last executing test programs: 10.644865786s ago: executing program 2 (id=922): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r0, 0x3b88, &(0x7f0000000200)={0xc, r1}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f00000005c0)={0x48, 0x2, r1}) ioctl$IOMMU_VFIO_IOMMU_GET_INFO(r0, 0x3b70, &(0x7f00000002c0)={0x10}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) r6 = syz_usb_connect(0x2, 0x3f, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000016038308c5109a8146e40102230109022d0001000000000904000003030000000905be3b"], 0x0) syz_usb_control_io$rtl8150(r6, 0x0, &(0x7f0000000a00)={0x2c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac2(r6, 0x0, &(0x7f0000000440)={0x44, &(0x7f00000001c0)={0x0, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_control_io$lan78xx(r6, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r6, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r6, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000000)={{0x1, 0x1, 0x18, r4, {0xbefb, 0x200}}, './file0\x00'}) r8 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r2) getsockopt$EBT_SO_GET_INIT_INFO(r7, 0x0, 0x82, &(0x7f0000000180)={'broute\x00', 0x0, 0x0, 0x0, [0xbb1d, 0x0, 0x4, 0x7fffffff, 0x5, 0xfffffffffffffffa]}, &(0x7f0000000200)=0x78) syz_genetlink_get_family_id$devlink(&(0x7f0000000100), r4) sendmsg$DEVLINK_CMD_RATE_GET(r7, &(0x7f0000000580)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000540)={&(0x7f0000000440)={0xcc, r8, 0x100, 0x70bd2c, 0x25dfdbfc, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0xb8, 0xa8, @random="858495d29c6f48679948ca0eb3397a83fbf9625a4c4decd8c7d6a4d1753d0fca27672460793d96525a6ab254699b0f7a5846b2f818800e68afddf77b8a14759e176766e863a7b2ade6f38c8de6faa94c0b06dc940a0ef39b307c8d81be1d1bfb8cdce158a8b35c780cba4b171fa34ebac5220bf044e00fd2eee0deaf78a8ed872a4580f07acae3c3b6d6d9dff9f2c49c5a7ab317721897bca5789fd85393dddf026af27d517f7d56119b49256297c401b9abb73c"}]}, 0xcc}, 0x1, 0x0, 0x0, 0x40000}, 0x4008020) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000640)={0x0}, &(0x7f0000000300)=0x39) ioprio_set$pid(0x3, r9, 0x4000) ioctl$IOMMU_VFIO_IOMMU_GET_INFO(r0, 0x3b70, &(0x7f0000000340)={0x40, 0x0, 0x0, 0x0, {}, {{}, 0x0, 0x0, [{}]}}) sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100000000000000000001000500050007000000000008000900030000001400200020010010000000000000e1ffe000000108000a0000000000060002000100000014001f"], 0x5c}, 0x1, 0x6c}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x3a8bc000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) inotify_init1(0x80800) sendmsg$DEVLINK_CMD_TRAP_GET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000006c0)={0x14, r3, 0x2, 0x70bd24, 0x25dfdb7c}, 0x14}, 0x1, 0x0, 0x0, 0x20008804}, 0x4050) 10.068750347s ago: executing program 1 (id=927): unshare(0x28000600) unshare(0x10000000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r1, &(0x7f0000000000)=ANY=[@ANYBLOB='b *:4\t', @ANYRESHEX=r1], 0xa) socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/udp6\x00') preadv(r3, &(0x7f0000000340)=[{&(0x7f0000000140)=""/89, 0x59}], 0x1, 0x1f1, 0x1) (async) preadv(r3, &(0x7f0000000340)=[{&(0x7f0000000140)=""/89, 0x59}], 0x1, 0x1f1, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000280)=@filter={'filter\x00', 0xe, 0x4, 0x560, 0xffffffff, 0x208, 0x330, 0x330, 0xffffffff, 0xffffffff, 0x490, 0x490, 0x490, 0xffffffff, 0x4, &(0x7f0000000140), {[{{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0xffffff00, 0xff], [0xff, 0xffffff00, 0xffffffff, 0xff], 'gretap0\x00', 'veth1_vlan\x00', {}, {}, 0x33, 0x3, 0x0, 0x2b}, 0x0, 0x1e0, 0x208, 0x0, {}, [@common=@rt={{0x138}, {0x5, [0x1, 0x6], 0x8, 0x8, 0x6, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast1, @loopback, @private2, @mcast1, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, @empty, @rand_addr=' \x01\x00', @private2, @private2, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, @local, @rand_addr=' \x01\x00', @dev={0xfe, 0x80, '\x00', 0x43}], 0x2}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x1, 0x4, 0x4}, {0x0, 0x1}}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private1={0xfc, 0x1, '\x00', 0x1}, [0x1fffffe00, 0x0, 0xffffff00, 0xffffff00], [0xffffffff, 0xff, 0xff, 0xffffffff], 'ip6tnl0\x00', 'geneve1\x00', {0xff}, {}, 0x2b, 0x6, 0x2, 0x24}, 0x0, 0xf0, 0x128, 0x0, {}, [@common=@hbh={{0x48}, {0x0, 0x7, 0x0, [0x2, 0x7, 0xfff2, 0x8, 0x5, 0x3, 0xeb3, 0x7, 0x9, 0x22d8, 0x5, 0x4, 0x4ac, 0xb, 0x1, 0xc]}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x4, 0x5, 0x2}, {0x6, 0x5, 0x6}, {0x0, 0x6, 0x1}, 0x5, 0xffffffdc}}}, {{@uncond, 0x0, 0x138, 0x160, 0x0, {}, [@common=@srh1={{0x90}, {0x29, 0x3, 0x20, 0x9, 0x5, @remote, @empty, @empty, [0xff, 0xff, 0xff, 0xff], [0xffffff00, 0xffffff00, 0xff000000, 0xff], [0xff000000, 0xff000000, 0xffffffff, 0xffffffff], 0x28e4, 0x10}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5c0) r4 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r2, &(0x7f0000000100)={0xa0000003}) epoll_pwait2(r4, &(0x7f00000001c0)=[{}], 0x1, 0x0, 0x0, 0x0) (async) epoll_pwait2(r4, &(0x7f00000001c0)=[{}], 0x1, 0x0, 0x0, 0x0) epoll_pwait2(r4, &(0x7f0000000200)=[{}], 0x1, 0x0, 0x0, 0x0) (async) epoll_pwait2(r4, &(0x7f0000000200)=[{}], 0x1, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r2, &(0x7f0000000080)={0x8000004}) (async) epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r2, &(0x7f0000000080)={0x8000004}) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r5, 0x2, 0x70bd27, 0x25dfdbff, {}, [@ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0x4}, @ETHTOOL_A_RINGS_TX={0x8, 0x9, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x4048051}, 0x40000) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1005c, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x43) 9.847449258s ago: executing program 4 (id=928): socket$pppoe(0x18, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wlan1\x00'}) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) unshare(0x22020600) r3 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) r5 = openat$cgroup_pressure(r4, &(0x7f0000001840)='cpu.pressure\x00', 0x2, 0x0) io_setup(0x5, &(0x7f0000000480)=0x0) io_submit(r6, 0x1, &(0x7f0000000340)=[&(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, r5, &(0x7f00000004c0)=')', 0x1}]) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ip6_flowlabel\x00') bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0xf, &(0x7f00000002c0)=ANY=[], &(0x7f00000000c0)='GPL\x00', 0x2, 0x8, &(0x7f0000000040)=""/8, 0x41000, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40100002}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1c, 0x4e, 0x0, 0x0, 0x7000, 0x0, 0x0, 0x40f00, 0x61, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9528da7}, 0x94) syz_open_dev$dri(0x0, 0x1, 0x2100) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000080)={0x1, 0x1}) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000140)={0x0, 0x0, 0x75bd, 0x7}) 8.919822694s ago: executing program 4 (id=929): r0 = syz_open_dev$usbmon(&(0x7f0000000140), 0x7, 0x403e111813336660) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x82800, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r2, 0x4010ae68, &(0x7f0000000600)={0xeeee0000, 0x9b000, 0xfffffffe}) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0xf3ed2) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r6, &(0x7f0000000d80)=ANY=[], 0xa6f) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r7 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="17000000"], 0x50) io_uring_enter(r7, 0x2219, 0x7721, 0x33, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="c1f726bd700008000b0004"], 0x34}}, 0x0) read$smackfs_ptrace(r5, &(0x7f0000000180), 0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0xd, &(0x7f0000000080)=ANY=[@ANYBLOB="1802000000000000000000000000000085100000010000009500000000000000180000000001000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000002885000000ae00000095"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0x1b, &(0x7f00000001c0)=""/152, 0x41000, 0xa}, 0x23) 8.776888391s ago: executing program 1 (id=930): r0 = syz_open_dev$usbmon(&(0x7f0000000140), 0x7, 0x403e111813336660) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x82800, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r2, 0x4010ae68, &(0x7f0000000600)={0xeeee0000, 0x9b000, 0xfffffffe}) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0xf3ed2) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r6, &(0x7f0000000d80)=ANY=[], 0xa6f) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r7 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="17000000"], 0x50) io_uring_enter(r7, 0x2219, 0x7721, 0x33, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="c1f726bd700008000b0004"], 0x34}}, 0x0) read$smackfs_ptrace(r5, &(0x7f0000000180), 0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0xd, &(0x7f0000000080)=ANY=[@ANYBLOB="1802000000000000000000000000000085100000010000009500000000000000180000000001000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000002885000000ae00000095"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0x1b, &(0x7f00000001c0)=""/152, 0x41000, 0xa}, 0x23) 8.529143292s ago: executing program 4 (id=931): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000005c0)) socket(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0xc, 0x0, 0x0, 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000180)=ANY=[], &(0x7f0000000600)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000780)=ANY=[@ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="05"], 0x10) recvfrom$inet_nvme(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000002c0)=@l2tp6={0xa, 0x0, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}, 0x1, 0x4}, 0x80) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000002c0)="4a2b5af6b9c8af77a75979705a07", 0xe) fsetxattr$trusted_overlay_upper(r2, &(0x7f0000000280), &(0x7f00000004c0)={0x0, 0xfb, 0x8f, 0x1, 0xc, "ff4a635bc48ac1a11e421e42075c8a9a", "32dfd58f215cfebb8c3448e0a1de828b0be119310c991c8d88177ab470d0de4a33acbc40dffb1e91b399b084c6ee0bc4cc536cd5f98a0c75c3127ba02f7bd52734cb4c09072467a583a43fd418f5ed06900c795b64c8b7876e542e65e6ea4b9378e4176de73cc9a57cd224dbceb099bbcc50ec4874fd3d0c43b7"}, 0x8f, 0x1) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io$cdc_ecm(r4, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write$ath9k_ep1(r4, 0x82, 0xc38, &(0x7f0000000dc0)=ANY=[]) 8.32138169s ago: executing program 1 (id=932): sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004840)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000180)="1d9e1d51fcaf716c0464916150d70a71c5adc7d488940f7c5e1c89ff4c6ba47bd811976cbcfc73506db28dd0e564eab4478c6b0701a67811b14973070af3fbb58fb9961c94a5577715f434ab0224db61429d79317930e5", 0x57}], 0x1}}], 0x1, 0x4004000) r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000480)=ANY=[], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) close_range(r2, 0xffffffffffffffff, 0x2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x4}]}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) close_range(r1, 0xffffffffffffffff, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r4, 0x0, &(0x7f0000000000)={0x1c, &(0x7f0000000240)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r4, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r4, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000500)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io(r4, 0x0, 0x0) r5 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, &(0x7f00000000c0)={'aio_iiro_16\x00', [0x4f27, 0x5, 0x10000, 0x7f, 0x8, 0xfffffbf9, 0x40000007, 0x40080000, 0x800003, 0x100100, 0x5, 0x1, 0x3, 0x56, 0x402, 0x2, 0x8, 0x0, 0x3, 0x40000003, 0x89, 0xffffffff, 0x2, 0x20001e52, 0x400000b, 0xfff, 0x3a, 0x7fffffff, 0x7, 0x2, 0xc6b]}) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0) syz_usb_control_io$uac1(r4, 0x0, 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io$uac1(r4, 0x0, 0x0) 8.111308833s ago: executing program 0 (id=933): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x48) sendmmsg$unix(r1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000030000000000000002400000850000007500000085000000000000"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r3}, 0xc) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f0000006f00)={&(0x7f0000005d80)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000006ec0)={&(0x7f0000006e80)=ANY=[@ANYBLOB="240000000a060102000000000000000007000004080009400000000c2b00094000dfff03"], 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x4) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000075c0)='/proc/sysvipc/shm\x00', 0x0, 0x0) r5 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0) ioctl$FBIOPUT_VSCREENINFO(r5, 0x4601, &(0x7f0000000040)={0x578, 0x258, 0x300, 0x300, 0x32, 0x1, 0x0, 0x0, {0xffffffff, 0x101, 0x1}, {0x0, 0x0, 0x20000000}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe07, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x3}) preadv(r4, &(0x7f0000001500)=[{&(0x7f00000002c0)=""/4084, 0xff4}], 0x1, 0xb8, 0x0) socket(0x22, 0x2, 0x2) 7.205512168s ago: executing program 0 (id=935): r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000540)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x304}, "6ae04425ace3f60c", "acba84f0a6731f234db1cc7f3f382ad796bd667cb12ea99509873931d2873103", "0f9dafb4", "ec3fff9afd96e6c0"}, 0x38) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x50002, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cpuinfo\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x20000023896) writev(r3, &(0x7f0000001c80)=[{&(0x7f0000000580)="af18f53d1ac0931c083f499afbcb394c8decf3a0fd8b70d01a20a1cfbaadee32db97462003d93696fe405301053d27688ccf3254ba47d50038481d9eb445524ab67b508f8733fdcd949d40d3428b32fb2ffefd91053b23bbd6e28734593ee39439142f2bd1b95f738248e03f8d278b2b95ec00bdb8affa47284df2a6d32e879483e94f96769c573f45502e78d4be15d3280d748f9c55c4e122cf0fbba90bbb20808df8ee1812a376c243c9f8ee0c", 0xae}, {&(0x7f00000007c0)="372bac096dbc2abf722bb89c950911bcb7aada166fe35c2bf501840e83b1f6aeb70069afcfdc85f44876082ea51eb92088344fa5be7164fa1615cb5bacea9954fb6c812484648edd5293d8918fa43a5ffa549b539370d765db7d64c1", 0x5c}, {&(0x7f0000000840)="7cf53eb090acf913de8703e715fd2b3efd258890440e4e9bbd2b1e4ba787b356929308015d6c1887545f104e57bab4892b41de9446916af26500affb21cd7da8570e7a043e7cf64d9f1a78a9a65dece4605a29bdb83d5f2e88697b39667a59ed55a9778b35faf4bb1a0ce3bde82f36f6b417a7ba00f7b7544b8a5b25", 0x7c}, {&(0x7f0000000900)="4dd9531105cea238f86d658bb296ed7aa3eafa887d27f06cb10ecbc92b744d8b66405db48ac7de3a9c8e26dea0fb53fae61029700920282945527664fc89d4d98d133c0c3a1766639e0341483fa9da746b3d5d83e945146ac1f8683a3003fee07880fedbf7aa94beba17776c967997338cd720f585a3ce7ad704d96a5fd7a5205289740ec8947ba50d40bcbfa0bacbc47e7275bffd6194458f8f3cba74f9a2b36ca5", 0xa2}, {&(0x7f00000009c0)="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", 0x1000}, {&(0x7f00000019c0)="2cffa3063cae4b4fd6bcf6081c89c58149", 0x11}, {&(0x7f0000001a00)="b03b712009922108f6b3bbc89f3b163152057078e66359802cdab419e2cdf423201b350a8383dfbaf45724474c720fd30ca2c60214b4a41c2b450cd9c1aa76fde1e71f74546b56e940fc8f419a98273ad22305d2ea185facfd9225b4a81b17a92c244c93305aae25984c0afee37e63ea4a79bde70ec52d11efb4eccf56614dd91e80755bf34deed3554643393c8f7be4571c238dca", 0x95}, {&(0x7f0000001ac0)="e98526a3994f89311705a28d11edd463917e91312ce1b21058f696bde5796dc50cf7720c372c6a8a240bceb5cec2ceb157d9055482ef4dd71764d818d5b1bb9f4f53bc89aea9cc83f059c49a5bcdbe55b97a5300e9bf9bc07119634929378e45ce5e87f78322bf5ee6e48cf9882e3f967a1fef545b1031b79e9f7bea759bc24bc9880e44c503ebd22760f7b114194c22d25576503624d0248c113af7d80661a65cef82e3c2b37abfeb39a5e22dbf33ef30", 0xb1}, {&(0x7f0000001b80)="f95f10480022170cef091a3f7856b16b895ac5b8851f096984ae0b1fe1d6d6cb0cf8e9bce8cb1e6253789f9ab370e208472cc396ad4f786c323f989dc91618028e6b611dc5b056f7950507bfa5bc1cc6c643be1415b89f985b404150c5d60c4470aa9a13693a7282f4c1dc1b7346d492a02c46800bc0a12c8e4dcc20926dfac6dceed94cb65f79706be0d25710724fab0c4be9ccede58dffc0c70136fdba5477d0460bca148b715c9b017fec2fad14ab3c3e71804159a1c4409de9b0dea38b7db1ae7141d7a567aff7c786519ed7ca97768193e59f669b347967544a0926768144042e", 0xe3}], 0x9) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0xb5}) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r5, 0xffffffffffffffff, 0x0) 7.07595794s ago: executing program 3 (id=936): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000"], 0x48) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa1780c206050086dd"], 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000400008500000061000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE(0xa, &(0x7f0000000080)={r2, 0xffffffffffffffff, 0x28, 0x0, @val=@iter={&(0x7f0000000000), 0x10}}, 0x20) 6.964212545s ago: executing program 0 (id=937): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, 0x0, 0x0) r1 = socket(0x11, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0xe9, 0x4) sendmsg$netlink(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000000480)=ANY=[@ANYBLOB="020114008cdc18000e3510019f000114600000060600ac141414e0000003808a8972bd0b72e4a139697dd2061fd7fdfe4b88942a31f48597e36e169b1c599db6e466749c2d4c8303a0f7fbda34fb8825f80200e3c0ab42e30a097dbd4be5ffca88faca"], 0xdd12}, {&(0x7f0000000040)=ANY=[@ANYBLOB="100000005efd449064d225376ddbdf2542"], 0x10}], 0x2}, 0x300408c0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) fsopen(0x0, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000005580)=""/102392, 0x18ff8) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0xfffe, 0x8, @mcast2, 0x9}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x10ae) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) 6.928914885s ago: executing program 3 (id=938): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x301, 0x7, 0x0, {0x2}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x0, 0x0, 0xb}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x40855}, 0x8404) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$RTC_SET_TIME(r1, 0x4024700a, &(0x7f0000000100)={0x80010025, 0xb, 0x0, 0x4, 0xa, 0xc61f, 0x2, 0x10, 0xffffffffffffffff}) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) 5.947847977s ago: executing program 3 (id=939): r0 = socket(0x10, 0x80002, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000752200004200000040000008000000", @ANYBLOB='\x00'/15, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x50) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="60000000020601020000000000000000000000f5140007800800124000060000080008400000003712000300686173683a6e65742c706f7274000000050005000a00000005000400000000000900020073797a31000000000500010007"], 0x60}}, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b24, &(0x7f0000000000)={'wlan0\x00'}) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW2(r4, 0x402c542c, &(0x7f0000000080)={0x6b16, 0x3, 0x10001, 0x400e0a, 0x10, "203c5e0000ff765e000080fffffffffffffff2", 0xb, 0x5}) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000040)=0xff) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='comm\x00') r5 = socket(0xa, 0x3, 0x87) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000540)={'bond0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000000)={@dev={0xfe, 0x80, '\x00', 0x2f}, 0x40, r6}) ioctl$sock_inet6_tcp_SIOCINQ(r5, 0x8936, &(0x7f0000000000)) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000000, 0x5d032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3) 5.894153345s ago: executing program 0 (id=940): socket$pppoe(0x18, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wlan1\x00'}) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) unshare(0x22020600) r3 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) r5 = openat$cgroup_pressure(r4, &(0x7f0000001840)='cpu.pressure\x00', 0x2, 0x0) io_setup(0x5, &(0x7f0000000480)=0x0) io_submit(r6, 0x1, &(0x7f0000000340)=[&(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, r5, &(0x7f00000004c0)=')', 0x1}]) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1c, 0x4e, 0x0, 0x0, 0x7000, 0x0, 0x0, 0x40f00, 0x61, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9528da7}, 0x94) syz_open_dev$dri(0x0, 0x1, 0x2100) get_mempolicy(0x0, &(0x7f0000000080), 0xfffffffffffffff5, &(0x7f0000ffa000/0x3000)=nil, 0x6) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.effective_mems\x00', 0x275a, 0x0) fcntl$lock(r7, 0x6, &(0x7f0000000080)={0x1, 0x1}) fcntl$lock(r7, 0x24, &(0x7f0000000140)={0x0, 0x0, 0x75bd, 0x7}) 4.795798656s ago: executing program 2 (id=941): r0 = syz_open_dev$usbmon(&(0x7f0000000140), 0x7, 0x403e111813336660) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x82800, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r2, 0x4010ae68, &(0x7f0000000600)={0xeeee0000, 0x9b000, 0xfffffffe}) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0xf3ed2) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r5, &(0x7f0000000d80)=ANY=[], 0xa6f) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r6 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1700000004"], 0x50) io_uring_enter(r6, 0x2219, 0x7721, 0x33, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(r3, 0x0, 0x0) read$smackfs_ptrace(r4, &(0x7f0000000180), 0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0xd, &(0x7f0000000080)=ANY=[@ANYBLOB="1802000000000000000000000000000085100000010000009500000000000000180000000001000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000002885000000ae00000095"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0x1b, &(0x7f00000001c0)=""/152, 0x41000, 0xa}, 0x23) 3.787364592s ago: executing program 4 (id=942): r0 = socket(0x10, 0x80002, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='\x00'/15, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x50) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="60000000020601020000000000000000000000f5140007800800124000060000080008400000003712000300686173683a6e65742c706f7274000000050005000a00000005000400000000000900020073797a31000000000500010007"], 0x60}}, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b24, &(0x7f0000000000)={'wlan0\x00'}) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW2(r5, 0x402c542c, &(0x7f0000000080)={0x6b16, 0x3, 0x10001, 0x400e0a, 0x10, "203c5e0000ff765e000080fffffffffffffff2", 0xb, 0x5}) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000040)=0xff) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='comm\x00') setxattr$trusted_overlay_upper(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080), &(0x7f0000001fc0)=ANY=[@ANYRES16=r6], 0x1015, 0x2) r7 = socket(0xa, 0x3, 0x87) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000540)={'bond0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r7, 0x8916, &(0x7f0000000000)={@dev={0xfe, 0x80, '\x00', 0x2f}, 0x40, r8}) ioctl$sock_inet6_tcp_SIOCINQ(r7, 0x8936, &(0x7f0000000000)) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000000, 0x5d032, 0xffffffffffffffff, 0x0) 3.587498826s ago: executing program 1 (id=943): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000008200)={0xffffffffffffffff}) fstat(r1, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) sched_setscheduler(0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r2 = socket(0x1, 0x80805, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x25, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, &(0x7f00000000c0), 0x4) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7", 0xf) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@assoc={0x18, 0x117, 0x4, 0x9}], 0x18, 0x4008040}], 0x1, 0x40800) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4400ae8f, &(0x7f0000000140)=@x86={0xf6, 0x5, 0xf, 0x0, 0x499bd9e7, 0x5, 0x2, 0x5, 0x2, 0x8, 0x3f, 0xd, 0x0, 0x9a7, 0x3d4e, 0x1, 0x5, 0x46, 0x1, '\x00', 0xd7, 0xb7}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 3.435013935s ago: executing program 3 (id=944): r0 = socket$kcm(0x2, 0x3, 0x106) (async) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'lo\x00', 0x0}) (async) r3 = socket$can_raw(0x1d, 0x3, 0x1) sendmsg$can_raw(r3, &(0x7f0000000000)={&(0x7f00000000c0)={0x1d, r2}, 0x10, &(0x7f00000003c0)={&(0x7f0000000200)=@can={{0x0, 0x1}, 0xf, 0x0, 0x0, 0x0, "14c7bf8594af4407"}, 0x10}, 0x2, 0x0, 0x0, 0x24000887}, 0x20048041) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000080)={0xa, 0x4e24, 0x6, @ipv4={'\x00', '\xff\xff', @loopback}, 0x4}, 0x1c, 0x0}, 0x4048043) (async) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) (async) r5 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r4, 0x84, 0x71, &(0x7f0000000040)={r6, 0x100}, 0x8) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="140d00001000010000000000000000000000000a70000000060a0b160000000000000000020000084400048018000180080001006f7366000c000280080001400000000428000180080001006e6174001c0002800800014000000000080003400000001408000240000000020900010073797a30000000000900020073797a32000000e0130000001100010000000000000000000000000a"], 0x98}, 0x1, 0x0, 0x0, 0x850}, 0x4040080) (async) r8 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r8, 0x0, 0x2a, &(0x7f0000000600)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) (async) setsockopt$inet_MCAST_MSFILTER(r8, 0x0, 0x30, &(0x7f0000000940)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000002000000e00000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000064010102000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x310) (async) setsockopt$inet_group_source_req(r8, 0x0, 0x2f, &(0x7f00000004c0)={0x2, {{0x2, 0x3, @multicast2}}, {{0x2, 0x4e22, @remote}}}, 0x108) (async) sendmsg$inet(r0, &(0x7f0000000040)={&(0x7f0000000380)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000080)="fbd2b9ed", 0x4}], 0x1}, 0x0) 3.298516543s ago: executing program 2 (id=945): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x48) sendmmsg$unix(r1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000030000000000000002400000850000007500000085000000000000"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r3}, 0xc) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f0000006f00)={&(0x7f0000005d80)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000006ec0)={&(0x7f0000006e80)=ANY=[@ANYBLOB="240000000a060102000000000000000007000004080009400000000c2b00094000dfff03"], 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x4) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000075c0)='/proc/sysvipc/shm\x00', 0x0, 0x0) r5 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0) ioctl$FBIOPUT_VSCREENINFO(r5, 0x4601, &(0x7f0000000040)={0x578, 0x258, 0x300, 0x300, 0x32, 0x1, 0x0, 0x0, {0xffffffff, 0x101, 0x1}, {0x0, 0x0, 0x20000000}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe07, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x3}) preadv(r4, &(0x7f0000001500)=[{&(0x7f00000002c0)=""/4084, 0xff4}], 0x1, 0xb8, 0x0) socket(0x22, 0x2, 0x2) 2.457161973s ago: executing program 4 (id=946): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xb007}, 0x4) r1 = socket(0x11, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r1, 0x0, 0x0) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0xe9, 0x4) sendmsg$netlink(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000000480)=ANY=[@ANYBLOB="020114008cdc18000e3510019f000114600000060600ac141414e0000003808a8972bd0b72e4a139697dd2061fd7fdfe4b88942a31f48597e36e169b1c599db6e466749c2d4c8303a0f7fbda34fb8825f80200e3c0ab42e30a097dbd4be5ffca88faca"], 0xdd12}, {&(0x7f0000000040)=ANY=[@ANYBLOB="100000005efd449064d225376ddbdf25424f41a1f14fead15361ac0df898eca9c7ea"], 0x10}], 0x2}, 0x300408c0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) fsopen(0x0, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000005580)=""/102392, 0x18ff8) accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x80000) r5 = socket$netlink(0x10, 0x3, 0x4) writev(r5, &(0x7f0000000200)=[{0x0}], 0x1) r6 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r6, &(0x7f0000000000)={0xa, 0xfffe, 0x8, @mcast2, 0x9}, 0x1c) sendmmsg$inet6(r6, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) fcntl$setpipe(r7, 0x407, 0x10ae) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1e00000000080000030000000a00000010280000", @ANYRES32, @ANYBLOB="68944fa08500ed4511864603b81d5efe4b71ea7f0000000000", @ANYRES32=r3, @ANYRES32=r7, @ANYBLOB="0500000003000000020000000500"/28], 0x50) r8 = openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) write$cgroup_pid(r8, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 2.353381672s ago: executing program 0 (id=947): r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000540)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x304}, "6ae04425ace3f60c", "acba84f0a6731f234db1cc7f3f382ad796bd667cb12ea99509873931d2873103", "0f9dafb4", "ec3fff9afd96e6c0"}, 0x38) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x50002, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cpuinfo\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x20000023896) writev(r3, &(0x7f0000001c80)=[{&(0x7f0000000580)="af18f53d1ac0931c083f499afbcb394c8decf3a0fd8b70d01a20a1cfbaadee32db97462003d93696fe405301053d27688ccf3254ba47d50038481d9eb445524ab67b508f8733fdcd949d40d3428b32fb2ffefd91053b23bbd6e28734593ee39439142f2bd1b95f738248e03f8d278b2b95ec00bdb8affa47284df2a6d32e879483e94f96769c573f45502e78d4be15d3280d748f9c55c4e122cf0fbba90bbb20808df8ee1812a376c243c9f8ee0c", 0xae}, {&(0x7f00000007c0)="372bac096dbc2abf722bb89c950911bcb7aada166fe35c2bf501840e83b1f6aeb70069afcfdc85f44876082ea51eb92088344fa5be7164fa1615cb5bacea9954fb6c812484648edd5293d8918fa43a5ffa549b539370d765db7d64c1", 0x5c}, {&(0x7f0000000840)="7cf53eb090acf913de8703e715fd2b3efd258890440e4e9bbd2b1e4ba787b356929308015d6c1887545f104e57bab4892b41de9446916af26500affb21cd7da8570e7a043e7cf64d9f1a78a9a65dece4605a29bdb83d5f2e88697b39667a59ed55a9778b35faf4bb1a0ce3bde82f36f6b417a7ba00f7b7544b8a5b25", 0x7c}, {&(0x7f0000000900)="4dd9531105cea238f86d658bb296ed7aa3eafa887d27f06cb10ecbc92b744d8b66405db48ac7de3a9c8e26dea0fb53fae61029700920282945527664fc89d4d98d133c0c3a1766639e0341483fa9da746b3d5d83e945146ac1f8683a3003fee07880fedbf7aa94beba17776c967997338cd720f585a3ce7ad704d96a5fd7a5205289740ec8947ba50d40bcbfa0bacbc47e7275bffd6194458f8f3cba74f9a2b36ca5", 0xa2}, {&(0x7f00000009c0)="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", 0x1000}, {&(0x7f00000019c0)="2cffa3063cae4b4fd6bcf6081c89c58149", 0x11}, {&(0x7f0000001a00)="b03b712009922108f6b3bbc89f3b163152057078e66359802cdab419e2cdf423201b350a8383dfbaf45724474c720fd30ca2c60214b4a41c2b450cd9c1aa76fde1e71f74546b56e940fc8f419a98273ad22305d2ea185facfd9225b4a81b17a92c244c93305aae25984c0afee37e63ea4a79bde70ec52d11efb4eccf56614dd91e80755bf34deed3554643393c8f7be4571c238dca", 0x95}, {&(0x7f0000001ac0)="e98526a3994f89311705a28d11edd463917e91312ce1b21058f696bde5796dc50cf7720c372c6a8a240bceb5cec2ceb157d9055482ef4dd71764d818d5b1bb9f4f53bc89aea9cc83f059c49a5bcdbe55b97a5300e9bf9bc07119634929378e45ce5e87f78322bf5ee6e48cf9882e3f967a1fef545b1031b79e9f7bea759bc24bc9880e44c503ebd22760f7b114194c22d25576503624d0248c113af7d80661a65cef82e3c2b37abfeb39a5e22dbf33ef30", 0xb1}, {&(0x7f0000001b80)="f95f10480022170cef091a3f7856b16b895ac5b8851f096984ae0b1fe1d6d6cb0cf8e9bce8cb1e6253789f9ab370e208472cc396ad4f786c323f989dc91618028e6b611dc5b056f7950507bfa5bc1cc6c643be1415b89f985b404150c5d60c4470aa9a13693a7282f4c1dc1b7346d492a02c46800bc0a12c8e4dcc20926dfac6dceed94cb65f79706be0d25710724fab0c4be9ccede58dffc0c70136fdba5477d0460bca148b715c9b017fec2fad14ab3c3e71804159a1c4409de9b0dea38b7db1ae7141d7a567aff7c786519ed7ca97768193e59f669b347967544a0926768144042e", 0xe3}], 0x9) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0xb5}) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r4, 0xffffffffffffffff, 0x0) 2.240410002s ago: executing program 2 (id=948): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000"], 0x48) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa1780c206050086dd"], 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000400008500000061000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE(0xa, &(0x7f0000000080)={r2, 0xffffffffffffffff, 0x28, 0x0, @val=@iter={&(0x7f0000000000), 0x10}}, 0x20) 2.111944684s ago: executing program 3 (id=949): r0 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x0) ioctl$FE_GET_PROPERTY(r0, 0x80106f53, &(0x7f0000000380)={0x5, 0x0}) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r1, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendto$inet6(r1, &(0x7f0000000400)="cd", 0x1, 0x8010, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback, 0xfffffffe}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f0000000440)=ANY=[@ANYRES32=0x0, @ANYBLOB], 0x9) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f00000001c0)={0x0, 0x6}, 0x8) r2 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000b40)=@newqdisc={0x45c, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r4, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x6, 0x0, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_RTAB={0x404, 0x2, [0x200, 0x9, 0x8, 0x40000000, 0x5, 0x4, 0x4, 0x4, 0x8805, 0x3, 0x1, 0x2, 0x4, 0xffffffff, 0x100, 0x3, 0x9, 0x1, 0x2, 0x442e, 0xfffffffa, 0x4, 0x6, 0x1, 0x9, 0x5cb, 0xfffffff7, 0x401, 0x8, 0x6, 0x7, 0xb, 0xb5, 0x80, 0x5, 0x4, 0xf7, 0x8, 0x4, 0x7, 0x0, 0x3, 0x3, 0xffff, 0x1ff, 0x101, 0x0, 0x2, 0x0, 0x6, 0x9, 0x1, 0x7, 0x10001, 0x40, 0x101, 0x8, 0xa, 0xfffffffa, 0xfffffff9, 0x6, 0xffffffff, 0x8, 0x4, 0x5, 0x9, 0xfffffff6, 0xfffffff7, 0x0, 0x4, 0x7, 0x1a6e, 0x3, 0x5, 0xd5d, 0x8, 0x3, 0x1e8, 0xf, 0x8f4, 0x4, 0xa2e4, 0x81, 0x9, 0x2, 0x8, 0x0, 0x9, 0x54a5, 0x6, 0x2, 0x800, 0xfff, 0xffffff7f, 0xf6, 0x4, 0x400, 0x7, 0xe9, 0x401, 0x6, 0x4, 0x3, 0x8, 0x0, 0x1, 0x1, 0x533, 0x0, 0x4, 0x68e, 0x0, 0x8, 0x7, 0x8, 0xfffffffc, 0x945d, 0x0, 0x1000, 0xffff, 0x6, 0x0, 0x6, 0x6, 0x3, 0xfffffffe, 0x2, 0x3, 0x0, 0x2cfc, 0x218, 0xb6, 0x9, 0x2, 0x7, 0x185f, 0x4, 0xf, 0x3, 0x9, 0x5, 0x0, 0xc487, 0x8, 0x57, 0xae, 0xff, 0x855a, 0x8, 0x0, 0x800, 0x11, 0x5, 0xd, 0x7, 0x7ff, 0xa96, 0xd, 0x6, 0x4, 0xea9, 0x9, 0x8, 0x6, 0x1, 0x4, 0x1, 0x7, 0x6, 0x0, 0x810, 0x0, 0x2, 0x8, 0xfe8, 0x3, 0x6, 0x9, 0xfffffffa, 0xd85, 0x0, 0x7f, 0x6d, 0x9, 0x2, 0x80000000, 0x9, 0x5607, 0x59, 0x36, 0x7, 0x0, 0xfffff7b1, 0x80000000, 0x9, 0x2, 0x7, 0xc78e, 0x6, 0x10001, 0x8, 0x0, 0x8, 0xe67f, 0x401, 0x8, 0xa, 0x7c, 0x4, 0x5, 0x1, 0x8000, 0x6, 0xffff, 0x20, 0x3, 0x4260, 0x4, 0x0, 0x80000001, 0x1, 0x9, 0x9, 0x7, 0x100, 0x3, 0x9, 0x314, 0x200, 0x3, 0x8, 0x6, 0x3, 0xc, 0x7fff, 0x0, 0x2, 0x7fffffff, 0x2, 0x5, 0xa, 0x1, 0x7, 0xc, 0xfb87, 0x6, 0x1, 0x18, 0x4, 0x8a, 0x1, 0x800, 0x1f85, 0xfb, 0xa, 0x23]}]}}]}, 0x45c}}, 0x44080) 1.645475801s ago: executing program 1 (id=950): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, 0x0, 0x0) r1 = socket(0x11, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0xe9, 0x4) sendmsg$netlink(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000000480)=ANY=[@ANYBLOB="020114008cdc18000e3510019f000114600000060600ac141414e0000003808a8972bd0b72e4a139697dd2061fd7fdfe4b88942a31f48597e36e169b1c599db6e466749c2d4c8303a0f7fbda34fb8825f80200e3c0ab42e30a097dbd4be5ffca88faca"], 0xdd12}, {&(0x7f0000000040)=ANY=[@ANYBLOB="100000005efd449064"], 0x10}], 0x2}, 0x300408c0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) fsopen(0x0, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000005580)=""/102392, 0x18ff8) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0xfffe, 0x8, @mcast2, 0x9}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x10ae) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) 1.623654621s ago: executing program 2 (id=951): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x20000004, &(0x7f0000000040)={0xffffffffffffffff}, 0x2, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000280)=0x1, r1, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x10, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x2}, {0xa, 0x4e23, 0x7, @remote, 0x3}, r1, 0x7}}, 0x48) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$kcm(0x2d, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000005580)=""/102392, 0x18ff8) socket$inet_mptcp(0x2, 0x1, 0x106) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000300)={0xa, 0x3, 0x8, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_256={{0x304}, "41328ac33100", "e8582491a0c4050000000000f6542a9b6800000000000000003967d2daa45b4e", "61241765", "89b06aff130000fd"}, 0x38) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r4, 0x541b, &(0x7f00000000c0)={r4, 0x0, 0x4, 0x8040000000000000}) close_range(r5, 0xffffffffffffffff, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xe) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x200, 0x0) close(0x3) ioctl$PPPIOCSFLAGS1(r6, 0x4020744f, 0x0) 1.064215036s ago: executing program 0 (id=952): r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x410100, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x100000011) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) io_uring_register$IORING_REGISTER_PBUF_RING(0xffffffffffffffff, 0x22, &(0x7f0000000380)={&(0x7f0000002000)={[{0x0, 0x0, 0x103}]}, 0x1, 0x1}, 0x1) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/image_size', 0x80042, 0x110) write$P9_RREAD(r0, &(0x7f0000000500)=ANY=[@ANYBLOB="0b000000000075010000000000667ef15b97b12e4a9bfd8277b1353eed51c56e35e4d5b3419ea793c3f68733367b8d0a4bc5701b5afdb56a606452634809f2d2972a6362a737db1c2a61e7ea58cb76ea29b115d13f8b37d5c50b3f1aa7dd140f1c271760c6f836bc54fd80d0999164e6e21e026e68"], 0xb) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x0, 0x412500) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r2, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000011) sendmsg$kcm(r2, &(0x7f0000000340)={&(0x7f0000000000)=@in6={0xa, 0xfffe, 0x3, @ipv4={'\x00', '\xff\xff', @remote}, 0x2}, 0x80, 0x0}, 0xe07e872420dfefca) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003580)=ANY=[@ANYBLOB="20000000240000012ebd7000fbdbdf25027c00000cb9fd72c3"], 0x20}, 0x1, 0x0, 0x0, 0x4048011}, 0x8010) socket$inet_icmp(0x2, 0x2, 0x1) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x8040044}, 0x810) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r4, 0x0, 0x0) listen(r4, 0x8000) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='tmpfs\x00', 0x0, &(0x7f00000001c0)='grpquota') r5 = creat(&(0x7f0000000440)='./file0/file0\x00', 0x188) quotactl_fd$Q_SETINFO(r5, 0xffffffff80000601, 0x0, &(0x7f0000000300)={0x5, 0x2, 0x1, 0x1}) sendmsg$RDMA_NLDEV_CMD_DELLINK(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000015c0)=ANY=[@ANYBLOB="18000000041401002dbd7000fedbdf250800010000000000ba30b28e994c1a08786eb807e0000000000000000000009fe70ba83a7a66e67a0bae5cfaccbbb81e28", @ANYRESHEX], 0x18}, 0x1, 0x0, 0x0, 0x1000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0xffffffffffffff2e, 0x0, 0x1, 0x0, 0x0, 0x4849}, 0x810) 414.233823ms ago: executing program 3 (id=953): socket$tipc(0x1e, 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0x8e44, 0x1f400, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, 0x0, 0x50) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 152.04759ms ago: executing program 1 (id=954): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x16, &(0x7f00000000c0)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @initr0, @exit, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x94) 105.560771ms ago: executing program 2 (id=955): r0 = syz_open_dev$usbmon(&(0x7f0000000140), 0x7, 0x403e111813336660) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x82800, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r2, 0x4010ae68, &(0x7f0000000600)={0xeeee0000, 0x9b000, 0xfffffffe}) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0xf3ed2) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r5, &(0x7f0000000d80)=ANY=[], 0xa6f) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r6 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1700000004"], 0x50) io_uring_enter(r6, 0x2219, 0x7721, 0x33, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(r3, 0x0, 0x0) read$smackfs_ptrace(r4, &(0x7f0000000180), 0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0xd, &(0x7f0000000080)=ANY=[@ANYBLOB="1802000000000000000000000000000085100000010000009500000000000000180000000001000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000002885000000ae00000095"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0x1b, &(0x7f00000001c0)=""/152, 0x41000, 0xa}, 0x23) 0s ago: executing program 4 (id=956): recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xb, 0x13, r1, 0x2000) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000004882, 0x0) io_setup(0x1, &(0x7f00000004c0)=0x0) write$cgroup_pressure(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) r7 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r7, 0x89e2, &(0x7f0000000180)={0xffffffffffffffff}) close(r7) ioctl$sock_kcm_SIOCKCMCLONE(r8, 0x89e2, &(0x7f0000000500)) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) io_submit(r3, 0x1, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0x7, 0x1, 0x0, r2, 0x0, 0x0, 0x1000000, 0x0, 0x10}]) kernel console output (not intermixed with test programs): ending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 319.557005][ T7873] lowmem_reserve[]: 0 0 0 0 0 [ 319.557038][ T7873] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 319.557129][ T7873] Node 0 DMA32: 1507*4kB (UM) 1304*8kB (UM) 400*16kB (UM) 625*32kB (UME) 337*64kB (UME) 161*128kB (UME) 110*256kB (UME) 34*512kB (UM) 22*1024kB (UME) 5*2048kB (UM) 269*4096kB (UM) = 1265196kB [ 319.557268][ T7873] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 319.557378][ T7873] Node 1 Normal: 3*4kB (UM) 4*8kB (UM) 8*16kB (UM) 8*32kB (UM) 7*64kB (UM) 2*128kB (UM) 2*256kB (M) 3*512kB (UM) 2*1024kB (UM) 0*2048kB 961*4096kB (M) = 3941484kB [ 319.557507][ T7873] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 319.557525][ T7873] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 319.557541][ T7873] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 319.557556][ T7873] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 319.557573][ T7873] 56985 total pagecache pages [ 319.557581][ T7873] 0 pages in swap cache [ 319.557587][ T7873] Free swap = 124996kB [ 319.557595][ T7873] Total swap = 124996kB [ 319.557603][ T7873] 2097051 pages RAM [ 319.557610][ T7873] 0 pages HighMem/MovableOnly [ 319.557616][ T7873] 423731 pages reserved [ 319.557623][ T7873] 0 pages cma reserved [ 319.720978][ T809] playstation 0003:054C:0DF2.0006: item fetching failed at offset 3/5 [ 319.721795][ T809] playstation 0003:054C:0DF2.0006: Parse failed [ 319.721863][ T809] playstation 0003:054C:0DF2.0006: probe with driver playstation failed with error -22 [ 319.728837][ C0] raw-gadget.1 gadget.0: ignoring, device is not running [ 319.735541][ C0] raw-gadget.1 gadget.0: ignoring, device is not running [ 319.741088][ T1250] usbhid 1-1:0.0: can't add hid device: -71 [ 319.741220][ T1250] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 319.784250][ T1250] usb 1-1: USB disconnect, device number 34 [ 319.831528][ T5878] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 320.005376][ T1250] usb 3-1: USB disconnect, device number 39 [ 320.168037][ T5878] usb 5-1: Using ep0 maxpacket: 16 [ 320.187670][ T5878] usb 5-1: config 251 has an invalid interface number: 202 but max is 0 [ 320.187699][ T5878] usb 5-1: config 251 has no interface number 0 [ 320.187731][ T5878] usb 5-1: config 251 interface 202 altsetting 1 bulk endpoint 0x1 has invalid maxpacket 16 [ 320.187746][ T5878] usb 5-1: config 251 interface 202 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 320.187759][ T5878] usb 5-1: config 251 interface 202 altsetting 1 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 320.187775][ T5878] usb 5-1: config 251 interface 202 altsetting 1 has an endpoint descriptor with address 0xC1, changing to 0x81 [ 320.187789][ T5878] usb 5-1: config 251 interface 202 altsetting 1 bulk endpoint 0x81 has invalid maxpacket 25 [ 320.187802][ T5878] usb 5-1: config 251 interface 202 altsetting 1 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 320.187818][ T5878] usb 5-1: config 251 interface 202 has no altsetting 0 [ 320.260059][ T5878] usb 5-1: New USB device found, idVendor=0572, idProduct=cb00, bcdDevice=bb.c9 [ 320.260081][ T5878] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 320.260093][ T5878] usb 5-1: Product: syz [ 320.260102][ T5878] usb 5-1: Manufacturer: syz [ 320.260110][ T5878] usb 5-1: SerialNumber: syz [ 321.250296][ T7870] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 321.250626][ T7870] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 321.570534][ T7870] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 321.571532][ T7870] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 321.669155][ T7887] tipc: Can't bind to reserved service type 1 [ 323.202422][ T5878] cxacru_cm: 7 callbacks suppressed [ 323.202442][ T5878] cxacru 5-1:251.202: send of cm 0x90 failed (-71) [ 323.202461][ T5878] cxacru 5-1:251.202: usbatm_usb_probe: invalid endpoint 02! [ 323.202752][ T5878] cxacru 5-1:251.202: probe with driver cxacru failed with error -22 [ 323.271757][ T5878] usb 5-1: USB disconnect, device number 25 [ 325.246281][ T7915] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 325.483079][ T7920] faux_driver vgem: [drm] Unknown color mode 181; guessing buffer size. [ 325.568084][ T858] usb 1-1: new full-speed USB device number 35 using dummy_hcd [ 325.724589][ T858] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 325.724626][ T858] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 325.724643][ T858] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 325.724658][ T858] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 325.724671][ T858] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 325.737910][ T858] usb 1-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 325.738128][ T858] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 325.738149][ T858] usb 1-1: Product: syz [ 325.738162][ T858] usb 1-1: Manufacturer: syz [ 325.738176][ T858] usb 1-1: SerialNumber: syz [ 325.761967][ T858] usb 1-1: config 0 descriptor?? [ 326.478928][ T858] radio-si470x 1-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 326.478959][ T858] radio-si470x 1-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 326.672484][ T858] radio-si470x 1-1:0.0: software version 0, hardware version 0 [ 326.672504][ T858] radio-si470x 1-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0. [ 326.672515][ T858] radio-si470x 1-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 327.074262][ T858] radio-si470x 1-1:0.0: submitting int urb failed (-90) [ 327.578383][ T858] radio-si470x 1-1:0.0: si470x_set_report: usb_control_msg returned -110 [ 327.578783][ T858] radio-si470x 1-1:0.0: probe with driver radio-si470x failed with error -22 [ 329.072558][ T858] usb 1-1: USB disconnect, device number 35 [ 329.862773][ T7961] FAULT_INJECTION: forcing a failure. [ 329.862773][ T7961] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 329.862799][ T7961] CPU: 0 UID: 0 PID: 7961 Comm: syz.1.600 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 329.862814][ T7961] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 329.862821][ T7961] Call Trace: [ 329.862826][ T7961] [ 329.862832][ T7961] dump_stack_lvl+0xe8/0x150 [ 329.862854][ T7961] should_fail_ex+0x46b/0x600 [ 329.862874][ T7961] prepare_alloc_pages+0x22a/0x6b0 [ 329.862894][ T7961] __alloc_frozen_pages_noprof+0x12f/0x380 [ 329.862910][ T7961] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 329.862926][ T7961] ? __pfx_policy_nodemask+0x10/0x10 [ 329.862941][ T7961] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 329.862959][ T7961] alloc_pages_bulk_noprof+0x5f1/0x7d0 [ 329.862975][ T7961] ? alloc_pages_noprof+0xe3/0x1e0 [ 329.862991][ T7961] __kasan_populate_vmalloc+0xc1/0x1d0 [ 329.863008][ T7961] ? rt_spin_unlock+0x160/0x200 [ 329.863028][ T7961] alloc_vmap_area+0xd73/0x14b0 [ 329.863054][ T7961] ? __pfx_alloc_vmap_area+0x10/0x10 [ 329.863072][ T7961] ? __kmalloc_cache_node_noprof+0x27d/0x6c0 [ 329.863085][ T7961] ? __get_vm_area_node+0x171/0x350 [ 329.863102][ T7961] ? bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 329.863120][ T7961] __get_vm_area_node+0x226/0x350 [ 329.863142][ T7961] __vmalloc_node_range_noprof+0x372/0x1730 [ 329.863161][ T7961] ? bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 329.863194][ T7961] ? __lock_acquire+0x6b5/0x2cf0 [ 329.863211][ T7961] ? kernel_text_address+0xa5/0xe0 [ 329.863228][ T7961] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 329.863247][ T7961] ? arch_stack_walk+0xfb/0x150 [ 329.863266][ T7961] ? bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 329.863281][ T7961] __vmalloc_noprof+0xd2/0x120 [ 329.863299][ T7961] ? bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 329.863316][ T7961] bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 329.863335][ T7961] bpf_prog_alloc+0x3c/0x1a0 [ 329.863352][ T7961] bpf_prog_load+0x7ba/0x1ae0 [ 329.863376][ T7961] ? __pfx_bpf_prog_load+0x10/0x10 [ 329.863404][ T7961] ? bpf_lsm_bpf+0x9/0x20 [ 329.863417][ T7961] ? security_bpf+0x7e/0x2d0 [ 329.863436][ T7961] __sys_bpf+0x618/0x950 [ 329.863452][ T7961] ? __pfx___sys_bpf+0x10/0x10 [ 329.863466][ T7961] ? rt_mutex_slowunlock+0x1cb/0x300 [ 329.863493][ T7961] ? ksys_write+0x248/0x270 [ 329.863513][ T7961] ? __pfx_ksys_write+0x10/0x10 [ 329.863530][ T7961] ? __se_sys_memfd_create+0x2c2/0x420 [ 329.863553][ T7961] __x64_sys_bpf+0x7c/0x90 [ 329.863567][ T7961] do_syscall_64+0x14d/0xf80 [ 329.863581][ T7961] ? trace_irq_disable+0x3b/0x150 [ 329.863595][ T7961] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 329.863608][ T7961] ? clear_bhb_loop+0x40/0x90 [ 329.863622][ T7961] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 329.863634][ T7961] RIP: 0033:0x7f4dea3fc819 [ 329.863647][ T7961] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 329.863658][ T7961] RSP: 002b:00007f4de864e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 329.863673][ T7961] RAX: ffffffffffffffda RBX: 00007f4dea675fa0 RCX: 00007f4dea3fc819 [ 329.863682][ T7961] RDX: 0000000000000094 RSI: 00002000000006c0 RDI: 0000000000000005 [ 329.863690][ T7961] RBP: 00007f4de864e090 R08: 0000000000000000 R09: 0000000000000000 [ 329.863697][ T7961] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 329.863705][ T7961] R13: 00007f4dea676038 R14: 00007f4dea675fa0 R15: 00007ffd2543f988 [ 329.863723][ T7961] [ 329.863765][ T7961] syz.1.600: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 329.863807][ T7961] CPU: 0 UID: 0 PID: 7961 Comm: syz.1.600 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 329.863820][ T7961] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 329.863827][ T7961] Call Trace: [ 329.863831][ T7961] [ 329.863836][ T7961] dump_stack_lvl+0xe8/0x150 [ 329.863854][ T7961] warn_alloc+0x263/0x3e0 [ 329.863868][ T7961] ? kasan_quarantine_put+0xbb/0x1f0 [ 329.863887][ T7961] ? __pfx_warn_alloc+0x10/0x10 [ 329.863900][ T7961] ? __get_vm_area_node+0x23f/0x350 [ 329.863917][ T7961] ? __get_vm_area_node+0x171/0x350 [ 329.863934][ T7961] ? bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 329.863951][ T7961] ? __get_vm_area_node+0x23f/0x350 [ 329.863971][ T7961] __vmalloc_node_range_noprof+0x397/0x1730 [ 329.863998][ T7961] ? __lock_acquire+0x6b5/0x2cf0 [ 329.864014][ T7961] ? kernel_text_address+0xa5/0xe0 [ 329.864030][ T7961] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 329.864048][ T7961] ? arch_stack_walk+0xfb/0x150 [ 329.864067][ T7961] ? bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 329.864082][ T7961] __vmalloc_noprof+0xd2/0x120 [ 329.864100][ T7961] ? bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 329.864117][ T7961] bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 329.864136][ T7961] bpf_prog_alloc+0x3c/0x1a0 [ 329.864153][ T7961] bpf_prog_load+0x7ba/0x1ae0 [ 329.864184][ T7961] ? __pfx_bpf_prog_load+0x10/0x10 [ 329.864211][ T7961] ? bpf_lsm_bpf+0x9/0x20 [ 329.864223][ T7961] ? security_bpf+0x7e/0x2d0 [ 329.864238][ T7961] __sys_bpf+0x618/0x950 [ 329.864254][ T7961] ? __pfx___sys_bpf+0x10/0x10 [ 329.864268][ T7961] ? rt_mutex_slowunlock+0x1cb/0x300 [ 329.864294][ T7961] ? ksys_write+0x248/0x270 [ 329.864313][ T7961] ? __pfx_ksys_write+0x10/0x10 [ 329.864330][ T7961] ? __se_sys_memfd_create+0x2c2/0x420 [ 329.864350][ T7961] __x64_sys_bpf+0x7c/0x90 [ 329.864364][ T7961] do_syscall_64+0x14d/0xf80 [ 329.864377][ T7961] ? trace_irq_disable+0x3b/0x150 [ 329.864391][ T7961] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 329.864403][ T7961] ? clear_bhb_loop+0x40/0x90 [ 329.864417][ T7961] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 329.864431][ T7961] RIP: 0033:0x7f4dea3fc819 [ 329.864442][ T7961] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 329.864452][ T7961] RSP: 002b:00007f4de864e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 329.864463][ T7961] RAX: ffffffffffffffda RBX: 00007f4dea675fa0 RCX: 00007f4dea3fc819 [ 329.864471][ T7961] RDX: 0000000000000094 RSI: 00002000000006c0 RDI: 0000000000000005 [ 329.864479][ T7961] RBP: 00007f4de864e090 R08: 0000000000000000 R09: 0000000000000000 [ 329.864486][ T7961] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 329.864493][ T7961] R13: 00007f4dea676038 R14: 00007f4dea675fa0 R15: 00007ffd2543f988 [ 329.864511][ T7961] [ 329.864516][ T7961] Mem-Info: [ 329.864522][ T7961] active_anon:254 inactive_anon:7061 isolated_anon:0 [ 329.864522][ T7961] active_file:13607 inactive_file:41899 isolated_file:0 [ 329.864522][ T7961] unevictable:768 dirty:205 writeback:0 [ 329.864522][ T7961] slab_reclaimable:11698 slab_unreclaimable:100668 [ 329.864522][ T7961] mapped:30519 shmem:1849 pagetables:1251 [ 329.864522][ T7961] sec_pagetables:0 bounce:0 [ 329.864522][ T7961] kernel_misc_reclaimable:0 [ 329.864522][ T7961] free:1307123 free_pcp:4355 free_cma:0 [ 329.864553][ T7961] Node 0 active_anon:1016kB inactive_anon:28244kB active_file:54228kB inactive_file:167596kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:122076kB dirty:820kB writeback:0kB shmem:5860kB kernel_stack:13200kB pagetables:4888kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 329.864579][ T7961] Node 1 active_anon:0kB inactive_anon:0kB active_file:200kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB kernel_stack:32kB pagetables:116kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 329.864604][ T7961] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 329.864637][ T7961] lowmem_reserve[]: 0 2506 2506 2506 2506 [ 329.864658][ T7961] Node 0 DMA32 free:1271648kB boost:0kB min:3932kB low:6468kB high:9004kB reserved_highatomic:0KB free_highatomic:0KB active_anon:1016kB inactive_anon:28244kB active_file:54228kB inactive_file:167596kB unevictable:1536kB writepending:820kB zspages:0kB present:3129332kB managed:2566408kB mlocked:0kB bounce:0kB free_pcp:17420kB local_pcp:11732kB free_cma:0kB [ 329.864693][ T7961] lowmem_reserve[]: 0 0 0 0 0 [ 329.864712][ T7961] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:412kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 329.864743][ T7961] lowmem_reserve[]: 0 0 0 0 0 [ 329.864762][ T7961] Node 1 Normal free:3941484kB boost:0kB min:6364kB low:10472kB high:14580kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:200kB inactive_file:0kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 329.864796][ T7961] lowmem_reserve[]: 0 0 0 0 0 [ 329.864815][ T7961] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 329.864884][ T7961] Node 0 DMA32: 1785*4kB (UM) 1405*8kB (UME) 348*16kB (UME) 689*32kB (UME) 334*64kB (UME) 171*128kB (UME) 113*256kB (UME) 37*512kB (UM) 22*1024kB (UME) 5*2048kB (UM) 269*4096kB (UM) = 1271724kB [ 329.864980][ T7961] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 329.865037][ T7961] Node 1 Normal: 3*4kB (UM) 4*8kB (UM) 8*16kB (UM) 8*32kB (UM) 7*64kB (UM) 2*128kB (UM) 2*256kB (M) 3*512kB (UM) 2*1024kB (UM) 0*2048kB 961*4096kB (M) = 3941484kB [ 329.865124][ T7961] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 329.865134][ T7961] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 329.865143][ T7961] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 329.865152][ T7961] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 329.865161][ T7961] 57351 total pagecache pages [ 329.865166][ T7961] 0 pages in swap cache [ 329.865170][ T7961] Free swap = 124996kB [ 329.865183][ T7961] Total swap = 124996kB [ 329.865187][ T7961] 2097051 pages RAM [ 329.865192][ T7961] 0 pages HighMem/MovableOnly [ 329.865196][ T7961] 423731 pages reserved [ 329.865200][ T7961] 0 pages cma reserved [ 331.036583][ T7973] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 331.098430][ T5863] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 331.250809][ T5863] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 331.250846][ T5863] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 331.250887][ T5863] usb 1-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 331.250912][ T5863] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 332.233053][ T5863] usb 1-1: config 0 descriptor?? [ 332.234359][ T7983] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 332.458070][ T5932] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 332.608473][ T5932] usb 5-1: Using ep0 maxpacket: 16 [ 332.611107][ T5932] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 332.611168][ T5932] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 332.617794][ T5932] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 332.617829][ T5932] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 332.617852][ T5932] usb 5-1: Manufacturer: syz [ 332.690256][ T5932] usb 5-1: config 0 descriptor?? [ 333.830449][ T5863] playstation 0003:054C:0DF2.0007: item fetching failed at offset 3/5 [ 333.830937][ T5863] playstation 0003:054C:0DF2.0007: Parse failed [ 333.830979][ T5863] playstation 0003:054C:0DF2.0007: probe with driver playstation failed with error -22 [ 333.909929][ T5863] usb 1-1: USB disconnect, device number 36 [ 334.150729][ T8004] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 334.238117][ T858] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 334.398100][ T858] usb 4-1: Using ep0 maxpacket: 16 [ 334.400514][ T858] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 334.400575][ T858] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 334.400593][ T858] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 334.400606][ T858] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 334.400683][ T858] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 334.401939][ T858] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 334.401967][ T858] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 334.401989][ T858] usb 4-1: Manufacturer: syz [ 334.406130][ T858] usb 4-1: config 0 descriptor?? [ 334.408285][ T5863] usb 2-1: new full-speed USB device number 20 using dummy_hcd [ 335.489693][ T1250] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 335.562560][ T5863] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 335.562618][ T5863] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 335.562646][ T5863] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 335.562673][ T5863] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 335.562695][ T5863] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 335.572026][ T5863] usb 2-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 335.572057][ T5863] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 335.572077][ T5863] usb 2-1: Product: syz [ 335.572089][ T5863] usb 2-1: Manufacturer: syz [ 335.572111][ T5863] usb 2-1: SerialNumber: syz [ 335.598318][ T5863] usb 2-1: config 0 descriptor?? [ 335.666964][ T5932] usb 5-1: USB disconnect, device number 26 [ 335.688073][ T858] rc_core: IR keymap rc-hauppauge not found [ 335.688097][ T858] Registered IR keymap rc-empty [ 335.688261][ T858] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 335.708116][ T858] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 335.721053][ T1250] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 335.721085][ T1250] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 335.721225][ T1250] usb 3-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 335.721248][ T1250] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 335.765267][ T858] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 335.792430][ T858] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input19 [ 335.812450][ T5863] radio-si470x 2-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 335.812468][ T5863] radio-si470x 2-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 335.812800][ T858] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 335.848577][ T858] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 335.878273][ T858] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 335.909228][ T858] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 335.938215][ T858] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 335.958196][ T858] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 335.978383][ T858] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 335.981053][ T1250] usb 3-1: config 0 descriptor?? [ 336.000855][ T858] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 336.007473][ T5863] radio-si470x 2-1:0.0: software version 0, hardware version 0 [ 336.007503][ T5863] radio-si470x 2-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0. [ 336.007523][ T5863] radio-si470x 2-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 336.018235][ T858] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 336.038235][ T858] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 336.095651][ T858] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 336.095680][ T858] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 336.153145][ T858] usb 4-1: USB disconnect, device number 28 [ 336.208609][ T5863] radio-si470x 2-1:0.0: submitting int urb failed (-90) [ 336.455053][ T1250] usbhid 3-1:0.0: can't add hid device: -71 [ 336.455194][ T1250] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 336.460312][ T1250] usb 3-1: USB disconnect, device number 40 [ 337.507346][ T5863] radio-si470x 2-1:0.0: si470x_get_report: usb_control_msg returned -110 [ 337.507555][ T5863] radio-si470x 2-1:0.0: probe with driver radio-si470x failed with error -22 [ 337.912069][ T8034] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 339.007437][ T1250] usb 2-1: USB disconnect, device number 20 [ 340.048110][ T5994] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 341.150989][ T5994] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 341.151030][ T5994] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 341.151082][ T5994] usb 4-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 341.151107][ T5994] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 341.201396][ T5994] usb 4-1: config 0 descriptor?? [ 342.404173][ T8067] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 342.572841][ T5994] usbhid 4-1:0.0: can't add hid device: -71 [ 342.575352][ T5994] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 342.685851][ T5994] usb 4-1: USB disconnect, device number 29 [ 343.314074][ T8080] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 344.189394][ T1250] usb 2-1: new full-speed USB device number 21 using dummy_hcd [ 344.508590][ T1250] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 344.509000][ T1250] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 344.509094][ T1250] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 344.509149][ T1250] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 344.509199][ T1250] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 345.223392][ T1250] usb 2-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 345.223427][ T1250] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 345.223449][ T1250] usb 2-1: Product: syz [ 345.223464][ T1250] usb 2-1: Manufacturer: syz [ 345.223478][ T1250] usb 2-1: SerialNumber: syz [ 345.299500][ T1250] usb 2-1: config 0 descriptor?? [ 345.925180][ T1250] radio-si470x 2-1:0.0: si470x_get_report: usb_control_msg returned -110 [ 345.925523][ T1250] radio-si470x 2-1:0.0: probe with driver radio-si470x failed with error -5 [ 346.558110][ T1250] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 346.655989][ T8106] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 346.724840][ T1250] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 346.724898][ T1250] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 346.724940][ T1250] usb 1-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 346.724964][ T1250] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 346.765622][ T1250] usb 1-1: config 0 descriptor?? [ 347.012450][ T5863] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 347.896917][ T8115] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 347.898775][ T8115] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 347.899579][ T8115] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 347.900556][ T8115] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 347.901290][ T8115] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 347.902181][ T8115] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 347.902814][ T8115] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 347.903521][ T8115] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 347.904496][ T8115] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 348.197246][ T31] usb 2-1: USB disconnect, device number 21 [ 348.731399][ T1250] usbhid 1-1:0.0: can't add hid device: -71 [ 348.731545][ T1250] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 348.969535][ T5863] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 348.969576][ T5863] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 348.969619][ T5863] usb 5-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 348.969645][ T5863] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 349.117906][ T5863] usb 5-1: config 0 descriptor?? [ 349.134220][ T1250] usb 1-1: USB disconnect, device number 37 [ 349.858946][ T5863] usbhid 5-1:0.0: can't add hid device: -71 [ 349.859083][ T5863] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 349.902593][ T5863] usb 5-1: USB disconnect, device number 27 [ 352.344179][ T8143] net_ratelimit: 893 callbacks suppressed [ 352.344203][ T8143] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 352.400762][ T8146] ALSA: mixer_oss: invalid OSS volume '°þò' [ 352.609213][ T5863] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 353.170342][ T5863] usb 4-1: Using ep0 maxpacket: 8 [ 353.172475][ T5863] usb 4-1: config 1 interface 0 altsetting 21 bulk endpoint 0x82 has invalid maxpacket 32 [ 353.172499][ T5863] usb 4-1: config 1 interface 0 altsetting 21 bulk endpoint 0x3 has invalid maxpacket 64 [ 353.172512][ T5863] usb 4-1: config 1 interface 0 has no altsetting 0 [ 353.174950][ T5863] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 353.174968][ T5863] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 353.174979][ T5863] usb 4-1: Product: syz [ 353.174988][ T5863] usb 4-1: Manufacturer: syz [ 353.174997][ T5863] usb 4-1: SerialNumber: syz [ 353.266357][ T8149] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 353.266637][ T8149] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 353.560379][ T5863] usb 4-1: bad CDC descriptors [ 353.578634][ T5863] usb 4-1: USB disconnect, device number 30 [ 353.778786][ T809] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 354.924799][ T809] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 354.924960][ T809] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 354.925052][ T809] usb 3-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 354.925108][ T809] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 354.935818][ T809] usb 3-1: config 0 descriptor?? [ 355.875786][ T809] usbhid 3-1:0.0: can't add hid device: -71 [ 355.875935][ T809] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 355.896507][ T809] usb 3-1: USB disconnect, device number 41 [ 356.363620][ T37] audit: type=1326 audit(1775894568.328:279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8174 comm="syz.0.672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f322d2cc819 code=0x7ffc0000 [ 356.363686][ T37] audit: type=1326 audit(1775894568.328:280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8174 comm="syz.0.672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f322d2cc819 code=0x7ffc0000 [ 356.363720][ T37] audit: type=1326 audit(1775894568.328:281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8174 comm="syz.0.672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=118 compat=0 ip=0x7f322d2cc819 code=0x7ffc0000 [ 356.363745][ T37] audit: type=1326 audit(1775894568.328:282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8174 comm="syz.0.672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f322d2cc819 code=0x7ffc0000 [ 356.363771][ T37] audit: type=1326 audit(1775894568.328:283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8174 comm="syz.0.672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f322d2cc819 code=0x7ffc0000 [ 356.363796][ T37] audit: type=1326 audit(1775894568.328:284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8174 comm="syz.0.672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f322d28d04e code=0x7ffc0000 [ 356.363820][ T37] audit: type=1326 audit(1775894568.328:285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8174 comm="syz.0.672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f322d2cc4ab code=0x7ffc0000 [ 356.363845][ T37] audit: type=1326 audit(1775894568.328:286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8174 comm="syz.0.672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f322d2cc4ab code=0x7ffc0000 [ 356.610424][ T37] audit: type=1326 audit(1775894568.588:287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8174 comm="syz.0.672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f322d2cc4ab code=0x7ffc0000 [ 356.610671][ T37] audit: type=1326 audit(1775894568.588:288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8174 comm="syz.0.672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f322d2cc4ab code=0x7ffc0000 [ 356.739866][ T8180] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 356.861106][ T5994] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 356.867429][ T8182] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 357.018146][ T5994] usb 1-1: Using ep0 maxpacket: 16 [ 357.021186][ T5994] usb 1-1: config 4 has an invalid interface number: 104 but max is 0 [ 357.021213][ T5994] usb 1-1: config 4 has no interface number 0 [ 357.021263][ T5994] usb 1-1: config 4 interface 104 altsetting 0 endpoint 0x1 has an invalid bInterval 190, changing to 11 [ 357.026425][ T5994] usb 1-1: New USB device found, idVendor=0bda, idProduct=0140, bcdDevice=4b.f8 [ 357.026458][ T5994] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 357.026479][ T5994] usb 1-1: Product: syz [ 357.026494][ T5994] usb 1-1: Manufacturer: syz [ 357.026510][ T5994] usb 1-1: SerialNumber: syz [ 359.108870][ T5994] rtsx_usb 1-1:4.104: probe with driver rtsx_usb failed with error -110 [ 359.281999][ T5863] usb 1-1: USB disconnect, device number 38 [ 360.172487][ T8214] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 360.172511][ T8214] overlayfs: failed to set xattr on upper [ 360.172516][ T8214] overlayfs: ...falling back to redirect_dir=nofollow. [ 360.172521][ T8214] overlayfs: ...falling back to metacopy=off. [ 360.172525][ T8214] overlayfs: ...falling back to index=off. [ 360.172530][ T8214] overlayfs: ...falling back to uuid=null. [ 360.323274][ T8216] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 360.348089][ T5863] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 360.860753][ T5863] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 360.860778][ T5863] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 360.860803][ T5863] usb 2-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 360.860817][ T5863] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 360.867758][ T5863] usb 2-1: config 0 descriptor?? [ 361.418217][ T36] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 361.551463][ T5863] usbhid 2-1:0.0: can't add hid device: -71 [ 361.551605][ T5863] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 361.557734][ T5863] usb 2-1: USB disconnect, device number 22 [ 361.568145][ T36] usb 5-1: Using ep0 maxpacket: 16 [ 361.571089][ T36] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 361.571150][ T36] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 361.571179][ T36] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 361.571201][ T36] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 361.571225][ T36] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 361.572952][ T36] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 361.572982][ T36] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 361.573003][ T36] usb 5-1: Manufacturer: syz [ 362.314280][ T36] usb 5-1: config 0 descriptor?? [ 362.708237][ T36] rc_core: IR keymap rc-hauppauge not found [ 362.708262][ T36] Registered IR keymap rc-empty [ 362.708385][ T36] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 362.728167][ T36] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 362.756659][ T36] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 362.779632][ T36] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input20 [ 362.790403][ T36] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 362.811503][ T36] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 362.828275][ T36] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 362.848204][ T36] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 362.869478][ T36] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 362.888212][ T36] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 362.908329][ T36] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 362.938727][ T36] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 362.968287][ T36] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 362.988439][ T36] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 363.031250][ T36] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 363.031313][ T36] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 363.066718][ T36] usb 5-1: USB disconnect, device number 28 [ 363.112759][ T8251] netlink: 4 bytes leftover after parsing attributes in process `syz.2.697'. [ 363.122153][ T8251] netlink: 12 bytes leftover after parsing attributes in process `syz.2.697'. [ 367.358091][ T5994] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 367.519962][ T5994] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 367.519986][ T5994] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 367.520009][ T5994] usb 3-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 367.520023][ T5994] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 367.523498][ T5994] usb 3-1: config 0 descriptor?? [ 367.673093][ T8287] xfrm0 speed is unknown, defaulting to 1000 [ 367.675349][ T8287] xfrm0 speed is unknown, defaulting to 1000 [ 367.678167][ T8287] xfrm0 speed is unknown, defaulting to 1000 [ 367.934555][ T8287] infiniband syz0: set active [ 367.934581][ T8287] infiniband syz0: added xfrm0 [ 368.023832][ T809] xfrm0 speed is unknown, defaulting to 1000 [ 368.038354][ T8287] RDS/IB: syz0: added [ 368.039040][ T8287] smc: adding ib device syz0 with port count 1 [ 368.039365][ T8287] smc: ib device syz0 port 1 has no pnetid [ 368.045737][ T8287] xfrm0 speed is unknown, defaulting to 1000 [ 368.336542][ T8287] xfrm0 speed is unknown, defaulting to 1000 [ 368.620118][ T8287] xfrm0 speed is unknown, defaulting to 1000 [ 368.895059][ T8287] xfrm0 speed is unknown, defaulting to 1000 [ 368.986522][ T5863] xfrm0 speed is unknown, defaulting to 1000 [ 369.202603][ T8287] xfrm0 speed is unknown, defaulting to 1000 [ 369.644186][ T8291] FAULT_INJECTION: forcing a failure. [ 369.644186][ T8291] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 369.644221][ T8291] CPU: 0 UID: 0 PID: 8291 Comm: syz.4.710 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 369.644247][ T8291] Tainted: [L]=SOFTLOCKUP [ 369.644253][ T8291] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 369.644264][ T8291] Call Trace: [ 369.644271][ T8291] [ 369.644279][ T8291] dump_stack_lvl+0xe8/0x150 [ 369.644313][ T8291] should_fail_ex+0x46b/0x600 [ 369.644349][ T8291] _copy_to_user+0x31/0xb0 [ 369.644370][ T8291] simple_read_from_buffer+0xe1/0x170 [ 369.644396][ T8291] proc_fail_nth_read+0x1be/0x230 [ 369.644421][ T8291] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 369.644446][ T8291] ? rw_verify_area+0x2ac/0x4e0 [ 369.644476][ T8291] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 369.644499][ T8291] vfs_read+0x212/0xa80 [ 369.644533][ T8291] ? __pfx_vfs_read+0x10/0x10 [ 369.644562][ T8291] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 369.644585][ T8291] ? lockdep_hardirqs_on+0x7a/0x110 [ 369.644605][ T8291] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 369.644626][ T8291] ? mutex_lock_nested+0x152/0x1d0 [ 369.644648][ T8291] ? fdget_pos+0x252/0x320 [ 369.644679][ T8291] ksys_read+0x156/0x270 [ 369.644706][ T8291] ? __pfx_ksys_read+0x10/0x10 [ 369.644752][ T8291] do_syscall_64+0x14d/0xf80 [ 369.644772][ T8291] ? trace_irq_disable+0x3b/0x150 [ 369.644792][ T8291] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 369.644810][ T8291] ? clear_bhb_loop+0x40/0x90 [ 369.644832][ T8291] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 369.644849][ T8291] RIP: 0033:0x7f52fb1bd04e [ 369.644867][ T8291] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 369.644882][ T8291] RSP: 002b:00007f52f9455fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 369.644902][ T8291] RAX: ffffffffffffffda RBX: 00007f52f94566c0 RCX: 00007f52fb1bd04e [ 369.644916][ T8291] RDX: 000000000000000f RSI: 00007f52f94560a0 RDI: 0000000000000003 [ 369.644927][ T8291] RBP: 00007f52f9456090 R08: 0000000000000000 R09: 0000000000000000 [ 369.644938][ T8291] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 369.644949][ T8291] R13: 00007f52fb476038 R14: 00007f52fb475fa0 R15: 00007fff9c507ff8 [ 369.644980][ T8291] [ 369.964430][ T5994] playstation 0003:054C:0DF2.0008: item fetching failed at offset 2/5 [ 369.964907][ T5994] playstation 0003:054C:0DF2.0008: Parse failed [ 369.964948][ T5994] playstation 0003:054C:0DF2.0008: probe with driver playstation failed with error -22 [ 370.519018][ T5863] usb 3-1: USB disconnect, device number 42 [ 370.561155][ T8297] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 370.626622][ T8304] ALSA: mixer_oss: invalid OSS volume '°þò' [ 370.928110][ T809] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 371.088113][ T5994] usb 2-1: new full-speed USB device number 23 using dummy_hcd [ 371.828125][ T809] usb 4-1: Using ep0 maxpacket: 16 [ 371.849726][ T809] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 371.849762][ T809] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 371.849778][ T809] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 371.854345][ T809] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 371.854365][ T809] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 371.854377][ T809] usb 4-1: Manufacturer: syz [ 371.911134][ T5994] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 371.911188][ T5994] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 371.911213][ T5994] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 371.911238][ T5994] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 371.911258][ T5994] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 371.914359][ T5994] usb 2-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 371.914386][ T5994] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 371.914406][ T5994] usb 2-1: Product: syz [ 371.914419][ T5994] usb 2-1: Manufacturer: syz [ 371.914432][ T5994] usb 2-1: SerialNumber: syz [ 371.962118][ T5994] usb 2-1: config 0 descriptor?? [ 372.014928][ T809] usb 4-1: config 0 descriptor?? [ 372.195326][ T5994] radio-si470x 2-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 372.195356][ T5994] radio-si470x 2-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 372.559718][ T5994] radio-si470x 2-1:0.0: software version 0, hardware version 0 [ 372.559738][ T5994] radio-si470x 2-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0. [ 372.559751][ T5994] radio-si470x 2-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 372.762321][ T5994] radio-si470x 2-1:0.0: submitting int urb failed (-90) [ 373.678582][ T809] usb 4-1: USB disconnect, device number 31 [ 373.968326][ T5994] radio-si470x 2-1:0.0: si470x_get_report: usb_control_msg returned -110 [ 373.971279][ T5994] radio-si470x 2-1:0.0: probe with driver radio-si470x failed with error -22 [ 374.068126][ T5863] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 374.096783][ T8335] ALSA: mixer_oss: invalid OSS volume '°þò' [ 374.221264][ T5863] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 48, changing to 9 [ 374.221305][ T5863] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8240, setting to 1024 [ 374.223035][ T5863] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 374.223066][ T5863] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 374.223087][ T5863] usb 3-1: Manufacturer: syz [ 374.281491][ T8338] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 374.302051][ T5863] usb 3-1: config 0 descriptor?? [ 374.847866][ T5863] pyra 0003:1E7D:2CF6.0009: unknown main item tag 0x0 [ 374.847892][ T5863] pyra 0003:1E7D:2CF6.0009: unknown main item tag 0x0 [ 374.847908][ T5863] pyra 0003:1E7D:2CF6.0009: unknown main item tag 0x0 [ 374.880081][ T5863] pyra 0003:1E7D:2CF6.0009: unknown main item tag 0x0 [ 374.881030][ T5863] pyra 0003:1E7D:2CF6.0009: unknown main item tag 0x0 [ 374.881886][ T5863] pyra 0003:1E7D:2CF6.0009: unknown main item tag 0x0 [ 374.882351][ T5863] pyra 0003:1E7D:2CF6.0009: unknown main item tag 0x0 [ 374.978169][ T5863] pyra 0003:1E7D:2CF6.0009: hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.2-1/input0 [ 375.078222][ T5885] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 375.235230][ T8293] usb 2-1: USB disconnect, device number 23 [ 375.428151][ T809] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 375.456939][ T5863] pyra 0003:1E7D:2CF6.0009: couldn't init struct pyra_device [ 375.457005][ T5863] pyra 0003:1E7D:2CF6.0009: couldn't install mouse [ 375.482104][ T5863] pyra 0003:1E7D:2CF6.0009: probe with driver pyra failed with error -5 [ 375.580679][ T809] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 375.580716][ T809] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 375.580758][ T809] usb 4-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 375.580783][ T809] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 375.628707][ T809] usb 4-1: config 0 descriptor?? [ 376.673576][ T809] playstation 0003:054C:0DF2.000A: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.3-1/input0 [ 376.745261][ T809] playstation 0003:054C:0DF2.000A: Failed to retrieve feature with reportID 9: -71 [ 376.745294][ T809] playstation 0003:054C:0DF2.000A: Failed to retrieve DualSense pairing info: -71 [ 376.745356][ T809] playstation 0003:054C:0DF2.000A: Failed to get MAC address from DualSense [ 376.745373][ T809] playstation 0003:054C:0DF2.000A: Failed to create dualsense. [ 376.815063][ T809] playstation 0003:054C:0DF2.000A: probe with driver playstation failed with error -71 [ 376.845628][ T809] usb 4-1: USB disconnect, device number 32 [ 377.013243][ T5885] usb 3-1: USB disconnect, device number 43 [ 377.285925][ T8360] fido_id[8360]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 377.868713][ T8379] FAULT_INJECTION: forcing a failure. [ 377.868713][ T8379] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 377.868878][ T8379] CPU: 0 UID: 0 PID: 8379 Comm: syz.1.738 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 377.868910][ T8379] Tainted: [L]=SOFTLOCKUP [ 377.868919][ T8379] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 377.868931][ T8379] Call Trace: [ 377.868940][ T8379] [ 377.868950][ T8379] dump_stack_lvl+0xe8/0x150 [ 377.868989][ T8379] should_fail_ex+0x46b/0x600 [ 377.869026][ T8379] _copy_to_user+0x31/0xb0 [ 377.869051][ T8379] simple_read_from_buffer+0xe1/0x170 [ 377.869084][ T8379] proc_fail_nth_read+0x1be/0x230 [ 377.869116][ T8379] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 377.869148][ T8379] ? rw_verify_area+0x2ac/0x4e0 [ 377.869179][ T8379] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 377.869208][ T8379] vfs_read+0x212/0xa80 [ 377.869251][ T8379] ? __pfx_vfs_read+0x10/0x10 [ 377.869287][ T8379] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 377.869314][ T8379] ? lockdep_hardirqs_on+0x7a/0x110 [ 377.869339][ T8379] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 377.869365][ T8379] ? mutex_lock_nested+0x152/0x1d0 [ 377.869396][ T8379] ? fdget_pos+0x252/0x320 [ 377.869435][ T8379] ksys_read+0x156/0x270 [ 377.869467][ T8379] ? __pfx_ksys_read+0x10/0x10 [ 377.869511][ T8379] do_syscall_64+0x14d/0xf80 [ 377.869536][ T8379] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 377.869558][ T8379] ? clear_bhb_loop+0x40/0x90 [ 377.869585][ T8379] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 377.869608][ T8379] RIP: 0033:0x7f4dea3bd04e [ 377.869629][ T8379] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 377.869648][ T8379] RSP: 002b:00007f4de862cfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 377.869686][ T8379] RAX: ffffffffffffffda RBX: 00007f4de862d6c0 RCX: 00007f4dea3bd04e [ 377.869702][ T8379] RDX: 000000000000000f RSI: 00007f4de862d0a0 RDI: 0000000000000009 [ 377.869716][ T8379] RBP: 00007f4de862d090 R08: 0000000000000000 R09: 0000000000000000 [ 377.869730][ T8379] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 377.869743][ T8379] R13: 00007f4dea676128 R14: 00007f4dea676090 R15: 00007ffd2543f988 [ 377.869780][ T8379] [ 378.338393][ T8371] could not allocate digest TFM handle sha384-arm [ 378.488062][ T5885] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 378.678251][ T5885] usb 1-1: Using ep0 maxpacket: 16 [ 378.683441][ T5885] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 378.683502][ T5885] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 378.683531][ T5885] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 378.686701][ T5885] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 378.686730][ T5885] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 378.686750][ T5885] usb 1-1: Manufacturer: syz [ 378.730510][ T8391] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 378.764091][ T5885] usb 1-1: config 0 descriptor?? [ 378.872307][ T1325] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.872390][ T1325] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.888075][ T8293] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 379.201867][ T8293] usb 2-1: Using ep0 maxpacket: 16 [ 379.204994][ T8293] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 379.205055][ T8293] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 379.205086][ T8293] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 379.205109][ T8293] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 379.205133][ T8293] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 379.207455][ T8293] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 379.207486][ T8293] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 379.207507][ T8293] usb 2-1: Manufacturer: syz [ 379.471925][ T8293] usb 2-1: config 0 descriptor?? [ 380.849635][ T9] usb 1-1: USB disconnect, device number 39 [ 380.898100][ T8293] rc_core: IR keymap rc-hauppauge not found [ 380.898124][ T8293] Registered IR keymap rc-empty [ 380.898295][ T8293] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 380.927771][ T8293] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 380.964360][ T8293] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 380.989676][ T8293] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input22 [ 381.029013][ T8293] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 381.048363][ T8293] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 381.068662][ T8293] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 381.100193][ T8293] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 381.118222][ T8293] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 381.148171][ T8293] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 381.168241][ T809] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 381.213361][ T8293] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 381.228145][ T8293] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 381.248176][ T8293] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 381.254536][ T8422] FAULT_INJECTION: forcing a failure. [ 381.254536][ T8422] name failslab, interval 1, probability 0, space 0, times 0 [ 381.254567][ T8422] CPU: 1 UID: 0 PID: 8422 Comm: syz.3.751 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 381.254585][ T8422] Tainted: [L]=SOFTLOCKUP [ 381.254590][ T8422] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 381.254598][ T8422] Call Trace: [ 381.254603][ T8422] [ 381.254616][ T8422] dump_stack_lvl+0xe8/0x150 [ 381.254639][ T8422] should_fail_ex+0x46b/0x600 [ 381.254661][ T8422] should_failslab+0xa8/0x100 [ 381.254684][ T8422] __kvmalloc_node_noprof+0x170/0x8e0 [ 381.254709][ T8422] ? map_get_next_key+0x23a/0x630 [ 381.254738][ T8422] ? _copy_from_user+0x94/0xb0 [ 381.254763][ T8422] map_get_next_key+0x23a/0x630 [ 381.254790][ T8422] ? bpf_lsm_bpf+0x9/0x20 [ 381.254815][ T8422] __sys_bpf+0x768/0x950 [ 381.254842][ T8422] ? __pfx___sys_bpf+0x10/0x10 [ 381.254864][ T8422] ? rt_mutex_slowunlock+0x1cb/0x300 [ 381.254914][ T8422] ? rcu_is_watching+0x15/0xb0 [ 381.254945][ T8422] __x64_sys_bpf+0x7c/0x90 [ 381.254969][ T8422] do_syscall_64+0x14d/0xf80 [ 381.254992][ T8422] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 381.255012][ T8422] ? clear_bhb_loop+0x40/0x90 [ 381.255037][ T8422] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 381.255056][ T8422] RIP: 0033:0x7f33ca78c819 [ 381.255076][ T8422] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 381.255093][ T8422] RSP: 002b:00007f33c89de028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 381.255116][ T8422] RAX: ffffffffffffffda RBX: 00007f33caa05fa0 RCX: 00007f33ca78c819 [ 381.255131][ T8422] RDX: 0000000000000020 RSI: 0000200000000200 RDI: 0000000000000004 [ 381.255144][ T8422] RBP: 00007f33c89de090 R08: 0000000000000000 R09: 0000000000000000 [ 381.255156][ T8422] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 381.255168][ T8422] R13: 00007f33caa06038 R14: 00007f33caa05fa0 R15: 00007ffc04c1bc08 [ 381.255199][ T8422] [ 381.268186][ T8293] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 381.322210][ T809] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 6 [ 381.322372][ T809] usb 5-1: config 0 interface 0 altsetting 32 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 381.322404][ T809] usb 5-1: config 0 interface 0 altsetting 32 endpoint 0x81 has invalid wMaxPacketSize 0 [ 381.322428][ T809] usb 5-1: config 0 interface 0 has no altsetting 0 [ 381.322460][ T809] usb 5-1: New USB device found, idVendor=1ea7, idProduct=0907, bcdDevice= 0.00 [ 381.322482][ T809] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 381.523077][ T809] usb 5-1: config 0 descriptor?? [ 381.558934][ T8293] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 381.558963][ T8293] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 381.590156][ T8293] usb 2-1: USB disconnect, device number 24 [ 383.821731][ T809] semitek 0003:1EA7:0907.000B: unknown main item tag 0x0 [ 383.821774][ T809] semitek 0003:1EA7:0907.000B: unknown main item tag 0x0 [ 383.821800][ T809] semitek 0003:1EA7:0907.000B: unknown main item tag 0x0 [ 383.821827][ T809] semitek 0003:1EA7:0907.000B: unknown main item tag 0x0 [ 383.821854][ T809] semitek 0003:1EA7:0907.000B: unknown main item tag 0x0 [ 383.821881][ T809] semitek 0003:1EA7:0907.000B: unknown main item tag 0x0 [ 383.821907][ T809] semitek 0003:1EA7:0907.000B: unknown main item tag 0x0 [ 383.821933][ T809] semitek 0003:1EA7:0907.000B: unknown main item tag 0x0 [ 383.821960][ T809] semitek 0003:1EA7:0907.000B: unknown main item tag 0x0 [ 383.821987][ T809] semitek 0003:1EA7:0907.000B: unknown main item tag 0x0 [ 383.890618][ T809] semitek 0003:1EA7:0907.000B: hidraw0: USB HID v7f.fd Device [HID 1ea7:0907] on usb-dummy_hcd.4-1/input0 [ 383.972359][ T31] usb 5-1: USB disconnect, device number 30 [ 385.544451][ T8442] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 385.647741][ T8439] fido_id[8439]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 385.818409][ T5885] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 385.842603][ T31] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 386.363429][ T31] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 386.363467][ T31] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 386.363508][ T31] usb 5-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 386.363532][ T31] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 386.371858][ T31] usb 5-1: config 0 descriptor?? [ 386.494995][ T5885] usb 4-1: Using ep0 maxpacket: 16 [ 386.497890][ T5885] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 386.513551][ T5885] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 386.513595][ T5885] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 386.515061][ T5885] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 386.515090][ T5885] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 386.515111][ T5885] usb 4-1: Manufacturer: syz [ 386.588735][ T5885] usb 4-1: config 0 descriptor?? [ 387.021056][ T31] playstation 0003:054C:0DF2.000C: item fetching failed at offset 3/5 [ 387.021637][ T31] playstation 0003:054C:0DF2.000C: Parse failed [ 387.021681][ T31] playstation 0003:054C:0DF2.000C: probe with driver playstation failed with error -22 [ 387.254631][ T5870] usb 5-1: USB disconnect, device number 31 [ 387.939307][ T8464] FAULT_INJECTION: forcing a failure. [ 387.939307][ T8464] name failslab, interval 1, probability 0, space 0, times 0 [ 387.939384][ T8464] CPU: 1 UID: 0 PID: 8464 Comm: syz.4.765 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 387.939414][ T8464] Tainted: [L]=SOFTLOCKUP [ 387.939421][ T8464] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 387.939430][ T8464] Call Trace: [ 387.939436][ T8464] [ 387.939443][ T8464] dump_stack_lvl+0xe8/0x150 [ 387.939466][ T8464] should_fail_ex+0x46b/0x600 [ 387.939487][ T8464] should_failslab+0xa8/0x100 [ 387.939502][ T8464] __kmalloc_noprof+0xdf/0x7b0 [ 387.939514][ T8464] ? _ib_alloc_device+0x40/0x6f0 [ 387.939540][ T8464] ? ib_device_get_by_netdev+0x81/0x4f0 [ 387.939555][ T8464] _ib_alloc_device+0x40/0x6f0 [ 387.939574][ T8464] rxe_net_add+0x2a/0x110 [ 387.939592][ T8464] rxe_newlink+0xdd/0x190 [ 387.939607][ T8464] nldev_newlink+0x5bd/0x650 [ 387.939626][ T8464] ? __pfx_nldev_newlink+0x10/0x10 [ 387.939694][ T8464] ? __kernel_text_address+0xd/0x30 [ 387.939720][ T8464] ? cap_capable+0x123/0x490 [ 387.939733][ T8464] ? safesetid_security_capable+0xa9/0x1a0 [ 387.939748][ T8464] ? bpf_lsm_capable+0x9/0x20 [ 387.939761][ T8464] ? security_capable+0x7e/0x2c0 [ 387.939778][ T8464] ? __pfx_nldev_newlink+0x10/0x10 [ 387.939805][ T8464] rdma_nl_rcv+0x6d7/0xa10 [ 387.939833][ T8464] ? __pfx_rdma_nl_rcv+0x10/0x10 [ 387.939850][ T8464] ? __netlink_lookup+0x7e4/0x8b0 [ 387.939874][ T8464] ? netlink_deliver_tap+0x2e/0x1b0 [ 387.939897][ T8464] netlink_unicast+0x831/0x9f0 [ 387.939924][ T8464] ? __pfx_netlink_unicast+0x10/0x10 [ 387.939948][ T8464] ? netlink_sendmsg+0x650/0xb40 [ 387.939977][ T8464] ? skb_put+0x11b/0x210 [ 387.940004][ T8464] netlink_sendmsg+0x813/0xb40 [ 387.940045][ T8464] ? __pfx_netlink_sendmsg+0x10/0x10 [ 387.940079][ T8464] ? unwind_get_return_address+0x4d/0x90 [ 387.940094][ T8464] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 387.940114][ T8464] ____sys_sendmsg+0x94c/0x9c0 [ 387.940133][ T8464] ? __pfx_____sys_sendmsg+0x10/0x10 [ 387.940164][ T8464] ? import_iovec+0x73/0xa0 [ 387.940190][ T8464] ___sys_sendmsg+0x2a5/0x360 [ 387.940222][ T8464] ? __pfx____sys_sendmsg+0x10/0x10 [ 387.940284][ T8464] ? __fget_files+0x2a/0x420 [ 387.940311][ T8464] ? __fget_files+0x3a6/0x420 [ 387.940397][ T8464] __x64_sys_sendmsg+0x1c3/0x2a0 [ 387.940421][ T8464] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 387.940442][ T8464] ? __pfx_ksys_write+0x10/0x10 [ 387.940469][ T8464] do_syscall_64+0x14d/0xf80 [ 387.940492][ T8464] ? trace_irq_disable+0x3b/0x150 [ 387.940507][ T8464] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 387.940525][ T8464] ? clear_bhb_loop+0x40/0x90 [ 387.940545][ T8464] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 387.940557][ T8464] RIP: 0033:0x7f52fb1fc819 [ 387.940642][ T8464] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 387.940653][ T8464] RSP: 002b:00007f52f9456028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 387.940669][ T8464] RAX: ffffffffffffffda RBX: 00007f52fb475fa0 RCX: 00007f52fb1fc819 [ 387.940678][ T8464] RDX: 0000000000004000 RSI: 0000200000000180 RDI: 0000000000000003 [ 387.940685][ T8464] RBP: 00007f52f9456090 R08: 0000000000000000 R09: 0000000000000000 [ 387.940693][ T8464] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 387.940700][ T8464] R13: 00007f52fb476038 R14: 00007f52fb475fa0 R15: 00007fff9c507ff8 [ 387.940720][ T8464] [ 387.942966][ T8464] rdma_rxe: rxe_newlink: failed to add lo [ 388.734308][ T5885] usb 4-1: USB disconnect, device number 33 [ 389.217636][ T8484] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 389.477430][ T5885] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 389.715829][ T5885] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 6 [ 389.716401][ T5885] usb 1-1: config 0 interface 0 altsetting 32 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 389.716459][ T5885] usb 1-1: config 0 interface 0 altsetting 32 endpoint 0x81 has invalid wMaxPacketSize 0 [ 389.716531][ T5885] usb 1-1: config 0 interface 0 has no altsetting 0 [ 389.716757][ T5885] usb 1-1: New USB device found, idVendor=1ea7, idProduct=0907, bcdDevice= 0.00 [ 389.716811][ T5885] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 390.431503][ T5885] usb 1-1: config 0 descriptor?? [ 390.855921][ T5932] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 391.743167][ T5885] usbhid 1-1:0.0: can't add hid device: -71 [ 391.743310][ T5885] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 391.782412][ T5885] usb 1-1: USB disconnect, device number 40 [ 391.819127][ T5932] usb 3-1: Using ep0 maxpacket: 16 [ 391.821672][ T5932] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 391.821732][ T5932] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 391.821762][ T5932] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 391.821784][ T5932] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 391.821808][ T5932] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 391.823399][ T5932] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 391.823427][ T5932] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 391.823449][ T5932] usb 3-1: Manufacturer: syz [ 391.920404][ T5932] usb 3-1: config 0 descriptor?? [ 392.286895][ T5932] rc_core: IR keymap rc-hauppauge not found [ 392.324712][ T5932] Registered IR keymap rc-empty [ 392.326203][ T5932] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 392.355833][ T5932] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 392.438727][ T5932] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 392.481450][ T5932] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input23 [ 392.897127][ T5932] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 392.913556][ T5932] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 392.928351][ T5932] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 392.958251][ T5932] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 392.978221][ T5932] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 393.035977][ T5932] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 393.048822][ T5932] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 393.078138][ T5932] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 393.108204][ T5932] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 393.130491][ T5932] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 393.161235][ T5932] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 393.161265][ T5932] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 393.194179][ T5932] usb 3-1: USB disconnect, device number 44 [ 393.591807][ T8528] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 394.016969][ T8530] FAULT_INJECTION: forcing a failure. [ 394.016969][ T8530] name failslab, interval 1, probability 0, space 0, times 0 [ 394.017010][ T8530] CPU: 1 UID: 0 PID: 8530 Comm: syz.3.786 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 394.017040][ T8530] Tainted: [L]=SOFTLOCKUP [ 394.017048][ T8530] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 394.017061][ T8530] Call Trace: [ 394.017069][ T8530] [ 394.017079][ T8530] dump_stack_lvl+0xe8/0x150 [ 394.017117][ T8530] should_fail_ex+0x46b/0x600 [ 394.017154][ T8530] should_failslab+0xa8/0x100 [ 394.017180][ T8530] kmem_cache_alloc_noprof+0x87/0x680 [ 394.017214][ T8530] ? skb_clone+0x212/0x3a0 [ 394.017247][ T8530] skb_clone+0x212/0x3a0 [ 394.017277][ T8530] __netlink_deliver_tap+0x404/0x850 [ 394.017324][ T8530] ? netlink_deliver_tap+0x2e/0x1b0 [ 394.017359][ T8530] netlink_deliver_tap+0x19c/0x1b0 [ 394.017394][ T8530] netlink_unicast+0x805/0x9f0 [ 394.017434][ T8530] ? __pfx_netlink_unicast+0x10/0x10 [ 394.017485][ T8530] ? netlink_sendmsg+0x650/0xb40 [ 394.017517][ T8530] ? skb_put+0x11b/0x210 [ 394.017543][ T8530] netlink_sendmsg+0x813/0xb40 [ 394.017588][ T8530] ? __pfx_netlink_sendmsg+0x10/0x10 [ 394.017624][ T8530] ? unwind_get_return_address+0x4d/0x90 [ 394.017652][ T8530] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 394.017689][ T8530] ____sys_sendmsg+0x94c/0x9c0 [ 394.017733][ T8530] ? __pfx_____sys_sendmsg+0x10/0x10 [ 394.017770][ T8530] ? import_iovec+0x73/0xa0 [ 394.017796][ T8530] ___sys_sendmsg+0x2a5/0x360 [ 394.017829][ T8530] ? __pfx____sys_sendmsg+0x10/0x10 [ 394.017896][ T8530] ? __fget_files+0x2a/0x420 [ 394.017927][ T8530] ? __fget_files+0x3a6/0x420 [ 394.017964][ T8530] __x64_sys_sendmsg+0x1c3/0x2a0 [ 394.017993][ T8530] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 394.018028][ T8530] ? __pfx_ksys_write+0x10/0x10 [ 394.018072][ T8530] do_syscall_64+0x14d/0xf80 [ 394.018096][ T8530] ? trace_irq_disable+0x3b/0x150 [ 394.018121][ T8530] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 394.018143][ T8530] ? clear_bhb_loop+0x40/0x90 [ 394.018171][ T8530] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 394.018193][ T8530] RIP: 0033:0x7f33ca78c819 [ 394.018213][ T8530] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 394.018230][ T8530] RSP: 002b:00007f33c89de028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 394.018255][ T8530] RAX: ffffffffffffffda RBX: 00007f33caa05fa0 RCX: 00007f33ca78c819 [ 394.018270][ T8530] RDX: 0000000000008000 RSI: 0000200000000980 RDI: 0000000000000003 [ 394.018283][ T8530] RBP: 00007f33c89de090 R08: 0000000000000000 R09: 0000000000000000 [ 394.018296][ T8530] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 394.018308][ T8530] R13: 00007f33caa06038 R14: 00007f33caa05fa0 R15: 00007ffc04c1bc08 [ 394.018340][ T8530] [ 396.068170][ T5870] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 396.220506][ T5870] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 6 [ 396.220548][ T5870] usb 4-1: config 0 interface 0 altsetting 32 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 396.220565][ T5870] usb 4-1: config 0 interface 0 altsetting 32 endpoint 0x81 has invalid wMaxPacketSize 0 [ 396.220578][ T5870] usb 4-1: config 0 interface 0 has no altsetting 0 [ 396.220599][ T5870] usb 4-1: New USB device found, idVendor=1ea7, idProduct=0907, bcdDevice= 0.00 [ 396.220613][ T5870] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 396.223840][ T5870] usb 4-1: config 0 descriptor?? [ 396.652449][ T5870] usbhid 4-1:0.0: can't add hid device: -71 [ 396.652590][ T5870] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 396.673661][ T5870] usb 4-1: USB disconnect, device number 34 [ 396.975904][ T8558] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 397.656204][ T8563] netlink: 28 bytes leftover after parsing attributes in process `syz.4.798'. [ 397.848150][ T9] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 397.898408][ T5870] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 397.958154][ T809] usb 4-1: new full-speed USB device number 35 using dummy_hcd [ 398.000292][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 398.000322][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 398.000347][ T9] usb 3-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 398.000360][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 398.005058][ T9] usb 3-1: config 0 descriptor?? [ 398.018064][ T5863] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 398.048120][ T5870] usb 5-1: Using ep0 maxpacket: 16 [ 398.050775][ T5870] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 398.050799][ T5870] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 398.054418][ T5870] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 398.054443][ T5870] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 398.054716][ T5870] usb 5-1: Product: syz [ 398.054738][ T5870] usb 5-1: Manufacturer: syz [ 398.054751][ T5870] usb 5-1: SerialNumber: syz [ 398.132765][ T809] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 398.132791][ T809] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 398.132841][ T809] usb 4-1: Product: syz [ 398.132851][ T809] usb 4-1: Manufacturer: syz [ 398.132860][ T809] usb 4-1: SerialNumber: syz [ 398.162119][ T809] usb 4-1: config 0 descriptor?? [ 398.178120][ T5863] usb 1-1: Using ep0 maxpacket: 16 [ 398.181151][ T5863] usb 1-1: config 0 has an invalid descriptor of length 93, skipping remainder of the config [ 398.181187][ T5863] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 398.181205][ T5863] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 398.181217][ T5863] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 398.181230][ T5863] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 398.183113][ T5863] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 398.183141][ T5863] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 398.183367][ T5863] usb 1-1: Manufacturer: syz [ 398.234273][ T5863] usb 1-1: config 0 descriptor?? [ 398.386560][ T809] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 398.435257][ T5870] usb 5-1: 0:2 : does not exist [ 398.498138][ T9] playstation 0003:054C:0DF2.000D: item fetching failed at offset 1/5 [ 398.505903][ T9] playstation 0003:054C:0DF2.000D: Parse failed [ 398.515049][ T9] playstation 0003:054C:0DF2.000D: probe with driver playstation failed with error -22 [ 398.698917][ T5863] rc_core: IR keymap rc-hauppauge not found [ 398.698941][ T5863] Registered IR keymap rc-empty [ 398.700031][ T5863] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 398.720047][ T5863] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 398.730269][ T9] usb 3-1: USB disconnect, device number 45 [ 398.751745][ T5863] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 398.907289][ T5863] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input24 [ 399.043558][ T5863] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 399.059634][ T5863] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 399.095503][ T5863] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 399.112424][ T5863] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 399.168326][ T5863] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 399.211378][ T5863] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 399.230001][ T5863] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 399.256949][ T5863] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 399.282174][ T5863] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 399.330002][ T5863] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 399.576264][ T5863] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 399.576288][ T5863] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 399.623657][ T5870] usb 5-1: USB disconnect, device number 32 [ 399.681884][ T5863] usb 1-1: USB disconnect, device number 41 [ 400.034851][ T6025] udevd[6025]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 400.627289][ T809] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 400.908508][ T8293] usb 4-1: USB disconnect, device number 35 [ 401.287718][ T8604] FAULT_INJECTION: forcing a failure. [ 401.287718][ T8604] name failslab, interval 1, probability 0, space 0, times 0 [ 401.287760][ T8604] CPU: 1 UID: 0 PID: 8604 Comm: syz.3.811 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 401.287788][ T8604] Tainted: [L]=SOFTLOCKUP [ 401.287795][ T8604] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 401.287807][ T8604] Call Trace: [ 401.287815][ T8604] [ 401.287825][ T8604] dump_stack_lvl+0xe8/0x150 [ 401.287861][ T8604] should_fail_ex+0x46b/0x600 [ 401.287897][ T8604] should_failslab+0xa8/0x100 [ 401.287926][ T8604] kmem_cache_alloc_noprof+0x87/0x680 [ 401.287958][ T8604] ? skb_clone+0x212/0x3a0 [ 401.287988][ T8604] skb_clone+0x212/0x3a0 [ 401.288017][ T8604] __netlink_deliver_tap+0x404/0x850 [ 401.288059][ T8604] ? netlink_deliver_tap+0x2e/0x1b0 [ 401.288091][ T8604] netlink_deliver_tap+0x19c/0x1b0 [ 401.288124][ T8604] netlink_unicast+0x805/0x9f0 [ 401.288160][ T8604] ? __pfx_netlink_unicast+0x10/0x10 [ 401.288189][ T8604] ? netlink_sendmsg+0x650/0xb40 [ 401.288217][ T8604] ? skb_put+0x11b/0x210 [ 401.288243][ T8604] netlink_sendmsg+0x813/0xb40 [ 401.288285][ T8604] ? __pfx_netlink_sendmsg+0x10/0x10 [ 401.288321][ T8604] ? unwind_get_return_address+0x4d/0x90 [ 401.288350][ T8604] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 401.288387][ T8604] ____sys_sendmsg+0x94c/0x9c0 [ 401.288420][ T8604] ? __pfx_____sys_sendmsg+0x10/0x10 [ 401.288457][ T8604] ? import_iovec+0x73/0xa0 [ 401.288493][ T8604] ___sys_sendmsg+0x2a5/0x360 [ 401.288524][ T8604] ? __pfx____sys_sendmsg+0x10/0x10 [ 401.288591][ T8604] ? __fget_files+0x2a/0x420 [ 401.288619][ T8604] ? __fget_files+0x3a6/0x420 [ 401.288660][ T8604] __x64_sys_sendmsg+0x1c3/0x2a0 [ 401.288690][ T8604] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 401.288727][ T8604] ? __pfx_ksys_write+0x10/0x10 [ 401.288771][ T8604] do_syscall_64+0x14d/0xf80 [ 401.288796][ T8604] ? trace_irq_disable+0x3b/0x150 [ 401.288821][ T8604] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 401.288844][ T8604] ? clear_bhb_loop+0x40/0x90 [ 401.288872][ T8604] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 401.288893][ T8604] RIP: 0033:0x7f33ca78c819 [ 401.288914][ T8604] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 401.288932][ T8604] RSP: 002b:00007f33c89de028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 401.288956][ T8604] RAX: ffffffffffffffda RBX: 00007f33caa05fa0 RCX: 00007f33ca78c819 [ 401.288971][ T8604] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000004 [ 401.288985][ T8604] RBP: 00007f33c89de090 R08: 0000000000000000 R09: 0000000000000000 [ 401.288999][ T8604] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 401.289013][ T8604] R13: 00007f33caa06038 R14: 00007f33caa05fa0 R15: 00007ffc04c1bc08 [ 401.289050][ T8604] [ 402.429207][ T8612] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 403.202234][ T8624] netlink: 24 bytes leftover after parsing attributes in process `syz.1.816'. [ 403.275228][ T8626] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 407.127332][ T8651] netlink: 36 bytes leftover after parsing attributes in process `syz.1.825'. [ 408.968052][ T5870] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 409.121294][ T5870] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 409.121334][ T5870] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 409.124458][ T5870] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 409.124492][ T5870] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 409.124512][ T5870] usb 3-1: Manufacturer: syz [ 409.180757][ T5870] usb 3-1: config 0 descriptor?? [ 409.309638][ T5863] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 409.541006][ T5863] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 409.541049][ T5863] usb 2-1: New USB device found, idVendor=050d, idProduct=011b, bcdDevice=6f.a4 [ 409.541063][ T5863] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 409.626991][ T5863] usb 2-1: config 0 descriptor?? [ 410.822431][ T5863] usb 2-1: bad CDC descriptors [ 410.840394][ T8658] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 410.840428][ T8658] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 410.908825][ T8658] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 410.908856][ T8658] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 411.100562][ T5863] usb 2-1: USB disconnect, device number 25 [ 411.618144][ T5863] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 411.662921][ T809] usb 1-1: new full-speed USB device number 42 using dummy_hcd [ 412.347206][ T5863] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 412.347468][ T5863] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 412.347512][ T5863] usb 5-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 412.347537][ T5863] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 412.392160][ T809] usb 1-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 412.392579][ T809] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 412.392598][ T809] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 412.392615][ T809] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 412.392633][ T809] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 412.396725][ T809] usb 1-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 412.396743][ T809] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 412.397112][ T809] usb 1-1: Product: syz [ 412.397123][ T809] usb 1-1: Manufacturer: syz [ 412.397131][ T809] usb 1-1: SerialNumber: syz [ 412.505610][ T5870] usbhid 3-1:0.0: can't add hid device: -71 [ 412.505909][ T5870] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 412.528110][ T809] usb 1-1: config 0 descriptor?? [ 412.531504][ T8690] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 412.574901][ T5870] usb 3-1: USB disconnect, device number 46 [ 412.576120][ T5863] usb 5-1: config 0 descriptor?? [ 412.609167][ T809] input: KB Gear Tablet as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input25 [ 412.801572][ C1] kbtab 1-1:0.0: kbtab_irq - usb_submit_urb failed with result -1 [ 413.067874][ T5863] hid_parser_main: 214 callbacks suppressed [ 413.076458][ T5863] playstation 0003:054C:0DF2.000E: unknown main item tag 0x0 [ 413.076508][ T5863] playstation 0003:054C:0DF2.000E: unknown main item tag 0x0 [ 413.076546][ T5863] playstation 0003:054C:0DF2.000E: unknown main item tag 0x0 [ 413.076572][ T5863] playstation 0003:054C:0DF2.000E: unknown main item tag 0x0 [ 413.076598][ T5863] playstation 0003:054C:0DF2.000E: unknown main item tag 0x0 [ 413.122716][ C1] kbtab 1-1:0.0: kbtab_irq - usb_submit_urb failed with result -1 [ 413.172768][ T5863] playstation 0003:054C:0DF2.000E: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.4-1/input0 [ 413.256084][ T5863] playstation 0003:054C:0DF2.000E: Invalid reportID received, expected 9 got 101 [ 413.256117][ T5863] playstation 0003:054C:0DF2.000E: Failed to retrieve DualSense pairing info: -22 [ 413.256303][ T5863] playstation 0003:054C:0DF2.000E: Failed to get MAC address from DualSense [ 413.256321][ T5863] playstation 0003:054C:0DF2.000E: Failed to create dualsense. [ 413.316110][ T5863] playstation 0003:054C:0DF2.000E: probe with driver playstation failed with error -22 [ 413.318098][ T8702] capability: warning: `syz.1.842' uses deprecated v2 capabilities in a way that may be insecure [ 413.411618][ T8293] usb 1-1: USB disconnect, device number 42 [ 413.411784][ C0] kbtab 1-1:0.0: kbtab_irq - usb_submit_urb failed with result -19 [ 413.489076][ T5863] usb 5-1: USB disconnect, device number 33 [ 413.585705][ T8704] fido_id[8704]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 413.608190][ T5885] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 413.748101][ T8712] netlink: 12 bytes leftover after parsing attributes in process `syz.3.845'. [ 413.768267][ T5885] usb 2-1: Using ep0 maxpacket: 16 [ 413.774563][ T5885] usb 2-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 25 [ 413.774587][ T5885] usb 2-1: config 0 interface 0 has no altsetting 0 [ 413.774609][ T5885] usb 2-1: New USB device found, idVendor=146b, idProduct=0902, bcdDevice= 0.00 [ 413.774622][ T5885] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 413.787865][ T5885] usb 2-1: config 0 descriptor?? [ 414.208160][ T5885] hid (null): unknown global tag 0xc [ 414.239759][ T5885] bigben 0003:146B:0902.000F: unexpected rdesc, please submit for review [ 414.240548][ T5885] bigben 0003:146B:0902.000F: unknown main item tag 0x0 [ 414.240581][ T5885] bigben 0003:146B:0902.000F: unknown main item tag 0x0 [ 414.240610][ T5885] bigben 0003:146B:0902.000F: unknown main item tag 0x0 [ 414.240639][ T5885] bigben 0003:146B:0902.000F: unknown main item tag 0x0 [ 414.240667][ T5885] bigben 0003:146B:0902.000F: unknown main item tag 0x0 [ 414.240717][ T5885] bigben 0003:146B:0902.000F: unknown global tag 0xc [ 414.240734][ T5885] bigben 0003:146B:0902.000F: item 0 2 1 12 parsing failed [ 414.310317][ T5885] bigben 0003:146B:0902.000F: parse failed [ 414.310623][ T5885] bigben 0003:146B:0902.000F: probe with driver bigben failed with error -22 [ 414.418233][ T5885] usb 2-1: USB disconnect, device number 26 [ 416.788112][ T5932] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 417.439165][ T5932] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 417.439205][ T5932] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 417.439247][ T5932] usb 4-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 417.439272][ T5932] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 417.675792][ T5932] usb 4-1: config 0 descriptor?? [ 418.144020][ T5932] hid_parser_main: 2 callbacks suppressed [ 418.144049][ T5932] playstation 0003:054C:0DF2.0010: unknown main item tag 0x0 [ 418.144086][ T5932] playstation 0003:054C:0DF2.0010: unknown main item tag 0x0 [ 418.144114][ T5932] playstation 0003:054C:0DF2.0010: unknown main item tag 0x0 [ 418.144140][ T5932] playstation 0003:054C:0DF2.0010: unknown main item tag 0x0 [ 418.186699][ T5932] playstation 0003:054C:0DF2.0010: unknown main item tag 0x0 [ 418.199219][ T5932] playstation 0003:054C:0DF2.0010: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.3-1/input0 [ 418.326305][ T5932] playstation 0003:054C:0DF2.0010: Invalid reportID received, expected 9 got 101 [ 418.326339][ T5932] playstation 0003:054C:0DF2.0010: Failed to retrieve DualSense pairing info: -22 [ 418.326399][ T5932] playstation 0003:054C:0DF2.0010: Failed to get MAC address from DualSense [ 418.326415][ T5932] playstation 0003:054C:0DF2.0010: Failed to create dualsense. [ 418.331142][ T5932] playstation 0003:054C:0DF2.0010: probe with driver playstation failed with error -22 [ 419.884639][ T8747] netlink: 12 bytes leftover after parsing attributes in process `syz.1.857'. [ 419.922548][ T5932] usb 4-1: USB disconnect, device number 36 [ 420.201933][ T8754] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 420.532744][ T5863] usb 2-1: new full-speed USB device number 27 using dummy_hcd [ 421.032871][ T5863] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 421.032918][ T5863] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 421.032934][ T5863] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 421.032949][ T5863] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 421.032962][ T5863] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 421.043141][ T5863] usb 2-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 421.043171][ T5863] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 421.043252][ T5863] usb 2-1: Product: syz [ 421.043266][ T5863] usb 2-1: Manufacturer: syz [ 421.043279][ T5863] usb 2-1: SerialNumber: syz [ 421.054818][ T5863] usb 2-1: config 0 descriptor?? [ 421.283744][ T5863] radio-si470x 2-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 421.283763][ T5863] radio-si470x 2-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 421.486945][ T5863] radio-si470x 2-1:0.0: software version 0, hardware version 0 [ 421.486977][ T5863] radio-si470x 2-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0. [ 421.487000][ T5863] radio-si470x 2-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 421.691531][ T5863] radio-si470x 2-1:0.0: submitting int urb failed (-90) [ 421.858292][ T1250] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 422.958004][ T5863] radio-si470x 2-1:0.0: si470x_set_report: usb_control_msg returned -110 [ 422.958379][ T5863] radio-si470x 2-1:0.0: probe with driver radio-si470x failed with error -22 [ 423.008266][ T8780] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 423.008859][ T1250] usb 4-1: Using ep0 maxpacket: 16 [ 423.014960][ T1250] usb 4-1: config 0 has an invalid descriptor of length 93, skipping remainder of the config [ 423.015084][ T1250] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 423.015115][ T1250] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 423.015139][ T1250] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 423.015163][ T1250] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 423.048329][ T1250] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 423.048482][ T1250] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 423.048505][ T1250] usb 4-1: Manufacturer: syz [ 423.108779][ T1250] usb 4-1: config 0 descriptor?? [ 423.148094][ T5863] usb 2-1: USB disconnect, device number 27 [ 423.168073][ T31] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 423.328013][ T31] usb 3-1: Using ep0 maxpacket: 16 [ 423.468709][ T809] usb 5-1: new full-speed USB device number 34 using dummy_hcd [ 423.508057][ T1250] rc_core: IR keymap rc-hauppauge not found [ 423.508078][ T1250] Registered IR keymap rc-empty [ 423.508395][ T1250] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 423.530709][ T1250] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 423.552662][ T1250] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 423.562269][ T1250] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input26 [ 423.621618][ T809] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 423.621682][ T809] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 423.621710][ T809] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 423.621737][ T809] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 423.621762][ T809] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 423.625679][ T809] usb 5-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 423.625710][ T809] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 423.625732][ T809] usb 5-1: Product: syz [ 423.625747][ T809] usb 5-1: Manufacturer: syz [ 423.625763][ T809] usb 5-1: SerialNumber: syz [ 423.632717][ T1250] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 423.648392][ T1250] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 423.669254][ T1250] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 423.688358][ T1250] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 423.695308][ T809] usb 5-1: config 0 descriptor?? [ 423.708782][ T1250] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 423.729084][ T1250] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 423.754415][ T1250] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 423.768556][ T1250] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 423.788973][ T1250] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 423.808456][ T1250] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 423.853500][ T1250] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 423.853529][ T1250] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 423.925186][ T809] radio-si470x 5-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 423.925211][ T809] radio-si470x 5-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 423.949897][ T1250] usb 4-1: USB disconnect, device number 37 [ 424.074439][ T31] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 424.074492][ T31] usb 3-1: can't read configurations, error -61 [ 424.123685][ T809] radio-si470x 5-1:0.0: software version 0, hardware version 0 [ 424.123711][ T809] radio-si470x 5-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0. [ 424.123730][ T809] radio-si470x 5-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 424.325260][ T809] radio-si470x 5-1:0.0: submitting int urb failed (-90) [ 424.338053][ T31] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 424.372034][ T37] kauditd_printk_skb: 50 callbacks suppressed [ 424.372056][ T37] audit: type=1326 audit(1775894636.348:339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8787 comm="syz.1.872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4dea3fc819 code=0x7ffc0000 [ 424.372172][ T37] audit: type=1326 audit(1775894636.348:340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8787 comm="syz.1.872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4dea3fc819 code=0x7ffc0000 [ 424.373778][ T37] audit: type=1326 audit(1775894636.348:341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8787 comm="syz.1.872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4dea3fc819 code=0x7ffc0000 [ 424.376767][ T37] audit: type=1326 audit(1775894636.348:342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8787 comm="syz.1.872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4dea3fc819 code=0x7ffc0000 [ 424.377171][ T37] audit: type=1326 audit(1775894636.348:343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8787 comm="syz.1.872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4dea3fc819 code=0x7ffc0000 [ 424.377319][ T37] audit: type=1326 audit(1775894636.348:344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8787 comm="syz.1.872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4dea3fc819 code=0x7ffc0000 [ 424.393777][ T8792] overlayfs: missing 'lowerdir' [ 424.398171][ T37] audit: type=1326 audit(1775894636.348:345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8787 comm="syz.1.872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4dea3fc819 code=0x7ffc0000 [ 424.398226][ T37] audit: type=1326 audit(1775894636.358:346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8787 comm="syz.1.872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4dea3fc819 code=0x7ffc0000 [ 424.398320][ T37] audit: type=1326 audit(1775894636.358:347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8787 comm="syz.1.872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f4dea3fc819 code=0x7ffc0000 [ 424.398361][ T37] audit: type=1326 audit(1775894636.358:348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8787 comm="syz.1.872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4dea3fc819 code=0x7ffc0000 [ 424.594240][ T5863] IPVS: starting estimator thread 0... [ 424.607963][ T31] usb 3-1: Using ep0 maxpacket: 16 [ 424.623718][ T31] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 424.623761][ T31] usb 3-1: can't read configurations, error -61 [ 424.624208][ T31] usb usb3-port1: attempt power cycle [ 424.710346][ T8796] IPVS: using max 13 ests per chain, 31200 per kthread [ 424.968080][ T31] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 424.994292][ T31] usb 3-1: Using ep0 maxpacket: 16 [ 424.997527][ T31] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 424.997567][ T31] usb 3-1: can't read configurations, error -61 [ 425.148044][ T31] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 425.169160][ T31] usb 3-1: Using ep0 maxpacket: 16 [ 425.174888][ T31] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 425.174930][ T31] usb 3-1: can't read configurations, error -61 [ 425.176672][ T31] usb usb3-port1: unable to enumerate USB device [ 425.396339][ T8804] FAULT_INJECTION: forcing a failure. [ 425.396339][ T8804] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 425.396382][ T8804] CPU: 1 UID: 0 PID: 8804 Comm: syz.3.876 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 425.396412][ T8804] Tainted: [L]=SOFTLOCKUP [ 425.396419][ T8804] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 425.396432][ T8804] Call Trace: [ 425.396441][ T8804] [ 425.396450][ T8804] dump_stack_lvl+0xe8/0x150 [ 425.396494][ T8804] should_fail_ex+0x46b/0x600 [ 425.396530][ T8804] _copy_from_iter+0x1d3/0x1670 [ 425.396570][ T8804] ? trace_kmem_cache_alloc+0x29/0xf0 [ 425.396600][ T8804] ? __alloc_skb+0x27d/0x7d0 [ 425.396622][ T8804] ? __pfx__copy_from_iter+0x10/0x10 [ 425.396651][ T8804] ? kmem_cache_alloc_node_noprof+0x27c/0x6e0 [ 425.396682][ T8804] ? __alloc_skb+0x27d/0x7d0 [ 425.396710][ T8804] ? netlink_sendmsg+0x650/0xb40 [ 425.396741][ T8804] ? skb_put+0x11b/0x210 [ 425.396766][ T8804] netlink_sendmsg+0x6c0/0xb40 [ 425.396807][ T8804] ? __pfx_netlink_sendmsg+0x10/0x10 [ 425.396842][ T8804] ? unwind_get_return_address+0x4d/0x90 [ 425.396868][ T8804] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 425.396902][ T8804] ____sys_sendmsg+0x94c/0x9c0 [ 425.396933][ T8804] ? __pfx_____sys_sendmsg+0x10/0x10 [ 425.396968][ T8804] ? import_iovec+0x73/0xa0 [ 425.396991][ T8804] ___sys_sendmsg+0x2a5/0x360 [ 425.397021][ T8804] ? __pfx____sys_sendmsg+0x10/0x10 [ 425.397062][ T8804] ? __fget_files+0x2a/0x420 [ 425.397084][ T8804] ? __fget_files+0x3a6/0x420 [ 425.397135][ T8804] __x64_sys_sendmsg+0x1c3/0x2a0 [ 425.397165][ T8804] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 425.397199][ T8804] ? __pfx_ksys_write+0x10/0x10 [ 425.397238][ T8804] do_syscall_64+0x14d/0xf80 [ 425.397253][ T8804] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 425.397265][ T8804] ? clear_bhb_loop+0x40/0x90 [ 425.397288][ T8804] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 425.397310][ T8804] RIP: 0033:0x7f33ca78c819 [ 425.397331][ T8804] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 425.397349][ T8804] RSP: 002b:00007f33c89de028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 425.397372][ T8804] RAX: ffffffffffffffda RBX: 00007f33caa05fa0 RCX: 00007f33ca78c819 [ 425.397387][ T8804] RDX: 0000000000000004 RSI: 00002000000000c0 RDI: 0000000000000003 [ 425.397401][ T8804] RBP: 00007f33c89de090 R08: 0000000000000000 R09: 0000000000000000 [ 425.397411][ T8804] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 425.397419][ T8804] R13: 00007f33caa06038 R14: 00007f33caa05fa0 R15: 00007ffc04c1bc08 [ 425.397437][ T8804] [ 425.438430][ T809] radio-si470x 5-1:0.0: si470x_get_report: usb_control_msg returned -110 [ 425.438762][ T809] radio-si470x 5-1:0.0: probe with driver radio-si470x failed with error -22 [ 426.354015][ T809] usb 5-1: USB disconnect, device number 34 [ 429.259355][ T1250] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 429.427433][ T1250] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 6 [ 429.427520][ T1250] usb 3-1: config 0 interface 0 altsetting 32 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 429.427727][ T1250] usb 3-1: config 0 interface 0 altsetting 32 endpoint 0x81 has invalid wMaxPacketSize 0 [ 429.460069][ T1250] usb 3-1: config 0 interface 0 has no altsetting 0 [ 429.460130][ T1250] usb 3-1: New USB device found, idVendor=1ea7, idProduct=0907, bcdDevice= 0.00 [ 429.460236][ T1250] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 429.560401][ T1250] usb 3-1: config 0 descriptor?? [ 430.104770][ T1250] usbhid 3-1:0.0: can't add hid device: -71 [ 430.104915][ T1250] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 430.145038][ T1250] usb 3-1: USB disconnect, device number 51 [ 430.878067][ T809] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 430.937410][ T8848] netlink: 32 bytes leftover after parsing attributes in process `syz.2.888'. [ 430.968596][ T1250] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 431.028484][ T809] usb 5-1: Using ep0 maxpacket: 16 [ 431.032478][ T809] usb 5-1: config 0 has an invalid descriptor of length 93, skipping remainder of the config [ 431.032975][ T809] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 431.033987][ T809] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 431.034226][ T809] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 431.034278][ T809] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 431.114227][ T809] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 431.114259][ T809] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 431.114279][ T809] usb 5-1: Manufacturer: syz [ 431.146523][ T809] usb 5-1: config 0 descriptor?? [ 431.190474][ T1250] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 431.190540][ T1250] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 431.190566][ T1250] usb 4-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 431.190579][ T1250] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 431.239062][ T1250] usb 4-1: config 0 descriptor?? [ 431.498086][ T809] rc_core: IR keymap rc-hauppauge not found [ 431.498108][ T809] Registered IR keymap rc-empty [ 431.501401][ T809] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 431.528474][ T809] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 431.551710][ T809] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 431.577195][ T809] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input27 [ 431.609163][ T809] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 431.628626][ T809] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 431.678643][ T809] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 432.061120][ T809] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 432.063163][ T1250] usbhid 4-1:0.0: can't add hid device: -71 [ 432.063247][ T1250] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 432.079226][ T809] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 432.098135][ T809] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 432.115138][ T1250] usb 4-1: USB disconnect, device number 38 [ 432.170279][ T809] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 432.188850][ T809] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 432.208087][ T809] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 432.228187][ T809] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 432.266181][ T809] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 432.266209][ T809] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 432.296324][ T809] usb 5-1: USB disconnect, device number 35 [ 432.379198][ T8866] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 432.824398][ T8871] FAULT_INJECTION: forcing a failure. [ 432.824398][ T8871] name failslab, interval 1, probability 0, space 0, times 0 [ 432.824476][ T8871] CPU: 1 UID: 0 PID: 8871 Comm: syz.0.895 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 432.824509][ T8871] Tainted: [L]=SOFTLOCKUP [ 432.824517][ T8871] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 432.824530][ T8871] Call Trace: [ 432.824541][ T8871] [ 432.824552][ T8871] dump_stack_lvl+0xe8/0x150 [ 432.824593][ T8871] should_fail_ex+0x46b/0x600 [ 432.824631][ T8871] should_failslab+0xa8/0x100 [ 432.824658][ T8871] __kvmalloc_node_noprof+0x170/0x8e0 [ 432.824684][ T8871] ? __nf_hook_entries_try_shrink+0x328/0x700 [ 432.824718][ T8871] __nf_hook_entries_try_shrink+0x328/0x700 [ 432.824757][ T8871] __nf_unregister_net_hook+0x4cc/0x6f0 [ 432.824792][ T8871] nf_unregister_net_hooks+0xcb/0x140 [ 432.824820][ T8871] nf_defrag_ipv4_disable+0x95/0xe0 [ 432.824847][ T8871] nf_ct_netns_put+0x3c1/0x520 [ 432.824869][ T8871] ? __pfx_nft_nat_destroy+0x10/0x10 [ 432.824902][ T8871] __nft_release_table+0x56c/0x11f0 [ 432.824943][ T8871] ? __pfx___nft_release_table+0x10/0x10 [ 432.824989][ T8871] nft_rcv_nl_event+0xc25/0xdb0 [ 432.825034][ T8871] ? __pfx_nft_rcv_nl_event+0x10/0x10 [ 432.825073][ T8871] ? nfulnl_rcv_nl_event+0x403/0x440 [ 432.825106][ T8871] notifier_call_chain+0x1be/0x400 [ 432.825141][ T8871] blocking_notifier_call_chain+0x6a/0x90 [ 432.825168][ T8871] netlink_release+0x1259/0x1af0 [ 432.825211][ T8871] ? netlink_release+0x101/0x1af0 [ 432.825249][ T8871] ? __pfx_netlink_release+0x10/0x10 [ 432.825282][ T8871] ? rwbase_write_lock+0x568/0x730 [ 432.825327][ T8871] sock_close+0xc3/0x240 [ 432.825367][ T8871] ? __pfx_sock_close+0x10/0x10 [ 432.825397][ T8871] __fput+0x461/0xa90 [ 432.825441][ T8871] fput_close_sync+0x11f/0x240 [ 432.825470][ T8871] ? __pfx_fput_close_sync+0x10/0x10 [ 432.825515][ T8871] __x64_sys_close+0x7e/0x110 [ 432.825546][ T8871] do_syscall_64+0x14d/0xf80 [ 432.825571][ T8871] ? trace_irq_disable+0x3b/0x150 [ 432.825597][ T8871] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 432.825620][ T8871] ? clear_bhb_loop+0x40/0x90 [ 432.825648][ T8871] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 432.825670][ T8871] RIP: 0033:0x7f322d2cc819 [ 432.825691][ T8871] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 432.825710][ T8871] RSP: 002b:00007f322b51e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 432.825735][ T8871] RAX: ffffffffffffffda RBX: 00007f322d545fa0 RCX: 00007f322d2cc819 [ 432.825751][ T8871] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 432.825764][ T8871] RBP: 00007f322b51e090 R08: 0000000000000000 R09: 0000000000000000 [ 432.825777][ T8871] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 432.825791][ T8871] R13: 00007f322d546038 R14: 00007f322d545fa0 R15: 00007ffff73fa878 [ 432.825830][ T8871] [ 436.373075][ T8905] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 437.473169][ T5863] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 437.556274][ T8917] netlink: 32 bytes leftover after parsing attributes in process `syz.1.911'. [ 437.920506][ T809] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 438.244185][ T5863] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 438.244223][ T5863] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 438.244275][ T5863] usb 1-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 438.244301][ T5863] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 438.248721][ T809] usb 5-1: Using ep0 maxpacket: 16 [ 438.251730][ T809] usb 5-1: config 0 has an invalid descriptor of length 93, skipping remainder of the config [ 438.251788][ T809] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 438.251817][ T809] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 438.251840][ T809] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 438.251865][ T809] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 438.296494][ T809] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 438.296528][ T809] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 438.296551][ T809] usb 5-1: Manufacturer: syz [ 438.405580][ T5863] usb 1-1: config 0 descriptor?? [ 438.419205][ T809] usb 5-1: config 0 descriptor?? [ 438.868481][ T5863] playstation 0003:054C:0DF2.0011: unknown main item tag 0x0 [ 438.868508][ T5863] playstation 0003:054C:0DF2.0011: unknown main item tag 0x0 [ 438.868525][ T5863] playstation 0003:054C:0DF2.0011: unknown main item tag 0x0 [ 438.868541][ T5863] playstation 0003:054C:0DF2.0011: unknown main item tag 0x0 [ 438.868557][ T5863] playstation 0003:054C:0DF2.0011: unknown main item tag 0x0 [ 438.932425][ T5863] playstation 0003:054C:0DF2.0011: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.0-1/input0 [ 438.950753][ T809] rc_core: IR keymap rc-hauppauge not found [ 438.950775][ T809] Registered IR keymap rc-empty [ 438.950953][ T809] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 438.965876][ T8927] FAULT_INJECTION: forcing a failure. [ 438.965876][ T8927] name failslab, interval 1, probability 0, space 0, times 0 [ 438.965912][ T8927] CPU: 1 UID: 0 PID: 8927 Comm: syz.1.913 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 438.965938][ T8927] Tainted: [L]=SOFTLOCKUP [ 438.965945][ T8927] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 438.965956][ T8927] Call Trace: [ 438.965964][ T8927] [ 438.965971][ T8927] dump_stack_lvl+0xe8/0x150 [ 438.966013][ T8927] should_fail_ex+0x46b/0x600 [ 438.966046][ T8927] should_failslab+0xa8/0x100 [ 438.966068][ T8927] kmem_cache_alloc_noprof+0x87/0x680 [ 438.966097][ T8927] ? skb_clone+0x212/0x3a0 [ 438.966125][ T8927] skb_clone+0x212/0x3a0 [ 438.966151][ T8927] __netlink_deliver_tap+0x404/0x850 [ 438.966192][ T8927] ? netlink_deliver_tap+0x2e/0x1b0 [ 438.966221][ T8927] netlink_deliver_tap+0x19c/0x1b0 [ 438.966250][ T8927] netlink_unicast+0x805/0x9f0 [ 438.966285][ T8927] ? __pfx_netlink_unicast+0x10/0x10 [ 438.966313][ T8927] ? netlink_sendmsg+0x650/0xb40 [ 438.966339][ T8927] ? skb_put+0x11b/0x210 [ 438.966362][ T8927] netlink_sendmsg+0x813/0xb40 [ 438.966400][ T8927] ? __pfx_netlink_sendmsg+0x10/0x10 [ 438.966431][ T8927] ? unwind_get_return_address+0x4d/0x90 [ 438.966455][ T8927] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 438.966486][ T8927] ____sys_sendmsg+0x94c/0x9c0 [ 438.966515][ T8927] ? __pfx_____sys_sendmsg+0x10/0x10 [ 438.966547][ T8927] ? import_iovec+0x73/0xa0 [ 438.966570][ T8927] ___sys_sendmsg+0x2a5/0x360 [ 438.966598][ T8927] ? __pfx____sys_sendmsg+0x10/0x10 [ 438.966658][ T8927] ? __fget_files+0x2a/0x420 [ 438.966681][ T8927] ? __fget_files+0x3a6/0x420 [ 438.966716][ T8927] __x64_sys_sendmsg+0x1c3/0x2a0 [ 438.966741][ T8927] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 438.966774][ T8927] ? __pfx_ksys_write+0x10/0x10 [ 438.966814][ T8927] do_syscall_64+0x14d/0xf80 [ 438.966835][ T8927] ? trace_irq_disable+0x3b/0x150 [ 438.966858][ T8927] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 438.966878][ T8927] ? clear_bhb_loop+0x40/0x90 [ 438.966910][ T8927] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 438.966929][ T8927] RIP: 0033:0x7f4dea3fc819 [ 438.966948][ T8927] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 438.966965][ T8927] RSP: 002b:00007f4de864e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 438.967004][ T8927] RAX: ffffffffffffffda RBX: 00007f4dea675fa0 RCX: 00007f4dea3fc819 [ 438.967018][ T8927] RDX: 0000000000008018 RSI: 00002000000000c0 RDI: 0000000000000006 [ 438.967030][ T8927] RBP: 00007f4de864e090 R08: 0000000000000000 R09: 0000000000000000 [ 438.967042][ T8927] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 438.967053][ T8927] R13: 00007f4dea676038 R14: 00007f4dea675fa0 R15: 00007ffd2543f988 [ 438.967090][ T8927] [ 439.018192][ T809] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 439.060092][ T809] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 439.112705][ T5863] playstation 0003:054C:0DF2.0011: Invalid reportID received, expected 9 got 101 [ 439.112737][ T5863] playstation 0003:054C:0DF2.0011: Failed to retrieve DualSense pairing info: -22 [ 439.120236][ T5863] playstation 0003:054C:0DF2.0011: Failed to get MAC address from DualSense [ 439.120260][ T5863] playstation 0003:054C:0DF2.0011: Failed to create dualsense. [ 439.383864][ T809] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input29 [ 439.389068][ T5863] playstation 0003:054C:0DF2.0011: probe with driver playstation failed with error -22 [ 439.418818][ T809] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 439.438352][ T809] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 439.458266][ T809] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 439.478146][ T809] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 439.497382][ T8932] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 439.498188][ T809] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 439.518112][ T809] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 439.539807][ T809] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 439.540164][ T8936] Driver unsupported XDP return value 0 on prog (id 94) dev N/A, expect packet loss! [ 439.558124][ T809] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 439.578149][ T809] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 439.598124][ T809] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 439.623973][ T809] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 439.624001][ T809] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 439.679825][ T809] usb 5-1: USB disconnect, device number 36 [ 439.755870][ T8937] can: request_module (can-proto-0) failed. [ 440.073454][ T8943] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 440.903277][ T1325] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.903456][ T1325] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.008720][ T8293] usb 1-1: USB disconnect, device number 43 [ 441.225240][ T8956] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 441.463793][ T8960] can: request_module (can-proto-0) failed. [ 441.568192][ T809] usb 3-1: new full-speed USB device number 52 using dummy_hcd [ 441.698461][ T8952] syz.1.920 (8952) used greatest stack depth: 18288 bytes left [ 441.727002][ T809] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 441.727065][ T809] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 441.727092][ T809] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 441.727112][ T809] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 441.727125][ T809] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 441.768121][ T5863] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 441.793537][ T809] usb 3-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 441.793570][ T809] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 441.793591][ T809] usb 3-1: Product: syz [ 441.793606][ T809] usb 3-1: Manufacturer: syz [ 441.793615][ T809] usb 3-1: SerialNumber: syz [ 441.797865][ T809] usb 3-1: config 0 descriptor?? [ 441.808054][ T9] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 441.933390][ T5863] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 441.933480][ T5863] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 441.933521][ T5863] usb 4-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 441.933543][ T5863] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 442.071391][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 442.071491][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 442.071536][ T9] usb 1-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 442.071562][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 442.217551][ T9] usb 1-1: config 0 descriptor?? [ 442.221433][ T5863] usb 4-1: config 0 descriptor?? [ 442.232522][ T809] radio-si470x 3-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 442.232549][ T809] radio-si470x 3-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 442.834829][ T809] radio-si470x 3-1:0.0: software version 0, hardware version 0 [ 442.834928][ T809] radio-si470x 3-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0. [ 442.834950][ T809] radio-si470x 3-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 442.891401][ T9] playstation 0003:054C:0DF2.0012: unknown main item tag 0x0 [ 442.891511][ T9] playstation 0003:054C:0DF2.0012: unknown main item tag 0x0 [ 442.891540][ T9] playstation 0003:054C:0DF2.0012: unknown main item tag 0x0 [ 442.891568][ T9] playstation 0003:054C:0DF2.0012: unknown main item tag 0x0 [ 442.891595][ T9] playstation 0003:054C:0DF2.0012: unknown main item tag 0x0 [ 442.957563][ T9] playstation 0003:054C:0DF2.0012: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.0-1/input0 [ 443.039437][ T809] radio-si470x 3-1:0.0: submitting int urb failed (-90) [ 443.041786][ T9] playstation 0003:054C:0DF2.0012: Failed to retrieve feature with reportID 9: -32 [ 443.041815][ T9] playstation 0003:054C:0DF2.0012: Failed to retrieve DualSense pairing info: -32 [ 443.041870][ T9] playstation 0003:054C:0DF2.0012: Failed to get MAC address from DualSense [ 443.042122][ T9] playstation 0003:054C:0DF2.0012: Failed to create dualsense. [ 443.128863][ T9] playstation 0003:054C:0DF2.0012: probe with driver playstation failed with error -32 [ 443.198552][ T9] usb 1-1: USB disconnect, device number 44 [ 443.220754][ T5863] playstation 0003:054C:0DF2.0013: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.3-1/input0 [ 443.279721][ T5863] playstation 0003:054C:0DF2.0013: Failed to retrieve feature with reportID 9: -32 [ 443.279906][ T5863] playstation 0003:054C:0DF2.0013: Failed to retrieve DualSense pairing info: -32 [ 443.280031][ T5863] playstation 0003:054C:0DF2.0013: Failed to get MAC address from DualSense [ 443.280048][ T5863] playstation 0003:054C:0DF2.0013: Failed to create dualsense. [ 443.370609][ T5863] playstation 0003:054C:0DF2.0013: probe with driver playstation failed with error -32 [ 443.419678][ T5863] usb 4-1: USB disconnect, device number 39 [ 443.545524][ T8985] fido_id[8985]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 443.638153][ T8293] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 443.797660][ T5870] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 443.984443][ T8293] usb 5-1: Using ep0 maxpacket: 16 [ 444.236369][ T809] radio-si470x 3-1:0.0: si470x_get_report: usb_control_msg returned -110 [ 444.236760][ T809] radio-si470x 3-1:0.0: probe with driver radio-si470x failed with error -22 [ 444.260428][ T8293] usb 5-1: config 0 has an invalid descriptor of length 93, skipping remainder of the config [ 444.260490][ T8293] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 444.260521][ T8293] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 444.260545][ T8293] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 444.260570][ T8293] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 444.267368][ T8293] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 444.267397][ T8293] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 444.267418][ T8293] usb 5-1: Manufacturer: syz [ 444.288193][ T5870] usb 2-1: device descriptor read/64, error -71 [ 444.366819][ T8293] usb 5-1: config 0 descriptor?? [ 444.528176][ T5870] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 444.658115][ T5870] usb 2-1: device descriptor read/64, error -71 [ 444.674474][ T8293] rc_core: IR keymap rc-hauppauge not found [ 444.674496][ T8293] Registered IR keymap rc-empty [ 444.674671][ T8293] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 444.696570][ T8293] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 444.711743][ T8293] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 444.715521][ T8293] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input30 [ 444.758371][ T8293] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 444.768890][ T5870] usb usb2-port1: attempt power cycle [ 444.788857][ T8293] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 444.808136][ T8293] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 444.828241][ T8293] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 444.848138][ T8293] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 444.878298][ T8293] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 444.898102][ T8293] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 444.928141][ T8293] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 444.948265][ T8293] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 445.163949][ T5870] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 445.330558][ T8293] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 445.520177][ T5870] usb 2-1: device descriptor read/8, error -71 [ 445.561025][ T8293] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 445.561054][ T8293] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 445.612703][ T8293] usb 5-1: USB disconnect, device number 37 [ 445.759356][ T5870] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 445.782252][ T5870] usb 2-1: device descriptor read/8, error -71 [ 445.842835][ T809] usb 3-1: USB disconnect, device number 52 [ 445.890604][ T5870] usb usb2-port1: unable to enumerate USB device [ 450.087546][ T9047] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 451.252473][ T9056] lo speed is unknown, defaulting to 1000 [ 451.252538][ T9056] lo speed is unknown, defaulting to 1000 [ 451.253813][ T9056] lo speed is unknown, defaulting to 1000 [ 451.257490][ T9056] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 451.265002][ T9056] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 451.306782][ T9056] lo speed is unknown, defaulting to 1000 [ 451.308543][ T9056] lo speed is unknown, defaulting to 1000 [ 451.310139][ T9056] lo speed is unknown, defaulting to 1000 [ 451.311741][ T9056] lo speed is unknown, defaulting to 1000 [ 451.313290][ T9056] lo speed is unknown, defaulting to 1000 [ 451.726638][ T9056] smc: removing ib device syz0 [ 452.617658][ T9056] ------------[ cut here ]------------ [ 452.617670][ T9056] !xa_empty(&pool->xa) [ 452.617676][ T9056] WARNING: drivers/infiniband/sw/rxe/rxe_pool.c:116 at rxe_pool_cleanup+0x4b/0x60, CPU#0: syz.0.952/9056 [ 452.617708][ T9056] Modules linked in: [ 452.617722][ T9056] CPU: 0 UID: 0 PID: 9056 Comm: syz.0.952 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 452.617740][ T9056] Tainted: [L]=SOFTLOCKUP [ 452.617745][ T9056] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 452.617752][ T9056] RIP: 0010:rxe_pool_cleanup+0x4b/0x60 [ 452.617770][ T9056] Code: 00 fc ff df 80 3c 08 00 74 08 48 89 df e8 ed b8 ed f9 48 83 3b 00 75 0c e8 b2 94 87 f9 5b c3 cc cc cc cc cc e8 a6 94 87 f9 90 <0f> 0b 90 5b e9 4c 25 eb 02 cc 66 66 2e 0f 1f 84 00 00 00 00 00 90 [ 452.617781][ T9056] RSP: 0018:ffffc90004eff060 EFLAGS: 00010246 [ 452.617792][ T9056] RAX: ffffffff883ced4a RBX: ffff888066e8d698 RCX: 0000000000080000 [ 452.617802][ T9056] RDX: ffffc9000f693000 RSI: 000000000007ffff RDI: 0000000000080000 [ 452.617810][ T9056] RBP: ffff888066e8d308 R08: 0000000000000000 R09: 0000000000000000 [ 452.617818][ T9056] R10: dffffc0000000000 R11: ffffffff883b2e50 R12: ffff888066e8c000 [ 452.617828][ T9056] R13: dffffc0000000000 R14: ffffffff883b2e50 R15: dffffc0000000000 [ 452.617838][ T9056] FS: 00007f322b51e6c0(0000) GS:ffff888126332000(0000) knlGS:0000000000000000 [ 452.617849][ T9056] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 452.617857][ T9056] CR2: 00007f322b4fcff8 CR3: 0000000022396000 CR4: 00000000003526f0 [ 452.617872][ T9056] Call Trace: [ 452.617961][ T9056] [ 452.617974][ T9056] rxe_dealloc+0x25/0xc0 [ 452.617992][ T9056] ib_dealloc_device+0x54/0x200 [ 452.618013][ T9056] __ib_unregister_device+0x393/0x3f0 [ 452.618033][ T9056] ? __pfx_ib_device_get_by_index+0x10/0x10 [ 452.618056][ T9056] ib_unregister_device_and_put+0xb8/0xf0 [ 452.618077][ T9056] nldev_dellink+0x288/0x320 [ 452.618096][ T9056] ? __pfx_nldev_dellink+0x10/0x10 [ 452.618169][ T9056] ? rcu_is_watching+0x15/0xb0 [ 452.618187][ T9056] ? cap_capable+0x123/0x490 [ 452.618206][ T9056] ? safesetid_security_capable+0xa9/0x1a0 [ 452.618224][ T9056] ? bpf_lsm_capable+0x9/0x20 [ 452.618239][ T9056] ? security_capable+0x7e/0x2c0 [ 452.618256][ T9056] ? __pfx_nldev_dellink+0x10/0x10 [ 452.618274][ T9056] rdma_nl_rcv+0x6d7/0xa10 [ 452.618299][ T9056] ? __pfx_rdma_nl_rcv+0x10/0x10 [ 452.618317][ T9056] ? __netlink_lookup+0x7e4/0x8b0 [ 452.618340][ T9056] ? netlink_deliver_tap+0x2e/0x1b0 [ 452.618363][ T9056] netlink_unicast+0x831/0x9f0 [ 452.618386][ T9056] ? __pfx_netlink_unicast+0x10/0x10 [ 452.618404][ T9056] ? netlink_sendmsg+0x650/0xb40 [ 452.618422][ T9056] ? skb_put+0x11b/0x210 [ 452.618437][ T9056] netlink_sendmsg+0x813/0xb40 [ 452.618462][ T9056] ? __pfx_netlink_sendmsg+0x10/0x10 [ 452.618486][ T9056] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 452.618507][ T9056] ____sys_sendmsg+0x94c/0x9c0 [ 452.618525][ T9056] ? __pfx_____sys_sendmsg+0x10/0x10 [ 452.618545][ T9056] ? import_iovec+0x73/0xa0 [ 452.618560][ T9056] ___sys_sendmsg+0x2a5/0x360 [ 452.618578][ T9056] ? __pfx____sys_sendmsg+0x10/0x10 [ 452.618596][ T9056] ? futex_wait+0x29a/0x380 [ 452.618626][ T9056] ? __fget_files+0x2a/0x420 [ 452.618642][ T9056] ? __fget_files+0x3a6/0x420 [ 452.618664][ T9056] __x64_sys_sendmsg+0x1c3/0x2a0 [ 452.618680][ T9056] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 452.618700][ T9056] ? rcu_is_watching+0x15/0xb0 [ 452.618721][ T9056] do_syscall_64+0x14d/0xf80 [ 452.618735][ T9056] ? trace_irq_disable+0x3b/0x150 [ 452.618751][ T9056] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 452.618763][ T9056] ? clear_bhb_loop+0x40/0x90 [ 452.618779][ T9056] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 452.618792][ T9056] RIP: 0033:0x7f322d2cc819 [ 452.618805][ T9056] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 452.618816][ T9056] RSP: 002b:00007f322b51e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 452.618829][ T9056] RAX: ffffffffffffffda RBX: 00007f322d545fa0 RCX: 00007f322d2cc819 [ 452.618839][ T9056] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000009 [ 452.618847][ T9056] RBP: 00007f322d362c91 R08: 0000000000000000 R09: 0000000000000000 [ 452.618854][ T9056] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 452.618862][ T9056] R13: 00007f322d546038 R14: 00007f322d545fa0 R15: 00007ffff73fa878 [ 452.618881][ T9056] [ 452.618887][ T9056] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 452.618898][ T9056] CPU: 0 UID: 0 PID: 9056 Comm: syz.0.952 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 452.618923][ T9056] Tainted: [L]=SOFTLOCKUP [ 452.618927][ T9056] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 452.618935][ T9056] Call Trace: [ 452.618940][ T9056] [ 452.618945][ T9056] vpanic+0x56c/0xa60 [ 452.618965][ T9056] ? __pfx__printk+0x10/0x10 [ 452.618979][ T9056] ? __pfx_vpanic+0x10/0x10 [ 452.618996][ T9056] ? is_bpf_text_address+0x292/0x2b0 [ 452.619014][ T9056] ? is_bpf_text_address+0x26/0x2b0 [ 452.619036][ T9056] panic+0xc5/0xd0 [ 452.619054][ T9056] ? __pfx_panic+0x10/0x10 [ 452.619081][ T9056] __warn+0x315/0x4f0 [ 452.619099][ T9056] ? rxe_pool_cleanup+0x4b/0x60 [ 452.619116][ T9056] ? rxe_pool_cleanup+0x4b/0x60 [ 452.619131][ T9056] __report_bug+0x29a/0x540 [ 452.619146][ T9056] ? lockdep_hardirqs_on+0x7a/0x110 [ 452.619165][ T9056] ? rxe_pool_cleanup+0x4b/0x60 [ 452.619181][ T9056] ? __pfx___report_bug+0x10/0x10 [ 452.619200][ T9056] ? __flush_workqueue+0x12d3/0x14f0 [ 452.619224][ T9056] ? rxe_pool_cleanup+0x4b/0x60 [ 452.619239][ T9056] report_bug+0x16a/0x220 [ 452.619253][ T9056] ? rxe_pool_cleanup+0x4b/0x60 [ 452.619267][ T9056] ? rxe_pool_cleanup+0x4d/0x60 [ 452.619281][ T9056] handle_bug+0x9c/0x200 [ 452.619298][ T9056] exc_invalid_op+0x1a/0x50 [ 452.619314][ T9056] asm_exc_invalid_op+0x1a/0x20 [ 452.619326][ T9056] RIP: 0010:rxe_pool_cleanup+0x4b/0x60 [ 452.619342][ T9056] Code: 00 fc ff df 80 3c 08 00 74 08 48 89 df e8 ed b8 ed f9 48 83 3b 00 75 0c e8 b2 94 87 f9 5b c3 cc cc cc cc cc e8 a6 94 87 f9 90 <0f> 0b 90 5b e9 4c 25 eb 02 cc 66 66 2e 0f 1f 84 00 00 00 00 00 90 [ 452.619353][ T9056] RSP: 0018:ffffc90004eff060 EFLAGS: 00010246 [ 452.619363][ T9056] RAX: ffffffff883ced4a RBX: ffff888066e8d698 RCX: 0000000000080000 [ 452.619372][ T9056] RDX: ffffc9000f693000 RSI: 000000000007ffff RDI: 0000000000080000 [ 452.619380][ T9056] RBP: ffff888066e8d308 R08: 0000000000000000 R09: 0000000000000000 [ 452.619388][ T9056] R10: dffffc0000000000 R11: ffffffff883b2e50 R12: ffff888066e8c000 [ 452.619397][ T9056] R13: dffffc0000000000 R14: ffffffff883b2e50 R15: dffffc0000000000 [ 452.619408][ T9056] ? __pfx_rxe_dealloc+0x10/0x10 [ 452.619423][ T9056] ? __pfx_rxe_dealloc+0x10/0x10 [ 452.619436][ T9056] ? rxe_pool_cleanup+0x4a/0x60 [ 452.619456][ T9056] rxe_dealloc+0x25/0xc0 [ 452.619469][ T9056] ib_dealloc_device+0x54/0x200 [ 452.619489][ T9056] __ib_unregister_device+0x393/0x3f0 [ 452.619510][ T9056] ? __pfx_ib_device_get_by_index+0x10/0x10 [ 452.619532][ T9056] ib_unregister_device_and_put+0xb8/0xf0 [ 452.619553][ T9056] nldev_dellink+0x288/0x320 [ 452.619572][ T9056] ? __pfx_nldev_dellink+0x10/0x10 [ 452.619631][ T9056] ? rcu_is_watching+0x15/0xb0 [ 452.619645][ T9056] ? cap_capable+0x123/0x490 [ 452.619658][ T9056] ? safesetid_security_capable+0xa9/0x1a0 [ 452.619673][ T9056] ? bpf_lsm_capable+0x9/0x20 [ 452.619687][ T9056] ? security_capable+0x7e/0x2c0 [ 452.619704][ T9056] ? __pfx_nldev_dellink+0x10/0x10 [ 452.619722][ T9056] rdma_nl_rcv+0x6d7/0xa10 [ 452.619746][ T9056] ? __pfx_rdma_nl_rcv+0x10/0x10 [ 452.619764][ T9056] ? __netlink_lookup+0x7e4/0x8b0 [ 452.619785][ T9056] ? netlink_deliver_tap+0x2e/0x1b0 [ 452.619809][ T9056] netlink_unicast+0x831/0x9f0 [ 452.619830][ T9056] ? __pfx_netlink_unicast+0x10/0x10 [ 452.619848][ T9056] ? netlink_sendmsg+0x650/0xb40 [ 452.619866][ T9056] ? skb_put+0x11b/0x210 [ 452.619881][ T9056] netlink_sendmsg+0x813/0xb40 [ 452.619904][ T9056] ? __pfx_netlink_sendmsg+0x10/0x10 [ 452.619965][ T9056] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 452.619985][ T9056] ____sys_sendmsg+0x94c/0x9c0 [ 452.620003][ T9056] ? __pfx_____sys_sendmsg+0x10/0x10 [ 452.620023][ T9056] ? import_iovec+0x73/0xa0 [ 452.620037][ T9056] ___sys_sendmsg+0x2a5/0x360 [ 452.620055][ T9056] ? __pfx____sys_sendmsg+0x10/0x10 [ 452.620074][ T9056] ? futex_wait+0x29a/0x380 [ 452.620103][ T9056] ? __fget_files+0x2a/0x420 [ 452.620118][ T9056] ? __fget_files+0x3a6/0x420 [ 452.620147][ T9056] __x64_sys_sendmsg+0x1c3/0x2a0 [ 452.620166][ T9056] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 452.620186][ T9056] ? rcu_is_watching+0x15/0xb0 [ 452.620206][ T9056] do_syscall_64+0x14d/0xf80 [ 452.620220][ T9056] ? trace_irq_disable+0x3b/0x150 [ 452.620235][ T9056] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 452.620247][ T9056] ? clear_bhb_loop+0x40/0x90 [ 452.620263][ T9056] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 452.620275][ T9056] RIP: 0033:0x7f322d2cc819 [ 452.620286][ T9056] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 452.620295][ T9056] RSP: 002b:00007f322b51e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 452.620307][ T9056] RAX: ffffffffffffffda RBX: 00007f322d545fa0 RCX: 00007f322d2cc819 [ 452.620316][ T9056] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000009 [ 452.620325][ T9056] RBP: 00007f322d362c91 R08: 0000000000000000 R09: 0000000000000000 [ 452.620333][ T9056] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 452.620340][ T9056] R13: 00007f322d546038 R14: 00007f322d545fa0 R15: 00007ffff73fa878 [ 452.620358][ T9056] [ 452.620529][ T9056] Kernel Offset: disabled