc-tt-1500 not found [ 656.635797][T10051] Registered IR keymap rc-empty [ 656.687260][T10051] rc rc0: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0 [ 656.750008][T10051] input: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0/input53 [ 656.841946][T10051] dvb-usb: schedule remote query interval to 250 msecs. [ 656.848981][T10051] dw2102: su3000_power_ctrl: 0, initialized 1 [ 656.919836][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 656.953017][T10051] dvb-usb: TeVii S482 (tuner 2) successfully initialized and connected. [ 656.969916][T10037] usb 1-1: new low-speed USB device number 80 using dummy_hcd [ 657.041624][T10051] usb 2-1: USB disconnect, device number 111 [ 657.113277][T12743] netlink: 'syz.2.1751': attribute type 1 has an invalid length. [ 657.144881][T10037] usb 1-1: config index 0 descriptor too short (expected 6427, got 27) [ 657.200268][T10037] usb 1-1: config 0 has an invalid interface number: 21 but max is 0 [ 657.230120][T10037] usb 1-1: config 0 has no interface number 0 [ 657.236592][T10037] usb 1-1: config 0 interface 21 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 657.250220][T10037] usb 1-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 657.259262][T10037] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 657.273394][T10037] usb 1-1: config 0 descriptor?? [ 657.411865][T10051] dvb-usb: TeVii S482 (tuner 2) successfully deinitialized and disconnected. [ 657.502551][T10037] usb 1-1: USB disconnect, device number 80 [ 657.643985][T12750] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 657.680224][T12750] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 657.930007][T10051] usb 2-1: new high-speed USB device number 112 using dummy_hcd [ 657.949835][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 658.119896][T10051] usb 2-1: Using ep0 maxpacket: 8 [ 658.139805][T10039] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 658.162199][T10051] usb 2-1: unable to get BOS descriptor or descriptor too short [ 658.173479][T10051] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 658.181340][T10051] usb 2-1: can't read configurations, error -71 [ 658.309802][T10039] usb 4-1: Using ep0 maxpacket: 8 [ 658.570333][T10039] usb 4-1: unable to get BOS descriptor or descriptor too short [ 658.604214][T10039] usb 4-1: config 4 has an invalid interface number: 30 but max is 0 [ 658.632213][T10039] usb 4-1: config 4 has no interface number 0 [ 658.639923][T10039] usb 4-1: config 4 interface 30 has no altsetting 0 [ 658.656522][T10039] usb 4-1: string descriptor 0 read error: -22 [ 658.663393][T10039] usb 4-1: New USB device found, idVendor=9022, idProduct=d484, bcdDevice=ff.88 [ 658.668778][T12772] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 658.687898][T10039] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 658.690229][T12772] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 658.833526][T10054] usb 1-1: new high-speed USB device number 81 using dummy_hcd [ 658.927480][T10039] dvb-usb: found a 'TeVii S482 (tuner 2)' in warm state. [ 658.978565][T10039] dw2102: su3000_power_ctrl: 1, initialized 0 [ 658.978596][T10039] dvb-usb: bulk message failed: -22 (2/0) [ 658.999918][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 659.007521][T10054] usb 1-1: Using ep0 maxpacket: 16 [ 659.008511][T10039] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 659.038112][T10054] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 659.053679][T10054] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 659.089091][T10054] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 659.103480][T10054] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 659.113592][T10054] usb 1-1: Product: syz [ 659.117891][T10054] usb 1-1: Manufacturer: syz [ 659.119992][T10039] dvbdev: DVB: registering new adapter (TeVii S482 (tuner 2)) [ 659.140573][T10054] usb 1-1: SerialNumber: syz [ 659.187745][T10039] usb 4-1: media controller created [ 659.187924][T10054] usb 1-1: config 0 descriptor?? [ 659.222726][T10054] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 659.242894][T10054] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 659.263377][T10039] dvb-usb: bulk message failed: -22 (6/0) [ 659.311499][T10039] dw2102: i2c transfer failed. [ 659.366717][T10039] dvb-usb: bulk message failed: -22 (6/0) [ 659.433525][T10039] dw2102: i2c transfer failed. [ 659.449910][T10039] dvb-usb: bulk message failed: -22 (6/0) [ 659.457651][T10039] dw2102: i2c transfer failed. [ 659.495737][T12780] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 659.510494][T10039] dvb-usb: bulk message failed: -22 (6/0) [ 659.516294][T10039] dw2102: i2c transfer failed. [ 659.531920][T12780] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 659.567436][T10039] dvb-usb: bulk message failed: -22 (6/0) [ 659.599066][T12780] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 659.613234][T12780] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 659.632563][T10039] dw2102: i2c transfer failed. [ 659.679185][T10039] dvb-usb: bulk message failed: -22 (6/0) [ 659.718004][T10039] dw2102: i2c transfer failed. [ 659.831408][T10039] dvb-usb: MAC address: 02:02:02:02:02:02 [ 659.842953][T10054] em28xx 1-1:0.0: chip ID is em28178 [ 659.905021][T12786] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1765'. [ 660.029840][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 660.155076][T12786] openvswitch: netlink: EtherType 0 is less than min 600 [ 660.265727][T10039] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 660.346734][T10039] dvb-usb: bulk message failed: -22 (3/0) [ 660.364209][T10039] dw2102: command 0x0e transfer failed. [ 660.369979][T10037] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 660.391718][T10039] dvb-usb: bulk message failed: -22 (3/0) [ 660.426013][T10039] dw2102: command 0x0e transfer failed. [ 660.805102][T10037] usb 5-1: config 0 has no interfaces? [ 660.827148][T10037] usb 5-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 660.842328][T10037] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 660.852436][T10037] usb 5-1: Product: syz [ 660.857356][T10037] usb 5-1: Manufacturer: syz [ 660.863534][T10037] usb 5-1: SerialNumber: syz [ 660.885958][T10037] usb 5-1: config 0 descriptor?? [ 661.069885][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 661.288161][T10039] dvb-usb: bulk message failed: -22 (3/0) [ 661.294669][T10039] dw2102: command 0x0e transfer failed. [ 661.305528][T10039] dvb-usb: bulk message failed: -22 (3/0) [ 661.315067][T10037] usb 5-1: USB disconnect, device number 73 [ 661.371781][T10039] dw2102: command 0x0e transfer failed. [ 661.480526][T10039] dvb-usb: bulk message failed: -22 (1/0) [ 661.494773][T10039] dw2102: command 0x51 transfer failed. [ 661.503886][T10039] dvb-usb: bulk message failed: -22 (5/0) [ 661.513599][T10039] dw2102: i2c probe for address 0x68 failed. [ 661.522436][T10039] dvb-usb: bulk message failed: -22 (5/0) [ 661.544533][T10039] dw2102: i2c probe for address 0x69 failed. [ 661.561503][T10039] dvb-usb: bulk message failed: -22 (5/0) [ 661.578941][T10039] dw2102: i2c probe for address 0x6a failed. [ 661.588920][T10039] dw2102: probing for demodulator failed. Is the external power switched on? [ 661.598863][T10039] dvb-usb: no frontend was attached by 'TeVii S482 (tuner 2)' [ 661.772569][T10039] rc_core: IR keymap rc-tt-1500 not found [ 661.786441][T10039] Registered IR keymap rc-empty [ 661.817907][T10039] rc rc0: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0 [ 661.893959][T10037] usb 1-1: USB disconnect, device number 81 [ 661.901083][T10037] em28xx 1-1:0.0: Disconnecting em28xx [ 661.918864][T10039] input: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0/input54 [ 661.962609][T10037] em28xx 1-1:0.0: Freeing device [ 661.983288][T10039] dvb-usb: schedule remote query interval to 250 msecs. [ 662.018115][T10039] dw2102: su3000_power_ctrl: 0, initialized 1 [ 662.052532][T10039] dvb-usb: TeVii S482 (tuner 2) successfully initialized and connected. [ 662.109815][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 662.148718][T10039] usb 4-1: USB disconnect, device number 65 [ 662.336765][T10039] dvb-usb: TeVii S482 (tuner 2) successfully deinitialized and disconnected. [ 662.354108][T10037] usb 1-1: new high-speed USB device number 82 using dummy_hcd [ 662.455638][ T957] usb 2-1: new high-speed USB device number 114 using dummy_hcd [ 662.601587][T10040] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 662.613389][T12822] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1774'. [ 662.650814][ T957] usb 2-1: Using ep0 maxpacket: 8 [ 662.658059][T10037] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 662.666717][T10037] usb 1-1: config 0 has no interface number 0 [ 662.678501][T10037] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 662.751423][ T957] usb 2-1: unable to get BOS descriptor or descriptor too short [ 662.759166][T10037] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 662.770906][ T957] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 662.788855][T10040] usb 5-1: config 0 has no interfaces? [ 662.795943][ T957] usb 2-1: can't read configurations, error -71 [ 662.803066][T10037] usb 1-1: Product: syz [ 662.814391][T10040] usb 5-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 662.825597][T10037] usb 1-1: Manufacturer: syz [ 662.837615][T10037] usb 1-1: SerialNumber: syz [ 662.848398][T10040] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 662.881930][T10037] usb 1-1: config 0 descriptor?? [ 662.906466][T10040] usb 5-1: Product: syz [ 662.915473][T12827] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 662.933453][T12827] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 662.947077][T10040] usb 5-1: Manufacturer: syz [ 662.956762][T10040] usb 5-1: SerialNumber: syz [ 662.977647][T10040] usb 5-1: config 0 descriptor?? [ 663.118905][T10037] usb 1-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 663.134589][T10037] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 663.146915][T10037] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 663.156215][T10037] usb 1-1: media controller created [ 663.159829][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 663.241095][T10037] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 663.664953][T12833] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1777'. [ 664.200036][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 664.322028][T12849] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 664.331251][T12849] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 664.351200][T10037] i2c i2c-1: ec100: i2c rd failed=-110 reg=33 [ 664.364509][T12849] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 664.575816][T10037] usb 1-1: USB disconnect, device number 82 [ 664.660232][T10054] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 664.850072][T10054] usb 4-1: Using ep0 maxpacket: 8 [ 664.870845][T10054] usb 4-1: config 0 has no interfaces? [ 665.082133][T10037] usb 5-1: USB disconnect, device number 74 [ 665.230004][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 665.351609][T10051] usb 1-1: new high-speed USB device number 83 using dummy_hcd [ 665.499957][T10037] usb 5-1: new high-speed USB device number 75 using dummy_hcd [ 665.520331][T10051] usb 1-1: Using ep0 maxpacket: 8 [ 665.540599][T10051] usb 1-1: unable to get BOS descriptor or descriptor too short [ 665.576420][T10051] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 665.603943][T10051] usb 1-1: can't read configurations, error -71 [ 665.674529][T10037] usb 5-1: Using ep0 maxpacket: 8 [ 665.691848][T10037] usb 5-1: unable to get BOS descriptor or descriptor too short [ 665.717187][T10037] usb 5-1: config 4 has an invalid interface number: 30 but max is 0 [ 665.742739][T10037] usb 5-1: config 4 has no interface number 0 [ 665.761864][T10037] usb 5-1: config 4 interface 30 has no altsetting 0 [ 665.787380][T10037] usb 5-1: string descriptor 0 read error: -22 [ 665.813030][T10037] usb 5-1: New USB device found, idVendor=9022, idProduct=d484, bcdDevice=ff.88 [ 665.895199][T10037] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 665.926219][T10037] dvb-usb: found a 'TeVii S482 (tuner 2)' in warm state. [ 665.946540][T10037] dw2102: su3000_power_ctrl: 1, initialized 0 [ 665.959558][T10037] dvb-usb: bulk message failed: -22 (2/0) [ 665.976165][T10037] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 665.988467][T10037] dvbdev: DVB: registering new adapter (TeVii S482 (tuner 2)) [ 666.005138][T10037] usb 5-1: media controller created [ 666.014141][T10037] dvb-usb: bulk message failed: -22 (6/0) [ 666.025445][T10037] dw2102: i2c transfer failed. [ 666.032986][T10037] dvb-usb: bulk message failed: -22 (6/0) [ 666.038949][T10037] dw2102: i2c transfer failed. [ 666.048783][T10037] dvb-usb: bulk message failed: -22 (6/0) [ 666.056403][T10037] dw2102: i2c transfer failed. [ 666.065375][T10037] dvb-usb: bulk message failed: -22 (6/0) [ 666.072804][T10037] dw2102: i2c transfer failed. [ 666.077852][T10037] dvb-usb: bulk message failed: -22 (6/0) [ 666.129911][T10037] dw2102: i2c transfer failed. [ 666.136092][T12862] dvb-usb: bulk message failed: -22 (1/0) [ 666.142150][T12862] dw2102: i2c transfer failed. [ 666.155999][T12862] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000002: 0000 [#1] SMP KASAN PTI [ 666.167906][T12862] KASAN: null-ptr-deref in range [0x0000000000000010-0x0000000000000017] [ 666.176333][T12862] CPU: 1 UID: 0 PID: 12862 Comm: syz.4.1787 Not tainted syzkaller #0 PREEMPT(full) [ 666.185723][T12862] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 666.195876][T12862] RIP: 0010:su3000_i2c_transfer+0x2e3/0x1040 [ 666.201877][T12862] Code: 0f b6 18 49 83 c7 08 4c 89 f8 48 c1 e8 03 42 80 3c 28 00 74 08 4c 89 ff e8 0a 5f 3c fa 4d 8b 37 49 ff c6 4c 89 f0 48 c1 e8 03 <42> 0f b6 04 28 84 c0 0f 85 e6 08 00 00 41 88 1e 48 8b 44 24 48 42 [ 666.221660][T12862] RSP: 0018:ffffc9001f12faa8 EFLAGS: 00010202 [ 666.227755][T12862] RAX: 0000000000000002 RBX: 0000000000000010 RCX: 0f72bf4178b81300 [ 666.235813][T12862] RDX: ffffc9000cb7d000 RSI: 0000000000003582 RDI: 0000000000003583 [ 666.243795][T12862] RBP: 0000000000000000 R08: ffffc9001f12f7c7 R09: 1ffff92003e25ef8 [ 666.251802][T12862] R10: dffffc0000000000 R11: fffff52003e25ef9 R12: 0000000000000001 [ 666.259895][T12862] R13: dffffc0000000000 R14: 0000000000000011 R15: ffff8880771a7e28 [ 666.267869][T12862] FS: 00007f10364206c0(0000) GS:ffff888125d15000(0000) knlGS:0000000000000000 [ 666.276811][T12862] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 666.283417][T12862] CR2: 00007fc063aefca8 CR3: 0000000052f40000 CR4: 00000000003526f0 [ 666.291516][T12862] Call Trace: [ 666.294810][T12862] [ 666.297751][T12862] __i2c_transfer+0x871/0x2170 [ 666.302520][T12862] ? i2c_transfer+0x120/0x3a0 [ 666.307193][T12862] ? __pfx___i2c_transfer+0x10/0x10 [ 666.312385][T12862] ? rt_mutex_lock_nested+0x172/0x1e0 [ 666.317758][T12862] ? i2c_transfer+0x120/0x3a0 [ 666.322437][T12862] i2c_transfer+0x25b/0x3a0 [ 666.326953][T12862] ? __pfx_i2c_transfer+0x10/0x10 [ 666.331992][T12862] ? _copy_from_user+0x94/0xb0 [ 666.336773][T12862] i2cdev_ioctl_rdwr+0x460/0x740 [ 666.341723][T12862] i2cdev_ioctl+0x64b/0x7f0 [ 666.346222][T12862] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 666.351330][T12862] ? __fget_files+0x3a0/0x420 [ 666.356014][T12862] ? __fget_files+0x2a/0x420 [ 666.360632][T12862] ? bpf_lsm_file_ioctl+0x9/0x20 [ 666.365576][T12862] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 666.370603][T12862] __se_sys_ioctl+0xfc/0x170 [ 666.375281][T12862] do_syscall_64+0xfa/0x3b0 [ 666.379795][T12862] ? lockdep_hardirqs_on+0x9c/0x150 [ 666.384985][T12862] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 666.391049][T12862] ? clear_bhb_loop+0x60/0xb0 [ 666.395763][T12862] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 666.401646][T12862] RIP: 0033:0x7f103558ebe9 [ 666.406066][T12862] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 666.425751][T12862] RSP: 002b:00007f1036420038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 666.434175][T12862] RAX: ffffffffffffffda RBX: 00007f10357c5fa0 RCX: 00007f103558ebe9 [ 666.442141][T12862] RDX: 0000200000000080 RSI: 0000000000000707 RDI: 0000000000000004 [ 666.450193][T12862] RBP: 00007f1035611e19 R08: 0000000000000000 R09: 0000000000000000 [ 666.458159][T12862] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 666.466209][T12862] R13: 00007f10357c6038 R14: 00007f10357c5fa0 R15: 00007f10358efa28 [ 666.474262][T12862] [ 666.477270][T12862] Modules linked in: [ 666.481604][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 666.488778][T12862] ---[ end trace 0000000000000000 ]--- [ 666.510007][T12862] RIP: 0010:su3000_i2c_transfer+0x2e3/0x1040 [ 666.516297][T12862] Code: 0f b6 18 49 83 c7 08 4c 89 f8 48 c1 e8 03 42 80 3c 28 00 74 08 4c 89 ff e8 0a 5f 3c fa 4d 8b 37 49 ff c6 4c 89 f0 48 c1 e8 03 <42> 0f b6 04 28 84 c0 0f 85 e6 08 00 00 41 88 1e 48 8b 44 24 48 42 [ 666.544210][T12862] RSP: 0018:ffffc9001f12faa8 EFLAGS: 00010202 [ 666.667363][T12862] RAX: 0000000000000002 RBX: 0000000000000010 RCX: 0f72bf4178b81300 [ 666.702273][T12862] RDX: ffffc9000cb7d000 RSI: 0000000000003582 RDI: 0000000000003583 [ 666.719608][T12862] RBP: 0000000000000000 R08: ffffc9001f12f7c7 R09: 1ffff92003e25ef8 [ 666.744032][T12862] R10: dffffc0000000000 R11: fffff52003e25ef9 R12: 0000000000000001 [ 666.759813][T12862] R13: dffffc0000000000 R14: 0000000000000011 R15: ffff8880771a7e28 [ 666.769625][T12862] FS: 00007f10364206c0(0000) GS:ffff888125d15000(0000) knlGS:0000000000000000 [ 666.779156][T12862] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 666.785919][T12862] CR2: 0000200000309030 CR3: 0000000052f40000 CR4: 00000000003526f0 [ 666.795127][T12862] Kernel panic - not syncing: Fatal exception [ 666.801394][T12862] Kernel Offset: disabled [ 666.805729][T12862] Rebooting in 86400 seconds..